0xfe42, 0x5d) r4 = memfd_create(&(0x7f0000000240)=':+lo#\x00', 0x0) fdatasync(r4) io_submit(r0, 0x1, &(0x7f0000001280)=[&(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f0000000100)}]) timerfd_create(0x7, 0x80800) io_destroy(r0) setsockopt$llc_int(r1, 0x10c, 0x9, &(0x7f0000000380)=0x3, 0x4) 2018/03/29 11:11:44 executing program 7: io_setup(0x3, &(0x7f0000000000)=0x0) accept$unix(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000100)=0x6e) syz_open_dev$usbmon(&(0x7f0000000200)='/dev/usbmon#\x00', 0x7ff, 0x0) io_cancel(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0xf, 0x3, 0xffffffffffffffff, &(0x7f0000000140)="940c1f2149747e7734510c34c143183667a187dc4f624f6c2de12452792a6fb529e6bf2a661dc23a844b00925c244a9f2967c0ca9868ee50eacf67a2ad7681d82f5a38cbd6d7641f843fa129e00f701fb01835f497b53672b3e5a3f6838f28aa240bf21eb5e5cbe7804fd307404474ae0242f8dea7a08e0fe9479b06f2795f857f8eec271d35ba7f61a91c87296814189cc1dfc9c659cc5437452a0bd178323c50e8c005ba7fa9519b27965c9f6ffbc7dcaa8e658616cc83188fb131a703222d", 0xc0, 0x5, 0x0, 0x1}, &(0x7f0000000280)) io_getevents(r0, 0x2, 0x8f, &(0x7f0000d83f60)=[{}, {}], &(0x7f00005cfff0)={0x4000000000001, 0x7}) io_getevents(r0, 0x0, 0x5, &(0x7f00000002c0)=[{}, {}, {}, {}, {}], &(0x7f00000003c0)) io_setup(0xa, &(0x7f0000000480)) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/route\x00') ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000440)=0x0) perf_event_open(&(0x7f0000aaa000)={0x0, 0x70, 0x4a, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ef4}, r2, 0x0, 0xffffffffffffffff, 0x1) pread64(r1, &(0x7f0000000000)=""/85, 0xfe42, 0x5d) r3 = memfd_create(&(0x7f0000000240)=':+lo#\x00', 0x0) fdatasync(r3) io_submit(r0, 0x1, &(0x7f0000001280)=[&(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000000100)}]) timerfd_create(0x7, 0x80800) io_destroy(r0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x9, &(0x7f0000000380)=0x3, 0x4) 2018/03/29 11:11:44 executing program 4 (fault-call:19 fault-nth:1): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) readv(r0, &(0x7f0000001480)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x3}) r1 = syz_open_pts(r0, 0x2) r2 = dup3(r1, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000c34fff), 0xffffff0b) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0) preadv(r3, &(0x7f00000004c0)=[{&(0x7f0000000480)=""/21, 0x15}], 0x1, 0x0) fchdir(0xffffffffffffffff) mkdir(&(0x7f0000000280)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f", 0xfffffffffffffffc) fchmod(r2, 0x0) splice(r3, &(0x7f0000000400), 0xffffffffffffffff, &(0x7f0000000440), 0x9, 0x2) rename(&(0x7f0000001e00)='./file0\x00', &(0x7f0000000100)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f") mkdir(&(0x7f000000e000)='./control\x00', 0x0) r4 = open(&(0x7f0000000000)='./control\x00', 0x0, 0x0) renameat2(r4, &(0x7f0000000040)='./file0\x00', r4, &(0x7f0000000080)='./control\x00', 0x2) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000300)={0x0, 0x80}, &(0x7f0000000340)=0x8) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000380)={r5, 0x5}, &(0x7f00000003c0)=0x8) mknodat(r4, &(0x7f000003f000)='./control\x00', 0x0, 0x0) symlink(&(0x7f0000000180)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f", &(0x7f00000000c0)='./file0\x00') perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(r4, &(0x7f0000010000)='./control\x00', &(0x7f000003f000), &(0x7f0000001fe8), 0x0) 2018/03/29 11:11:44 executing program 2: io_setup(0x3, &(0x7f0000000000)=0x0) accept$unix(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000100)=0x6e) syz_open_dev$usbmon(&(0x7f0000000200)='/dev/usbmon#\x00', 0x7ff, 0x0) io_cancel(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0xf, 0x3, 0xffffffffffffffff, &(0x7f0000000140)="940c1f2149747e7734510c34c143183667a187dc4f624f6c2de12452792a6fb529e6bf2a661dc23a844b00925c244a9f2967c0ca9868ee50eacf67a2ad7681d82f5a38cbd6d7641f843fa129e00f701fb01835f497b53672b3e5a3f6838f28aa240bf21eb5e5cbe7804fd307404474ae0242f8dea7a08e0fe9479b06f2795f857f8eec271d35ba7f61a91c87296814189cc1dfc9c659cc5437452a0bd178323c50e8c005ba7fa9519b27965c9f6ffbc7dcaa8e658616cc83188fb131a703222d", 0xc0, 0x5, 0x0, 0x1}, &(0x7f0000000280)) io_getevents(r0, 0x2, 0x8f, &(0x7f0000d83f60)=[{}, {}], &(0x7f00005cfff0)={0x4000000000001, 0x7}) io_setup(0x7, &(0x7f0000000040)) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/route\x00') ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000440)=0x0) perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x4a, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ef4}, r2, 0x0, 0xffffffffffffffff, 0x1) pread64(r1, &(0x7f0000000000)=""/85, 0xfe42, 0x5d) r3 = memfd_create(&(0x7f0000000240)=':+lo#\x00', 0x0) fdatasync(r3) io_submit(r0, 0x1, &(0x7f0000001280)=[&(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000000100)}]) timerfd_create(0x7, 0x80800) io_destroy(r0) setsockopt$llc_int(r1, 0x10c, 0x9, &(0x7f00000002c0)=0x3, 0x4) 2018/03/29 11:11:44 executing program 6: openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x0, 0x0) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, &(0x7f0000000340)=0x1) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f000051cff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000943ffc)=0xa35) read(r0, &(0x7f00003fefff)=""/1, 0x1) r1 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000029000)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r0, &(0x7f0000dcdff0)=[{&(0x7f0000cd8000)=""/1, 0x1}], 0x1) ioctl$int_in(r2, 0x0, &(0x7f0000b28000)=0x3c) write$cgroup_type(0xffffffffffffffff, &(0x7f00000002c0)='threaded\x00', 0x9) syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x0, 0x802) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000fb9000)) fcntl$setsig(r2, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r3}], 0x1, 0xfffffffffffffff8) read$eventfd(0xffffffffffffffff, &(0x7f0000000040), 0x8) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)) r4 = dup2(r2, r3) fcntl$setown(r4, 0x8, r1) ptrace$cont(0xffffffffffffffff, r1, 0x0, 0x8) tkill(r1, 0x16) r5 = gettid() process_vm_readv(r5, &(0x7f0000001880)=[{&(0x7f0000000680)=""/198, 0xc6}, {&(0x7f0000000780)=""/247, 0xf7}, {&(0x7f0000000380)=""/12, 0xc}, {&(0x7f00000003c0)=""/6, 0x6}, {&(0x7f0000000400)=""/14, 0xe}], 0x5, &(0x7f00000019c0)=[{&(0x7f0000001900)=""/41, 0x29}, {&(0x7f0000001940)=""/112, 0x70}], 0x2, 0x0) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f0000000240)={{{@in6}}, {{@in=@local}, 0x0, @in=@local}}, &(0x7f0000000100)=0xe8) 2018/03/29 11:11:44 executing program 3: io_setup(0x3, &(0x7f0000000000)=0x0) accept$unix(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000100)=0x6e) r1 = syz_open_dev$usbmon(&(0x7f0000000200)='/dev/usbmon#\x00', 0x7ff, 0x0) io_cancel(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0xf, 0x0, 0xffffffffffffffff, &(0x7f0000000140)="940c1f2149747e7734510c34c143183667a187dc4f624f6c2de12452792a6fb529e6bf2a661dc23a844b00925c244a9f2967c0ca9868ee50eacf67a2ad7681d82f5a38cbd6d7641f843fa129e00f701fb01835f497b53672b3e5a3f6838f28aa240bf21eb5e5cbe7804fd307404474ae0242f8dea7a08e0fe9479b06f2795f857f8eec271d35ba7f61a91c87296814189cc1dfc9c659cc5437452a0bd178323c50e8c005ba7fa9519b27965c9f6ffbc7dcaa8e658616cc83188fb131a703222d", 0xc0, 0x5, 0x0, 0x1, r1}, &(0x7f0000000280)) io_getevents(r0, 0x2, 0x8f, &(0x7f0000d83f60)=[{}, {}], &(0x7f00005cfff0)={0x4000000000001, 0x7}) io_getevents(r0, 0x0, 0x5, &(0x7f00000002c0)=[{}, {}, {}, {}, {}], &(0x7f00000003c0)) io_setup(0x7, &(0x7f0000000040)) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/route\x00') ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000440)=0x0) perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x4a, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ef4}, r3, 0x0, r1, 0x1) pread64(r2, &(0x7f0000000000)=""/85, 0xfe42, 0x5d) r4 = memfd_create(&(0x7f0000000240)=':+lo#\x00', 0x0) fdatasync(r4) io_submit(r0, 0x1, &(0x7f0000001280)=[&(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f0000000100)}]) timerfd_create(0x7, 0x80800) io_destroy(0x0) setsockopt$llc_int(r1, 0x10c, 0x9, &(0x7f0000000380)=0x3, 0x4) 2018/03/29 11:11:44 executing program 0: r0 = perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x4a, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffff9c, 0xc00caee0, &(0x7f0000000180)={0x0, r0, 0x1}) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) fcntl$getownex(r0, 0x10, &(0x7f0000000400)={0x0, 0x0}) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0xffff, 0xe3, 0x6, 0x4, 0x0, 0x7, 0x0, 0x2, 0x10001, 0x1, 0x7, 0x8, 0x100, 0x4, 0x0, 0x7f, 0x20, 0x0, 0x4, 0x5, 0x90a4, 0x7, 0x2, 0x73, 0x8, 0x7, 0x4, 0x7e0, 0x0, 0x0, 0x2, 0x309, 0x0, 0x9, 0xfffffffffffffff9, 0x9, 0x0, 0x4, 0x0, @perf_config_ext={0x20, 0x1}, 0x8140, 0x2, 0x0, 0x4, 0xca1, 0xb5}, r4, 0x4, r1, 0x8) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) futimesat(r1, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0)={{r2, r3/1000+10000}, {r5, r6/1000+10000}}) unshare(0x8000000) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0xdc, 0x40}, 0x341) r8 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8910, &(0x7f0000000080)=@buf={0x0, &(0x7f0000000000)}) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x13, &(0x7f0000000ffc), 0x4) mq_open(&(0x7f00000000c0)='syzkaller0\x00', 0x40, 0x8, &(0x7f0000000100)={0x5, 0x80000000, 0x0, 0xfffffffffffffff9, 0x1, 0xfffffffffffffffd, 0x7fff, 0x200}) socket$inet_tcp(0x2, 0x1, 0x0) r9 = dup3(r8, r7, 0x80000) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r9, 0x84, 0x66, &(0x7f00000002c0)={0x0, 0x8ed6}, &(0x7f0000000300)=0x1) bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) shmget(0xffffffffffffffff, 0x8000, 0x49b, &(0x7f0000ff8000/0x8000)=nil) ioctl$sock_inet_SIOCGIFPFLAGS(r8, 0x8935, &(0x7f0000000080)={'syzkaller0\x00'}) ppoll(&(0x7f0000000780)=[{r1, 0x300}, {r1, 0x8401}], 0x2, &(0x7f00000007c0)={0x77359400}, &(0x7f0000000800)={0x9}, 0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000280)={0x0, 0x0, 0x9}, 0x10) r10 = semget$private(0x0, 0x4, 0x0) semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0x0, 0x1000}], 0x1, &(0x7f0000000080)={0x0, 0x1c9c380}) semctl$IPC_RMID(r10, 0x0, 0x0) [ 303.893263] FAULT_INJECTION: forcing a failure. [ 303.893263] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 303.905084] CPU: 0 PID: 7021 Comm: syz-executor4 Not tainted 4.16.0-rc7+ #5 [ 303.912183] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 303.921534] Call Trace: [ 303.924131] dump_stack+0x194/0x24d [ 303.927771] ? arch_local_irq_restore+0x53/0x53 [ 303.932448] should_fail+0x8c0/0xa40 [ 303.936144] ? trace_hardirqs_off+0x10/0x10 [ 303.940447] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 303.945532] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 303.950705] ? find_held_lock+0x35/0x1d0 [ 303.954749] ? trace_hardirqs_off+0x10/0x10 [ 303.959052] ? _parse_integer+0xe9/0x140 [ 303.963094] ? trace_hardirqs_off+0x10/0x10 [ 303.967395] ? _parse_integer+0x140/0x140 [ 303.971521] ? check_same_owner+0x320/0x320 [ 303.975824] ? find_held_lock+0x35/0x1d0 [ 303.979866] ? trace_hardirqs_off+0x10/0x10 [ 303.984169] ? get_pid_task+0x93/0x140 [ 303.988044] ? should_fail+0x23b/0xa40 [ 303.991913] __alloc_pages_nodemask+0x327/0xdd0 [ 303.996557] ? find_held_lock+0x35/0x1d0 [ 304.000598] ? __alloc_pages_slowpath+0x2d10/0x2d10 [ 304.005591] ? __f_unlock_pos+0x19/0x20 [ 304.009551] ? find_held_lock+0x35/0x1d0 [ 304.013624] ? check_same_owner+0x320/0x320 [ 304.017945] cache_grow_begin+0x72/0x640 [ 304.021986] kmem_cache_alloc+0x400/0x760 [ 304.026121] getname_flags+0xcb/0x580 [ 304.029903] ? __sb_end_write+0xa0/0xd0 [ 304.033854] SyS_mknodat+0x17a/0x480 [ 304.037550] ? do_file_open_root+0x4d0/0x4d0 [ 304.041936] ? do_syscall_64+0xb7/0x940 [ 304.045896] ? do_file_open_root+0x4d0/0x4d0 [ 304.050297] do_syscall_64+0x281/0x940 [ 304.054156] ? __do_page_fault+0xc90/0xc90 [ 304.058366] ? _raw_spin_unlock_irq+0x27/0x70 [ 304.062850] ? finish_task_switch+0x1c1/0x7e0 [ 304.067327] ? syscall_return_slowpath+0x550/0x550 [ 304.072233] ? syscall_return_slowpath+0x2ac/0x550 [ 304.077140] ? prepare_exit_to_usermode+0x350/0x350 [ 304.082154] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 304.087503] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 304.092342] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 304.097519] RIP: 0033:0x4548b9 [ 304.100682] RSP: 002b:00007f126e4bcc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000103 [ 304.108365] RAX: ffffffffffffffda RBX: 00007f126e4bd6d4 RCX: 00000000004548b9 [ 304.115623] RDX: 0000000000000000 RSI: 000000002003f000 RDI: 0000000000000016 [ 304.122882] RBP: 000000000072bf58 R08: 0000000000000000 R09: 0000000000000000 [ 304.130134] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000017 [ 304.137378] R13: 00000000000003f0 R14: 00000000006f7f20 R15: 0000000000000001 2018/03/29 11:11:44 executing program 0: r0 = perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x4a, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffff9c, 0xc00caee0, &(0x7f0000000180)={0x0, r0, 0x1}) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) fcntl$getownex(r0, 0x10, &(0x7f0000000400)={0x0, 0x0}) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0xffff, 0xe3, 0x6, 0x4, 0x0, 0x7, 0x0, 0x2, 0x10001, 0x1, 0x7, 0x8, 0x100, 0x4, 0x0, 0x7f, 0x20, 0x0, 0x4, 0x5, 0x90a4, 0x7, 0x2, 0x73, 0x8, 0x7, 0x4, 0x7e0, 0x0, 0x0, 0x2, 0x309, 0x0, 0x9, 0xfffffffffffffff9, 0x9, 0x0, 0x4, 0x0, @perf_config_ext={0x20, 0x1}, 0x8140, 0x2, 0x0, 0x4, 0xca1, 0xb5}, r4, 0x4, r1, 0x8) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) futimesat(r1, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0)={{r2, r3/1000+10000}, {r5, r6/1000+10000}}) unshare(0x8000000) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0xdc, 0x40}, 0x341) r8 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8910, &(0x7f0000000080)=@buf={0x0, &(0x7f0000000000)}) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x13, &(0x7f0000000ffc), 0x4) mq_open(&(0x7f00000000c0)='syzkaller0\x00', 0x40, 0x8, &(0x7f0000000100)={0x5, 0x80000000, 0x0, 0xfffffffffffffff9, 0x1, 0xfffffffffffffffd, 0x7fff, 0x200}) socket$inet_tcp(0x2, 0x1, 0x0) r9 = dup3(r8, r7, 0x80000) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r9, 0x84, 0x66, &(0x7f00000002c0)={0x0, 0x8ed6}, &(0x7f0000000300)=0x1) bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) shmget(0xffffffffffffffff, 0x8000, 0x49b, &(0x7f0000ff8000/0x8000)=nil) ioctl$sock_inet_SIOCGIFPFLAGS(r8, 0x8935, &(0x7f0000000080)={'syzkaller0\x00'}) ppoll(&(0x7f0000000780)=[{r1, 0x300}, {r1, 0x8401}], 0x2, &(0x7f00000007c0)={0x77359400}, &(0x7f0000000800)={0x9}, 0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000280)={0x0, 0x0, 0x9}, 0x10) r10 = semget$private(0x0, 0x4, 0x0) semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0x0, 0x1000}], 0x1, &(0x7f0000000080)={0x0, 0x1c9c380}) semctl$IPC_RMID(r10, 0x0, 0x0) 2018/03/29 11:11:44 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) readv(r0, &(0x7f0000001480)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x3}) r1 = syz_open_pts(r0, 0x2) r2 = dup3(r1, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000c34fff), 0xffffff0b) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0) preadv(r3, &(0x7f00000004c0)=[{&(0x7f0000000480)=""/21, 0x15}], 0x1, 0x0) fchdir(0xffffffffffffffff) mkdir(&(0x7f0000000280)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f", 0xfffffffffffffffc) fchmod(r2, 0x0) splice(r3, &(0x7f0000000400), 0xffffffffffffffff, &(0x7f0000000440), 0x9, 0x2) rename(&(0x7f0000001e00)='./file0\x00', &(0x7f0000000100)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f") mkdir(&(0x7f000000e000)='./control\x00', 0x0) r4 = open(&(0x7f0000000000)='./control\x00', 0x0, 0x0) renameat2(r4, &(0x7f0000000040)='./file0\x00', r4, &(0x7f0000000080)='./control\x00', 0x2) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000300)={0x0, 0x80}, &(0x7f0000000340)=0x8) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000380)={r5, 0x5}, &(0x7f00000003c0)=0x8) mknodat(r4, &(0x7f000003f000)='./control\x00', 0x0, 0x0) symlink(&(0x7f0000000180)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f", &(0x7f00000000c0)='./file0\x00') perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(r4, &(0x7f0000010000)='./control\x00', &(0x7f000003f000), &(0x7f0000001fe8), 0x0) 2018/03/29 11:11:44 executing program 7: io_setup(0x3, &(0x7f0000000000)=0x0) accept$unix(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000100)=0x6e) syz_open_dev$usbmon(&(0x7f0000000200)='/dev/usbmon#\x00', 0x7ff, 0x0) io_cancel(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0xf, 0x3, 0xffffffffffffffff, &(0x7f0000000140)="940c1f2149747e7734510c34c143183667a187dc4f624f6c2de12452792a6fb529e6bf2a661dc23a844b00925c244a9f2967c0ca9868ee50eacf67a2ad7681d82f5a38cbd6d7641f843fa129e00f701fb01835f497b53672b3e5a3f6838f28aa240bf21eb5e5cbe7804fd307404474ae0242f8dea7a08e0fe9479b06f2795f857f8eec271d35ba7f61a91c87296814189cc1dfc9c659cc5437452a0bd178323c50e8c005ba7fa9519b27965c9f6ffbc7dcaa8e658616cc83188fb131a703222d", 0xc0, 0x5, 0x0, 0x1}, &(0x7f0000000280)) io_getevents(r0, 0x2, 0x8f, &(0x7f0000d83f60)=[{}, {}], &(0x7f00005cfff0)={0x4000000000001, 0x7}) io_getevents(r0, 0x0, 0x5, &(0x7f00000002c0)=[{}, {}, {}, {}, {}], &(0x7f00000003c0)) io_setup(0x7, &(0x7f0000000040)) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/route\x00') socket$key(0xf, 0x3, 0x2) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000440)=0x0) perf_event_open(&(0x7f0000aaa000)={0x0, 0x70, 0x4a, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ef4}, r2, 0x0, 0xffffffffffffffff, 0x1) pread64(r1, &(0x7f0000000000)=""/85, 0x55, 0x5d) r3 = memfd_create(&(0x7f0000000240)=':+lo#\x00', 0x0) fdatasync(r3) io_submit(r0, 0x1, &(0x7f0000001280)=[&(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000000100)}]) timerfd_create(0x7, 0x80800) io_destroy(r0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x9, &(0x7f0000000380)=0x3, 0x4) 2018/03/29 11:11:44 executing program 3: io_setup(0x3, &(0x7f0000000000)=0x0) accept$unix(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000100)=0x6e) r1 = syz_open_dev$usbmon(&(0x7f0000000200)='/dev/usbmon#\x00', 0x7ff, 0x0) io_cancel(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0xf, 0x0, 0xffffffffffffffff, &(0x7f0000000140)="940c1f2149747e7734510c34c143183667a187dc4f624f6c2de12452792a6fb529e6bf2a661dc23a844b00925c244a9f2967c0ca9868ee50eacf67a2ad7681d82f5a38cbd6d7641f843fa129e00f701fb01835f497b53672b3e5a3f6838f28aa240bf21eb5e5cbe7804fd307404474ae0242f8dea7a08e0fe9479b06f2795f857f8eec271d35ba7f61a91c87296814189cc1dfc9c659cc5437452a0bd178323c50e8c005ba7fa9519b27965c9f6ffbc7dcaa8e658616cc83188fb131a703222d", 0xc0, 0x5, 0x0, 0x1, r1}, &(0x7f0000000280)) io_getevents(r0, 0x2, 0x8f, &(0x7f0000d83f60)=[{}, {}], &(0x7f00005cfff0)={0x4000000000001, 0x7}) io_getevents(r0, 0x0, 0x5, &(0x7f00000002c0)=[{}, {}, {}, {}, {}], &(0x7f00000003c0)) io_setup(0x7, &(0x7f0000000040)) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/route\x00') ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000440)=0x0) perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x4a, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ef4}, r3, 0x0, r1, 0x1) pread64(r2, &(0x7f0000000000)=""/85, 0xfe42, 0x5d) r4 = memfd_create(&(0x7f0000000240)=':+lo#\x00', 0x0) fdatasync(r4) io_submit(r0, 0x1, &(0x7f0000001280)=[&(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f0000000100)}]) timerfd_create(0x7, 0x80800) io_destroy(r0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x9, &(0x7f0000000380)=0x3, 0x4) 2018/03/29 11:11:44 executing program 1: io_setup(0x3, &(0x7f0000000000)=0x0) accept$unix(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000100)=0x6e) r1 = syz_open_dev$usbmon(&(0x7f0000000200)='/dev/usbmon#\x00', 0x0, 0x0) io_cancel(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0xf, 0x3, 0xffffffffffffffff, &(0x7f0000000140)="940c1f2149747e7734510c34c143183667a187dc4f624f6c2de12452792a6fb529e6bf2a661dc23a844b00925c244a9f2967c0ca9868ee50eacf67a2ad7681d82f5a38cbd6d7641f843fa129e00f701fb01835f497b53672b3e5a3f6838f28aa240bf21eb5e5cbe7804fd307404474ae0242f8dea7a08e0fe9479b06f2795f857f8eec271d35ba7f61a91c87296814189cc1dfc9c659cc5437452a0bd178323c50e8c005ba7fa9519b27965c9f6ffbc7dcaa8e658616cc83188fb131a703222d", 0xc0, 0x5, 0x0, 0x1}, &(0x7f0000000280)) io_getevents(r0, 0x2, 0x8f, &(0x7f0000d83f60)=[{}, {}], &(0x7f00005cfff0)={0x4000000000001, 0x7}) io_getevents(r0, 0x0, 0x5, &(0x7f00000002c0)=[{}, {}, {}, {}, {}], &(0x7f00000003c0)) io_setup(0x7, &(0x7f0000000040)) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/route\x00') ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000440)=0x0) perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x4a, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ef4}, r3, 0x0, r1, 0x1) pread64(r2, &(0x7f0000000000)=""/85, 0xfe42, 0x5d) r4 = memfd_create(&(0x7f0000000240)=':+lo#\x00', 0x0) fdatasync(r4) io_submit(r0, 0x1, &(0x7f0000001280)=[&(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f0000000100)}]) timerfd_create(0x7, 0x80800) io_destroy(r0) setsockopt$llc_int(r1, 0x10c, 0x9, &(0x7f0000000380)=0x3, 0x4) 2018/03/29 11:11:44 executing program 2: io_setup(0x3, &(0x7f0000000000)=0x0) accept$unix(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000100)=0x6e) syz_open_dev$usbmon(&(0x7f0000000200)='/dev/usbmon#\x00', 0x7ff, 0x0) io_cancel(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0xf, 0x3, 0xffffffffffffffff, &(0x7f0000000140)="940c1f2149747e7734510c34c143183667a187dc4f624f6c2de12452792a6fb529e6bf2a661dc23a844b00925c244a9f2967c0ca9868ee50eacf67a2ad7681d82f5a38cbd6d7641f843fa129e00f701fb01835f497b53672b3e5a3f6838f28aa240bf21eb5e5cbe7804fd307404474ae0242f8dea7a08e0fe9479b06f2795f857f8eec271d35ba7f61a91c87296814189cc1dfc9c659cc5437452a0bd178323c50e8c005ba7fa9519b27965c9f6ffbc7dcaa8e658616cc83188fb131a703222d", 0xc0, 0x5, 0x0, 0x1}, &(0x7f0000000280)) io_getevents(r0, 0x2, 0x8f, &(0x7f0000d83f60)=[{}, {}], &(0x7f00005cfff0)={0x4000000000001, 0x7}) io_setup(0x3, &(0x7f0000000300)) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/route\x00') ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000440)=0x0) perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x4a, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ef4}, r2, 0x0, 0xffffffffffffffff, 0x1) pread64(r1, &(0x7f0000000000)=""/85, 0xfe42, 0x5d) r3 = memfd_create(&(0x7f0000000240)=':+lo#\x00', 0x0) fdatasync(r3) io_submit(r0, 0x1, &(0x7f0000001280)=[&(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000000100)}]) timerfd_create(0x7, 0x80800) io_destroy(r0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x9, &(0x7f0000000380)=0x3, 0x4) 2018/03/29 11:11:44 executing program 5: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='.', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)="9600000000", 0x0, &(0x7f0000000580)="af3463e4dcf9ba69c2d6a49f9c041c69428976fa3526d9894170e8911bc1d4876a187af7d7b53247e4af0ac04ff1f1df238f4ecfc1d6a87b1743d2f3a0a5574d0462364cc12661a7fcb51a0330b58a3b5f4287170fc635db9191898544528e1ca789ba962144") mkdir(&(0x7f0000000000)='./file1\x00', 0x0) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000000440)='hfsplus\x00', 0x0, &(0x7f0000444000)) mount(&(0x7f0000fb6000)='./file0\x00', &(0x7f0000d78000)='.', &(0x7f0000fdb000)='ubifs\x00', 0x1003, 0x0) mount(&(0x7f00002b9ff8)='./file0\x00', &(0x7f0000cbeff8)='./file0\x00', &(0x7f00005f7ffa)='ramfs\x00', 0x80000, &(0x7f000002f000)) r0 = socket$vsock_dgram(0x28, 0x2, 0x0) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000240)='ip6tnl0\x00') mount(&(0x7f0000000040)='.', &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0)='binfmt_misc\x00', 0x0, &(0x7f0000000100)) mount(&(0x7f0000000100)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) mkdir(&(0x7f0000000140)='.', 0x118) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) accept4(r1, &(0x7f00000004c0)=@nl=@unspec, &(0x7f0000000340)=0x80, 0x80000) getsockopt$IP6T_SO_GET_INFO(r1, 0x29, 0x40, &(0x7f0000000280)={'mangle\x00'}, &(0x7f0000000300)=0x54) syz_open_dev$mouse(&(0x7f0000000480)='/dev/input/mouse#\x00', 0x1ff, 0x301007) mount(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./file1\x00', &(0x7f0000000200)='anon_inodefs\x00', 0x2000, &(0x7f0000000240)) mount(&(0x7f0000adcff8)='./file0\x00', &(0x7f0000e08fff)='.', &(0x7f00005e9000)='cifs\x00', 0x2000, &(0x7f0000ad5000)) lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)) 2018/03/29 11:11:44 executing program 1: io_setup(0x3, &(0x7f0000000000)=0x0) accept$unix(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000100)=0x6e) r1 = syz_open_dev$usbmon(&(0x7f0000000200)='/dev/usbmon#\x00', 0x0, 0x0) io_cancel(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0xf, 0x3, 0xffffffffffffffff, &(0x7f0000000140)="940c1f2149747e7734510c34c143183667a187dc4f624f6c2de12452792a6fb529e6bf2a661dc23a844b00925c244a9f2967c0ca9868ee50eacf67a2ad7681d82f5a38cbd6d7641f843fa129e00f701fb01835f497b53672b3e5a3f6838f28aa240bf21eb5e5cbe7804fd307404474ae0242f8dea7a08e0fe9479b06f2795f857f8eec271d35ba7f61a91c87296814189cc1dfc9c659cc5437452a0bd178323c50e8c005ba7fa9519b27965c9f6ffbc7dcaa8e658616cc83188fb131a703222d", 0xc0, 0x5, 0x0, 0x1}, &(0x7f0000000280)) io_getevents(r0, 0x2, 0x8f, &(0x7f0000d83f60)=[{}, {}], &(0x7f00005cfff0)={0x4000000000001, 0x7}) io_getevents(r0, 0x0, 0x5, &(0x7f00000002c0)=[{}, {}, {}, {}, {}], &(0x7f00000003c0)) io_setup(0x7, &(0x7f0000000040)) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/route\x00') ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000440)=0x0) perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x4a, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ef4}, r3, 0x0, r1, 0x1) pread64(r2, &(0x7f0000000000)=""/85, 0xfe42, 0x5d) r4 = memfd_create(&(0x7f0000000240)=':+lo#\x00', 0x0) fdatasync(r4) io_submit(r0, 0x1, &(0x7f0000001280)=[&(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f0000000100)}]) timerfd_create(0x7, 0x80800) io_destroy(r0) setsockopt$llc_int(r1, 0x10c, 0x9, &(0x7f0000000380)=0x3, 0x4) 2018/03/29 11:11:44 executing program 0: r0 = perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x4a, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffff9c, 0xc00caee0, &(0x7f0000000180)={0x0, r0, 0x1}) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) fcntl$getownex(r0, 0x10, &(0x7f0000000400)={0x0, 0x0}) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0xffff, 0xe3, 0x6, 0x4, 0x0, 0x7, 0x0, 0x2, 0x10001, 0x1, 0x7, 0x8, 0x100, 0x4, 0x0, 0x7f, 0x20, 0x0, 0x4, 0x5, 0x90a4, 0x7, 0x2, 0x73, 0x8, 0x7, 0x4, 0x7e0, 0x101, 0x0, 0x0, 0x309, 0x0, 0x9, 0xfffffffffffffff9, 0x9, 0x0, 0x4, 0x0, @perf_config_ext={0x20, 0x1}, 0x8140, 0x2, 0x0, 0x4, 0xca1, 0xb5}, r4, 0x4, r1, 0x8) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) futimesat(r1, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0)={{r2, r3/1000+10000}, {r5, r6/1000+10000}}) unshare(0x8000000) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0xdc, 0x40}, 0x341) r8 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8910, &(0x7f0000000080)=@buf={0x0, &(0x7f0000000000)}) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x13, &(0x7f0000000ffc), 0x4) mq_open(&(0x7f00000000c0)='syzkaller0\x00', 0x40, 0x8, &(0x7f0000000100)={0x5, 0x80000000, 0x0, 0xfffffffffffffff9, 0x1, 0xfffffffffffffffd, 0x7fff, 0x200}) socket$inet_tcp(0x2, 0x1, 0x0) r9 = dup3(r8, r7, 0x80000) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r9, 0x84, 0x66, &(0x7f00000002c0)={0x0, 0x8ed6}, &(0x7f0000000300)=0x1) bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) shmget(0xffffffffffffffff, 0x8000, 0x49b, &(0x7f0000ff8000/0x8000)=nil) ioctl$sock_inet_SIOCGIFPFLAGS(r8, 0x8935, &(0x7f0000000080)={'syzkaller0\x00'}) ppoll(&(0x7f0000000780)=[{r1, 0x300}, {r1, 0x8401}], 0x2, &(0x7f00000007c0)={0x77359400}, &(0x7f0000000800)={0x9}, 0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000280)={0x0, 0x0, 0x9}, 0x10) r10 = semget$private(0x0, 0x4, 0x0) semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0x0, 0x1000}], 0x1, &(0x7f0000000080)={0x0, 0x1c9c380}) semctl$IPC_RMID(r10, 0x0, 0x0) 2018/03/29 11:11:44 executing program 5: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) mkdir(&(0x7f0000000000)='./file1\x00', 0x0) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000811ffa)='bdev\x00', 0x0, &(0x7f0000444000)) mount(&(0x7f0000fb6000)='./file0\x00', &(0x7f0000d78000)='.', &(0x7f0000fdb000)='ubifs\x00', 0x1003, 0x0) mkdir(&(0x7f0000000100)='.', 0x100) mount(&(0x7f00002b9ff8)='./file0\x00', &(0x7f0000cbeff8)='./file0\x00', &(0x7f00005f7ffa)='ramfs\x00', 0x80000, &(0x7f000002f000)) mount(&(0x7f0000000040)='.', &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0)='binfmt_misc\x00', 0x0, &(0x7f0000000100)) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) mount(&(0x7f0000000180)='./file0\x00', &(0x7f0000000280)='./file1\x00', &(0x7f0000000200)='anon_inodefs\x00', 0x2000, &(0x7f0000000240)="f29b78cfe025a63eee4385ed4f27dda3bf76d7f20f52541f8306cb7915ee56a24cb760f8920c560e8d") mount(&(0x7f0000adcff8)='./file0\x00', &(0x7f0000e08fff)='.', &(0x7f00005e9000)='cifs\x00', 0x2000, &(0x7f0000ad5000)) 2018/03/29 11:11:44 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) readv(r0, &(0x7f0000001480)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x3}) r1 = syz_open_pts(r0, 0x2) r2 = dup3(r1, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000c34fff), 0xffffff0b) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0) preadv(r3, &(0x7f00000004c0)=[{&(0x7f0000000480)=""/21, 0x15}], 0x1, 0x0) fchdir(0xffffffffffffffff) mkdir(&(0x7f0000000280)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f", 0xfffffffffffffffc) fchmod(r2, 0x0) splice(r3, &(0x7f0000000400), 0xffffffffffffffff, &(0x7f0000000440), 0x9, 0x2) rename(&(0x7f0000001e00)='./file0\x00', &(0x7f0000000100)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f") mkdir(&(0x7f000000e000)='./control\x00', 0x0) r4 = open(&(0x7f0000000000)='./control\x00', 0x0, 0x0) renameat2(r4, &(0x7f0000000040)='./file0\x00', r4, &(0x7f0000000080)='./control\x00', 0x2) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x9, 0xf623, 0x60d, 0x9, 0x0, 0x2}, &(0x7f00000014c0)={0x80000001, 0xffffffffffffffe1, 0x3ff, 0xc6, 0x5, 0x9, 0xfff, 0x4}, &(0x7f0000001500)={0x3, 0x8, 0x1aa, 0xa98, 0x4, 0x9, 0x10000, 0x5}, &(0x7f0000001540), &(0x7f00000015c0)={&(0x7f0000001580)={0xef9}, 0x8}) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000300)={0x0, 0x80}, &(0x7f0000000340)=0x8) setsockopt$inet6_dccp_int(r4, 0x21, 0x3, &(0x7f0000000200)=0x4, 0x4) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000380)={r5, 0x5}, &(0x7f00000003c0)=0xffffffffffffff05) mknodat(r4, &(0x7f000003f000)='./control\x00', 0x0, 0x0) accept4$alg(r4, 0x0, 0x0, 0x80800) symlink(&(0x7f0000000180)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f", &(0x7f00000000c0)='./file0\x00') perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(r4, &(0x7f0000010000)='./control\x00', &(0x7f000003f000), &(0x7f0000001fe8), 0x0) [ 304.394936] bond0 (unregistering): Released all slaves [ 305.098330] IPVS: ftp: loaded support on port[0] = 21 [ 305.403317] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 305.845564] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 305.851661] 8021q: adding VLAN 0 to HW filter on device bond0 [ 305.898625] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready 2018/03/29 11:11:46 executing program 5: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) mkdir(&(0x7f0000000000)='./file1\x00', 0x0) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000811ffa)='bdev\x00', 0x0, &(0x7f0000444000)) mount(&(0x7f0000fb6000)='./file0\x00', &(0x7f0000d78000)='.', &(0x7f0000fdb000)='ubifs\x00', 0x1003, 0x0) mount(&(0x7f00002b9ff8)='./file0\x00', &(0x7f0000cbeff8)='./file0\x00', &(0x7f00005f7ffa)='ramfs\x00', 0x80000, &(0x7f000002f000)) mount(&(0x7f0000000040)='.', &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0)='binfmt_misc\x00', 0x0, &(0x7f0000000100)) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000240)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@dev}}, &(0x7f0000000140)=0xe8) getgroups(0x1, &(0x7f0000000340)=[0xffffffffffffffff]) lchown(&(0x7f0000000100)='./file1\x00', r0, r1) mount(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./file1\x00', &(0x7f0000000200)='anon_inodefs\x00', 0x2000, &(0x7f0000000240)) mount(&(0x7f0000adcff8)='./file0\x00', &(0x7f0000e08fff)='.', &(0x7f00005e9000)='cifs\x00', 0x2000, &(0x7f0000ad5000)) 2018/03/29 11:11:46 executing program 7: io_setup(0x3, &(0x7f0000000000)=0x0) accept$unix(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000100)=0x6e) r1 = syz_open_dev$usbmon(&(0x7f0000000200)='/dev/usbmon#\x00', 0x7ff, 0x0) io_cancel(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0xf, 0x3, 0xffffffffffffffff, &(0x7f0000000140)="940c1f2149747e7734510c34c143183667a187dc4f624f6c2de12452792a6fb529e6bf2a661dc23a844b00925c244a9f2967c0ca9868ee50eacf67a2ad7681d82f5a38cbd6d7641f843fa129e00f701fb01835f497b53672b3e5a3f6838f28aa240bf21eb5e5cbe7804fd307404474ae0242f8dea7a08e0fe9479b06f2795f857f8eec271d35ba7f61a91c87296814189cc1dfc9c659cc5437452a0bd178323c50e8c005ba7fa9519b27965c9f6ffbc7dcaa8e658616cc83188fb131a703222d", 0xc0, 0x5, 0x0, 0x1}, &(0x7f0000000280)) io_getevents(r0, 0x2, 0x8f, &(0x7f0000d83f60)=[{}, {}], &(0x7f00005cfff0)={0x4000000000001, 0x7}) io_getevents(r0, 0x0, 0x5, &(0x7f00000002c0)=[{}, {}, {}, {}, {}], &(0x7f00000003c0)) io_setup(0x7, &(0x7f0000000040)) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/route\x00') ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000440)=0x0) perf_event_open(&(0x7f0000aaa000)={0x0, 0x70, 0x4a, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ef4}, r3, 0x0, 0xffffffffffffffff, 0x1) accept4$netrom(r1, &(0x7f0000000480)=@full, &(0x7f0000000500)=0x48, 0x80800) pread64(r2, &(0x7f0000000000)=""/85, 0xfe42, 0x5d) r4 = memfd_create(&(0x7f0000000240)=':+lo#\x00', 0x0) fdatasync(r4) io_submit(r0, 0x1, &(0x7f0000001280)=[&(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f0000000100)}]) timerfd_create(0x7, 0x80800) io_destroy(r0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x9, &(0x7f0000000380)=0x3, 0x4) 2018/03/29 11:11:46 executing program 0: r0 = perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x4a, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffff9c, 0xc00caee0, &(0x7f0000000180)={0x0, r0, 0x1}) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) fcntl$getownex(r0, 0x10, &(0x7f0000000400)={0x0, 0x0}) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0xffff, 0xe3, 0x6, 0x4, 0x0, 0x7, 0x0, 0x2, 0x10001, 0x1, 0x7, 0x8, 0x100, 0x4, 0x0, 0x7f, 0x20, 0x0, 0x4, 0x5, 0x90a4, 0x7, 0x2, 0x73, 0x8, 0x7, 0x4, 0x7e0, 0x101, 0x0, 0x0, 0x309, 0x0, 0x9, 0xfffffffffffffff9, 0x9, 0x0, 0x4, 0x0, @perf_config_ext={0x20, 0x1}, 0x8140, 0x2, 0x0, 0x4, 0xca1, 0xb5}, r4, 0x4, r1, 0x8) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) futimesat(r1, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0)={{r2, r3/1000+10000}, {r5, r6/1000+10000}}) unshare(0x8000000) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0xdc, 0x40}, 0x341) r8 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8910, &(0x7f0000000080)=@buf={0x0, &(0x7f0000000000)}) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x13, &(0x7f0000000ffc), 0x4) mq_open(&(0x7f00000000c0)='syzkaller0\x00', 0x40, 0x8, &(0x7f0000000100)={0x5, 0x80000000, 0x0, 0xfffffffffffffff9, 0x1, 0xfffffffffffffffd, 0x7fff, 0x200}) socket$inet_tcp(0x2, 0x1, 0x0) r9 = dup3(r8, r7, 0x80000) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r9, 0x84, 0x66, &(0x7f00000002c0)={0x0, 0x8ed6}, &(0x7f0000000300)=0x1) bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) shmget(0xffffffffffffffff, 0x8000, 0x49b, &(0x7f0000ff8000/0x8000)=nil) ioctl$sock_inet_SIOCGIFPFLAGS(r8, 0x8935, &(0x7f0000000080)={'syzkaller0\x00'}) ppoll(&(0x7f0000000780)=[{r1, 0x300}, {r1, 0x8401}], 0x2, &(0x7f00000007c0)={0x77359400}, &(0x7f0000000800)={0x9}, 0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000280)={0x0, 0x0, 0x9}, 0x10) r10 = semget$private(0x0, 0x4, 0x0) semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0x0, 0x1000}], 0x1, &(0x7f0000000080)={0x0, 0x1c9c380}) semctl$IPC_RMID(r10, 0x0, 0x0) 2018/03/29 11:11:46 executing program 2: io_setup(0x3, &(0x7f0000000000)=0x0) r1 = accept$unix(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000100)=0x6e) r2 = syz_open_dev$usbmon(&(0x7f0000000200)='/dev/usbmon#\x00', 0x7ff, 0x0) io_cancel(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0xf, 0x3, 0xffffffffffffffff, &(0x7f0000000140)="940c1f2149747e7734510c34c143183667a187dc4f624f6c2de12452792a6fb529e6bf2a661dc23a844b00925c244a9f2967c0ca9868ee50eacf67a2ad7681d82f5a38cbd6d7641f843fa129e00f701fb01835f497b53672b3e5a3f6838f28aa240bf21eb5e5cbe7804fd307404474ae0242f8dea7a08e0fe9479b06f2795f857f8eec271d35ba7f61a91c87296814189cc1dfc9c659cc5437452a0bd178323c50e8c005ba7fa9519b27965c9f6ffbc7dcaa8e658616cc83188fb131a703222d", 0xc0, 0x5, 0x0, 0x1}, &(0x7f0000000280)) io_getevents(r0, 0x2, 0x8f, &(0x7f0000d83f60)=[{}, {}], &(0x7f00005cfff0)={0x4000000000001, 0x7}) io_setup(0x7, &(0x7f0000000040)) ioctl$DRM_IOCTL_AGP_ALLOC(r2, 0xc0206434, &(0x7f00000002c0)={0x1, 0x0, 0x1, 0x200}) ioctl$DRM_IOCTL_SG_FREE(r1, 0x40106439, &(0x7f0000000300)={0x2, r3}) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/route\x00') ioctl$TIOCGPGRP(r4, 0x540f, &(0x7f0000000440)=0x0) perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x4a, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ef4}, r5, 0x0, 0xffffffffffffffff, 0x1) pread64(r4, &(0x7f0000000000)=""/85, 0xfe42, 0x5d) r6 = memfd_create(&(0x7f0000000240)=':+lo#\x00', 0x0) fdatasync(r6) io_submit(r0, 0x1, &(0x7f0000001280)=[&(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, 0x0, r6, &(0x7f0000000100)}]) timerfd_create(0x7, 0x80800) io_destroy(r0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x9, &(0x7f0000000380)=0x3, 0x4) 2018/03/29 11:11:46 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) readv(r0, &(0x7f0000001480)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x3}) r1 = syz_open_pts(r0, 0x2) r2 = dup3(r1, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000c34fff), 0xffffff0b) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0) preadv(r3, &(0x7f00000004c0)=[{&(0x7f0000000480)=""/21, 0x15}], 0x1, 0x0) fchdir(0xffffffffffffffff) mkdir(&(0x7f0000000280)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f", 0xfffffffffffffffc) fchmod(r2, 0x0) r4 = semget(0x3, 0x4, 0x1d3) semctl$GETZCNT(r4, 0x7, 0xf, &(0x7f0000001580)=""/218) splice(r3, &(0x7f0000000400), 0xffffffffffffffff, &(0x7f0000000440), 0x9, 0x2) rename(&(0x7f0000000200)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f", &(0x7f00000014c0)='./control\x00') rename(&(0x7f0000001e00)='./file0\x00', &(0x7f0000000100)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f") mkdir(&(0x7f000000e000)='./control\x00', 0x0) r5 = open(&(0x7f0000000000)='./control\x00', 0x0, 0x0) renameat2(r5, &(0x7f0000000040)='./file0\x00', r5, &(0x7f0000000080)='./control\x00', 0x2) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r5, 0x84, 0x76, &(0x7f0000000300)={0x0, 0x80}, &(0x7f0000000340)=0x8) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r5, 0x84, 0x76, &(0x7f0000000380)={r6, 0x5}, &(0x7f00000003c0)=0x8) mknodat(r5, &(0x7f000003f000)='./file0\x00', 0x8000, 0x0) symlink(&(0x7f0000000180)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f", &(0x7f00000000c0)='./file0\x00') bind(r5, &(0x7f0000001500)=@generic={0x5, "b90c4586d895f3669e22ea4c05645c495ef35e4224f570ffcec08a26336512452f5493b7111dc84718277c2956d57da97683366f14a4b412628446c6be1f156fb0036c99884fc971e5231af71eb72e5d99e349fe1a0af734ab1488652c1bde2f3ca888676af84b9f78bd307d8edc577ad84aa77ea386574fc28142450ce3"}, 0x80) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(r5, &(0x7f0000010000)='./control\x00', &(0x7f000003f000), &(0x7f0000001fe8), 0x0) 2018/03/29 11:11:46 executing program 1: io_setup(0x3, &(0x7f0000000000)=0x0) accept$unix(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000100)=0x6e) r1 = syz_open_dev$usbmon(&(0x7f0000000200)='/dev/usbmon#\x00', 0x0, 0x0) io_cancel(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0xf, 0x3, 0xffffffffffffffff, &(0x7f0000000140)="940c1f2149747e7734510c34c143183667a187dc4f624f6c2de12452792a6fb529e6bf2a661dc23a844b00925c244a9f2967c0ca9868ee50eacf67a2ad7681d82f5a38cbd6d7641f843fa129e00f701fb01835f497b53672b3e5a3f6838f28aa240bf21eb5e5cbe7804fd307404474ae0242f8dea7a08e0fe9479b06f2795f857f8eec271d35ba7f61a91c87296814189cc1dfc9c659cc5437452a0bd178323c50e8c005ba7fa9519b27965c9f6ffbc7dcaa8e658616cc83188fb131a703222d", 0xc0, 0x5, 0x0, 0x1}, &(0x7f0000000280)) io_getevents(r0, 0x2, 0x8f, &(0x7f0000d83f60)=[{}, {}], &(0x7f00005cfff0)={0x4000000000001, 0x7}) io_getevents(r0, 0x0, 0x5, &(0x7f00000002c0)=[{}, {}, {}, {}, {}], &(0x7f00000003c0)) io_setup(0x7, &(0x7f0000000040)) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/route\x00') ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000440)=0x0) perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x4a, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ef4}, r3, 0x0, r1, 0x1) pread64(r2, &(0x7f0000000000)=""/85, 0xfe42, 0x5d) r4 = memfd_create(&(0x7f0000000240)=':+lo#\x00', 0x0) fdatasync(r4) io_submit(r0, 0x1, &(0x7f0000001280)=[&(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f0000000100)}]) timerfd_create(0x7, 0x80800) io_destroy(r0) setsockopt$llc_int(r1, 0x10c, 0x9, &(0x7f0000000380)=0x3, 0x4) 2018/03/29 11:11:46 executing program 6: openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x0, 0x0) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, &(0x7f0000000340)=0x1) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f000051cff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000943ffc)=0xa35) read(r0, &(0x7f00003fefff)=""/1, 0x1) r1 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000029000)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r0, &(0x7f0000dcdff0)=[{&(0x7f0000cd8000)=""/1, 0x1}], 0x1) ioctl$int_in(r2, 0x5452, &(0x7f0000b28000)) write$cgroup_type(0xffffffffffffffff, &(0x7f00000002c0)='threaded\x00', 0x9) syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x0, 0x802) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000fb9000)) fcntl$setsig(r2, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r3}], 0x1, 0xfffffffffffffff8) read$eventfd(0xffffffffffffffff, &(0x7f0000000040), 0x8) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)) r4 = dup2(r2, r3) fcntl$setown(r4, 0x8, r1) ptrace$cont(0xffffffffffffffff, r1, 0x0, 0x8) tkill(r1, 0x16) r5 = gettid() process_vm_readv(r5, &(0x7f0000001880)=[{&(0x7f0000000680)=""/198, 0xc6}, {&(0x7f0000000780)=""/247, 0xf7}, {&(0x7f0000000380)=""/12, 0xc}, {&(0x7f00000003c0)=""/6, 0x6}, {&(0x7f0000000400)=""/14, 0xe}], 0x5, &(0x7f00000019c0)=[{&(0x7f0000001900)=""/41, 0x29}, {&(0x7f0000001940)=""/112, 0x70}], 0x2, 0x0) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f0000000240)={{{@in6}}, {{@in=@local}, 0x0, @in=@local}}, &(0x7f0000000100)=0xe8) 2018/03/29 11:11:46 executing program 3: io_setup(0x3, &(0x7f0000000000)=0x0) accept$unix(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000100)=0x6e) r1 = syz_open_dev$usbmon(&(0x7f0000000200)='/dev/usbmon#\x00', 0x7ff, 0x0) io_cancel(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0xf, 0x0, 0xffffffffffffffff, &(0x7f0000000140)="940c1f2149747e7734510c34c143183667a187dc4f624f6c2de12452792a6fb529e6bf2a661dc23a844b00925c244a9f2967c0ca9868ee50eacf67a2ad7681d82f5a38cbd6d7641f843fa129e00f701fb01835f497b53672b3e5a3f6838f28aa240bf21eb5e5cbe7804fd307404474ae0242f8dea7a08e0fe9479b06f2795f857f8eec271d35ba7f61a91c87296814189cc1dfc9c659cc5437452a0bd178323c50e8c005ba7fa9519b27965c9f6ffbc7dcaa8e658616cc83188fb131a703222d", 0xc0, 0x5, 0x0, 0x1, r1}, &(0x7f0000000280)) io_getevents(r0, 0x2, 0x8f, &(0x7f0000d83f60)=[{}, {}], &(0x7f00005cfff0)={0x4000000000001, 0x7}) io_getevents(r0, 0x0, 0x5, &(0x7f00000002c0)=[{}, {}, {}, {}, {}], &(0x7f00000003c0)) io_setup(0x7, &(0x7f0000000040)) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/route\x00') ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000440)=0x0) perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x4a, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ef4}, r3, 0x0, r1, 0x1) pread64(r2, &(0x7f0000000000)=""/85, 0xfe42, 0x5d) r4 = memfd_create(&(0x7f0000000240)=':+lo#\x00', 0x0) fdatasync(r4) io_submit(r0, 0x1, &(0x7f0000001280)=[&(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f0000000100)}]) timerfd_create(0x7, 0x80800) io_destroy(r0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x9, &(0x7f0000000380)=0x3, 0x4) [ 305.944827] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready 2018/03/29 11:11:46 executing program 3: io_setup(0x3, &(0x7f0000000000)=0x0) accept$unix(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000100)=0x6e) r1 = syz_open_dev$usbmon(&(0x7f0000000200)='/dev/usbmon#\x00', 0x7ff, 0x0) io_cancel(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0xf, 0x0, 0xffffffffffffffff, &(0x7f0000000140)="940c1f2149747e7734510c34c143183667a187dc4f624f6c2de12452792a6fb529e6bf2a661dc23a844b00925c244a9f2967c0ca9868ee50eacf67a2ad7681d82f5a38cbd6d7641f843fa129e00f701fb01835f497b53672b3e5a3f6838f28aa240bf21eb5e5cbe7804fd307404474ae0242f8dea7a08e0fe9479b06f2795f857f8eec271d35ba7f61a91c87296814189cc1dfc9c659cc5437452a0bd178323c50e8c005ba7fa9519b27965c9f6ffbc7dcaa8e658616cc83188fb131a703222d", 0xc0, 0x5, 0x0, 0x1, r1}, &(0x7f0000000280)) io_getevents(r0, 0x2, 0x8f, &(0x7f0000d83f60)=[{}, {}], &(0x7f00005cfff0)={0x4000000000001, 0x7}) io_getevents(r0, 0x0, 0x5, &(0x7f00000002c0)=[{}, {}, {}, {}, {}], &(0x7f00000003c0)) io_setup(0x7, &(0x7f0000000040)) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/route\x00') ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000440)=0x0) perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x4a, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ef4}, r3, 0x0, r1, 0x1) pread64(r2, &(0x7f0000000000)=""/85, 0xfe42, 0x5d) r4 = memfd_create(&(0x7f0000000240)=':+lo#\x00', 0x0) fdatasync(r4) io_submit(r0, 0x1, &(0x7f0000001280)=[&(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f0000000100)}]) timerfd_create(0x7, 0x80800) io_destroy(r0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x9, &(0x7f0000000380)=0x3, 0x4) 2018/03/29 11:11:46 executing program 0: r0 = perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x4a, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffff9c, 0xc00caee0, &(0x7f0000000180)={0x0, r0, 0x1}) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) fcntl$getownex(r0, 0x10, &(0x7f0000000400)={0x0, 0x0}) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0xffff, 0xe3, 0x6, 0x4, 0x0, 0x7, 0x0, 0x2, 0x10001, 0x1, 0x7, 0x8, 0x100, 0x4, 0x0, 0x7f, 0x20, 0x0, 0x4, 0x5, 0x90a4, 0x7, 0x2, 0x73, 0x8, 0x7, 0x4, 0x7e0, 0x101, 0x0, 0x0, 0x309, 0x0, 0x9, 0xfffffffffffffff9, 0x9, 0x0, 0x4, 0x0, @perf_config_ext={0x20, 0x1}, 0x8140, 0x2, 0x0, 0x4, 0xca1, 0xb5}, r4, 0x4, r1, 0x8) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) futimesat(r1, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0)={{r2, r3/1000+10000}, {r5, r6/1000+10000}}) unshare(0x8000000) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0xdc, 0x40}, 0x341) r8 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8910, &(0x7f0000000080)=@buf={0x0, &(0x7f0000000000)}) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x13, &(0x7f0000000ffc), 0x4) mq_open(&(0x7f00000000c0)='syzkaller0\x00', 0x40, 0x8, &(0x7f0000000100)={0x5, 0x80000000, 0x0, 0xfffffffffffffff9, 0x1, 0xfffffffffffffffd, 0x7fff, 0x200}) socket$inet_tcp(0x2, 0x1, 0x0) r9 = dup3(r8, r7, 0x80000) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r9, 0x84, 0x66, &(0x7f00000002c0)={0x0, 0x8ed6}, &(0x7f0000000300)=0x1) bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) shmget(0xffffffffffffffff, 0x8000, 0x49b, &(0x7f0000ff8000/0x8000)=nil) ioctl$sock_inet_SIOCGIFPFLAGS(r8, 0x8935, &(0x7f0000000080)={'syzkaller0\x00'}) ppoll(&(0x7f0000000780)=[{r1, 0x300}, {r1, 0x8401}], 0x2, &(0x7f00000007c0)={0x77359400}, &(0x7f0000000800)={0x9}, 0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000280)={0x0, 0x0, 0x9}, 0x10) r10 = semget$private(0x0, 0x4, 0x0) semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0x0, 0x1000}], 0x1, &(0x7f0000000080)={0x0, 0x1c9c380}) semctl$IPC_RMID(r10, 0x0, 0x0) 2018/03/29 11:11:46 executing program 1: io_setup(0x3, &(0x7f0000000000)=0x0) accept$unix(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000100)=0x6e) r1 = syz_open_dev$usbmon(&(0x7f0000000200)='/dev/usbmon#\x00', 0x0, 0x0) io_cancel(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0xf, 0x3, 0xffffffffffffffff, &(0x7f0000000140)="940c1f2149747e7734510c34c143183667a187dc4f624f6c2de12452792a6fb529e6bf2a661dc23a844b00925c244a9f2967c0ca9868ee50eacf67a2ad7681d82f5a38cbd6d7641f843fa129e00f701fb01835f497b53672b3e5a3f6838f28aa240bf21eb5e5cbe7804fd307404474ae0242f8dea7a08e0fe9479b06f2795f857f8eec271d35ba7f61a91c87296814189cc1dfc9c659cc5437452a0bd178323c50e8c005ba7fa9519b27965c9f6ffbc7dcaa8e658616cc83188fb131a703222d", 0xc0, 0x5, 0x0, 0x1}, &(0x7f0000000280)) io_getevents(r0, 0x2, 0x8f, &(0x7f0000d83f60)=[{}, {}], &(0x7f00005cfff0)={0x4000000000001, 0x7}) io_getevents(r0, 0x0, 0x5, &(0x7f00000002c0)=[{}, {}, {}, {}, {}], &(0x7f00000003c0)) io_setup(0x7, &(0x7f0000000040)) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/route\x00') ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000440)=0x0) perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x4a, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ef4}, r3, 0x0, r1, 0x1) pread64(r2, &(0x7f0000000000)=""/85, 0xfe42, 0x5d) r4 = memfd_create(&(0x7f0000000240)=':+lo#\x00', 0x0) fdatasync(r4) io_submit(r0, 0x1, &(0x7f0000001280)=[&(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f0000000100)}]) timerfd_create(0x7, 0x80800) io_destroy(r0) setsockopt$llc_int(r1, 0x10c, 0x9, &(0x7f0000000380)=0x3, 0x4) 2018/03/29 11:11:46 executing program 2: io_setup(0x3, &(0x7f0000000000)=0x0) accept$unix(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000100)=0x6e) syz_open_dev$usbmon(&(0x7f00000002c0)='/dev/usbmon#\x00', 0x5, 0x0) io_cancel(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0xf, 0x3, 0xffffffffffffffff, &(0x7f0000000140)="940c1f2149747e7734510c34c143183667a187dc4f624f6c2de12452792a6fb529e6bf2a661dc23a844b00925c244a9f2967c0ca9868ee50eacf67a2ad7681d82f5a38cbd6d7641f843fa129e00f701fb01835f497b53672b3e5a3f6838f28aa240bf21eb5e5cbe7804fd307404474ae0242f8dea7a08e0fe9479b06f2795f857f8eec271d35ba7f61a91c87296814189cc1dfc9c659cc5437452a0bd178323c50e8c005ba7fa9519b27965c9f6ffbc7dcaa8e658616cc83188fb131a703222d", 0xc0, 0x5, 0x0, 0x1}, &(0x7f0000000280)) io_getevents(r0, 0x2, 0x8f, &(0x7f0000d83f60)=[{}, {}], &(0x7f00005cfff0)={0x4000000000001, 0x7}) io_setup(0x7, &(0x7f0000000040)) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/route\x00') ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000440)=0x0) perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x4a, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ef4}, r2, 0x0, 0xffffffffffffffff, 0x1) pread64(r1, &(0x7f0000000000)=""/85, 0xfe42, 0x5d) fdatasync(0xffffffffffffffff) io_submit(r0, 0x1, &(0x7f0000001280)=[&(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000100)}]) timerfd_create(0x7, 0x80800) io_destroy(r0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x9, &(0x7f0000000380)=0x80000001, 0x228) 2018/03/29 11:11:46 executing program 7: io_setup(0x3, &(0x7f0000000000)=0x0) accept$unix(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000100)=0x6e) syz_open_dev$usbmon(&(0x7f0000000200)='/dev/usbmon#\x00', 0x7ff, 0x0) io_cancel(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0xf, 0x3, 0xffffffffffffffff, &(0x7f0000000140)="940c1f2149747e7734510c34c143183667a187dc4f624f6c2de12452792a6fb529e6bf2a661dc23a844b00925c244a9f2967c0ca9868ee50eacf67a2ad7681d82f5a38cbd6d7641f843fa129e00f701fb01835f497b53672b3e5a3f6838f28aa240bf21eb5e5cbe7804fd307404474ae0242f8dea7a08e0fe9479b06f2795f857f8eec271d35ba7f61a91c87296814189cc1dfc9c659cc5437452a0bd178323c50e8c005ba7fa9519b27965c9f6ffbc7dcaa8e658616cc83188fb131a703222d", 0xc0, 0x5, 0x0, 0x1}, &(0x7f0000000280)) io_getevents(r0, 0x2, 0x8f, &(0x7f0000d83f60)=[{}, {}], &(0x7f00005cfff0)={0x4000000000001, 0x7}) io_getevents(r0, 0x0, 0x5, &(0x7f00000002c0)=[{}, {}, {}, {}, {}], &(0x7f00000003c0)) io_setup(0x7, &(0x7f0000000040)) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/route\x00') ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000440)=0x0) perf_event_open(&(0x7f0000aaa000)={0x0, 0x70, 0x4a, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ef4}, r2, 0x0, 0xffffffffffffffff, 0x1) pread64(r1, &(0x7f0000000000)=""/85, 0xfe42, 0x5d) r3 = memfd_create(&(0x7f0000000240)=':+lo#\x00', 0x0) fdatasync(r3) io_submit(r0, 0x1, &(0x7f0000001280)=[&(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000000100)}]) futimesat(r1, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)={{}, {0x0, 0x7530}}) ioctl$TIOCGSID(r3, 0x5429, &(0x7f0000000500)) timerfd_create(0x7, 0x80800) io_destroy(r0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x9, &(0x7f0000000380)=0x3, 0x4) 2018/03/29 11:11:46 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) readv(r0, &(0x7f0000001480)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x3}) r1 = syz_open_pts(r0, 0x2) r2 = dup3(r1, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000c34fff), 0xffffff0b) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001600)='roup\x00\x00\x00\x00\x00', 0x200002, 0x0) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000001640)={0x0, 0x1f}, &(0x7f0000001680)=0x8) setsockopt$inet_sctp_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f00000016c0)=@assoc_id=r4, 0x4) preadv(r3, &(0x7f00000004c0)=[{&(0x7f0000000480)=""/21, 0x15}], 0x1, 0x0) clone(0x2040000, &(0x7f0000000200)="bcd79213eb0e7a0183010f0f386117a584ab01eda811ca", &(0x7f0000000240), &(0x7f00000014c0), &(0x7f0000001500)="a5b0bb373e8f6d986d216878c76dcb3793740d92c630f80745392fb6f63812932f3343323576c14e561dec710ac09679e7db3d4c30e5d241438f4441cae3c4f6505f0e0fcd544332bedebd6bc54e74e57b2aa836ed9930739c2128116c3148f2bfad5c28ccc9fbb54c023de9473ff62a0dfb4acfa9d9692d0f29edfc7d615fd6971649c31b9836f9072f3610f303436013427585ea89d3bd128c068523dfa90f16fa7eecea92ec542a00f4f6fd306b9e8142aa26ddc36a197fd9f05d7d1f6a14f2bdd2c262119e1b28365c02765c28f5f304210676e571ce951331bde88c2570e913c1106fcbff732fed228141176c93c447105d97e66c") fchdir(0xffffffffffffffff) mkdir(&(0x7f0000000280)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f", 0xfffffffffffffffc) fchmod(r2, 0x0) splice(r3, &(0x7f0000000400), 0xffffffffffffffff, &(0x7f0000000440), 0x9, 0x2) rename(&(0x7f0000001e00)='./file0\x00', &(0x7f0000000100)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f") mkdir(&(0x7f000000e000)='./control\x00', 0x0) r5 = open(&(0x7f0000000000)='./control\x00', 0x0, 0x0) renameat2(r5, &(0x7f0000000040)='./file0\x00', r5, &(0x7f0000000080)='./control\x00', 0x2) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r5, 0x84, 0x76, &(0x7f0000000300)={0x0, 0x80}, &(0x7f0000000340)=0x8) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r5, 0x84, 0x76, &(0x7f0000000380)={r6, 0x5}, &(0x7f00000003c0)=0x8) mknodat(r5, &(0x7f000003f000)='./control\x00', 0x0, 0x0) symlink(&(0x7f0000000180)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f", &(0x7f00000000c0)='./file0\x00') perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(r5, &(0x7f0000010000)='./control\x00', &(0x7f000003f000), &(0x7f0000001fe8), 0x0) 2018/03/29 11:11:46 executing program 5: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) mkdir(&(0x7f0000000000)='./file1\x00', 0x0) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000811ffa)='bdev\x00', 0x0, &(0x7f0000444000)) mount(&(0x7f0000fb6000)='./file0\x00', &(0x7f0000d78000)='.', &(0x7f0000fdb000)='ubifs\x00', 0x1003, 0x0) r0 = syz_open_dev$amidi(&(0x7f0000000240)='/dev/amidi#\x00', 0x1, 0x200080) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000280)=0x1, 0x4) mount(&(0x7f00002b9ff8)='./file0\x00', &(0x7f0000cbeff8)='./file0\x00', &(0x7f00005f7ffa)='ramfs\x00', 0x80000, &(0x7f000002f000)) mount(&(0x7f0000000040)='.', &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0)='binfmt_misc\x00', 0x0, &(0x7f0000000100)) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) mount(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./file1\x00', &(0x7f0000000200)='anon_inodefs\x00', 0x2000, &(0x7f0000000240)) mount(&(0x7f0000adcff8)='./file0\x00', &(0x7f0000e08fff)='.', &(0x7f00005e9000)='cifs\x00', 0x2000, &(0x7f0000ad5000)) r1 = syz_open_dev$usbmon(&(0x7f0000000100)='/dev/usbmon#\x00', 0x80000000, 0x101440) ioctl$RNDGETENTCNT(r1, 0x80045200, &(0x7f0000000140)) 2018/03/29 11:11:46 executing program 1: io_setup(0x3, &(0x7f0000000000)=0x0) accept$unix(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000100)=0x6e) r1 = syz_open_dev$usbmon(&(0x7f0000000200)='/dev/usbmon#\x00', 0x0, 0x0) io_cancel(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0xf, 0x3, 0xffffffffffffffff, &(0x7f0000000140)="940c1f2149747e7734510c34c143183667a187dc4f624f6c2de12452792a6fb529e6bf2a661dc23a844b00925c244a9f2967c0ca9868ee50eacf67a2ad7681d82f5a38cbd6d7641f843fa129e00f701fb01835f497b53672b3e5a3f6838f28aa240bf21eb5e5cbe7804fd307404474ae0242f8dea7a08e0fe9479b06f2795f857f8eec271d35ba7f61a91c87296814189cc1dfc9c659cc5437452a0bd178323c50e8c005ba7fa9519b27965c9f6ffbc7dcaa8e658616cc83188fb131a703222d", 0xc0, 0x5, 0x0, 0x1}, &(0x7f0000000280)) io_getevents(r0, 0x2, 0x8f, &(0x7f0000d83f60)=[{}, {}], &(0x7f00005cfff0)={0x4000000000001, 0x7}) io_getevents(r0, 0x0, 0x5, &(0x7f00000002c0)=[{}, {}, {}, {}, {}], &(0x7f00000003c0)) io_setup(0x7, &(0x7f0000000040)) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/route\x00') ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000440)=0x0) perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x4a, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ef4}, r3, 0x0, r1, 0x1) pread64(r2, &(0x7f0000000000)=""/85, 0xfe42, 0x5d) r4 = memfd_create(&(0x7f0000000240)=':+lo#\x00', 0x0) fdatasync(r4) io_submit(r0, 0x1, &(0x7f0000001280)=[&(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f0000000100)}]) timerfd_create(0x7, 0x80800) io_destroy(r0) setsockopt$llc_int(r1, 0x10c, 0x9, &(0x7f0000000380)=0x3, 0x4) 2018/03/29 11:11:46 executing program 2: io_setup(0x3, &(0x7f0000000000)=0x0) r1 = accept$unix(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000100)=0x6e) r2 = syz_open_dev$usbmon(&(0x7f0000000200)='/dev/usbmon#\x00', 0x7ff, 0xfffffffffffffffc) getsockopt$inet6_mreq(r2, 0x29, 0x1f, &(0x7f0000000300)={@loopback}, &(0x7f0000000340)=0x14) io_cancel(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0xf, 0x3, 0xffffffffffffffff, &(0x7f0000000140)="940c1f2149747e7734510c34c143183667a187dc4f624f6c2de12452792a6fb529e6bf2a661dc23a844b00925c244a9f2967c0ca9868ee50eacf67a2ad7681d82f5a38cbd6d7641f843fa129e00f701fb01835f497b53672b3e5a3f6838f28aa240bf21eb5e5cbe7804fd307404474ae0242f8dea7a08e0fe9479b06f2795f857f8eec271d35ba7f61a91c87296814189cc1dfc9c659cc5437452a0bd178323c50e8c005ba7fa9519b27965c9f6ffbc7dcaa8e658616cc83188fb131a703222d", 0xc0, 0x5, 0x0, 0x1}, &(0x7f0000000280)) r3 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f00000001c0)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffffe) r4 = add_key$keyring(&(0x7f0000eac000)='keyring\x00', &(0x7f0000000240)={0x73, 0x79, 0x7a}, 0x0, 0x0, r3) keyctl$setperm(0x5, r4, 0x0) keyctl$unlink(0x9, r4, r3) getsockopt$inet_tcp_buf(r2, 0x6, 0x2b, &(0x7f0000000500)=""/179, &(0x7f00000003c0)=0xb3) io_getevents(r0, 0x2, 0x8f, &(0x7f0000d83f60)=[{}, {}], &(0x7f00005cfff0)={0x4000000000001, 0x7}) io_setup(0x7, &(0x7f0000000040)) r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/route\x00') ioctl$TIOCGPGRP(r5, 0x540f, &(0x7f0000000440)=0x0) perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x4a, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ef4}, r6, 0x0, 0xffffffffffffffff, 0x1) pread64(r1, &(0x7f0000000480)=""/85, 0x43, 0x0) r7 = memfd_create(&(0x7f0000000240)=':+lo#\x00', 0x0) fdatasync(r7) io_submit(r0, 0x1, &(0x7f0000001280)=[&(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, 0x0, r7, &(0x7f0000000100)}]) timerfd_create(0x7, 0x80800) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r5, 0x84, 0x4, &(0x7f00000005c0), &(0x7f0000000600)=0x4) io_destroy(r0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x9, &(0x7f0000000380)=0x3, 0x4) io_setup(0x6, &(0x7f00000002c0)) 2018/03/29 11:11:47 executing program 3: io_setup(0x3, &(0x7f0000000000)=0x0) accept$unix(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000100)=0x6e) r1 = syz_open_dev$usbmon(&(0x7f0000000200)='/dev/usbmon#\x00', 0x7ff, 0x0) io_cancel(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0xf, 0x0, 0xffffffffffffffff, &(0x7f0000000140)="940c1f2149747e7734510c34c143183667a187dc4f624f6c2de12452792a6fb529e6bf2a661dc23a844b00925c244a9f2967c0ca9868ee50eacf67a2ad7681d82f5a38cbd6d7641f843fa129e00f701fb01835f497b53672b3e5a3f6838f28aa240bf21eb5e5cbe7804fd307404474ae0242f8dea7a08e0fe9479b06f2795f857f8eec271d35ba7f61a91c87296814189cc1dfc9c659cc5437452a0bd178323c50e8c005ba7fa9519b27965c9f6ffbc7dcaa8e658616cc83188fb131a703222d", 0xc0, 0x5, 0x0, 0x1, r1}, &(0x7f0000000280)) io_getevents(r0, 0x2, 0x8f, &(0x7f0000d83f60)=[{}, {}], &(0x7f00005cfff0)={0x4000000000001, 0x7}) io_getevents(r0, 0x0, 0x5, &(0x7f00000002c0)=[{}, {}, {}, {}, {}], &(0x7f00000003c0)) io_setup(0x7, &(0x7f0000000040)) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/route\x00') ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000440)=0x0) perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x4a, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ef4}, r3, 0x0, r1, 0x1) pread64(r2, &(0x7f0000000000)=""/85, 0xfe42, 0x5d) r4 = memfd_create(&(0x7f0000000240)=':+lo#\x00', 0x0) fdatasync(r4) io_submit(r0, 0x1, &(0x7f0000001280)=[&(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f0000000100)}]) timerfd_create(0x7, 0x80800) io_destroy(r0) setsockopt$llc_int(r1, 0x10c, 0x0, &(0x7f0000000380)=0x3, 0x4) 2018/03/29 11:11:47 executing program 2: io_setup(0x3, &(0x7f0000000000)=0x0) accept$unix(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000100)=0x6e) syz_open_dev$usbmon(&(0x7f0000000340)='/dev/usbmon#\x00', 0x800, 0x200002) io_cancel(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0xf, 0x3, 0xffffffffffffffff, &(0x7f0000000140)="940c1f2149747e7734510c34c143183667a187dc4f624f6c2de12452792a6fb529e6bf2a661dc23a844b00925c244a9f2967c0ca9868ee50eacf67a2ad7681d82f5a38cbd6d7641f843fa129e00f701fb01835f497b53672b3e5a3f6838f28aa240bf21eb5e5cbe7804fd307404474ae0242f8dea7a08e0fe9479b06f2795f857f8eec271d35ba7f61a91c87296814189cc1dfc9c659cc5437452a0bd178323c50e8c005ba7fa9519b27965c9f6ffbc7dcaa8e658616cc83188fb131a703222d", 0xc0, 0x5, 0x0, 0x1}, &(0x7f0000000280)) io_getevents(r0, 0x2, 0x8f, &(0x7f0000d83f60)=[{}, {}], &(0x7f00005cfff0)={0x4000000000001, 0x7}) io_setup(0x7, &(0x7f0000000040)) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/route\x00') ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000440)=0x0) perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x4a, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ef4}, r2, 0x0, 0xffffffffffffffff, 0x1) pread64(r1, &(0x7f0000000000)=""/85, 0xfe42, 0x5d) r3 = memfd_create(&(0x7f0000000240)=':+lo#\x00', 0x0) fdatasync(r3) io_setup(0x7fff, &(0x7f0000000200)) io_submit(r0, 0x1, &(0x7f0000001280)=[&(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000000100)}]) timerfd_create(0x7, 0x80800) io_destroy(r0) socket$inet6(0xa, 0x80007, 0x7) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x9, &(0x7f0000000380)=0x3, 0x4) 2018/03/29 11:11:47 executing program 0: r0 = perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x4a, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffff9c, 0xc00caee0, &(0x7f0000000180)={0x0, r0, 0x1}) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) fcntl$getownex(r0, 0x10, &(0x7f0000000400)={0x0, 0x0}) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0xffff, 0xe3, 0x6, 0x4, 0x0, 0x7, 0x0, 0x2, 0x10001, 0x1, 0x7, 0x8, 0x100, 0x4, 0x0, 0x7f, 0x20, 0x0, 0x4, 0x5, 0x90a4, 0x7, 0x2, 0x73, 0x8, 0x7, 0x4, 0x7e0, 0x101, 0x0, 0x2, 0x0, 0x0, 0x9, 0xfffffffffffffff9, 0x9, 0x0, 0x4, 0x0, @perf_config_ext={0x20, 0x1}, 0x8140, 0x2, 0x0, 0x4, 0xca1, 0xb5}, r4, 0x4, r1, 0x8) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) futimesat(r1, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0)={{r2, r3/1000+10000}, {r5, r6/1000+10000}}) unshare(0x8000000) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0xdc, 0x40}, 0x341) r8 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8910, &(0x7f0000000080)=@buf={0x0, &(0x7f0000000000)}) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x13, &(0x7f0000000ffc), 0x4) mq_open(&(0x7f00000000c0)='syzkaller0\x00', 0x40, 0x8, &(0x7f0000000100)={0x5, 0x80000000, 0x0, 0xfffffffffffffff9, 0x1, 0xfffffffffffffffd, 0x7fff, 0x200}) socket$inet_tcp(0x2, 0x1, 0x0) r9 = dup3(r8, r7, 0x80000) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r9, 0x84, 0x66, &(0x7f00000002c0)={0x0, 0x8ed6}, &(0x7f0000000300)=0x1) bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) shmget(0xffffffffffffffff, 0x8000, 0x49b, &(0x7f0000ff8000/0x8000)=nil) ioctl$sock_inet_SIOCGIFPFLAGS(r8, 0x8935, &(0x7f0000000080)={'syzkaller0\x00'}) ppoll(&(0x7f0000000780)=[{r1, 0x300}, {r1, 0x8401}], 0x2, &(0x7f00000007c0)={0x77359400}, &(0x7f0000000800)={0x9}, 0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000280)={0x0, 0x0, 0x9}, 0x10) r10 = semget$private(0x0, 0x4, 0x0) semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0x0, 0x1000}], 0x1, &(0x7f0000000080)={0x0, 0x1c9c380}) semctl$IPC_RMID(r10, 0x0, 0x0) 2018/03/29 11:11:47 executing program 7: io_setup(0x3, &(0x7f0000000000)=0x0) accept$unix(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000100)=0x6e) r1 = syz_open_dev$usbmon(&(0x7f0000000200)='/dev/usbmon#\x00', 0x7ff, 0x0) io_cancel(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0xf, 0x3, 0xffffffffffffffff, &(0x7f0000000140)="940c1f2149747e7734510c34c143183667a187dc4f624f6c2de12452792a6fb529e6bf2a661dc23a844b00925c244a9f2967c0ca9868ee50eacf67a2ad7681d82f5a38cbd6d7641f843fa129e00f701fb01835f497b53672b3e5a3f6838f28aa240bf21eb5e5cbe7804fd307404474ae0242f8dea7a08e0fe9479b06f2795f857f8eec271d35ba7f61a91c87296814189cc1dfc9c659cc5437452a0bd178323c50e8c005ba7fa9519b27965c9f6ffbc7dcaa8e658616cc83188fb131a703222d", 0xc0, 0x5, 0x0, 0x1}, &(0x7f0000000280)) write$cgroup_int(r1, &(0x7f0000000500)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00'], 0x5) io_getevents(r0, 0x2, 0x8f, &(0x7f0000d83f60)=[{}, {}], &(0x7f00005cfff0)={0x4000000000001, 0x7}) io_getevents(r0, 0x0, 0x5, &(0x7f00000002c0)=[{}, {}, {}, {}, {}], &(0x7f00000003c0)) io_setup(0x7, &(0x7f0000000040)) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/route\x00') ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000440)=0x0) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f00000004c0)) perf_event_open(&(0x7f0000aaa000)={0x0, 0x70, 0x4a, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ef4}, r3, 0x0, 0xffffffffffffffff, 0x1) pread64(r2, &(0x7f0000000000)=""/85, 0xfe42, 0x5d) r4 = memfd_create(&(0x7f0000000240)=':+lo#\x00', 0x0) fdatasync(r4) io_submit(r0, 0x1, &(0x7f0000001280)=[&(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f0000000100)}]) ioctl$VT_RESIZE(r4, 0x5609, &(0x7f0000000480)={0x7fffffff, 0x8, 0x80000000}) timerfd_create(0x7, 0x80800) io_destroy(r0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0xf, &(0x7f0000000540)=0x2, 0x3) 2018/03/29 11:11:47 executing program 5: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) mkdir(&(0x7f0000000000)='./file1\x00', 0x0) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000811ffa)='bdev\x00', 0x0, &(0x7f0000444000)) mount(&(0x7f0000fb6000)='./file0\x00', &(0x7f0000d78000)='.', &(0x7f0000fdb000)='ubifs\x00', 0x1003, 0x0) mount(&(0x7f00002b9ff8)='./file0\x00', &(0x7f0000cbeff8)='./file0\x00', &(0x7f00005f7ffa)='ramfs\x00', 0x80000, &(0x7f000002f000)) mount(&(0x7f0000000040)='.', &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0)='binfmt_misc\x00', 0x0, &(0x7f0000000100)) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) r0 = add_key$user(&(0x7f0000000100)='user\x00', &(0x7f0000000140)={0x73, 0x79, 0x7a, 0x1}, &(0x7f0000000240)="25f02c027d3c978570af4be19b5e3472d93015dbee767fbecd1f90e3f1616495d7864f695e1976e078036ac4d3d1a42826a6c79ebfdd5393388f6a52f25ba7d0", 0x40, 0xfffffffffffffff9) r1 = add_key(&(0x7f0000000280)='cifs.spnego\x00', &(0x7f00000002c0)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000300)="2073b573", 0x4, 0xfffffffffffffffc) keyctl$reject(0x13, r0, 0x2540000000000000, 0x1, r1) mount(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./file1\x00', &(0x7f0000000200)='anon_inodefs\x00', 0x2000, &(0x7f0000000240)) mount(&(0x7f0000adcff8)='./file0\x00', &(0x7f0000e08fff)='.', &(0x7f00005e9000)='cifs\x00', 0x2000, &(0x7f0000ad5000)) 2018/03/29 11:11:47 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) readv(r0, &(0x7f0000001480)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000140)={0x0, 0x0, 0x3, 0x0, 0x6, 0x0, 0x0, 0x5, 0x0, 0x0, 0x9038}) r1 = syz_open_pts(r0, 0x2) r2 = dup3(r1, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000c34fff), 0xffffff0b) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0) preadv(r3, &(0x7f00000004c0)=[{&(0x7f0000000480)=""/21, 0x15}], 0x1, 0x0) fchdir(0xffffffffffffffff) mkdir(&(0x7f0000000280)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f", 0xfffffffffffffffc) fchmod(r2, 0x0) splice(r3, &(0x7f0000000400), 0xffffffffffffffff, &(0x7f0000000440), 0x9, 0x2) rename(&(0x7f0000001e00)='./file0\x00', &(0x7f0000000100)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f") mkdir(&(0x7f000000e000)='./control\x00', 0x0) r4 = open(&(0x7f0000000240)='./file0/file0\x00', 0x0, 0x0) renameat2(r4, &(0x7f0000000040)='./file0\x00', r4, &(0x7f0000000080)='./control\x00', 0x2) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000300)={0x0, 0x80}, &(0x7f0000000340)=0x8) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000380)={r5, 0x5}, &(0x7f00000003c0)=0x8) mknodat(r4, &(0x7f000003f000)='./control\x00', 0x0, 0x0) symlink(&(0x7f0000000180)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f", &(0x7f00000000c0)='./file0\x00') perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(r4, &(0x7f0000000200)='./control\x00', &(0x7f000003f000), &(0x7f0000001fe8), 0x1) 2018/03/29 11:11:47 executing program 1: io_setup(0x3, &(0x7f0000000000)=0x0) accept$unix(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000100)=0x6e) r1 = syz_open_dev$usbmon(&(0x7f0000000200)='/dev/usbmon#\x00', 0x0, 0x0) io_cancel(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0xf, 0x3, 0xffffffffffffffff, &(0x7f0000000140)="940c1f2149747e7734510c34c143183667a187dc4f624f6c2de12452792a6fb529e6bf2a661dc23a844b00925c244a9f2967c0ca9868ee50eacf67a2ad7681d82f5a38cbd6d7641f843fa129e00f701fb01835f497b53672b3e5a3f6838f28aa240bf21eb5e5cbe7804fd307404474ae0242f8dea7a08e0fe9479b06f2795f857f8eec271d35ba7f61a91c87296814189cc1dfc9c659cc5437452a0bd178323c50e8c005ba7fa9519b27965c9f6ffbc7dcaa8e658616cc83188fb131a703222d", 0xc0, 0x5, 0x0, 0x1}, &(0x7f0000000280)) io_getevents(r0, 0x2, 0x8f, &(0x7f0000d83f60)=[{}, {}], &(0x7f00005cfff0)={0x4000000000001, 0x7}) io_getevents(r0, 0x0, 0x5, &(0x7f00000002c0)=[{}, {}, {}, {}, {}], &(0x7f00000003c0)) io_setup(0x7, &(0x7f0000000040)) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/route\x00') ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000440)=0x0) perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x4a, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ef4}, r3, 0x0, r1, 0x1) pread64(r2, &(0x7f0000000000)=""/85, 0xfe42, 0x5d) r4 = memfd_create(&(0x7f0000000240)=':+lo#\x00', 0x0) fdatasync(r4) io_submit(r0, 0x1, &(0x7f0000001280)=[&(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f0000000100)}]) timerfd_create(0x7, 0x80800) io_destroy(r0) setsockopt$llc_int(r1, 0x10c, 0x9, &(0x7f0000000380)=0x3, 0x4) 2018/03/29 11:11:47 executing program 6: openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x0, 0x0) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, &(0x7f0000000340)=0x1) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f000051cff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000943ffc)=0xa35) read(r0, &(0x7f00003fefff)=""/1, 0x1) r1 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000029000)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r0, &(0x7f0000dcdff0)=[{&(0x7f0000cd8000)=""/1, 0x1}], 0x1) ioctl$int_in(r2, 0x5452, &(0x7f0000b28000)) write$cgroup_type(0xffffffffffffffff, &(0x7f00000002c0)='threaded\x00', 0x9) syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x0, 0x802) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000fb9000)) fcntl$setsig(r2, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r3}], 0x1, 0xfffffffffffffff8) read$eventfd(0xffffffffffffffff, &(0x7f0000000040), 0x8) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)) r4 = dup2(r2, r3) fcntl$setown(r4, 0x8, r1) ptrace$cont(0xffffffffffffffff, r1, 0x0, 0x8) tkill(r1, 0x16) r5 = gettid() process_vm_readv(r5, &(0x7f0000001880)=[{&(0x7f0000000680)=""/198, 0xc6}, {&(0x7f0000000780)=""/247, 0xf7}, {&(0x7f0000000380)=""/12, 0xc}, {&(0x7f00000003c0)=""/6, 0x6}, {&(0x7f0000000400)=""/14, 0xe}], 0x5, &(0x7f00000019c0)=[{&(0x7f0000001900)=""/41, 0x29}, {&(0x7f0000001940)=""/112, 0x70}], 0x2, 0x0) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f0000000240)={{{@in6}}, {{@in=@local}, 0x0, @in=@local}}, &(0x7f0000000100)=0xe8) 2018/03/29 11:11:47 executing program 5: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) mkdir(&(0x7f0000000000)='./file1\x00', 0x0) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000811ffa)='bdev\x00', 0x0, &(0x7f0000444000)) mount(&(0x7f0000fb6000)='./file0\x00', &(0x7f0000d78000)='.', &(0x7f0000fdb000)='ubifs\x00', 0x1003, 0x0) mount(&(0x7f00002b9ff8)='./file0\x00', &(0x7f0000cbeff8)='./file0\x00', &(0x7f00005f7ffa)='ramfs\x00', 0x80000, &(0x7f000002f000)) mount(&(0x7f0000000040)='.', &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0)='binfmt_misc\x00', 0x0, &(0x7f0000000100)) mount(&(0x7f0000000140)='./file0\x00', &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) mount(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./file1\x00', &(0x7f0000000200)='anon_inodefs\x00', 0x2000, &(0x7f0000000240)) mount(&(0x7f0000adcff8)='./file0\x00', &(0x7f0000e08fff)='.', &(0x7f00005e9000)='cifs\x00', 0x2000, &(0x7f0000ad5000)) 2018/03/29 11:11:47 executing program 1: io_setup(0x3, &(0x7f0000000000)=0x0) accept$unix(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000100)=0x6e) r1 = syz_open_dev$usbmon(&(0x7f0000000200)='/dev/usbmon#\x00', 0x0, 0x0) io_cancel(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0xf, 0x3, 0xffffffffffffffff, &(0x7f0000000140)="940c1f2149747e7734510c34c143183667a187dc4f624f6c2de12452792a6fb529e6bf2a661dc23a844b00925c244a9f2967c0ca9868ee50eacf67a2ad7681d82f5a38cbd6d7641f843fa129e00f701fb01835f497b53672b3e5a3f6838f28aa240bf21eb5e5cbe7804fd307404474ae0242f8dea7a08e0fe9479b06f2795f857f8eec271d35ba7f61a91c87296814189cc1dfc9c659cc5437452a0bd178323c50e8c005ba7fa9519b27965c9f6ffbc7dcaa8e658616cc83188fb131a703222d", 0xc0, 0x5, 0x0, 0x1}, &(0x7f0000000280)) io_getevents(r0, 0x2, 0x8f, &(0x7f0000d83f60)=[{}, {}], &(0x7f00005cfff0)={0x4000000000001, 0x7}) io_getevents(r0, 0x0, 0x5, &(0x7f00000002c0)=[{}, {}, {}, {}, {}], &(0x7f00000003c0)) io_setup(0x7, &(0x7f0000000040)) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/route\x00') ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000440)=0x0) perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x4a, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ef4}, r3, 0x0, r1, 0x1) pread64(r2, &(0x7f0000000000)=""/85, 0xfe42, 0x5d) r4 = memfd_create(&(0x7f0000000240)=':+lo#\x00', 0x0) fdatasync(r4) io_submit(r0, 0x1, &(0x7f0000001280)=[&(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f0000000100)}]) timerfd_create(0x7, 0x80800) io_destroy(r0) setsockopt$llc_int(r1, 0x10c, 0x9, &(0x7f0000000380)=0x3, 0x4) 2018/03/29 11:11:47 executing program 3: io_setup(0x3, &(0x7f0000000000)=0x0) accept$unix(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000100)=0x6e) r1 = syz_open_dev$usbmon(&(0x7f0000000200)='/dev/usbmon#\x00', 0x7ff, 0x0) io_cancel(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0xf, 0x0, 0xffffffffffffffff, &(0x7f0000000140)="940c1f2149747e7734510c34c143183667a187dc4f624f6c2de12452792a6fb529e6bf2a661dc23a844b00925c244a9f2967c0ca9868ee50eacf67a2ad7681d82f5a38cbd6d7641f843fa129e00f701fb01835f497b53672b3e5a3f6838f28aa240bf21eb5e5cbe7804fd307404474ae0242f8dea7a08e0fe9479b06f2795f857f8eec271d35ba7f61a91c87296814189cc1dfc9c659cc5437452a0bd178323c50e8c005ba7fa9519b27965c9f6ffbc7dcaa8e658616cc83188fb131a703222d", 0xc0, 0x5, 0x0, 0x1, r1}, &(0x7f0000000280)) io_getevents(r0, 0x2, 0x8f, &(0x7f0000d83f60)=[{}, {}], &(0x7f00005cfff0)={0x4000000000001, 0x7}) io_getevents(r0, 0x0, 0x5, &(0x7f00000002c0)=[{}, {}, {}, {}, {}], &(0x7f00000003c0)) io_setup(0x7, &(0x7f0000000040)) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/route\x00') ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000440)=0x0) perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x4a, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ef4}, r3, 0x0, r1, 0x1) pread64(r2, &(0x7f0000000000)=""/85, 0xfe42, 0x5d) r4 = memfd_create(&(0x7f0000000240)=':+lo#\x00', 0x0) fdatasync(r4) io_submit(r0, 0x1, &(0x7f0000001280)=[&(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f0000000100)}]) timerfd_create(0x7, 0x80800) io_destroy(r0) setsockopt$llc_int(r1, 0x10c, 0x0, &(0x7f0000000380)=0x3, 0x4) 2018/03/29 11:11:47 executing program 0: r0 = perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x4a, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffff9c, 0xc00caee0, &(0x7f0000000180)={0x0, r0, 0x1}) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) fcntl$getownex(r0, 0x10, &(0x7f0000000400)={0x0, 0x0}) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0xffff, 0xe3, 0x6, 0x4, 0x0, 0x7, 0x0, 0x2, 0x10001, 0x1, 0x7, 0x8, 0x100, 0x4, 0x0, 0x7f, 0x20, 0x0, 0x4, 0x5, 0x90a4, 0x7, 0x2, 0x73, 0x8, 0x7, 0x4, 0x7e0, 0x101, 0x0, 0x2, 0x0, 0x0, 0x9, 0xfffffffffffffff9, 0x9, 0x0, 0x4, 0x0, @perf_config_ext={0x20, 0x1}, 0x8140, 0x2, 0x0, 0x4, 0xca1, 0xb5}, r4, 0x4, r1, 0x8) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) futimesat(r1, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0)={{r2, r3/1000+10000}, {r5, r6/1000+10000}}) unshare(0x8000000) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0xdc, 0x40}, 0x341) r8 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8910, &(0x7f0000000080)=@buf={0x0, &(0x7f0000000000)}) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x13, &(0x7f0000000ffc), 0x4) mq_open(&(0x7f00000000c0)='syzkaller0\x00', 0x40, 0x8, &(0x7f0000000100)={0x5, 0x80000000, 0x0, 0xfffffffffffffff9, 0x1, 0xfffffffffffffffd, 0x7fff, 0x200}) socket$inet_tcp(0x2, 0x1, 0x0) r9 = dup3(r8, r7, 0x80000) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r9, 0x84, 0x66, &(0x7f00000002c0)={0x0, 0x8ed6}, &(0x7f0000000300)=0x1) bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) shmget(0xffffffffffffffff, 0x8000, 0x49b, &(0x7f0000ff8000/0x8000)=nil) ioctl$sock_inet_SIOCGIFPFLAGS(r8, 0x8935, &(0x7f0000000080)={'syzkaller0\x00'}) ppoll(&(0x7f0000000780)=[{r1, 0x300}, {r1, 0x8401}], 0x2, &(0x7f00000007c0)={0x77359400}, &(0x7f0000000800)={0x9}, 0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000280)={0x0, 0x0, 0x9}, 0x10) r10 = semget$private(0x0, 0x4, 0x0) semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0x0, 0x1000}], 0x1, &(0x7f0000000080)={0x0, 0x1c9c380}) semctl$IPC_RMID(r10, 0x0, 0x0) 2018/03/29 11:11:47 executing program 7: io_setup(0x3, &(0x7f0000000000)=0x0) accept$unix(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000100)=0x6e) syz_open_dev$usbmon(&(0x7f0000000200)='/dev/usbmon#\x00', 0x7ff, 0x0) io_cancel(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0xf, 0x3, 0xffffffffffffffff, &(0x7f0000000140)="940c1f2149747e7734510c34c143183667a187dc4f624f6c2de12452792a6fb529e6bf2a661dc23a844b00925c244a9f2967c0ca9868ee50eacf67a2ad7681d82f5a38cbd6d7641f843fa129e00f701fb01835f497b53672b3e5a3f6838f28aa240bf21eb5e5cbe7804fd307404474ae0242f8dea7a08e0fe9479b06f2795f857f8eec271d35ba7f61a91c87296814189cc1dfc9c659cc5437452a0bd178323c50e8c005ba7fa9519b27965c9f6ffbc7dcaa8e658616cc83188fb131a703222d", 0xc0, 0x5, 0x0, 0x1}, &(0x7f0000000280)) io_getevents(r0, 0x2, 0x8f, &(0x7f0000d83f60)=[{}, {}], &(0x7f00005cfff0)={0x4000000000001, 0x7}) io_getevents(r0, 0x0, 0x5, &(0x7f00000002c0)=[{}, {}, {}, {}, {}], &(0x7f00000003c0)) io_setup(0x7, &(0x7f0000000040)) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/route\x00') ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000440)=0x0) perf_event_open(&(0x7f0000aaa000)={0x0, 0x70, 0x4a, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ef4}, r2, 0x0, 0xffffffffffffffff, 0x1) pread64(r1, &(0x7f0000000000)=""/85, 0xfe42, 0x5d) r3 = memfd_create(&(0x7f0000000240)=':+lo#\x00', 0x0) getpeername$packet(r3, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f00000004c0)=0x14) fdatasync(r3) io_submit(r0, 0x1, &(0x7f0000001280)=[&(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000000100)}]) timerfd_create(0x7, 0x80800) io_destroy(r0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x9, &(0x7f0000000380)=0x3, 0x4) 2018/03/29 11:11:47 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) readv(r0, &(0x7f0000001480)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x3}) r1 = syz_open_pts(r0, 0x2) r2 = dup3(r1, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000c34fff), 0xffffff0b) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0) preadv(r3, &(0x7f00000004c0)=[{&(0x7f0000000480)=""/21, 0x15}], 0x1, 0x0) socket$kcm(0x29, 0x10000000005, 0x0) fchdir(0xffffffffffffffff) mkdir(&(0x7f0000000280)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f", 0xfffffffffffffffc) fchmod(r2, 0x0) ioctl$TUNSETFILTEREBPF(r3, 0x800454e1, &(0x7f0000000200)=r2) splice(r3, &(0x7f0000000400), 0xffffffffffffffff, &(0x7f0000000440), 0x9, 0x2) rename(&(0x7f0000001e00)='./file0\x00', &(0x7f0000000100)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f") mkdir(&(0x7f000000e000)='./control\x00', 0x0) r4 = open(&(0x7f0000000000)='./control\x00', 0x0, 0x0) renameat2(r4, &(0x7f0000000040)='./file0\x00', r4, &(0x7f0000000080)='./control\x00', 0x2) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000300)={0x0, 0x80}, &(0x7f0000000340)=0x8) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000380)={r5, 0x5}, &(0x7f00000003c0)=0x8) mknodat(r4, &(0x7f000003f000)='./control\x00', 0x0, 0x0) symlink(&(0x7f0000000180)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f", &(0x7f00000000c0)='./file0\x00') perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(r4, &(0x7f0000010000)='./control\x00', &(0x7f000003f000), &(0x7f0000001fe8), 0x0) 2018/03/29 11:11:47 executing program 5: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) mkdir(&(0x7f0000000000)='./file1\x00', 0x0) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000811ffa)='bdev\x00', 0x0, &(0x7f0000444000)) mount(&(0x7f0000fb6000)='./file0\x00', &(0x7f0000d78000)='.', &(0x7f0000fdb000)='ubifs\x00', 0x1003, 0x0) mount(&(0x7f00002b9ff8)='./file0\x00', &(0x7f0000cbeff8)='./file0\x00', &(0x7f00005f7ffa)='ramfs\x00', 0x80000, &(0x7f000002f000)) mount(&(0x7f0000000040)='.', &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0)='binfmt_misc\x00', 0x0, &(0x7f0000000100)) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) mount(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./file1\x00', &(0x7f0000000200)='anon_inodefs\x00', 0x2000, &(0x7f0000000240)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280)={0x0}, &(0x7f00000002c0)=0xc) r1 = open(&(0x7f0000000940)='./file2\x00', 0x200200, 0x10) getsockopt$IP_VS_SO_GET_INFO(r1, 0x0, 0x481, &(0x7f0000000980), &(0x7f00000009c0)=0xc) process_vm_writev(r0, &(0x7f0000000640)=[{&(0x7f0000000300)=""/224, 0xe0}, {&(0x7f0000000400)=""/199, 0xc7}, {&(0x7f0000000500)=""/89, 0x59}, {&(0x7f0000000580)=""/187, 0xbb}], 0x4, &(0x7f00000008c0)=[{&(0x7f0000000680)=""/88, 0x58}, {&(0x7f0000000700)=""/89, 0x59}, {&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/52, 0x34}, {&(0x7f0000000840)=""/121, 0x79}], 0x5, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x80000, 0x1b) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000140)={0x8, 0x0, 0x2, 0x1}) ioctl$DRM_IOCTL_AGP_ALLOC(r2, 0xc0206434, &(0x7f0000000240)={0x6af, r3, 0x2, 0x1}) mount(&(0x7f0000adcff8)='./file0\x00', &(0x7f0000e08fff)='.', &(0x7f00005e9000)='cifs\x00', 0x8000, &(0x7f0000000980)) 2018/03/29 11:11:47 executing program 2: io_setup(0x3, &(0x7f0000000000)=0x0) r1 = accept$unix(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000100)=0x6e) r2 = syz_open_dev$usbmon(&(0x7f0000000200)='/dev/usbmon#\x00', 0x7ff, 0x0) io_cancel(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0xf, 0x3, 0xffffffffffffffff, &(0x7f0000000140)="940c1f2149747e7734510c34c143183667a187dc4f624f6c2de12452792a6fb529e6bf2a661dc23a844b00925c244a9f2967c0ca9868ee50eacf67a2ad7681d82f5a38cbd6d7641f843fa129e00f701fb01835f497b53672b3e5a3f6838f28aa240bf21eb5e5cbe7804fd307404474ae0242f8dea7a08e0fe9479b06f2795f857f8eec271d35ba7f61a91c87296814189cc1dfc9c659cc5437452a0bd178323c50e8c005ba7fa9519b27965c9f6ffbc7dcaa8e658616cc83188fb131a703222d", 0xc0, 0x5, 0x0, 0x1}, &(0x7f0000000280)) io_getevents(r0, 0x2, 0x8f, &(0x7f0000d83f60)=[{}, {}], &(0x7f00005cfff0)={0x4000000000001, 0x7}) io_setup(0x7, &(0x7f0000000040)) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/route\x00') ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f0000000440)=0x0) sendmsg$kcm(r3, &(0x7f0000000700)={&(0x7f00000002c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x0, 0x1, 0x2, 0x2, {0xa, 0x4e21, 0xffffffffffff8000, @mcast2={0xff, 0x2, [], 0x1}, 0xffff}}}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000340)="6205ba29a21175cab53f00fa7787db918bc28fc12b5c3dd125343d3c99f1847aa521970be0919e789e0784f6677127bb45004ca7558c4c4be2677c794aa42764", 0x40}, {&(0x7f0000000480)="3946bad273bdbb1d76feeab065526715ab35cc050d5dd8ee5ba7f9d774cd75a6fc3bd5a30671fe0c659124e1bd8c0b6e5d84b1d9fe305c5503ef15225e376a345ba22365a3db21abbe0cb44ed4f67eeb648e7b2240a7a396e748c8f4aa2e67f01682e32c5b32a2baf30fc8d809ace1e898edfac1f34dd08d0b6f29d0", 0x7c}, {&(0x7f0000000500)="88242ccdc2d55dcb731a8a9af06a4a97f99041a4a07286dcbcd71f405dfd7ccb0d2a78ab8a9d304896f0319b2f1c6f422dd4168201fe4fc19342cc864d3d9ab2fd15fd09361476c7e10d7812d62b7bd6dd87e46c54f80d4d02a23973b10cd347d329acfd12a1e809c6690932a90258670ac5dc501240173b3546074946ec94a176affca7fa6ab642915d7f21540db96a329ee6f2573d8536cd15ba61b1253a8a6759fb3c71116e8d6d54635cacf8", 0xae}, {&(0x7f00000003c0)="bf51cd31c23b92e6d2f5f4464ef7a97c9f41342abe516f9ebbd547c4eae2fc54deff6b44", 0x24}, {&(0x7f00000005c0)="b5b229ee1ad255d24e8b88f22cf04108bf34fbfe2ebe8f90852e4d859c3f48f0ca9431c32dbebf860d361b26d63fca013a09652ad82c0c87cfc025695c9b95aafb97ffa9ed2236f8f95d4dfb5b78ac87d91851612ab204519c56058580c6c9e94ad9f3cdbb3834311ad8477527c5ef1626056bee4c50bc516584ec3122178f9739a5f1cb4581221b998104587d950b58", 0x90}], 0x5, &(0x7f00000012c0)=[{0x1010, 0x0, 0x100, "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"}, {0xb0, 0x11f, 0x9, "c4eb10e0b9c44ee73e8a0a83a10382832dacb892971c9e56b3a9f28ccdc5a50dc3a026c0aa39ec771e65e80084006a540f7f46b7bcf17a1b74b0a2ac8fe672a773f181ebbcb66461fbfeecd844f43c52c1a17e233dc3d8fbd63442b5ff3ecb858e56dbb73cb3dbdcdcd0ccbbc7f843519dcd6d795260de173ed1b84cb2540ebf8ab5047c7e421e3e777bb9310b7ef79458683685b93a131c474b5fb6e7"}, {0xa0, 0x19a, 0x5, "bff8fc60d5c7bbf379e650d09a69f4dbc8a60702337ad92941fbba285999ce18229aad562e23d0b8d2c02d32e478fa1aeb8c7b8733fbcd5aa169d1c4df1183fa3c24683d56189fb283478ca1d99b79f5c8905e99568c2b0908d846106668062dac1eafe03f02272e3a0b3ede6b967c06f7cc90b818fa769c5e9a2f69fefe16886240c2c7083e7baa53f4"}], 0x1160, 0x20000000}, 0x804) perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x4a, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ef4}, r4, 0x0, 0xffffffffffffffff, 0x1) pread64(r3, &(0x7f0000000000)=""/85, 0xfe42, 0x5d) r5 = memfd_create(&(0x7f0000000240)=':+lo#\x00', 0x0) fdatasync(r2) io_submit(r0, 0x1, &(0x7f0000001280)=[&(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, 0x0, r5, &(0x7f0000000100)}]) timerfd_create(0x5, 0x80000) timerfd_create(0x7, 0x80800) getpeername$netlink(r2, &(0x7f0000000740), &(0x7f0000000780)=0xc) io_destroy(r0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x9, &(0x7f0000000380)=0x3, 0x4) 2018/03/29 11:11:47 executing program 3: io_setup(0x3, &(0x7f0000000000)=0x0) accept$unix(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000100)=0x6e) r1 = syz_open_dev$usbmon(&(0x7f0000000200)='/dev/usbmon#\x00', 0x7ff, 0x0) io_cancel(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0xf, 0x0, 0xffffffffffffffff, &(0x7f0000000140)="940c1f2149747e7734510c34c143183667a187dc4f624f6c2de12452792a6fb529e6bf2a661dc23a844b00925c244a9f2967c0ca9868ee50eacf67a2ad7681d82f5a38cbd6d7641f843fa129e00f701fb01835f497b53672b3e5a3f6838f28aa240bf21eb5e5cbe7804fd307404474ae0242f8dea7a08e0fe9479b06f2795f857f8eec271d35ba7f61a91c87296814189cc1dfc9c659cc5437452a0bd178323c50e8c005ba7fa9519b27965c9f6ffbc7dcaa8e658616cc83188fb131a703222d", 0xc0, 0x5, 0x0, 0x1, r1}, &(0x7f0000000280)) io_getevents(r0, 0x2, 0x8f, &(0x7f0000d83f60)=[{}, {}], &(0x7f00005cfff0)={0x4000000000001, 0x7}) io_getevents(r0, 0x0, 0x5, &(0x7f00000002c0)=[{}, {}, {}, {}, {}], &(0x7f00000003c0)) io_setup(0x7, &(0x7f0000000040)) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/route\x00') ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000440)=0x0) perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x4a, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ef4}, r3, 0x0, r1, 0x1) pread64(r2, &(0x7f0000000000)=""/85, 0xfe42, 0x5d) r4 = memfd_create(&(0x7f0000000240)=':+lo#\x00', 0x0) fdatasync(r4) io_submit(r0, 0x1, &(0x7f0000001280)=[&(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f0000000100)}]) timerfd_create(0x7, 0x80800) io_destroy(r0) setsockopt$llc_int(r1, 0x10c, 0x0, &(0x7f0000000380)=0x3, 0x4) 2018/03/29 11:11:47 executing program 1: io_setup(0x3, &(0x7f0000000000)=0x0) accept$unix(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000100)=0x6e) r1 = syz_open_dev$usbmon(&(0x7f0000000200)='/dev/usbmon#\x00', 0x0, 0x0) io_cancel(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0xf, 0x3, 0xffffffffffffffff, &(0x7f0000000140)="940c1f2149747e7734510c34c143183667a187dc4f624f6c2de12452792a6fb529e6bf2a661dc23a844b00925c244a9f2967c0ca9868ee50eacf67a2ad7681d82f5a38cbd6d7641f843fa129e00f701fb01835f497b53672b3e5a3f6838f28aa240bf21eb5e5cbe7804fd307404474ae0242f8dea7a08e0fe9479b06f2795f857f8eec271d35ba7f61a91c87296814189cc1dfc9c659cc5437452a0bd178323c50e8c005ba7fa9519b27965c9f6ffbc7dcaa8e658616cc83188fb131a703222d", 0xc0, 0x5, 0x0, 0x1}, &(0x7f0000000280)) io_getevents(r0, 0x2, 0x8f, &(0x7f0000d83f60)=[{}, {}], &(0x7f00005cfff0)={0x4000000000001, 0x7}) io_getevents(r0, 0x0, 0x5, &(0x7f00000002c0)=[{}, {}, {}, {}, {}], &(0x7f00000003c0)) io_setup(0x7, &(0x7f0000000040)) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/route\x00') ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000440)=0x0) perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x4a, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ef4}, r3, 0x0, r1, 0x1) pread64(r2, &(0x7f0000000000)=""/85, 0xfe42, 0x5d) r4 = memfd_create(&(0x7f0000000240)=':+lo#\x00', 0x0) fdatasync(r4) io_submit(r0, 0x1, &(0x7f0000001280)=[&(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f0000000100)}]) timerfd_create(0x7, 0x80800) io_destroy(r0) setsockopt$llc_int(r1, 0x10c, 0x9, &(0x7f0000000380)=0x3, 0x4) 2018/03/29 11:11:47 executing program 7: io_setup(0x3, &(0x7f0000000000)=0x0) accept$unix(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000100)=0x6e) r1 = syz_open_dev$usbmon(&(0x7f0000000200)='/dev/usbmon#\x00', 0x7ff, 0x0) io_cancel(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0xf, 0x3, 0xffffffffffffffff, &(0x7f0000000140)="940c1f2149747e7734510c34c143183667a187dc4f624f6c2de12452792a6fb529e6bf2a661dc23a844b00925c244a9f2967c0ca9868ee50eacf67a2ad7681d82f5a38cbd6d7641f843fa129e00f701fb01835f497b53672b3e5a3f6838f28aa240bf21eb5e5cbe7804fd307404474ae0242f8dea7a08e0fe9479b06f2795f857f8eec271d35ba7f61a91c87296814189cc1dfc9c659cc5437452a0bd178323c50e8c005ba7fa9519b27965c9f6ffbc7dcaa8e658616cc83188fb131a703222d", 0xc0, 0x5, 0x0, 0x1}, &(0x7f0000000280)) io_getevents(r0, 0x2, 0x8f, &(0x7f0000d83f60)=[{}, {}], &(0x7f00005cfff0)={0x4000000000001, 0x7}) io_getevents(r0, 0x0, 0x5, &(0x7f00000002c0)=[{}, {}, {}, {}, {}], &(0x7f00000003c0)) io_setup(0x7, &(0x7f0000000040)) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/route\x00') ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000440)=0x0) perf_event_open(&(0x7f0000aaa000)={0x0, 0x70, 0x4a, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ef4}, r3, 0x0, 0xffffffffffffffff, 0x1) ioctl$RNDADDENTROPY(r1, 0x40085203, &(0x7f0000000480)={0x3, 0x13, "29d3b5e1262afda1645dcdf2889c4c7201b5a6"}) pread64(r2, &(0x7f0000000000)=""/85, 0xfe42, 0x5d) r4 = memfd_create(&(0x7f0000000240)=':+lo#\x00', 0x0) fdatasync(r4) io_submit(r0, 0x1, &(0x7f0000001280)=[&(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f0000000100)}]) timerfd_create(0x7, 0x80800) io_destroy(r0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x9, &(0x7f0000000380)=0x3, 0x4) 2018/03/29 11:11:47 executing program 0: r0 = perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x4a, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffff9c, 0xc00caee0, &(0x7f0000000180)={0x0, r0, 0x1}) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) fcntl$getownex(r0, 0x10, &(0x7f0000000400)={0x0, 0x0}) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0xffff, 0xe3, 0x6, 0x4, 0x0, 0x7, 0x0, 0x2, 0x10001, 0x1, 0x7, 0x8, 0x100, 0x4, 0x0, 0x7f, 0x20, 0x0, 0x4, 0x5, 0x90a4, 0x7, 0x2, 0x73, 0x8, 0x7, 0x4, 0x7e0, 0x101, 0x0, 0x2, 0x0, 0x0, 0x9, 0xfffffffffffffff9, 0x9, 0x0, 0x4, 0x0, @perf_config_ext={0x20, 0x1}, 0x8140, 0x2, 0x0, 0x4, 0xca1, 0xb5}, r4, 0x4, r1, 0x8) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) futimesat(r1, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0)={{r2, r3/1000+10000}, {r5, r6/1000+10000}}) unshare(0x8000000) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0xdc, 0x40}, 0x341) r8 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8910, &(0x7f0000000080)=@buf={0x0, &(0x7f0000000000)}) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x13, &(0x7f0000000ffc), 0x4) mq_open(&(0x7f00000000c0)='syzkaller0\x00', 0x40, 0x8, &(0x7f0000000100)={0x5, 0x80000000, 0x0, 0xfffffffffffffff9, 0x1, 0xfffffffffffffffd, 0x7fff, 0x200}) socket$inet_tcp(0x2, 0x1, 0x0) r9 = dup3(r8, r7, 0x80000) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r9, 0x84, 0x66, &(0x7f00000002c0)={0x0, 0x8ed6}, &(0x7f0000000300)=0x1) bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) shmget(0xffffffffffffffff, 0x8000, 0x49b, &(0x7f0000ff8000/0x8000)=nil) ioctl$sock_inet_SIOCGIFPFLAGS(r8, 0x8935, &(0x7f0000000080)={'syzkaller0\x00'}) ppoll(&(0x7f0000000780)=[{r1, 0x300}, {r1, 0x8401}], 0x2, &(0x7f00000007c0)={0x77359400}, &(0x7f0000000800)={0x9}, 0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000280)={0x0, 0x0, 0x9}, 0x10) r10 = semget$private(0x0, 0x4, 0x0) semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0x0, 0x1000}], 0x1, &(0x7f0000000080)={0x0, 0x1c9c380}) semctl$IPC_RMID(r10, 0x0, 0x0) 2018/03/29 11:11:47 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) readv(r0, &(0x7f0000001480)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x3}) r1 = syz_open_pts(r0, 0x2) r2 = dup3(r1, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000c34fff), 0xffffff0b) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0) preadv(r3, &(0x7f00000004c0)=[{&(0x7f0000000480)=""/21, 0x15}], 0x1, 0x0) fchdir(0xffffffffffffffff) mkdir(&(0x7f0000000280)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f", 0xfffffffffffffffc) fchmod(r2, 0x0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f0000001500)={0x0, 0x89, "2fef89f3ca17a7b9dd63a3f5dc592f564986cf3f4b747732ed28af368fdc128dacc550d94650f71dbb888c7f40ec5adccbaac56d29bfbbf2ea140991a0ddf350c59b68e4f526c66e316e68e2a65e6e1bf90ae90db1eff8a6a41503aa013c366df51925df8d9631bdb9c6cd1bedcf1e59dbebd2f1f2601c3125bbbdcc46c83a44c51bc5490fd24acc56"}, &(0x7f0000000200)=0x91) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000240)=@sack_info={r4, 0x1}, &(0x7f00000015c0)=0xc) splice(r3, &(0x7f0000000400), 0xffffffffffffffff, &(0x7f0000000440), 0x9, 0x2) rename(&(0x7f0000001e00)='./file0\x00', &(0x7f0000000100)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f") mkdir(&(0x7f00000014c0)='./control\x00', 0x8) r5 = open(&(0x7f0000000000)='./control\x00', 0x0, 0x0) renameat2(r5, &(0x7f0000000040)='./file0\x00', r5, &(0x7f0000000080)='./control\x00', 0x2) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r5, 0x84, 0x76, &(0x7f0000000300)={0x0, 0x80}, &(0x7f0000000340)=0x8) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r5, 0x84, 0x76, &(0x7f0000000380)={r6, 0x5}, &(0x7f00000003c0)=0x8) mknodat(r5, &(0x7f000003f000)='./control\x00', 0x0, 0x0) symlink(&(0x7f0000000180)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f", &(0x7f00000000c0)='./file0\x00') perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(r5, &(0x7f0000010000)='./control\x00', &(0x7f000003f000), &(0x7f0000001fe8), 0x0) 2018/03/29 11:11:47 executing program 3: io_setup(0x3, &(0x7f0000000000)=0x0) accept$unix(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000100)=0x6e) r1 = syz_open_dev$usbmon(&(0x7f0000000200)='/dev/usbmon#\x00', 0x7ff, 0x0) io_cancel(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0xf, 0x0, 0xffffffffffffffff, &(0x7f0000000140)="940c1f2149747e7734510c34c143183667a187dc4f624f6c2de12452792a6fb529e6bf2a661dc23a844b00925c244a9f2967c0ca9868ee50eacf67a2ad7681d82f5a38cbd6d7641f843fa129e00f701fb01835f497b53672b3e5a3f6838f28aa240bf21eb5e5cbe7804fd307404474ae0242f8dea7a08e0fe9479b06f2795f857f8eec271d35ba7f61a91c87296814189cc1dfc9c659cc5437452a0bd178323c50e8c005ba7fa9519b27965c9f6ffbc7dcaa8e658616cc83188fb131a703222d", 0xc0, 0x5, 0x0, 0x1, r1}, &(0x7f0000000280)) io_getevents(r0, 0x2, 0x8f, &(0x7f0000d83f60)=[{}, {}], &(0x7f00005cfff0)={0x4000000000001, 0x7}) io_getevents(r0, 0x0, 0x5, &(0x7f00000002c0)=[{}, {}, {}, {}, {}], &(0x7f00000003c0)) io_setup(0x7, &(0x7f0000000040)) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/route\x00') ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000440)=0x0) perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x4a, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ef4}, r3, 0x0, r1, 0x1) pread64(r2, &(0x7f0000000000)=""/85, 0xfe42, 0x5d) r4 = memfd_create(&(0x7f0000000240)=':+lo#\x00', 0x0) fdatasync(r4) io_submit(r0, 0x1, &(0x7f0000001280)=[&(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f0000000100)}]) timerfd_create(0x7, 0x80800) io_destroy(r0) setsockopt$llc_int(r1, 0x10c, 0x9, &(0x7f0000000380), 0x4) 2018/03/29 11:11:47 executing program 1: io_setup(0x3, &(0x7f0000000000)=0x0) accept$unix(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000100)=0x6e) r1 = syz_open_dev$usbmon(&(0x7f0000000200)='/dev/usbmon#\x00', 0x0, 0x0) io_cancel(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0xf, 0x3, 0xffffffffffffffff, &(0x7f0000000140)="940c1f2149747e7734510c34c143183667a187dc4f624f6c2de12452792a6fb529e6bf2a661dc23a844b00925c244a9f2967c0ca9868ee50eacf67a2ad7681d82f5a38cbd6d7641f843fa129e00f701fb01835f497b53672b3e5a3f6838f28aa240bf21eb5e5cbe7804fd307404474ae0242f8dea7a08e0fe9479b06f2795f857f8eec271d35ba7f61a91c87296814189cc1dfc9c659cc5437452a0bd178323c50e8c005ba7fa9519b27965c9f6ffbc7dcaa8e658616cc83188fb131a703222d", 0xc0, 0x5, 0x0, 0x1}, &(0x7f0000000280)) io_getevents(r0, 0x2, 0x8f, &(0x7f0000d83f60)=[{}, {}], &(0x7f00005cfff0)={0x4000000000001, 0x7}) io_getevents(r0, 0x0, 0x5, &(0x7f00000002c0)=[{}, {}, {}, {}, {}], &(0x7f00000003c0)) io_setup(0x7, &(0x7f0000000040)) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/route\x00') ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000440)=0x0) perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x4a, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ef4}, r3, 0x0, r1, 0x1) pread64(r2, &(0x7f0000000000)=""/85, 0xfe42, 0x5d) r4 = memfd_create(&(0x7f0000000240)=':+lo#\x00', 0x0) fdatasync(r4) io_submit(r0, 0x1, &(0x7f0000001280)=[&(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f0000000100)}]) timerfd_create(0x7, 0x80800) io_destroy(r0) setsockopt$llc_int(r1, 0x10c, 0x9, &(0x7f0000000380)=0x3, 0x4) [ 307.005777] bond0 (unregistering): Released all slaves [ 307.711079] IPVS: ftp: loaded support on port[0] = 21 [ 308.009197] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 308.441149] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 308.447243] 8021q: adding VLAN 0 to HW filter on device bond0 [ 308.492979] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 308.537908] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 308.544083] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 308.551502] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready 2018/03/29 11:11:49 executing program 6: openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x0, 0x0) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, &(0x7f0000000340)=0x1) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f000051cff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000943ffc)=0xa35) read(r0, &(0x7f00003fefff)=""/1, 0x1) r1 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000029000)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r0, &(0x7f0000dcdff0)=[{&(0x7f0000cd8000)=""/1, 0x1}], 0x1) ioctl$int_in(r2, 0x5452, &(0x7f0000b28000)) write$cgroup_type(0xffffffffffffffff, &(0x7f00000002c0)='threaded\x00', 0x9) syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x0, 0x802) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000fb9000)) fcntl$setsig(r2, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r3}], 0x1, 0xfffffffffffffff8) read$eventfd(0xffffffffffffffff, &(0x7f0000000040), 0x8) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)) r4 = dup2(r2, r3) fcntl$setown(r4, 0x8, r1) ptrace$cont(0xffffffffffffffff, r1, 0x0, 0x8) tkill(r1, 0x16) r5 = gettid() process_vm_readv(r5, &(0x7f0000001880)=[{&(0x7f0000000680)=""/198, 0xc6}, {&(0x7f0000000780)=""/247, 0xf7}, {&(0x7f0000000380)=""/12, 0xc}, {&(0x7f00000003c0)=""/6, 0x6}, {&(0x7f0000000400)=""/14, 0xe}], 0x5, &(0x7f00000019c0)=[{&(0x7f0000001900)=""/41, 0x29}, {&(0x7f0000001940)=""/112, 0x70}], 0x2, 0x0) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f0000000240)={{{@in6}}, {{@in=@local}, 0x0, @in=@local}}, &(0x7f0000000100)=0xe8) 2018/03/29 11:11:49 executing program 7: io_setup(0x3, &(0x7f0000000000)=0x0) accept$unix(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000100)=0x6e) syz_open_dev$usbmon(&(0x7f0000000200)='/dev/usbmon#\x00', 0x7ff, 0x0) io_cancel(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0xf, 0x3, 0xffffffffffffffff, &(0x7f0000000140)="940c1f2149747e7734510c34c143183667a187dc4f624f6c2de12452792a6fb529e6bf2a661dc23a844b00925c244a9f2967c0ca9868ee50eacf67a2ad7681d82f5a38cbd6d7641f843fa129e00f701fb01835f497b53672b3e5a3f6838f28aa240bf21eb5e5cbe7804fd307404474ae0242f8dea7a08e0fe9479b06f2795f857f8eec271d35ba7f61a91c87296814189cc1dfc9c659cc5437452a0bd178323c50e8c005ba7fa9519b27965c9f6ffbc7dcaa8e658616cc83188fb131a703222d", 0xc0, 0x5, 0x0, 0x1}, &(0x7f0000000280)) io_getevents(r0, 0x2, 0x8f, &(0x7f0000d83f60)=[{}, {}], &(0x7f00005cfff0)={0x4000000000001, 0x7}) io_getevents(r0, 0x0, 0x5, &(0x7f00000002c0)=[{}, {}, {}, {}, {}], &(0x7f00000003c0)) io_setup(0x7, &(0x7f0000000040)) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/route\x00') ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000440)=0x0) perf_event_open(&(0x7f0000aaa000)={0x0, 0x70, 0x4a, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ef4}, r2, 0x0, 0xffffffffffffffff, 0x1) pread64(r1, &(0x7f0000000000)=""/85, 0xfe42, 0x5d) sched_getscheduler(r2) r3 = memfd_create(&(0x7f0000000240)=':+lo#\x00', 0x0) fdatasync(r3) io_submit(r0, 0x1, &(0x7f0000001280)=[&(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000000100)}]) timerfd_create(0x7, 0x80800) io_destroy(r0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x9, &(0x7f0000000380)=0x3, 0x4) 2018/03/29 11:11:49 executing program 1: io_setup(0x3, &(0x7f0000000000)=0x0) accept$unix(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000100)=0x6e) r1 = syz_open_dev$usbmon(&(0x7f0000000200)='/dev/usbmon#\x00', 0x0, 0x0) io_cancel(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0xf, 0x3, 0xffffffffffffffff, &(0x7f0000000140)="940c1f2149747e7734510c34c143183667a187dc4f624f6c2de12452792a6fb529e6bf2a661dc23a844b00925c244a9f2967c0ca9868ee50eacf67a2ad7681d82f5a38cbd6d7641f843fa129e00f701fb01835f497b53672b3e5a3f6838f28aa240bf21eb5e5cbe7804fd307404474ae0242f8dea7a08e0fe9479b06f2795f857f8eec271d35ba7f61a91c87296814189cc1dfc9c659cc5437452a0bd178323c50e8c005ba7fa9519b27965c9f6ffbc7dcaa8e658616cc83188fb131a703222d", 0xc0, 0x5, 0x0, 0x1}, &(0x7f0000000280)) io_getevents(r0, 0x2, 0x8f, &(0x7f0000d83f60)=[{}, {}], &(0x7f00005cfff0)={0x4000000000001, 0x7}) io_getevents(r0, 0x0, 0x5, &(0x7f00000002c0)=[{}, {}, {}, {}, {}], &(0x7f00000003c0)) io_setup(0x7, &(0x7f0000000040)) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/route\x00') ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000440)=0x0) perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x4a, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ef4}, r3, 0x0, r1, 0x1) pread64(r2, &(0x7f0000000000)=""/85, 0xfe42, 0x5d) r4 = memfd_create(&(0x7f0000000240)=':+lo#\x00', 0x0) fdatasync(r4) io_submit(r0, 0x1, &(0x7f0000001280)=[&(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f0000000100)}]) timerfd_create(0x7, 0x80800) io_destroy(r0) setsockopt$llc_int(r1, 0x10c, 0x9, &(0x7f0000000380)=0x3, 0x4) 2018/03/29 11:11:49 executing program 0: r0 = perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x4a, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffff9c, 0xc00caee0, &(0x7f0000000180)={0x0, r0, 0x1}) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) fcntl$getownex(r0, 0x10, &(0x7f0000000400)={0x0, 0x0}) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0xffff, 0xe3, 0x6, 0x4, 0x0, 0x7, 0x0, 0x2, 0x10001, 0x1, 0x7, 0x8, 0x100, 0x4, 0x0, 0x7f, 0x20, 0x0, 0x4, 0x5, 0x90a4, 0x7, 0x2, 0x73, 0x8, 0x7, 0x4, 0x7e0, 0x101, 0x0, 0x2, 0x309, 0x0, 0x0, 0xfffffffffffffff9, 0x9, 0x0, 0x4, 0x0, @perf_config_ext={0x20, 0x1}, 0x8140, 0x2, 0x0, 0x4, 0xca1, 0xb5}, r4, 0x4, r1, 0x8) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) futimesat(r1, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0)={{r2, r3/1000+10000}, {r5, r6/1000+10000}}) unshare(0x8000000) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0xdc, 0x40}, 0x341) r8 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8910, &(0x7f0000000080)=@buf={0x0, &(0x7f0000000000)}) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x13, &(0x7f0000000ffc), 0x4) mq_open(&(0x7f00000000c0)='syzkaller0\x00', 0x40, 0x8, &(0x7f0000000100)={0x5, 0x80000000, 0x0, 0xfffffffffffffff9, 0x1, 0xfffffffffffffffd, 0x7fff, 0x200}) socket$inet_tcp(0x2, 0x1, 0x0) r9 = dup3(r8, r7, 0x80000) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r9, 0x84, 0x66, &(0x7f00000002c0)={0x0, 0x8ed6}, &(0x7f0000000300)=0x1) bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) shmget(0xffffffffffffffff, 0x8000, 0x49b, &(0x7f0000ff8000/0x8000)=nil) ioctl$sock_inet_SIOCGIFPFLAGS(r8, 0x8935, &(0x7f0000000080)={'syzkaller0\x00'}) ppoll(&(0x7f0000000780)=[{r1, 0x300}, {r1, 0x8401}], 0x2, &(0x7f00000007c0)={0x77359400}, &(0x7f0000000800)={0x9}, 0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000280)={0x0, 0x0, 0x9}, 0x10) r10 = semget$private(0x0, 0x4, 0x0) semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0x0, 0x1000}], 0x1, &(0x7f0000000080)={0x0, 0x1c9c380}) semctl$IPC_RMID(r10, 0x0, 0x0) 2018/03/29 11:11:49 executing program 3: io_setup(0x3, &(0x7f0000000000)=0x0) accept$unix(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000100)=0x6e) r1 = syz_open_dev$usbmon(&(0x7f0000000200)='/dev/usbmon#\x00', 0x7ff, 0x0) io_cancel(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0xf, 0x0, 0xffffffffffffffff, &(0x7f0000000140)="940c1f2149747e7734510c34c143183667a187dc4f624f6c2de12452792a6fb529e6bf2a661dc23a844b00925c244a9f2967c0ca9868ee50eacf67a2ad7681d82f5a38cbd6d7641f843fa129e00f701fb01835f497b53672b3e5a3f6838f28aa240bf21eb5e5cbe7804fd307404474ae0242f8dea7a08e0fe9479b06f2795f857f8eec271d35ba7f61a91c87296814189cc1dfc9c659cc5437452a0bd178323c50e8c005ba7fa9519b27965c9f6ffbc7dcaa8e658616cc83188fb131a703222d", 0xc0, 0x5, 0x0, 0x1, r1}, &(0x7f0000000280)) io_getevents(r0, 0x2, 0x8f, &(0x7f0000d83f60)=[{}, {}], &(0x7f00005cfff0)={0x4000000000001, 0x7}) io_getevents(r0, 0x0, 0x5, &(0x7f00000002c0)=[{}, {}, {}, {}, {}], &(0x7f00000003c0)) io_setup(0x7, &(0x7f0000000040)) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/route\x00') ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000440)=0x0) perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x4a, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ef4}, r3, 0x0, r1, 0x1) pread64(r2, &(0x7f0000000000)=""/85, 0xfe42, 0x5d) r4 = memfd_create(&(0x7f0000000240)=':+lo#\x00', 0x0) fdatasync(r4) io_submit(r0, 0x1, &(0x7f0000001280)=[&(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f0000000100)}]) timerfd_create(0x7, 0x80800) io_destroy(r0) setsockopt$llc_int(r1, 0x10c, 0x9, &(0x7f0000000380), 0x4) 2018/03/29 11:11:49 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) prctl$setmm(0x23, 0x7, &(0x7f0000ffb000/0x4000)=nil) readv(r0, &(0x7f0000001480)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x3}) r1 = syz_open_pts(r0, 0x2) r2 = dup3(r1, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000c34fff), 0xffffff0b) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0) preadv(r3, &(0x7f00000004c0)=[{&(0x7f0000000480)=""/21, 0x15}], 0x1, 0x0) fchdir(0xffffffffffffffff) mkdir(&(0x7f0000000280)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f", 0xfffffffffffffffc) fchmod(r2, 0x0) mkdir(&(0x7f0000000200)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f", 0x28) splice(r3, &(0x7f0000000400), 0xffffffffffffffff, &(0x7f0000000440), 0x9, 0x2) rename(&(0x7f0000001e00)='./file0\x00', &(0x7f0000000100)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f") mkdir(&(0x7f000000e000)='./control\x00', 0x0) r4 = open(&(0x7f0000000000)='./control\x00', 0x0, 0x0) renameat2(r4, &(0x7f0000000040)='./file0\x00', r4, &(0x7f0000000080)='./control\x00', 0x2) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000300)={0x0, 0x80}, &(0x7f0000000340)=0x8) socket$unix(0x1, 0x3, 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000380)={r5, 0x5}, &(0x7f00000003c0)=0x8) mknodat(r4, &(0x7f000003f000)='./control\x00', 0x0, 0x0) symlink(&(0x7f0000000180)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f", &(0x7f00000000c0)='./file0\x00') perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(r4, &(0x7f0000010000)='./control\x00', &(0x7f000003f000), &(0x7f0000001fe8), 0x0) 2018/03/29 11:11:49 executing program 2: io_setup(0x3, &(0x7f0000000000)=0x0) r1 = accept$unix(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000100)=0x6e) clock_gettime(0x0, &(0x7f0000000780)={0x0, 0x0}) rt_sigtimedwait(&(0x7f0000000700)={0x9}, &(0x7f0000000740), &(0x7f00000007c0)={r2, r3+30000000}, 0x8) r4 = syz_open_dev$usbmon(&(0x7f0000000200)='/dev/usbmon#\x00', 0x7ff, 0x0) io_cancel(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0xf, 0x3, 0xffffffffffffffff, &(0x7f0000000140)="940c1f2149747e7734510c34c143183667a187dc4f624f6c2de12452792a6fb529e6bf2a661dc23a844b00925c244a9f2967c0ca9868ee50eacf67a2ad7681d82f5a38cbd6d7641f843fa129e00f701fb01835f497b53672b3e5a3f6838f28aa240bf21eb5e5cbe7804fd307404474ae0242f8dea7a08e0fe9479b06f2795f857f8eec271d35ba7f61a91c87296814189cc1dfc9c659cc5437452a0bd178323c50e8c005ba7fa9519b27965c9f6ffbc7dcaa8e658616cc83188fb131a703222d", 0xc0, 0x5, 0x0, 0x1}, &(0x7f0000000280)) io_getevents(r0, 0x2, 0x8f, &(0x7f0000d83f60)=[{}, {}], &(0x7f00005cfff0)={0x4000000000001, 0x7}) io_setup(0x7, &(0x7f0000000040)) r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/route\x00') ioctl$TIOCGPGRP(r5, 0x540f, &(0x7f0000000440)=0x0) ioctl$DRM_IOCTL_MAP_BUFS(r5, 0xc0186419, &(0x7f0000000680)={0x4, &(0x7f00000002c0)=""/168, &(0x7f0000000600)=[{0x3, 0x1000, 0x7, &(0x7f00000012c0)=""/4096}, {0x487, 0x4c, 0x1, &(0x7f0000000480)=""/76}, {0xc19, 0xc9, 0x0, &(0x7f0000000500)=""/201}, {0x20, 0x16, 0x8, &(0x7f00000003c0)=""/22}]}) prctl$setfpexc(0xc, 0x40000) perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x4a, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ef4}, r6, 0x0, 0xffffffffffffffff, 0x1) ioctl$LOOP_SET_FD(r4, 0x4c00, r1) pread64(r5, &(0x7f0000000000)=""/85, 0xfe42, 0x5d) ioctl$sock_inet_SIOCGIFADDR(r4, 0x8915, &(0x7f00000006c0)={'ifb0\x00', {0x2, 0x4e23, @broadcast=0xffffffff}}) r7 = memfd_create(&(0x7f0000000240)=':+lo#\x00', 0x0) fdatasync(r7) io_submit(r0, 0x1, &(0x7f0000001280)=[&(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, 0x0, r7, &(0x7f0000000100)}]) timerfd_create(0x7, 0x80800) io_destroy(r0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x9, &(0x7f0000000380)=0x3, 0x4) 2018/03/29 11:11:49 executing program 5: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) mkdir(&(0x7f0000000000)='./file1\x00', 0x0) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000811ffa)='bdev\x00', 0x0, &(0x7f0000444000)) mount(&(0x7f0000fb6000)='./file0\x00', &(0x7f0000d78000)='.', &(0x7f0000fdb000)='ubifs\x00', 0x1003, 0x0) mount(&(0x7f00002b9ff8)='./file0\x00', &(0x7f0000cbeff8)='./file0\x00', &(0x7f00005f7ffa)='ramfs\x00', 0x80000, &(0x7f000002f000)) mount(&(0x7f0000000040)='.', &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0)='binfmt_misc\x00', 0x0, &(0x7f0000000100)) mount(&(0x7f0000377ff8)='.', &(0x7f0000000140)='./file0\x00', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000100)) mount(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./file1\x00', &(0x7f0000000200)='anon_inodefs\x00', 0x2000, &(0x7f0000000240)) mount(&(0x7f0000adcff8)='./file0\x00', &(0x7f0000e08fff)='.', &(0x7f00005e9000)='cifs\x00', 0x2000, &(0x7f0000ad5000)) 2018/03/29 11:11:49 executing program 1: io_setup(0x3, &(0x7f0000000000)=0x0) accept$unix(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000100)=0x6e) r1 = syz_open_dev$usbmon(&(0x7f0000000200)='/dev/usbmon#\x00', 0x0, 0x0) io_cancel(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0xf, 0x3, 0xffffffffffffffff, &(0x7f0000000140)="940c1f2149747e7734510c34c143183667a187dc4f624f6c2de12452792a6fb529e6bf2a661dc23a844b00925c244a9f2967c0ca9868ee50eacf67a2ad7681d82f5a38cbd6d7641f843fa129e00f701fb01835f497b53672b3e5a3f6838f28aa240bf21eb5e5cbe7804fd307404474ae0242f8dea7a08e0fe9479b06f2795f857f8eec271d35ba7f61a91c87296814189cc1dfc9c659cc5437452a0bd178323c50e8c005ba7fa9519b27965c9f6ffbc7dcaa8e658616cc83188fb131a703222d", 0xc0, 0x5, 0x0, 0x1}, &(0x7f0000000280)) io_getevents(r0, 0x2, 0x8f, &(0x7f0000d83f60)=[{}, {}], &(0x7f00005cfff0)={0x4000000000001, 0x7}) io_getevents(r0, 0x0, 0x5, &(0x7f00000002c0)=[{}, {}, {}, {}, {}], &(0x7f00000003c0)) io_setup(0x7, &(0x7f0000000040)) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/route\x00') ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000440)=0x0) perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x4a, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ef4}, r3, 0x0, r1, 0x1) pread64(r2, &(0x7f0000000000)=""/85, 0xfe42, 0x5d) r4 = memfd_create(&(0x7f0000000240)=':+lo#\x00', 0x0) fdatasync(r4) io_submit(r0, 0x1, &(0x7f0000001280)=[&(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f0000000100)}]) timerfd_create(0x7, 0x80800) io_destroy(r0) setsockopt$llc_int(r1, 0x10c, 0x9, &(0x7f0000000380)=0x3, 0x4) 2018/03/29 11:11:49 executing program 0: r0 = perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x4a, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffff9c, 0xc00caee0, &(0x7f0000000180)={0x0, r0, 0x1}) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) fcntl$getownex(r0, 0x10, &(0x7f0000000400)={0x0, 0x0}) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0xffff, 0xe3, 0x6, 0x4, 0x0, 0x7, 0x0, 0x2, 0x10001, 0x1, 0x7, 0x8, 0x100, 0x4, 0x0, 0x7f, 0x20, 0x0, 0x4, 0x5, 0x90a4, 0x7, 0x2, 0x73, 0x8, 0x7, 0x4, 0x7e0, 0x101, 0x0, 0x2, 0x309, 0x0, 0x0, 0xfffffffffffffff9, 0x9, 0x0, 0x4, 0x0, @perf_config_ext={0x20, 0x1}, 0x8140, 0x2, 0x0, 0x4, 0xca1, 0xb5}, r4, 0x4, r1, 0x8) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) futimesat(r1, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0)={{r2, r3/1000+10000}, {r5, r6/1000+10000}}) unshare(0x8000000) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0xdc, 0x40}, 0x341) r8 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8910, &(0x7f0000000080)=@buf={0x0, &(0x7f0000000000)}) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x13, &(0x7f0000000ffc), 0x4) mq_open(&(0x7f00000000c0)='syzkaller0\x00', 0x40, 0x8, &(0x7f0000000100)={0x5, 0x80000000, 0x0, 0xfffffffffffffff9, 0x1, 0xfffffffffffffffd, 0x7fff, 0x200}) socket$inet_tcp(0x2, 0x1, 0x0) r9 = dup3(r8, r7, 0x80000) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r9, 0x84, 0x66, &(0x7f00000002c0)={0x0, 0x8ed6}, &(0x7f0000000300)=0x1) bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) shmget(0xffffffffffffffff, 0x8000, 0x49b, &(0x7f0000ff8000/0x8000)=nil) ioctl$sock_inet_SIOCGIFPFLAGS(r8, 0x8935, &(0x7f0000000080)={'syzkaller0\x00'}) ppoll(&(0x7f0000000780)=[{r1, 0x300}, {r1, 0x8401}], 0x2, &(0x7f00000007c0)={0x77359400}, &(0x7f0000000800)={0x9}, 0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000280)={0x0, 0x0, 0x9}, 0x10) r10 = semget$private(0x0, 0x4, 0x0) semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0x0, 0x1000}], 0x1, &(0x7f0000000080)={0x0, 0x1c9c380}) semctl$IPC_RMID(r10, 0x0, 0x0) 2018/03/29 11:11:49 executing program 3: io_setup(0x3, &(0x7f0000000000)=0x0) accept$unix(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000100)=0x6e) r1 = syz_open_dev$usbmon(&(0x7f0000000200)='/dev/usbmon#\x00', 0x7ff, 0x0) io_cancel(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0xf, 0x0, 0xffffffffffffffff, &(0x7f0000000140)="940c1f2149747e7734510c34c143183667a187dc4f624f6c2de12452792a6fb529e6bf2a661dc23a844b00925c244a9f2967c0ca9868ee50eacf67a2ad7681d82f5a38cbd6d7641f843fa129e00f701fb01835f497b53672b3e5a3f6838f28aa240bf21eb5e5cbe7804fd307404474ae0242f8dea7a08e0fe9479b06f2795f857f8eec271d35ba7f61a91c87296814189cc1dfc9c659cc5437452a0bd178323c50e8c005ba7fa9519b27965c9f6ffbc7dcaa8e658616cc83188fb131a703222d", 0xc0, 0x5, 0x0, 0x1, r1}, &(0x7f0000000280)) io_getevents(r0, 0x2, 0x8f, &(0x7f0000d83f60)=[{}, {}], &(0x7f00005cfff0)={0x4000000000001, 0x7}) io_getevents(r0, 0x0, 0x5, &(0x7f00000002c0)=[{}, {}, {}, {}, {}], &(0x7f00000003c0)) io_setup(0x7, &(0x7f0000000040)) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/route\x00') ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000440)=0x0) perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x4a, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ef4}, r3, 0x0, r1, 0x1) pread64(r2, &(0x7f0000000000)=""/85, 0xfe42, 0x5d) r4 = memfd_create(&(0x7f0000000240)=':+lo#\x00', 0x0) fdatasync(r4) io_submit(r0, 0x1, &(0x7f0000001280)=[&(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f0000000100)}]) timerfd_create(0x7, 0x80800) io_destroy(r0) setsockopt$llc_int(r1, 0x10c, 0x9, &(0x7f0000000380), 0x4) 2018/03/29 11:11:49 executing program 7: io_setup(0x3, &(0x7f0000000000)=0x0) accept$unix(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000100)=0x6e) r1 = syz_open_dev$usbmon(&(0x7f0000000200)='/dev/usbmon#\x00', 0x7ff, 0x0) io_cancel(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0xf, 0x3, 0xffffffffffffffff, &(0x7f0000000140)="940c1f2149747e7734510c34c143183667a187dc4f624f6c2de12452792a6fb529e6bf2a661dc23a844b00925c244a9f2967c0ca9868ee50eacf67a2ad7681d82f5a38cbd6d7641f843fa129e00f701fb01835f497b53672b3e5a3f6838f28aa240bf21eb5e5cbe7804fd307404474ae0242f8dea7a08e0fe9479b06f2795f857f8eec271d35ba7f61a91c87296814189cc1dfc9c659cc5437452a0bd178323c50e8c005ba7fa9519b27965c9f6ffbc7dcaa8e658616cc83188fb131a703222d", 0xc0, 0x5, 0x0, 0x1}, &(0x7f0000000280)) io_getevents(r0, 0x2, 0x8f, &(0x7f0000d83f60)=[{}, {}], &(0x7f00005cfff0)={0x4000000000001, 0x7}) io_getevents(r0, 0x0, 0x5, &(0x7f00000002c0)=[{}, {}, {}, {}, {}], &(0x7f00000003c0)) io_setup(0x7, &(0x7f0000000040)) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/route\x00') ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f00000004c0)=0x0) lseek(r2, 0x0, 0x1) perf_event_open(&(0x7f0000aaa000)={0x0, 0x70, 0x4a, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ef4}, r3, 0x0, 0xffffffffffffffff, 0x1) pread64(r2, &(0x7f0000000000)=""/85, 0xfe42, 0x5d) r4 = memfd_create(&(0x7f0000000240)=':+lo#\x00', 0x0) fdatasync(r4) io_submit(r0, 0x1, &(0x7f0000001280)=[&(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f0000000100)}]) pwrite64(r1, &(0x7f0000000480), 0x0, 0x0) timerfd_create(0x7, 0x80800) io_destroy(r0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x9, &(0x7f0000000380)=0x3, 0x4) 2018/03/29 11:11:49 executing program 5: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) mkdir(&(0x7f0000000000)='./file1\x00', 0x0) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000811ffa)='bdev\x00', 0x0, &(0x7f0000444000)) mount(&(0x7f0000fb6000)='./file0\x00', &(0x7f0000d78000)='.', &(0x7f0000fdb000)='ubifs\x00', 0x1003, 0x0) mount(&(0x7f00002b9ff8)='./file0\x00', &(0x7f0000cbeff8)='./file0\x00', &(0x7f00005f7ffa)='ramfs\x00', 0x80000, &(0x7f000002f000)) mount(&(0x7f0000000040)='.', &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0)='binfmt_misc\x00', 0x0, &(0x7f0000000100)="d320ef1a7f1408872e155a1a225bcda127004e3c2554503ed95c7321c7b4a2cb7aa674f8e4c60ddd80f5c06cbd70f9f77888b0936e42764a7ea4f269442275427cce8b525f201a01b69ecff1d27c520b1eafab7d712bbf3c253b043b") mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000240)='/dev/hwrng\x00', 0x10001, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000280)=0x6) mount(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./file1\x00', &(0x7f0000000200)='anon_inodefs\x00', 0x2000, &(0x7f0000000240)) mount(&(0x7f0000adcff8)='./file0\x00', &(0x7f0000e08fff)='.', &(0x7f00005e9000)='cifs\x00', 0x2000, &(0x7f0000ad5000)) 2018/03/29 11:11:49 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) readv(r0, &(0x7f0000001480)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x3}) r1 = syz_open_pts(r0, 0x2) r2 = dup3(r1, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000c34fff), 0xffffff0b) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000015c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x200002, 0x0) preadv(r3, &(0x7f00000004c0)=[{&(0x7f0000000480)=""/21, 0x15}], 0x1, 0x0) fchdir(0xffffffffffffffff) mkdir(&(0x7f0000000280)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f", 0xfffffffffffffffc) fchmod(r2, 0x40) splice(r3, &(0x7f0000000400), 0xffffffffffffffff, &(0x7f0000000440), 0x9, 0x2) rename(&(0x7f0000001e00)='./file0\x00', &(0x7f0000000100)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f") stat(&(0x7f0000000200)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f", &(0x7f00000014c0)={0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r4) mkdir(&(0x7f000000e000)='./control\x00', 0x0) r5 = open(&(0x7f0000000000)='./control\x00', 0x0, 0x0) renameat2(r5, &(0x7f0000000040)='./file0\x00', r5, &(0x7f0000000080)='./control\x00', 0x2) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r5, 0x84, 0x76, &(0x7f0000000300)={0x0, 0x80}, &(0x7f0000000340)=0x8) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r5, 0x84, 0x76, &(0x7f0000000380)={r6, 0x5}, &(0x7f00000003c0)=0x8) mknodat(r5, &(0x7f000003f000)='./control\x00', 0x0, 0x0) symlink(&(0x7f0000000180)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f", &(0x7f00000000c0)='./file0\x00') perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(r5, &(0x7f0000010000)='./control\x00', &(0x7f000003f000), &(0x7f0000001fe8), 0x0) 2018/03/29 11:11:49 executing program 2: io_setup(0x3, &(0x7f0000000000)=0x0) r1 = accept$unix(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000100)=0x6e) syz_open_dev$usbmon(&(0x7f0000000200)='/dev/usbmon#\x00', 0x7ff, 0x0) io_cancel(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0xf, 0x3, 0xffffffffffffffff, &(0x7f0000000140)="940c1f2149747e7734510c34c143183667a187dc4f624f6c2de12452792a6fb529e6bf2a661dc23a844b00925c244a9f2967c0ca9868ee50eacf67a2ad7681d82f5a38cbd6d7641f843fa129e00f701fb01835f497b53672b3e5a3f6838f28aa240bf21eb5e5cbe7804fd307404474ae0242f8dea7a08e0fe9479b06f2795f857f8eec271d35ba7f61a91c87296814189cc1dfc9c659cc5437452a0bd178323c50e8c005ba7fa9519b27965c9f6ffbc7dcaa8e658616cc83188fb131a703222d", 0xc0, 0x5, 0x0, 0x1}, &(0x7f0000000280)) io_getevents(r0, 0x2, 0x8f, &(0x7f0000d83f60)=[{}, {}], &(0x7f00005cfff0)={0x4000000000001, 0x7}) io_setup(0x7, &(0x7f0000000040)) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/route\x00') ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000440)=0x0) perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x4a, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ef4}, r3, 0x0, 0xffffffffffffffff, 0x1) pread64(r1, &(0x7f00000002c0)=""/85, 0xe9, 0x0) socketpair$packet(0x11, 0x3, 0x300, &(0x7f00000003c0)) r4 = memfd_create(&(0x7f0000000240)=':+lo#\x00', 0x0) fdatasync(r4) io_submit(r0, 0x1, &(0x7f0000001280)=[&(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f0000000100)}]) timerfd_create(0x7, 0x80800) getsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000500)={@multicast2, @rand_addr, 0x0}, &(0x7f0000000540)=0xc) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r2, 0xc08c5335, &(0x7f0000000700)={0x3, 0x4, 0xf7ba, 'queue0\x00', 0x7ede}) clock_gettime(0x0, &(0x7f00000005c0)={0x0, 0x0}) sendmsg$can_bcm(r4, &(0x7f00000006c0)={&(0x7f0000000580)={0x1d, r5}, 0x10, &(0x7f0000000680)={&(0x7f0000000600)=ANY=[@ANYBLOB="05d2a5c2e87ab9c5661b5d0000000000", @ANYRES64=r6, @ANYRES64=r7/1000+30000, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="020000e001000000030000e006030000d4e6a531c397b4b7"], 0x48}, 0x1, 0x0, 0x0, 0x4040}, 0x4) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000380)={0x5, 0x0, 0x199c, 0x1, 0x20, 0x81, 0x80000001, 0x1, 0x7b4d1e16, 0x81, 0x7ff, 0x540000}) io_destroy(r0) setsockopt$llc_int(r2, 0x10c, 0xffffffffffffffff, &(0x7f0000000340)=0x3, 0x77) 2018/03/29 11:11:49 executing program 1: io_setup(0x3, &(0x7f0000000000)=0x0) accept$unix(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000100)=0x6e) r1 = syz_open_dev$usbmon(&(0x7f0000000200)='/dev/usbmon#\x00', 0x0, 0x0) io_cancel(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0xf, 0x3, 0xffffffffffffffff, &(0x7f0000000140)="940c1f2149747e7734510c34c143183667a187dc4f624f6c2de12452792a6fb529e6bf2a661dc23a844b00925c244a9f2967c0ca9868ee50eacf67a2ad7681d82f5a38cbd6d7641f843fa129e00f701fb01835f497b53672b3e5a3f6838f28aa240bf21eb5e5cbe7804fd307404474ae0242f8dea7a08e0fe9479b06f2795f857f8eec271d35ba7f61a91c87296814189cc1dfc9c659cc5437452a0bd178323c50e8c005ba7fa9519b27965c9f6ffbc7dcaa8e658616cc83188fb131a703222d", 0xc0, 0x5, 0x0, 0x1}, &(0x7f0000000280)) io_getevents(r0, 0x2, 0x8f, &(0x7f0000d83f60)=[{}, {}], &(0x7f00005cfff0)={0x4000000000001, 0x7}) io_getevents(r0, 0x0, 0x5, &(0x7f00000002c0)=[{}, {}, {}, {}, {}], &(0x7f00000003c0)) io_setup(0x7, &(0x7f0000000040)) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/route\x00') ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000440)=0x0) perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x4a, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, r3, 0x0, r1, 0x1) pread64(r2, &(0x7f0000000000)=""/85, 0xfe42, 0x5d) r4 = memfd_create(&(0x7f0000000240)=':+lo#\x00', 0x0) fdatasync(r4) io_submit(r0, 0x1, &(0x7f0000001280)=[&(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f0000000100)}]) timerfd_create(0x7, 0x80800) io_destroy(r0) setsockopt$llc_int(r1, 0x10c, 0x9, &(0x7f0000000380)=0x3, 0x4) [ 308.887318] bond0 (unregistering): Released all slaves 2018/03/29 11:11:49 executing program 6: openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x0, 0x0) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, &(0x7f0000000340)=0x1) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f000051cff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000943ffc)=0xa35) read(r0, &(0x7f00003fefff)=""/1, 0x1) r1 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000029000)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r0, &(0x7f0000dcdff0)=[{&(0x7f0000cd8000)=""/1, 0x1}], 0x1) ioctl$int_in(r2, 0x5452, &(0x7f0000b28000)=0x3c) write$cgroup_type(0xffffffffffffffff, &(0x7f00000002c0)='threaded\x00', 0x9) syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000fb9000)) fcntl$setsig(r2, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r3}], 0x1, 0xfffffffffffffff8) read$eventfd(0xffffffffffffffff, &(0x7f0000000040), 0x8) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)) r4 = dup2(r2, r3) fcntl$setown(r4, 0x8, r1) ptrace$cont(0xffffffffffffffff, r1, 0x0, 0x8) tkill(r1, 0x16) r5 = gettid() process_vm_readv(r5, &(0x7f0000001880)=[{&(0x7f0000000680)=""/198, 0xc6}, {&(0x7f0000000780)=""/247, 0xf7}, {&(0x7f0000000380)=""/12, 0xc}, {&(0x7f00000003c0)=""/6, 0x6}, {&(0x7f0000000400)=""/14, 0xe}], 0x5, &(0x7f00000019c0)=[{&(0x7f0000001900)=""/41, 0x29}, {&(0x7f0000001940)=""/112, 0x70}], 0x2, 0x0) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f0000000240)={{{@in6}}, {{@in=@local}, 0x0, @in=@local}}, &(0x7f0000000100)=0xe8) 2018/03/29 11:11:49 executing program 0: r0 = perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x4a, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffff9c, 0xc00caee0, &(0x7f0000000180)={0x0, r0, 0x1}) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) fcntl$getownex(r0, 0x10, &(0x7f0000000400)={0x0, 0x0}) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0xffff, 0xe3, 0x6, 0x4, 0x0, 0x7, 0x0, 0x2, 0x10001, 0x1, 0x7, 0x8, 0x100, 0x4, 0x0, 0x7f, 0x20, 0x0, 0x4, 0x5, 0x90a4, 0x7, 0x2, 0x73, 0x8, 0x7, 0x4, 0x7e0, 0x101, 0x0, 0x2, 0x309, 0x0, 0x0, 0xfffffffffffffff9, 0x9, 0x0, 0x4, 0x0, @perf_config_ext={0x20, 0x1}, 0x8140, 0x2, 0x0, 0x4, 0xca1, 0xb5}, r4, 0x4, r1, 0x8) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) futimesat(r1, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0)={{r2, r3/1000+10000}, {r5, r6/1000+10000}}) unshare(0x8000000) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0xdc, 0x40}, 0x341) r8 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8910, &(0x7f0000000080)=@buf={0x0, &(0x7f0000000000)}) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x13, &(0x7f0000000ffc), 0x4) mq_open(&(0x7f00000000c0)='syzkaller0\x00', 0x40, 0x8, &(0x7f0000000100)={0x5, 0x80000000, 0x0, 0xfffffffffffffff9, 0x1, 0xfffffffffffffffd, 0x7fff, 0x200}) socket$inet_tcp(0x2, 0x1, 0x0) r9 = dup3(r8, r7, 0x80000) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r9, 0x84, 0x66, &(0x7f00000002c0)={0x0, 0x8ed6}, &(0x7f0000000300)=0x1) bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) shmget(0xffffffffffffffff, 0x8000, 0x49b, &(0x7f0000ff8000/0x8000)=nil) ioctl$sock_inet_SIOCGIFPFLAGS(r8, 0x8935, &(0x7f0000000080)={'syzkaller0\x00'}) ppoll(&(0x7f0000000780)=[{r1, 0x300}, {r1, 0x8401}], 0x2, &(0x7f00000007c0)={0x77359400}, &(0x7f0000000800)={0x9}, 0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000280)={0x0, 0x0, 0x9}, 0x10) r10 = semget$private(0x0, 0x4, 0x0) semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0x0, 0x1000}], 0x1, &(0x7f0000000080)={0x0, 0x1c9c380}) semctl$IPC_RMID(r10, 0x0, 0x0) 2018/03/29 11:11:49 executing program 7: io_setup(0x3, &(0x7f0000000000)=0x0) accept$unix(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000100)=0x6e) r1 = syz_open_dev$usbmon(&(0x7f0000000200)='/dev/usbmon#\x00', 0x7ff, 0x0) io_cancel(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0xf, 0x3, 0xffffffffffffffff, &(0x7f0000000140)="940c1f2149747e7734510c34c143183667a187dc4f624f6c2de12452792a6fb529e6bf2a661dc23a844b00925c244a9f2967c0ca9868ee50eacf67a2ad7681d82f5a38cbd6d7641f843fa129e00f701fb01835f497b53672b3e5a3f6838f28aa240bf21eb5e5cbe7804fd307404474ae0242f8dea7a08e0fe9479b06f2795f857f8eec271d35ba7f61a91c87296814189cc1dfc9c659cc5437452a0bd178323c50e8c005ba7fa9519b27965c9f6ffbc7dcaa8e658616cc83188fb131a703222d", 0xc0, 0x5, 0x0, 0x1}, &(0x7f0000000280)) io_getevents(r0, 0x2, 0x8f, &(0x7f0000d83f60)=[{}, {}], &(0x7f00005cfff0)={0x4000000000001, 0x7}) io_getevents(r0, 0x0, 0x5, &(0x7f00000002c0)=[{}, {}, {}, {}, {}], &(0x7f00000003c0)) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc02c5341, &(0x7f0000000480)) io_setup(0x7, &(0x7f0000000040)) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/route\x00') ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000440)=0x0) perf_event_open(&(0x7f0000aaa000)={0x0, 0x70, 0x4a, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ef4}, r3, 0x0, 0xffffffffffffffff, 0x1) pread64(r2, &(0x7f0000000000)=""/85, 0xfe42, 0x5d) r4 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r4) r5 = memfd_create(&(0x7f0000000240)=':+lo#\x00', 0x0) fdatasync(r5) io_submit(r0, 0x1, &(0x7f0000001280)=[&(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, 0x0, r5, &(0x7f0000000100)}]) timerfd_create(0x7, 0x80800) io_destroy(r0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x9, &(0x7f0000000380)=0x3, 0x4) io_setup(0x7fffffff, &(0x7f0000000500)) 2018/03/29 11:11:49 executing program 3 (fault-call:4 fault-nth:0): io_setup(0x3, &(0x7f0000000000)=0x0) accept$unix(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000100)=0x6e) r1 = syz_open_dev$usbmon(&(0x7f0000000200)='/dev/usbmon#\x00', 0x7ff, 0x0) io_cancel(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0xf, 0x0, 0xffffffffffffffff, &(0x7f0000000140)="940c1f2149747e7734510c34c143183667a187dc4f624f6c2de12452792a6fb529e6bf2a661dc23a844b00925c244a9f2967c0ca9868ee50eacf67a2ad7681d82f5a38cbd6d7641f843fa129e00f701fb01835f497b53672b3e5a3f6838f28aa240bf21eb5e5cbe7804fd307404474ae0242f8dea7a08e0fe9479b06f2795f857f8eec271d35ba7f61a91c87296814189cc1dfc9c659cc5437452a0bd178323c50e8c005ba7fa9519b27965c9f6ffbc7dcaa8e658616cc83188fb131a703222d", 0xc0, 0x5, 0x0, 0x1, r1}, &(0x7f0000000280)) io_getevents(r0, 0x2, 0x8f, &(0x7f0000d83f60)=[{}, {}], &(0x7f00005cfff0)={0x4000000000001, 0x7}) io_getevents(r0, 0x0, 0x5, &(0x7f00000002c0)=[{}, {}, {}, {}, {}], &(0x7f00000003c0)) io_setup(0x7, &(0x7f0000000040)) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/route\x00') ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000440)=0x0) perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x4a, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ef4}, r3, 0x0, r1, 0x1) pread64(r2, &(0x7f0000000000)=""/85, 0xfe42, 0x5d) r4 = memfd_create(&(0x7f0000000240)=':+lo#\x00', 0x0) fdatasync(r4) io_submit(r0, 0x1, &(0x7f0000001280)=[&(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f0000000100)}]) timerfd_create(0x7, 0x80800) io_destroy(r0) setsockopt$llc_int(r1, 0x10c, 0x9, &(0x7f0000000380)=0x3, 0x4) 2018/03/29 11:11:49 executing program 5: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) mkdir(&(0x7f0000000000)='./file1\x00', 0x0) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000811ffa)='bdev\x00', 0x0, &(0x7f0000444000)) mount(&(0x7f0000fb6000)='./file0\x00', &(0x7f00000002c0)='.', &(0x7f0000000240)='ubifs\x00', 0x1003, 0x0) mount(&(0x7f00002b9ff8)='./file0\x00', &(0x7f0000cbeff8)='./file0\x00', &(0x7f00005f7ffa)='ramfs\x00', 0x80000, &(0x7f000002f000)) mount(&(0x7f0000000040)='.', &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0)='binfmt_misc\x00', 0x0, &(0x7f0000000100)) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000100)="780766306da7bb0bac58e5a7e5009ca957d645418031ecb3ab1f6b7f5ae1ca3ab7a79e30e9f5a218246ba6c26d885541338571d27a21a1ca2a9080907329331d9a4c373b3209f321a704322830016615090a7625aafb9232347d02b0f5d1777df13be520da5cd0a64702f8ebf9e1fb695f993c36d901285c9c2ead") mount(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./file1\x00', &(0x7f0000000200)='anon_inodefs\x00', 0x2000, &(0x7f0000000240)) mount(&(0x7f0000adcff8)='./file0\x00', &(0x7f0000e08fff)='.', &(0x7f00005e9000)='cifs\x00', 0x2000, &(0x7f0000ad5000)) 2018/03/29 11:11:49 executing program 1: io_setup(0x3, &(0x7f0000000000)=0x0) accept$unix(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000100)=0x6e) r1 = syz_open_dev$usbmon(&(0x7f0000000200)='/dev/usbmon#\x00', 0x0, 0x0) io_cancel(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0xf, 0x3, 0xffffffffffffffff, &(0x7f0000000140)="940c1f2149747e7734510c34c143183667a187dc4f624f6c2de12452792a6fb529e6bf2a661dc23a844b00925c244a9f2967c0ca9868ee50eacf67a2ad7681d82f5a38cbd6d7641f843fa129e00f701fb01835f497b53672b3e5a3f6838f28aa240bf21eb5e5cbe7804fd307404474ae0242f8dea7a08e0fe9479b06f2795f857f8eec271d35ba7f61a91c87296814189cc1dfc9c659cc5437452a0bd178323c50e8c005ba7fa9519b27965c9f6ffbc7dcaa8e658616cc83188fb131a703222d", 0xc0, 0x5, 0x0, 0x1}, &(0x7f0000000280)) io_getevents(r0, 0x2, 0x8f, &(0x7f0000d83f60)=[{}, {}], &(0x7f00005cfff0)={0x4000000000001, 0x7}) io_getevents(r0, 0x0, 0x5, &(0x7f00000002c0)=[{}, {}, {}, {}, {}], &(0x7f00000003c0)) io_setup(0x7, &(0x7f0000000040)) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/route\x00') ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000440)=0x0) perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x4a, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, r3, 0x0, r1, 0x1) pread64(r2, &(0x7f0000000000)=""/85, 0xfe42, 0x5d) r4 = memfd_create(&(0x7f0000000240)=':+lo#\x00', 0x0) fdatasync(r4) io_submit(r0, 0x1, &(0x7f0000001280)=[&(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f0000000100)}]) timerfd_create(0x7, 0x80800) io_destroy(r0) setsockopt$llc_int(r1, 0x10c, 0x9, &(0x7f0000000380)=0x3, 0x4) 2018/03/29 11:11:49 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) readv(r0, &(0x7f0000001480)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x3}) r1 = syz_open_pts(r0, 0x2) r2 = dup3(r1, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000c34fff), 0xffffff0b) bind$llc(r2, &(0x7f0000000240)={0x1a, 0x8, 0x3632, 0x2, 0x5, 0x4, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}}, 0x10) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0) preadv(r3, &(0x7f00000004c0)=[{&(0x7f0000000480)=""/21, 0x15}], 0x1, 0x0) fchdir(0xffffffffffffffff) mkdir(&(0x7f0000000280)='./file1\x00', 0xffffffffffeffffc) fchmod(r2, 0x0) r4 = getpgid(0x0) fcntl$setownex(r3, 0xf, &(0x7f0000000200)={0x3, r4}) ioctl$KVM_GET_MP_STATE(r2, 0x8004ae98, &(0x7f00000002c0)) splice(r3, &(0x7f0000000400), 0xffffffffffffffff, &(0x7f0000000440), 0x9, 0x2) rename(&(0x7f0000001e00)='./file0\x00', &(0x7f0000000100)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f") mkdir(&(0x7f000000e000)='./control\x00', 0x0) r5 = open(&(0x7f0000000000)='./control\x00', 0x0, 0x0) renameat2(r5, &(0x7f0000000040)='./file0\x00', r5, &(0x7f0000000080)='./control\x00', 0x2) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r5, 0x84, 0x76, &(0x7f0000000300)={0x0, 0x80}, &(0x7f0000000340)=0x8) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r5, 0x84, 0x76, &(0x7f0000000380)={r6, 0x5}, &(0x7f00000003c0)=0x8) mknodat(r5, &(0x7f000003f000)='./control\x00', 0x0, 0x0) symlink(&(0x7f0000000180)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f", &(0x7f00000000c0)='./file0\x00') perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(r5, &(0x7f0000010000)='./control\x00', &(0x7f000003f000), &(0x7f0000001fe8), 0x0) 2018/03/29 11:11:49 executing program 2: io_setup(0x3, &(0x7f0000000000)=0x0) accept$unix(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000100)=0x6e) r1 = syz_open_dev$usbmon(&(0x7f0000000200)='/dev/usbmon#\x00', 0x7ff, 0x0) io_cancel(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0xf, 0x3, 0xffffffffffffffff, &(0x7f0000000140)="940c1f2149747e7734510c34c143183667a187dc4f624f6c2de12452792a6fb529e6bf2a661dc23a844b00925c244a9f2967c0ca9868ee50eacf67a2ad7681d82f5a38cbd6d7641f843fa129e00f701fb01835f497b53672b3e5a3f6838f28aa240bf21eb5e5cbe7804fd307404474ae0242f8dea7a08e0fe9479b06f2795f857f8eec271d35ba7f61a91c87296814189cc1dfc9c659cc5437452a0bd178323c50e8c005ba7fa9519b27965c9f6ffbc7dcaa8e658616cc83188fb131a703222d", 0xc0, 0x5, 0x0, 0x1}, &(0x7f0000000280)) io_getevents(r0, 0x2, 0x8f, &(0x7f0000d83f60)=[{}, {}], &(0x7f00005cfff0)={0x4000000000001, 0x7}) io_setup(0x7, &(0x7f0000000040)) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/route\x00') ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000440)=0x0) perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x4a, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ef4}, r3, 0x0, 0xffffffffffffffff, 0x1) pread64(r2, &(0x7f0000000000)=""/85, 0xfe42, 0x5d) r4 = memfd_create(&(0x7f0000000240)=':+lo#\x00', 0x0) fdatasync(r4) io_submit(r0, 0x1, &(0x7f0000001280)=[&(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f0000000100)}]) timerfd_create(0x7, 0x80800) io_destroy(r0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x9, &(0x7f0000000380)=0x3, 0x4) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f00000002c0)={'ip6gre0\x00', {0x2, 0x4e23}}) [ 309.321708] FAULT_INJECTION: forcing a failure. [ 309.321708] name failslab, interval 1, probability 0, space 0, times 0 [ 309.333062] CPU: 1 PID: 7612 Comm: syz-executor3 Not tainted 4.16.0-rc7+ #5 [ 309.340158] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 309.349504] Call Trace: [ 309.352090] dump_stack+0x194/0x24d [ 309.355714] ? arch_local_irq_restore+0x53/0x53 [ 309.360375] ? percpu_ref_put_many+0x132/0x220 [ 309.364954] ? memcg_kmem_charge_memcg+0x74/0x110 [ 309.369793] ? percpu_ref_tryget_live+0x2f0/0x2f0 [ 309.374635] should_fail+0x8c0/0xa40 [ 309.378347] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 309.383474] ? find_held_lock+0x35/0x1d0 [ 309.387538] ? __lock_is_held+0xb6/0x140 [ 309.391609] ? check_same_owner+0x320/0x320 [ 309.395928] ? rcu_note_context_switch+0x710/0x710 [ 309.400850] ? __lock_is_held+0xb6/0x140 [ 309.404901] ? lock_acquire+0x1d5/0x580 [ 309.408877] should_failslab+0xec/0x120 [ 309.412848] kmem_cache_alloc+0x47/0x760 [ 309.416921] ptlock_alloc+0x24/0x70 [ 309.420541] pte_alloc_one+0x59/0x100 [ 309.424337] do_huge_pmd_anonymous_page+0x549/0x19e0 [ 309.429431] ? trace_hardirqs_off+0x10/0x10 [ 309.433757] ? __thp_get_unmapped_area+0x130/0x130 [ 309.438669] ? __lock_acquire+0x664/0x3e00 [ 309.442890] ? __lock_acquire+0x664/0x3e00 [ 309.447115] ? trace_hardirqs_off+0x10/0x10 [ 309.451452] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 309.456636] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 309.461813] ? __lock_acquire+0x664/0x3e00 [ 309.466051] ? trace_hardirqs_off+0x10/0x10 [ 309.470376] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 309.475559] ? print_irqtrace_events+0x270/0x270 [ 309.480302] ? __lock_is_held+0xb6/0x140 [ 309.484350] ? cgroup_cpu_stat_updated+0xa5/0x410 [ 309.489184] ? trace_hardirqs_off+0x10/0x10 [ 309.493517] __handle_mm_fault+0x178a/0x38c0 [ 309.497925] ? __pmd_alloc+0x4e0/0x4e0 [ 309.501797] ? trace_hardirqs_off+0x10/0x10 [ 309.506119] ? find_held_lock+0x35/0x1d0 [ 309.510176] ? handle_mm_fault+0x35b/0xb10 [ 309.514397] ? lock_downgrade+0x980/0x980 [ 309.518559] ? handle_mm_fault+0x2f8/0xb10 [ 309.522793] handle_mm_fault+0x44a/0xb10 [ 309.526842] ? check_same_owner+0x320/0x320 [ 309.531154] ? __handle_mm_fault+0x38c0/0x38c0 [ 309.535720] ? vmacache_find+0x5f/0x280 [ 309.539678] ? vmacache_update+0xfe/0x130 [ 309.543817] ? find_vma+0x30/0x150 [ 309.547352] __do_page_fault+0x5c9/0xc90 [ 309.551404] ? _raw_spin_unlock_irq+0x27/0x70 [ 309.555896] ? mm_fault_error+0x2c0/0x2c0 [ 309.560043] ? trace_hardirqs_off+0x10/0x10 [ 309.564362] do_page_fault+0xee/0x730 [ 309.568153] ? __do_page_fault+0xc90/0xc90 [ 309.572386] ? find_held_lock+0x35/0x1d0 [ 309.576450] ? __might_fault+0x110/0x1d0 [ 309.580504] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 309.585348] page_fault+0x25/0x50 [ 309.588786] RIP: 0010:copy_user_generic_unrolled+0x89/0xc0 [ 309.594391] RSP: 0018:ffff8801b45b79b8 EFLAGS: 00010202 [ 309.599741] RAX: ffffed003ae36408 RBX: 0000000000000020 RCX: 0000000000000004 [ 309.606997] RDX: 0000000000000000 RSI: ffff8801d71b2020 RDI: 0000000020d83f60 [ 309.614257] RBP: ffff8801b45b79e8 R08: 0000000000000000 R09: ffffed003ae36408 [ 309.621515] R10: 0000000000000004 R11: ffffed003ae36407 R12: 0000000020d83f60 [ 309.628768] R13: ffff8801d71b2020 R14: 00007ffffffff000 R15: 0000000020d83f80 [ 309.636064] ? _copy_to_user+0x9b/0xc0 [ 309.639945] aio_read_events+0x40c/0x8c0 [ 309.644009] ? kiocb_free+0xa0/0xa0 [ 309.647627] ? __hrtimer_init+0xab/0x1f0 [ 309.651689] read_events+0x367/0x450 [ 309.655402] ? aio_read_events+0x8c0/0x8c0 [ 309.659633] ? lookup_ioctx+0x21d/0x680 [ 309.663598] ? prepare_to_wait+0x4d0/0x4d0 [ 309.667822] ? vfs_write+0x374/0x510 [ 309.671529] ? wait_for_completion+0x770/0x770 [ 309.676108] ? clock_was_set_work+0x30/0x30 [ 309.680437] do_io_getevents+0x14f/0x3a0 [ 309.684491] ? lookup_ioctx+0x680/0x680 [ 309.688450] ? __sb_end_write+0xa0/0xd0 [ 309.692427] SyS_io_getevents+0xc3/0x110 [ 309.696477] ? SyS_io_cancel+0x530/0x530 [ 309.700528] ? do_syscall_64+0xb7/0x940 [ 309.704493] ? SyS_io_cancel+0x530/0x530 [ 309.708543] do_syscall_64+0x281/0x940 [ 309.712413] ? __do_page_fault+0xc90/0xc90 [ 309.716637] ? trace_event_raw_event_sys_exit+0x260/0x260 2018/03/29 11:11:50 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) readv(r0, &(0x7f0000001480)=[{&(0x7f0000002000)=""/4096, 0x1000}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x3}) r1 = syz_open_pts(r0, 0x2) r2 = dup3(r1, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000c34fff), 0xffffff0b) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0) preadv(r3, &(0x7f00000004c0)=[{&(0x7f0000000480)=""/21, 0x15}], 0x1, 0x0) fchdir(0xffffffffffffffff) mkdir(&(0x7f0000000280)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f", 0xfffffffffffffffc) fchmod(r2, 0x0) splice(r3, &(0x7f0000000400), 0xffffffffffffffff, &(0x7f0000000440), 0x9, 0x2) rename(&(0x7f0000001e00)='./file0\x00', &(0x7f0000000100)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f") mkdir(&(0x7f000000e000)='./control\x00', 0x0) r4 = open(&(0x7f0000000000)='./control\x00', 0x0, 0x0) renameat2(r4, &(0x7f0000000040)='./file0\x00', r4, &(0x7f0000000080)='./control\x00', 0x2) clock_nanosleep(0x7, 0x0, &(0x7f0000000200)={0x77359400}, 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000300)={0x0, 0x80}, &(0x7f0000000340)=0x8) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000380)={r5, 0x5}, &(0x7f00000003c0)=0x8) mknodat(r4, &(0x7f000003f000)='./control\x00', 0x0, 0x0) symlink(&(0x7f0000000180)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f", &(0x7f00000000c0)='./file0\x00') perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(r4, &(0x7f0000010000)='./control\x00', &(0x7f000003f000), &(0x7f0000001fe8), 0x0) [ 309.722166] ? syscall_return_slowpath+0x550/0x550 [ 309.727084] ? syscall_return_slowpath+0x2ac/0x550 [ 309.732013] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 309.737378] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 309.742231] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 309.747411] RIP: 0033:0x4548b9 [ 309.750592] RSP: 002b:00007f550c2d7c68 EFLAGS: 00000246 ORIG_RAX: 00000000000000d0 [ 309.758299] RAX: ffffffffffffffda RBX: 00007f550c2d86d4 RCX: 00000000004548b9 [ 309.765577] RDX: 000000000000008f RSI: 0000000000000002 RDI: 00007f550c2b7000 [ 309.772839] RBP: 000000000072bea0 R08: 00000000205cfff0 R09: 0000000000000000 [ 309.780103] R10: 0000000020d83f60 R11: 0000000000000246 R12: 0000000000000013 [ 309.787362] R13: 000000000000018b R14: 00000000006f45a8 R15: 0000000000000000 [ 309.938542] IPVS: ftp: loaded support on port[0] = 21 [ 310.243496] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 310.676136] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 310.682225] 8021q: adding VLAN 0 to HW filter on device bond0 [ 310.727177] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready 2018/03/29 11:11:51 executing program 6: openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x0, 0x0) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, &(0x7f0000000340)=0x1) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f000051cff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000943ffc)=0xa35) read(r0, &(0x7f00003fefff)=""/1, 0x1) r1 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000029000)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r0, &(0x7f0000dcdff0)=[{&(0x7f0000cd8000)=""/1, 0x1}], 0x1) ioctl$int_in(r2, 0x5452, &(0x7f0000b28000)=0x3c) write$cgroup_type(0xffffffffffffffff, &(0x7f00000002c0)='threaded\x00', 0x9) syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000fb9000)) fcntl$setsig(r2, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r3}], 0x1, 0xfffffffffffffff8) read$eventfd(0xffffffffffffffff, &(0x7f0000000040), 0x8) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)) r4 = dup2(r2, r3) fcntl$setown(r4, 0x8, r1) ptrace$cont(0xffffffffffffffff, r1, 0x0, 0x8) tkill(r1, 0x16) r5 = gettid() process_vm_readv(r5, &(0x7f0000001880)=[{&(0x7f0000000680)=""/198, 0xc6}, {&(0x7f0000000780)=""/247, 0xf7}, {&(0x7f0000000380)=""/12, 0xc}, {&(0x7f00000003c0)=""/6, 0x6}, {&(0x7f0000000400)=""/14, 0xe}], 0x5, &(0x7f00000019c0)=[{&(0x7f0000001900)=""/41, 0x29}, {&(0x7f0000001940)=""/112, 0x70}], 0x2, 0x0) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f0000000240)={{{@in6}}, {{@in=@local}, 0x0, @in=@local}}, &(0x7f0000000100)=0xe8) 2018/03/29 11:11:51 executing program 0: r0 = perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x4a, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffff9c, 0xc00caee0, &(0x7f0000000180)={0x0, r0, 0x1}) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) fcntl$getownex(r0, 0x10, &(0x7f0000000400)={0x0, 0x0}) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0xffff, 0xe3, 0x6, 0x4, 0x0, 0x7, 0x0, 0x2, 0x10001, 0x1, 0x7, 0x8, 0x100, 0x4, 0x0, 0x7f, 0x20, 0x0, 0x4, 0x5, 0x90a4, 0x7, 0x2, 0x73, 0x8, 0x7, 0x4, 0x7e0, 0x101, 0x0, 0x2, 0x309, 0x0, 0x9, 0x0, 0x9, 0x0, 0x4, 0x0, @perf_config_ext={0x20, 0x1}, 0x8140, 0x2, 0x0, 0x4, 0xca1, 0xb5}, r4, 0x4, r1, 0x8) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) futimesat(r1, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0)={{r2, r3/1000+10000}, {r5, r6/1000+10000}}) unshare(0x8000000) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0xdc, 0x40}, 0x341) r8 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8910, &(0x7f0000000080)=@buf={0x0, &(0x7f0000000000)}) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x13, &(0x7f0000000ffc), 0x4) mq_open(&(0x7f00000000c0)='syzkaller0\x00', 0x40, 0x8, &(0x7f0000000100)={0x5, 0x80000000, 0x0, 0xfffffffffffffff9, 0x1, 0xfffffffffffffffd, 0x7fff, 0x200}) socket$inet_tcp(0x2, 0x1, 0x0) r9 = dup3(r8, r7, 0x80000) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r9, 0x84, 0x66, &(0x7f00000002c0)={0x0, 0x8ed6}, &(0x7f0000000300)=0x1) bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) shmget(0xffffffffffffffff, 0x8000, 0x49b, &(0x7f0000ff8000/0x8000)=nil) ioctl$sock_inet_SIOCGIFPFLAGS(r8, 0x8935, &(0x7f0000000080)={'syzkaller0\x00'}) ppoll(&(0x7f0000000780)=[{r1, 0x300}, {r1, 0x8401}], 0x2, &(0x7f00000007c0)={0x77359400}, &(0x7f0000000800)={0x9}, 0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000280)={0x0, 0x0, 0x9}, 0x10) r10 = semget$private(0x0, 0x4, 0x0) semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0x0, 0x1000}], 0x1, &(0x7f0000000080)={0x0, 0x1c9c380}) semctl$IPC_RMID(r10, 0x0, 0x0) 2018/03/29 11:11:51 executing program 1: io_setup(0x3, &(0x7f0000000000)=0x0) accept$unix(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000100)=0x6e) r1 = syz_open_dev$usbmon(&(0x7f0000000200)='/dev/usbmon#\x00', 0x0, 0x0) io_cancel(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0xf, 0x3, 0xffffffffffffffff, &(0x7f0000000140)="940c1f2149747e7734510c34c143183667a187dc4f624f6c2de12452792a6fb529e6bf2a661dc23a844b00925c244a9f2967c0ca9868ee50eacf67a2ad7681d82f5a38cbd6d7641f843fa129e00f701fb01835f497b53672b3e5a3f6838f28aa240bf21eb5e5cbe7804fd307404474ae0242f8dea7a08e0fe9479b06f2795f857f8eec271d35ba7f61a91c87296814189cc1dfc9c659cc5437452a0bd178323c50e8c005ba7fa9519b27965c9f6ffbc7dcaa8e658616cc83188fb131a703222d", 0xc0, 0x5, 0x0, 0x1}, &(0x7f0000000280)) io_getevents(r0, 0x2, 0x8f, &(0x7f0000d83f60)=[{}, {}], &(0x7f00005cfff0)={0x4000000000001, 0x7}) io_getevents(r0, 0x0, 0x5, &(0x7f00000002c0)=[{}, {}, {}, {}, {}], &(0x7f00000003c0)) io_setup(0x7, &(0x7f0000000040)) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/route\x00') ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000440)=0x0) perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x4a, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, r3, 0x0, r1, 0x1) pread64(r2, &(0x7f0000000000)=""/85, 0xfe42, 0x5d) r4 = memfd_create(&(0x7f0000000240)=':+lo#\x00', 0x0) fdatasync(r4) io_submit(r0, 0x1, &(0x7f0000001280)=[&(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f0000000100)}]) timerfd_create(0x7, 0x80800) io_destroy(r0) setsockopt$llc_int(r1, 0x10c, 0x9, &(0x7f0000000380)=0x3, 0x4) 2018/03/29 11:11:51 executing program 5: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) mkdir(&(0x7f0000000000)='./file1\x00', 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000740)='/dev/sequencer2\x00', 0x604403, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000780)={@in={{0x2, 0x4e20, @multicast1=0xe0000001}}, 0x387cbd81, 0x7, 0x66585e07, "1c1ff9bf85cd1be69a0d115f02467e98505bab80bc1cd80f0018fad9b117207f63ce580902ba98a34df2ba8b01457cfb1963ebca531f0793c9aca500c74bea376177fdaccc4a683a48c34729b863365d"}, 0xd8) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000811ffa), 0x0, &(0x7f0000444000)) mount(&(0x7f0000fb6000)='./file0\x00', &(0x7f0000d78000)='.', &(0x7f0000fdb000)='ubifs\x00', 0x1003, 0x0) fstat(0xffffffffffffff9c, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$packet(0x11, 0x3, 0x300) quotactl(0x9e00000, &(0x7f0000000300)='.', r1, &(0x7f00000003c0)="8ab0") r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000400)='/dev/autofs\x00', 0x185840, 0x0) lchown(&(0x7f0000000880)='./file0\x00', r1, r2) setuid(r1) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r3, 0x28, 0x2, &(0x7f0000000440)=0x576, 0x8) mount(&(0x7f00002b9ff8)='./file0\x00', &(0x7f0000cbeff8)='./file0\x00', &(0x7f00005f7ffa)='ramfs\x00', 0x80000, &(0x7f000002f000)) mount(&(0x7f0000000040)='.', &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0)='binfmt_misc\x00', 0x0, &(0x7f00000002c0)="34b89a7418be7f8f13ba701c7494c0ddfeadc5c654b2d3b7826dbc5a9db4789bf2b9a8eb5e6dd3b96fc4") mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) msgget(0x3, 0x81) r4 = add_key(&(0x7f0000000100)='logon\x00', &(0x7f0000000140)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000240)="719d9912f4b61f07112be5a830a8a93bb568999dd34ce86df8477eb2ff2668ace239caf0948cd35bf2af0456cae4eed35bc6f5989a1b11e87142e40cdb7eb298cc0ce02864d4a5a40bb8dab1221266ed1f27a554f88ce17906ea209eda89ea0456d2c8db56ca316f6a6f8fe659890db31d0d2ac9d01946c4", 0x78, 0xffffffffffffffff) keyctl$setperm(0x5, r4, 0x4000000) mount(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./file1\x00', &(0x7f0000000200)='anon_inodefs\x00', 0x2000, &(0x7f0000000240)) recvfrom$unix(r3, &(0x7f0000000480)=""/238, 0xee, 0x0, 0x0, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r3, 0x0, 0x81, &(0x7f00000006c0)={'nat\x00', 0x2, [{}, {}]}, 0x48) mount(&(0x7f0000adcff8)='./file0\x00', &(0x7f0000e08fff)='.', &(0x7f00005e9000)='cifs\x00', 0x2000, &(0x7f0000ad5000)) mount(&(0x7f0000000580)='.', &(0x7f00000005c0)='./file1\x00', &(0x7f0000000600)='securityfs\x00', 0x280000, &(0x7f0000000640)="1524078ef7bf17eb51984600fbbdcfb0005a3fab820edfa71bdb37f570bfc271dc5ad0a7233df165686bce77224ea23e0b8332e80d6972954ca672e6207d2791c0d7f526eeb98c5d325637a05a41f6ce089a893f0e154e3f1b9382478f7233d455c62c") 2018/03/29 11:11:51 executing program 2: io_setup(0x5, &(0x7f00000003c0)=0x0) accept$unix(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000100)=0x6e) syz_open_dev$usbmon(&(0x7f0000000200)='/dev/usbmon#\x00', 0x7ff, 0x0) io_cancel(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0xf, 0x3, 0xffffffffffffffff, &(0x7f0000000140)="940c1f2149747e7734510c34c143183667a187dc4f624f6c2de12452792a6fb529e6bf2a661dc23a844b00925c244a9f2967c0ca9868ee50eacf67a2ad7681d82f5a38cbd6d7641f843fa129e00f701fb01835f497b53672b3e5a3f6838f28aa240bf21eb5e5cbe7804fd307404474ae0242f8dea7a08e0fe9479b06f2795f857f8eec271d35ba7f61a91c87296814189cc1dfc9c659cc5437452a0bd178323c50e8c005ba7fa9519b27965c9f6ffbc7dcaa8e658616cc83188fb131a703222d", 0xc0, 0x5, 0x0, 0x1}, &(0x7f0000000280)) io_getevents(r0, 0x2, 0x8f, &(0x7f0000d83f60)=[{}, {}], &(0x7f00005cfff0)={0x4000000000001, 0x7}) io_setup(0x7, &(0x7f0000000040)) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/route\x00') ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000440)=0x0) perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x4a, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ef4}, r2, 0x0, 0xffffffffffffffff, 0x1) pread64(r1, &(0x7f0000000000)=""/85, 0xfe42, 0x5d) r3 = memfd_create(&(0x7f0000000240)=':+lo#\x00', 0x0) fdatasync(r3) io_submit(r0, 0x1, &(0x7f0000001280)=[&(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000000100)}]) timerfd_create(0x7, 0x80800) io_destroy(r0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x9, &(0x7f0000000380)=0x3, 0x4) 2018/03/29 11:11:51 executing program 3 (fault-call:4 fault-nth:1): io_setup(0x3, &(0x7f0000000000)=0x0) accept$unix(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000100)=0x6e) r1 = syz_open_dev$usbmon(&(0x7f0000000200)='/dev/usbmon#\x00', 0x7ff, 0x0) io_cancel(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0xf, 0x0, 0xffffffffffffffff, &(0x7f0000000140)="940c1f2149747e7734510c34c143183667a187dc4f624f6c2de12452792a6fb529e6bf2a661dc23a844b00925c244a9f2967c0ca9868ee50eacf67a2ad7681d82f5a38cbd6d7641f843fa129e00f701fb01835f497b53672b3e5a3f6838f28aa240bf21eb5e5cbe7804fd307404474ae0242f8dea7a08e0fe9479b06f2795f857f8eec271d35ba7f61a91c87296814189cc1dfc9c659cc5437452a0bd178323c50e8c005ba7fa9519b27965c9f6ffbc7dcaa8e658616cc83188fb131a703222d", 0xc0, 0x5, 0x0, 0x1, r1}, &(0x7f0000000280)) io_getevents(r0, 0x2, 0x8f, &(0x7f0000d83f60)=[{}, {}], &(0x7f00005cfff0)={0x4000000000001, 0x7}) io_getevents(r0, 0x0, 0x5, &(0x7f00000002c0)=[{}, {}, {}, {}, {}], &(0x7f00000003c0)) io_setup(0x7, &(0x7f0000000040)) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/route\x00') ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000440)=0x0) perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x4a, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ef4}, r3, 0x0, r1, 0x1) pread64(r2, &(0x7f0000000000)=""/85, 0xfe42, 0x5d) r4 = memfd_create(&(0x7f0000000240)=':+lo#\x00', 0x0) fdatasync(r4) io_submit(r0, 0x1, &(0x7f0000001280)=[&(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f0000000100)}]) timerfd_create(0x7, 0x80800) io_destroy(r0) setsockopt$llc_int(r1, 0x10c, 0x9, &(0x7f0000000380)=0x3, 0x4) 2018/03/29 11:11:51 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) readv(r0, &(0x7f0000001480)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x3}) r1 = syz_open_pts(r0, 0x2) r2 = dup3(r1, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000c34fff), 0xffffff0b) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0) preadv(r3, &(0x7f00000004c0)=[{&(0x7f0000000480)=""/21, 0x15}], 0x1, 0x0) fchdir(0xffffffffffffffff) mkdir(&(0x7f0000001540)='./control\x00', 0xfffffffffffffffc) splice(r3, &(0x7f0000000400), 0xffffffffffffffff, &(0x7f0000000440), 0x9, 0x2) rename(&(0x7f0000001e00)='./file0\x00', &(0x7f0000000100)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f") mkdir(&(0x7f000000e000)='./control\x00', 0x0) r4 = open(&(0x7f0000000000)='./control\x00', 0x0, 0x0) renameat2(r4, &(0x7f0000000040)='./file0\x00', r4, &(0x7f0000000080)='./control\x00', 0x2) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000300)={0x0, 0x80}, &(0x7f0000000340)=0x8) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000380)={r5, 0x5}, &(0x7f00000003c0)=0x8) mknodat(r4, &(0x7f000003f000)='./control\x00', 0x0, 0x0) symlink(&(0x7f0000000180)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f", &(0x7f00000000c0)='./file0\x00') perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(r4, &(0x7f0000010000)='./control\x00', &(0x7f000003f000), &(0x7f0000001fe8), 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000200)=0xfffffffffffffff9) ioctl$KVM_IRQ_LINE(r2, 0x4008ae61, &(0x7f0000000240)={0x3, 0x2}) 2018/03/29 11:11:51 executing program 7: io_setup(0x3, &(0x7f0000000000)=0x0) accept$unix(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000100)=0x6e) r1 = syz_open_dev$usbmon(&(0x7f0000000200)='/dev/usbmon#\x00', 0x7ff, 0x0) io_cancel(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0xf, 0x3, 0xffffffffffffffff, &(0x7f0000000140)="940c1f2149747e7734510c34c143183667a187dc4f624f6c2de12452792a6fb529e6bf2a661dc23a844b00925c244a9f2967c0ca9868ee50eacf67a2ad7681d82f5a38cbd6d7641f843fa129e00f701fb01835f497b53672b3e5a3f6838f28aa240bf21eb5e5cbe7804fd307404474ae0242f8dea7a08e0fe9479b06f2795f857f8eec271d35ba7f61a91c87296814189cc1dfc9c659cc5437452a0bd178323c50e8c005ba7fa9519b27965c9f6ffbc7dcaa8e658616cc83188fb131a703222d", 0xc0, 0x5, 0x0, 0x1}, &(0x7f0000000280)) io_getevents(r0, 0x2, 0x8f, &(0x7f0000d83f60)=[{}, {}], &(0x7f00005cfff0)={0x4000000000001, 0x7}) io_getevents(r0, 0x0, 0x5, &(0x7f00000002c0)=[{}, {}, {}, {}, {}], &(0x7f00000003c0)) io_setup(0x7, &(0x7f0000000040)) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/route\x00') ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000440)=0x0) perf_event_open(&(0x7f0000aaa000)={0x0, 0x70, 0x4a, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ef4}, r3, 0x0, 0xffffffffffffffff, 0x1) pread64(r2, &(0x7f0000000000)=""/85, 0xfe42, 0x5d) r4 = memfd_create(&(0x7f0000000240)=':+lo#\x00', 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f0000000480)={0x3, 0x9, 0x4, 0x5, 0xa3d, 0xff}) fdatasync(r4) io_submit(r0, 0x1, &(0x7f0000001280)=[&(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f0000000100)}]) timerfd_create(0x7, 0x80800) io_destroy(r0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x9, &(0x7f0000000380)=0x3, 0x4) [ 310.772261] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 310.778406] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 310.785396] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready 2018/03/29 11:11:51 executing program 3: io_setup(0x3, &(0x7f0000000000)=0x0) accept$unix(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000100)=0x6e) r1 = syz_open_dev$usbmon(&(0x7f0000000200)='/dev/usbmon#\x00', 0x7ff, 0x0) io_cancel(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0xf, 0x0, 0xffffffffffffffff, &(0x7f0000000140)="940c1f2149747e7734510c34c143183667a187dc4f624f6c2de12452792a6fb529e6bf2a661dc23a844b00925c244a9f2967c0ca9868ee50eacf67a2ad7681d82f5a38cbd6d7641f843fa129e00f701fb01835f497b53672b3e5a3f6838f28aa240bf21eb5e5cbe7804fd307404474ae0242f8dea7a08e0fe9479b06f2795f857f8eec271d35ba7f61a91c87296814189cc1dfc9c659cc5437452a0bd178323c50e8c005ba7fa9519b27965c9f6ffbc7dcaa8e658616cc83188fb131a703222d", 0xc0, 0x5, 0x0, 0x1, r1}, &(0x7f0000000280)) io_getevents(r0, 0x2, 0x8f, &(0x7f0000d83f60)=[{}, {}], &(0x7f00005cfff0)={0x4000000000001, 0x7}) io_getevents(r0, 0x0, 0x5, &(0x7f00000002c0)=[{}, {}, {}, {}, {}], &(0x7f00000003c0)) io_setup(0x7, &(0x7f0000000040)) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/route\x00') ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000440)=0x0) perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x4a, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ef4}, r3, 0x0, r1, 0x1) pread64(r2, &(0x7f0000000000)=""/85, 0xfe42, 0x5d) r4 = memfd_create(&(0x7f0000000240)=':+lo#\x00', 0x0) fdatasync(r4) io_submit(r0, 0x1, &(0x7f0000001280)=[&(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f0000000100)}]) timerfd_create(0x7, 0x80800) io_destroy(r0) setsockopt$llc_int(r1, 0x10c, 0x9, &(0x7f0000000380)=0x3, 0x4) 2018/03/29 11:11:51 executing program 1: io_setup(0x3, &(0x7f0000000000)=0x0) accept$unix(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000100)=0x6e) r1 = syz_open_dev$usbmon(&(0x7f0000000200)='/dev/usbmon#\x00', 0x0, 0x0) io_cancel(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0xf, 0x3, 0xffffffffffffffff, &(0x7f0000000140)="940c1f2149747e7734510c34c143183667a187dc4f624f6c2de12452792a6fb529e6bf2a661dc23a844b00925c244a9f2967c0ca9868ee50eacf67a2ad7681d82f5a38cbd6d7641f843fa129e00f701fb01835f497b53672b3e5a3f6838f28aa240bf21eb5e5cbe7804fd307404474ae0242f8dea7a08e0fe9479b06f2795f857f8eec271d35ba7f61a91c87296814189cc1dfc9c659cc5437452a0bd178323c50e8c005ba7fa9519b27965c9f6ffbc7dcaa8e658616cc83188fb131a703222d", 0xc0, 0x5, 0x0, 0x1}, &(0x7f0000000280)) io_getevents(r0, 0x2, 0x8f, &(0x7f0000d83f60)=[{}, {}], &(0x7f00005cfff0)={0x4000000000001, 0x7}) io_getevents(r0, 0x0, 0x5, &(0x7f00000002c0)=[{}, {}, {}, {}, {}], &(0x7f00000003c0)) io_setup(0x7, &(0x7f0000000040)) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/route\x00') ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000440)=0x0) perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x4a, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ef4}, 0x0, 0x0, r1, 0x1) pread64(r2, &(0x7f0000000000)=""/85, 0xfe42, 0x5d) r4 = memfd_create(&(0x7f0000000240)=':+lo#\x00', 0x0) fdatasync(r4) io_submit(r0, 0x1, &(0x7f0000001280)=[&(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f0000000100)}]) timerfd_create(0x7, 0x80800) io_destroy(r0) setsockopt$llc_int(r1, 0x10c, 0x9, &(0x7f0000000380)=0x3, 0x4) 2018/03/29 11:11:51 executing program 0: r0 = perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x4a, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffff9c, 0xc00caee0, &(0x7f0000000180)={0x0, r0, 0x1}) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) fcntl$getownex(r0, 0x10, &(0x7f0000000400)={0x0, 0x0}) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0xffff, 0xe3, 0x6, 0x4, 0x0, 0x7, 0x0, 0x2, 0x10001, 0x1, 0x7, 0x8, 0x100, 0x4, 0x0, 0x7f, 0x20, 0x0, 0x4, 0x5, 0x90a4, 0x7, 0x2, 0x73, 0x8, 0x7, 0x4, 0x7e0, 0x101, 0x0, 0x2, 0x309, 0x0, 0x9, 0x0, 0x9, 0x0, 0x4, 0x0, @perf_config_ext={0x20, 0x1}, 0x8140, 0x2, 0x0, 0x4, 0xca1, 0xb5}, r4, 0x4, r1, 0x8) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) futimesat(r1, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0)={{r2, r3/1000+10000}, {r5, r6/1000+10000}}) unshare(0x8000000) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0xdc, 0x40}, 0x341) r8 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8910, &(0x7f0000000080)=@buf={0x0, &(0x7f0000000000)}) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x13, &(0x7f0000000ffc), 0x4) mq_open(&(0x7f00000000c0)='syzkaller0\x00', 0x40, 0x8, &(0x7f0000000100)={0x5, 0x80000000, 0x0, 0xfffffffffffffff9, 0x1, 0xfffffffffffffffd, 0x7fff, 0x200}) socket$inet_tcp(0x2, 0x1, 0x0) r9 = dup3(r8, r7, 0x80000) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r9, 0x84, 0x66, &(0x7f00000002c0)={0x0, 0x8ed6}, &(0x7f0000000300)=0x1) bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) shmget(0xffffffffffffffff, 0x8000, 0x49b, &(0x7f0000ff8000/0x8000)=nil) ioctl$sock_inet_SIOCGIFPFLAGS(r8, 0x8935, &(0x7f0000000080)={'syzkaller0\x00'}) ppoll(&(0x7f0000000780)=[{r1, 0x300}, {r1, 0x8401}], 0x2, &(0x7f00000007c0)={0x77359400}, &(0x7f0000000800)={0x9}, 0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000280)={0x0, 0x0, 0x9}, 0x10) r10 = semget$private(0x0, 0x4, 0x0) semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0x0, 0x1000}], 0x1, &(0x7f0000000080)={0x0, 0x1c9c380}) semctl$IPC_RMID(r10, 0x0, 0x0) 2018/03/29 11:11:51 executing program 7: io_setup(0x3, &(0x7f0000000000)=0x0) accept$unix(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000100)=0x6e) r1 = syz_open_dev$usbmon(&(0x7f0000000200)='/dev/usbmon#\x00', 0x7ff, 0x0) io_cancel(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0xf, 0x3, 0xffffffffffffffff, &(0x7f0000000140)="940c1f2149747e7734510c34c143183667a187dc4f624f6c2de12452792a6fb529e6bf2a661dc23a844b00925c244a9f2967c0ca9868ee50eacf67a2ad7681d82f5a38cbd6d7641f843fa129e00f701fb01835f497b53672b3e5a3f6838f28aa240bf21eb5e5cbe7804fd307404474ae0242f8dea7a08e0fe9479b06f2795f857f8eec271d35ba7f61a91c87296814189cc1dfc9c659cc5437452a0bd178323c50e8c005ba7fa9519b27965c9f6ffbc7dcaa8e658616cc83188fb131a703222d", 0xc0, 0x5, 0x0, 0x1}, &(0x7f0000000280)) io_getevents(r0, 0x2, 0x8f, &(0x7f0000d83f60)=[{}, {}], &(0x7f00005cfff0)={0x4000000000001, 0x7}) io_getevents(r0, 0x0, 0x5, &(0x7f00000002c0)=[{}, {}, {}, {}, {}], &(0x7f00000003c0)) io_setup(0x7, &(0x7f0000000040)) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/route\x00') ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000440)=0x0) getsockopt$inet_tcp_int(r1, 0x6, 0x3f, &(0x7f0000000500), &(0x7f0000000540)=0x4) perf_event_open(&(0x7f0000aaa000)={0x0, 0x70, 0x4a, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ef4}, r3, 0x0, 0xffffffffffffffff, 0x1) pread64(r2, &(0x7f0000000000)=""/85, 0xfe42, 0x5d) r4 = memfd_create(&(0x7f0000000240)=':+lo#\x00', 0x0) fdatasync(r4) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000480)={0x4, @tick=0x3, 0x3c, {0x6, 0x4}, 0x6, 0x0, 0x101}) io_submit(r0, 0x1, &(0x7f0000001280)=[&(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f0000000100)}]) timerfd_create(0x7, 0x80800) io_destroy(r0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x9, &(0x7f0000000380)=0x3, 0x4) 2018/03/29 11:11:51 executing program 2: io_setup(0x3, &(0x7f0000000000)=0x0) accept$unix(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000100)=0x6e) syz_open_dev$usbmon(&(0x7f0000000200)='/dev/usbmon#\x00', 0x7ff, 0x0) io_cancel(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0xf, 0x3, 0xffffffffffffffff, &(0x7f0000000140)="940c1f2149747e7734510c34c143183667a187dc4f624f6c2de12452792a6fb529e6bf2a661dc23a844b00925c244a9f2967c0ca9868ee50eacf67a2ad7681d82f5a38cbd6d7641f843fa129e00f701fb01835f497b53672b3e5a3f6838f28aa240bf21eb5e5cbe7804fd307404474ae0242f8dea7a08e0fe9479b06f2795f857f8eec271d35ba7f61a91c87296814189cc1dfc9c659cc5437452a0bd178323c50e8c005ba7fa9519b27965c9f6ffbc7dcaa8e658616cc83188fb131a703222d", 0xc0, 0x5, 0x0, 0x1}, &(0x7f0000000280)) io_getevents(r0, 0x2, 0x8f, &(0x7f0000d83f60)=[{}, {}], &(0x7f00005cfff0)={0x4000000000001, 0x7}) io_setup(0x7, &(0x7f0000000040)) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/route\x00') ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000440)=0x0) perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x4a, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ef4}, r2, 0x0, 0xffffffffffffffff, 0x1) pread64(r1, &(0x7f0000000000)=""/85, 0xfe42, 0x5d) r3 = memfd_create(&(0x7f0000000240)=':+lo#\x00', 0x0) fdatasync(r3) io_submit(r0, 0x1, &(0x7f0000001280)=[&(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000000100)}]) timerfd_create(0x7, 0x80800) io_destroy(r0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0x2, 0x4e23, @local={0xac, 0x14, 0x14, 0xaa}}}, 0x1000, 0x800000000000000, 0x8, 0xfffffffffffeffff, 0xa2}, &(0x7f00000003c0)=0x98) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000480)={0x4000000, 0x4, 0x200, 0x6, 0x6, 0x5, 0x3, 0x6, r4}, &(0x7f00000004c0)=0x20) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x9, &(0x7f0000000380)=0x3, 0x4) 2018/03/29 11:11:51 executing program 5: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) mkdir(&(0x7f0000000000)='./file1\x00', 0x0) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000811ffa)='bdev\x00', 0x0, &(0x7f0000444000)) mount(&(0x7f0000fb6000)='./file0\x00', &(0x7f0000d78000)='.', &(0x7f0000fdb000)='ubifs\x00', 0x1003, 0x0) mount(&(0x7f00002b9ff8)='./file0\x00', &(0x7f0000cbeff8)='./file0\x00', &(0x7f00005f7ffa)='ramfs\x00', 0x80000, &(0x7f000002f000)) mount(&(0x7f0000000040)='.', &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0)='binfmt_misc\x00', 0x0, &(0x7f0000000100)) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) mount(&(0x7f0000000140)='./file1\x00', &(0x7f0000000240)='.', &(0x7f0000000200)='anon_inodefs\x00', 0x1ffe, &(0x7f0000000100)="70510fb2bd6a222e2079d1401c010aaadb4cf9b694e22764c5a20fea274f57164da64d38de1e586258c498d48f5180c1e52f44db2f") mount(&(0x7f0000adcff8)='./file0\x00', &(0x7f0000e08fff)='.', &(0x7f00005e9000)='cifs\x00', 0x2000, &(0x7f0000ad5000)) 2018/03/29 11:11:51 executing program 6: openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x0, 0x0) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, &(0x7f0000000340)=0x1) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f000051cff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000943ffc)=0xa35) read(r0, &(0x7f00003fefff)=""/1, 0x1) r1 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000029000)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r0, &(0x7f0000dcdff0)=[{&(0x7f0000cd8000)=""/1, 0x1}], 0x1) ioctl$int_in(r2, 0x5452, &(0x7f0000b28000)=0x3c) write$cgroup_type(0xffffffffffffffff, &(0x7f00000002c0)='threaded\x00', 0x9) syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000fb9000)) fcntl$setsig(r2, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r3}], 0x1, 0xfffffffffffffff8) read$eventfd(0xffffffffffffffff, &(0x7f0000000040), 0x8) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)) r4 = dup2(r2, r3) fcntl$setown(r4, 0x8, r1) ptrace$cont(0xffffffffffffffff, r1, 0x0, 0x8) tkill(r1, 0x16) r5 = gettid() process_vm_readv(r5, &(0x7f0000001880)=[{&(0x7f0000000680)=""/198, 0xc6}, {&(0x7f0000000780)=""/247, 0xf7}, {&(0x7f0000000380)=""/12, 0xc}, {&(0x7f00000003c0)=""/6, 0x6}, {&(0x7f0000000400)=""/14, 0xe}], 0x5, &(0x7f00000019c0)=[{&(0x7f0000001900)=""/41, 0x29}, {&(0x7f0000001940)=""/112, 0x70}], 0x2, 0x0) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f0000000240)={{{@in6}}, {{@in=@local}, 0x0, @in=@local}}, &(0x7f0000000100)=0xe8) 2018/03/29 11:11:51 executing program 3: io_setup(0x3, &(0x7f0000000000)=0x0) accept$unix(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000100)=0x6e) r1 = syz_open_dev$usbmon(&(0x7f0000000200)='/dev/usbmon#\x00', 0x7ff, 0x0) io_cancel(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0xf, 0x0, 0xffffffffffffffff, &(0x7f0000000140)="940c1f2149747e7734510c34c143183667a187dc4f624f6c2de12452792a6fb529e6bf2a661dc23a844b00925c244a9f2967c0ca9868ee50eacf67a2ad7681d82f5a38cbd6d7641f843fa129e00f701fb01835f497b53672b3e5a3f6838f28aa240bf21eb5e5cbe7804fd307404474ae0242f8dea7a08e0fe9479b06f2795f857f8eec271d35ba7f61a91c87296814189cc1dfc9c659cc5437452a0bd178323c50e8c005ba7fa9519b27965c9f6ffbc7dcaa8e658616cc83188fb131a703222d", 0xc0, 0x5, 0x0, 0x1, r1}, &(0x7f0000000280)) io_getevents(r0, 0x2, 0x8f, &(0x7f0000d83f60)=[{}, {}], &(0x7f00005cfff0)={0x4000000000001, 0x7}) io_getevents(r0, 0x0, 0x5, &(0x7f00000002c0)=[{}, {}, {}, {}, {}], &(0x7f00000003c0)) io_setup(0x7, &(0x7f0000000040)) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/route\x00') ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000440)=0x0) perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x4a, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ef4}, r3, 0x0, r1, 0x1) pread64(r2, &(0x7f0000000000)=""/85, 0xfe42, 0x5d) r4 = memfd_create(&(0x7f0000000240)=':+lo#\x00', 0x0) syz_open_dev$dmmidi(&(0x7f0000000480)='/dev/dmmidi#\x00', 0x1, 0x208880) fdatasync(r4) io_submit(r0, 0x1, &(0x7f0000001280)=[&(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f0000000100)}]) timerfd_create(0x7, 0x80800) io_destroy(r0) setsockopt$llc_int(r1, 0x10c, 0x9, &(0x7f0000000380)=0x3, 0x4) 2018/03/29 11:11:51 executing program 0: r0 = perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x4a, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffff9c, 0xc00caee0, &(0x7f0000000180)={0x0, r0, 0x1}) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) fcntl$getownex(r0, 0x10, &(0x7f0000000400)={0x0, 0x0}) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0xffff, 0xe3, 0x6, 0x4, 0x0, 0x7, 0x0, 0x2, 0x10001, 0x1, 0x7, 0x8, 0x100, 0x4, 0x0, 0x7f, 0x20, 0x0, 0x4, 0x5, 0x90a4, 0x7, 0x2, 0x73, 0x8, 0x7, 0x4, 0x7e0, 0x101, 0x0, 0x2, 0x309, 0x0, 0x9, 0x0, 0x9, 0x0, 0x4, 0x0, @perf_config_ext={0x20, 0x1}, 0x8140, 0x2, 0x0, 0x4, 0xca1, 0xb5}, r4, 0x4, r1, 0x8) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) futimesat(r1, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0)={{r2, r3/1000+10000}, {r5, r6/1000+10000}}) unshare(0x8000000) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0xdc, 0x40}, 0x341) r8 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8910, &(0x7f0000000080)=@buf={0x0, &(0x7f0000000000)}) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x13, &(0x7f0000000ffc), 0x4) mq_open(&(0x7f00000000c0)='syzkaller0\x00', 0x40, 0x8, &(0x7f0000000100)={0x5, 0x80000000, 0x0, 0xfffffffffffffff9, 0x1, 0xfffffffffffffffd, 0x7fff, 0x200}) socket$inet_tcp(0x2, 0x1, 0x0) r9 = dup3(r8, r7, 0x80000) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r9, 0x84, 0x66, &(0x7f00000002c0)={0x0, 0x8ed6}, &(0x7f0000000300)=0x1) bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) shmget(0xffffffffffffffff, 0x8000, 0x49b, &(0x7f0000ff8000/0x8000)=nil) ioctl$sock_inet_SIOCGIFPFLAGS(r8, 0x8935, &(0x7f0000000080)={'syzkaller0\x00'}) ppoll(&(0x7f0000000780)=[{r1, 0x300}, {r1, 0x8401}], 0x2, &(0x7f00000007c0)={0x77359400}, &(0x7f0000000800)={0x9}, 0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000280)={0x0, 0x0, 0x9}, 0x10) r10 = semget$private(0x0, 0x4, 0x0) semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0x0, 0x1000}], 0x1, &(0x7f0000000080)={0x0, 0x1c9c380}) semctl$IPC_RMID(r10, 0x0, 0x0) 2018/03/29 11:11:51 executing program 1: io_setup(0x3, &(0x7f0000000000)=0x0) accept$unix(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000100)=0x6e) r1 = syz_open_dev$usbmon(&(0x7f0000000200)='/dev/usbmon#\x00', 0x0, 0x0) io_cancel(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0xf, 0x3, 0xffffffffffffffff, &(0x7f0000000140)="940c1f2149747e7734510c34c143183667a187dc4f624f6c2de12452792a6fb529e6bf2a661dc23a844b00925c244a9f2967c0ca9868ee50eacf67a2ad7681d82f5a38cbd6d7641f843fa129e00f701fb01835f497b53672b3e5a3f6838f28aa240bf21eb5e5cbe7804fd307404474ae0242f8dea7a08e0fe9479b06f2795f857f8eec271d35ba7f61a91c87296814189cc1dfc9c659cc5437452a0bd178323c50e8c005ba7fa9519b27965c9f6ffbc7dcaa8e658616cc83188fb131a703222d", 0xc0, 0x5, 0x0, 0x1}, &(0x7f0000000280)) io_getevents(r0, 0x2, 0x8f, &(0x7f0000d83f60)=[{}, {}], &(0x7f00005cfff0)={0x4000000000001, 0x7}) io_getevents(r0, 0x0, 0x5, &(0x7f00000002c0)=[{}, {}, {}, {}, {}], &(0x7f00000003c0)) io_setup(0x7, &(0x7f0000000040)) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/route\x00') ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000440)=0x0) perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x4a, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ef4}, 0x0, 0x0, r1, 0x1) pread64(r2, &(0x7f0000000000)=""/85, 0xfe42, 0x5d) r4 = memfd_create(&(0x7f0000000240)=':+lo#\x00', 0x0) fdatasync(r4) io_submit(r0, 0x1, &(0x7f0000001280)=[&(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f0000000100)}]) timerfd_create(0x7, 0x80800) io_destroy(r0) setsockopt$llc_int(r1, 0x10c, 0x9, &(0x7f0000000380)=0x3, 0x4) 2018/03/29 11:11:51 executing program 7: io_setup(0x3, &(0x7f0000000000)=0x0) r1 = accept$unix(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000100)=0x6e) r2 = syz_open_dev$usbmon(&(0x7f0000000200)='/dev/usbmon#\x00', 0x7ff, 0x0) io_cancel(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0xf, 0x3, 0xffffffffffffffff, &(0x7f0000000140)="940c1f2149747e7734510c34c143183667a187dc4f624f6c2de12452792a6fb529e6bf2a661dc23a844b00925c244a9f2967c0ca9868ee50eacf67a2ad7681d82f5a38cbd6d7641f843fa129e00f701fb01835f497b53672b3e5a3f6838f28aa240bf21eb5e5cbe7804fd307404474ae0242f8dea7a08e0fe9479b06f2795f857f8eec271d35ba7f61a91c87296814189cc1dfc9c659cc5437452a0bd178323c50e8c005ba7fa9519b27965c9f6ffbc7dcaa8e658616cc83188fb131a703222d", 0xc0, 0x5, 0x0, 0x1}, &(0x7f0000000280)) io_getevents(r0, 0x2, 0x8f, &(0x7f0000d83f60)=[{}, {}], &(0x7f00005cfff0)={0x4000000000001, 0x7}) io_getevents(r0, 0x0, 0x5, &(0x7f00000002c0)=[{}, {}, {}, {}, {}], &(0x7f00000003c0)) io_setup(0x7, &(0x7f0000000040)) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/route\x00') ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f0000000440)=0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000006c0)={[0x8, 0x100000000, 0x2, 0x4000000000000, 0x100000000, 0x0, 0x3, 0x7fffffff, 0xfffffffffffffffb, 0x248, 0x2, 0x0, 0x8, 0x1, 0xa9df, 0x7], 0x0, 0x10000}) r5 = perf_event_open(&(0x7f0000aaa000)={0x0, 0x70, 0x4a, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ef4}, r4, 0x0, 0xffffffffffffffff, 0x1) pread64(r3, &(0x7f0000000000)=""/85, 0xfe42, 0x5d) perf_event_open$cgroup(&(0x7f0000000780)={0x1, 0x70, 0x10000, 0x4, 0x200, 0x8d2, 0x0, 0x4, 0x400, 0x1, 0x3, 0x9, 0x3, 0xffff, 0x7, 0x2, 0x6, 0x101, 0x2, 0x2df, 0x5, 0xffc000000, 0x80000000, 0xff, 0x9, 0x9, 0x10001, 0x8, 0x3, 0x0, 0x9, 0x4, 0x4, 0x9c3, 0x0, 0x5, 0x3, 0xff, 0x0, 0x7, 0x0, @perf_config_ext={0x0, 0x6}, 0x4000, 0x8, 0x7fff, 0x4, 0x7, 0x0, 0xffffffff}, r3, 0xf, r5, 0xb) r6 = memfd_create(&(0x7f0000000240)=':+lo#\x00', 0x0) fdatasync(r6) io_submit(r0, 0x1, &(0x7f0000001280)=[&(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, 0x0, r6, &(0x7f0000000100)}]) r7 = timerfd_create(0x7, 0x80800) io_destroy(r0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x9, &(0x7f0000000380)=0x3, 0x4) pwritev(r1, &(0x7f0000000680)=[{&(0x7f0000000480)="35e2009c2bd17ea4a7a1e0a052f1cad743e6ac0e93ce93df4e29e8495499c21f7a21678ea62bed1258ab82406a081c9ae80be9c9931eb3555326375abdae90d6fd83f9b1bcccf96fd75984ca5a684fe942372959e4fcd0578dc0df07c8ad9acb334daa6ca3360e79857b6e7219689bcd2f0beb6ac5692071bce1541c1fe74158687029488276d1ce4a6576684c5639acebb90ea9e74c681ac4e0ea3cd199cef4c729b7ba6514d9c66da38091ae0df4f9159f21b3c2499a71d2", 0xb9}, {&(0x7f00000012c0)="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", 0x1000}, {&(0x7f0000000540)="28c5e164051d43be727c6f6cfcfb84b1f6f05b655d94c251faa951e8f910aef6d3d249ffb2b32d0a3d7e0d5f361d9352d943294f18254a53886e447fb85f6fa5df1a8f17878bc59f063cc9ad77959897a5a606c316550ab608823a54ef7f998f191003f606597ff0b253db4243d3904def49f9cf48f6940aec2795d80c0e1ec86dba0634fc2844c803656a285475498c213407e64f48bb710841aecc679fdf3fa40bd1686def2421d5e85c475bf05791df9160a88a588384355bf87763f950f881d6087ced066e88341a733ddc717ff86ba8c093623433820ab4dd971b09079a12684a570100a1c46cc6bbd959fb7fe3f660c9084298ee", 0xf7}, {&(0x7f0000000640)="befcc21edfd58a9b17685ba32484cc8ccc3fcc4176abd1b82c0209b1dd447b873237b39753a148cf54a0342e5fb915c6e587e14c8f103bb7", 0x38}], 0x4, 0x0) fcntl$setown(r7, 0x8, r4) 2018/03/29 11:11:51 executing program 2 (fault-call:21 fault-nth:0): r0 = syz_open_procfs(0x0, &(0x7f00000004c0)='oom_score_adj\x00') perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x49, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(r0, 0x0, 0x83, &(0x7f0000001800)={'nat\x00', 0x0, 0x3, 0x1000, [], 0x2, &(0x7f0000001280)=[{}, {}], &(0x7f0000002040)=""/4096}, &(0x7f00000013c0)=0x78) ioprio_get$pid(0x0, 0x0) timer_create(0x0, &(0x7f0000cd0000), &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00004b1fe0)={{0x0, 0x1c9c380}, {0x0, 0x9}}, &(0x7f0000040000)) r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x7fff) truncate(&(0x7f0000001180)='./bus\x00', 0x4) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000f40000)='/dev/ptmx\x00', 0x200000000101002, 0x0) sendfile(r2, 0xffffffffffffffff, &(0x7f00000010c0), 0x10000065) sendfile(r0, r1, &(0x7f0000000000), 0x4) tkill(0x0, 0x0) r3 = memfd_create(&(0x7f0000000000)='\x00', 0x1) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000001200)) recvmsg(0xffffffffffffff9c, &(0x7f0000001500)={&(0x7f00000012c0)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @remote}}}, 0x80, &(0x7f0000001400)=[{&(0x7f0000001340)=""/103, 0x67}], 0x1, &(0x7f0000001440)=""/155, 0x9b}, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000001540)) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000001640)={0x1ff, {0x2, 0x4e21}, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, {0x2, 0x0, @multicast2=0xe0000002}, 0x0, 0x9, 0x2, 0x6, 0x0, &(0x7f0000001240)='teql0\x00', 0x0, 0x80}) inotify_rm_watch(0xffffffffffffffff, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000140), &(0x7f0000000100)=0xffffffa4) getgroups(0x1, &(0x7f0000001600)=[0x0]) syz_fuseblk_mount(&(0x7f0000001740)='./file0\x00', &(0x7f0000001780)='./file0\x00', 0x0, 0x0, 0xffffffffffffffff, 0x3ff, 0x1, 0x0) getpgrp(0xffffffffffffffff) getegid() sendmmsg$unix(r3, &(0x7f0000001880), 0x0, 0x0) setsockopt$netrom_NETROM_T4(0xffffffffffffffff, 0x103, 0x6, &(0x7f00000017c0), 0xfffffffffffffc77) readv(0xffffffffffffffff, &(0x7f000004ffe0), 0x0) 2018/03/29 11:11:51 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) syz_open_dev$adsp(&(0x7f0000000200)='/dev/adsp#\x00', 0x8, 0x30080) readv(r0, &(0x7f0000001480)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x3}) r1 = syz_open_pts(r0, 0x2) dup3(r1, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000c34fff), 0xffffff0b) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0) preadv(r2, &(0x7f00000004c0)=[{&(0x7f0000000480)=""/21, 0x15}], 0x1, 0x0) fchdir(0xffffffffffffffff) mkdir(&(0x7f0000000280)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f", 0xfffffffffffffffc) fchmod(r2, 0x0) splice(r2, &(0x7f0000000400), 0xffffffffffffffff, &(0x7f0000000440), 0x9, 0x2) rename(&(0x7f0000001e00)='./file0\x00', &(0x7f0000000100)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f") mkdir(&(0x7f000000e000)='./control\x00', 0x0) r3 = open(&(0x7f0000000000)='./control\x00', 0x0, 0x0) renameat2(r3, &(0x7f0000000040)='./file0\x00', r3, &(0x7f0000000080)='./control\x00', 0x2) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000300)={0x0, 0x80}, &(0x7f0000000340)=0x8) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000380)={r4, 0x5}, &(0x7f00000003c0)=0x8) mknodat(r3, &(0x7f000003f000)='./control\x00', 0x0, 0x0) symlink(&(0x7f0000000180)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f", &(0x7f00000000c0)='./file0\x00') perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(r3, &(0x7f0000010000)='./control\x00', &(0x7f000003f000), &(0x7f0000001fe8), 0x0) [ 311.096095] FAULT_INJECTION: forcing a failure. [ 311.096095] name failslab, interval 1, probability 0, space 0, times 0 [ 311.107389] CPU: 1 PID: 7883 Comm: syz-executor2 Not tainted 4.16.0-rc7+ #5 [ 311.114480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 311.123810] Call Trace: [ 311.126377] dump_stack+0x194/0x24d [ 311.129986] ? arch_local_irq_restore+0x53/0x53 [ 311.134644] should_fail+0x8c0/0xa40 [ 311.138341] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 311.143428] ? find_held_lock+0x35/0x1d0 [ 311.147472] ? find_held_lock+0x35/0x1d0 [ 311.151531] ? check_same_owner+0x320/0x320 [ 311.155829] ? rcu_note_context_switch+0x710/0x710 [ 311.160745] should_failslab+0xec/0x120 [ 311.164697] kmem_cache_alloc+0x47/0x760 [ 311.168731] ? __lock_is_held+0xb6/0x140 [ 311.172777] getname_flags+0xcb/0x580 [ 311.177123] getname+0x19/0x20 [ 311.180293] do_sys_open+0x2e7/0x6d0 [ 311.183986] ? filp_open+0x70/0x70 [ 311.187505] ? SyS_read+0x220/0x220 [ 311.191107] ? __might_fault+0x188/0x1d0 [ 311.195148] SyS_open+0x2d/0x40 [ 311.198400] ? do_sys_open+0x6d0/0x6d0 [ 311.202262] do_syscall_64+0x281/0x940 [ 311.206122] ? __do_page_fault+0xc90/0xc90 [ 311.210332] ? _raw_spin_unlock_irq+0x27/0x70 [ 311.214802] ? finish_task_switch+0x1c1/0x7e0 [ 311.219275] ? syscall_return_slowpath+0x550/0x550 [ 311.224197] ? syscall_return_slowpath+0x2ac/0x550 [ 311.229103] ? prepare_exit_to_usermode+0x350/0x350 [ 311.234097] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 311.239439] ? trace_hardirqs_off_thunk+0x1a/0x1c 2018/03/29 11:11:51 executing program 5: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) r0 = memfd_create(&(0x7f0000000280)='binfmt_misc\x00', 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0x80045500, &(0x7f00000002c0)=""/66) mkdir(&(0x7f0000000000)='./file1\x00', 0x0) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000811ffa)='bdev\x00', 0x0, &(0x7f0000444000)) mount(&(0x7f0000fb6000)='./file0\x00', &(0x7f0000d78000)='.', &(0x7f0000fdb000)='ubifs\x00', 0x1003, 0x0) mount(&(0x7f00002b9ff8)='./file0\x00', &(0x7f0000cbeff8)='./file0\x00', &(0x7f00005f7ffa)='ramfs\x00', 0x80000, &(0x7f000002f000)) mount(&(0x7f0000000040)='.', &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0)='binfmt_misc\x00', 0x0, &(0x7f0000000100)) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) setxattr(&(0x7f0000000100)='./file1\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="6f730100616e6f6f5f696e6f6465667300"], &(0x7f0000000240)='binfmt_misc\x00', 0xc, 0x3) mount(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./file1\x00', &(0x7f0000000200)='anon_inodefs\x00', 0x2000, &(0x7f0000000240)) mount(&(0x7f0000adcff8)='./file0\x00', &(0x7f0000e08fff)='.', &(0x7f00005e9000)='cifs\x00', 0x2000, &(0x7f0000ad5000)) 2018/03/29 11:11:51 executing program 2 (fault-call:21 fault-nth:1): r0 = syz_open_procfs(0x0, &(0x7f00000004c0)='oom_score_adj\x00') perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x49, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(r0, 0x0, 0x83, &(0x7f0000001800)={'nat\x00', 0x0, 0x3, 0x1000, [], 0x2, &(0x7f0000001280)=[{}, {}], &(0x7f0000002040)=""/4096}, &(0x7f00000013c0)=0x78) ioprio_get$pid(0x0, 0x0) timer_create(0x0, &(0x7f0000cd0000), &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00004b1fe0)={{0x0, 0x1c9c380}, {0x0, 0x9}}, &(0x7f0000040000)) r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x7fff) truncate(&(0x7f0000001180)='./bus\x00', 0x4) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000f40000)='/dev/ptmx\x00', 0x200000000101002, 0x0) sendfile(r2, 0xffffffffffffffff, &(0x7f00000010c0), 0x10000065) sendfile(r0, r1, &(0x7f0000000000), 0x4) tkill(0x0, 0x0) r3 = memfd_create(&(0x7f0000000000)='\x00', 0x1) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000001200)) recvmsg(0xffffffffffffff9c, &(0x7f0000001500)={&(0x7f00000012c0)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @remote}}}, 0x80, &(0x7f0000001400)=[{&(0x7f0000001340)=""/103, 0x67}], 0x1, &(0x7f0000001440)=""/155, 0x9b}, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000001540)) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000001640)={0x1ff, {0x2, 0x4e21}, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, {0x2, 0x0, @multicast2=0xe0000002}, 0x0, 0x9, 0x2, 0x6, 0x0, &(0x7f0000001240)='teql0\x00', 0x0, 0x80}) inotify_rm_watch(0xffffffffffffffff, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000140), &(0x7f0000000100)=0xffffffa4) getgroups(0x1, &(0x7f0000001600)=[0x0]) syz_fuseblk_mount(&(0x7f0000001740)='./file0\x00', &(0x7f0000001780)='./file0\x00', 0x0, 0x0, 0xffffffffffffffff, 0x3ff, 0x1, 0x0) getpgrp(0xffffffffffffffff) getegid() sendmmsg$unix(r3, &(0x7f0000001880), 0x0, 0x0) setsockopt$netrom_NETROM_T4(0xffffffffffffffff, 0x103, 0x6, &(0x7f00000017c0), 0xfffffffffffffc77) readv(0xffffffffffffffff, &(0x7f000004ffe0), 0x0) [ 311.244264] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 311.249425] RIP: 0033:0x40eb91 [ 311.252587] RSP: 002b:00007f032fc57b00 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 311.260268] RAX: ffffffffffffffda RBX: 00007f032fc586d4 RCX: 000000000040eb91 [ 311.267518] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 00000000004b91de [ 311.274759] RBP: 0000000020001780 R08: ffffffffffffffff R09: 00000000000003ff [ 311.282001] R10: 0000000020001740 R11: 0000000000000293 R12: 0000000000000000 [ 311.289248] R13: 00000000000003ff R14: 0000000000000000 R15: ffffffffffffffff [ 311.336969] FAULT_INJECTION: forcing a failure. [ 311.336969] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 311.348846] CPU: 0 PID: 7897 Comm: syz-executor2 Not tainted 4.16.0-rc7+ #5 [ 311.355934] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 311.365273] Call Trace: [ 311.367857] dump_stack+0x194/0x24d [ 311.371479] ? arch_local_irq_restore+0x53/0x53 [ 311.376162] should_fail+0x8c0/0xa40 [ 311.379860] ? trace_hardirqs_off+0x10/0x10 [ 311.384162] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 311.389260] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 311.394442] ? find_held_lock+0x35/0x1d0 [ 311.398490] ? trace_hardirqs_off+0x10/0x10 [ 311.402782] ? _parse_integer+0xe9/0x140 [ 311.406822] ? trace_hardirqs_off+0x10/0x10 [ 311.411121] ? check_same_owner+0x320/0x320 [ 311.415422] ? find_held_lock+0x35/0x1d0 [ 311.419456] ? trace_hardirqs_off+0x10/0x10 [ 311.423752] ? should_fail+0x23b/0xa40 [ 311.427611] ? get_pid_task+0x93/0x140 [ 311.431475] __alloc_pages_nodemask+0x327/0xdd0 [ 311.436125] ? __alloc_pages_slowpath+0x2d10/0x2d10 [ 311.441119] ? find_held_lock+0x35/0x1d0 [ 311.445172] ? check_same_owner+0x320/0x320 [ 311.449475] cache_grow_begin+0x72/0x640 [ 311.453533] kmem_cache_alloc+0x400/0x760 [ 311.457656] ? __lock_is_held+0xb6/0x140 [ 311.461702] getname_flags+0xcb/0x580 [ 311.465495] getname+0x19/0x20 [ 311.468666] do_sys_open+0x2e7/0x6d0 [ 311.472364] ? filp_open+0x70/0x70 [ 311.475880] ? SyS_read+0x220/0x220 [ 311.479477] ? __might_fault+0x188/0x1d0 [ 311.483516] SyS_open+0x2d/0x40 [ 311.486766] ? do_sys_open+0x6d0/0x6d0 [ 311.490627] do_syscall_64+0x281/0x940 [ 311.494484] ? __do_page_fault+0xc90/0xc90 [ 311.498693] ? _raw_spin_unlock_irq+0x27/0x70 [ 311.503165] ? finish_task_switch+0x1c1/0x7e0 [ 311.507637] ? syscall_return_slowpath+0x550/0x550 [ 311.512540] ? syscall_return_slowpath+0x2ac/0x550 [ 311.517441] ? prepare_exit_to_usermode+0x350/0x350 [ 311.522443] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 311.527784] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 311.532611] entry_SYSCALL_64_after_hwframe+0x42/0xb7 2018/03/29 11:11:52 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) readv(r0, &(0x7f0000001480)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x3}) r1 = syz_open_pts(r0, 0x2) r2 = dup3(r1, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000c34fff), 0xffffff0b) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0) preadv(r3, &(0x7f00000004c0)=[{&(0x7f0000000480)=""/21, 0x15}], 0x1, 0x0) fchdir(0xffffffffffffffff) mkdir(&(0x7f0000000280)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f", 0xfffffffffffffffc) fchmod(r2, 0x0) splice(r3, &(0x7f0000000400), 0xffffffffffffffff, &(0x7f0000000440), 0x9, 0x2) rename(&(0x7f0000001e00)='./file0\x00', &(0x7f0000000100)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f") mkdir(&(0x7f000000e000)='./control\x00', 0x0) r4 = open(&(0x7f0000000000)='./control\x00', 0x0, 0x0) renameat2(r4, &(0x7f0000000040)='./file0\x00', r4, &(0x7f0000000080)='./control\x00', 0x2) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000300)={0x0, 0x80}, &(0x7f0000000340)=0x8) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000380)={r5, 0x5}, &(0x7f00000003c0)=0x8) mknodat(r4, &(0x7f000003f000)='./control\x00', 0x0, 0x0) symlink(&(0x7f0000000180)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f", &(0x7f00000000c0)='./file0\x00') perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(r4, &(0x7f0000010000)='./control\x00', &(0x7f000003f000), &(0x7f0000001fe8), 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r2, 0x80045530, &(0x7f0000000200)=""/54) 2018/03/29 11:11:52 executing program 0: r0 = perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x4a, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffff9c, 0xc00caee0, &(0x7f0000000180)={0x0, r0, 0x1}) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) fcntl$getownex(r0, 0x10, &(0x7f0000000400)={0x0, 0x0}) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0xffff, 0xe3, 0x6, 0x4, 0x0, 0x7, 0x0, 0x2, 0x10001, 0x1, 0x7, 0x8, 0x100, 0x4, 0x0, 0x7f, 0x20, 0x0, 0x4, 0x5, 0x90a4, 0x7, 0x2, 0x73, 0x8, 0x7, 0x4, 0x7e0, 0x101, 0x0, 0x2, 0x309, 0x0, 0x9, 0xfffffffffffffff9, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x20, 0x1}, 0x8140, 0x2, 0x0, 0x4, 0xca1, 0xb5}, r4, 0x4, r1, 0x8) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) futimesat(r1, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0)={{r2, r3/1000+10000}, {r5, r6/1000+10000}}) unshare(0x8000000) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0xdc, 0x40}, 0x341) r8 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8910, &(0x7f0000000080)=@buf={0x0, &(0x7f0000000000)}) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x13, &(0x7f0000000ffc), 0x4) mq_open(&(0x7f00000000c0)='syzkaller0\x00', 0x40, 0x8, &(0x7f0000000100)={0x5, 0x80000000, 0x0, 0xfffffffffffffff9, 0x1, 0xfffffffffffffffd, 0x7fff, 0x200}) socket$inet_tcp(0x2, 0x1, 0x0) r9 = dup3(r8, r7, 0x80000) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r9, 0x84, 0x66, &(0x7f00000002c0)={0x0, 0x8ed6}, &(0x7f0000000300)=0x1) bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) shmget(0xffffffffffffffff, 0x8000, 0x49b, &(0x7f0000ff8000/0x8000)=nil) ioctl$sock_inet_SIOCGIFPFLAGS(r8, 0x8935, &(0x7f0000000080)={'syzkaller0\x00'}) ppoll(&(0x7f0000000780)=[{r1, 0x300}, {r1, 0x8401}], 0x2, &(0x7f00000007c0)={0x77359400}, &(0x7f0000000800)={0x9}, 0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000280)={0x0, 0x0, 0x9}, 0x10) r10 = semget$private(0x0, 0x4, 0x0) semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0x0, 0x1000}], 0x1, &(0x7f0000000080)={0x0, 0x1c9c380}) semctl$IPC_RMID(r10, 0x0, 0x0) 2018/03/29 11:11:52 executing program 3: io_setup(0x3, &(0x7f0000000000)=0x0) r1 = accept$unix(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000100)=0x6e) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000580)='/proc/self/net/pfkey\x00', 0x10000, 0x0) io_cancel(r0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x7, 0xaa7, r1, &(0x7f0000000480)="92b24bc4ebf49a24a50a5f43da3115c5257fae0064f35a5484819503f7ecafb7f364cebff621c7a6b0c8695f6dd0e18269ff9b7b6153f295a0163ffccd669218ab4017989bdb0d1bdcbd14d7bd171c6b09cf6a22ebf740b4b588d35a42d188ea5a7501e70272aa99717a44712b0d70bcf366561bf5568d41542f0ec2daf796c1d9b6eee20a8fe462531ebd516badd2dea2f24051e9e5d460c983450d63a9e2122252526d24083550d0ffb6cf9065fc32c1a9be03a555e6e5f0ccf4906d37e21faea3ec93b3595fcff11c7f32acda086136fd521577628e3c6fc4f8f3e0ddd2f9f729dfaac92a53aa17e438a3", 0xec, 0xffffffffffffffff, 0x0, 0x1, r2}, &(0x7f0000000600)) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000640)={0x565, 0x1}) r3 = syz_open_dev$usbmon(&(0x7f0000000200)='/dev/usbmon#\x00', 0x7ff, 0x0) io_cancel(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0xf, 0x0, 0xffffffffffffffff, &(0x7f0000000140)="940c1f2149747e7734510c34c143183667a187dc4f624f6c2de12452792a6fb529e6bf2a661dc23a844b00925c244a9f2967c0ca9868ee50eacf67a2ad7681d82f5a38cbd6d7641f843fa129e00f701fb01835f497b53672b3e5a3f6838f28aa240bf21eb5e5cbe7804fd307404474ae0242f8dea7a08e0fe9479b06f2795f857f8eec271d35ba7f61a91c87296814189cc1dfc9c659cc5437452a0bd178323c50e8c005ba7fa9519b27965c9f6ffbc7dcaa8e658616cc83188fb131a703222d", 0xc0, 0x5, 0x0, 0x1, r3}, &(0x7f0000000280)) io_getevents(r0, 0x2, 0x8f, &(0x7f0000d83f60)=[{}, {}], &(0x7f00005cfff0)={0x4000000000001, 0x7}) io_getevents(r0, 0x0, 0x5, &(0x7f00000002c0)=[{}, {}, {}, {}, {}], &(0x7f00000003c0)) creat(&(0x7f0000000680)='./file0\x00', 0x40) io_setup(0x7, &(0x7f0000000040)) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/route\x00') ioctl$TIOCGPGRP(r4, 0x540f, &(0x7f0000000440)=0x0) perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x4a, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ef4}, r5, 0x0, r3, 0x1) pread64(r4, &(0x7f0000000000)=""/85, 0xfe42, 0x5d) r6 = memfd_create(&(0x7f0000000240)=':+lo#\x00', 0x0) fdatasync(r6) io_submit(r0, 0x1, &(0x7f0000001280)=[&(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, 0x0, r6, &(0x7f0000000100)}]) timerfd_create(0x7, 0x80800) io_destroy(r0) setsockopt$llc_int(r3, 0x10c, 0x6, &(0x7f0000000380)=0x3, 0x3) 2018/03/29 11:11:52 executing program 1: io_setup(0x3, &(0x7f0000000000)=0x0) accept$unix(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000100)=0x6e) r1 = syz_open_dev$usbmon(&(0x7f0000000200)='/dev/usbmon#\x00', 0x0, 0x0) io_cancel(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0xf, 0x3, 0xffffffffffffffff, &(0x7f0000000140)="940c1f2149747e7734510c34c143183667a187dc4f624f6c2de12452792a6fb529e6bf2a661dc23a844b00925c244a9f2967c0ca9868ee50eacf67a2ad7681d82f5a38cbd6d7641f843fa129e00f701fb01835f497b53672b3e5a3f6838f28aa240bf21eb5e5cbe7804fd307404474ae0242f8dea7a08e0fe9479b06f2795f857f8eec271d35ba7f61a91c87296814189cc1dfc9c659cc5437452a0bd178323c50e8c005ba7fa9519b27965c9f6ffbc7dcaa8e658616cc83188fb131a703222d", 0xc0, 0x5, 0x0, 0x1}, &(0x7f0000000280)) io_getevents(r0, 0x2, 0x8f, &(0x7f0000d83f60)=[{}, {}], &(0x7f00005cfff0)={0x4000000000001, 0x7}) io_getevents(r0, 0x0, 0x5, &(0x7f00000002c0)=[{}, {}, {}, {}, {}], &(0x7f00000003c0)) io_setup(0x7, &(0x7f0000000040)) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/route\x00') ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000440)=0x0) perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x4a, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ef4}, 0x0, 0x0, r1, 0x1) pread64(r2, &(0x7f0000000000)=""/85, 0xfe42, 0x5d) r4 = memfd_create(&(0x7f0000000240)=':+lo#\x00', 0x0) fdatasync(r4) io_submit(r0, 0x1, &(0x7f0000001280)=[&(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f0000000100)}]) timerfd_create(0x7, 0x80800) io_destroy(r0) setsockopt$llc_int(r1, 0x10c, 0x9, &(0x7f0000000380)=0x3, 0x4) 2018/03/29 11:11:52 executing program 7: io_setup(0x3, &(0x7f0000000000)=0x0) accept$unix(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000100)=0x6e) syz_open_dev$usbmon(&(0x7f0000000200)='/dev/usbmon#\x00', 0x7ff, 0x0) io_cancel(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0xf, 0x3, 0xffffffffffffffff, &(0x7f0000000140)="940c1f2149747e7734510c34c143183667a187dc4f624f6c2de12452792a6fb529e6bf2a661dc23a844b00925c244a9f2967c0ca9868ee50eacf67a2ad7681d82f5a38cbd6d7641f843fa129e00f701fb01835f497b53672b3e5a3f6838f28aa240bf21eb5e5cbe7804fd307404474ae0242f8dea7a08e0fe9479b06f2795f857f8eec271d35ba7f61a91c87296814189cc1dfc9c659cc5437452a0bd178323c50e8c005ba7fa9519b27965c9f6ffbc7dcaa8e658616cc83188fb131a703222d", 0xc0, 0x5, 0x0, 0x1}, &(0x7f0000000280)) io_getevents(r0, 0x0, 0x5, &(0x7f00000002c0)=[{}, {}, {}, {}, {}], &(0x7f00000003c0)) io_setup(0x7, &(0x7f00000004c0)) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/route\x00') ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000440)=0x0) setsockopt(r1, 0x4, 0x9, &(0x7f0000000500)="37475562373e88e7a8d72a07af6ff3f630cb24726f87c5ed0221d389c26a61872feeaf9fe4a12fa69e0b6cae92e2186106fa224fcf7bea21fd7b8fcb7203d0bf0af861039c3305ad418dca2c287be846d6db665403d8dc58ac1aef10b16fb445ab1647758338f55466919f2886dc2bc26d7223e6bf10da4a757bc847a12479", 0x7f) perf_event_open(&(0x7f0000aaa000)={0x0, 0x70, 0x4a, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ef4}, r2, 0x0, 0xffffffffffffffff, 0x1) pread64(r1, &(0x7f0000000000)=""/85, 0xfe42, 0x5d) r3 = memfd_create(&(0x7f0000000240)=':+lo#\x00', 0x0) fdatasync(r3) io_submit(r0, 0x1, &(0x7f0000001280)=[&(0x7f0000001100)={0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, r3, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, r3}]) timerfd_create(0x7, 0x80800) io_destroy(r0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x9, &(0x7f0000000380)=0x3, 0x4) [ 311.537777] RIP: 0033:0x40eb91 [ 311.540937] RSP: 002b:00007f032fc57b00 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 311.548615] RAX: ffffffffffffffda RBX: 00007f032fc586d4 RCX: 000000000040eb91 [ 311.555854] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 00000000004b91de [ 311.563099] RBP: 0000000020001780 R08: ffffffffffffffff R09: 00000000000003ff [ 311.570348] R10: 0000000020001740 R11: 0000000000000293 R12: 0000000000000000 [ 311.577598] R13: 00000000000003ff R14: 0000000000000000 R15: ffffffffffffffff 2018/03/29 11:11:52 executing program 2 (fault-call:21 fault-nth:2): r0 = syz_open_procfs(0x0, &(0x7f00000004c0)='oom_score_adj\x00') perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x49, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(r0, 0x0, 0x83, &(0x7f0000001800)={'nat\x00', 0x0, 0x3, 0x1000, [], 0x2, &(0x7f0000001280)=[{}, {}], &(0x7f0000002040)=""/4096}, &(0x7f00000013c0)=0x78) ioprio_get$pid(0x0, 0x0) timer_create(0x0, &(0x7f0000cd0000), &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00004b1fe0)={{0x0, 0x1c9c380}, {0x0, 0x9}}, &(0x7f0000040000)) r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x7fff) truncate(&(0x7f0000001180)='./bus\x00', 0x4) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000f40000)='/dev/ptmx\x00', 0x200000000101002, 0x0) sendfile(r2, 0xffffffffffffffff, &(0x7f00000010c0), 0x10000065) sendfile(r0, r1, &(0x7f0000000000), 0x4) tkill(0x0, 0x0) r3 = memfd_create(&(0x7f0000000000)='\x00', 0x1) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000001200)) recvmsg(0xffffffffffffff9c, &(0x7f0000001500)={&(0x7f00000012c0)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @remote}}}, 0x80, &(0x7f0000001400)=[{&(0x7f0000001340)=""/103, 0x67}], 0x1, &(0x7f0000001440)=""/155, 0x9b}, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000001540)) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000001640)={0x1ff, {0x2, 0x4e21}, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, {0x2, 0x0, @multicast2=0xe0000002}, 0x0, 0x9, 0x2, 0x6, 0x0, &(0x7f0000001240)='teql0\x00', 0x0, 0x80}) inotify_rm_watch(0xffffffffffffffff, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000140), &(0x7f0000000100)=0xffffffa4) getgroups(0x1, &(0x7f0000001600)=[0x0]) syz_fuseblk_mount(&(0x7f0000001740)='./file0\x00', &(0x7f0000001780)='./file0\x00', 0x0, 0x0, 0xffffffffffffffff, 0x3ff, 0x1, 0x0) getpgrp(0xffffffffffffffff) getegid() sendmmsg$unix(r3, &(0x7f0000001880), 0x0, 0x0) setsockopt$netrom_NETROM_T4(0xffffffffffffffff, 0x103, 0x6, &(0x7f00000017c0), 0xfffffffffffffc77) readv(0xffffffffffffffff, &(0x7f000004ffe0), 0x0) 2018/03/29 11:11:52 executing program 6: openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x0, 0x0) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, &(0x7f0000000340)=0x1) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f000051cff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000943ffc)=0xa35) read(r0, &(0x7f00003fefff)=""/1, 0x1) r1 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000029000)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r0, &(0x7f0000dcdff0)=[{&(0x7f0000cd8000)=""/1, 0x1}], 0x1) ioctl$int_in(r2, 0x5452, &(0x7f0000b28000)=0x3c) write$cgroup_type(0xffffffffffffffff, &(0x7f00000002c0)='threaded\x00', 0x9) syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x0, 0x802) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000fb9000)) fcntl$setsig(r2, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r3}], 0x1, 0xfffffffffffffff8) read$eventfd(0xffffffffffffffff, &(0x7f0000000040), 0x8) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)) r4 = dup2(r2, r3) fcntl$setown(r4, 0x8, r1) ptrace$cont(0xffffffffffffffff, r1, 0x0, 0x8) tkill(r1, 0x16) r5 = gettid() process_vm_readv(r5, &(0x7f0000001880)=[{&(0x7f0000000680)=""/198, 0xc6}, {&(0x7f0000000780)=""/247, 0xf7}, {&(0x7f0000000380)=""/12, 0xc}, {&(0x7f00000003c0)=""/6, 0x6}, {&(0x7f0000000400)=""/14, 0xe}], 0x5, &(0x7f00000019c0)=[{&(0x7f0000001900)=""/41, 0x29}, {&(0x7f0000001940)=""/112, 0x70}], 0x2, 0x0) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f0000000240)={{{@in6}}, {{@in=@local}, 0x0, @in=@local}}, &(0x7f0000000100)=0xe8) 2018/03/29 11:11:52 executing program 5: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) mkdir(&(0x7f0000000000)='./file1\x00', 0x0) mount(&(0x7f0000fb6000)='./file0\x00', &(0x7f0000d78000)='.', &(0x7f0000fdb000)='ubifs\x00', 0x1003, 0x0) mount(&(0x7f00002b9ff8)='./file0\x00', &(0x7f0000cbeff8)='./file0\x00', &(0x7f00005f7ffa)='ramfs\x00', 0x80000, &(0x7f000002f000)) mount(&(0x7f0000000040)='.', &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0)='binfmt_misc\x00', 0x0, &(0x7f0000000100)) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) mount(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./file1\x00', &(0x7f0000000200)='anon_inodefs\x00', 0x2000, &(0x7f0000000240)) mount(&(0x7f0000adcff8)='./file0\x00', &(0x7f0000e08fff)='.', &(0x7f00005e9000)='cifs\x00', 0x2000, &(0x7f0000ad5000)) 2018/03/29 11:11:52 executing program 0: r0 = perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x4a, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffff9c, 0xc00caee0, &(0x7f0000000180)={0x0, r0, 0x1}) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) fcntl$getownex(r0, 0x10, &(0x7f0000000400)={0x0, 0x0}) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0xffff, 0xe3, 0x6, 0x4, 0x0, 0x7, 0x0, 0x2, 0x10001, 0x1, 0x7, 0x8, 0x100, 0x4, 0x0, 0x7f, 0x20, 0x0, 0x4, 0x5, 0x90a4, 0x7, 0x2, 0x73, 0x8, 0x7, 0x4, 0x7e0, 0x101, 0x0, 0x2, 0x309, 0x0, 0x9, 0xfffffffffffffff9, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x20, 0x1}, 0x8140, 0x2, 0x0, 0x4, 0xca1, 0xb5}, r4, 0x4, r1, 0x8) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) futimesat(r1, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0)={{r2, r3/1000+10000}, {r5, r6/1000+10000}}) unshare(0x8000000) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0xdc, 0x40}, 0x341) r8 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8910, &(0x7f0000000080)=@buf={0x0, &(0x7f0000000000)}) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x13, &(0x7f0000000ffc), 0x4) mq_open(&(0x7f00000000c0)='syzkaller0\x00', 0x40, 0x8, &(0x7f0000000100)={0x5, 0x80000000, 0x0, 0xfffffffffffffff9, 0x1, 0xfffffffffffffffd, 0x7fff, 0x200}) socket$inet_tcp(0x2, 0x1, 0x0) r9 = dup3(r8, r7, 0x80000) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r9, 0x84, 0x66, &(0x7f00000002c0)={0x0, 0x8ed6}, &(0x7f0000000300)=0x1) bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) shmget(0xffffffffffffffff, 0x8000, 0x49b, &(0x7f0000ff8000/0x8000)=nil) ioctl$sock_inet_SIOCGIFPFLAGS(r8, 0x8935, &(0x7f0000000080)={'syzkaller0\x00'}) ppoll(&(0x7f0000000780)=[{r1, 0x300}, {r1, 0x8401}], 0x2, &(0x7f00000007c0)={0x77359400}, &(0x7f0000000800)={0x9}, 0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000280)={0x0, 0x0, 0x9}, 0x10) r10 = semget$private(0x0, 0x4, 0x0) semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0x0, 0x1000}], 0x1, &(0x7f0000000080)={0x0, 0x1c9c380}) semctl$IPC_RMID(r10, 0x0, 0x0) 2018/03/29 11:11:52 executing program 7: io_setup(0x3, &(0x7f0000000000)=0x0) accept$unix(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000100)=0x6e) syz_open_dev$usbmon(&(0x7f0000000200)='/dev/usbmon#\x00', 0x7ff, 0x0) io_cancel(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0xf, 0x3, 0xffffffffffffffff, &(0x7f0000000140)="940c1f2149747e7734510c34c143183667a187dc4f624f6c2de12452792a6fb529e6bf2a661dc23a844b00925c244a9f2967c0ca9868ee50eacf67a2ad7681d82f5a38cbd6d7641f843fa129e00f701fb01835f497b53672b3e5a3f6838f28aa240bf21eb5e5cbe7804fd307404474ae0242f8dea7a08e0fe9479b06f2795f857f8eec271d35ba7f61a91c87296814189cc1dfc9c659cc5437452a0bd178323c50e8c005ba7fa9519b27965c9f6ffbc7dcaa8e658616cc83188fb131a703222d", 0xc0, 0x5, 0x0, 0x1}, &(0x7f0000000280)) io_getevents(r0, 0x2, 0x8f, &(0x7f0000d83f60)=[{}, {}], &(0x7f00005cfff0)={0x4000000000001, 0x7}) io_getevents(r0, 0x0, 0x5, &(0x7f00000002c0)=[{}, {}, {}, {}, {}], &(0x7f00000003c0)) io_setup(0x7, &(0x7f0000000040)) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/route\x00') ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000440)=0x0) perf_event_open(&(0x7f0000aaa000)={0x0, 0x70, 0x4a, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ef4}, r2, 0x0, 0xffffffffffffffff, 0x1) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000480)=[{0x4, 0x8}, {0xb, 0x4}, {0x4, 0x9}], 0x3) pread64(r1, &(0x7f0000000000)=""/85, 0xfe42, 0x5d) r3 = memfd_create(&(0x7f0000000240)=':+lo#\x00', 0x0) fdatasync(r3) io_submit(r0, 0x1, &(0x7f0000001280)=[&(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000000100)}]) timerfd_create(0x7, 0x80800) io_destroy(r0) rt_sigreturn() setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x9, &(0x7f0000000380)=0x3, 0x4) [ 311.714462] FAULT_INJECTION: forcing a failure. [ 311.714462] name failslab, interval 1, probability 0, space 0, times 0 [ 311.725745] CPU: 1 PID: 7925 Comm: syz-executor2 Not tainted 4.16.0-rc7+ #5 [ 311.732851] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 311.742197] Call Trace: [ 311.744770] dump_stack+0x194/0x24d [ 311.748376] ? arch_local_irq_restore+0x53/0x53 [ 311.753028] ? task_dump_owner+0x28f/0x4d0 [ 311.757247] should_fail+0x8c0/0xa40 [ 311.760943] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 311.766023] ? __lock_acquire+0x664/0x3e00 [ 311.770238] ? trace_hardirqs_off+0x10/0x10 [ 311.774536] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 311.779708] ? find_held_lock+0x35/0x1d0 [ 311.783768] ? check_same_owner+0x320/0x320 [ 311.788068] ? rcu_note_context_switch+0x710/0x710 [ 311.792969] ? find_held_lock+0x35/0x1d0 [ 311.797018] should_failslab+0xec/0x120 [ 311.800969] kmem_cache_alloc+0x47/0x760 [ 311.805018] ? trace_hardirqs_off+0x10/0x10 [ 311.809320] get_empty_filp+0xfb/0x4f0 [ 311.813184] ? proc_nr_files+0x60/0x60 [ 311.817048] ? rcutorture_record_progress+0x10/0x10 [ 311.822046] ? __lock_is_held+0xb6/0x140 [ 311.826083] ? trace_hardirqs_off+0x10/0x10 [ 311.830384] ? unwind_get_return_address+0x61/0xa0 [ 311.835299] path_openat+0xed/0x3530 [ 311.838991] ? find_held_lock+0x35/0x1d0 [ 311.843039] ? path_lookupat+0xba0/0xba0 [ 311.847075] ? lock_downgrade+0x980/0x980 [ 311.851194] ? do_sys_open+0x2e7/0x6d0 [ 311.855061] ? lock_release+0xa40/0xa40 [ 311.859017] ? find_held_lock+0x35/0x1d0 [ 311.863053] ? do_raw_spin_trylock+0x190/0x190 [ 311.867607] ? __lock_is_held+0xb6/0x140 [ 311.871655] ? _raw_spin_unlock+0x22/0x30 [ 311.875777] ? __alloc_fd+0x29b/0x750 [ 311.879566] do_filp_open+0x25b/0x3b0 [ 311.883350] ? may_open_dev+0xe0/0xe0 [ 311.887129] ? strncpy_from_user+0x323/0x430 [ 311.891520] ? mpi_resize+0x200/0x200 [ 311.895293] ? __lock_is_held+0xb6/0x140 [ 311.899334] ? get_unused_fd_flags+0x121/0x190 [ 311.903889] ? __alloc_fd+0x750/0x750 [ 311.907663] ? getname_flags+0x256/0x580 [ 311.911706] do_sys_open+0x502/0x6d0 [ 311.915393] ? do_sys_open+0x502/0x6d0 [ 311.919259] ? filp_open+0x70/0x70 [ 311.922778] ? SyS_read+0x220/0x220 [ 311.926380] ? __might_fault+0x188/0x1d0 [ 311.930423] SyS_open+0x2d/0x40 [ 311.933675] ? do_sys_open+0x6d0/0x6d0 [ 311.937536] do_syscall_64+0x281/0x940 [ 311.941395] ? __do_page_fault+0xc90/0xc90 [ 311.945604] ? _raw_spin_unlock_irq+0x27/0x70 [ 311.950076] ? finish_task_switch+0x1c1/0x7e0 [ 311.954546] ? syscall_return_slowpath+0x550/0x550 [ 311.959450] ? syscall_return_slowpath+0x2ac/0x550 [ 311.964354] ? prepare_exit_to_usermode+0x350/0x350 [ 311.969349] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 311.974694] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 311.979520] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 311.984684] RIP: 0033:0x40eb91 [ 311.987847] RSP: 002b:00007f032fc57b00 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 311.995529] RAX: ffffffffffffffda RBX: 00007f032fc586d4 RCX: 000000000040eb91 [ 312.002772] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 00000000004b91de 2018/03/29 11:11:52 executing program 1: io_setup(0x3, &(0x7f0000000000)=0x0) accept$unix(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000100)=0x6e) r1 = syz_open_dev$usbmon(&(0x7f0000000200)='/dev/usbmon#\x00', 0x0, 0x0) io_cancel(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0xf, 0x3, 0xffffffffffffffff, &(0x7f0000000140)="940c1f2149747e7734510c34c143183667a187dc4f624f6c2de12452792a6fb529e6bf2a661dc23a844b00925c244a9f2967c0ca9868ee50eacf67a2ad7681d82f5a38cbd6d7641f843fa129e00f701fb01835f497b53672b3e5a3f6838f28aa240bf21eb5e5cbe7804fd307404474ae0242f8dea7a08e0fe9479b06f2795f857f8eec271d35ba7f61a91c87296814189cc1dfc9c659cc5437452a0bd178323c50e8c005ba7fa9519b27965c9f6ffbc7dcaa8e658616cc83188fb131a703222d", 0xc0, 0x5, 0x0, 0x1}, &(0x7f0000000280)) io_getevents(r0, 0x2, 0x8f, &(0x7f0000d83f60)=[{}, {}], &(0x7f00005cfff0)={0x4000000000001, 0x7}) io_getevents(r0, 0x0, 0x5, &(0x7f00000002c0)=[{}, {}, {}, {}, {}], &(0x7f00000003c0)) io_setup(0x7, &(0x7f0000000040)) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/route\x00') ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000440)=0x0) perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x4a, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ef4}, r3, 0x0, 0xffffffffffffffff, 0x1) pread64(r2, &(0x7f0000000000)=""/85, 0xfe42, 0x5d) r4 = memfd_create(&(0x7f0000000240)=':+lo#\x00', 0x0) fdatasync(r4) io_submit(r0, 0x1, &(0x7f0000001280)=[&(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f0000000100)}]) timerfd_create(0x7, 0x80800) io_destroy(r0) setsockopt$llc_int(r1, 0x10c, 0x9, &(0x7f0000000380)=0x3, 0x4) [ 312.010021] RBP: 0000000020001780 R08: ffffffffffffffff R09: 00000000000003ff [ 312.017264] R10: 0000000020001740 R11: 0000000000000293 R12: 0000000000000000 [ 312.024507] R13: 00000000000003ff R14: 0000000000000000 R15: ffffffffffffffff [ 312.106482] bond0 (unregistering): Released all slaves [ 312.807337] IPVS: ftp: loaded support on port[0] = 21 [ 313.121159] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 313.584595] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 313.590718] 8021q: adding VLAN 0 to HW filter on device bond0 [ 313.638670] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready 2018/03/29 11:11:54 executing program 5: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) mkdir(&(0x7f0000000000)='./file1\x00', 0x0) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000811ffa)='bdev\x00', 0x0, &(0x7f0000444000)) mount(&(0x7f0000fb6000)='./file0\x00', &(0x7f0000d78000)='.', &(0x7f0000fdb000)='ubifs\x00', 0x1003, 0x0) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000cbeff8)='./file0\x00', &(0x7f00005f7ffa)='ramfs\x00', 0x80000, &(0x7f000002f000)) mount(&(0x7f0000000040)='.', &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0)='binfmt_misc\x00', 0x0, &(0x7f0000000100)) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) mount(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./file1\x00', &(0x7f0000000200)='anon_inodefs\x00', 0x2000, &(0x7f0000000240)) mount(&(0x7f0000adcff8)='./file0\x00', &(0x7f0000e08fff)='.', &(0x7f00005e9000)='cifs\x00', 0x2000, &(0x7f0000ad5000)) 2018/03/29 11:11:54 executing program 7: io_setup(0x3, &(0x7f0000000000)=0x0) syz_open_dev$vcsn(&(0x7f0000000480)='/dev/vcs#\x00', 0x0, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000540)='/dev/sequencer\x00', 0x200000, 0x0) accept$unix(r1, &(0x7f0000000580), &(0x7f0000000500)=0x6e) syz_open_dev$usbmon(&(0x7f0000000200)='/dev/usbmon#\x00', 0x4, 0x80000) io_cancel(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0xf, 0x3, 0xffffffffffffffff, &(0x7f0000000140)="940c1f2149747e7734510c34c143183667a187dc4f624f6c2de12452792a6fb529e6bf2a661dc23a844b00925c244a9f2967c0ca9868ee50eacf67a2ad7681d82f5a38cbd6d7641f843fa129e00f701fb01835f497b53672b3e5a3f6838f28aa240bf21eb5e5cbe7804fd307404474ae0242f8dea7a08e0fe9479b06f2795f857f8eec271d35ba7f61a91c87296814189cc1dfc9c659cc5437452a0bd178323c50e8c005ba7fa9519b27965c9f6ffbc7dcaa8e658616cc83188fb131a703222d", 0xc0, 0x5, 0x0, 0x1}, &(0x7f0000000280)) io_getevents(r0, 0x2, 0x2, &(0x7f00000004c0)=[{}, {}], &(0x7f00005cfff0)={0x0, 0x989680}) io_getevents(r0, 0x0, 0x5, &(0x7f00000002c0)=[{}, {}, {}, {}, {}], &(0x7f00000003c0)) io_setup(0x7, &(0x7f0000000040)) pwritev(r1, &(0x7f0000000a80)=[{&(0x7f0000000080)="735d4cf6384fa0d131b2cf29260049e27b10698345efdf3f58cd60380b44d868a95c8949", 0x24}, {&(0x7f0000000600)="0fe5416b1d7e38f6b4cbcf42876058bdba94f0b5dba4b026d61b5beb426a1f119e18b28ffcdf15563ff8c13f99a1879a74652db01613a8a1076e2581d675b5a9f917e476ee678b0fb7762ef04b19cd45ca22d7f65a4488934581032535f041a84bce7663dfe3bcc261b1c5774307e4a087e8d4f562994478397d9c9a3318df38dacbf902f11677cafb6b4759a16fecc2ad0f15cc0fb1dfa9af55c23e5f63dce78b3e7a95d97f1bdce5a62f7a93475c136038f6a605e3c4616633905676db3fc3cb0ede84bc0c6fe35087d08035727e2ff7a33d753626076378aa43303ebac4cb740d2f8d36d449b2343011757e1f7ffbba015960a1", 0xf5}, {&(0x7f0000000700)="0aa179881a1bd632d7d2f8a15ec88287dbbfc289a7d71814dff8e0a54b637e82d52ab97811cf518c8039a3dac79141f9b4ffb2740805327bd180525d5ea64455988e354d28d138c90e769f279a223af967b1e1b89afd9fbc56cd7342e847cc89e67adeb25b8b35abaec1d8cbaaae5c1ce35e1fdbf8a53f246cb2c426a461c3e839760b2b236e611890a25ec99e17b2c22b451e61544acf0126bba5600abf62e77f0ec87a9ffe972e6e79c9abfd820b53ba4fa921c62453d6885c50f26e9accc03391f4db616acd1f", 0xc8}, {&(0x7f0000000800)="693d775462f71d491a99cf9bec580c82ab8bcb11c422dfbc365cc7a8fdd7907722dc72b12b0afe897bd31c274bc2e37e6bc9e5d88517b8d7bd1d5e5c0cb15f5d4089cee16fe043a4fb6301620bcd14a861e70d14c0a7a7be374bc48176fec89d37d075f090b8a431b22008ceeb56a5b9960e899ed3ee64d87210c0ff3e811ba2b1052d87cc459f7a0a45b7ab1628a94ece6d88d22e7ed2d05b3e41e36a95cc3b0fdf5f677fc23eb14a203abbe3f26642b28da74f5f82f2feb90a1d63c450c38564", 0xc1}, {&(0x7f00000000c0)="84761a2732384ac5c4f6fc8cf6cf0ee0b2bf53c9996aa038c9ff78fb3e9f1c4f714a", 0x22}, {&(0x7f0000000900)="f63cb8c6b8ccdcf99151c005410a9f983b52cf56b666fc2157d3b3d251568e22e4576c1f684f6da64e955fa01098da309be5b5cde77a2433d77bad7ce2898f1e4b048ffe3694c0849f8deeec2491d5ba544bba327f03324d22f901a264f461fd5f0638b1a6b81f119753e78fb1a5d146763452d9dda2cf992286e6a41a83a4f82f8fb88036ffa6f66bdbac069cf7f3314e74e25ec292b6cbb2e924455ee885", 0x9f}, {&(0x7f00000009c0)="e9e78fe07e3a3c1dfb12a6ac4fd7e6180224618dddedfba1ef2d350a59093e945a02165af84a8eace05a43dee954edf82a5cf08b47642b091d7a1ee8481381a573c2104fde95d116e2c3fa67da0ea95d80611bfd8e04722c1e69311bac2704ab52059dd78656466f8088631bfb30ed7da89743fb647b9ed15cfb6e615deefdb7174a7495dbd2aee57d7715953a90052d107ada8180", 0x95}, {&(0x7f0000000100)="0517347652d3c3204efc3a009ce9a1e0", 0x10}], 0x8, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/route\x00') ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000440)=0x0) perf_event_open(&(0x7f0000aaa000)={0x0, 0x70, 0x4a, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ef4}, r3, 0x0, 0xffffffffffffffff, 0x1) pread64(r2, &(0x7f0000000000)=""/85, 0xfe42, 0x5d) r4 = memfd_create(&(0x7f0000000240)=':+lo#\x00', 0x0) fdatasync(r4) io_submit(r0, 0x1, &(0x7f0000001280)=[&(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x1}]) timerfd_create(0x3, 0x800001000080800) io_destroy(r0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x9, &(0x7f0000000380)=0x3, 0x4) 2018/03/29 11:11:54 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) readv(r0, &(0x7f0000001480)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x3}) r1 = syz_open_pts(r0, 0x2) r2 = dup3(r1, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000c34fff), 0xffffff0b) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0) preadv(r3, &(0x7f00000004c0)=[{&(0x7f0000000480)=""/21, 0x15}], 0x1, 0x0) fchdir(0xffffffffffffffff) mkdir(&(0x7f0000000280)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f", 0xfffffffffffffffc) mknod$loop(&(0x7f0000000240)='./file0\x00', 0x2000, 0x1) fchmod(r2, 0x0) splice(r3, &(0x7f0000000400), 0xffffffffffffffff, &(0x7f0000000440), 0x9, 0x2) rename(&(0x7f0000001e00)='./file0\x00', &(0x7f0000000100)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f") mkdir(&(0x7f000000e000)='./control\x00', 0x0) r4 = open(&(0x7f0000000000)='./control\x00', 0x0, 0x0) renameat2(r4, &(0x7f0000000040)='./file0\x00', r4, &(0x7f0000000080)='./control\x00', 0x2) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000300)={0x0, 0x80}, &(0x7f0000000340)=0x8) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000380)={r5, 0x5}, &(0x7f00000003c0)=0x8) mknodat(r4, &(0x7f000003f000)='./control\x00', 0x0, 0x0) symlink(&(0x7f0000000180)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f", &(0x7f00000000c0)='./file0\x00') perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(r4, &(0x7f0000010000)='./control\x00', &(0x7f000003f000), &(0x7f0000001fe8), 0x0) 2018/03/29 11:11:54 executing program 0: r0 = perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x4a, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffff9c, 0xc00caee0, &(0x7f0000000180)={0x0, r0, 0x1}) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) fcntl$getownex(r0, 0x10, &(0x7f0000000400)={0x0, 0x0}) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0xffff, 0xe3, 0x6, 0x4, 0x0, 0x7, 0x0, 0x2, 0x10001, 0x1, 0x7, 0x8, 0x100, 0x4, 0x0, 0x7f, 0x20, 0x0, 0x4, 0x5, 0x90a4, 0x7, 0x2, 0x73, 0x8, 0x7, 0x4, 0x7e0, 0x101, 0x0, 0x2, 0x309, 0x0, 0x9, 0xfffffffffffffff9, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x20, 0x1}, 0x8140, 0x2, 0x0, 0x4, 0xca1, 0xb5}, r4, 0x4, r1, 0x8) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) futimesat(r1, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0)={{r2, r3/1000+10000}, {r5, r6/1000+10000}}) unshare(0x8000000) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0xdc, 0x40}, 0x341) r8 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8910, &(0x7f0000000080)=@buf={0x0, &(0x7f0000000000)}) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x13, &(0x7f0000000ffc), 0x4) mq_open(&(0x7f00000000c0)='syzkaller0\x00', 0x40, 0x8, &(0x7f0000000100)={0x5, 0x80000000, 0x0, 0xfffffffffffffff9, 0x1, 0xfffffffffffffffd, 0x7fff, 0x200}) socket$inet_tcp(0x2, 0x1, 0x0) r9 = dup3(r8, r7, 0x80000) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r9, 0x84, 0x66, &(0x7f00000002c0)={0x0, 0x8ed6}, &(0x7f0000000300)=0x1) bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) shmget(0xffffffffffffffff, 0x8000, 0x49b, &(0x7f0000ff8000/0x8000)=nil) ioctl$sock_inet_SIOCGIFPFLAGS(r8, 0x8935, &(0x7f0000000080)={'syzkaller0\x00'}) ppoll(&(0x7f0000000780)=[{r1, 0x300}, {r1, 0x8401}], 0x2, &(0x7f00000007c0)={0x77359400}, &(0x7f0000000800)={0x9}, 0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000280)={0x0, 0x0, 0x9}, 0x10) r10 = semget$private(0x0, 0x4, 0x0) semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0x0, 0x1000}], 0x1, &(0x7f0000000080)={0x0, 0x1c9c380}) semctl$IPC_RMID(r10, 0x0, 0x0) 2018/03/29 11:11:54 executing program 3: accept$unix(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000100)=0x6e) r0 = syz_open_dev$usbmon(&(0x7f0000000200)='/dev/usbmon#\x00', 0x7ff, 0x0) io_cancel(0x0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0xf, 0x0, 0xffffffffffffffff, &(0x7f0000000140)="940c1f2149747e7734510c34c143183667a187dc4f624f6c2de12452792a6fb529e6bf2a661dc23a844b00925c244a9f2967c0ca9868ee50eacf67a2ad7681d82f5a38cbd6d7641f843fa129e00f701fb01835f497b53672b3e5a3f6838f28aa240bf21eb5e5cbe7804fd307404474ae0242f8dea7a08e0fe9479b06f2795f857f8eec271d35ba7f61a91c87296814189cc1dfc9c659cc5437452a0bd178323c50e8c005ba7fa9519b27965c9f6ffbc7dcaa8e658616cc83188fb131a703222d", 0xc0, 0x5, 0x0, 0x1, r0}, &(0x7f0000000280)) io_getevents(0x0, 0x2, 0x8f, &(0x7f0000d83f60)=[{}, {}], &(0x7f00005cfff0)={0x4000000000001, 0x7}) io_getevents(0x0, 0x0, 0x5, &(0x7f00000002c0)=[{}, {}, {}, {}, {}], &(0x7f00000003c0)) io_setup(0x7, &(0x7f0000000040)) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/route\x00') ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000440)=0x0) perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x4a, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ef4}, r2, 0x0, r0, 0x1) pread64(r1, &(0x7f0000000000)=""/85, 0xfe42, 0x5d) r3 = memfd_create(&(0x7f0000000240)=':+lo#\x00', 0x0) fdatasync(r3) io_submit(0x0, 0x1, &(0x7f0000001280)=[&(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000000100)}]) timerfd_create(0x7, 0x80800) io_destroy(0x0) setsockopt$llc_int(r0, 0x10c, 0x9, &(0x7f0000000380)=0x3, 0x4) 2018/03/29 11:11:54 executing program 6: openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x0, 0x0) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, &(0x7f0000000340)=0x1) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f000051cff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000943ffc)=0xa35) read(r0, &(0x7f00003fefff)=""/1, 0x1) r1 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000029000)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r0, &(0x7f0000dcdff0)=[{&(0x7f0000cd8000)=""/1, 0x1}], 0x1) ioctl$int_in(r2, 0x5452, &(0x7f0000b28000)=0x3c) write$cgroup_type(0xffffffffffffffff, &(0x7f00000002c0)='threaded\x00', 0x9) syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x0, 0x802) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000fb9000)) fcntl$setsig(r2, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r3}], 0x1, 0xfffffffffffffff8) read$eventfd(0xffffffffffffffff, &(0x7f0000000040), 0x8) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)) r4 = dup2(r2, r3) fcntl$setown(r4, 0x8, r1) ptrace$cont(0xffffffffffffffff, r1, 0x0, 0x8) tkill(r1, 0x16) r5 = gettid() process_vm_readv(r5, &(0x7f0000001880)=[{&(0x7f0000000680)=""/198, 0xc6}, {&(0x7f0000000780)=""/247, 0xf7}, {&(0x7f0000000380)=""/12, 0xc}, {&(0x7f00000003c0)=""/6, 0x6}, {&(0x7f0000000400)=""/14, 0xe}], 0x5, &(0x7f00000019c0)=[{&(0x7f0000001900)=""/41, 0x29}, {&(0x7f0000001940)=""/112, 0x70}], 0x2, 0x0) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f0000000240)={{{@in6}}, {{@in=@local}, 0x0, @in=@local}}, &(0x7f0000000100)=0xe8) 2018/03/29 11:11:54 executing program 1: io_setup(0x3, &(0x7f0000000000)=0x0) accept$unix(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000100)=0x6e) r1 = syz_open_dev$usbmon(&(0x7f0000000200)='/dev/usbmon#\x00', 0x0, 0x0) io_cancel(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0xf, 0x3, 0xffffffffffffffff, &(0x7f0000000140)="940c1f2149747e7734510c34c143183667a187dc4f624f6c2de12452792a6fb529e6bf2a661dc23a844b00925c244a9f2967c0ca9868ee50eacf67a2ad7681d82f5a38cbd6d7641f843fa129e00f701fb01835f497b53672b3e5a3f6838f28aa240bf21eb5e5cbe7804fd307404474ae0242f8dea7a08e0fe9479b06f2795f857f8eec271d35ba7f61a91c87296814189cc1dfc9c659cc5437452a0bd178323c50e8c005ba7fa9519b27965c9f6ffbc7dcaa8e658616cc83188fb131a703222d", 0xc0, 0x5, 0x0, 0x1}, &(0x7f0000000280)) io_getevents(r0, 0x2, 0x8f, &(0x7f0000d83f60)=[{}, {}], &(0x7f00005cfff0)={0x4000000000001, 0x7}) io_getevents(r0, 0x0, 0x5, &(0x7f00000002c0)=[{}, {}, {}, {}, {}], &(0x7f00000003c0)) io_setup(0x7, &(0x7f0000000040)) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/route\x00') ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000440)=0x0) perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x4a, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ef4}, r3, 0x0, 0xffffffffffffffff, 0x1) pread64(r2, &(0x7f0000000000)=""/85, 0xfe42, 0x5d) r4 = memfd_create(&(0x7f0000000240)=':+lo#\x00', 0x0) fdatasync(r4) io_submit(r0, 0x1, &(0x7f0000001280)=[&(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f0000000100)}]) timerfd_create(0x7, 0x80800) io_destroy(r0) setsockopt$llc_int(r1, 0x10c, 0x9, &(0x7f0000000380)=0x3, 0x4) [ 313.685112] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 313.691277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 313.698961] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready 2018/03/29 11:11:54 executing program 2 (fault-call:21 fault-nth:3): r0 = syz_open_procfs(0x0, &(0x7f00000004c0)='oom_score_adj\x00') perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x49, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(r0, 0x0, 0x83, &(0x7f0000001800)={'nat\x00', 0x0, 0x3, 0x1000, [], 0x2, &(0x7f0000001280)=[{}, {}], &(0x7f0000002040)=""/4096}, &(0x7f00000013c0)=0x78) ioprio_get$pid(0x0, 0x0) timer_create(0x0, &(0x7f0000cd0000), &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00004b1fe0)={{0x0, 0x1c9c380}, {0x0, 0x9}}, &(0x7f0000040000)) r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x7fff) truncate(&(0x7f0000001180)='./bus\x00', 0x4) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000f40000)='/dev/ptmx\x00', 0x200000000101002, 0x0) sendfile(r2, 0xffffffffffffffff, &(0x7f00000010c0), 0x10000065) sendfile(r0, r1, &(0x7f0000000000), 0x4) tkill(0x0, 0x0) r3 = memfd_create(&(0x7f0000000000)='\x00', 0x1) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000001200)) recvmsg(0xffffffffffffff9c, &(0x7f0000001500)={&(0x7f00000012c0)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @remote}}}, 0x80, &(0x7f0000001400)=[{&(0x7f0000001340)=""/103, 0x67}], 0x1, &(0x7f0000001440)=""/155, 0x9b}, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000001540)) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000001640)={0x1ff, {0x2, 0x4e21}, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, {0x2, 0x0, @multicast2=0xe0000002}, 0x0, 0x9, 0x2, 0x6, 0x0, &(0x7f0000001240)='teql0\x00', 0x0, 0x80}) inotify_rm_watch(0xffffffffffffffff, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000140), &(0x7f0000000100)=0xffffffa4) getgroups(0x1, &(0x7f0000001600)=[0x0]) syz_fuseblk_mount(&(0x7f0000001740)='./file0\x00', &(0x7f0000001780)='./file0\x00', 0x0, 0x0, 0xffffffffffffffff, 0x3ff, 0x1, 0x0) getpgrp(0xffffffffffffffff) getegid() sendmmsg$unix(r3, &(0x7f0000001880), 0x0, 0x0) setsockopt$netrom_NETROM_T4(0xffffffffffffffff, 0x103, 0x6, &(0x7f00000017c0), 0xfffffffffffffc77) readv(0xffffffffffffffff, &(0x7f000004ffe0), 0x0) [ 313.764803] FAULT_INJECTION: forcing a failure. [ 313.764803] name failslab, interval 1, probability 0, space 0, times 0 [ 313.776160] CPU: 1 PID: 8117 Comm: syz-executor2 Not tainted 4.16.0-rc7+ #5 [ 313.783248] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 313.792574] Call Trace: [ 313.795142] dump_stack+0x194/0x24d [ 313.798753] ? arch_local_irq_restore+0x53/0x53 [ 313.803397] ? kernel_text_address+0x102/0x140 [ 313.807969] should_fail+0x8c0/0xa40 [ 313.811662] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 313.816744] ? save_stack+0xa3/0xd0 [ 313.820345] ? save_stack+0x43/0xd0 [ 313.823945] ? __kasan_slab_free+0x11a/0x170 [ 313.828324] ? kasan_slab_free+0xe/0x10 [ 313.832270] ? kmem_cache_free+0x83/0x2a0 [ 313.836390] ? putname+0xee/0x130 [ 313.839823] ? find_held_lock+0x35/0x1d0 [ 313.843883] ? check_same_owner+0x320/0x320 [ 313.848176] ? get_unused_fd_flags+0x190/0x190 [ 313.852732] ? may_open_dev+0xe0/0xe0 [ 313.856509] ? rcu_note_context_switch+0x710/0x710 [ 313.861423] should_failslab+0xec/0x120 [ 313.865373] kmem_cache_alloc+0x47/0x760 [ 313.869410] ? putname+0xee/0x130 [ 313.872841] ? rcu_read_lock_sched_held+0x108/0x120 [ 313.877837] getname_flags+0xcb/0x580 [ 313.881610] ? putname+0xf3/0x130 [ 313.885047] SyS_mknodat+0x17a/0x480 [ 313.888742] ? do_file_open_root+0x4d0/0x4d0 [ 313.893131] ? __might_fault+0x188/0x1d0 [ 313.897167] ? do_syscall_64+0xb7/0x940 [ 313.901119] ? do_file_open_root+0x4d0/0x4d0 [ 313.905507] do_syscall_64+0x281/0x940 [ 313.909370] ? __do_page_fault+0xc90/0xc90 [ 313.913579] ? _raw_spin_unlock_irq+0x27/0x70 [ 313.918048] ? finish_task_switch+0x1c1/0x7e0 [ 313.922519] ? syscall_return_slowpath+0x550/0x550 [ 313.927424] ? syscall_return_slowpath+0x2ac/0x550 [ 313.932330] ? prepare_exit_to_usermode+0x350/0x350 [ 313.937324] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 313.942666] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 313.947491] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 313.952655] RIP: 0033:0x4548b9 [ 313.955819] RSP: 002b:00007f032fc57b08 EFLAGS: 00000246 ORIG_RAX: 0000000000000103 2018/03/29 11:11:54 executing program 2 (fault-call:21 fault-nth:4): r0 = syz_open_procfs(0x0, &(0x7f00000004c0)='oom_score_adj\x00') perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x49, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(r0, 0x0, 0x83, &(0x7f0000001800)={'nat\x00', 0x0, 0x3, 0x1000, [], 0x2, &(0x7f0000001280)=[{}, {}], &(0x7f0000002040)=""/4096}, &(0x7f00000013c0)=0x78) ioprio_get$pid(0x0, 0x0) timer_create(0x0, &(0x7f0000cd0000), &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00004b1fe0)={{0x0, 0x1c9c380}, {0x0, 0x9}}, &(0x7f0000040000)) r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x7fff) truncate(&(0x7f0000001180)='./bus\x00', 0x4) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000f40000)='/dev/ptmx\x00', 0x200000000101002, 0x0) sendfile(r2, 0xffffffffffffffff, &(0x7f00000010c0), 0x10000065) sendfile(r0, r1, &(0x7f0000000000), 0x4) tkill(0x0, 0x0) r3 = memfd_create(&(0x7f0000000000)='\x00', 0x1) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000001200)) recvmsg(0xffffffffffffff9c, &(0x7f0000001500)={&(0x7f00000012c0)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @remote}}}, 0x80, &(0x7f0000001400)=[{&(0x7f0000001340)=""/103, 0x67}], 0x1, &(0x7f0000001440)=""/155, 0x9b}, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000001540)) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000001640)={0x1ff, {0x2, 0x4e21}, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, {0x2, 0x0, @multicast2=0xe0000002}, 0x0, 0x9, 0x2, 0x6, 0x0, &(0x7f0000001240)='teql0\x00', 0x0, 0x80}) inotify_rm_watch(0xffffffffffffffff, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000140), &(0x7f0000000100)=0xffffffa4) getgroups(0x1, &(0x7f0000001600)=[0x0]) syz_fuseblk_mount(&(0x7f0000001740)='./file0\x00', &(0x7f0000001780)='./file0\x00', 0x0, 0x0, 0xffffffffffffffff, 0x3ff, 0x1, 0x0) getpgrp(0xffffffffffffffff) getegid() sendmmsg$unix(r3, &(0x7f0000001880), 0x0, 0x0) setsockopt$netrom_NETROM_T4(0xffffffffffffffff, 0x103, 0x6, &(0x7f00000017c0), 0xfffffffffffffc77) readv(0xffffffffffffffff, &(0x7f000004ffe0), 0x0) 2018/03/29 11:11:54 executing program 3: io_setup(0x3, &(0x7f0000000000)=0x0) accept$unix(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000100)=0x6e) r1 = syz_open_dev$usbmon(&(0x7f0000000200)='/dev/usbmon#\x00', 0x7ff, 0x0) io_cancel(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0xf, 0x0, 0xffffffffffffffff, &(0x7f0000000140)="940c1f2149747e7734510c34c143183667a187dc4f624f6c2de12452792a6fb529e6bf2a661dc23a844b00925c244a9f2967c0ca9868ee50eacf67a2ad7681d82f5a38cbd6d7641f843fa129e00f701fb01835f497b53672b3e5a3f6838f28aa240bf21eb5e5cbe7804fd307404474ae0242f8dea7a08e0fe9479b06f2795f857f8eec271d35ba7f61a91c87296814189cc1dfc9c659cc5437452a0bd178323c50e8c005ba7fa9519b27965c9f6ffbc7dcaa8e658616cc83188fb131a703222d", 0xc0, 0x5, 0x0, 0x1, r1}, &(0x7f0000000280)) io_getevents(r0, 0x2, 0x8f, &(0x7f0000d83f60)=[{}, {}], &(0x7f00005cfff0)={0x4000000000001, 0x7}) io_getevents(r0, 0x4, 0x5, &(0x7f00000002c0)=[{}, {}, {}, {}, {}], &(0x7f00000003c0)) io_setup(0x7, &(0x7f0000000040)) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/route\x00') ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000440)=0x0) perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x4a, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ef4}, r3, 0x0, r1, 0x1) pread64(r2, &(0x7f0000000000)=""/85, 0xfe42, 0x5d) r4 = memfd_create(&(0x7f0000000240)=':+lo#\x00', 0x0) fdatasync(r4) io_submit(r0, 0x1, &(0x7f0000001280)=[&(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f0000000100)}]) timerfd_create(0x7, 0x80800) io_destroy(r0) setsockopt$llc_int(r1, 0x10c, 0x9, &(0x7f0000000380)=0x3, 0x4) 2018/03/29 11:11:54 executing program 7: io_setup(0x3, &(0x7f0000000000)=0x0) accept$unix(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000100)=0x6e) syz_open_dev$usbmon(&(0x7f0000000200)='/dev/usbmon#\x00', 0x7ff, 0x0) io_cancel(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0xf, 0x3, 0xffffffffffffffff, &(0x7f0000000140)="940c1f2149747e7734510c34c143183667a187dc4f624f6c2de12452792a6fb529e6bf2a661dc23a844b00925c244a9f2967c0ca9868ee50eacf67a2ad7681d82f5a38cbd6d7641f843fa129e00f701fb01835f497b53672b3e5a3f6838f28aa240bf21eb5e5cbe7804fd307404474ae0242f8dea7a08e0fe9479b06f2795f857f8eec271d35ba7f61a91c87296814189cc1dfc9c659cc5437452a0bd178323c50e8c005ba7fa9519b27965c9f6ffbc7dcaa8e658616cc83188fb131a703222d", 0xc0, 0x5, 0x0, 0x1}, &(0x7f0000000280)) io_getevents(r0, 0x2, 0x8f, &(0x7f0000d83f60)=[{}, {}], &(0x7f00005cfff0)={0x4000000000001, 0x7}) io_getevents(r0, 0x0, 0x5, &(0x7f00000002c0)=[{}, {}, {}, {}, {}], &(0x7f00000003c0)) io_setup(0x7, &(0x7f0000000040)) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/route\x00') ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000440)=0x0) perf_event_open(&(0x7f0000aaa000)={0x0, 0x70, 0x4a, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ef4}, r2, 0x0, 0xffffffffffffffff, 0x1) pread64(r1, &(0x7f0000000000)=""/85, 0xfe42, 0x5d) r3 = memfd_create(&(0x7f0000000240)=':+lo#\x00', 0x0) fdatasync(r3) syz_open_dev$dspn(&(0x7f0000000480)='/dev/dsp#\x00', 0x3c3, 0x400) io_submit(r0, 0x1, &(0x7f0000001280)=[&(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000000100)}]) timerfd_create(0x7, 0x80800) io_destroy(r0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x9, &(0x7f0000000380)=0x3, 0x4) [ 313.963501] RAX: ffffffffffffffda RBX: 0000000000000019 RCX: 00000000004548b9 [ 313.970745] RDX: 0000000000006000 RSI: 0000000020001780 RDI: 00000000ffffff9c [ 313.977990] RBP: 0000000020001780 R08: 00000000000003ff R09: 0000000000000000 [ 313.985235] R10: 00000000000007c7 R11: 0000000000000246 R12: 0000000000000000 [ 313.992477] R13: 00000000000003ff R14: 0000000000000000 R15: ffffffffffffffff 2018/03/29 11:11:54 executing program 1: io_setup(0x3, &(0x7f0000000000)=0x0) accept$unix(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000100)=0x6e) r1 = syz_open_dev$usbmon(&(0x7f0000000200)='/dev/usbmon#\x00', 0x0, 0x0) io_cancel(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0xf, 0x3, 0xffffffffffffffff, &(0x7f0000000140)="940c1f2149747e7734510c34c143183667a187dc4f624f6c2de12452792a6fb529e6bf2a661dc23a844b00925c244a9f2967c0ca9868ee50eacf67a2ad7681d82f5a38cbd6d7641f843fa129e00f701fb01835f497b53672b3e5a3f6838f28aa240bf21eb5e5cbe7804fd307404474ae0242f8dea7a08e0fe9479b06f2795f857f8eec271d35ba7f61a91c87296814189cc1dfc9c659cc5437452a0bd178323c50e8c005ba7fa9519b27965c9f6ffbc7dcaa8e658616cc83188fb131a703222d", 0xc0, 0x5, 0x0, 0x1}, &(0x7f0000000280)) io_getevents(r0, 0x2, 0x8f, &(0x7f0000d83f60)=[{}, {}], &(0x7f00005cfff0)={0x4000000000001, 0x7}) io_getevents(r0, 0x0, 0x5, &(0x7f00000002c0)=[{}, {}, {}, {}, {}], &(0x7f00000003c0)) io_setup(0x7, &(0x7f0000000040)) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/route\x00') ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000440)=0x0) perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x4a, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ef4}, r3, 0x0, 0xffffffffffffffff, 0x1) pread64(r2, &(0x7f0000000000)=""/85, 0xfe42, 0x5d) r4 = memfd_create(&(0x7f0000000240)=':+lo#\x00', 0x0) fdatasync(r4) io_submit(r0, 0x1, &(0x7f0000001280)=[&(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f0000000100)}]) timerfd_create(0x7, 0x80800) io_destroy(r0) setsockopt$llc_int(r1, 0x10c, 0x9, &(0x7f0000000380)=0x3, 0x4) [ 314.064419] FAULT_INJECTION: forcing a failure. [ 314.064419] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 314.076255] CPU: 0 PID: 8132 Comm: syz-executor2 Not tainted 4.16.0-rc7+ #5 [ 314.083352] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 314.092701] Call Trace: [ 314.095273] dump_stack+0x194/0x24d [ 314.098878] ? arch_local_irq_restore+0x53/0x53 [ 314.103537] should_fail+0x8c0/0xa40 [ 314.107233] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 314.112316] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 314.117481] ? lock_downgrade+0x980/0x980 [ 314.121607] ? lock_release+0xa40/0xa40 [ 314.125558] ? __free_insn_slot+0x5c0/0x5c0 [ 314.129860] ? rcutorture_record_progress+0x10/0x10 [ 314.134858] ? is_bpf_text_address+0xa4/0x120 [ 314.139329] ? kernel_text_address+0x102/0x140 [ 314.143887] ? __kernel_text_address+0xd/0x40 [ 314.148357] ? unwind_get_return_address+0x61/0xa0 [ 314.153264] ? __save_stack_trace+0x7e/0xd0 [ 314.157559] ? should_fail+0x23b/0xa40 [ 314.161430] __alloc_pages_nodemask+0x327/0xdd0 [ 314.166079] ? __alloc_pages_slowpath+0x2d10/0x2d10 [ 314.171072] ? __kasan_slab_free+0x11a/0x170 [ 314.175452] ? kmem_cache_free+0x83/0x2a0 [ 314.179575] ? putname+0xee/0x130 [ 314.183012] ? find_held_lock+0x35/0x1d0 [ 314.187079] ? check_same_owner+0x320/0x320 [ 314.191376] ? get_unused_fd_flags+0x190/0x190 [ 314.195931] ? may_open_dev+0xe0/0xe0 [ 314.199712] cache_grow_begin+0x72/0x640 [ 314.203753] kmem_cache_alloc+0x400/0x760 [ 314.207879] ? putname+0xee/0x130 [ 314.211316] getname_flags+0xcb/0x580 [ 314.215090] ? putname+0xf3/0x130 [ 314.218524] SyS_mknodat+0x17a/0x480 [ 314.222223] ? do_file_open_root+0x4d0/0x4d0 [ 314.226603] ? __might_fault+0x188/0x1d0 [ 314.230638] ? do_syscall_64+0xb7/0x940 [ 314.234592] ? do_file_open_root+0x4d0/0x4d0 [ 314.238977] do_syscall_64+0x281/0x940 [ 314.242839] ? __do_page_fault+0xc90/0xc90 [ 314.247048] ? _raw_spin_unlock_irq+0x27/0x70 [ 314.251527] ? finish_task_switch+0x1c1/0x7e0 [ 314.255998] ? syscall_return_slowpath+0x550/0x550 [ 314.260906] ? syscall_return_slowpath+0x2ac/0x550 [ 314.265810] ? prepare_exit_to_usermode+0x350/0x350 [ 314.270805] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 314.276150] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 314.280974] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 314.286138] RIP: 0033:0x4548b9 [ 314.289303] RSP: 002b:00007f032fc57b08 EFLAGS: 00000246 ORIG_RAX: 0000000000000103 [ 314.296984] RAX: ffffffffffffffda RBX: 0000000000000019 RCX: 00000000004548b9 [ 314.304233] RDX: 0000000000006000 RSI: 0000000020001780 RDI: 00000000ffffff9c 2018/03/29 11:11:54 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) readv(r0, &(0x7f0000001480)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x3}) r1 = syz_open_pts(r0, 0x2) r2 = dup3(r1, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000c34fff), 0xffffff0b) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0) preadv(r3, &(0x7f00000004c0)=[{&(0x7f0000000480)=""/21, 0x15}], 0x1, 0x0) fchdir(0xffffffffffffffff) mkdir(&(0x7f0000000280)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f", 0xfffffffffffffffc) fchmod(r2, 0x0) splice(r3, &(0x7f0000000400), 0xffffffffffffffff, &(0x7f0000000440), 0x9, 0x2) rename(&(0x7f0000001e00)='./file0\x00', &(0x7f0000000100)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f") mkdir(&(0x7f000000e000)='./control\x00', 0x0) r4 = open(&(0x7f0000000000)='./control\x00', 0x0, 0x0) renameat2(r4, &(0x7f0000000040)='./file0\x00', r4, &(0x7f0000000080)='./control\x00', 0x2) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000300)={0x0, 0x80}, &(0x7f0000000340)=0x8) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000380)={r5, 0x5}, &(0x7f00000003c0)=0x8) mknodat(r4, &(0x7f000003f000)='./control\x00', 0x0, 0x0) symlink(&(0x7f0000000180)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f", &(0x7f00000000c0)='./file0\x00') perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x0, 0x0, 0xfffffffffffff163, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x800100000000, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x6}, 0x0, 0x0, r4, 0x0) execveat(r4, &(0x7f0000010000)='./control\x00', &(0x7f000003f000), &(0x7f0000001fe8), 0x0) 2018/03/29 11:11:54 executing program 0: r0 = perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x4a, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffff9c, 0xc00caee0, &(0x7f0000000180)={0x0, r0, 0x1}) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) fcntl$getownex(r0, 0x10, &(0x7f0000000400)={0x0, 0x0}) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0xffff, 0xe3, 0x6, 0x4, 0x0, 0x7, 0x0, 0x2, 0x10001, 0x1, 0x7, 0x8, 0x100, 0x4, 0x0, 0x7f, 0x20, 0x0, 0x4, 0x5, 0x90a4, 0x7, 0x2, 0x73, 0x8, 0x7, 0x4, 0x7e0, 0x101, 0x0, 0x2, 0x309, 0x0, 0x9, 0xfffffffffffffff9, 0x9, 0x0, 0x0, 0x0, @perf_config_ext={0x20, 0x1}, 0x8140, 0x2, 0x0, 0x4, 0xca1, 0xb5}, r4, 0x4, r1, 0x8) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) futimesat(r1, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0)={{r2, r3/1000+10000}, {r5, r6/1000+10000}}) unshare(0x8000000) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0xdc, 0x40}, 0x341) r8 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8910, &(0x7f0000000080)=@buf={0x0, &(0x7f0000000000)}) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x13, &(0x7f0000000ffc), 0x4) mq_open(&(0x7f00000000c0)='syzkaller0\x00', 0x40, 0x8, &(0x7f0000000100)={0x5, 0x80000000, 0x0, 0xfffffffffffffff9, 0x1, 0xfffffffffffffffd, 0x7fff, 0x200}) socket$inet_tcp(0x2, 0x1, 0x0) r9 = dup3(r8, r7, 0x80000) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r9, 0x84, 0x66, &(0x7f00000002c0)={0x0, 0x8ed6}, &(0x7f0000000300)=0x1) bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) shmget(0xffffffffffffffff, 0x8000, 0x49b, &(0x7f0000ff8000/0x8000)=nil) ioctl$sock_inet_SIOCGIFPFLAGS(r8, 0x8935, &(0x7f0000000080)={'syzkaller0\x00'}) ppoll(&(0x7f0000000780)=[{r1, 0x300}, {r1, 0x8401}], 0x2, &(0x7f00000007c0)={0x77359400}, &(0x7f0000000800)={0x9}, 0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000280)={0x0, 0x0, 0x9}, 0x10) r10 = semget$private(0x0, 0x4, 0x0) semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0x0, 0x1000}], 0x1, &(0x7f0000000080)={0x0, 0x1c9c380}) semctl$IPC_RMID(r10, 0x0, 0x0) [ 314.311478] RBP: 0000000020001780 R08: 00000000000003ff R09: 0000000000000000 [ 314.318719] R10: 00000000000007c7 R11: 0000000000000246 R12: 0000000000000000 [ 314.325961] R13: 00000000000003ff R14: 0000000000000000 R15: ffffffffffffffff 2018/03/29 11:11:54 executing program 6: openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x0, 0x0) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, &(0x7f0000000340)=0x1) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f000051cff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000943ffc)=0xa35) read(r0, &(0x7f00003fefff)=""/1, 0x1) r1 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000029000)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r0, &(0x7f0000dcdff0)=[{&(0x7f0000cd8000)=""/1, 0x1}], 0x1) ioctl$int_in(r2, 0x5452, &(0x7f0000b28000)=0x3c) write$cgroup_type(0xffffffffffffffff, &(0x7f00000002c0)='threaded\x00', 0x9) syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x0, 0x802) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000fb9000)) fcntl$setsig(r2, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r3}], 0x1, 0xfffffffffffffff8) read$eventfd(0xffffffffffffffff, &(0x7f0000000040), 0x8) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)) r4 = dup2(r2, r3) fcntl$setown(r4, 0x8, r1) ptrace$cont(0xffffffffffffffff, r1, 0x0, 0x8) tkill(r1, 0x16) r5 = gettid() process_vm_readv(r5, &(0x7f0000001880)=[{&(0x7f0000000680)=""/198, 0xc6}, {&(0x7f0000000780)=""/247, 0xf7}, {&(0x7f0000000380)=""/12, 0xc}, {&(0x7f00000003c0)=""/6, 0x6}, {&(0x7f0000000400)=""/14, 0xe}], 0x5, &(0x7f00000019c0)=[{&(0x7f0000001900)=""/41, 0x29}, {&(0x7f0000001940)=""/112, 0x70}], 0x2, 0x0) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f0000000240)={{{@in6}}, {{@in=@local}, 0x0, @in=@local}}, &(0x7f0000000100)=0xe8) 2018/03/29 11:11:54 executing program 2 (fault-call:21 fault-nth:5): r0 = syz_open_procfs(0x0, &(0x7f00000004c0)='oom_score_adj\x00') perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x49, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(r0, 0x0, 0x83, &(0x7f0000001800)={'nat\x00', 0x0, 0x3, 0x1000, [], 0x2, &(0x7f0000001280)=[{}, {}], &(0x7f0000002040)=""/4096}, &(0x7f00000013c0)=0x78) ioprio_get$pid(0x0, 0x0) timer_create(0x0, &(0x7f0000cd0000), &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00004b1fe0)={{0x0, 0x1c9c380}, {0x0, 0x9}}, &(0x7f0000040000)) r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x7fff) truncate(&(0x7f0000001180)='./bus\x00', 0x4) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000f40000)='/dev/ptmx\x00', 0x200000000101002, 0x0) sendfile(r2, 0xffffffffffffffff, &(0x7f00000010c0), 0x10000065) sendfile(r0, r1, &(0x7f0000000000), 0x4) tkill(0x0, 0x0) r3 = memfd_create(&(0x7f0000000000)='\x00', 0x1) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000001200)) recvmsg(0xffffffffffffff9c, &(0x7f0000001500)={&(0x7f00000012c0)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @remote}}}, 0x80, &(0x7f0000001400)=[{&(0x7f0000001340)=""/103, 0x67}], 0x1, &(0x7f0000001440)=""/155, 0x9b}, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000001540)) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000001640)={0x1ff, {0x2, 0x4e21}, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, {0x2, 0x0, @multicast2=0xe0000002}, 0x0, 0x9, 0x2, 0x6, 0x0, &(0x7f0000001240)='teql0\x00', 0x0, 0x80}) inotify_rm_watch(0xffffffffffffffff, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000140), &(0x7f0000000100)=0xffffffa4) getgroups(0x1, &(0x7f0000001600)=[0x0]) syz_fuseblk_mount(&(0x7f0000001740)='./file0\x00', &(0x7f0000001780)='./file0\x00', 0x0, 0x0, 0xffffffffffffffff, 0x3ff, 0x1, 0x0) getpgrp(0xffffffffffffffff) getegid() sendmmsg$unix(r3, &(0x7f0000001880), 0x0, 0x0) setsockopt$netrom_NETROM_T4(0xffffffffffffffff, 0x103, 0x6, &(0x7f00000017c0), 0xfffffffffffffc77) readv(0xffffffffffffffff, &(0x7f000004ffe0), 0x0) 2018/03/29 11:11:54 executing program 5: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) mkdir(&(0x7f0000000000)='./file1\x00', 0x0) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000811ffa)='bdev\x00', 0x0, &(0x7f0000444000)) mount(&(0x7f0000fb6000)='./file0\x00', &(0x7f0000d78000)='.', &(0x7f0000fdb000)='ubifs\x00', 0x1003, 0x0) mount(&(0x7f00002b9ff8)='./file0\x00', &(0x7f0000cbeff8)='./file0\x00', &(0x7f00005f7ffa)='ramfs\x00', 0x80000, &(0x7f000002f000)) mount(&(0x7f0000000040)='.', &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0)='binfmt_misc\x00', 0x0, &(0x7f0000000100)) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) mount(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./file1\x00', &(0x7f0000000200)='anon_inodefs\x00', 0x2000, &(0x7f0000000240)) r0 = syz_open_dev$sndmidi(&(0x7f0000000140)='/dev/snd/midiC#D#\x00', 0x0, 0x40000) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000240)={&(0x7f0000000100)='./file0\x00', r0}, 0x10) mount(&(0x7f0000adcff8)='./file0\x00', &(0x7f0000e08fff)='.', &(0x7f00005e9000)='cifs\x00', 0x2000, &(0x7f0000ad5000)) 2018/03/29 11:11:54 executing program 3: io_setup(0x3, &(0x7f0000000000)=0x0) accept$unix(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000100)=0x6e) r1 = syz_open_dev$usbmon(&(0x7f0000000200)='/dev/usbmon#\x00', 0x7ff, 0x0) io_cancel(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0xf, 0x0, 0xffffffffffffffff, &(0x7f0000000140)="940c1f2149747e7734510c34c143183667a187dc4f624f6c2de12452792a6fb529e6bf2a661dc23a844b00925c244a9f2967c0ca9868ee50eacf67a2ad7681d82f5a38cbd6d7641f843fa129e00f701fb01835f497b53672b3e5a3f6838f28aa240bf21eb5e5cbe7804fd307404474ae0242f8dea7a08e0fe9479b06f2795f857f8eec271d35ba7f61a91c87296814189cc1dfc9c659cc5437452a0bd178323c50e8c005ba7fa9519b27965c9f6ffbc7dcaa8e658616cc83188fb131a703222d", 0xc0, 0x5, 0x0, 0x1, r1}, &(0x7f0000000280)) io_getevents(r0, 0x2, 0x8f, &(0x7f0000d83f60)=[{}, {}], &(0x7f00005cfff0)={0x4000000000001, 0x7}) io_getevents(r0, 0x0, 0x5, &(0x7f00000002c0)=[{}, {}, {}, {}, {}], &(0x7f00000003c0)) io_setup(0x7, &(0x7f0000000040)) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/route\x00') ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000440)=0x0) perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x4a, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ef4}, r3, 0x0, r1, 0x1) pread64(r2, &(0x7f0000000000)=""/85, 0xfe42, 0x5d) r4 = memfd_create(&(0x7f0000000240)=':+lo#\x00', 0x0) fdatasync(r4) io_submit(r0, 0x1, &(0x7f0000001280)=[&(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f0000000100)}]) timerfd_create(0x7, 0x80800) io_destroy(r0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000480)='/dev/rfkill\x00', 0x40200, 0x0) setsockopt$llc_int(r1, 0x10c, 0x9, &(0x7f0000000380)=0x3, 0x4) 2018/03/29 11:11:54 executing program 7: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='uid_map\x00') getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000480)=@assoc_value={0x0}, &(0x7f00000004c0)=0x8) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000500)={r1, 0x8}, &(0x7f0000000540)=0x8) io_setup(0x3, &(0x7f0000000000)=0x0) accept$unix(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000100)=0x6e) syz_open_dev$usbmon(&(0x7f0000000200)='/dev/usbmon#\x00', 0x7ff, 0x0) io_cancel(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0xf, 0x3, 0xffffffffffffffff, &(0x7f0000000140)="940c1f2149747e7734510c34c143183667a187dc4f624f6c2de12452792a6fb529e6bf2a661dc23a844b00925c244a9f2967c0ca9868ee50eacf67a2ad7681d82f5a38cbd6d7641f843fa129e00f701fb01835f497b53672b3e5a3f6838f28aa240bf21eb5e5cbe7804fd307404474ae0242f8dea7a08e0fe9479b06f2795f857f8eec271d35ba7f61a91c87296814189cc1dfc9c659cc5437452a0bd178323c50e8c005ba7fa9519b27965c9f6ffbc7dcaa8e658616cc83188fb131a703222d", 0xc0, 0x5, 0x0, 0x1}, &(0x7f0000000280)) io_getevents(r2, 0x2, 0x8f, &(0x7f0000d83f60)=[{}, {}], &(0x7f00005cfff0)={0x4000000000001, 0x7}) io_getevents(r2, 0x0, 0x5, &(0x7f00000002c0)=[{}, {}, {}, {}, {}], &(0x7f00000003c0)) io_setup(0x7, &(0x7f0000000040)) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/route\x00') perf_event_open(&(0x7f0000aaa000)={0x0, 0x70, 0x4a, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ef4}, 0x0, 0x0, 0xffffffffffffffff, 0x1) pread64(r3, &(0x7f0000000000)=""/85, 0xfe42, 0x5d) r4 = memfd_create(&(0x7f0000000240)=':+lo#\x00', 0x0) fdatasync(r4) io_submit(r2, 0x1, &(0x7f0000001280)=[&(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f0000000100)}]) timerfd_create(0x7, 0x80800) bpf$OBJ_GET_PROG(0x7, &(0x7f00000005c0)={&(0x7f0000000580)='./file0\x00', 0x0, 0x8}, 0x10) io_destroy(r2) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x9, &(0x7f0000000380)=0x3, 0x4) 2018/03/29 11:11:54 executing program 1: io_setup(0x3, &(0x7f0000000000)=0x0) accept$unix(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000100)=0x6e) r1 = syz_open_dev$usbmon(&(0x7f0000000200)='/dev/usbmon#\x00', 0x0, 0x0) io_cancel(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0xf, 0x3, 0xffffffffffffffff, &(0x7f0000000140)="940c1f2149747e7734510c34c143183667a187dc4f624f6c2de12452792a6fb529e6bf2a661dc23a844b00925c244a9f2967c0ca9868ee50eacf67a2ad7681d82f5a38cbd6d7641f843fa129e00f701fb01835f497b53672b3e5a3f6838f28aa240bf21eb5e5cbe7804fd307404474ae0242f8dea7a08e0fe9479b06f2795f857f8eec271d35ba7f61a91c87296814189cc1dfc9c659cc5437452a0bd178323c50e8c005ba7fa9519b27965c9f6ffbc7dcaa8e658616cc83188fb131a703222d", 0xc0, 0x5, 0x0, 0x1}, &(0x7f0000000280)) io_getevents(r0, 0x2, 0x8f, &(0x7f0000d83f60)=[{}, {}], &(0x7f00005cfff0)={0x4000000000001, 0x7}) io_getevents(r0, 0x0, 0x5, &(0x7f00000002c0)=[{}, {}, {}, {}, {}], &(0x7f00000003c0)) io_setup(0x7, &(0x7f0000000040)) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/route\x00') ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000440)=0x0) perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x4a, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ef4}, r3, 0x0, 0xffffffffffffffff, 0x0) pread64(r2, &(0x7f0000000000)=""/85, 0xfe42, 0x5d) r4 = memfd_create(&(0x7f0000000240)=':+lo#\x00', 0x0) fdatasync(r4) io_submit(r0, 0x1, &(0x7f0000001280)=[&(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f0000000100)}]) timerfd_create(0x7, 0x80800) io_destroy(r0) setsockopt$llc_int(r1, 0x10c, 0x9, &(0x7f0000000380)=0x3, 0x4) 2018/03/29 11:11:54 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) readv(r0, &(0x7f0000001480)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x3}) r1 = syz_open_pts(r0, 0x2) r2 = dup3(r1, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f00000014c0)="26941c8d40aef90c6b96d3c552def582c7b832a60329d60875aa2beb5f0e54bd7ce8339d699e76d1169e4b6223d9bb54f34f3d336850be3b", 0x38) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0) preadv(r3, &(0x7f00000004c0)=[{&(0x7f0000000480)=""/21, 0x15}], 0x1, 0x0) fchdir(0xffffffffffffffff) mkdir(&(0x7f0000000280)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f", 0xfffffffffffffffc) fchmod(r2, 0x0) splice(r3, &(0x7f0000000400), 0xffffffffffffffff, &(0x7f0000000440), 0x9, 0x2) lstat(&(0x7f0000001500)='./file1\x00', &(0x7f0000001540)) rename(&(0x7f0000001e00)='./file0\x00', &(0x7f0000000100)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f") mkdir(&(0x7f000000e000)='./control\x00', 0x0) r4 = open(&(0x7f0000000000)='./control\x00', 0x0, 0x0) renameat2(r4, &(0x7f0000000040)='./file0\x00', r4, &(0x7f0000000080)='./control\x00', 0x2) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000300)={0x0, 0x80}, &(0x7f0000000340)=0x8) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000380)={r5, 0x5}, &(0x7f00000003c0)=0x8) mknodat(r4, &(0x7f000003f000)='./control\x00', 0x0, 0x0) getsockname$packet(r2, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000001640)=0x14) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000001680)={'syz_tun\x00', r6}) symlink(&(0x7f0000000180)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f", &(0x7f00000000c0)='./file0\x00') getsockopt$IPT_SO_GET_REVISION_MATCH(r2, 0x0, 0x42, &(0x7f0000000200)={'ah\x00'}, &(0x7f0000000240)=0x1e) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(r4, &(0x7f0000010000)='./control\x00', &(0x7f000003f000), &(0x7f0000001fe8), 0x0) 2018/03/29 11:11:54 executing program 0: r0 = perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x4a, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffff9c, 0xc00caee0, &(0x7f0000000180)={0x0, r0, 0x1}) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) fcntl$getownex(r0, 0x10, &(0x7f0000000400)={0x0, 0x0}) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0xffff, 0xe3, 0x6, 0x4, 0x0, 0x7, 0x0, 0x2, 0x10001, 0x1, 0x7, 0x8, 0x100, 0x4, 0x0, 0x7f, 0x20, 0x0, 0x4, 0x5, 0x90a4, 0x7, 0x2, 0x73, 0x8, 0x7, 0x4, 0x7e0, 0x101, 0x0, 0x2, 0x309, 0x0, 0x9, 0xfffffffffffffff9, 0x9, 0x0, 0x0, 0x0, @perf_config_ext={0x20, 0x1}, 0x8140, 0x2, 0x0, 0x4, 0xca1, 0xb5}, r4, 0x4, r1, 0x8) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) futimesat(r1, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0)={{r2, r3/1000+10000}, {r5, r6/1000+10000}}) unshare(0x8000000) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0xdc, 0x40}, 0x341) r8 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8910, &(0x7f0000000080)=@buf={0x0, &(0x7f0000000000)}) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x13, &(0x7f0000000ffc), 0x4) mq_open(&(0x7f00000000c0)='syzkaller0\x00', 0x40, 0x8, &(0x7f0000000100)={0x5, 0x80000000, 0x0, 0xfffffffffffffff9, 0x1, 0xfffffffffffffffd, 0x7fff, 0x200}) socket$inet_tcp(0x2, 0x1, 0x0) r9 = dup3(r8, r7, 0x80000) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r9, 0x84, 0x66, &(0x7f00000002c0)={0x0, 0x8ed6}, &(0x7f0000000300)=0x1) bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) shmget(0xffffffffffffffff, 0x8000, 0x49b, &(0x7f0000ff8000/0x8000)=nil) ioctl$sock_inet_SIOCGIFPFLAGS(r8, 0x8935, &(0x7f0000000080)={'syzkaller0\x00'}) ppoll(&(0x7f0000000780)=[{r1, 0x300}, {r1, 0x8401}], 0x2, &(0x7f00000007c0)={0x77359400}, &(0x7f0000000800)={0x9}, 0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000280)={0x0, 0x0, 0x9}, 0x10) r10 = semget$private(0x0, 0x4, 0x0) semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0x0, 0x1000}], 0x1, &(0x7f0000000080)={0x0, 0x1c9c380}) semctl$IPC_RMID(r10, 0x0, 0x0) [ 314.493751] FAULT_INJECTION: forcing a failure. [ 314.493751] name failslab, interval 1, probability 0, space 0, times 0 [ 314.505296] CPU: 1 PID: 8165 Comm: syz-executor2 Not tainted 4.16.0-rc7+ #5 [ 314.512395] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 314.521727] Call Trace: [ 314.524299] dump_stack+0x194/0x24d [ 314.527905] ? arch_local_irq_restore+0x53/0x53 [ 314.532553] ? print_irqtrace_events+0x270/0x270 [ 314.537301] should_fail+0x8c0/0xa40 [ 314.540993] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 314.546082] ? mark_held_locks+0xaf/0x100 [ 314.550208] ? retint_kernel+0x10/0x10 [ 314.554077] ? find_held_lock+0x35/0x1d0 [ 314.558119] ? __lock_is_held+0xb6/0x140 [ 314.562171] ? check_same_owner+0x320/0x320 [ 314.566469] ? __d_lookup+0x4f4/0x830 [ 314.570246] ? rcu_note_context_switch+0x710/0x710 [ 314.575162] should_failslab+0xec/0x120 [ 314.579114] kmem_cache_alloc+0x47/0x760 [ 314.583160] __d_alloc+0xc1/0xbd0 [ 314.586591] ? shrink_dcache_for_umount+0x290/0x290 [ 314.591584] ? d_alloc_parallel+0x1b40/0x1b40 [ 314.596057] ? lock_release+0xa40/0xa40 [ 314.600016] ? mark_held_locks+0xaf/0x100 [ 314.604142] ? d_lookup+0x133/0x2e0 [ 314.607752] ? d_lookup+0x1d5/0x2e0 [ 314.611353] ? rcu_note_context_switch+0x710/0x710 [ 314.616260] d_alloc+0x8e/0x340 [ 314.619514] ? __d_alloc+0xbd0/0xbd0 [ 314.623203] ? down_write_nested+0x8b/0x120 [ 314.627506] __lookup_hash+0x58/0x190 [ 314.631287] filename_create+0x1c7/0x520 [ 314.635325] ? kern_path_mountpoint+0x40/0x40 [ 314.639795] ? putname+0xee/0x130 [ 314.643230] ? getname_flags+0x256/0x580 [ 314.647263] ? putname+0xf3/0x130 [ 314.650695] SyS_mknodat+0x18d/0x480 [ 314.654392] ? do_file_open_root+0x4d0/0x4d0 [ 314.658774] ? __might_fault+0x188/0x1d0 [ 314.662811] ? do_syscall_64+0xb7/0x940 [ 314.666765] ? do_file_open_root+0x4d0/0x4d0 [ 314.671149] do_syscall_64+0x281/0x940 [ 314.675011] ? __do_page_fault+0xc90/0xc90 [ 314.679222] ? _raw_spin_unlock_irq+0x27/0x70 [ 314.683693] ? finish_task_switch+0x1c1/0x7e0 [ 314.688165] ? syscall_return_slowpath+0x550/0x550 [ 314.693070] ? syscall_return_slowpath+0x2ac/0x550 [ 314.697975] ? prepare_exit_to_usermode+0x350/0x350 [ 314.702970] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 314.708316] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 314.713141] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 314.718304] RIP: 0033:0x4548b9 [ 314.721468] RSP: 002b:00007f032fc57b08 EFLAGS: 00000246 ORIG_RAX: 0000000000000103 [ 314.729151] RAX: ffffffffffffffda RBX: 0000000000000019 RCX: 00000000004548b9 [ 314.736396] RDX: 0000000000006000 RSI: 0000000020001780 RDI: 00000000ffffff9c 2018/03/29 11:11:55 executing program 5: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) mkdir(&(0x7f0000000000)='./file1\x00', 0x0) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000811ffa)='bdev\x00', 0x0, &(0x7f0000444000)) mount(&(0x7f00002b9ff8)='./file0\x00', &(0x7f0000cbeff8)='./file0\x00', &(0x7f00005f7ffa)='ramfs\x00', 0x80000, &(0x7f000002f000)) mount(&(0x7f0000000040)='.', &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0)='binfmt_misc\x00', 0x0, &(0x7f0000000100)) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) mount(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./file1\x00', &(0x7f0000000200)='anon_inodefs\x00', 0x2000, &(0x7f0000000240)) mount(&(0x7f0000adcff8)='./file0\x00', &(0x7f0000e08fff)='.', &(0x7f00005e9000)='cifs\x00', 0x2000, &(0x7f0000ad5000)) 2018/03/29 11:11:55 executing program 2 (fault-call:21 fault-nth:6): r0 = syz_open_procfs(0x0, &(0x7f00000004c0)='oom_score_adj\x00') perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x49, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(r0, 0x0, 0x83, &(0x7f0000001800)={'nat\x00', 0x0, 0x3, 0x1000, [], 0x2, &(0x7f0000001280)=[{}, {}], &(0x7f0000002040)=""/4096}, &(0x7f00000013c0)=0x78) ioprio_get$pid(0x0, 0x0) timer_create(0x0, &(0x7f0000cd0000), &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00004b1fe0)={{0x0, 0x1c9c380}, {0x0, 0x9}}, &(0x7f0000040000)) r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x7fff) truncate(&(0x7f0000001180)='./bus\x00', 0x4) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000f40000)='/dev/ptmx\x00', 0x200000000101002, 0x0) sendfile(r2, 0xffffffffffffffff, &(0x7f00000010c0), 0x10000065) sendfile(r0, r1, &(0x7f0000000000), 0x4) tkill(0x0, 0x0) r3 = memfd_create(&(0x7f0000000000)='\x00', 0x1) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000001200)) recvmsg(0xffffffffffffff9c, &(0x7f0000001500)={&(0x7f00000012c0)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @remote}}}, 0x80, &(0x7f0000001400)=[{&(0x7f0000001340)=""/103, 0x67}], 0x1, &(0x7f0000001440)=""/155, 0x9b}, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000001540)) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000001640)={0x1ff, {0x2, 0x4e21}, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, {0x2, 0x0, @multicast2=0xe0000002}, 0x0, 0x9, 0x2, 0x6, 0x0, &(0x7f0000001240)='teql0\x00', 0x0, 0x80}) inotify_rm_watch(0xffffffffffffffff, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000140), &(0x7f0000000100)=0xffffffa4) getgroups(0x1, &(0x7f0000001600)=[0x0]) syz_fuseblk_mount(&(0x7f0000001740)='./file0\x00', &(0x7f0000001780)='./file0\x00', 0x0, 0x0, 0xffffffffffffffff, 0x3ff, 0x1, 0x0) getpgrp(0xffffffffffffffff) getegid() sendmmsg$unix(r3, &(0x7f0000001880), 0x0, 0x0) setsockopt$netrom_NETROM_T4(0xffffffffffffffff, 0x103, 0x6, &(0x7f00000017c0), 0xfffffffffffffc77) readv(0xffffffffffffffff, &(0x7f000004ffe0), 0x0) [ 314.743636] RBP: 0000000020001780 R08: 00000000000003ff R09: 0000000000000000 [ 314.750880] R10: 00000000000007c7 R11: 0000000000000246 R12: 0000000000000000 [ 314.758123] R13: 00000000000003ff R14: 0000000000000000 R15: ffffffffffffffff 2018/03/29 11:11:55 executing program 1: io_setup(0x3, &(0x7f0000000000)=0x0) accept$unix(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000100)=0x6e) r1 = syz_open_dev$usbmon(&(0x7f0000000200)='/dev/usbmon#\x00', 0x0, 0x0) io_cancel(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0xf, 0x3, 0xffffffffffffffff, &(0x7f0000000140)="940c1f2149747e7734510c34c143183667a187dc4f624f6c2de12452792a6fb529e6bf2a661dc23a844b00925c244a9f2967c0ca9868ee50eacf67a2ad7681d82f5a38cbd6d7641f843fa129e00f701fb01835f497b53672b3e5a3f6838f28aa240bf21eb5e5cbe7804fd307404474ae0242f8dea7a08e0fe9479b06f2795f857f8eec271d35ba7f61a91c87296814189cc1dfc9c659cc5437452a0bd178323c50e8c005ba7fa9519b27965c9f6ffbc7dcaa8e658616cc83188fb131a703222d", 0xc0, 0x5, 0x0, 0x1}, &(0x7f0000000280)) io_getevents(r0, 0x2, 0x8f, &(0x7f0000d83f60)=[{}, {}], &(0x7f00005cfff0)={0x4000000000001, 0x7}) io_getevents(r0, 0x0, 0x5, &(0x7f00000002c0)=[{}, {}, {}, {}, {}], &(0x7f00000003c0)) io_setup(0x7, &(0x7f0000000040)) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/route\x00') ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000440)=0x0) perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x4a, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ef4}, r3, 0x0, 0xffffffffffffffff, 0x0) pread64(r2, &(0x7f0000000000)=""/85, 0xfe42, 0x5d) r4 = memfd_create(&(0x7f0000000240)=':+lo#\x00', 0x0) fdatasync(r4) io_submit(r0, 0x1, &(0x7f0000001280)=[&(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f0000000100)}]) timerfd_create(0x7, 0x80800) io_destroy(r0) setsockopt$llc_int(r1, 0x10c, 0x9, &(0x7f0000000380)=0x3, 0x4) 2018/03/29 11:11:55 executing program 3: io_setup(0x3, &(0x7f0000000000)=0x0) accept$unix(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000100)=0x6e) r1 = syz_open_dev$usbmon(&(0x7f0000000200)='/dev/usbmon#\x00', 0x7ff, 0x0) io_cancel(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0xf, 0x0, 0xffffffffffffffff, &(0x7f0000000140)="940c1f2149747e7734510c34c143183667a187dc4f624f6c2de12452792a6fb529e6bf2a661dc23a844b00925c244a9f2967c0ca9868ee50eacf67a2ad7681d82f5a38cbd6d7641f843fa129e00f701fb01835f497b53672b3e5a3f6838f28aa240bf21eb5e5cbe7804fd307404474ae0242f8dea7a08e0fe9479b06f2795f857f8eec271d35ba7f61a91c87296814189cc1dfc9c659cc5437452a0bd178323c50e8c005ba7fa9519b27965c9f6ffbc7dcaa8e658616cc83188fb131a703222d", 0xc0, 0x5, 0x0, 0x1, r1}, &(0x7f0000000280)) io_getevents(r0, 0x2, 0x8f, &(0x7f0000d83f60)=[{}, {}], &(0x7f00005cfff0)={0x4000000000001, 0x7}) io_getevents(r0, 0x4, 0x5, &(0x7f00000002c0)=[{}, {}, {}, {}, {}], &(0x7f0000000480)) io_setup(0x7, &(0x7f0000000040)) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/route\x00') ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000440)=0x0) perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x4a, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ef4}, r3, 0x0, r1, 0x1) pread64(r2, &(0x7f0000000000)=""/85, 0xfe42, 0x5d) r4 = memfd_create(&(0x7f0000000240)=':+lo#\x00', 0x0) fdatasync(r4) io_submit(r0, 0x1, &(0x7f0000001280)=[&(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f0000000100)}]) timerfd_create(0x7, 0x80800) io_destroy(r0) setsockopt$llc_int(r1, 0x10c, 0x9, &(0x7f0000000380)=0x3, 0x4) 2018/03/29 11:11:55 executing program 7: io_setup(0x3, &(0x7f0000000000)=0x0) r1 = accept$unix(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000100)=0x6e) r2 = syz_open_dev$usbmon(&(0x7f0000000200)='/dev/usbmon#\x00', 0x7ff, 0x0) io_cancel(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0xf, 0x3, 0xffffffffffffffff, &(0x7f0000000140)="940c1f2149747e7734510c34c143183667a187dc4f624f6c2de12452792a6fb529e6bf2a661dc23a844b00925c244a9f2967c0ca9868ee50eacf67a2ad7681d82f5a38cbd6d7641f843fa129e00f701fb01835f497b53672b3e5a3f6838f28aa240bf21eb5e5cbe7804fd307404474ae0242f8dea7a08e0fe9479b06f2795f857f8eec271d35ba7f61a91c87296814189cc1dfc9c659cc5437452a0bd178323c50e8c005ba7fa9519b27965c9f6ffbc7dcaa8e658616cc83188fb131a703222d", 0xc0, 0x5, 0x0, 0x1}, &(0x7f0000000280)) setsockopt$inet_sctp6_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f0000000480)={0x6, 0xb8, 0x4}, 0x8) io_getevents(r0, 0x2, 0x8f, &(0x7f0000d83f60)=[{}, {}], &(0x7f00005cfff0)={0x4000000000001, 0x7}) io_getevents(r0, 0x0, 0x5, &(0x7f00000002c0)=[{}, {}, {}, {}, {}], &(0x7f00000003c0)) io_setup(0x7, &(0x7f0000000040)) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000500)) r3 = getpid() r4 = syz_open_procfs(r3, &(0x7f0000000540)='mountinfo\x00') ioctl$TIOCGPGRP(r4, 0x540f, &(0x7f0000000440)=0x0) perf_event_open(&(0x7f0000aaa000)={0x0, 0x70, 0x4a, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ef4}, r5, 0x0, 0xffffffffffffffff, 0x1) pread64(r4, &(0x7f0000000000)=""/85, 0xfe42, 0x5d) r6 = memfd_create(&(0x7f0000000240)=':+lo#\x00', 0x0) fdatasync(r6) io_submit(r0, 0x1, &(0x7f0000001280)=[&(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, 0x0, r6, &(0x7f0000000100)}]) timerfd_create(0x7, 0x80800) io_destroy(r0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x9, &(0x7f0000000380)=0x3, 0x4) io_setup(0x8, &(0x7f00000004c0)) [ 314.813522] FAULT_INJECTION: forcing a failure. [ 314.813522] name failslab, interval 1, probability 0, space 0, times 0 [ 314.824846] CPU: 0 PID: 8188 Comm: syz-executor2 Not tainted 4.16.0-rc7+ #5 [ 314.831937] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 314.841281] Call Trace: [ 314.843867] dump_stack+0x194/0x24d [ 314.847505] ? arch_local_irq_restore+0x53/0x53 [ 314.852165] ? print_irqtrace_events+0x270/0x270 [ 314.856909] should_fail+0x8c0/0xa40 [ 314.860601] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 314.865680] ? print_irqtrace_events+0x270/0x270 [ 314.870416] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 314.875580] ? trace_hardirqs_off+0x10/0x10 [ 314.879888] ? __lock_is_held+0xb6/0x140 [ 314.883942] ? check_same_owner+0x320/0x320 [ 314.888240] ? rcu_note_context_switch+0x710/0x710 [ 314.893152] should_failslab+0xec/0x120 [ 314.897206] kmem_cache_alloc+0x47/0x760 [ 314.901244] ? __lock_acquire+0x664/0x3e00 [ 314.905458] ext4_alloc_inode+0xc1/0x7e0 [ 314.909492] ? ext4_drop_inode+0x390/0x390 [ 314.913701] ? find_held_lock+0x35/0x1d0 [ 314.917748] ? get_cached_acl+0x295/0x3b0 [ 314.921871] ? lock_downgrade+0x980/0x980 [ 314.925996] ? lock_release+0xa40/0xa40 [ 314.929952] ? __lock_is_held+0xb6/0x140 [ 314.933990] ? trace_hardirqs_off+0x10/0x10 [ 314.938297] ? ext4_drop_inode+0x390/0x390 [ 314.942509] alloc_inode+0x65/0x180 [ 314.946108] new_inode_pseudo+0x69/0x190 [ 314.950142] ? prune_icache_sb+0x1a0/0x1a0 [ 314.954362] new_inode+0x1c/0x40 [ 314.957707] __ext4_new_inode+0x3a0/0x4e80 [ 314.961912] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 314.967073] ? rcutorture_record_progress+0x10/0x10 [ 314.972075] ? kernel_text_address+0x102/0x140 [ 314.976640] ? ext4_free_inode+0x1740/0x1740 [ 314.981041] ? save_stack+0xa3/0xd0 [ 314.984641] ? save_stack+0x43/0xd0 [ 314.988237] ? __kasan_slab_free+0x11a/0x170 [ 314.992616] ? kasan_slab_free+0xe/0x10 [ 314.996562] ? kmem_cache_free+0x83/0x2a0 [ 315.000682] ? putname+0xee/0x130 [ 315.004110] ? filename_create+0x245/0x520 [ 315.008316] ? SyS_mknodat+0x18d/0x480 [ 315.012177] ? do_syscall_64+0x281/0x940 [ 315.016211] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 315.021548] ? trace_hardirqs_off+0x10/0x10 [ 315.025845] ? debug_check_no_obj_freed+0x3da/0xf1f [ 315.030838] ? d_alloc+0x269/0x340 [ 315.034355] ? print_irqtrace_events+0x270/0x270 [ 315.039087] ? find_held_lock+0x35/0x1d0 [ 315.043124] ? __dquot_initialize+0x2d2/0xb70 [ 315.047604] ? dquot_get_next_dqblk+0x160/0x160 [ 315.052254] ? match_exception+0x360/0x360 [ 315.056466] ? __lock_is_held+0xb6/0x140 [ 315.060508] ext4_mknod+0x239/0x570 [ 315.064121] ? ext4_add_nondir+0x90/0x90 [ 315.068166] ? security_inode_mknod+0xd9/0x110 [ 315.072727] vfs_mknod+0x34f/0x6a0 [ 315.076247] SyS_mknodat+0x2bc/0x480 [ 315.079942] ? do_file_open_root+0x4d0/0x4d0 [ 315.084320] ? __might_fault+0x188/0x1d0 [ 315.088357] ? do_syscall_64+0xb7/0x940 [ 315.092307] ? do_file_open_root+0x4d0/0x4d0 [ 315.096690] do_syscall_64+0x281/0x940 [ 315.100549] ? __do_page_fault+0xc90/0xc90 [ 315.104755] ? _raw_spin_unlock_irq+0x27/0x70 [ 315.109224] ? finish_task_switch+0x1c1/0x7e0 [ 315.113692] ? syscall_return_slowpath+0x550/0x550 [ 315.118598] ? syscall_return_slowpath+0x2ac/0x550 [ 315.123499] ? prepare_exit_to_usermode+0x350/0x350 [ 315.128489] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 315.133830] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 315.138655] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 315.143819] RIP: 0033:0x4548b9 [ 315.146981] RSP: 002b:00007f032fc57b08 EFLAGS: 00000246 ORIG_RAX: 0000000000000103 [ 315.154662] RAX: ffffffffffffffda RBX: 0000000000000019 RCX: 00000000004548b9 2018/03/29 11:11:55 executing program 2 (fault-call:21 fault-nth:7): r0 = syz_open_procfs(0x0, &(0x7f00000004c0)='oom_score_adj\x00') perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x49, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(r0, 0x0, 0x83, &(0x7f0000001800)={'nat\x00', 0x0, 0x3, 0x1000, [], 0x2, &(0x7f0000001280)=[{}, {}], &(0x7f0000002040)=""/4096}, &(0x7f00000013c0)=0x78) ioprio_get$pid(0x0, 0x0) timer_create(0x0, &(0x7f0000cd0000), &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00004b1fe0)={{0x0, 0x1c9c380}, {0x0, 0x9}}, &(0x7f0000040000)) r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x7fff) truncate(&(0x7f0000001180)='./bus\x00', 0x4) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000f40000)='/dev/ptmx\x00', 0x200000000101002, 0x0) sendfile(r2, 0xffffffffffffffff, &(0x7f00000010c0), 0x10000065) sendfile(r0, r1, &(0x7f0000000000), 0x4) tkill(0x0, 0x0) r3 = memfd_create(&(0x7f0000000000)='\x00', 0x1) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000001200)) recvmsg(0xffffffffffffff9c, &(0x7f0000001500)={&(0x7f00000012c0)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @remote}}}, 0x80, &(0x7f0000001400)=[{&(0x7f0000001340)=""/103, 0x67}], 0x1, &(0x7f0000001440)=""/155, 0x9b}, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000001540)) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000001640)={0x1ff, {0x2, 0x4e21}, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, {0x2, 0x0, @multicast2=0xe0000002}, 0x0, 0x9, 0x2, 0x6, 0x0, &(0x7f0000001240)='teql0\x00', 0x0, 0x80}) inotify_rm_watch(0xffffffffffffffff, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000140), &(0x7f0000000100)=0xffffffa4) getgroups(0x1, &(0x7f0000001600)=[0x0]) syz_fuseblk_mount(&(0x7f0000001740)='./file0\x00', &(0x7f0000001780)='./file0\x00', 0x0, 0x0, 0xffffffffffffffff, 0x3ff, 0x1, 0x0) getpgrp(0xffffffffffffffff) getegid() sendmmsg$unix(r3, &(0x7f0000001880), 0x0, 0x0) setsockopt$netrom_NETROM_T4(0xffffffffffffffff, 0x103, 0x6, &(0x7f00000017c0), 0xfffffffffffffc77) readv(0xffffffffffffffff, &(0x7f000004ffe0), 0x0) [ 315.161903] RDX: 0000000000006000 RSI: 0000000020001780 RDI: 00000000ffffff9c [ 315.169144] RBP: 0000000020001780 R08: 00000000000003ff R09: 0000000000000000 [ 315.176389] R10: 00000000000007c7 R11: 0000000000000246 R12: 0000000000000000 [ 315.183630] R13: 00000000000003ff R14: 0000000000000000 R15: ffffffffffffffff [ 315.252401] FAULT_INJECTION: forcing a failure. [ 315.252401] name failslab, interval 1, probability 0, space 0, times 0 [ 315.263680] CPU: 1 PID: 8204 Comm: syz-executor2 Not tainted 4.16.0-rc7+ #5 [ 315.270772] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 315.280117] Call Trace: [ 315.282704] dump_stack+0x194/0x24d [ 315.286333] ? arch_local_irq_restore+0x53/0x53 [ 315.290990] ? __lock_is_held+0xb6/0x140 [ 315.295050] should_fail+0x8c0/0xa40 [ 315.298746] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 315.304261] ? rcu_note_context_switch+0x710/0x710 [ 315.309165] ? lock_release+0xa40/0xa40 [ 315.313125] ? __might_sleep+0x95/0x190 [ 315.317084] ? _cond_resched+0x14/0x30 [ 315.320954] ? __getblk_gfp+0xfc/0xb80 [ 315.324820] ? __raw_spin_lock_init+0x1c/0x100 [ 315.329396] ? __lock_is_held+0xb6/0x140 [ 315.333449] ? check_same_owner+0x320/0x320 [ 315.337744] ? trace_hardirqs_off+0x10/0x10 [ 315.342050] ? rcu_note_context_switch+0x710/0x710 [ 315.346966] ? __raw_spin_lock_init+0x1c/0x100 [ 315.351549] should_failslab+0xec/0x120 [ 315.355509] kmem_cache_alloc+0x47/0x760 [ 315.359549] ? __lock_is_held+0xb6/0x140 [ 315.363590] ? ext4_get_group_desc+0x1bd/0x2b0 [ 315.368154] jbd2__journal_start+0x1d3/0x9f0 [ 315.372539] ? jbd2_write_access_granted.part.9+0x3a0/0x3a0 [ 315.378224] ? rcu_note_context_switch+0x710/0x710 [ 315.383128] ? __lock_is_held+0xb6/0x140 [ 315.387174] ? __might_sleep+0x95/0x190 [ 315.391130] ? _cond_resched+0x14/0x30 [ 315.395004] __ext4_journal_start_sb+0x15f/0x550 [ 315.399742] ? __ext4_new_inode+0x1bae/0x4e80 [ 315.404223] ? ext4_journal_abort_handle.isra.5+0x2a0/0x2a0 [ 315.409911] ? find_next_zero_bit+0xe3/0x110 [ 315.414310] __ext4_new_inode+0x1bae/0x4e80 [ 315.418633] ? ext4_free_inode+0x1740/0x1740 [ 315.423044] ? save_stack+0xa3/0xd0 [ 315.426647] ? save_stack+0x43/0xd0 [ 315.430251] ? __kasan_slab_free+0x11a/0x170 [ 315.434630] ? kasan_slab_free+0xe/0x10 [ 315.438573] ? kmem_cache_free+0x83/0x2a0 [ 315.442697] ? putname+0xee/0x130 [ 315.446121] ? filename_create+0x245/0x520 [ 315.450326] ? SyS_mknodat+0x18d/0x480 [ 315.454186] ? do_syscall_64+0x281/0x940 [ 315.458220] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 315.463558] ? trace_hardirqs_off+0x10/0x10 [ 315.467856] ? debug_check_no_obj_freed+0x3da/0xf1f [ 315.472853] ? d_alloc+0x269/0x340 [ 315.476375] ? print_irqtrace_events+0x270/0x270 [ 315.481109] ? find_held_lock+0x35/0x1d0 [ 315.485143] ? __dquot_initialize+0x2d2/0xb70 [ 315.489620] ? dquot_get_next_dqblk+0x160/0x160 [ 315.494276] ? match_exception+0x360/0x360 [ 315.498497] ? __lock_is_held+0xb6/0x140 [ 315.502552] ext4_mknod+0x239/0x570 [ 315.506172] ? ext4_add_nondir+0x90/0x90 [ 315.510222] ? security_inode_mknod+0xd9/0x110 [ 315.514790] vfs_mknod+0x34f/0x6a0 [ 315.518309] SyS_mknodat+0x2bc/0x480 [ 315.522004] ? do_file_open_root+0x4d0/0x4d0 [ 315.526392] ? __might_fault+0x188/0x1d0 [ 315.530431] ? do_syscall_64+0xb7/0x940 [ 315.534381] ? do_file_open_root+0x4d0/0x4d0 [ 315.538783] do_syscall_64+0x281/0x940 [ 315.542648] ? __do_page_fault+0xc90/0xc90 [ 315.546856] ? _raw_spin_unlock_irq+0x27/0x70 [ 315.551328] ? finish_task_switch+0x1c1/0x7e0 [ 315.555800] ? syscall_return_slowpath+0x550/0x550 [ 315.560705] ? syscall_return_slowpath+0x2ac/0x550 [ 315.565611] ? prepare_exit_to_usermode+0x350/0x350 [ 315.570604] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 315.575950] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 315.580777] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 315.585940] RIP: 0033:0x4548b9 [ 315.589104] RSP: 002b:00007f032fc57b08 EFLAGS: 00000246 ORIG_RAX: 0000000000000103 [ 315.596784] RAX: ffffffffffffffda RBX: 0000000000000019 RCX: 00000000004548b9 [ 315.604045] RDX: 0000000000006000 RSI: 0000000020001780 RDI: 00000000ffffff9c [ 315.611289] RBP: 0000000020001780 R08: 00000000000003ff R09: 0000000000000000 [ 315.618533] R10: 00000000000007c7 R11: 0000000000000246 R12: 0000000000000000 [ 315.625781] R13: 00000000000003ff R14: 0000000000000000 R15: ffffffffffffffff [ 315.633378] EXT4-fs error (device sda1) in __ext4_new_inode:961: Out of memory 2018/03/29 11:11:56 executing program 0: r0 = perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x4a, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffff9c, 0xc00caee0, &(0x7f0000000180)={0x0, r0, 0x1}) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) fcntl$getownex(r0, 0x10, &(0x7f0000000400)={0x0, 0x0}) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0xffff, 0xe3, 0x6, 0x4, 0x0, 0x7, 0x0, 0x2, 0x10001, 0x1, 0x7, 0x8, 0x100, 0x4, 0x0, 0x7f, 0x20, 0x0, 0x4, 0x5, 0x90a4, 0x7, 0x2, 0x73, 0x8, 0x7, 0x4, 0x7e0, 0x101, 0x0, 0x2, 0x309, 0x0, 0x9, 0xfffffffffffffff9, 0x9, 0x0, 0x0, 0x0, @perf_config_ext={0x20, 0x1}, 0x8140, 0x2, 0x0, 0x4, 0xca1, 0xb5}, r4, 0x4, r1, 0x8) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) futimesat(r1, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0)={{r2, r3/1000+10000}, {r5, r6/1000+10000}}) unshare(0x8000000) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0xdc, 0x40}, 0x341) r8 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8910, &(0x7f0000000080)=@buf={0x0, &(0x7f0000000000)}) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x13, &(0x7f0000000ffc), 0x4) mq_open(&(0x7f00000000c0)='syzkaller0\x00', 0x40, 0x8, &(0x7f0000000100)={0x5, 0x80000000, 0x0, 0xfffffffffffffff9, 0x1, 0xfffffffffffffffd, 0x7fff, 0x200}) socket$inet_tcp(0x2, 0x1, 0x0) r9 = dup3(r8, r7, 0x80000) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r9, 0x84, 0x66, &(0x7f00000002c0)={0x0, 0x8ed6}, &(0x7f0000000300)=0x1) bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) shmget(0xffffffffffffffff, 0x8000, 0x49b, &(0x7f0000ff8000/0x8000)=nil) ioctl$sock_inet_SIOCGIFPFLAGS(r8, 0x8935, &(0x7f0000000080)={'syzkaller0\x00'}) ppoll(&(0x7f0000000780)=[{r1, 0x300}, {r1, 0x8401}], 0x2, &(0x7f00000007c0)={0x77359400}, &(0x7f0000000800)={0x9}, 0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000280)={0x0, 0x0, 0x9}, 0x10) r10 = semget$private(0x0, 0x4, 0x0) semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0x0, 0x1000}], 0x1, &(0x7f0000000080)={0x0, 0x1c9c380}) semctl$IPC_RMID(r10, 0x0, 0x0) 2018/03/29 11:11:56 executing program 5: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) mkdir(&(0x7f0000000000)='./file1\x00', 0x0) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000811ffa)='bdev\x00', 0x0, &(0x7f0000444000)) mount(&(0x7f0000fb6000)='./file0\x00', &(0x7f0000d78000)='.', &(0x7f0000fdb000)='ubifs\x00', 0x1003, 0x0) mount(&(0x7f00002b9ff8)='./file0\x00', &(0x7f0000cbeff8)='./file0\x00', &(0x7f00005f7ffa)='ramfs\x00', 0x80000, &(0x7f000002f000)) mount(&(0x7f0000000040)='.', &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0)='binfmt_misc\x00', 0x0, &(0x7f0000000100)) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) mount(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./file1\x00', &(0x7f0000000200)='anon_inodefs\x00', 0x2000, &(0x7f0000000240)) mount(&(0x7f0000adcff8)='./file0\x00', &(0x7f0000e08fff)='.', &(0x7f00005e9000)='cifs\x00', 0x2000, &(0x7f0000ad5000)) syz_open_dev$random(&(0x7f0000000100)='/dev/random\x00', 0x0, 0x400) 2018/03/29 11:11:56 executing program 6: openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x0, 0x0) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, &(0x7f0000000340)=0x1) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f000051cff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000943ffc)=0xa35) read(r0, &(0x7f00003fefff)=""/1, 0x1) r1 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000029000)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r0, &(0x7f0000dcdff0)=[{&(0x7f0000cd8000)=""/1, 0x1}], 0x1) ioctl$int_in(r2, 0x5452, &(0x7f0000b28000)=0x3c) write$cgroup_type(0xffffffffffffffff, &(0x7f00000002c0)='threaded\x00', 0x9) syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x0, 0x802) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000fb9000)) fcntl$setsig(0xffffffffffffffff, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r3}], 0x1, 0xfffffffffffffff8) read$eventfd(0xffffffffffffffff, &(0x7f0000000040), 0x8) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)) r4 = dup2(r2, r3) fcntl$setown(r4, 0x8, r1) ptrace$cont(0xffffffffffffffff, r1, 0x0, 0x8) tkill(r1, 0x16) r5 = gettid() process_vm_readv(r5, &(0x7f0000001880)=[{&(0x7f0000000680)=""/198, 0xc6}, {&(0x7f0000000780)=""/247, 0xf7}, {&(0x7f0000000380)=""/12, 0xc}, {&(0x7f00000003c0)=""/6, 0x6}, {&(0x7f0000000400)=""/14, 0xe}], 0x5, &(0x7f00000019c0)=[{&(0x7f0000001900)=""/41, 0x29}, {&(0x7f0000001940)=""/112, 0x70}], 0x2, 0x0) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f0000000240)={{{@in6}}, {{@in=@local}, 0x0, @in=@local}}, &(0x7f0000000100)=0xe8) 2018/03/29 11:11:56 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) readv(r0, &(0x7f0000001480)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x0, 0x0, 0x0, 0x80, 0x0, 0x3, 0x3}) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x3}) r1 = syz_open_pts(r0, 0x2) r2 = dup3(r1, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000c34fff), 0xffffff0b) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0) preadv(r3, &(0x7f00000004c0)=[{&(0x7f0000000480)=""/21, 0x15}], 0x1, 0x0) fchdir(0xffffffffffffffff) mkdir(&(0x7f0000000280)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f", 0xfffffffffffffffc) fchmod(r2, 0x0) splice(r3, &(0x7f0000000400), 0xffffffffffffffff, &(0x7f0000000440), 0x9, 0x2) rename(&(0x7f0000001e00)='./file0\x00', &(0x7f0000000100)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f") mkdir(&(0x7f000000e000)='./control\x00', 0x0) r4 = open(&(0x7f0000000000)='./control\x00', 0x0, 0x0) renameat2(r4, &(0x7f0000000040)='./file0\x00', r4, &(0x7f0000000080)='./control\x00', 0x2) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000300)={0x0, 0x80}, &(0x7f0000000340)=0x8) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000380)={r5, 0x5}, &(0x7f00000003c0)=0x8) mknodat(r4, &(0x7f000003f000)='./control\x00', 0x0, 0x0) symlink(&(0x7f0000000180)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f", &(0x7f00000000c0)='./file0\x00') getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000014c0)={{{@in6=@mcast2, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@mcast2}}, &(0x7f00000015c0)=0xe8) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000001600)={0x0, 0x0, 0x0}, &(0x7f0000001640)=0xc) syz_fuseblk_mount(&(0x7f0000000200)='./control\x00', &(0x7f0000000240)='./control\x00', 0xc000, r6, r7, 0xda5e, 0x80, 0x100002) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(r4, &(0x7f0000010000)='./control\x00', &(0x7f000003f000), &(0x7f0000001fe8), 0x0) 2018/03/29 11:11:56 executing program 7: io_setup(0x3, &(0x7f0000000000)=0x0) accept$unix(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000100)=0x6e) r1 = syz_open_dev$usbmon(&(0x7f0000000200)='/dev/usbmon#\x00', 0x7ff, 0x0) io_cancel(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0xf, 0x3, 0xffffffffffffffff, &(0x7f0000000140)="940c1f2149747e7734510c34c143183667a187dc4f624f6c2de12452792a6fb529e6bf2a661dc23a844b00925c244a9f2967c0ca9868ee50eacf67a2ad7681d82f5a38cbd6d7641f843fa129e00f701fb01835f497b53672b3e5a3f6838f28aa240bf21eb5e5cbe7804fd307404474ae0242f8dea7a08e0fe9479b06f2795f857f8eec271d35ba7f61a91c87296814189cc1dfc9c659cc5437452a0bd178323c50e8c005ba7fa9519b27965c9f6ffbc7dcaa8e658616cc83188fb131a703222d", 0xc0, 0x5, 0x0, 0x1}, &(0x7f0000000280)) io_getevents(r0, 0x2, 0x8f, &(0x7f0000d83f60)=[{}, {}], &(0x7f00005cfff0)={0x4000000000001, 0x7}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000580)={0x8, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x52, 0x0, &(0x7f0000000500)="419aa63c609a7ef75fe994e9086d5292554edfefe3de3ae1389ee25327eecabd505e034acee44fedb6c235ae39e69f581339a0fc8bb061c33d77d53ed17d0dd6df13f7e736a59c5d8aef3403ff15e5df80f5"}) io_getevents(r0, 0x0, 0x5, &(0x7f00000002c0)=[{}, {}, {}, {}, {}], &(0x7f00000003c0)) io_setup(0x7, &(0x7f00000004c0)) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/route\x00') ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000440)=0x0) perf_event_open(&(0x7f0000aaa000)={0x0, 0x70, 0x4a, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ef4}, r3, 0x0, 0xffffffffffffffff, 0x1) pread64(r2, &(0x7f0000000000)=""/85, 0xfe42, 0x5d) r4 = memfd_create(&(0x7f0000000240)=':+lo#\x00', 0x0) fdatasync(r4) io_submit(r0, 0x1, &(0x7f0000001280)=[&(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f0000000100)}]) timerfd_create(0x7, 0x80800) io_destroy(r0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x9, &(0x7f0000000380)=0x3, 0x4) 2018/03/29 11:11:56 executing program 3: io_setup(0x3, &(0x7f0000000000)=0x0) accept$unix(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000100)=0x6e) r1 = syz_open_dev$usbmon(&(0x7f0000000200)='/dev/usbmon#\x00', 0x7ff, 0x0) io_cancel(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0xf, 0x0, 0xffffffffffffffff, &(0x7f0000000140)="940c1f2149747e7734510c34c143183667a187dc4f624f6c2de12452792a6fb529e6bf2a661dc23a844b00925c244a9f2967c0ca9868ee50eacf67a2ad7681d82f5a38cbd6d7641f843fa129e00f701fb01835f497b53672b3e5a3f6838f28aa240bf21eb5e5cbe7804fd307404474ae0242f8dea7a08e0fe9479b06f2795f857f8eec271d35ba7f61a91c87296814189cc1dfc9c659cc5437452a0bd178323c50e8c005ba7fa9519b27965c9f6ffbc7dcaa8e658616cc83188fb131a703222d", 0xc0, 0x5, 0x0, 0x1, r1}, &(0x7f0000000280)) io_getevents(r0, 0x2, 0x8f, &(0x7f0000d83f60)=[{}, {}], &(0x7f00005cfff0)={0x4000000000001, 0x7}) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000480)={r1}) io_getevents(r0, 0x0, 0x5, &(0x7f00000002c0)=[{}, {}, {}, {}, {}], &(0x7f00000003c0)) io_setup(0x7, &(0x7f0000000040)) r3 = getpgid(0x0) sendto$inet(r2, &(0x7f00000005c0)="d297b73f05328a46631e2027e4bb6ceadf7f3879cc8854742640a7c2089707c3fe869ea64e2d0b15f9cfedb903989a30941d9d4fdb3f13bcdcfcf0e3e7a4fc0436afd2713fa73709e8759061faef54e4e4dc6fc7d9f7a38f4fa55013ce208e44b1923a3a3d79a5668f12e12da6198a65a6a03b6cf18099c311449829dd819989a56ae46c5604326441d831d93ee45adbab93c3d8234f61e63277572bfe6e5f53477a91cfdec4c125862879fdca0f271f915e149c571ab53ff8eec53b409b", 0xbe, 0x2000c014, &(0x7f0000000680)={0x2, 0x4e24, @multicast1=0xe0000001}, 0x10) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000500)='/dev/ptmx\x00', 0x100, 0x0) r4 = syz_open_procfs(r3, &(0x7f00000004c0)='net/anycast6\x00') ioctl$TIOCGPGRP(r4, 0x540f, &(0x7f0000000440)=0x0) perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x4a, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ef4}, r5, 0x0, r1, 0x1) pread64(r4, &(0x7f0000000000)=""/85, 0xfe42, 0x5d) setsockopt$sock_linger(r4, 0x1, 0xd, &(0x7f0000000580)={0x0, 0x6}, 0x8) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r2, 0x84, 0x21, &(0x7f0000000540)=0x8000, 0x4) r6 = memfd_create(&(0x7f0000000240)=':+lo#\x00', 0x0) fdatasync(r6) io_submit(r0, 0x1, &(0x7f0000001280)=[&(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, 0x0, r6, &(0x7f0000000100)}]) timerfd_create(0x7, 0x80800) io_destroy(r0) setsockopt$llc_int(r1, 0x10c, 0x9, &(0x7f0000000380)=0x3, 0x4) 2018/03/29 11:11:56 executing program 2 (fault-call:21 fault-nth:8): r0 = syz_open_procfs(0x0, &(0x7f00000004c0)='oom_score_adj\x00') perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x49, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(r0, 0x0, 0x83, &(0x7f0000001800)={'nat\x00', 0x0, 0x3, 0x1000, [], 0x2, &(0x7f0000001280)=[{}, {}], &(0x7f0000002040)=""/4096}, &(0x7f00000013c0)=0x78) ioprio_get$pid(0x0, 0x0) timer_create(0x0, &(0x7f0000cd0000), &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00004b1fe0)={{0x0, 0x1c9c380}, {0x0, 0x9}}, &(0x7f0000040000)) r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x7fff) truncate(&(0x7f0000001180)='./bus\x00', 0x4) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000f40000)='/dev/ptmx\x00', 0x200000000101002, 0x0) sendfile(r2, 0xffffffffffffffff, &(0x7f00000010c0), 0x10000065) sendfile(r0, r1, &(0x7f0000000000), 0x4) tkill(0x0, 0x0) r3 = memfd_create(&(0x7f0000000000)='\x00', 0x1) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000001200)) recvmsg(0xffffffffffffff9c, &(0x7f0000001500)={&(0x7f00000012c0)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @remote}}}, 0x80, &(0x7f0000001400)=[{&(0x7f0000001340)=""/103, 0x67}], 0x1, &(0x7f0000001440)=""/155, 0x9b}, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000001540)) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000001640)={0x1ff, {0x2, 0x4e21}, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, {0x2, 0x0, @multicast2=0xe0000002}, 0x0, 0x9, 0x2, 0x6, 0x0, &(0x7f0000001240)='teql0\x00', 0x0, 0x80}) inotify_rm_watch(0xffffffffffffffff, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000140), &(0x7f0000000100)=0xffffffa4) getgroups(0x1, &(0x7f0000001600)=[0x0]) syz_fuseblk_mount(&(0x7f0000001740)='./file0\x00', &(0x7f0000001780)='./file0\x00', 0x0, 0x0, 0xffffffffffffffff, 0x3ff, 0x1, 0x0) getpgrp(0xffffffffffffffff) getegid() sendmmsg$unix(r3, &(0x7f0000001880), 0x0, 0x0) setsockopt$netrom_NETROM_T4(0xffffffffffffffff, 0x103, 0x6, &(0x7f00000017c0), 0xfffffffffffffc77) readv(0xffffffffffffffff, &(0x7f000004ffe0), 0x0) 2018/03/29 11:11:56 executing program 1: io_setup(0x3, &(0x7f0000000000)=0x0) accept$unix(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000100)=0x6e) r1 = syz_open_dev$usbmon(&(0x7f0000000200)='/dev/usbmon#\x00', 0x0, 0x0) io_cancel(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0xf, 0x3, 0xffffffffffffffff, &(0x7f0000000140)="940c1f2149747e7734510c34c143183667a187dc4f624f6c2de12452792a6fb529e6bf2a661dc23a844b00925c244a9f2967c0ca9868ee50eacf67a2ad7681d82f5a38cbd6d7641f843fa129e00f701fb01835f497b53672b3e5a3f6838f28aa240bf21eb5e5cbe7804fd307404474ae0242f8dea7a08e0fe9479b06f2795f857f8eec271d35ba7f61a91c87296814189cc1dfc9c659cc5437452a0bd178323c50e8c005ba7fa9519b27965c9f6ffbc7dcaa8e658616cc83188fb131a703222d", 0xc0, 0x5, 0x0, 0x1}, &(0x7f0000000280)) io_getevents(r0, 0x2, 0x8f, &(0x7f0000d83f60)=[{}, {}], &(0x7f00005cfff0)={0x4000000000001, 0x7}) io_getevents(r0, 0x0, 0x5, &(0x7f00000002c0)=[{}, {}, {}, {}, {}], &(0x7f00000003c0)) io_setup(0x7, &(0x7f0000000040)) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/route\x00') ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000440)=0x0) perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x4a, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ef4}, r3, 0x0, 0xffffffffffffffff, 0x0) pread64(r2, &(0x7f0000000000)=""/85, 0xfe42, 0x5d) r4 = memfd_create(&(0x7f0000000240)=':+lo#\x00', 0x0) fdatasync(r4) io_submit(r0, 0x1, &(0x7f0000001280)=[&(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f0000000100)}]) timerfd_create(0x7, 0x80800) io_destroy(r0) setsockopt$llc_int(r1, 0x10c, 0x9, &(0x7f0000000380)=0x3, 0x4) [ 315.756398] FAULT_INJECTION: forcing a failure. [ 315.756398] name failslab, interval 1, probability 0, space 0, times 0 [ 315.767743] CPU: 0 PID: 8223 Comm: syz-executor2 Not tainted 4.16.0-rc7+ #5 [ 315.774844] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 315.784191] Call Trace: [ 315.786778] dump_stack+0x194/0x24d [ 315.790408] ? arch_local_irq_restore+0x53/0x53 [ 315.795078] ? trace_hardirqs_off+0x10/0x10 [ 315.799402] should_fail+0x8c0/0xa40 [ 315.803112] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 315.808212] ? mntput_no_expire+0x130/0xa90 [ 315.812529] ? lock_downgrade+0x980/0x980 [ 315.816683] ? find_held_lock+0x35/0x1d0 [ 315.820764] ? check_same_owner+0x320/0x320 [ 315.825073] ? dput.part.20+0x207/0x830 [ 315.829037] ? rcu_note_context_switch+0x710/0x710 [ 315.833958] ? d_path+0x930/0x930 [ 315.837412] should_failslab+0xec/0x120 [ 315.841377] __kmalloc_track_caller+0x5f/0x760 [ 315.845961] ? strncpy_from_user+0x430/0x430 [ 315.850359] ? strndup_user+0x62/0xb0 [ 315.854152] memdup_user+0x2c/0x90 [ 315.857682] strndup_user+0x62/0xb0 [ 315.861297] SyS_mount+0x3c/0x120 [ 315.864740] ? copy_mnt_ns+0xb30/0xb30 [ 315.868614] do_syscall_64+0x281/0x940 [ 315.872484] ? __do_page_fault+0xc90/0xc90 [ 315.876706] ? _raw_spin_unlock_irq+0x27/0x70 [ 315.881192] ? finish_task_switch+0x1c1/0x7e0 [ 315.885677] ? syscall_return_slowpath+0x550/0x550 [ 315.890597] ? syscall_return_slowpath+0x2ac/0x550 [ 315.895511] ? prepare_exit_to_usermode+0x350/0x350 [ 315.900521] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 315.905878] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 315.910714] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 315.915883] RIP: 0033:0x4548b9 [ 315.919056] RSP: 002b:00007f032fc57b08 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 315.926757] RAX: ffffffffffffffda RBX: 0000000000000019 RCX: 00000000004548b9 [ 315.934019] RDX: 00000000004b9225 RSI: 0000000020001740 RDI: 0000000020001780 [ 315.941276] RBP: 0000000020001780 R08: 00007f032fc57b20 R09: 0000000000000000 [ 315.948538] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 2018/03/29 11:11:56 executing program 0: r0 = perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x4a, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffff9c, 0xc00caee0, &(0x7f0000000180)={0x0, r0, 0x1}) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) fcntl$getownex(r0, 0x10, &(0x7f0000000400)={0x0, 0x0}) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0xffff, 0xe3, 0x6, 0x4, 0x0, 0x7, 0x0, 0x2, 0x10001, 0x1, 0x7, 0x8, 0x100, 0x4, 0x0, 0x7f, 0x20, 0x0, 0x4, 0x5, 0x90a4, 0x7, 0x2, 0x73, 0x8, 0x7, 0x4, 0x7e0, 0x101, 0x0, 0x2, 0x309, 0x0, 0x9, 0xfffffffffffffff9, 0x9, 0x0, 0x4, 0x0, @perf_config_ext={0x0, 0x1}, 0x8140, 0x2, 0x0, 0x4, 0xca1, 0xb5}, r4, 0x4, r1, 0x8) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) futimesat(r1, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0)={{r2, r3/1000+10000}, {r5, r6/1000+10000}}) unshare(0x8000000) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0xdc, 0x40}, 0x341) r8 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8910, &(0x7f0000000080)=@buf={0x0, &(0x7f0000000000)}) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x13, &(0x7f0000000ffc), 0x4) mq_open(&(0x7f00000000c0)='syzkaller0\x00', 0x40, 0x8, &(0x7f0000000100)={0x5, 0x80000000, 0x0, 0xfffffffffffffff9, 0x1, 0xfffffffffffffffd, 0x7fff, 0x200}) socket$inet_tcp(0x2, 0x1, 0x0) r9 = dup3(r8, r7, 0x80000) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r9, 0x84, 0x66, &(0x7f00000002c0)={0x0, 0x8ed6}, &(0x7f0000000300)=0x1) bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) shmget(0xffffffffffffffff, 0x8000, 0x49b, &(0x7f0000ff8000/0x8000)=nil) ioctl$sock_inet_SIOCGIFPFLAGS(r8, 0x8935, &(0x7f0000000080)={'syzkaller0\x00'}) ppoll(&(0x7f0000000780)=[{r1, 0x300}, {r1, 0x8401}], 0x2, &(0x7f00000007c0)={0x77359400}, &(0x7f0000000800)={0x9}, 0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000280)={0x0, 0x0, 0x9}, 0x10) r10 = semget$private(0x0, 0x4, 0x0) semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0x0, 0x1000}], 0x1, &(0x7f0000000080)={0x0, 0x1c9c380}) semctl$IPC_RMID(r10, 0x0, 0x0) 2018/03/29 11:11:56 executing program 1: io_setup(0x3, &(0x7f0000000000)=0x0) accept$unix(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000100)=0x6e) r1 = syz_open_dev$usbmon(&(0x7f0000000200)='/dev/usbmon#\x00', 0x0, 0x0) io_cancel(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0xf, 0x3, 0xffffffffffffffff, &(0x7f0000000140)="940c1f2149747e7734510c34c143183667a187dc4f624f6c2de12452792a6fb529e6bf2a661dc23a844b00925c244a9f2967c0ca9868ee50eacf67a2ad7681d82f5a38cbd6d7641f843fa129e00f701fb01835f497b53672b3e5a3f6838f28aa240bf21eb5e5cbe7804fd307404474ae0242f8dea7a08e0fe9479b06f2795f857f8eec271d35ba7f61a91c87296814189cc1dfc9c659cc5437452a0bd178323c50e8c005ba7fa9519b27965c9f6ffbc7dcaa8e658616cc83188fb131a703222d", 0xc0, 0x5, 0x0, 0x1}, &(0x7f0000000280)) io_getevents(r0, 0x2, 0x8f, &(0x7f0000d83f60)=[{}, {}], &(0x7f00005cfff0)={0x4000000000001, 0x7}) io_getevents(r0, 0x0, 0x5, &(0x7f00000002c0)=[{}, {}, {}, {}, {}], &(0x7f00000003c0)) io_setup(0x7, &(0x7f0000000040)) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/route\x00') ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000440)=0x0) perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x4a, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ef4}, r3, 0x0, 0xffffffffffffffff, 0x1) pread64(0xffffffffffffffff, &(0x7f0000000000)=""/85, 0xfe42, 0x5d) r4 = memfd_create(&(0x7f0000000240)=':+lo#\x00', 0x0) fdatasync(r4) io_submit(r0, 0x1, &(0x7f0000001280)=[&(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f0000000100)}]) timerfd_create(0x7, 0x80800) io_destroy(r0) setsockopt$llc_int(r1, 0x10c, 0x9, &(0x7f0000000380)=0x3, 0x4) [ 315.955796] R13: 00000000000003ff R14: 0000000000000000 R15: ffffffffffffffff 2018/03/29 11:11:56 executing program 7: io_setup(0x3, &(0x7f0000000000)=0x0) accept$unix(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000100)=0x6e) syz_open_dev$usbmon(&(0x7f0000000200)='/dev/usbmon#\x00', 0x7ff, 0x0) io_cancel(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0xf, 0x3, 0xffffffffffffffff, &(0x7f0000000140)="940c1f2149747e7734510c34c143183667a187dc4f624f6c2de12452792a6fb529e6bf2a661dc23a844b00925c244a9f2967c0ca9868ee50eacf67a2ad7681d82f5a38cbd6d7641f843fa129e00f701fb01835f497b53672b3e5a3f6838f28aa240bf21eb5e5cbe7804fd307404474ae0242f8dea7a08e0fe9479b06f2795f857f8eec271d35ba7f61a91c87296814189cc1dfc9c659cc5437452a0bd178323c50e8c005ba7fa9519b27965c9f6ffbc7dcaa8e658616cc83188fb131a703222d", 0xc0, 0x5, 0x0, 0x1}, &(0x7f0000000280)) io_getevents(r0, 0x2, 0x8f, &(0x7f0000d83f60)=[{}, {}], &(0x7f00005cfff0)={0x4000000000001, 0x7}) io_getevents(r0, 0x0, 0x5, &(0x7f00000002c0)=[{}, {}, {}, {}, {}], &(0x7f00000003c0)) io_setup(0x7, &(0x7f0000000040)) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/route\x00') ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000440)=0x0) perf_event_open(&(0x7f0000aaa000)={0x0, 0x70, 0x4a, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ef4}, r2, 0x0, 0xffffffffffffffff, 0x1) pread64(r1, &(0x7f0000000000)=""/85, 0xfe42, 0x5d) r3 = memfd_create(&(0x7f0000000240)=':+lo#\x00', 0x0) fdatasync(r3) io_submit(r0, 0x1, &(0x7f0000001280)=[&(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000000100)}]) execveat(r3, &(0x7f0000000480)='./file0\x00', &(0x7f0000000680)=[&(0x7f00000004c0)='-:)\x00', &(0x7f0000000500)='net/route\x00', &(0x7f0000000540)='net/route\x00', &(0x7f0000000580)="eb776c616e302d73656c696e75786b657972696e679240766d6e657431706f7369785f61636c5f6163636573730d656d3000", &(0x7f00000005c0)='net/route\x00', &(0x7f0000000600)='@cgroupposix_acl_accessposix_acl_access!\x00', &(0x7f0000000640)='/dev/usbmon#\x00'], &(0x7f0000000780)=[&(0x7f00000006c0)="76626f786e657430707070309a6d643573756d656d3000", &(0x7f0000000700)='system/userem0*\x00', &(0x7f0000000740)='$\x00'], 0x400) timerfd_create(0x7, 0x80800) io_destroy(r0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x9, &(0x7f0000000380)=0x3, 0x4) 2018/03/29 11:11:56 executing program 3: io_setup(0x3, &(0x7f0000000000)=0x0) accept$unix(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000100)=0x6e) r1 = syz_open_dev$usbmon(&(0x7f0000000200)='/dev/usbmon#\x00', 0x7ff, 0x0) io_cancel(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0xf, 0x0, 0xffffffffffffffff, &(0x7f0000000140)="940c1f2149747e7734510c34c143183667a187dc4f624f6c2de12452792a6fb529e6bf2a661dc23a844b00925c244a9f2967c0ca9868ee50eacf67a2ad7681d82f5a38cbd6d7641f843fa129e00f701fb01835f497b53672b3e5a3f6838f28aa240bf21eb5e5cbe7804fd307404474ae0242f8dea7a08e0fe9479b06f2795f857f8eec271d35ba7f61a91c87296814189cc1dfc9c659cc5437452a0bd178323c50e8c005ba7fa9519b27965c9f6ffbc7dcaa8e658616cc83188fb131a703222d", 0xc0, 0x5, 0x0, 0x1, r1}, &(0x7f0000000280)) io_getevents(r0, 0x2, 0x8f, &(0x7f0000d83f60)=[{}, {}], &(0x7f00005cfff0)={0x4000000000001, 0x7}) io_getevents(r0, 0x0, 0x5, &(0x7f00000002c0)=[{}, {}, {}, {}, {}], &(0x7f00000003c0)) io_setup(0x7, &(0x7f0000000040)) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/route\x00') ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000440)=0x0) perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x4a, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ef4}, r3, 0x0, r1, 0x1) pread64(r2, &(0x7f0000000000)=""/85, 0xfe42, 0x5d) r4 = memfd_create(&(0x7f0000000240)=':+lo#\x00', 0x0) fdatasync(r4) timerfd_create(0x7, 0x80800) io_destroy(r0) setsockopt$llc_int(r1, 0x10c, 0x9, &(0x7f0000000380)=0x3, 0x4) 2018/03/29 11:11:56 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) readv(r0, &(0x7f0000001480)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x3}) r1 = syz_open_pts(r0, 0x2) r2 = dup3(r1, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000c34fff), 0xffffff0b) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0) preadv(r3, &(0x7f00000004c0)=[{&(0x7f0000000480)=""/21, 0x15}], 0x1, 0x0) fchdir(0xffffffffffffffff) mkdir(&(0x7f0000000280)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f", 0xfffffffffffffffc) fchmod(r2, 0x0) splice(r3, &(0x7f0000000400), 0xffffffffffffffff, &(0x7f0000000440), 0x9, 0x2) rename(&(0x7f0000001e00)='./file0\x00', &(0x7f0000000100)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f") mkdir(&(0x7f000000e000)='./control\x00', 0x0) r4 = open(&(0x7f0000000000)='./control\x00', 0x0, 0x0) renameat2(r4, &(0x7f0000000040)='./file0\x00', r4, &(0x7f0000000080)='./control\x00', 0x2) bind$bt_rfcomm(r2, &(0x7f0000000200)={0x1f, {0xfffffffffffffbff, 0x4, 0x7, 0x7, 0x0, 0x2}, 0x401}, 0xa) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000300)={0x0, 0x80}, &(0x7f0000000340)=0x8) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000380)={r5, 0x5}, &(0x7f00000003c0)=0x8) mknodat(r4, &(0x7f000003f000)='./control\x00', 0x0, 0x0) symlink(&(0x7f0000000180)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f", &(0x7f00000000c0)='./file0\x00') perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(r4, &(0x7f0000010000)='./control\x00', &(0x7f000003f000), &(0x7f0000001fe8), 0x0) 2018/03/29 11:11:56 executing program 2 (fault-call:21 fault-nth:9): r0 = syz_open_procfs(0x0, &(0x7f00000004c0)='oom_score_adj\x00') perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x49, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(r0, 0x0, 0x83, &(0x7f0000001800)={'nat\x00', 0x0, 0x3, 0x1000, [], 0x2, &(0x7f0000001280)=[{}, {}], &(0x7f0000002040)=""/4096}, &(0x7f00000013c0)=0x78) ioprio_get$pid(0x0, 0x0) timer_create(0x0, &(0x7f0000cd0000), &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00004b1fe0)={{0x0, 0x1c9c380}, {0x0, 0x9}}, &(0x7f0000040000)) r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x7fff) truncate(&(0x7f0000001180)='./bus\x00', 0x4) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000f40000)='/dev/ptmx\x00', 0x200000000101002, 0x0) sendfile(r2, 0xffffffffffffffff, &(0x7f00000010c0), 0x10000065) sendfile(r0, r1, &(0x7f0000000000), 0x4) tkill(0x0, 0x0) r3 = memfd_create(&(0x7f0000000000)='\x00', 0x1) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000001200)) recvmsg(0xffffffffffffff9c, &(0x7f0000001500)={&(0x7f00000012c0)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @remote}}}, 0x80, &(0x7f0000001400)=[{&(0x7f0000001340)=""/103, 0x67}], 0x1, &(0x7f0000001440)=""/155, 0x9b}, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000001540)) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000001640)={0x1ff, {0x2, 0x4e21}, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, {0x2, 0x0, @multicast2=0xe0000002}, 0x0, 0x9, 0x2, 0x6, 0x0, &(0x7f0000001240)='teql0\x00', 0x0, 0x80}) inotify_rm_watch(0xffffffffffffffff, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000140), &(0x7f0000000100)=0xffffffa4) getgroups(0x1, &(0x7f0000001600)=[0x0]) syz_fuseblk_mount(&(0x7f0000001740)='./file0\x00', &(0x7f0000001780)='./file0\x00', 0x0, 0x0, 0xffffffffffffffff, 0x3ff, 0x1, 0x0) getpgrp(0xffffffffffffffff) getegid() sendmmsg$unix(r3, &(0x7f0000001880), 0x0, 0x0) setsockopt$netrom_NETROM_T4(0xffffffffffffffff, 0x103, 0x6, &(0x7f00000017c0), 0xfffffffffffffc77) readv(0xffffffffffffffff, &(0x7f000004ffe0), 0x0) 2018/03/29 11:11:56 executing program 6: openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x0, 0x0) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, &(0x7f0000000340)=0x1) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f000051cff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000943ffc)=0xa35) read(r0, &(0x7f00003fefff)=""/1, 0x1) r1 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000029000)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r0, &(0x7f0000dcdff0)=[{&(0x7f0000cd8000)=""/1, 0x1}], 0x1) ioctl$int_in(r2, 0x5452, &(0x7f0000b28000)=0x3c) write$cgroup_type(0xffffffffffffffff, &(0x7f00000002c0)='threaded\x00', 0x9) syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x0, 0x802) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000fb9000)) fcntl$setsig(0xffffffffffffffff, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r3}], 0x1, 0xfffffffffffffff8) read$eventfd(0xffffffffffffffff, &(0x7f0000000040), 0x8) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)) r4 = dup2(r2, r3) fcntl$setown(r4, 0x8, r1) ptrace$cont(0xffffffffffffffff, r1, 0x0, 0x8) tkill(r1, 0x16) r5 = gettid() process_vm_readv(r5, &(0x7f0000001880)=[{&(0x7f0000000680)=""/198, 0xc6}, {&(0x7f0000000780)=""/247, 0xf7}, {&(0x7f0000000380)=""/12, 0xc}, {&(0x7f00000003c0)=""/6, 0x6}, {&(0x7f0000000400)=""/14, 0xe}], 0x5, &(0x7f00000019c0)=[{&(0x7f0000001900)=""/41, 0x29}, {&(0x7f0000001940)=""/112, 0x70}], 0x2, 0x0) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f0000000240)={{{@in6}}, {{@in=@local}, 0x0, @in=@local}}, &(0x7f0000000100)=0xe8) [ 316.070115] bond0 (unregistering): Released all slaves [ 316.129712] FAULT_INJECTION: forcing a failure. [ 316.129712] name failslab, interval 1, probability 0, space 0, times 0 [ 316.141098] CPU: 0 PID: 8257 Comm: syz-executor2 Not tainted 4.16.0-rc7+ #5 [ 316.148195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 316.157541] Call Trace: [ 316.160138] dump_stack+0x194/0x24d [ 316.163772] ? arch_local_irq_restore+0x53/0x53 [ 316.168436] ? __save_stack_trace+0x7e/0xd0 [ 316.172762] should_fail+0x8c0/0xa40 [ 316.176474] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 316.181572] ? kasan_kmalloc+0xad/0xe0 [ 316.185449] ? __kmalloc_track_caller+0x15e/0x760 [ 316.190282] ? memdup_user+0x2c/0x90 [ 316.193998] ? strndup_user+0x62/0xb0 [ 316.197786] ? SyS_mount+0x3c/0x120 [ 316.201409] ? lock_downgrade+0x980/0x980 [ 316.205560] ? find_held_lock+0x35/0x1d0 [ 316.209645] ? check_same_owner+0x320/0x320 [ 316.213962] ? rcu_note_context_switch+0x710/0x710 [ 316.218879] ? __check_object_size+0x8b/0x530 [ 316.223368] should_failslab+0xec/0x120 [ 316.227324] __kmalloc_track_caller+0x5f/0x760 [ 316.231889] ? strncpy_from_user+0x430/0x430 [ 316.236273] ? strndup_user+0x62/0xb0 [ 316.240047] ? _copy_from_user+0x99/0x110 [ 316.244175] memdup_user+0x2c/0x90 [ 316.247689] strndup_user+0x62/0xb0 [ 316.251292] SyS_mount+0x6b/0x120 [ 316.254721] ? copy_mnt_ns+0xb30/0xb30 [ 316.258585] do_syscall_64+0x281/0x940 [ 316.262445] ? __do_page_fault+0xc90/0xc90 [ 316.266654] ? _raw_spin_unlock_irq+0x27/0x70 [ 316.271123] ? finish_task_switch+0x1c1/0x7e0 [ 316.275593] ? syscall_return_slowpath+0x550/0x550 [ 316.280495] ? syscall_return_slowpath+0x2ac/0x550 [ 316.285401] ? prepare_exit_to_usermode+0x350/0x350 [ 316.290394] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 316.295739] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 316.300564] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 316.305725] RIP: 0033:0x4548b9 [ 316.308891] RSP: 002b:00007f032fc57b08 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 316.316575] RAX: ffffffffffffffda RBX: 0000000000000019 RCX: 00000000004548b9 [ 316.323817] RDX: 00000000004b9225 RSI: 0000000020001740 RDI: 0000000020001780 [ 316.331062] RBP: 0000000020001780 R08: 00007f032fc57b20 R09: 0000000000000000 [ 316.338311] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 316.346247] R13: 00000000000003ff R14: 0000000000000000 R15: ffffffffffffffff [ 317.429370] IPVS: ftp: loaded support on port[0] = 21 [ 317.732281] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 318.172725] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 318.178830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 318.226949] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready 2018/03/29 11:11:58 executing program 5: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) mkdir(&(0x7f0000000000)='./file1\x00', 0x0) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000811ffa)='bdev\x00', 0x0, &(0x7f0000444000)) mount(&(0x7f0000fb6000)='./file0\x00', &(0x7f0000d78000)='.', &(0x7f0000fdb000)='ubifs\x00', 0x1003, 0x0) mount(&(0x7f00002b9ff8)='./file0\x00', &(0x7f0000cbeff8)='./file0\x00', &(0x7f00005f7ffa)='ramfs\x00', 0x80000, &(0x7f000002f000)) r0 = socket(0x1f, 0x1, 0x1f) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f0000000240)={0x7fff, {0x2, 0x4e21, @loopback=0x7f000001}, {0x2, 0x4e24, @multicast1=0xe0000001}, {0x2, 0x4e24, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x45, 0x9, 0x100000000, 0x8, 0x1, &(0x7f0000000100)='bpq0\x00', 0x100, 0x7, 0x1}) mount(&(0x7f0000000040)='.', &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0)='binfmt_misc\x00', 0x0, &(0x7f0000000100)) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) mount(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./file1\x00', &(0x7f0000000200)='anon_inodefs\x00', 0x2000, &(0x7f0000000240)) mount(&(0x7f0000adcff8)='./file0\x00', &(0x7f0000e08fff)='.', &(0x7f00005e9000)='cifs\x00', 0x2000, &(0x7f0000ad5000)) 2018/03/29 11:11:58 executing program 1: io_setup(0x3, &(0x7f0000000000)=0x0) accept$unix(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000100)=0x6e) r1 = syz_open_dev$usbmon(&(0x7f0000000200)='/dev/usbmon#\x00', 0x0, 0x0) io_cancel(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0xf, 0x3, 0xffffffffffffffff, &(0x7f0000000140)="940c1f2149747e7734510c34c143183667a187dc4f624f6c2de12452792a6fb529e6bf2a661dc23a844b00925c244a9f2967c0ca9868ee50eacf67a2ad7681d82f5a38cbd6d7641f843fa129e00f701fb01835f497b53672b3e5a3f6838f28aa240bf21eb5e5cbe7804fd307404474ae0242f8dea7a08e0fe9479b06f2795f857f8eec271d35ba7f61a91c87296814189cc1dfc9c659cc5437452a0bd178323c50e8c005ba7fa9519b27965c9f6ffbc7dcaa8e658616cc83188fb131a703222d", 0xc0, 0x5, 0x0, 0x1}, &(0x7f0000000280)) io_getevents(r0, 0x2, 0x8f, &(0x7f0000d83f60)=[{}, {}], &(0x7f00005cfff0)={0x4000000000001, 0x7}) io_getevents(r0, 0x0, 0x5, &(0x7f00000002c0)=[{}, {}, {}, {}, {}], &(0x7f00000003c0)) io_setup(0x7, &(0x7f0000000040)) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/route\x00') ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000440)=0x0) perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x4a, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ef4}, r3, 0x0, 0xffffffffffffffff, 0x1) pread64(0xffffffffffffffff, &(0x7f0000000000)=""/85, 0xfe42, 0x5d) r4 = memfd_create(&(0x7f0000000240)=':+lo#\x00', 0x0) fdatasync(r4) io_submit(r0, 0x1, &(0x7f0000001280)=[&(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f0000000100)}]) timerfd_create(0x7, 0x80800) io_destroy(r0) setsockopt$llc_int(r1, 0x10c, 0x9, &(0x7f0000000380)=0x3, 0x4) 2018/03/29 11:11:58 executing program 3: io_setup(0x3, &(0x7f0000000000)=0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) accept$unix(r1, &(0x7f0000000500), &(0x7f0000000480)=0x6e) r2 = syz_open_dev$usbmon(&(0x7f0000000200)='/dev/usbmon#\x00', 0x7ff, 0x0) io_cancel(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0xf, 0x0, 0xffffffffffffffff, &(0x7f0000000140)="940c1f2149747e7734510c34c143183667a187dc4f624f6c2de12452792a6fb529e6bf2a661dc23a844b00925c244a9f2967c0ca9868ee50eacf67a2ad7681d82f5a38cbd6d7641f843fa129e00f701fb01835f497b53672b3e5a3f6838f28aa240bf21eb5e5cbe7804fd307404474ae0242f8dea7a08e0fe9479b06f2795f857f8eec271d35ba7f61a91c87296814189cc1dfc9c659cc5437452a0bd178323c50e8c005ba7fa9519b27965c9f6ffbc7dcaa8e658616cc83188fb131a703222d", 0xc0, 0x5, 0x0, 0x1, r2}, &(0x7f0000000280)) io_getevents(r0, 0x2, 0x8f, &(0x7f0000d83f60)=[{}, {}], &(0x7f00005cfff0)={0x4000000000001, 0x7}) io_getevents(r0, 0x0, 0x5, &(0x7f00000002c0)=[{}, {}, {}, {}, {}], &(0x7f00000003c0)) io_setup(0x7, &(0x7f0000000040)) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/route\x00') ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f0000000440)=0x0) r5 = socket(0x10, 0x3, 0x0) write(r5, &(0x7f0000000000)="2400000052001f0014f9f407000904000a00071008000100feffffff0800000000000000", 0x24) perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x4a, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ef4}, r4, 0x0, r2, 0x1) openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x8000, 0x0) personality(0x40008) pread64(r3, &(0x7f0000000000)=""/85, 0xfe42, 0x5d) r6 = memfd_create(&(0x7f0000000240)=':+lo#\x00', 0x0) fdatasync(r6) getpeername$packet(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000000100)=0x14) setsockopt$inet6_mreq(r1, 0x29, 0x15, &(0x7f0000000580)={@mcast1={0xff, 0x1, [], 0x1}, r7}, 0x14) sync_file_range(r2, 0xffffffff00000000, 0x0, 0x3) io_submit(r0, 0x1, &(0x7f0000001280)=[&(0x7f0000001100)={0x0, 0x0, 0x0, 0x7, 0x0, r6, &(0x7f0000000100)}]) timerfd_create(0x7, 0x80800) io_destroy(r0) ioctl$PERF_EVENT_IOC_DISABLE(r3, 0x2401, 0x6) setsockopt$llc_int(r2, 0x10c, 0x9, &(0x7f0000000380)=0x3, 0x4) 2018/03/29 11:11:58 executing program 0: r0 = perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x4a, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffff9c, 0xc00caee0, &(0x7f0000000180)={0x0, r0, 0x1}) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) fcntl$getownex(r0, 0x10, &(0x7f0000000400)={0x0, 0x0}) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0xffff, 0xe3, 0x6, 0x4, 0x0, 0x7, 0x0, 0x2, 0x10001, 0x1, 0x7, 0x8, 0x100, 0x4, 0x0, 0x7f, 0x20, 0x0, 0x4, 0x5, 0x90a4, 0x7, 0x2, 0x73, 0x8, 0x7, 0x4, 0x7e0, 0x101, 0x0, 0x2, 0x309, 0x0, 0x9, 0xfffffffffffffff9, 0x9, 0x0, 0x4, 0x0, @perf_config_ext={0x0, 0x1}, 0x8140, 0x2, 0x0, 0x4, 0xca1, 0xb5}, r4, 0x4, r1, 0x8) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) futimesat(r1, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0)={{r2, r3/1000+10000}, {r5, r6/1000+10000}}) unshare(0x8000000) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0xdc, 0x40}, 0x341) r8 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8910, &(0x7f0000000080)=@buf={0x0, &(0x7f0000000000)}) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x13, &(0x7f0000000ffc), 0x4) mq_open(&(0x7f00000000c0)='syzkaller0\x00', 0x40, 0x8, &(0x7f0000000100)={0x5, 0x80000000, 0x0, 0xfffffffffffffff9, 0x1, 0xfffffffffffffffd, 0x7fff, 0x200}) socket$inet_tcp(0x2, 0x1, 0x0) r9 = dup3(r8, r7, 0x80000) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r9, 0x84, 0x66, &(0x7f00000002c0)={0x0, 0x8ed6}, &(0x7f0000000300)=0x1) bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) shmget(0xffffffffffffffff, 0x8000, 0x49b, &(0x7f0000ff8000/0x8000)=nil) ioctl$sock_inet_SIOCGIFPFLAGS(r8, 0x8935, &(0x7f0000000080)={'syzkaller0\x00'}) ppoll(&(0x7f0000000780)=[{r1, 0x300}, {r1, 0x8401}], 0x2, &(0x7f00000007c0)={0x77359400}, &(0x7f0000000800)={0x9}, 0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000280)={0x0, 0x0, 0x9}, 0x10) r10 = semget$private(0x0, 0x4, 0x0) semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0x0, 0x1000}], 0x1, &(0x7f0000000080)={0x0, 0x1c9c380}) semctl$IPC_RMID(r10, 0x0, 0x0) 2018/03/29 11:11:58 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) readv(r0, &(0x7f0000001480)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x3}) r1 = syz_open_pts(r0, 0x2) r2 = dup3(r1, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000c34fff), 0xffffff0b) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0) preadv(r3, &(0x7f00000004c0)=[{&(0x7f0000000480)=""/21, 0x15}], 0x1, 0x0) fchdir(0xffffffffffffffff) mkdir(&(0x7f0000000280)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f", 0xfffffffffffffffc) fchmod(r2, 0x0) splice(r3, &(0x7f0000000400), 0xffffffffffffffff, &(0x7f0000000440), 0x9, 0x2) rename(&(0x7f0000001e00)='./file0\x00', &(0x7f0000000100)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f") mkdir(&(0x7f000000e000)='./control\x00', 0x0) r4 = open(&(0x7f0000000000)='./control\x00', 0x0, 0x0) renameat2(r4, &(0x7f0000000040)='./file0\x00', r4, &(0x7f0000000080)='./control\x00', 0x2) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000300)={0x0, 0x80}, &(0x7f0000000340)=0x8) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000380)={r5, 0x5}, &(0x7f00000003c0)=0x8) mknodat(r4, &(0x7f000003f000)='./control\x00', 0x0, 0x0) ioctl$TCSBRK(r1, 0x5409, 0x2) symlink(&(0x7f0000000180)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f", &(0x7f00000000c0)='./file0\x00') perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(r4, &(0x7f0000010000)='./control\x00', &(0x7f000003f000), &(0x7f0000001fe8), 0x0) 2018/03/29 11:11:58 executing program 7: io_setup(0x3, &(0x7f0000000000)=0x0) accept$unix(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000100)=0x6e) r1 = syz_open_dev$usbmon(&(0x7f0000000200)='/dev/usbmon#\x00', 0x7ff, 0x0) io_cancel(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0xf, 0x3, 0xffffffffffffffff, &(0x7f0000000140)="940c1f2149747e7734510c34c143183667a187dc4f624f6c2de12452792a6fb529e6bf2a661dc23a844b00925c244a9f2967c0ca9868ee50eacf67a2ad7681d82f5a38cbd6d7641f843fa129e00f701fb01835f497b53672b3e5a3f6838f28aa240bf21eb5e5cbe7804fd307404474ae0242f8dea7a08e0fe9479b06f2795f857f8eec271d35ba7f61a91c87296814189cc1dfc9c659cc5437452a0bd178323c50e8c005ba7fa9519b27965c9f6ffbc7dcaa8e658616cc83188fb131a703222d", 0xc0, 0x5, 0x0, 0x1}, &(0x7f0000000280)) io_getevents(r0, 0x2, 0x2, &(0x7f0000000480)=[{}, {}], &(0x7f00005cfff0)={0x4000000000001, 0x7}) io_getevents(r0, 0x0, 0x5, &(0x7f00000002c0)=[{}, {}, {}, {}, {}], &(0x7f00000003c0)) io_setup(0x7, &(0x7f0000000040)=0x0) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/route\x00') ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000007c0)=0x0) perf_event_open(&(0x7f0000aaa000)={0x0, 0x70, 0x4a, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ef4}, r4, 0x0, 0xffffffffffffffff, 0x1) pread64(r3, &(0x7f0000000000)=""/85, 0xfe42, 0x5d) r5 = memfd_create(&(0x7f0000000240)=':+lo#\x00', 0x0) fdatasync(r5) timerfd_create(0x7, 0x80800) r6 = add_key$user(&(0x7f00000004c0)='user\x00', &(0x7f0000000500)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000540)="dbca7cec93e165f46078d3848dcfb7b53ad73408d69a59bf439e92d3ccd5ef39f4494512945daa48b0908d0c89555b545f0859a3f3e73fe6a772e286c0d61030f1877db2296993c89fc2a862a418315c62d9677df38202741cc438dc51d2fc7284aa51c8ae98ec285b3a177ad509cc42bd545f0aff89964273084c1ff3f779e07c36782de93c2cc5bfdb47dc659a6b71ad97d38d58191f643cccbce3b61b9b1e4bb59f26255c03341ab4221c17d78f3ac36f3b955429fbd8bdae8ede621452687611d0b69a374576ff8b8c217932c8e41bd6e228", 0xd4, 0xfffffffffffffffa) r7 = add_key(&(0x7f0000000640)='ceph\x00', &(0x7f0000000680)={0x73, 0x79, 0x7a, 0x1}, &(0x7f00000006c0)="324ef26fe68c48a33bc07cc9fa655466be6b4a3dbf6a5187aadbed82e36ec440cd59aa943a235687073ad14a22fab44f230c627aabc4fa042831d39b85a5ac13540a3144799579dce7b0a23ff73c812ec878858ac609748b94608ef5d24b9779564a8ad470e2484370459603d5f32d55463febf20309595ea9dc867b92876d4bf677178f3e168fbae94c37444c165d688771e1ff64a790", 0x97, 0xfffffffffffffffa) keyctl$reject(0x13, r6, 0x5, 0x51c, r7) io_destroy(r2) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x9, &(0x7f0000000380)=0x3, 0x4) 2018/03/29 11:11:58 executing program 2 (fault-call:21 fault-nth:10): r0 = syz_open_procfs(0x0, &(0x7f00000004c0)='oom_score_adj\x00') perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x49, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(r0, 0x0, 0x83, &(0x7f0000001800)={'nat\x00', 0x0, 0x3, 0x1000, [], 0x2, &(0x7f0000001280)=[{}, {}], &(0x7f0000002040)=""/4096}, &(0x7f00000013c0)=0x78) ioprio_get$pid(0x0, 0x0) timer_create(0x0, &(0x7f0000cd0000), &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00004b1fe0)={{0x0, 0x1c9c380}, {0x0, 0x9}}, &(0x7f0000040000)) r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x7fff) truncate(&(0x7f0000001180)='./bus\x00', 0x4) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000f40000)='/dev/ptmx\x00', 0x200000000101002, 0x0) sendfile(r2, 0xffffffffffffffff, &(0x7f00000010c0), 0x10000065) sendfile(r0, r1, &(0x7f0000000000), 0x4) tkill(0x0, 0x0) r3 = memfd_create(&(0x7f0000000000)='\x00', 0x1) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000001200)) recvmsg(0xffffffffffffff9c, &(0x7f0000001500)={&(0x7f00000012c0)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @remote}}}, 0x80, &(0x7f0000001400)=[{&(0x7f0000001340)=""/103, 0x67}], 0x1, &(0x7f0000001440)=""/155, 0x9b}, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000001540)) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000001640)={0x1ff, {0x2, 0x4e21}, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, {0x2, 0x0, @multicast2=0xe0000002}, 0x0, 0x9, 0x2, 0x6, 0x0, &(0x7f0000001240)='teql0\x00', 0x0, 0x80}) inotify_rm_watch(0xffffffffffffffff, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000140), &(0x7f0000000100)=0xffffffa4) getgroups(0x1, &(0x7f0000001600)=[0x0]) syz_fuseblk_mount(&(0x7f0000001740)='./file0\x00', &(0x7f0000001780)='./file0\x00', 0x0, 0x0, 0xffffffffffffffff, 0x3ff, 0x1, 0x0) getpgrp(0xffffffffffffffff) getegid() sendmmsg$unix(r3, &(0x7f0000001880), 0x0, 0x0) setsockopt$netrom_NETROM_T4(0xffffffffffffffff, 0x103, 0x6, &(0x7f00000017c0), 0xfffffffffffffc77) readv(0xffffffffffffffff, &(0x7f000004ffe0), 0x0) 2018/03/29 11:11:58 executing program 6: openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x0, 0x0) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, &(0x7f0000000340)=0x1) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f000051cff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000943ffc)=0xa35) read(r0, &(0x7f00003fefff)=""/1, 0x1) r1 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000029000)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r0, &(0x7f0000dcdff0)=[{&(0x7f0000cd8000)=""/1, 0x1}], 0x1) ioctl$int_in(r2, 0x5452, &(0x7f0000b28000)=0x3c) write$cgroup_type(0xffffffffffffffff, &(0x7f00000002c0)='threaded\x00', 0x9) syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x0, 0x802) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000fb9000)) fcntl$setsig(0xffffffffffffffff, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r3}], 0x1, 0xfffffffffffffff8) read$eventfd(0xffffffffffffffff, &(0x7f0000000040), 0x8) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)) r4 = dup2(r2, r3) fcntl$setown(r4, 0x8, r1) ptrace$cont(0xffffffffffffffff, r1, 0x0, 0x8) tkill(r1, 0x16) r5 = gettid() process_vm_readv(r5, &(0x7f0000001880)=[{&(0x7f0000000680)=""/198, 0xc6}, {&(0x7f0000000780)=""/247, 0xf7}, {&(0x7f0000000380)=""/12, 0xc}, {&(0x7f00000003c0)=""/6, 0x6}, {&(0x7f0000000400)=""/14, 0xe}], 0x5, &(0x7f00000019c0)=[{&(0x7f0000001900)=""/41, 0x29}, {&(0x7f0000001940)=""/112, 0x70}], 0x2, 0x0) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f0000000240)={{{@in6}}, {{@in=@local}, 0x0, @in=@local}}, &(0x7f0000000100)=0xe8) [ 318.273310] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 318.279465] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 318.286922] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 318.352272] FAULT_INJECTION: forcing a failure. [ 318.352272] name failslab, interval 1, probability 0, space 0, times 0 [ 318.363667] CPU: 1 PID: 8440 Comm: syz-executor2 Not tainted 4.16.0-rc7+ #5 [ 318.370757] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 318.380091] Call Trace: [ 318.382658] dump_stack+0x194/0x24d [ 318.386269] ? arch_local_irq_restore+0x53/0x53 [ 318.390939] should_fail+0x8c0/0xa40 [ 318.394631] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 318.399711] ? __kmalloc_track_caller+0x15e/0x760 [ 318.404529] ? strndup_user+0x62/0xb0 [ 318.408303] ? SyS_mount+0x6b/0x120 [ 318.411908] ? trace_hardirqs_off+0x10/0x10 [ 318.416219] ? find_held_lock+0x35/0x1d0 [ 318.420278] ? check_same_owner+0x320/0x320 [ 318.424572] ? lock_release+0xa40/0xa40 [ 318.428518] ? check_same_owner+0x320/0x320 [ 318.432818] ? rcu_note_context_switch+0x710/0x710 [ 318.437734] should_failslab+0xec/0x120 [ 318.441685] kmem_cache_alloc_trace+0x4b/0x740 [ 318.446244] ? kasan_check_write+0x14/0x20 [ 318.450451] ? _copy_from_user+0x99/0x110 [ 318.454578] copy_mount_options+0x5f/0x2e0 [ 318.458790] SyS_mount+0x87/0x120 [ 318.462220] ? copy_mnt_ns+0xb30/0xb30 [ 318.466087] do_syscall_64+0x281/0x940 [ 318.469947] ? __do_page_fault+0xc90/0xc90 [ 318.474156] ? _raw_spin_unlock_irq+0x27/0x70 [ 318.478629] ? finish_task_switch+0x1c1/0x7e0 [ 318.483101] ? syscall_return_slowpath+0x550/0x550 [ 318.488009] ? syscall_return_slowpath+0x2ac/0x550 [ 318.492930] ? prepare_exit_to_usermode+0x350/0x350 [ 318.497923] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 318.503268] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 318.508097] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 318.513261] RIP: 0033:0x4548b9 [ 318.516428] RSP: 002b:00007f032fc57b08 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 318.524111] RAX: ffffffffffffffda RBX: 0000000000000019 RCX: 00000000004548b9 [ 318.531353] RDX: 00000000004b9225 RSI: 0000000020001740 RDI: 0000000020001780 [ 318.538599] RBP: 0000000020001780 R08: 00007f032fc57b20 R09: 0000000000000000 [ 318.545841] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 2018/03/29 11:11:59 executing program 2 (fault-call:21 fault-nth:11): r0 = syz_open_procfs(0x0, &(0x7f00000004c0)='oom_score_adj\x00') perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x49, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(r0, 0x0, 0x83, &(0x7f0000001800)={'nat\x00', 0x0, 0x3, 0x1000, [], 0x2, &(0x7f0000001280)=[{}, {}], &(0x7f0000002040)=""/4096}, &(0x7f00000013c0)=0x78) ioprio_get$pid(0x0, 0x0) timer_create(0x0, &(0x7f0000cd0000), &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00004b1fe0)={{0x0, 0x1c9c380}, {0x0, 0x9}}, &(0x7f0000040000)) r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x7fff) truncate(&(0x7f0000001180)='./bus\x00', 0x4) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000f40000)='/dev/ptmx\x00', 0x200000000101002, 0x0) sendfile(r2, 0xffffffffffffffff, &(0x7f00000010c0), 0x10000065) sendfile(r0, r1, &(0x7f0000000000), 0x4) tkill(0x0, 0x0) r3 = memfd_create(&(0x7f0000000000)='\x00', 0x1) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000001200)) recvmsg(0xffffffffffffff9c, &(0x7f0000001500)={&(0x7f00000012c0)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @remote}}}, 0x80, &(0x7f0000001400)=[{&(0x7f0000001340)=""/103, 0x67}], 0x1, &(0x7f0000001440)=""/155, 0x9b}, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000001540)) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000001640)={0x1ff, {0x2, 0x4e21}, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, {0x2, 0x0, @multicast2=0xe0000002}, 0x0, 0x9, 0x2, 0x6, 0x0, &(0x7f0000001240)='teql0\x00', 0x0, 0x80}) inotify_rm_watch(0xffffffffffffffff, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000140), &(0x7f0000000100)=0xffffffa4) getgroups(0x1, &(0x7f0000001600)=[0x0]) syz_fuseblk_mount(&(0x7f0000001740)='./file0\x00', &(0x7f0000001780)='./file0\x00', 0x0, 0x0, 0xffffffffffffffff, 0x3ff, 0x1, 0x0) getpgrp(0xffffffffffffffff) getegid() sendmmsg$unix(r3, &(0x7f0000001880), 0x0, 0x0) setsockopt$netrom_NETROM_T4(0xffffffffffffffff, 0x103, 0x6, &(0x7f00000017c0), 0xfffffffffffffc77) readv(0xffffffffffffffff, &(0x7f000004ffe0), 0x0) [ 318.553086] R13: 00000000000003ff R14: 0000000000000000 R15: ffffffffffffffff [ 318.600678] FAULT_INJECTION: forcing a failure. [ 318.600678] name failslab, interval 1, probability 0, space 0, times 0 [ 318.612134] CPU: 0 PID: 8453 Comm: syz-executor2 Not tainted 4.16.0-rc7+ #5 [ 318.619240] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 318.628584] Call Trace: [ 318.631157] dump_stack+0x194/0x24d [ 318.634763] ? arch_local_irq_restore+0x53/0x53 [ 318.639419] should_fail+0x8c0/0xa40 [ 318.643114] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 318.648193] ? lock_release+0xa40/0xa40 [ 318.652156] ? find_held_lock+0x35/0x1d0 [ 318.656217] ? check_same_owner+0x320/0x320 [ 318.660516] ? rcu_note_context_switch+0x710/0x710 [ 318.665430] should_failslab+0xec/0x120 [ 318.669382] kmem_cache_alloc+0x47/0x760 [ 318.673433] getname_flags+0xcb/0x580 [ 318.677216] user_path_at_empty+0x2d/0x50 [ 318.681362] do_mount+0x15f/0x2bb0 [ 318.684887] ? copy_mount_string+0x40/0x40 [ 318.689095] ? rcu_pm_notify+0xc0/0xc0 [ 318.692970] ? copy_mount_options+0x5f/0x2e0 [ 318.697353] ? rcu_read_lock_sched_held+0x108/0x120 [ 318.702343] ? kmem_cache_alloc_trace+0x459/0x740 [ 318.707161] ? kasan_check_write+0x14/0x20 [ 318.711371] ? _copy_from_user+0x99/0x110 [ 318.715498] ? copy_mount_options+0x1f7/0x2e0 [ 318.719972] SyS_mount+0xab/0x120 [ 318.723402] ? copy_mnt_ns+0xb30/0xb30 [ 318.727267] do_syscall_64+0x281/0x940 [ 318.731127] ? __do_page_fault+0xc90/0xc90 [ 318.735336] ? _raw_spin_unlock_irq+0x27/0x70 [ 318.739805] ? finish_task_switch+0x1c1/0x7e0 [ 318.744277] ? syscall_return_slowpath+0x550/0x550 [ 318.749181] ? syscall_return_slowpath+0x2ac/0x550 [ 318.754085] ? prepare_exit_to_usermode+0x350/0x350 [ 318.759077] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 318.764423] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 318.769248] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 318.774409] RIP: 0033:0x4548b9 [ 318.777573] RSP: 002b:00007f032fc57b08 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 318.785268] RAX: ffffffffffffffda RBX: 0000000000000019 RCX: 00000000004548b9 [ 318.792511] RDX: 00000000004b9225 RSI: 0000000020001740 RDI: 0000000020001780 2018/03/29 11:11:59 executing program 1: io_setup(0x3, &(0x7f0000000000)=0x0) accept$unix(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000100)=0x6e) r1 = syz_open_dev$usbmon(&(0x7f0000000200)='/dev/usbmon#\x00', 0x0, 0x0) io_cancel(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0xf, 0x3, 0xffffffffffffffff, &(0x7f0000000140)="940c1f2149747e7734510c34c143183667a187dc4f624f6c2de12452792a6fb529e6bf2a661dc23a844b00925c244a9f2967c0ca9868ee50eacf67a2ad7681d82f5a38cbd6d7641f843fa129e00f701fb01835f497b53672b3e5a3f6838f28aa240bf21eb5e5cbe7804fd307404474ae0242f8dea7a08e0fe9479b06f2795f857f8eec271d35ba7f61a91c87296814189cc1dfc9c659cc5437452a0bd178323c50e8c005ba7fa9519b27965c9f6ffbc7dcaa8e658616cc83188fb131a703222d", 0xc0, 0x5, 0x0, 0x1}, &(0x7f0000000280)) io_getevents(r0, 0x2, 0x8f, &(0x7f0000d83f60)=[{}, {}], &(0x7f00005cfff0)={0x4000000000001, 0x7}) io_getevents(r0, 0x0, 0x5, &(0x7f00000002c0)=[{}, {}, {}, {}, {}], &(0x7f00000003c0)) io_setup(0x7, &(0x7f0000000040)) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/route\x00') ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000440)=0x0) perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x4a, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ef4}, r3, 0x0, 0xffffffffffffffff, 0x1) pread64(0xffffffffffffffff, &(0x7f0000000000)=""/85, 0xfe42, 0x5d) r4 = memfd_create(&(0x7f0000000240)=':+lo#\x00', 0x0) fdatasync(r4) io_submit(r0, 0x1, &(0x7f0000001280)=[&(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f0000000100)}]) timerfd_create(0x7, 0x80800) io_destroy(r0) setsockopt$llc_int(r1, 0x10c, 0x9, &(0x7f0000000380)=0x3, 0x4) 2018/03/29 11:11:59 executing program 0: r0 = perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x4a, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffff9c, 0xc00caee0, &(0x7f0000000180)={0x0, r0, 0x1}) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) fcntl$getownex(r0, 0x10, &(0x7f0000000400)={0x0, 0x0}) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0xffff, 0xe3, 0x6, 0x4, 0x0, 0x7, 0x0, 0x2, 0x10001, 0x1, 0x7, 0x8, 0x100, 0x4, 0x0, 0x7f, 0x20, 0x0, 0x4, 0x5, 0x90a4, 0x7, 0x2, 0x73, 0x8, 0x7, 0x4, 0x7e0, 0x101, 0x0, 0x2, 0x309, 0x0, 0x9, 0xfffffffffffffff9, 0x9, 0x0, 0x4, 0x0, @perf_config_ext={0x0, 0x1}, 0x8140, 0x2, 0x0, 0x4, 0xca1, 0xb5}, r4, 0x4, r1, 0x8) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) futimesat(r1, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0)={{r2, r3/1000+10000}, {r5, r6/1000+10000}}) unshare(0x8000000) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0xdc, 0x40}, 0x341) r8 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8910, &(0x7f0000000080)=@buf={0x0, &(0x7f0000000000)}) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x13, &(0x7f0000000ffc), 0x4) mq_open(&(0x7f00000000c0)='syzkaller0\x00', 0x40, 0x8, &(0x7f0000000100)={0x5, 0x80000000, 0x0, 0xfffffffffffffff9, 0x1, 0xfffffffffffffffd, 0x7fff, 0x200}) socket$inet_tcp(0x2, 0x1, 0x0) r9 = dup3(r8, r7, 0x80000) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r9, 0x84, 0x66, &(0x7f00000002c0)={0x0, 0x8ed6}, &(0x7f0000000300)=0x1) bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) shmget(0xffffffffffffffff, 0x8000, 0x49b, &(0x7f0000ff8000/0x8000)=nil) ioctl$sock_inet_SIOCGIFPFLAGS(r8, 0x8935, &(0x7f0000000080)={'syzkaller0\x00'}) ppoll(&(0x7f0000000780)=[{r1, 0x300}, {r1, 0x8401}], 0x2, &(0x7f00000007c0)={0x77359400}, &(0x7f0000000800)={0x9}, 0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000280)={0x0, 0x0, 0x9}, 0x10) r10 = semget$private(0x0, 0x4, 0x0) semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0x0, 0x1000}], 0x1, &(0x7f0000000080)={0x0, 0x1c9c380}) semctl$IPC_RMID(r10, 0x0, 0x0) [ 318.799754] RBP: 0000000020001780 R08: 00007f032fc57b20 R09: 0000000000000000 [ 318.806997] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 318.814243] R13: 00000000000003ff R14: 0000000000000000 R15: ffffffffffffffff 2018/03/29 11:11:59 executing program 7: io_setup(0x3, &(0x7f0000000000)=0x0) accept$unix(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000100)=0x6e) r1 = syz_open_dev$usbmon(&(0x7f0000000200)='/dev/usbmon#\x00', 0x7ff, 0x0) io_cancel(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0xf, 0x3, 0xffffffffffffffff, &(0x7f0000000140)="940c1f2149747e7734510c34c143183667a187dc4f624f6c2de12452792a6fb529e6bf2a661dc23a844b00925c244a9f2967c0ca9868ee50eacf67a2ad7681d82f5a38cbd6d7641f843fa129e00f701fb01835f497b53672b3e5a3f6838f28aa240bf21eb5e5cbe7804fd307404474ae0242f8dea7a08e0fe9479b06f2795f857f8eec271d35ba7f61a91c87296814189cc1dfc9c659cc5437452a0bd178323c50e8c005ba7fa9519b27965c9f6ffbc7dcaa8e658616cc83188fb131a703222d", 0xc0, 0x5, 0x0, 0x1}, &(0x7f0000000280)) io_getevents(r0, 0x2, 0x8f, &(0x7f0000d83f60)=[{}, {}], &(0x7f00005cfff0)={0x4000000000001, 0x7}) io_getevents(r0, 0x0, 0x5, &(0x7f00000002c0)=[{}, {}, {}, {}, {}], &(0x7f00000003c0)) io_setup(0x7, &(0x7f0000000040)) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/route\x00') ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000440)=0x0) perf_event_open(&(0x7f0000aaa000)={0x0, 0x70, 0x4a, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ef4}, r3, 0x0, 0xffffffffffffffff, 0x1) pread64(r2, &(0x7f0000000000)=""/85, 0xfe42, 0x5d) r4 = memfd_create(&(0x7f0000000240)=':+lo#\x00', 0x0) ioctl$sock_inet_SIOCGIFADDR(r1, 0x8915, &(0x7f0000000480)={'nr0\x00', {0x2, 0x4e22, @rand_addr=0x3df}}) fdatasync(r4) io_submit(r0, 0x1, &(0x7f0000001280)=[&(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f0000000100)}]) timerfd_create(0x7, 0x80800) io_destroy(r0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x9, &(0x7f0000000380)=0x3, 0x4) 2018/03/29 11:11:59 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) readv(r0, &(0x7f0000001480)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x3}) r1 = syz_open_pts(r0, 0x2) r2 = dup3(r1, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f00000014c0)="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", 0x109) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0) preadv(r3, &(0x7f00000004c0)=[{&(0x7f0000000480)=""/21, 0x15}], 0x1, 0x0) fchdir(0xffffffffffffffff) mknodat(r2, &(0x7f0000001600)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f", 0x1000, 0x3) mkdir(&(0x7f0000000280)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f", 0xfffffffffffffffc) fchmod(r2, 0x0) splice(r3, &(0x7f0000000400), 0xffffffffffffffff, &(0x7f0000000440), 0x9, 0x2) rename(&(0x7f0000001e00)='./file0\x00', &(0x7f0000000100)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f") mkdir(&(0x7f000000e000)='./control\x00', 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000240)='/dev/hwrng\x00', 0x40, 0x0) r4 = open(&(0x7f0000000000)='./control\x00', 0x0, 0x0) renameat2(r4, &(0x7f0000000040)='./file0\x00', r4, &(0x7f0000000080)='./control\x00', 0x2) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000300)={0x0, 0x80}, &(0x7f0000000340)=0x8) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000380)={r5, 0x5}, &(0x7f00000003c0)=0x8) openat$autofs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/autofs\x00', 0x20002, 0x0) mknodat(r4, &(0x7f000003f000)='./control\x00', 0x0, 0x0) symlink(&(0x7f0000000180)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f", &(0x7f00000000c0)='./file0\x00') perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$intptr(0x1b, 0xffffffffffffffe1) execveat(r4, &(0x7f0000010000)='./control\x00', &(0x7f000003f000), &(0x7f0000001fe8), 0x0) 2018/03/29 11:11:59 executing program 3: io_setup(0x3, &(0x7f0000000000)=0x0) accept$unix(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000100)=0x6e) r1 = syz_open_dev$usbmon(&(0x7f0000000200)='/dev/usbmon#\x00', 0x7ff, 0x0) io_cancel(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0xf, 0x0, 0xffffffffffffffff, &(0x7f0000000140)="940c1f2149747e7734510c34c143183667a187dc4f624f6c2de12452792a6fb529e6bf2a661dc23a844b00925c244a9f2967c0ca9868ee50eacf67a2ad7681d82f5a38cbd6d7641f843fa129e00f701fb01835f497b53672b3e5a3f6838f28aa240bf21eb5e5cbe7804fd307404474ae0242f8dea7a08e0fe9479b06f2795f857f8eec271d35ba7f61a91c87296814189cc1dfc9c659cc5437452a0bd178323c50e8c005ba7fa9519b27965c9f6ffbc7dcaa8e658616cc83188fb131a703222d", 0xc0, 0x5, 0x0, 0x1, r1}, &(0x7f0000000280)) io_getevents(r0, 0x2, 0x8f, &(0x7f0000d83f60)=[{}, {}], &(0x7f00005cfff0)={0x4000000000001, 0x7}) io_getevents(r0, 0x0, 0x5, &(0x7f00000002c0)=[{}, {}, {}, {}, {}], &(0x7f00000003c0)) io_setup(0x7, &(0x7f0000000040)) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/route\x00') ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000440)=0x0) perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x4a, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ef4}, r3, 0x0, r1, 0x1) pread64(r2, &(0x7f0000000000)=""/85, 0xfe42, 0x5d) r4 = memfd_create(&(0x7f0000000240)=':+lo#\x00', 0x0) fdatasync(r4) io_submit(r0, 0x1, &(0x7f0000001280)=[&(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f0000000100)}]) io_destroy(r0) setsockopt$llc_int(r1, 0x10c, 0x9, &(0x7f0000000380)=0x3, 0x4) 2018/03/29 11:11:59 executing program 5: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) mkdir(&(0x7f0000000000)='./file1\x00', 0x0) munmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000811ffa)='bdev\x00', 0x0, &(0x7f0000444000)) mount(&(0x7f0000fb6000)='./file0\x00', &(0x7f0000d78000)='.', &(0x7f0000fdb000)='ubifs\x00', 0x1003, 0x0) mount(&(0x7f00002b9ff8)='./file0\x00', &(0x7f0000cbeff8)='./file0\x00', &(0x7f00005f7ffa)='ramfs\x00', 0x80000, &(0x7f000002f000)) mount(&(0x7f0000000040)='.', &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0)='binfmt_misc\x00', 0x0, &(0x7f0000000100)) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) mount(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./file1\x00', &(0x7f0000000200)='anon_inodefs\x00', 0x2000, &(0x7f0000000240)) mount(&(0x7f0000adcff8)='./file0\x00', &(0x7f0000e08fff)='.', &(0x7f00005e9000)='cifs\x00', 0x2000, &(0x7f0000ad5000)) 2018/03/29 11:11:59 executing program 6: openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x0, 0x0) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, &(0x7f0000000340)=0x1) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f000051cff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000943ffc)=0xa35) read(r0, &(0x7f00003fefff)=""/1, 0x1) r1 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000029000)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r0, &(0x7f0000dcdff0)=[{&(0x7f0000cd8000)=""/1, 0x1}], 0x1) ioctl$int_in(r2, 0x5452, &(0x7f0000b28000)=0x3c) write$cgroup_type(0xffffffffffffffff, &(0x7f00000002c0)='threaded\x00', 0x9) syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x0, 0x802) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000fb9000)) fcntl$setsig(r2, 0xa, 0x0) poll(&(0x7f0000b2c000)=[{r3}], 0x1, 0xfffffffffffffff8) read$eventfd(0xffffffffffffffff, &(0x7f0000000040), 0x8) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)) r4 = dup2(r2, r3) fcntl$setown(r4, 0x8, r1) ptrace$cont(0xffffffffffffffff, r1, 0x0, 0x8) tkill(r1, 0x16) r5 = gettid() process_vm_readv(r5, &(0x7f0000001880)=[{&(0x7f0000000680)=""/198, 0xc6}, {&(0x7f0000000780)=""/247, 0xf7}, {&(0x7f0000000380)=""/12, 0xc}, {&(0x7f00000003c0)=""/6, 0x6}, {&(0x7f0000000400)=""/14, 0xe}], 0x5, &(0x7f00000019c0)=[{&(0x7f0000001900)=""/41, 0x29}, {&(0x7f0000001940)=""/112, 0x70}], 0x2, 0x0) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f0000000240)={{{@in6}}, {{@in=@local}, 0x0, @in=@local}}, &(0x7f0000000100)=0xe8) 2018/03/29 11:11:59 executing program 2 (fault-call:21 fault-nth:12): r0 = syz_open_procfs(0x0, &(0x7f00000004c0)='oom_score_adj\x00') perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x49, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(r0, 0x0, 0x83, &(0x7f0000001800)={'nat\x00', 0x0, 0x3, 0x1000, [], 0x2, &(0x7f0000001280)=[{}, {}], &(0x7f0000002040)=""/4096}, &(0x7f00000013c0)=0x78) ioprio_get$pid(0x0, 0x0) timer_create(0x0, &(0x7f0000cd0000), &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00004b1fe0)={{0x0, 0x1c9c380}, {0x0, 0x9}}, &(0x7f0000040000)) r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x7fff) truncate(&(0x7f0000001180)='./bus\x00', 0x4) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000f40000)='/dev/ptmx\x00', 0x200000000101002, 0x0) sendfile(r2, 0xffffffffffffffff, &(0x7f00000010c0), 0x10000065) sendfile(r0, r1, &(0x7f0000000000), 0x4) tkill(0x0, 0x0) r3 = memfd_create(&(0x7f0000000000)='\x00', 0x1) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000001200)) recvmsg(0xffffffffffffff9c, &(0x7f0000001500)={&(0x7f00000012c0)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @remote}}}, 0x80, &(0x7f0000001400)=[{&(0x7f0000001340)=""/103, 0x67}], 0x1, &(0x7f0000001440)=""/155, 0x9b}, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000001540)) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000001640)={0x1ff, {0x2, 0x4e21}, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, {0x2, 0x0, @multicast2=0xe0000002}, 0x0, 0x9, 0x2, 0x6, 0x0, &(0x7f0000001240)='teql0\x00', 0x0, 0x80}) inotify_rm_watch(0xffffffffffffffff, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000140), &(0x7f0000000100)=0xffffffa4) getgroups(0x1, &(0x7f0000001600)=[0x0]) syz_fuseblk_mount(&(0x7f0000001740)='./file0\x00', &(0x7f0000001780)='./file0\x00', 0x0, 0x0, 0xffffffffffffffff, 0x3ff, 0x1, 0x0) getpgrp(0xffffffffffffffff) getegid() sendmmsg$unix(r3, &(0x7f0000001880), 0x0, 0x0) setsockopt$netrom_NETROM_T4(0xffffffffffffffff, 0x103, 0x6, &(0x7f00000017c0), 0xfffffffffffffc77) readv(0xffffffffffffffff, &(0x7f000004ffe0), 0x0) 2018/03/29 11:11:59 executing program 1: io_setup(0x3, &(0x7f0000000000)=0x0) accept$unix(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000100)=0x6e) r1 = syz_open_dev$usbmon(&(0x7f0000000200)='/dev/usbmon#\x00', 0x0, 0x0) io_cancel(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0xf, 0x3, 0xffffffffffffffff, &(0x7f0000000140)="940c1f2149747e7734510c34c143183667a187dc4f624f6c2de12452792a6fb529e6bf2a661dc23a844b00925c244a9f2967c0ca9868ee50eacf67a2ad7681d82f5a38cbd6d7641f843fa129e00f701fb01835f497b53672b3e5a3f6838f28aa240bf21eb5e5cbe7804fd307404474ae0242f8dea7a08e0fe9479b06f2795f857f8eec271d35ba7f61a91c87296814189cc1dfc9c659cc5437452a0bd178323c50e8c005ba7fa9519b27965c9f6ffbc7dcaa8e658616cc83188fb131a703222d", 0xc0, 0x5, 0x0, 0x1}, &(0x7f0000000280)) io_getevents(r0, 0x2, 0x8f, &(0x7f0000d83f60)=[{}, {}], &(0x7f00005cfff0)={0x4000000000001, 0x7}) io_getevents(r0, 0x0, 0x5, &(0x7f00000002c0)=[{}, {}, {}, {}, {}], &(0x7f00000003c0)) io_setup(0x7, &(0x7f0000000040)) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/route\x00') ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000440)=0x0) perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x4a, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ef4}, r3, 0x0, 0xffffffffffffffff, 0x1) pread64(r2, &(0x7f0000000000)=""/85, 0xfe42, 0x0) r4 = memfd_create(&(0x7f0000000240)=':+lo#\x00', 0x0) fdatasync(r4) io_submit(r0, 0x1, &(0x7f0000001280)=[&(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f0000000100)}]) timerfd_create(0x7, 0x80800) io_destroy(r0) setsockopt$llc_int(r1, 0x10c, 0x9, &(0x7f0000000380)=0x3, 0x4) [ 318.939431] FAULT_INJECTION: forcing a failure. [ 318.939431] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 318.951273] CPU: 0 PID: 8483 Comm: syz-executor2 Not tainted 4.16.0-rc7+ #5 [ 318.958366] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 318.967711] Call Trace: [ 318.970308] dump_stack+0x194/0x24d [ 318.973954] ? arch_local_irq_restore+0x53/0x53 [ 318.978635] should_fail+0x8c0/0xa40 [ 318.982356] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 318.987444] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 318.992642] ? find_held_lock+0x35/0x1d0 [ 318.996707] ? trace_hardirqs_off+0x10/0x10 [ 319.001020] ? __is_insn_slot_addr+0x1fc/0x330 [ 319.005601] ? lock_downgrade+0x980/0x980 [ 319.009739] ? find_held_lock+0x35/0x1d0 [ 319.013780] ? should_fail+0x23b/0xa40 [ 319.017643] ? is_bpf_text_address+0x7b/0x120 [ 319.022125] __alloc_pages_nodemask+0x327/0xdd0 [ 319.026767] ? lock_release+0xa40/0xa40 [ 319.030715] ? __alloc_pages_slowpath+0x2d10/0x2d10 [ 319.035710] ? find_held_lock+0x35/0x1d0 [ 319.039768] ? check_same_owner+0x320/0x320 [ 319.044080] cache_grow_begin+0x72/0x640 [ 319.048121] kmem_cache_alloc+0x400/0x760 [ 319.052254] getname_flags+0xcb/0x580 [ 319.056043] user_path_at_empty+0x2d/0x50 [ 319.060171] do_mount+0x15f/0x2bb0 [ 319.063696] ? copy_mount_string+0x40/0x40 [ 319.067922] ? rcu_pm_notify+0xc0/0xc0 [ 319.071794] ? copy_mount_options+0x5f/0x2e0 [ 319.076181] ? rcu_read_lock_sched_held+0x108/0x120 [ 319.081187] ? kmem_cache_alloc_trace+0x459/0x740 [ 319.086017] ? kasan_check_write+0x14/0x20 2018/03/29 11:11:59 executing program 6: openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x0, 0x0) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, &(0x7f0000000340)=0x1) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f000051cff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000943ffc)=0xa35) read(r0, &(0x7f00003fefff)=""/1, 0x1) r1 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000029000)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r0, &(0x7f0000dcdff0)=[{&(0x7f0000cd8000)=""/1, 0x1}], 0x1) ioctl$int_in(r2, 0x5452, &(0x7f0000b28000)=0x3c) write$cgroup_type(0xffffffffffffffff, &(0x7f00000002c0)='threaded\x00', 0x9) syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x0, 0x802) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000fb9000)) fcntl$setsig(r2, 0xa, 0x0) poll(&(0x7f0000b2c000)=[{r3}], 0x1, 0xfffffffffffffff8) read$eventfd(0xffffffffffffffff, &(0x7f0000000040), 0x8) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)) r4 = dup2(r2, r3) fcntl$setown(r4, 0x8, r1) ptrace$cont(0xffffffffffffffff, r1, 0x0, 0x8) tkill(r1, 0x16) r5 = gettid() process_vm_readv(r5, &(0x7f0000001880)=[{&(0x7f0000000680)=""/198, 0xc6}, {&(0x7f0000000780)=""/247, 0xf7}, {&(0x7f0000000380)=""/12, 0xc}, {&(0x7f00000003c0)=""/6, 0x6}, {&(0x7f0000000400)=""/14, 0xe}], 0x5, &(0x7f00000019c0)=[{&(0x7f0000001900)=""/41, 0x29}, {&(0x7f0000001940)=""/112, 0x70}], 0x2, 0x0) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f0000000240)={{{@in6}}, {{@in=@local}, 0x0, @in=@local}}, &(0x7f0000000100)=0xe8) [ 319.090230] ? _copy_from_user+0x99/0x110 [ 319.094369] ? copy_mount_options+0x1f7/0x2e0 [ 319.098849] SyS_mount+0xab/0x120 [ 319.102277] ? copy_mnt_ns+0xb30/0xb30 [ 319.106151] do_syscall_64+0x281/0x940 [ 319.110013] ? __do_page_fault+0xc90/0xc90 [ 319.114225] ? _raw_spin_unlock_irq+0x27/0x70 [ 319.118694] ? finish_task_switch+0x1c1/0x7e0 [ 319.123178] ? syscall_return_slowpath+0x550/0x550 [ 319.128106] ? syscall_return_slowpath+0x2ac/0x550 [ 319.133033] ? prepare_exit_to_usermode+0x350/0x350 [ 319.138050] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 319.143399] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 319.148230] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 319.153392] RIP: 0033:0x4548b9 [ 319.156556] RSP: 002b:00007f032fc57b08 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 319.164237] RAX: ffffffffffffffda RBX: 0000000000000019 RCX: 00000000004548b9 [ 319.171481] RDX: 00000000004b9225 RSI: 0000000020001740 RDI: 0000000020001780 [ 319.178728] RBP: 0000000020001780 R08: 00007f032fc57b20 R09: 0000000000000000 2018/03/29 11:11:59 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) readv(r0, &(0x7f0000001480)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x3}) r1 = syz_open_pts(r0, 0x2) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000240)={&(0x7f0000000200)='./file0\x00'}, 0x10) r2 = dup3(r1, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000c34fff), 0xffffff0b) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0) preadv(r3, &(0x7f00000004c0)=[{&(0x7f0000000480)=""/21, 0x15}], 0x1, 0x0) fchdir(0xffffffffffffffff) mkdir(&(0x7f0000000280)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f", 0xfffffffffffffffc) fchmod(r2, 0x0) ioctl$PIO_FONTX(r2, 0x4b6c, &(0x7f0000002000)="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") splice(r3, &(0x7f0000000400), 0xffffffffffffffff, &(0x7f0000000440), 0x9, 0x2) rename(&(0x7f0000001e00)='./file0\x00', &(0x7f0000000100)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f") mkdir(&(0x7f000000e000)='./control\x00', 0x0) recvfrom(r2, &(0x7f0000003000)=""/4096, 0x1000, 0x103, &(0x7f0000001540)=@nfc_llcp={0x27, 0x0, 0x1, 0x7, 0x8, 0x23, "b3266c309fad47b996525a5048f87d81aaaf77ff4c3420e93d73b09e1065968f17bb6251976355c8386feae03272da751d7cc5cb6996fc3e468992a096d833", 0x3f}, 0x80) r4 = open(&(0x7f0000000000)='./control\x00', 0x0, 0x0) renameat2(r4, &(0x7f0000000040)='./file0\x00', r4, &(0x7f0000000080)='./control\x00', 0x2) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f00000015c0)) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000300)={0x0, 0x80}, &(0x7f0000000340)=0x8) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000380)={r5, 0x5}, &(0x7f00000003c0)=0x8) mknodat(r4, &(0x7f000003f000)='./control\x00', 0x0, 0x0) symlink(&(0x7f0000000180)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f", &(0x7f00000000c0)='./file0\x00') perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_PIT2(r2, 0x4070aea0, &(0x7f00000014c0)={[{0x80, 0x5a, 0x7, 0x2, 0xffff, 0x1, 0x1ff, 0x6, 0x80000000, 0xed, 0x20, 0x9, 0x40}, {0x4, 0x61f, 0x6, 0x15d, 0x9, 0x1, 0x3, 0x200, 0x7, 0x9, 0x8, 0x3}, {0xfffffffffffffffe, 0x7b12cfbf, 0x4, 0x6846, 0x6, 0x7, 0xa8, 0x4, 0x10001, 0x1f, 0x1, 0x8, 0x2}], 0x10000}) execveat(r4, &(0x7f0000010000)='./control\x00', &(0x7f000003f000), &(0x7f0000001fe8), 0xc00) [ 319.185979] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 319.193241] R13: 00000000000003ff R14: 0000000000000000 R15: ffffffffffffffff 2018/03/29 11:11:59 executing program 0: r0 = perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x4a, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffff9c, 0xc00caee0, &(0x7f0000000180)={0x0, r0, 0x1}) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) fcntl$getownex(r0, 0x10, &(0x7f0000000400)={0x0, 0x0}) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0xffff, 0xe3, 0x6, 0x4, 0x0, 0x7, 0x0, 0x2, 0x10001, 0x1, 0x7, 0x8, 0x100, 0x4, 0x0, 0x7f, 0x20, 0x0, 0x4, 0x5, 0x90a4, 0x7, 0x2, 0x73, 0x8, 0x7, 0x4, 0x7e0, 0x101, 0x0, 0x2, 0x309, 0x0, 0x9, 0xfffffffffffffff9, 0x9, 0x0, 0x4, 0x0, @perf_config_ext={0x20}, 0x8140, 0x2, 0x0, 0x4, 0xca1, 0xb5}, r4, 0x4, r1, 0x8) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) futimesat(r1, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0)={{r2, r3/1000+10000}, {r5, r6/1000+10000}}) unshare(0x8000000) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0xdc, 0x40}, 0x341) r8 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8910, &(0x7f0000000080)=@buf={0x0, &(0x7f0000000000)}) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x13, &(0x7f0000000ffc), 0x4) mq_open(&(0x7f00000000c0)='syzkaller0\x00', 0x40, 0x8, &(0x7f0000000100)={0x5, 0x80000000, 0x0, 0xfffffffffffffff9, 0x1, 0xfffffffffffffffd, 0x7fff, 0x200}) socket$inet_tcp(0x2, 0x1, 0x0) r9 = dup3(r8, r7, 0x80000) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r9, 0x84, 0x66, &(0x7f00000002c0)={0x0, 0x8ed6}, &(0x7f0000000300)=0x1) bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) shmget(0xffffffffffffffff, 0x8000, 0x49b, &(0x7f0000ff8000/0x8000)=nil) ioctl$sock_inet_SIOCGIFPFLAGS(r8, 0x8935, &(0x7f0000000080)={'syzkaller0\x00'}) ppoll(&(0x7f0000000780)=[{r1, 0x300}, {r1, 0x8401}], 0x2, &(0x7f00000007c0)={0x77359400}, &(0x7f0000000800)={0x9}, 0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000280)={0x0, 0x0, 0x9}, 0x10) r10 = semget$private(0x0, 0x4, 0x0) semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0x0, 0x1000}], 0x1, &(0x7f0000000080)={0x0, 0x1c9c380}) semctl$IPC_RMID(r10, 0x0, 0x0) 2018/03/29 11:11:59 executing program 3: io_setup(0x3, &(0x7f0000000000)=0x0) accept$unix(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000100)=0x6e) r1 = syz_open_dev$usbmon(&(0x7f0000000200)='/dev/usbmon#\x00', 0x7ff, 0x0) io_cancel(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0xf, 0x0, 0xffffffffffffffff, &(0x7f0000000140)="940c1f2149747e7734510c34c143183667a187dc4f624f6c2de12452792a6fb529e6bf2a661dc23a844b00925c244a9f2967c0ca9868ee50eacf67a2ad7681d82f5a38cbd6d7641f843fa129e00f701fb01835f497b53672b3e5a3f6838f28aa240bf21eb5e5cbe7804fd307404474ae0242f8dea7a08e0fe9479b06f2795f857f8eec271d35ba7f61a91c87296814189cc1dfc9c659cc5437452a0bd178323c50e8c005ba7fa9519b27965c9f6ffbc7dcaa8e658616cc83188fb131a703222d", 0xc0, 0x5, 0x0, 0x1, r1}, &(0x7f0000000280)) io_getevents(r0, 0x2, 0x8f, &(0x7f0000d83f60)=[{}, {}], &(0x7f00005cfff0)={0x4000000000001, 0x7}) io_getevents(r0, 0x0, 0x5, &(0x7f00000002c0)=[{}, {}, {}, {}, {}], &(0x7f00000003c0)) io_setup(0x7, &(0x7f0000000040)) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/route\x00') ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000440)=0x0) perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x4a, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ef4}, r3, 0x0, r1, 0x1) pread64(r2, &(0x7f0000000000)=""/85, 0xfe42, 0x5d) r4 = memfd_create(&(0x7f0000000240)=':+lo#\x00', 0x0) fdatasync(r4) io_submit(r0, 0x1, &(0x7f0000001280)=[&(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f0000000100)}]) timerfd_create(0x7, 0x80800) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000480)={'bcsf0\x00', 0x0}) connect$can_bcm(r2, &(0x7f00000004c0)={0x1d, r5}, 0x10) io_destroy(r0) setsockopt$llc_int(r1, 0x10c, 0x9, &(0x7f0000000380)=0x3, 0x4) 2018/03/29 11:11:59 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) readv(r0, &(0x7f0000001480)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xfffffffffffffffe, 0x3, 0x0, 0x0, 0x0, 0xfffffffffffffffe}) r1 = syz_open_pts(r0, 0x2) r2 = dup3(r1, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000c34fff), 0xffffff0b) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0) preadv(r3, &(0x7f00000004c0)=[{&(0x7f0000000240)=""/21, 0x15}], 0x1, 0x0) fchdir(0xffffffffffffffff) setsockopt$inet6_IPV6_ADDRFORM(r2, 0x29, 0x1, &(0x7f0000000200)=0x2, 0x4) mkdir(&(0x7f0000000280)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f", 0xfffffffffffffffc) fchmod(r2, 0x0) splice(r3, &(0x7f0000000400), 0xffffffffffffffff, &(0x7f0000000440), 0x9, 0x2) rename(&(0x7f00000015c0)='./file0\x00', &(0x7f0000000100)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f") mkdir(&(0x7f000000e000)='./control\x00', 0x0) r4 = open(&(0x7f0000000000)='./control\x00', 0x0, 0x0) renameat2(r4, &(0x7f0000000040)='./file0\x00', r4, &(0x7f0000000080)='./control\x00', 0x2) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000300)={0x0, 0x80}, &(0x7f0000000340)=0x8) r6 = add_key(&(0x7f0000001580)='dns_resolver\x00', &(0x7f0000001600)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000001640)="8af2a9d7883dc9da4ed0d98cc68d0d3c8ddd491fd29e8917c6a56c0fdf8e98239826b56205d0fd94897996df197c4ae345768cf67cf761bfc74e81f8f9965ff268a4ffbe0ea694ec3d0015c4085b4e0287a0bdfa70c166746207a0359e658c9f83eb347640e9740435cb7506424126c697737e65e2f7d526771e5f021a26c01a2f818499600eb1481a1e5a6b09155d5d971c63f3432da330c3fc4dff7c9910f374d3001fc3534a3bd0ddde8bcd59fcf45d69daedf74be97c2299728bf3060731c01fd9aa865ea78b46dfb4f6bf0a931682c1f432300acbaf8898d02db67d68e3e3b7d7c0178f", 0xe6, 0xfffffffffffffff8) r7 = add_key(&(0x7f0000001740)='encrypted\x00', &(0x7f0000001780)={0x73, 0x79, 0x7a, 0x3}, &(0x7f00000017c0)="c2a8", 0x2, 0xfffffffffffffffa) r8 = request_key(&(0x7f0000001800)='dns_resolver\x00', &(0x7f0000001840)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000001880)='(+\x00', 0xfffffffffffffffb) keyctl$dh_compute(0x17, &(0x7f00000018c0)={r6, r7, r8}, &(0x7f0000001900)=""/90, 0x5a, &(0x7f00000019c0)={&(0x7f0000001980)={'sha1-avx2\x00'}}) r9 = openat$cgroup_ro(r4, &(0x7f0000001500)='rdma.current\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_CONTEXT(r9, 0x84, 0x11, &(0x7f0000001540)={r5, 0x3f}, 0x8) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000380)={r5, 0x5}, &(0x7f00000003c0)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f00000014c0)={0x6, 0x200, 0x4, 0xfffffffffffffffb, r10}, 0x10) mknodat(r4, &(0x7f000003f000)='./control\x00', 0x0, 0x0) symlink(&(0x7f0000000180)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f", &(0x7f00000000c0)='./file0\x00') perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(r4, &(0x7f0000010000)='./control\x00', &(0x7f000003f000), &(0x7f0000001fe8), 0x0) 2018/03/29 11:11:59 executing program 1: io_setup(0x3, &(0x7f0000000000)=0x0) accept$unix(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000100)=0x6e) r1 = syz_open_dev$usbmon(&(0x7f0000000200)='/dev/usbmon#\x00', 0x0, 0x0) io_cancel(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0xf, 0x3, 0xffffffffffffffff, &(0x7f0000000140)="940c1f2149747e7734510c34c143183667a187dc4f624f6c2de12452792a6fb529e6bf2a661dc23a844b00925c244a9f2967c0ca9868ee50eacf67a2ad7681d82f5a38cbd6d7641f843fa129e00f701fb01835f497b53672b3e5a3f6838f28aa240bf21eb5e5cbe7804fd307404474ae0242f8dea7a08e0fe9479b06f2795f857f8eec271d35ba7f61a91c87296814189cc1dfc9c659cc5437452a0bd178323c50e8c005ba7fa9519b27965c9f6ffbc7dcaa8e658616cc83188fb131a703222d", 0xc0, 0x5, 0x0, 0x1}, &(0x7f0000000280)) io_getevents(r0, 0x2, 0x8f, &(0x7f0000d83f60)=[{}, {}], &(0x7f00005cfff0)={0x4000000000001, 0x7}) io_getevents(r0, 0x0, 0x5, &(0x7f00000002c0)=[{}, {}, {}, {}, {}], &(0x7f00000003c0)) io_setup(0x7, &(0x7f0000000040)) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/route\x00') ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000440)=0x0) perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x4a, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ef4}, r3, 0x0, 0xffffffffffffffff, 0x1) pread64(r2, &(0x7f0000000000)=""/85, 0xfe42, 0x0) r4 = memfd_create(&(0x7f0000000240)=':+lo#\x00', 0x0) fdatasync(r4) io_submit(r0, 0x1, &(0x7f0000001280)=[&(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f0000000100)}]) timerfd_create(0x7, 0x80800) io_destroy(r0) setsockopt$llc_int(r1, 0x10c, 0x9, &(0x7f0000000380)=0x3, 0x4) 2018/03/29 11:11:59 executing program 7: io_setup(0x3, &(0x7f0000000000)=0x0) accept$unix(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000100)=0x6e) r1 = syz_open_dev$usbmon(&(0x7f0000000200)='/dev/usbmon#\x00', 0x7ff, 0x0) io_cancel(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0xf, 0x3, 0xffffffffffffffff, &(0x7f0000000140)="940c1f2149747e7734510c34c143183667a187dc4f624f6c2de12452792a6fb529e6bf2a661dc23a844b00925c244a9f2967c0ca9868ee50eacf67a2ad7681d82f5a38cbd6d7641f843fa129e00f701fb01835f497b53672b3e5a3f6838f28aa240bf21eb5e5cbe7804fd307404474ae0242f8dea7a08e0fe9479b06f2795f857f8eec271d35ba7f61a91c87296814189cc1dfc9c659cc5437452a0bd178323c50e8c005ba7fa9519b27965c9f6ffbc7dcaa8e658616cc83188fb131a703222d", 0xc0, 0x5, 0x0, 0x1}, &(0x7f0000000280)) io_getevents(r0, 0x2, 0x8f, &(0x7f0000d83f60)=[{}, {}], &(0x7f00005cfff0)={0x4000000000001, 0x7}) io_getevents(r0, 0x0, 0x5, &(0x7f00000002c0)=[{}, {}, {}, {}, {}], &(0x7f00000003c0)) io_setup(0x7, &(0x7f0000000040)) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/route\x00') ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000440)=0x0) perf_event_open(&(0x7f0000aaa000)={0x0, 0x70, 0x4a, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ef4}, r3, 0x0, 0xffffffffffffffff, 0x1) pread64(r2, &(0x7f0000000000)=""/85, 0xfe42, 0x5d) r4 = memfd_create(&(0x7f0000000240)=':+lo#\x00', 0x0) fdatasync(r4) io_submit(r0, 0x1, &(0x7f0000001280)=[&(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f0000000100)}]) timerfd_create(0x7, 0x80800) io_destroy(r0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x9, &(0x7f0000000380)=0x3, 0x4) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r1, 0xc008551c, &(0x7f0000000480)=ANY=[@ANYBLOB="0800000024000000060000000000080000000100010000000000000002000000070000000200000000920000"]) 2018/03/29 11:11:59 executing program 5: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) mkdir(&(0x7f0000000000)='./file1\x00', 0x0) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000811ffa)='bdev\x00', 0x0, &(0x7f0000444000)) mount(&(0x7f0000fb6000)='./file0\x00', &(0x7f0000d78000)='.', &(0x7f0000fdb000)='ubifs\x00', 0x1003, 0x0) mount(&(0x7f00002b9ff8)='./file0\x00', &(0x7f0000cbeff8)='./file0\x00', &(0x7f00005f7ffa)='ramfs\x00', 0x80000, &(0x7f000002f000)) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x80402, 0x0) accept4$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x0, @hyper}, 0x10, 0x80800) mount(&(0x7f0000000040)='.', &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0)='binfmt_misc\x00', 0x0, &(0x7f0000000100)) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) mount(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./file1\x00', &(0x7f0000000200)='anon_inodefs\x00', 0x2000, &(0x7f0000000240)) mount(&(0x7f0000adcff8)='./file0\x00', &(0x7f0000e08fff)='.', &(0x7f00005e9000)='cifs\x00', 0x2000, &(0x7f0000ad5000)) 2018/03/29 11:11:59 executing program 2 (fault-call:21 fault-nth:13): r0 = syz_open_procfs(0x0, &(0x7f00000004c0)='oom_score_adj\x00') perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x49, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(r0, 0x0, 0x83, &(0x7f0000001800)={'nat\x00', 0x0, 0x3, 0x1000, [], 0x2, &(0x7f0000001280)=[{}, {}], &(0x7f0000002040)=""/4096}, &(0x7f00000013c0)=0x78) ioprio_get$pid(0x0, 0x0) timer_create(0x0, &(0x7f0000cd0000), &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00004b1fe0)={{0x0, 0x1c9c380}, {0x0, 0x9}}, &(0x7f0000040000)) r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x7fff) truncate(&(0x7f0000001180)='./bus\x00', 0x4) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000f40000)='/dev/ptmx\x00', 0x200000000101002, 0x0) sendfile(r2, 0xffffffffffffffff, &(0x7f00000010c0), 0x10000065) sendfile(r0, r1, &(0x7f0000000000), 0x4) tkill(0x0, 0x0) r3 = memfd_create(&(0x7f0000000000)='\x00', 0x1) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000001200)) recvmsg(0xffffffffffffff9c, &(0x7f0000001500)={&(0x7f00000012c0)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @remote}}}, 0x80, &(0x7f0000001400)=[{&(0x7f0000001340)=""/103, 0x67}], 0x1, &(0x7f0000001440)=""/155, 0x9b}, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000001540)) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000001640)={0x1ff, {0x2, 0x4e21}, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, {0x2, 0x0, @multicast2=0xe0000002}, 0x0, 0x9, 0x2, 0x6, 0x0, &(0x7f0000001240)='teql0\x00', 0x0, 0x80}) inotify_rm_watch(0xffffffffffffffff, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000140), &(0x7f0000000100)=0xffffffa4) getgroups(0x1, &(0x7f0000001600)=[0x0]) syz_fuseblk_mount(&(0x7f0000001740)='./file0\x00', &(0x7f0000001780)='./file0\x00', 0x0, 0x0, 0xffffffffffffffff, 0x3ff, 0x1, 0x0) getpgrp(0xffffffffffffffff) getegid() sendmmsg$unix(r3, &(0x7f0000001880), 0x0, 0x0) setsockopt$netrom_NETROM_T4(0xffffffffffffffff, 0x103, 0x6, &(0x7f00000017c0), 0xfffffffffffffc77) readv(0xffffffffffffffff, &(0x7f000004ffe0), 0x0) 2018/03/29 11:11:59 executing program 6: openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x0, 0x0) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, &(0x7f0000000340)=0x1) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f000051cff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000943ffc)=0xa35) read(r0, &(0x7f00003fefff)=""/1, 0x1) r1 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000029000)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r0, &(0x7f0000dcdff0)=[{&(0x7f0000cd8000)=""/1, 0x1}], 0x1) ioctl$int_in(r2, 0x5452, &(0x7f0000b28000)=0x3c) write$cgroup_type(0xffffffffffffffff, &(0x7f00000002c0)='threaded\x00', 0x9) syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x0, 0x802) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000fb9000)) fcntl$setsig(r2, 0xa, 0x0) poll(&(0x7f0000b2c000)=[{r3}], 0x1, 0xfffffffffffffff8) read$eventfd(0xffffffffffffffff, &(0x7f0000000040), 0x8) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)) r4 = dup2(r2, r3) fcntl$setown(r4, 0x8, r1) ptrace$cont(0xffffffffffffffff, r1, 0x0, 0x8) tkill(r1, 0x16) r5 = gettid() process_vm_readv(r5, &(0x7f0000001880)=[{&(0x7f0000000680)=""/198, 0xc6}, {&(0x7f0000000780)=""/247, 0xf7}, {&(0x7f0000000380)=""/12, 0xc}, {&(0x7f00000003c0)=""/6, 0x6}, {&(0x7f0000000400)=""/14, 0xe}], 0x5, &(0x7f00000019c0)=[{&(0x7f0000001900)=""/41, 0x29}, {&(0x7f0000001940)=""/112, 0x70}], 0x2, 0x0) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f0000000240)={{{@in6}}, {{@in=@local}, 0x0, @in=@local}}, &(0x7f0000000100)=0xe8) [ 319.356453] FAULT_INJECTION: forcing a failure. [ 319.356453] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 319.368289] CPU: 1 PID: 8527 Comm: syz-executor2 Not tainted 4.16.0-rc7+ #5 [ 319.375365] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 319.384693] Call Trace: [ 319.387263] dump_stack+0x194/0x24d [ 319.390881] ? arch_local_irq_restore+0x53/0x53 [ 319.395539] should_fail+0x8c0/0xa40 [ 319.399231] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 319.404310] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 319.409478] ? print_irqtrace_events+0x270/0x270 [ 319.414218] ? find_held_lock+0x35/0x1d0 [ 319.418257] ? trace_hardirqs_off+0x10/0x10 [ 319.422560] ? __is_insn_slot_addr+0x1fc/0x330 [ 319.427116] ? lock_downgrade+0x980/0x980 [ 319.431250] ? find_held_lock+0x35/0x1d0 [ 319.435291] ? should_fail+0x23b/0xa40 [ 319.439152] ? is_bpf_text_address+0x7b/0x120 [ 319.443631] __alloc_pages_nodemask+0x327/0xdd0 [ 319.448274] ? lock_release+0xa40/0xa40 [ 319.452242] ? __alloc_pages_slowpath+0x2d10/0x2d10 [ 319.457242] ? find_held_lock+0x35/0x1d0 [ 319.461303] ? check_same_owner+0x320/0x320 [ 319.465610] cache_grow_begin+0x72/0x640 [ 319.469656] kmem_cache_alloc+0x400/0x760 [ 319.473795] getname_flags+0xcb/0x580 [ 319.477578] user_path_at_empty+0x2d/0x50 [ 319.481706] do_mount+0x15f/0x2bb0 [ 319.485229] ? copy_mount_string+0x40/0x40 [ 319.489440] ? rcu_pm_notify+0xc0/0xc0 [ 319.493315] ? copy_mount_options+0x5f/0x2e0 [ 319.497699] ? rcu_read_lock_sched_held+0x108/0x120 [ 319.502691] ? kmem_cache_alloc_trace+0x459/0x740 [ 319.507509] ? kasan_check_write+0x14/0x20 [ 319.511728] ? copy_mount_options+0x1f7/0x2e0 [ 319.516203] SyS_mount+0xab/0x120 [ 319.519630] ? copy_mnt_ns+0xb30/0xb30 [ 319.523495] do_syscall_64+0x281/0x940 [ 319.527357] ? __do_page_fault+0xc90/0xc90 [ 319.531568] ? _raw_spin_unlock_irq+0x27/0x70 [ 319.536040] ? finish_task_switch+0x1c1/0x7e0 [ 319.540514] ? syscall_return_slowpath+0x550/0x550 [ 319.545418] ? syscall_return_slowpath+0x2ac/0x550 [ 319.550323] ? prepare_exit_to_usermode+0x350/0x350 [ 319.555315] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 319.560657] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 319.565484] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 319.570649] RIP: 0033:0x4548b9 [ 319.573814] RSP: 002b:00007f032fc57b08 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 319.581499] RAX: ffffffffffffffda RBX: 0000000000000019 RCX: 00000000004548b9 [ 319.588744] RDX: 00000000004b9225 RSI: 0000000020001740 RDI: 0000000020001780 [ 319.595989] RBP: 0000000020001780 R08: 00007f032fc57b20 R09: 0000000000000000 2018/03/29 11:12:00 executing program 2 (fault-call:21 fault-nth:14): r0 = syz_open_procfs(0x0, &(0x7f00000004c0)='oom_score_adj\x00') perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x49, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(r0, 0x0, 0x83, &(0x7f0000001800)={'nat\x00', 0x0, 0x3, 0x1000, [], 0x2, &(0x7f0000001280)=[{}, {}], &(0x7f0000002040)=""/4096}, &(0x7f00000013c0)=0x78) ioprio_get$pid(0x0, 0x0) timer_create(0x0, &(0x7f0000cd0000), &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00004b1fe0)={{0x0, 0x1c9c380}, {0x0, 0x9}}, &(0x7f0000040000)) r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x7fff) truncate(&(0x7f0000001180)='./bus\x00', 0x4) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000f40000)='/dev/ptmx\x00', 0x200000000101002, 0x0) sendfile(r2, 0xffffffffffffffff, &(0x7f00000010c0), 0x10000065) sendfile(r0, r1, &(0x7f0000000000), 0x4) tkill(0x0, 0x0) r3 = memfd_create(&(0x7f0000000000)='\x00', 0x1) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000001200)) recvmsg(0xffffffffffffff9c, &(0x7f0000001500)={&(0x7f00000012c0)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @remote}}}, 0x80, &(0x7f0000001400)=[{&(0x7f0000001340)=""/103, 0x67}], 0x1, &(0x7f0000001440)=""/155, 0x9b}, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000001540)) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000001640)={0x1ff, {0x2, 0x4e21}, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, {0x2, 0x0, @multicast2=0xe0000002}, 0x0, 0x9, 0x2, 0x6, 0x0, &(0x7f0000001240)='teql0\x00', 0x0, 0x80}) inotify_rm_watch(0xffffffffffffffff, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000140), &(0x7f0000000100)=0xffffffa4) getgroups(0x1, &(0x7f0000001600)=[0x0]) syz_fuseblk_mount(&(0x7f0000001740)='./file0\x00', &(0x7f0000001780)='./file0\x00', 0x0, 0x0, 0xffffffffffffffff, 0x3ff, 0x1, 0x0) getpgrp(0xffffffffffffffff) getegid() sendmmsg$unix(r3, &(0x7f0000001880), 0x0, 0x0) setsockopt$netrom_NETROM_T4(0xffffffffffffffff, 0x103, 0x6, &(0x7f00000017c0), 0xfffffffffffffc77) readv(0xffffffffffffffff, &(0x7f000004ffe0), 0x0) 2018/03/29 11:12:00 executing program 5: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) mkdir(&(0x7f0000000000)='./file1\x00', 0x0) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000811ffa)='bdev\x00', 0x0, &(0x7f0000444000)) mount(&(0x7f0000fb6000)='./file0\x00', &(0x7f0000d78000)='.', &(0x7f0000fdb000)='ubifs\x00', 0x1003, 0x0) mount(&(0x7f00002b9ff8)='./file0\x00', &(0x7f0000cbeff8)='./file0\x00', &(0x7f00005f7ffa)='ramfs\x00', 0x80000, &(0x7f000002f000)) mount(&(0x7f0000000040)='.', &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0)='binfmt_misc\x00', 0x0, &(0x7f0000000100)) r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$EBT_SO_GET_INIT_ENTRIES(r0, 0x0, 0x83, &(0x7f0000000340)={'nat\x00', 0x0, 0x3, 0xcd, [], 0x5, &(0x7f0000000100)=[{}, {}, {}, {}, {}], &(0x7f0000000240)=""/205}, &(0x7f00000003c0)=0x78) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) mount(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./file1\x00', &(0x7f0000000200)='anon_inodefs\x00', 0x2000, &(0x7f0000000240)) mount(&(0x7f0000adcff8)='./file0\x00', &(0x7f0000e08fff)='.', &(0x7f00005e9000)='cifs\x00', 0x2000, &(0x7f0000ad5000)) [ 319.603232] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 319.610474] R13: 00000000000003ff R14: 0000000000000000 R15: ffffffffffffffff 2018/03/29 11:12:00 executing program 1: io_setup(0x3, &(0x7f0000000000)=0x0) accept$unix(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000100)=0x6e) r1 = syz_open_dev$usbmon(&(0x7f0000000200)='/dev/usbmon#\x00', 0x0, 0x0) io_cancel(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0xf, 0x3, 0xffffffffffffffff, &(0x7f0000000140)="940c1f2149747e7734510c34c143183667a187dc4f624f6c2de12452792a6fb529e6bf2a661dc23a844b00925c244a9f2967c0ca9868ee50eacf67a2ad7681d82f5a38cbd6d7641f843fa129e00f701fb01835f497b53672b3e5a3f6838f28aa240bf21eb5e5cbe7804fd307404474ae0242f8dea7a08e0fe9479b06f2795f857f8eec271d35ba7f61a91c87296814189cc1dfc9c659cc5437452a0bd178323c50e8c005ba7fa9519b27965c9f6ffbc7dcaa8e658616cc83188fb131a703222d", 0xc0, 0x5, 0x0, 0x1}, &(0x7f0000000280)) io_getevents(r0, 0x2, 0x8f, &(0x7f0000d83f60)=[{}, {}], &(0x7f00005cfff0)={0x4000000000001, 0x7}) io_getevents(r0, 0x0, 0x5, &(0x7f00000002c0)=[{}, {}, {}, {}, {}], &(0x7f00000003c0)) io_setup(0x7, &(0x7f0000000040)) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/route\x00') ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000440)=0x0) perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x4a, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ef4}, r3, 0x0, 0xffffffffffffffff, 0x1) pread64(r2, &(0x7f0000000000)=""/85, 0xfe42, 0x0) r4 = memfd_create(&(0x7f0000000240)=':+lo#\x00', 0x0) fdatasync(r4) io_submit(r0, 0x1, &(0x7f0000001280)=[&(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f0000000100)}]) timerfd_create(0x7, 0x80800) io_destroy(r0) setsockopt$llc_int(r1, 0x10c, 0x9, &(0x7f0000000380)=0x3, 0x4) 2018/03/29 11:12:00 executing program 7: io_setup(0x1b, &(0x7f0000000540)=0x0) accept$unix(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000100)=0x6e) r1 = syz_open_dev$usbmon(&(0x7f0000000200)='/dev/usbmon#\x00', 0x7ff, 0x0) io_cancel(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0xf, 0x3, 0xffffffffffffffff, &(0x7f0000000140)="940c1f2149747e7734510c34c143183667a187dc4f624f6c2de12452792a6fb529e6bf2a661dc23a844b00925c244a9f2967c0ca9868ee50eacf67a2ad7681d82f5a38cbd6d7641f843fa129e00f701fb01835f497b53672b3e5a3f6838f28aa240bf21eb5e5cbe7804fd307404474ae0242f8dea7a08e0fe9479b06f2795f857f8eec271d35ba7f61a91c87296814189cc1dfc9c659cc5437452a0bd178323c50e8c005ba7fa9519b27965c9f6ffbc7dcaa8e658616cc83188fb131a703222d", 0xc0, 0x5, 0x0, 0x1}, &(0x7f0000000280)) io_getevents(r0, 0x2, 0x8f, &(0x7f0000d83f60)=[{}, {}], &(0x7f00005cfff0)={0x4000000000001, 0x7}) io_getevents(r0, 0x0, 0x5, &(0x7f00000002c0)=[{}, {}, {}, {}, {}], &(0x7f00000003c0)) io_setup(0x7, &(0x7f0000000040)) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f00000004c0)={0x0}) ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000500)={r2, 0x1}) r3 = syz_open_procfs(0x0, &(0x7f0000000480)="25f04984a31c1c856500") ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f0000000440)=0x0) perf_event_open(&(0x7f0000aaa000)={0x0, 0x70, 0x4a, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ef4}, r4, 0x0, 0xffffffffffffffff, 0x1) pread64(r3, &(0x7f0000000000)=""/85, 0xfe42, 0x5d) r5 = memfd_create(&(0x7f0000000240)=':+lo#\x00', 0x0) fdatasync(r5) io_submit(r0, 0x1, &(0x7f0000001280)=[&(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, 0x0, r5, &(0x7f0000000100)}]) timerfd_create(0x7, 0x80800) io_destroy(r0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x9, &(0x7f0000000380)=0x3, 0x4) [ 319.706327] FAULT_INJECTION: forcing a failure. [ 319.706327] name failslab, interval 1, probability 0, space 0, times 0 [ 319.717738] CPU: 1 PID: 8547 Comm: syz-executor2 Not tainted 4.16.0-rc7+ #5 [ 319.724841] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 319.734184] Call Trace: [ 319.736772] dump_stack+0x194/0x24d [ 319.740411] ? arch_local_irq_restore+0x53/0x53 [ 319.745081] ? lock_downgrade+0x980/0x980 [ 319.749231] should_fail+0x8c0/0xa40 [ 319.752926] ? trace_hardirqs_off+0x10/0x10 [ 319.757232] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 319.762323] ? rcutorture_record_progress+0x10/0x10 [ 319.767325] ? is_bpf_text_address+0xa4/0x120 [ 319.771794] ? kernel_text_address+0x102/0x140 [ 319.776356] ? find_held_lock+0x35/0x1d0 [ 319.780413] ? check_same_owner+0x320/0x320 [ 319.784707] ? putname+0xee/0x130 [ 319.788142] ? filename_lookup+0x315/0x500 [ 319.792364] ? user_path_at_empty+0x40/0x50 [ 319.796675] ? rcu_note_context_switch+0x710/0x710 [ 319.801597] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7 2018/03/29 11:12:00 executing program 3: io_setup(0x3, &(0x7f0000000000)=0x0) accept$unix(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000100)=0x6e) r1 = syz_open_dev$usbmon(&(0x7f0000000200)='/dev/usbmon#\x00', 0x7ff, 0x0) io_cancel(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0xf, 0x0, 0xffffffffffffffff, &(0x7f0000000140)="940c1f2149747e7734510c34c143183667a187dc4f624f6c2de12452792a6fb529e6bf2a661dc23a844b00925c244a9f2967c0ca9868ee50eacf67a2ad7681d82f5a38cbd6d7641f843fa129e00f701fb01835f497b53672b3e5a3f6838f28aa240bf21eb5e5cbe7804fd307404474ae0242f8dea7a08e0fe9479b06f2795f857f8eec271d35ba7f61a91c87296814189cc1dfc9c659cc5437452a0bd178323c50e8c005ba7fa9519b27965c9f6ffbc7dcaa8e658616cc83188fb131a703222d", 0xc0, 0x5, 0x0, 0x1, r1}, &(0x7f0000000280)) io_getevents(r0, 0x2, 0x8f, &(0x7f0000d83f60)=[{}, {}], &(0x7f00005cfff0)={0x4000000000001, 0x7}) io_getevents(r0, 0x0, 0x5, &(0x7f00000002c0)=[{}, {}, {}, {}, {}], &(0x7f00000003c0)) io_setup(0x7, &(0x7f0000000040)) r2 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/route\x00') fdatasync(r2) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000440)=0x0) syz_open_dev$mice(&(0x7f0000000480)='/dev/input/mice\x00', 0x0, 0x0) perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x4a, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ef4}, r3, 0x0, r1, 0x1) pread64(r2, &(0x7f0000000000)=""/85, 0xfe42, 0x5d) r4 = memfd_create(&(0x7f0000000240)=':+lo#\x00', 0x0) connect$bt_sco(r1, &(0x7f0000000500)={0x1f, {0x6, 0x5, 0x6, 0x6, 0x0, 0x100000001}}, 0x8) fdatasync(r4) io_submit(r0, 0x1, &(0x7f0000001280)=[&(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f0000000100)}]) timerfd_create(0x7, 0x80800) io_destroy(r0) setsockopt$llc_int(r1, 0x10c, 0x9, &(0x7f0000000380)=0x3, 0x4) 2018/03/29 11:12:00 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) readv(r0, &(0x7f0000001480), 0x1000000000000022) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x3}) r1 = syz_open_pts(r0, 0x2) r2 = dup3(r1, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000c34fff), 0xffffff0b) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0) preadv(r3, &(0x7f00000004c0)=[{&(0x7f0000000480)=""/21, 0x15}], 0x1, 0x0) getsockopt$ARPT_SO_GET_INFO(r2, 0x0, 0x60, &(0x7f00000005c0)={'filter\x00'}, &(0x7f0000000640)=0x44) fchdir(0xffffffffffffffff) mkdir(&(0x7f0000000280)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f", 0xfffffffffffffffc) fchmod(r2, 0x0) splice(r3, &(0x7f0000000400), 0xffffffffffffffff, &(0x7f0000000440), 0x9, 0x2) rename(&(0x7f0000001e00)='./file0\x00', &(0x7f0000000100)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f") mkdir(&(0x7f000000e000)='./control\x00', 0x0) sendmsg$rds(r2, &(0x7f0000001bc0)={&(0x7f0000000200)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10, &(0x7f0000001580)=[{&(0x7f0000000240)=""/9, 0x9}, {&(0x7f00000014c0)=""/159, 0x9f}, {&(0x7f0000002000)=""/4096, 0x1000}, {&(0x7f0000003000)=""/4096, 0x1000}], 0x4, &(0x7f0000001940)=ANY=[@ANYBLOB="580000000000000014010000060000000800000000000000", @ANYPTR=&(0x7f00000015c0)=ANY=[@ANYBLOB="0200000000000000"], @ANYPTR=&(0x7f0000001600)=ANY=[@ANYBLOB="0104000000000000"], @ANYBLOB="03000000000000000600000000000000090000000000000000000000000000000200000000000000010001000000000018000000000000001401000002000000bc0f00000700000058000000000000001401000006000000faffffff05000000", @ANYPTR=&(0x7f0000001640)=ANY=[@ANYBLOB="0200000000000000"], @ANYPTR=&(0x7f0000001680)=ANY=[@ANYBLOB="be07000000000000"], @ANYBLOB="03000000000000000300000000000000ffff000000000000ff0300000000000002000000000000000100000000000000580000000000000014010000060000000300000035000000", @ANYPTR=&(0x7f00000016c0)=ANY=[@ANYBLOB="0400000000000000"], @ANYPTR=&(0x7f0000000500)=ANY=[@ANYBLOB="010000000000000084649f63cc7cc757e76df1968f6b19f9bf61d41dd28377eca721c4fa75334ec61bbf3aa944cb0f1ba76509cc2eea6df723cecb7faa0aa1df8f51545973645f6acb34c35aa679fc610f72b150a8388f1adddade7588bea65e22a2153676d0d361cad4c921a15df843cbe39204d08571885ab48508dc8456b5101432a84e5e36925bdd1df9bf"], @ANYBLOB="0200000000000000fed30000000000007f0000000000000002000000000000004400000000000000000000000000000058000000000000001401000008000000ffffffff20000000", @ANYPTR=&(0x7f0000001c00)=ANY=[@ANYBLOB="050000000000008078edb77d809005cf9e4477b6f8e560207e841a2e2355b8a496ce476b092e71729305fa79b0fdc98a61f5177b809b02aba86c"], @ANYPTR=&(0x7f0000001780)=ANY=[@ANYBLOB="ffffffff00000000"], @ANYBLOB="070000000000000006000000000000000100000000000000060000000000000050000000000000008100000000000000580000000000000014010000090000000800000001000000", @ANYPTR=&(0x7f00000017c0)=ANY=[@ANYBLOB="0100008000000000"], @ANYPTR=&(0x7f0000001800)=ANY=[@ANYBLOB="0180000000000000"], @ANYBLOB="08000000000000000200000000000000040000000000000081000000000000002400000000000000ff070000000000005800000000000000140100000600000000000080fc110000", @ANYPTR=&(0x7f0000001840)=ANY=[@ANYBLOB="7f00000000000000"], @ANYPTR=&(0x7f0000001880)=ANY=[@ANYBLOB="38fe000000000000"], @ANYBLOB="0800000000000000ffff000000000000ffffffff00000000050000000000000001000000000000000800000000000000580000000000000014010000080000000100000006000000", @ANYPTR=&(0x7f00000018c0)=ANY=[@ANYBLOB='\x00\b\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000001900)=ANY=[@ANYBLOB="0002000000000000"], @ANYBLOB="04000000000000000104000000000000f70700000000000005000000000000002c000000000000007800000000000000"], 0x280, 0x4000000}, 0x4) r4 = open(&(0x7f0000000000)='./control\x00', 0x0, 0x0) renameat2(r4, &(0x7f0000000040)='./file0\x00', r4, &(0x7f0000000080)='./control\x00', 0x2) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000300)={0x0, 0x80}, &(0x7f0000000340)=0x8) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000380)={r5, 0x5}, &(0x7f00000003c0)=0x8) mknodat(r4, &(0x7f000003f000)='./control\x00', 0x0, 0x0) symlink(&(0x7f0000000180)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f", &(0x7f00000000c0)='./file0\x00') perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(r4, &(0x7f0000010000)='./control\x00', &(0x7f000003f000), &(0x7f0000001fe8), 0x0) [ 319.806969] should_failslab+0xec/0x120 [ 319.810946] kmem_cache_alloc+0x47/0x760 [ 319.815010] ? free_obj_work+0x690/0x690 [ 319.819077] alloc_vfsmnt+0xe0/0x9c0 [ 319.822795] ? path_lookupat+0x238/0xba0 [ 319.826851] ? mnt_free_id.isra.21+0x50/0x50 [ 319.831251] ? trace_hardirqs_off+0x10/0x10 [ 319.835571] ? putname+0xee/0x130 [ 319.839028] ? putname+0xee/0x130 [ 319.842463] ? rcu_read_lock_sched_held+0x108/0x120 [ 319.847458] ? find_held_lock+0x35/0x1d0 [ 319.851516] ? __get_fs_type+0x8a/0xc0 2018/03/29 11:12:00 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) readv(r0, &(0x7f0000001480)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x3}) r1 = syz_open_pts(r0, 0x2) r2 = dup3(r1, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000c34fff), 0xffffff0b) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup/syz0\x00', 0x200002, 0x0) preadv(r3, &(0x7f00000004c0)=[{&(0x7f0000000480)=""/21, 0x15}], 0x1, 0x0) fchdir(0xffffffffffffffff) mkdir(&(0x7f0000000280)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f", 0xfffffffffffffffc) fchmod(r2, 0x0) splice(r3, &(0x7f0000000400), 0xffffffffffffffff, &(0x7f0000000440), 0x9, 0x2) rename(&(0x7f0000001e00)='./file0\x00', &(0x7f0000000100)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f") mkdir(&(0x7f000000e000)='./control\x00', 0x0) readv(r1, &(0x7f0000001800)=[{&(0x7f0000000200)=""/32, 0x20}, {&(0x7f00000014c0)=""/208, 0xd0}, {&(0x7f00000015c0)=""/53, 0x35}, {&(0x7f0000002000)=""/4096, 0x1000}, {&(0x7f0000001600)=""/162, 0xa2}, {&(0x7f00000016c0)=""/151, 0x97}, {&(0x7f0000003000)=""/4096, 0x1000}, {&(0x7f0000001780)=""/43, 0x2b}, {&(0x7f00000017c0)=""/26, 0x1a}], 0x9) r4 = open(&(0x7f0000000000)='./control\x00', 0x0, 0x0) renameat2(r4, &(0x7f0000000040)='./file0\x00', r4, &(0x7f0000000080)='./control\x00', 0x2) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000300)={0x0, 0x80}, &(0x7f0000000340)=0x8) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000380)={r5, 0x5}, &(0x7f00000003c0)=0x8) mknodat(r4, &(0x7f000003f000)='./control\x00', 0x0, 0x0) symlink(&(0x7f0000000180)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f", &(0x7f00000000c0)='./file0\x00') perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(r4, &(0x7f0000010000)='./control\x00', &(0x7f000003f000), &(0x7f0000001fe8), 0x0) [ 319.855391] ? lock_downgrade+0x980/0x980 [ 319.859527] ? module_unload_free+0x5b0/0x5b0 [ 319.864017] ? lock_release+0xa40/0xa40 [ 319.867993] ? mpi_resize+0x200/0x200 [ 319.871805] vfs_kern_mount.part.26+0x84/0x4a0 [ 319.876382] ? may_umount+0xa0/0xa0 [ 319.879987] ? _raw_read_unlock+0x22/0x30 [ 319.884118] ? __get_fs_type+0x8a/0xc0 [ 319.887994] do_mount+0xea4/0x2bb0 [ 319.891521] ? copy_mount_string+0x40/0x40 [ 319.895749] ? rcu_pm_notify+0xc0/0xc0 [ 319.899635] ? copy_mount_options+0x5f/0x2e0 [ 319.904031] ? rcu_read_lock_sched_held+0x108/0x120 [ 319.909041] ? kmem_cache_alloc_trace+0x459/0x740 [ 319.913880] ? kasan_check_write+0x14/0x20 [ 319.918107] ? copy_mount_options+0x1f7/0x2e0 [ 319.922685] SyS_mount+0xab/0x120 [ 319.926129] ? copy_mnt_ns+0xb30/0xb30 [ 319.930016] do_syscall_64+0x281/0x940 [ 319.933894] ? __do_page_fault+0xc90/0xc90 [ 319.938115] ? _raw_spin_unlock_irq+0x27/0x70 [ 319.942594] ? finish_task_switch+0x1c1/0x7e0 [ 319.947095] ? syscall_return_slowpath+0x550/0x550 [ 319.952001] ? syscall_return_slowpath+0x2ac/0x550 2018/03/29 11:12:00 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) readv(r0, &(0x7f0000001480)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rfkill\x00', 0x202000, 0x0) getsockopt$inet_pktinfo(0xffffffffffffff9c, 0x0, 0x8, &(0x7f0000000240)={0x0, @local, @broadcast}, &(0x7f00000014c0)=0xc) connect$can_bcm(r1, &(0x7f0000001500)={0x1d, r2}, 0x10) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x3}) getsockopt$IP_VS_SO_GET_TIMEOUT(r1, 0x0, 0x486, &(0x7f0000000300), &(0x7f0000000340)=0xc) r3 = syz_open_pts(r0, 0x2) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000001600)={0x1, 0x3, 0x1, 0x80000000, 0x658, 0x0, 0x4000000000000, 0x700, 0x9, 0x4, 0x4, 0x1f}) r4 = dup3(r3, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000c34fff), 0xffffff0b) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0) preadv(r5, &(0x7f00000004c0)=[{&(0x7f0000000480)=""/21, 0x15}], 0x1, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x80, 0x0) fchdir(0xffffffffffffffff) mkdir(&(0x7f0000000280)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f", 0xfffffffffffffffc) fchmod(r4, 0x0) splice(r5, &(0x7f0000001540), 0xffffffffffffffff, &(0x7f0000000440), 0x9, 0x2) rename(&(0x7f0000001e00)='./file0\x00', &(0x7f0000000100)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f") mkdir(&(0x7f000000e000)='./control\x00', 0x0) r6 = open(&(0x7f0000000000)='./control\x00', 0x0, 0x0) renameat2(r6, &(0x7f0000000040)='./file0\x00', r6, &(0x7f0000000080)='./control\x00', 0x2) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r6, 0x84, 0x76, &(0x7f00000015c0)={0x0, 0x80}, &(0x7f0000001580)=0x8) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r6, 0x84, 0x76, &(0x7f0000000380)={r7, 0x5}, &(0x7f00000003c0)=0x8) mknodat(r6, &(0x7f000003f000)='./control\x00', 0x0, 0x0) symlink(&(0x7f0000000180)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f", &(0x7f00000000c0)='./file0\x00') perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(r6, &(0x7f0000010000)='./control\x00', &(0x7f000003f000), &(0x7f0000001fe8), 0x0) [ 319.956928] ? prepare_exit_to_usermode+0x350/0x350 [ 319.961935] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 319.967294] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 319.972150] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 319.977325] RIP: 0033:0x4548b9 [ 319.980500] RSP: 002b:00007f032fc57b08 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 319.988203] RAX: ffffffffffffffda RBX: 0000000000000019 RCX: 00000000004548b9 [ 319.995462] RDX: 00000000004b9225 RSI: 0000000020001740 RDI: 0000000020001780 2018/03/29 11:12:00 executing program 0: r0 = perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x4a, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffff9c, 0xc00caee0, &(0x7f0000000180)={0x0, r0, 0x1}) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) fcntl$getownex(r0, 0x10, &(0x7f0000000400)={0x0, 0x0}) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0xffff, 0xe3, 0x6, 0x4, 0x0, 0x7, 0x0, 0x2, 0x10001, 0x1, 0x7, 0x8, 0x100, 0x4, 0x0, 0x7f, 0x20, 0x0, 0x4, 0x5, 0x90a4, 0x7, 0x2, 0x73, 0x8, 0x7, 0x4, 0x7e0, 0x101, 0x0, 0x2, 0x309, 0x0, 0x9, 0xfffffffffffffff9, 0x9, 0x0, 0x4, 0x0, @perf_config_ext={0x20}, 0x8140, 0x2, 0x0, 0x4, 0xca1, 0xb5}, r4, 0x4, r1, 0x8) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) futimesat(r1, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0)={{r2, r3/1000+10000}, {r5, r6/1000+10000}}) unshare(0x8000000) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0xdc, 0x40}, 0x341) r8 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8910, &(0x7f0000000080)=@buf={0x0, &(0x7f0000000000)}) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x13, &(0x7f0000000ffc), 0x4) mq_open(&(0x7f00000000c0)='syzkaller0\x00', 0x40, 0x8, &(0x7f0000000100)={0x5, 0x80000000, 0x0, 0xfffffffffffffff9, 0x1, 0xfffffffffffffffd, 0x7fff, 0x200}) socket$inet_tcp(0x2, 0x1, 0x0) r9 = dup3(r8, r7, 0x80000) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r9, 0x84, 0x66, &(0x7f00000002c0)={0x0, 0x8ed6}, &(0x7f0000000300)=0x1) bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) shmget(0xffffffffffffffff, 0x8000, 0x49b, &(0x7f0000ff8000/0x8000)=nil) ioctl$sock_inet_SIOCGIFPFLAGS(r8, 0x8935, &(0x7f0000000080)={'syzkaller0\x00'}) ppoll(&(0x7f0000000780)=[{r1, 0x300}, {r1, 0x8401}], 0x2, &(0x7f00000007c0)={0x77359400}, &(0x7f0000000800)={0x9}, 0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000280)={0x0, 0x0, 0x9}, 0x10) r10 = semget$private(0x0, 0x4, 0x0) semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0x0, 0x1000}], 0x1, &(0x7f0000000080)={0x0, 0x1c9c380}) semctl$IPC_RMID(r10, 0x0, 0x0) [ 320.002709] RBP: 0000000020001780 R08: 00007f032fc57b20 R09: 0000000000000000 [ 320.009964] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 320.017217] R13: 00000000000003ff R14: 0000000000000000 R15: ffffffffffffffff [ 320.138354] bond0 (unregistering): Released all slaves [ 320.824059] IPVS: ftp: loaded support on port[0] = 21 [ 321.129381] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 321.575990] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 321.582100] 8021q: adding VLAN 0 to HW filter on device bond0 [ 321.628734] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready 2018/03/29 11:12:02 executing program 6: openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x0, 0x0) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, &(0x7f0000000340)=0x1) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f000051cff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000943ffc)=0xa35) read(r0, &(0x7f00003fefff)=""/1, 0x1) r1 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000029000)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r0, &(0x7f0000dcdff0)=[{&(0x7f0000cd8000)=""/1, 0x1}], 0x1) ioctl$int_in(r2, 0x5452, &(0x7f0000b28000)=0x3c) write$cgroup_type(0xffffffffffffffff, &(0x7f00000002c0)='threaded\x00', 0x9) syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x0, 0x802) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000fb9000)) fcntl$setsig(r2, 0xa, 0x12) poll(&(0x7f0000b2c000), 0x0, 0xfffffffffffffff8) read$eventfd(0xffffffffffffffff, &(0x7f0000000040), 0x8) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)) r4 = dup2(r2, r3) fcntl$setown(r4, 0x8, r1) ptrace$cont(0xffffffffffffffff, r1, 0x0, 0x8) tkill(r1, 0x16) r5 = gettid() process_vm_readv(r5, &(0x7f0000001880)=[{&(0x7f0000000680)=""/198, 0xc6}, {&(0x7f0000000780)=""/247, 0xf7}, {&(0x7f0000000380)=""/12, 0xc}, {&(0x7f00000003c0)=""/6, 0x6}, {&(0x7f0000000400)=""/14, 0xe}], 0x5, &(0x7f00000019c0)=[{&(0x7f0000001900)=""/41, 0x29}, {&(0x7f0000001940)=""/112, 0x70}], 0x2, 0x0) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f0000000240)={{{@in6}}, {{@in=@local}, 0x0, @in=@local}}, &(0x7f0000000100)=0xe8) 2018/03/29 11:12:02 executing program 2 (fault-call:21 fault-nth:15): r0 = syz_open_procfs(0x0, &(0x7f00000004c0)='oom_score_adj\x00') perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x49, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(r0, 0x0, 0x83, &(0x7f0000001800)={'nat\x00', 0x0, 0x3, 0x1000, [], 0x2, &(0x7f0000001280)=[{}, {}], &(0x7f0000002040)=""/4096}, &(0x7f00000013c0)=0x78) ioprio_get$pid(0x0, 0x0) timer_create(0x0, &(0x7f0000cd0000), &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00004b1fe0)={{0x0, 0x1c9c380}, {0x0, 0x9}}, &(0x7f0000040000)) r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x7fff) truncate(&(0x7f0000001180)='./bus\x00', 0x4) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000f40000)='/dev/ptmx\x00', 0x200000000101002, 0x0) sendfile(r2, 0xffffffffffffffff, &(0x7f00000010c0), 0x10000065) sendfile(r0, r1, &(0x7f0000000000), 0x4) tkill(0x0, 0x0) r3 = memfd_create(&(0x7f0000000000)='\x00', 0x1) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000001200)) recvmsg(0xffffffffffffff9c, &(0x7f0000001500)={&(0x7f00000012c0)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @remote}}}, 0x80, &(0x7f0000001400)=[{&(0x7f0000001340)=""/103, 0x67}], 0x1, &(0x7f0000001440)=""/155, 0x9b}, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000001540)) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000001640)={0x1ff, {0x2, 0x4e21}, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, {0x2, 0x0, @multicast2=0xe0000002}, 0x0, 0x9, 0x2, 0x6, 0x0, &(0x7f0000001240)='teql0\x00', 0x0, 0x80}) inotify_rm_watch(0xffffffffffffffff, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000140), &(0x7f0000000100)=0xffffffa4) getgroups(0x1, &(0x7f0000001600)=[0x0]) syz_fuseblk_mount(&(0x7f0000001740)='./file0\x00', &(0x7f0000001780)='./file0\x00', 0x0, 0x0, 0xffffffffffffffff, 0x3ff, 0x1, 0x0) getpgrp(0xffffffffffffffff) getegid() sendmmsg$unix(r3, &(0x7f0000001880), 0x0, 0x0) setsockopt$netrom_NETROM_T4(0xffffffffffffffff, 0x103, 0x6, &(0x7f00000017c0), 0xfffffffffffffc77) readv(0xffffffffffffffff, &(0x7f000004ffe0), 0x0) 2018/03/29 11:12:02 executing program 5: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) mkdir(&(0x7f0000000000)='./file1\x00', 0x80) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000811ffa)='bdev\x00', 0x0, &(0x7f0000444000)) mount(&(0x7f0000fb6000)='./file0\x00', &(0x7f0000d78000)='.', &(0x7f0000fdb000)='ubifs\x00', 0x1003, 0x0) mount(&(0x7f00002b9ff8)='.', &(0x7f0000cbeff8)='./file0\x00', &(0x7f00000013c0)="1f0000000000", 0x80000, &(0x7f000002f000)) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000001340)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) bind$vsock_dgram(r0, &(0x7f0000001380)={0x28, 0x0, 0x0, @my=0x1}, 0x10) mount(&(0x7f0000000040)='.', &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0)='binfmt_misc\x00', 0x0, &(0x7f0000000100)) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) mount(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./file1\x00', &(0x7f0000000200)='anon_inodefs\x00', 0x2000, &(0x7f0000000240)) mount(&(0x7f0000adcff8)='./file0\x00', &(0x7f0000e08fff)='.', &(0x7f00005e9000)='cifs\x00', 0x2000, &(0x7f0000ad5000)) r1 = syz_open_dev$audion(&(0x7f0000000100)='/dev/audio#\x00', 0x10001, 0x4400) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffff9c, 0x84, 0xe, &(0x7f0000000240)={0x0, 0x0, 0x7fffffff, 0x7, 0x7, 0xffffffffffffffe1, 0x10000, 0x3, {0x0, @in={{0x2, 0x4e21, @broadcast=0xffffffff}}, 0x6, 0x6, 0x0, 0x2, 0x200000}}, &(0x7f0000000140)=0xb0) setsockopt$inet_sctp_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000300)=ANY=[@ANYRES32=r2, @ANYBLOB="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"], 0x1008) 2018/03/29 11:12:02 executing program 1: io_setup(0x3, &(0x7f0000000000)=0x0) accept$unix(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000100)=0x6e) r1 = syz_open_dev$usbmon(&(0x7f0000000200)='/dev/usbmon#\x00', 0x0, 0x0) io_cancel(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0xf, 0x3, 0xffffffffffffffff, &(0x7f0000000140)="940c1f2149747e7734510c34c143183667a187dc4f624f6c2de12452792a6fb529e6bf2a661dc23a844b00925c244a9f2967c0ca9868ee50eacf67a2ad7681d82f5a38cbd6d7641f843fa129e00f701fb01835f497b53672b3e5a3f6838f28aa240bf21eb5e5cbe7804fd307404474ae0242f8dea7a08e0fe9479b06f2795f857f8eec271d35ba7f61a91c87296814189cc1dfc9c659cc5437452a0bd178323c50e8c005ba7fa9519b27965c9f6ffbc7dcaa8e658616cc83188fb131a703222d", 0xc0, 0x5, 0x0, 0x1}, &(0x7f0000000280)) io_getevents(r0, 0x2, 0x8f, &(0x7f0000d83f60)=[{}, {}], &(0x7f00005cfff0)={0x4000000000001, 0x7}) io_getevents(r0, 0x0, 0x5, &(0x7f00000002c0)=[{}, {}, {}, {}, {}], &(0x7f00000003c0)) io_setup(0x7, &(0x7f0000000040)) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/route\x00') ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000440)=0x0) perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x4a, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ef4}, r3, 0x0, 0xffffffffffffffff, 0x1) pread64(r2, &(0x7f0000000000)=""/85, 0xfe42, 0x5d) r4 = memfd_create(&(0x7f0000000240)=':+lo#\x00', 0x0) fdatasync(0xffffffffffffffff) io_submit(r0, 0x1, &(0x7f0000001280)=[&(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f0000000100)}]) timerfd_create(0x7, 0x80800) io_destroy(r0) setsockopt$llc_int(r1, 0x10c, 0x9, &(0x7f0000000380)=0x3, 0x4) 2018/03/29 11:12:02 executing program 7: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000480)='/dev/rfkill\x00', 0x40, 0x0) ioctl$KVM_SET_SREGS(r0, 0x4138ae84, &(0x7f00000004c0)={{0x100000, 0xd000, 0x4, 0x0, 0x1000000000000, 0xfffffffffffffc01, 0x1000, 0x41, 0x400, 0x1, 0x5, 0x7f}, {0x102001, 0x1000, 0x8, 0x0, 0x400, 0xfffffffffffffffc, 0x0, 0x4, 0x7ff, 0x101, 0x10000, 0x8be2}, {0x4, 0xf000, 0x8, 0xcf, 0x7, 0x2, 0x5cb, 0x8, 0xb39, 0x6, 0x7, 0x100000000}, {0x5002, 0x10000, 0x8, 0x9, 0x9, 0x7f, 0x9, 0x8, 0x1, 0x0, 0x47, 0x7fff}, {0x0, 0x4, 0x3, 0x10001, 0x81, 0x20, 0x1f, 0xfffffffffffffffa, 0x7, 0x8000, 0x3f, 0x7}, {0x2, 0x1, 0xe, 0x5, 0x8, 0x10001, 0x4, 0x6, 0x4, 0x81, 0x3, 0x7f}, {0x7001, 0xf000, 0xd, 0x93, 0x6, 0x4, 0x1, 0x8, 0x4, 0x2, 0x7fffffff}, {0x1, 0x1000, 0xf, 0xbe8c, 0x20, 0x7, 0x81, 0x7fff, 0x6, 0x8, 0x57f}, {0x2, 0x10000}, {0x4, 0x6000}, 0x40003, 0x0, 0x4000, 0x44052, 0xc, 0x2800, 0x5000, [0x0, 0xa1, 0x5, 0x7fff]}) io_setup(0x3, &(0x7f0000000000)=0x0) accept$unix(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000100)=0x6e) syz_open_dev$usbmon(&(0x7f0000000200)='/dev/usbmon#\x00', 0x7ff, 0x0) io_cancel(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0xf, 0x3, 0xffffffffffffffff, &(0x7f0000000140)="940c1f2149747e7734510c34c143183667a187dc4f624f6c2de12452792a6fb529e6bf2a661dc23a844b00925c244a9f2967c0ca9868ee50eacf67a2ad7681d82f5a38cbd6d7641f843fa129e00f701fb01835f497b53672b3e5a3f6838f28aa240bf21eb5e5cbe7804fd307404474ae0242f8dea7a08e0fe9479b06f2795f857f8eec271d35ba7f61a91c87296814189cc1dfc9c659cc5437452a0bd178323c50e8c005ba7fa9519b27965c9f6ffbc7dcaa8e658616cc83188fb131a703222d", 0xc0, 0x5, 0x0, 0x1}, &(0x7f0000000280)) io_getevents(r1, 0x2, 0x8f, &(0x7f0000d83f60)=[{}, {}], &(0x7f00005cfff0)={0x4000000000001, 0x7}) io_getevents(r1, 0x0, 0x5, &(0x7f00000002c0)=[{}, {}, {}, {}, {}], &(0x7f00000003c0)) io_setup(0x7, &(0x7f0000000040)) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/route\x00') ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000440)=0x0) perf_event_open(&(0x7f0000aaa000)={0x0, 0x70, 0x4a, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ef4}, r3, 0x0, 0xffffffffffffffff, 0x1) pread64(r2, &(0x7f0000000000)=""/85, 0xfe42, 0x5d) r4 = memfd_create(&(0x7f0000000240)=':+lo#\x00', 0x0) fdatasync(r4) io_submit(r1, 0x1, &(0x7f0000001280)=[&(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f0000000100)}]) timerfd_create(0x7, 0x80800) io_destroy(r1) readv(r0, &(0x7f0000000780)=[{&(0x7f0000000600)=""/128, 0x80}, {&(0x7f0000000680)=""/252, 0xfc}, {&(0x7f00000012c0)=""/4096, 0x1000}], 0x3) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x9, &(0x7f0000000380)=0x3, 0x4) 2018/03/29 11:12:02 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) readv(r0, &(0x7f0000001480)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x3}) fchmod(r0, 0x100) r1 = syz_open_pts(r0, 0x2) r2 = dup3(r1, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000c34fff), 0xffffff0b) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0) preadv(r3, &(0x7f00000004c0)=[{&(0x7f0000000480)=""/21, 0x15}], 0x1, 0x0) fchdir(0xffffffffffffffff) mkdir(&(0x7f0000000280)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f", 0xfffffffffffffffc) renameat2(r2, &(0x7f00000014c0)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f", r2, &(0x7f0000001540)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f", 0x6) fchmod(r2, 0x0) splice(r3, &(0x7f0000000400), 0xffffffffffffffff, &(0x7f0000000440), 0x9, 0x2) rename(&(0x7f0000001840)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f", &(0x7f0000001780)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f") mkdir(&(0x7f000000e000)='./control\x00', 0x0) r4 = open(&(0x7f0000000000)='./control\x00', 0x0, 0x0) renameat2(r4, &(0x7f0000000100)='./file0\x00', r4, &(0x7f0000000080)='./control\x00', 0x2) setsockopt$inet_udp_int(r4, 0x11, 0x64, &(0x7f00000016c0)=0x8000, 0x4) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000300)={0x0, 0x80}, &(0x7f0000000340)=0x8) r6 = open(&(0x7f0000000200)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f", 0x101000, 0x90) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000380)={r5, 0x5}, &(0x7f00000003c0)=0x8) mknodat(r4, &(0x7f000003f000)='./control\x00', 0x0, 0x0) symlink(&(0x7f0000000180)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f", &(0x7f00000000c0)='./file0\x00') perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(r4, &(0x7f0000010000)='./control\x00', &(0x7f000003f000), &(0x7f0000001fe8), 0x0) ioctl$KDSETKEYCODE(r0, 0x4b4d, &(0x7f0000001640)={0x2, 0x101}) getsockopt$inet_sctp_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f00000015c0)={r5, 0x18b, 0x4, 0x9, 0x1, 0x2}, &(0x7f0000001600)=0x14) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8916, &(0x7f0000001680)={'erspan0\x00', {0x2, 0x4e21, @multicast2=0xe0000002}}) 2018/03/29 11:12:02 executing program 3: io_setup(0x3, &(0x7f0000000000)=0x0) accept$unix(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000100)=0x6e) r1 = syz_open_dev$usbmon(&(0x7f0000000200)='/dev/usbmon#\x00', 0x7ff, 0x0) io_cancel(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0xf, 0x0, 0xffffffffffffffff, &(0x7f0000000140)="940c1f2149747e7734510c34c143183667a187dc4f624f6c2de12452792a6fb529e6bf2a661dc23a844b00925c244a9f2967c0ca9868ee50eacf67a2ad7681d82f5a38cbd6d7641f843fa129e00f701fb01835f497b53672b3e5a3f6838f28aa240bf21eb5e5cbe7804fd307404474ae0242f8dea7a08e0fe9479b06f2795f857f8eec271d35ba7f61a91c87296814189cc1dfc9c659cc5437452a0bd178323c50e8c005ba7fa9519b27965c9f6ffbc7dcaa8e658616cc83188fb131a703222d", 0xc0, 0x5, 0x0, 0x1, r1}, &(0x7f0000000280)) io_getevents(r0, 0x2, 0x8f, &(0x7f0000d83f60)=[{}, {}], &(0x7f00005cfff0)={0x4000000000001, 0x7}) io_getevents(r0, 0x0, 0x5, &(0x7f00000002c0)=[{}, {}, {}, {}, {}], &(0x7f00000003c0)) io_setup(0x7, &(0x7f0000000040)) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/route\x00') ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000440)=0x0) perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x4a, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ef4}, r3, 0x0, r1, 0x1) pread64(r2, &(0x7f0000000000)=""/85, 0xfe42, 0x5d) r4 = memfd_create(&(0x7f0000000240)=':+lo#\x00', 0x0) fdatasync(r4) io_submit(r0, 0x1, &(0x7f0000001280)=[&(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f0000000100)}]) timerfd_create(0x7, 0x80800) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000480)=0xbc77) io_destroy(r0) setsockopt$llc_int(r1, 0x10c, 0x9, &(0x7f0000000380)=0x3, 0x4) 2018/03/29 11:12:02 executing program 0: r0 = perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x4a, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffff9c, 0xc00caee0, &(0x7f0000000180)={0x0, r0, 0x1}) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) fcntl$getownex(r0, 0x10, &(0x7f0000000400)={0x0, 0x0}) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0xffff, 0xe3, 0x6, 0x4, 0x0, 0x7, 0x0, 0x2, 0x10001, 0x1, 0x7, 0x8, 0x100, 0x4, 0x0, 0x7f, 0x20, 0x0, 0x4, 0x5, 0x90a4, 0x7, 0x2, 0x73, 0x8, 0x7, 0x4, 0x7e0, 0x101, 0x0, 0x2, 0x309, 0x0, 0x9, 0xfffffffffffffff9, 0x9, 0x0, 0x4, 0x0, @perf_config_ext={0x20}, 0x8140, 0x2, 0x0, 0x4, 0xca1, 0xb5}, r4, 0x4, r1, 0x8) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) futimesat(r1, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0)={{r2, r3/1000+10000}, {r5, r6/1000+10000}}) unshare(0x8000000) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0xdc, 0x40}, 0x341) r8 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8910, &(0x7f0000000080)=@buf={0x0, &(0x7f0000000000)}) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x13, &(0x7f0000000ffc), 0x4) mq_open(&(0x7f00000000c0)='syzkaller0\x00', 0x40, 0x8, &(0x7f0000000100)={0x5, 0x80000000, 0x0, 0xfffffffffffffff9, 0x1, 0xfffffffffffffffd, 0x7fff, 0x200}) socket$inet_tcp(0x2, 0x1, 0x0) r9 = dup3(r8, r7, 0x80000) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r9, 0x84, 0x66, &(0x7f00000002c0)={0x0, 0x8ed6}, &(0x7f0000000300)=0x1) bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) shmget(0xffffffffffffffff, 0x8000, 0x49b, &(0x7f0000ff8000/0x8000)=nil) ioctl$sock_inet_SIOCGIFPFLAGS(r8, 0x8935, &(0x7f0000000080)={'syzkaller0\x00'}) ppoll(&(0x7f0000000780)=[{r1, 0x300}, {r1, 0x8401}], 0x2, &(0x7f00000007c0)={0x77359400}, &(0x7f0000000800)={0x9}, 0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000280)={0x0, 0x0, 0x9}, 0x10) r10 = semget$private(0x0, 0x4, 0x0) semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0x0, 0x1000}], 0x1, &(0x7f0000000080)={0x0, 0x1c9c380}) semctl$IPC_RMID(r10, 0x0, 0x0) [ 321.673835] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 321.680048] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 321.687421] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 321.745307] FAULT_INJECTION: forcing a failure. [ 321.745307] name failslab, interval 1, probability 0, space 0, times 0 [ 321.756663] CPU: 1 PID: 8752 Comm: syz-executor2 Not tainted 4.16.0-rc7+ #5 [ 321.763754] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 321.773087] Call Trace: [ 321.775652] dump_stack+0x194/0x24d [ 321.779257] ? arch_local_irq_restore+0x53/0x53 [ 321.783908] ? __kernel_text_address+0xd/0x40 [ 321.788387] should_fail+0x8c0/0xa40 [ 321.792080] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 321.797163] ? save_stack+0xa3/0xd0 [ 321.800765] ? save_stack+0x43/0xd0 [ 321.804363] ? kasan_kmalloc+0xad/0xe0 [ 321.808223] ? kasan_slab_alloc+0x12/0x20 [ 321.812343] ? kmem_cache_alloc+0x12e/0x760 [ 321.816636] ? alloc_vfsmnt+0xe0/0x9c0 [ 321.820496] ? vfs_kern_mount.part.26+0x84/0x4a0 [ 321.825224] ? do_mount+0xea4/0x2bb0 [ 321.828917] ? find_held_lock+0x35/0x1d0 [ 321.832978] ? check_same_owner+0x320/0x320 [ 321.837279] ? rcu_note_context_switch+0x710/0x710 [ 321.842191] should_failslab+0xec/0x120 [ 321.846142] __kmalloc_track_caller+0x5f/0x760 [ 321.850706] ? do_raw_spin_trylock+0x190/0x190 [ 321.855260] ? kstrdup_const+0x39/0x50 [ 321.859128] kstrdup+0x39/0x70 [ 321.862297] kstrdup_const+0x39/0x50 [ 321.865985] alloc_vfsmnt+0x1a5/0x9c0 [ 321.869761] ? path_lookupat+0x238/0xba0 [ 321.873798] ? mnt_free_id.isra.21+0x50/0x50 [ 321.878189] ? trace_hardirqs_off+0x10/0x10 [ 321.882489] ? putname+0xee/0x130 [ 321.885920] ? putname+0xee/0x130 [ 321.889346] ? rcu_read_lock_sched_held+0x108/0x120 [ 321.894344] ? find_held_lock+0x35/0x1d0 [ 321.898390] ? __get_fs_type+0x8a/0xc0 [ 321.902256] ? lock_downgrade+0x980/0x980 [ 321.906378] ? module_unload_free+0x5b0/0x5b0 [ 321.910851] ? lock_release+0xa40/0xa40 [ 321.914803] ? mpi_resize+0x200/0x200 [ 321.918586] vfs_kern_mount.part.26+0x84/0x4a0 [ 321.923145] ? may_umount+0xa0/0xa0 [ 321.926746] ? _raw_read_unlock+0x22/0x30 [ 321.930869] ? __get_fs_type+0x8a/0xc0 [ 321.934741] do_mount+0xea4/0x2bb0 [ 321.938264] ? copy_mount_string+0x40/0x40 [ 321.942477] ? rcu_pm_notify+0xc0/0xc0 [ 321.946350] ? copy_mount_options+0x5f/0x2e0 [ 321.950734] ? rcu_read_lock_sched_held+0x108/0x120 [ 321.955725] ? kmem_cache_alloc_trace+0x459/0x740 [ 321.960545] ? kasan_check_write+0x14/0x20 [ 321.964765] ? copy_mount_options+0x1f7/0x2e0 [ 321.969242] SyS_mount+0xab/0x120 [ 321.972668] ? copy_mnt_ns+0xb30/0xb30 [ 321.976532] do_syscall_64+0x281/0x940 [ 321.980399] ? trace_event_raw_event_sys_exit+0x260/0x260 [ 321.985912] ? syscall_return_slowpath+0x550/0x550 [ 321.990820] ? syscall_return_slowpath+0x2ac/0x550 [ 321.995731] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 322.001078] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 322.005909] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 322.011071] RIP: 0033:0x4548b9 [ 322.014235] RSP: 002b:00007f032fc57b08 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 322.021918] RAX: ffffffffffffffda RBX: 0000000000000019 RCX: 00000000004548b9 [ 322.029161] RDX: 00000000004b9225 RSI: 0000000020001740 RDI: 0000000020001780 [ 322.036405] RBP: 0000000020001780 R08: 00007f032fc57b20 R09: 0000000000000000 2018/03/29 11:12:02 executing program 2 (fault-call:21 fault-nth:16): r0 = syz_open_procfs(0x0, &(0x7f00000004c0)='oom_score_adj\x00') perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x49, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(r0, 0x0, 0x83, &(0x7f0000001800)={'nat\x00', 0x0, 0x3, 0x1000, [], 0x2, &(0x7f0000001280)=[{}, {}], &(0x7f0000002040)=""/4096}, &(0x7f00000013c0)=0x78) ioprio_get$pid(0x0, 0x0) timer_create(0x0, &(0x7f0000cd0000), &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00004b1fe0)={{0x0, 0x1c9c380}, {0x0, 0x9}}, &(0x7f0000040000)) r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x7fff) truncate(&(0x7f0000001180)='./bus\x00', 0x4) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000f40000)='/dev/ptmx\x00', 0x200000000101002, 0x0) sendfile(r2, 0xffffffffffffffff, &(0x7f00000010c0), 0x10000065) sendfile(r0, r1, &(0x7f0000000000), 0x4) tkill(0x0, 0x0) r3 = memfd_create(&(0x7f0000000000)='\x00', 0x1) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000001200)) recvmsg(0xffffffffffffff9c, &(0x7f0000001500)={&(0x7f00000012c0)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @remote}}}, 0x80, &(0x7f0000001400)=[{&(0x7f0000001340)=""/103, 0x67}], 0x1, &(0x7f0000001440)=""/155, 0x9b}, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000001540)) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000001640)={0x1ff, {0x2, 0x4e21}, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, {0x2, 0x0, @multicast2=0xe0000002}, 0x0, 0x9, 0x2, 0x6, 0x0, &(0x7f0000001240)='teql0\x00', 0x0, 0x80}) inotify_rm_watch(0xffffffffffffffff, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000140), &(0x7f0000000100)=0xffffffa4) getgroups(0x1, &(0x7f0000001600)=[0x0]) syz_fuseblk_mount(&(0x7f0000001740)='./file0\x00', &(0x7f0000001780)='./file0\x00', 0x0, 0x0, 0xffffffffffffffff, 0x3ff, 0x1, 0x0) getpgrp(0xffffffffffffffff) getegid() sendmmsg$unix(r3, &(0x7f0000001880), 0x0, 0x0) setsockopt$netrom_NETROM_T4(0xffffffffffffffff, 0x103, 0x6, &(0x7f00000017c0), 0xfffffffffffffc77) readv(0xffffffffffffffff, &(0x7f000004ffe0), 0x0) 2018/03/29 11:12:02 executing program 1: io_setup(0x3, &(0x7f0000000000)=0x0) accept$unix(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000100)=0x6e) r1 = syz_open_dev$usbmon(&(0x7f0000000200)='/dev/usbmon#\x00', 0x0, 0x0) io_cancel(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0xf, 0x3, 0xffffffffffffffff, &(0x7f0000000140)="940c1f2149747e7734510c34c143183667a187dc4f624f6c2de12452792a6fb529e6bf2a661dc23a844b00925c244a9f2967c0ca9868ee50eacf67a2ad7681d82f5a38cbd6d7641f843fa129e00f701fb01835f497b53672b3e5a3f6838f28aa240bf21eb5e5cbe7804fd307404474ae0242f8dea7a08e0fe9479b06f2795f857f8eec271d35ba7f61a91c87296814189cc1dfc9c659cc5437452a0bd178323c50e8c005ba7fa9519b27965c9f6ffbc7dcaa8e658616cc83188fb131a703222d", 0xc0, 0x5, 0x0, 0x1}, &(0x7f0000000280)) io_getevents(r0, 0x2, 0x8f, &(0x7f0000d83f60)=[{}, {}], &(0x7f00005cfff0)={0x4000000000001, 0x7}) io_getevents(r0, 0x0, 0x5, &(0x7f00000002c0)=[{}, {}, {}, {}, {}], &(0x7f00000003c0)) io_setup(0x7, &(0x7f0000000040)) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/route\x00') ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000440)=0x0) perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x4a, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ef4}, r3, 0x0, 0xffffffffffffffff, 0x1) pread64(r2, &(0x7f0000000000)=""/85, 0xfe42, 0x5d) r4 = memfd_create(&(0x7f0000000240)=':+lo#\x00', 0x0) fdatasync(0xffffffffffffffff) io_submit(r0, 0x1, &(0x7f0000001280)=[&(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f0000000100)}]) timerfd_create(0x7, 0x80800) io_destroy(r0) setsockopt$llc_int(r1, 0x10c, 0x9, &(0x7f0000000380)=0x3, 0x4) [ 322.043649] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 322.050897] R13: 00000000000003ff R14: 0000000000000000 R15: ffffffffffffffff 2018/03/29 11:12:02 executing program 3: io_setup(0x20000003, &(0x7f0000000000)=0x0) r1 = accept$unix(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000100)=0x6e) r2 = syz_open_dev$usbmon(&(0x7f0000000200)='/dev/usbmon#\x00', 0x7ff, 0x0) io_cancel(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0xf, 0x0, 0xffffffffffffffff, &(0x7f0000000140)="940c1f2149747e7734510c34c143183667a187dc4f624f6c2de12452792a6fb529e6bf2a661dc23a844b00925c244a9f2967c0ca9868ee50eacf67a2ad7681d82f5a38cbd6d7641f843fa129e00f701fb01835f497b53672b3e5a3f6838f28aa240bf21eb5e5cbe7804fd307404474ae0242f8dea7a08e0fe9479b06f2795f857f8eec271d35ba7f61a91c87296814189cc1dfc9c659cc5437452a0bd178323c50e8c005ba7fa9519b27965c9f6ffbc7dcaa8e658616cc83188fb131a703222d", 0xc0, 0x5, 0x0, 0x1, r2}, &(0x7f0000000280)) io_getevents(r0, 0x2, 0x8f, &(0x7f0000d83f60)=[{}, {}], &(0x7f00005cfff0)={0x4000000000001, 0x7}) io_getevents(r0, 0x0, 0x5, &(0x7f00000002c0)=[{}, {}, {}, {}, {}], &(0x7f00000003c0)) io_setup(0x7, &(0x7f0000000040)) ioctl$sock_inet_SIOCSIFBRDADDR(r1, 0x891a, &(0x7f0000000480)={'sit0\x00', {0x2, 0x4e22, @remote={0xac, 0x14, 0x14, 0xbb}}}) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/route\x00') ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f0000000440)=0x0) perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x4a, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ef4}, r4, 0x0, r2, 0x1) pread64(r3, &(0x7f0000000000)=""/85, 0xfe42, 0x5d) r5 = memfd_create(&(0x7f0000000240)=':+lo#\x00', 0x0) fdatasync(r5) io_submit(r0, 0x1, &(0x7f0000001280)=[&(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, 0x0, r5, &(0x7f0000000100)}]) timerfd_create(0x10000000000, 0x807fd) getitimer(0x1, &(0x7f00000004c0)) io_destroy(r0) setsockopt$llc_int(r2, 0x10c, 0x9, &(0x7f0000000380)=0x3, 0x4) [ 322.112656] FAULT_INJECTION: forcing a failure. [ 322.112656] name failslab, interval 1, probability 0, space 0, times 0 [ 322.123983] CPU: 1 PID: 8768 Comm: syz-executor2 Not tainted 4.16.0-rc7+ #5 [ 322.131084] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 322.140430] Call Trace: [ 322.143005] dump_stack+0x194/0x24d [ 322.146617] ? arch_local_irq_restore+0x53/0x53 [ 322.151275] should_fail+0x8c0/0xa40 [ 322.154971] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 322.160054] ? pcpu_free_area+0xa00/0xa00 [ 322.164193] ? find_held_lock+0x35/0x1d0 [ 322.168256] ? check_same_owner+0x320/0x320 [ 322.172556] ? rcu_note_context_switch+0x710/0x710 [ 322.177470] should_failslab+0xec/0x120 [ 322.181423] kmem_cache_alloc+0x47/0x760 [ 322.185460] ? __alloc_pages_slowpath+0x2d10/0x2d10 [ 322.190464] getname_kernel+0x54/0x340 [ 322.194330] kern_path+0x1e/0x40 [ 322.197676] lookup_bdev+0xec/0x200 [ 322.201278] ? blkdev_open+0x250/0x250 [ 322.205144] ? find_held_lock+0x35/0x1d0 [ 322.209189] blkdev_get_by_path+0x1f/0xa0 [ 322.213313] mount_bdev+0x4d/0x370 [ 322.216830] ? fuse_get_root_inode+0x190/0x190 [ 322.221392] fuse_mount_blk+0x34/0x40 [ 322.225170] mount_fs+0x66/0x2d0 [ 322.228516] vfs_kern_mount.part.26+0xc6/0x4a0 [ 322.233078] ? may_umount+0xa0/0xa0 [ 322.236680] ? _raw_read_unlock+0x22/0x30 [ 322.240804] ? __get_fs_type+0x8a/0xc0 [ 322.244674] do_mount+0xea4/0x2bb0 [ 322.248197] ? copy_mount_string+0x40/0x40 [ 322.252406] ? rcu_pm_notify+0xc0/0xc0 [ 322.256280] ? copy_mount_options+0x5f/0x2e0 [ 322.260662] ? rcu_read_lock_sched_held+0x108/0x120 [ 322.265653] ? kmem_cache_alloc_trace+0x459/0x740 [ 322.270473] ? kasan_check_write+0x14/0x20 [ 322.274691] ? copy_mount_options+0x1f7/0x2e0 [ 322.279165] SyS_mount+0xab/0x120 [ 322.282591] ? copy_mnt_ns+0xb30/0xb30 [ 322.286458] do_syscall_64+0x281/0x940 [ 322.290320] ? __do_page_fault+0xc90/0xc90 [ 322.294529] ? _raw_spin_unlock_irq+0x27/0x70 [ 322.298998] ? finish_task_switch+0x1c1/0x7e0 [ 322.303472] ? syscall_return_slowpath+0x550/0x550 [ 322.308375] ? syscall_return_slowpath+0x2ac/0x550 [ 322.313281] ? prepare_exit_to_usermode+0x350/0x350 [ 322.318278] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 322.323624] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 322.328450] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 322.333611] RIP: 0033:0x4548b9 [ 322.336774] RSP: 002b:00007f032fc57b08 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 322.344464] RAX: ffffffffffffffda RBX: 0000000000000019 RCX: 00000000004548b9 [ 322.351709] RDX: 00000000004b9225 RSI: 0000000020001740 RDI: 0000000020001780 2018/03/29 11:12:02 executing program 7: io_setup(0x3, &(0x7f0000000000)=0x0) r1 = accept$unix(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000100)=0x6e) syz_open_dev$usbmon(&(0x7f0000000200)='/dev/usbmon#\x00', 0x7ff, 0x0) readv(r1, &(0x7f00000006c0)=[{&(0x7f0000000480)=""/129, 0x81}, {&(0x7f0000000540)=""/27, 0x1b}, {&(0x7f0000000580)=""/195, 0xc3}, {&(0x7f0000000680)=""/20, 0x14}], 0x4) io_cancel(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0xf, 0x3, 0xffffffffffffffff, &(0x7f0000000140)="940c1f2149747e7734510c34c143183667a187dc4f624f6c2de12452792a6fb529e6bf2a661dc23a844b00925c244a9f2967c0ca9868ee50eacf67a2ad7681d82f5a38cbd6d7641f843fa129e00f701fb01835f497b53672b3e5a3f6838f28aa240bf21eb5e5cbe7804fd307404474ae0242f8dea7a08e0fe9479b06f2795f857f8eec271d35ba7f61a91c87296814189cc1dfc9c659cc5437452a0bd178323c50e8c005ba7fa9519b27965c9f6ffbc7dcaa8e658616cc83188fb131a703222d", 0xc0, 0x5, 0x0, 0x1}, &(0x7f0000000280)) io_getevents(r0, 0x2, 0x8f, &(0x7f0000d83f60)=[{}, {}], &(0x7f00005cfff0)={0x4000000000001, 0x7}) io_getevents(r0, 0x0, 0x5, &(0x7f00000002c0)=[{}, {}, {}, {}, {}], &(0x7f00000003c0)) io_setup(0x7, &(0x7f0000000040)) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/route\x00') ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000440)=0x0) perf_event_open(&(0x7f0000aaa000)={0x0, 0x70, 0x4a, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ef4}, r3, 0x0, 0xffffffffffffffff, 0x1) pread64(r2, &(0x7f0000000000)=""/85, 0xfe42, 0x5d) r4 = memfd_create(&(0x7f0000000240)=':+lo#\x00', 0x0) fdatasync(r4) io_submit(r0, 0x1, &(0x7f0000001280)=[&(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f0000000100)}]) timerfd_create(0x7, 0x80800) io_destroy(r0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x9, &(0x7f0000000380)=0x3, 0x4) 2018/03/29 11:12:02 executing program 0: r0 = perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x4a, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffff9c, 0xc00caee0, &(0x7f0000000180)={0x0, r0, 0x1}) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) fcntl$getownex(r0, 0x10, &(0x7f0000000400)={0x0, 0x0}) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0xffff, 0xe3, 0x6, 0x4, 0x0, 0x7, 0x0, 0x2, 0x10001, 0x1, 0x7, 0x8, 0x100, 0x4, 0x0, 0x7f, 0x20, 0x0, 0x4, 0x5, 0x90a4, 0x7, 0x2, 0x73, 0x8, 0x7, 0x4, 0x7e0, 0x101, 0x0, 0x2, 0x309, 0x0, 0x9, 0xfffffffffffffff9, 0x9, 0x0, 0x4, 0x0, @perf_config_ext={0x20, 0x1}, 0x0, 0x2, 0x0, 0x4, 0xca1, 0xb5}, r4, 0x4, r1, 0x8) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) futimesat(r1, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0)={{r2, r3/1000+10000}, {r5, r6/1000+10000}}) unshare(0x8000000) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0xdc, 0x40}, 0x341) r8 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8910, &(0x7f0000000080)=@buf={0x0, &(0x7f0000000000)}) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x13, &(0x7f0000000ffc), 0x4) mq_open(&(0x7f00000000c0)='syzkaller0\x00', 0x40, 0x8, &(0x7f0000000100)={0x5, 0x80000000, 0x0, 0xfffffffffffffff9, 0x1, 0xfffffffffffffffd, 0x7fff, 0x200}) socket$inet_tcp(0x2, 0x1, 0x0) r9 = dup3(r8, r7, 0x80000) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r9, 0x84, 0x66, &(0x7f00000002c0)={0x0, 0x8ed6}, &(0x7f0000000300)=0x1) bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) shmget(0xffffffffffffffff, 0x8000, 0x49b, &(0x7f0000ff8000/0x8000)=nil) ioctl$sock_inet_SIOCGIFPFLAGS(r8, 0x8935, &(0x7f0000000080)={'syzkaller0\x00'}) ppoll(&(0x7f0000000780)=[{r1, 0x300}, {r1, 0x8401}], 0x2, &(0x7f00000007c0)={0x77359400}, &(0x7f0000000800)={0x9}, 0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000280)={0x0, 0x0, 0x9}, 0x10) r10 = semget$private(0x0, 0x4, 0x0) semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0x0, 0x1000}], 0x1, &(0x7f0000000080)={0x0, 0x1c9c380}) semctl$IPC_RMID(r10, 0x0, 0x0) [ 322.358954] RBP: 0000000020001780 R08: 00007f032fc57b20 R09: 0000000000000000 [ 322.366198] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 322.373440] R13: 00000000000003ff R14: 0000000000000000 R15: ffffffffffffffff 2018/03/29 11:12:03 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) readv(r0, &(0x7f0000001480)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x3}) r1 = syz_open_pts(r0, 0x2) syz_init_net_socket$llc(0x1a, 0x3, 0x0) r2 = dup3(r1, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000c34fff), 0xffffff0b) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0) preadv(r3, &(0x7f00000004c0)=[{&(0x7f0000000480)=""/21, 0x15}], 0x1, 0x0) fchdir(0xffffffffffffffff) mkdir(&(0x7f0000000280)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f", 0xfffffffffffffffc) fchmod(r2, 0x0) splice(r3, &(0x7f0000000400), 0xffffffffffffffff, &(0x7f0000000440), 0x9, 0x2) rename(&(0x7f0000001e00)='./file0\x00', &(0x7f0000000100)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f") mkdir(&(0x7f000000e000)='./control\x00', 0x0) r4 = open(&(0x7f0000000000)='./control\x00', 0x0, 0x0) renameat2(r4, &(0x7f0000000040)='./file0\x00', r4, &(0x7f0000000080)='./control\x00', 0x2) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000300)={0x0, 0x80}, &(0x7f0000000340)=0x8) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000380)={r5, 0x5}, &(0x7f00000003c0)=0x8) mknodat(r4, &(0x7f000003f000)='./control\x00', 0x0, 0x0) symlink(&(0x7f0000000180)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f", &(0x7f00000000c0)='./file0\x00') perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(r4, &(0x7f0000010000)='./control\x00', &(0x7f000003f000), &(0x7f0000001fe8), 0x0) 2018/03/29 11:12:03 executing program 6: openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x0, 0x0) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, &(0x7f0000000340)=0x1) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f000051cff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000943ffc)=0xa35) read(r0, &(0x7f00003fefff)=""/1, 0x1) r1 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000029000)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r0, &(0x7f0000dcdff0)=[{&(0x7f0000cd8000)=""/1, 0x1}], 0x1) ioctl$int_in(r2, 0x5452, &(0x7f0000b28000)=0x3c) write$cgroup_type(0xffffffffffffffff, &(0x7f00000002c0)='threaded\x00', 0x9) syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x0, 0x802) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000fb9000)) fcntl$setsig(r2, 0xa, 0x12) poll(&(0x7f0000b2c000), 0x0, 0xfffffffffffffff8) read$eventfd(0xffffffffffffffff, &(0x7f0000000040), 0x8) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)) r4 = dup2(r2, r3) fcntl$setown(r4, 0x8, r1) ptrace$cont(0xffffffffffffffff, r1, 0x0, 0x8) tkill(r1, 0x16) r5 = gettid() process_vm_readv(r5, &(0x7f0000001880)=[{&(0x7f0000000680)=""/198, 0xc6}, {&(0x7f0000000780)=""/247, 0xf7}, {&(0x7f0000000380)=""/12, 0xc}, {&(0x7f00000003c0)=""/6, 0x6}, {&(0x7f0000000400)=""/14, 0xe}], 0x5, &(0x7f00000019c0)=[{&(0x7f0000001900)=""/41, 0x29}, {&(0x7f0000001940)=""/112, 0x70}], 0x2, 0x0) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f0000000240)={{{@in6}}, {{@in=@local}, 0x0, @in=@local}}, &(0x7f0000000100)=0xe8) 2018/03/29 11:12:03 executing program 0: r0 = perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x4a, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffff9c, 0xc00caee0, &(0x7f0000000180)={0x0, r0, 0x1}) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) fcntl$getownex(r0, 0x10, &(0x7f0000000400)={0x0, 0x0}) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0xffff, 0xe3, 0x6, 0x4, 0x0, 0x7, 0x0, 0x2, 0x10001, 0x1, 0x7, 0x8, 0x100, 0x4, 0x0, 0x7f, 0x20, 0x0, 0x4, 0x5, 0x90a4, 0x7, 0x2, 0x73, 0x8, 0x7, 0x4, 0x7e0, 0x101, 0x0, 0x2, 0x309, 0x0, 0x9, 0xfffffffffffffff9, 0x9, 0x0, 0x4, 0x0, @perf_config_ext={0x20, 0x1}, 0x0, 0x2, 0x0, 0x4, 0xca1, 0xb5}, r4, 0x4, r1, 0x8) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) futimesat(r1, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0)={{r2, r3/1000+10000}, {r5, r6/1000+10000}}) unshare(0x8000000) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0xdc, 0x40}, 0x341) r8 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8910, &(0x7f0000000080)=@buf={0x0, &(0x7f0000000000)}) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x13, &(0x7f0000000ffc), 0x4) mq_open(&(0x7f00000000c0)='syzkaller0\x00', 0x40, 0x8, &(0x7f0000000100)={0x5, 0x80000000, 0x0, 0xfffffffffffffff9, 0x1, 0xfffffffffffffffd, 0x7fff, 0x200}) socket$inet_tcp(0x2, 0x1, 0x0) r9 = dup3(r8, r7, 0x80000) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r9, 0x84, 0x66, &(0x7f00000002c0)={0x0, 0x8ed6}, &(0x7f0000000300)=0x1) bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) shmget(0xffffffffffffffff, 0x8000, 0x49b, &(0x7f0000ff8000/0x8000)=nil) ioctl$sock_inet_SIOCGIFPFLAGS(r8, 0x8935, &(0x7f0000000080)={'syzkaller0\x00'}) ppoll(&(0x7f0000000780)=[{r1, 0x300}, {r1, 0x8401}], 0x2, &(0x7f00000007c0)={0x77359400}, &(0x7f0000000800)={0x9}, 0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000280)={0x0, 0x0, 0x9}, 0x10) r10 = semget$private(0x0, 0x4, 0x0) semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0x0, 0x1000}], 0x1, &(0x7f0000000080)={0x0, 0x1c9c380}) semctl$IPC_RMID(r10, 0x0, 0x0) 2018/03/29 11:12:03 executing program 1: io_setup(0x3, &(0x7f0000000000)=0x0) accept$unix(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000100)=0x6e) r1 = syz_open_dev$usbmon(&(0x7f0000000200)='/dev/usbmon#\x00', 0x0, 0x0) io_cancel(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0xf, 0x3, 0xffffffffffffffff, &(0x7f0000000140)="940c1f2149747e7734510c34c143183667a187dc4f624f6c2de12452792a6fb529e6bf2a661dc23a844b00925c244a9f2967c0ca9868ee50eacf67a2ad7681d82f5a38cbd6d7641f843fa129e00f701fb01835f497b53672b3e5a3f6838f28aa240bf21eb5e5cbe7804fd307404474ae0242f8dea7a08e0fe9479b06f2795f857f8eec271d35ba7f61a91c87296814189cc1dfc9c659cc5437452a0bd178323c50e8c005ba7fa9519b27965c9f6ffbc7dcaa8e658616cc83188fb131a703222d", 0xc0, 0x5, 0x0, 0x1}, &(0x7f0000000280)) io_getevents(r0, 0x2, 0x8f, &(0x7f0000d83f60)=[{}, {}], &(0x7f00005cfff0)={0x4000000000001, 0x7}) io_getevents(r0, 0x0, 0x5, &(0x7f00000002c0)=[{}, {}, {}, {}, {}], &(0x7f00000003c0)) io_setup(0x7, &(0x7f0000000040)) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/route\x00') ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000440)=0x0) perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x4a, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ef4}, r3, 0x0, 0xffffffffffffffff, 0x1) pread64(r2, &(0x7f0000000000)=""/85, 0xfe42, 0x5d) r4 = memfd_create(&(0x7f0000000240)=':+lo#\x00', 0x0) fdatasync(0xffffffffffffffff) io_submit(r0, 0x1, &(0x7f0000001280)=[&(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f0000000100)}]) timerfd_create(0x7, 0x80800) io_destroy(r0) setsockopt$llc_int(r1, 0x10c, 0x9, &(0x7f0000000380)=0x3, 0x4) 2018/03/29 11:12:03 executing program 3: io_setup(0x3, &(0x7f0000000000)=0x0) accept$unix(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000100)=0x6e) r1 = syz_open_dev$usbmon(&(0x7f0000000200)='/dev/usbmon#\x00', 0x7ff, 0x0) io_cancel(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0xf, 0x0, 0xffffffffffffffff, &(0x7f0000000140)="940c1f2149747e7734510c34c143183667a187dc4f624f6c2de12452792a6fb529e6bf2a661dc23a844b00925c244a9f2967c0ca9868ee50eacf67a2ad7681d82f5a38cbd6d7641f843fa129e00f701fb01835f497b53672b3e5a3f6838f28aa240bf21eb5e5cbe7804fd307404474ae0242f8dea7a08e0fe9479b06f2795f857f8eec271d35ba7f61a91c87296814189cc1dfc9c659cc5437452a0bd178323c50e8c005ba7fa9519b27965c9f6ffbc7dcaa8e658616cc83188fb131a703222d", 0xc0, 0x5, 0x0, 0x1, r1}, &(0x7f0000000280)) accept$nfc_llcp(r1, &(0x7f0000000480), &(0x7f0000000500)=0x60) io_getevents(r0, 0x2, 0x8f, &(0x7f0000d83f60)=[{}, {}], &(0x7f00005cfff0)={0x4000000000001, 0x7}) io_getevents(r0, 0x0, 0x5, &(0x7f00000002c0)=[{}, {}, {}, {}, {}], &(0x7f00000003c0)) io_setup(0x7, &(0x7f0000000040)) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/route\x00') ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000440)=0x0) perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x4a, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ef4}, r3, 0x0, r1, 0x1) pread64(r2, &(0x7f0000000000)=""/85, 0xfe42, 0x5d) r4 = memfd_create(&(0x7f0000000240)=':+lo#\x00', 0x0) fdatasync(r4) io_submit(r0, 0x1, &(0x7f0000001280)=[&(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f0000000100)}]) timerfd_create(0x7, 0x80800) io_destroy(r0) setsockopt$llc_int(r1, 0x10c, 0x9, &(0x7f0000000380)=0x3, 0x4) 2018/03/29 11:12:03 executing program 2 (fault-call:21 fault-nth:17): r0 = syz_open_procfs(0x0, &(0x7f00000004c0)='oom_score_adj\x00') perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x49, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(r0, 0x0, 0x83, &(0x7f0000001800)={'nat\x00', 0x0, 0x3, 0x1000, [], 0x2, &(0x7f0000001280)=[{}, {}], &(0x7f0000002040)=""/4096}, &(0x7f00000013c0)=0x78) ioprio_get$pid(0x0, 0x0) timer_create(0x0, &(0x7f0000cd0000), &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00004b1fe0)={{0x0, 0x1c9c380}, {0x0, 0x9}}, &(0x7f0000040000)) r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x7fff) truncate(&(0x7f0000001180)='./bus\x00', 0x4) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000f40000)='/dev/ptmx\x00', 0x200000000101002, 0x0) sendfile(r2, 0xffffffffffffffff, &(0x7f00000010c0), 0x10000065) sendfile(r0, r1, &(0x7f0000000000), 0x4) tkill(0x0, 0x0) r3 = memfd_create(&(0x7f0000000000)='\x00', 0x1) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000001200)) recvmsg(0xffffffffffffff9c, &(0x7f0000001500)={&(0x7f00000012c0)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @remote}}}, 0x80, &(0x7f0000001400)=[{&(0x7f0000001340)=""/103, 0x67}], 0x1, &(0x7f0000001440)=""/155, 0x9b}, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000001540)) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000001640)={0x1ff, {0x2, 0x4e21}, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, {0x2, 0x0, @multicast2=0xe0000002}, 0x0, 0x9, 0x2, 0x6, 0x0, &(0x7f0000001240)='teql0\x00', 0x0, 0x80}) inotify_rm_watch(0xffffffffffffffff, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000140), &(0x7f0000000100)=0xffffffa4) getgroups(0x1, &(0x7f0000001600)=[0x0]) syz_fuseblk_mount(&(0x7f0000001740)='./file0\x00', &(0x7f0000001780)='./file0\x00', 0x0, 0x0, 0xffffffffffffffff, 0x3ff, 0x1, 0x0) getpgrp(0xffffffffffffffff) getegid() sendmmsg$unix(r3, &(0x7f0000001880), 0x0, 0x0) setsockopt$netrom_NETROM_T4(0xffffffffffffffff, 0x103, 0x6, &(0x7f00000017c0), 0xfffffffffffffc77) readv(0xffffffffffffffff, &(0x7f000004ffe0), 0x0) 2018/03/29 11:12:03 executing program 7: io_setup(0x3, &(0x7f0000000000)=0x0) accept$unix(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000100)=0x6e) r1 = syz_open_dev$usbmon(&(0x7f0000000200)='/dev/usbmon#\x00', 0x7ff, 0x0) io_cancel(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0xf, 0x3, 0xffffffffffffffff, &(0x7f0000000140)="940c1f2149747e7734510c34c143183667a187dc4f624f6c2de12452792a6fb529e6bf2a661dc23a844b00925c244a9f2967c0ca9868ee50eacf67a2ad7681d82f5a38cbd6d7641f843fa129e00f701fb01835f497b53672b3e5a3f6838f28aa240bf21eb5e5cbe7804fd307404474ae0242f8dea7a08e0fe9479b06f2795f857f8eec271d35ba7f61a91c87296814189cc1dfc9c659cc5437452a0bd178323c50e8c005ba7fa9519b27965c9f6ffbc7dcaa8e658616cc83188fb131a703222d", 0xc0, 0x5, 0x0, 0x1}, &(0x7f0000000280)) io_getevents(r0, 0x2, 0x8f, &(0x7f0000d83f60)=[{}, {}], &(0x7f00005cfff0)={0x4000000000001, 0x7}) io_getevents(r0, 0x0, 0x5, &(0x7f00000002c0)=[{}, {}, {}, {}, {}], &(0x7f00000003c0)) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000440), &(0x7f00000004c0)=0x4) io_setup(0x7, &(0x7f0000000040)) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/route\x00') ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000480)=0x0) set_robust_list(&(0x7f0000000580)={&(0x7f0000000540)={&(0x7f0000000500)}}, 0x18) perf_event_open(&(0x7f0000aaa000)={0x0, 0x70, 0x4a, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ef4}, r3, 0x0, 0xffffffffffffffff, 0x1) pread64(r2, &(0x7f0000000000)=""/85, 0xfe42, 0x5d) io_setup(0x0, &(0x7f0000000600)) r4 = memfd_create(&(0x7f0000000240)=':+lo#\x00', 0x0) fdatasync(r4) io_submit(r0, 0x1, &(0x7f0000001280)=[&(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f0000000100)}]) timerfd_create(0x7, 0x80800) syz_open_dev$amidi(&(0x7f00000005c0)='/dev/amidi#\x00', 0x400, 0x200000) io_destroy(r0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x9, &(0x7f0000000380)=0x3, 0x4) 2018/03/29 11:12:03 executing program 5: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffff9c, 0xc00caee0, &(0x7f0000000100)={0x7, 0xffffffffffffff9c, 0x1}) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffff9c, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x3f}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000280)={r1, 0x80000001, 0x10}, &(0x7f00000002c0)=0xc) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) mkdir(&(0x7f0000000000)='./file1\x00', 0x0) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000811ffa)='bdev\x00', 0x0, &(0x7f0000444000)) mount(&(0x7f0000fb6000)='./file0\x00', &(0x7f0000d78000)='.', &(0x7f0000fdb000)='ubifs\x00', 0x1003, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000440)={0x1, &(0x7f0000000400)=[{0x4, 0x4, 0x0, 0x1}]}, 0x10) mount(&(0x7f00002b9ff8)='./file0\x00', &(0x7f0000cbeff8)='./file0\x00', &(0x7f00005f7ffa)='ramfs\x00', 0x80000, &(0x7f000002f000)) mount(&(0x7f0000000040)='.', &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0)='binfmt_misc\x00', 0x0, &(0x7f0000000100)) ioctl$KVM_GET_MSRS(r0, 0xc008ae88, &(0x7f0000000480)=ANY=[@ANYBLOB="0200000000000000000000000b6b7b0000001b000000000000000000000fb65ea43140cd7869a4ec92ed14"]) setxattr(&(0x7f0000000340)='.', &(0x7f0000000380)=@known='trusted.syz\x00', &(0x7f00000003c0)='mime_typemd5sum]cpusetvmnet1%eth1+&proc\x00', 0x28, 0x0) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) mount(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./file1\x00', &(0x7f0000000200)='anon_inodefs\x00', 0x2000, &(0x7f0000000240)) mount(&(0x7f0000adcff8)='./file0\x00', &(0x7f0000e08fff)='.', &(0x7f00005e9000)='cifs\x00', 0x2000, &(0x7f0000ad5000)) [ 322.976641] FAULT_INJECTION: forcing a failure. [ 322.976641] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 322.988590] CPU: 1 PID: 8803 Comm: syz-executor2 Not tainted 4.16.0-rc7+ #5 [ 322.995669] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 323.004996] Call Trace: [ 323.007571] dump_stack+0x194/0x24d [ 323.011177] ? arch_local_irq_restore+0x53/0x53 [ 323.015834] should_fail+0x8c0/0xa40 [ 323.019527] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 323.024609] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 323.029777] ? wait_for_completion+0x770/0x770 [ 323.034340] ? lock_downgrade+0x980/0x980 [ 323.038478] ? rcu_pm_notify+0xc0/0xc0 [ 323.042353] ? rcu_read_lock_sched_held+0x108/0x120 [ 323.047346] ? pcpu_alloc+0x146/0x1120 [ 323.051211] ? should_fail+0x23b/0xa40 [ 323.055083] __alloc_pages_nodemask+0x327/0xdd0 [ 323.059726] ? pcpu_free_area+0xa00/0xa00 [ 323.063855] ? __alloc_pages_slowpath+0x2d10/0x2d10 [ 323.068853] ? find_held_lock+0x35/0x1d0 [ 323.072913] ? check_same_owner+0x320/0x320 [ 323.077221] cache_grow_begin+0x72/0x640 [ 323.081263] kmem_cache_alloc+0x400/0x760 [ 323.085386] ? __alloc_pages_slowpath+0x2d10/0x2d10 [ 323.090387] getname_kernel+0x54/0x340 [ 323.094253] kern_path+0x1e/0x40 [ 323.097596] lookup_bdev+0xec/0x200 [ 323.101199] ? blkdev_open+0x250/0x250 [ 323.105064] ? find_held_lock+0x35/0x1d0 [ 323.109112] blkdev_get_by_path+0x1f/0xa0 [ 323.113238] mount_bdev+0x4d/0x370 [ 323.116754] ? fuse_get_root_inode+0x190/0x190 [ 323.121314] fuse_mount_blk+0x34/0x40 [ 323.125108] mount_fs+0x66/0x2d0 [ 323.128456] vfs_kern_mount.part.26+0xc6/0x4a0 [ 323.133023] ? may_umount+0xa0/0xa0 [ 323.136625] ? _raw_read_unlock+0x22/0x30 [ 323.140747] ? __get_fs_type+0x8a/0xc0 [ 323.144618] do_mount+0xea4/0x2bb0 [ 323.148143] ? copy_mount_string+0x40/0x40 [ 323.152356] ? rcu_pm_notify+0xc0/0xc0 [ 323.156229] ? copy_mount_options+0x5f/0x2e0 [ 323.160612] ? rcu_read_lock_sched_held+0x108/0x120 [ 323.165602] ? kmem_cache_alloc_trace+0x459/0x740 [ 323.170425] ? kasan_check_write+0x14/0x20 [ 323.175484] ? copy_mount_options+0x1f7/0x2e0 [ 323.179961] SyS_mount+0xab/0x120 [ 323.183392] ? copy_mnt_ns+0xb30/0xb30 [ 323.187256] do_syscall_64+0x281/0x940 [ 323.191119] ? __do_page_fault+0xc90/0xc90 [ 323.195328] ? _raw_spin_unlock_irq+0x27/0x70 [ 323.199886] ? finish_task_switch+0x1c1/0x7e0 [ 323.204359] ? syscall_return_slowpath+0x550/0x550 [ 323.209266] ? syscall_return_slowpath+0x2ac/0x550 [ 323.214172] ? prepare_exit_to_usermode+0x350/0x350 [ 323.219167] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 323.224509] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 323.229337] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 323.234499] RIP: 0033:0x4548b9 [ 323.237664] RSP: 002b:00007f032fc57b08 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 323.245346] RAX: ffffffffffffffda RBX: 0000000000000019 RCX: 00000000004548b9 [ 323.252589] RDX: 00000000004b9225 RSI: 0000000020001740 RDI: 0000000020001780 [ 323.259832] RBP: 0000000020001780 R08: 00007f032fc57b20 R09: 0000000000000000 [ 323.267074] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 323.274315] R13: 00000000000003ff R14: 0000000000000000 R15: ffffffffffffffff 2018/03/29 11:12:03 executing program 5: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000811ffa)='bdev\x00', 0x0, &(0x7f0000444000)) mount(&(0x7f0000fb6000)='./file0\x00', &(0x7f0000d78000)='.', &(0x7f0000fdb000)='ubifs\x00', 0x1003, 0x0) mount(&(0x7f00002b9ff8)='./file0\x00', &(0x7f0000cbeff8)='./file0\x00', &(0x7f00005f7ffa)='ramfs\x00', 0x80000, &(0x7f000002f000)) mount(&(0x7f0000000040)='.', &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0)='binfmt_misc\x00', 0x0, &(0x7f0000000100)) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) mount(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./file1\x00', &(0x7f0000000200)='anon_inodefs\x00', 0x2000, &(0x7f0000000240)) mount(&(0x7f0000adcff8)='./file0\x00', &(0x7f0000e08fff)='.', &(0x7f00005e9000)='cifs\x00', 0x2000, &(0x7f0000ad5000)) 2018/03/29 11:12:03 executing program 2 (fault-call:21 fault-nth:18): r0 = syz_open_procfs(0x0, &(0x7f00000004c0)='oom_score_adj\x00') perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x49, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(r0, 0x0, 0x83, &(0x7f0000001800)={'nat\x00', 0x0, 0x3, 0x1000, [], 0x2, &(0x7f0000001280)=[{}, {}], &(0x7f0000002040)=""/4096}, &(0x7f00000013c0)=0x78) ioprio_get$pid(0x0, 0x0) timer_create(0x0, &(0x7f0000cd0000), &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00004b1fe0)={{0x0, 0x1c9c380}, {0x0, 0x9}}, &(0x7f0000040000)) r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x7fff) truncate(&(0x7f0000001180)='./bus\x00', 0x4) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000f40000)='/dev/ptmx\x00', 0x200000000101002, 0x0) sendfile(r2, 0xffffffffffffffff, &(0x7f00000010c0), 0x10000065) sendfile(r0, r1, &(0x7f0000000000), 0x4) tkill(0x0, 0x0) r3 = memfd_create(&(0x7f0000000000)='\x00', 0x1) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000001200)) recvmsg(0xffffffffffffff9c, &(0x7f0000001500)={&(0x7f00000012c0)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @remote}}}, 0x80, &(0x7f0000001400)=[{&(0x7f0000001340)=""/103, 0x67}], 0x1, &(0x7f0000001440)=""/155, 0x9b}, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000001540)) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000001640)={0x1ff, {0x2, 0x4e21}, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, {0x2, 0x0, @multicast2=0xe0000002}, 0x0, 0x9, 0x2, 0x6, 0x0, &(0x7f0000001240)='teql0\x00', 0x0, 0x80}) inotify_rm_watch(0xffffffffffffffff, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000140), &(0x7f0000000100)=0xffffffa4) getgroups(0x1, &(0x7f0000001600)=[0x0]) syz_fuseblk_mount(&(0x7f0000001740)='./file0\x00', &(0x7f0000001780)='./file0\x00', 0x0, 0x0, 0xffffffffffffffff, 0x3ff, 0x1, 0x0) getpgrp(0xffffffffffffffff) getegid() sendmmsg$unix(r3, &(0x7f0000001880), 0x0, 0x0) setsockopt$netrom_NETROM_T4(0xffffffffffffffff, 0x103, 0x6, &(0x7f00000017c0), 0xfffffffffffffc77) readv(0xffffffffffffffff, &(0x7f000004ffe0), 0x0) [ 323.340840] FAULT_INJECTION: forcing a failure. [ 323.340840] name failslab, interval 1, probability 0, space 0, times 0 [ 323.352436] CPU: 1 PID: 8820 Comm: syz-executor2 Not tainted 4.16.0-rc7+ #5 [ 323.359536] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 323.368871] Call Trace: [ 323.371439] dump_stack+0x194/0x24d [ 323.375046] ? arch_local_irq_restore+0x53/0x53 [ 323.379705] should_fail+0x8c0/0xa40 [ 323.383398] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 323.388476] ? find_next_zero_bit+0xe3/0x110 [ 323.392862] ? trace_hardirqs_off+0x10/0x10 [ 323.397163] ? __lock_is_held+0xb6/0x140 [ 323.401203] ? find_held_lock+0x35/0x1d0 [ 323.405246] ? __lock_is_held+0xb6/0x140 [ 323.409298] ? check_same_owner+0x320/0x320 [ 323.413596] ? rcu_note_context_switch+0x710/0x710 [ 323.418498] ? rcu_note_context_switch+0x710/0x710 [ 323.423412] should_failslab+0xec/0x120 [ 323.427366] __kmalloc+0x63/0x760 [ 323.430799] ? lockdep_init_map+0x9/0x10 [ 323.434837] ? debug_mutex_init+0x2d/0x60 [ 323.438962] ? __list_lru_init+0xcf/0x750 [ 323.443089] __list_lru_init+0xcf/0x750 [ 323.447049] ? memcg_destroy_list_lru_node.isra.7+0x110/0x110 [ 323.452907] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 323.457901] ? __lockdep_init_map+0xe4/0x650 [ 323.462288] ? lockdep_init_map+0x9/0x10 [ 323.466331] sget_userns+0x691/0xe40 [ 323.470022] ? kill_litter_super+0x90/0x90 [ 323.474240] ? ns_test_super+0x50/0x50 [ 323.478105] ? destroy_unused_super.part.6+0xd0/0xd0 [ 323.483183] ? do_raw_spin_trylock+0x190/0x190 [ 323.487745] ? kobject_put+0x6b/0x250 [ 323.491534] ? blkdev_get+0x3a1/0xb00 [ 323.495316] ? cap_capable+0x1b5/0x230 [ 323.499177] ? __blkdev_get+0x13b0/0x13b0 [ 323.503303] ? security_capable+0x8e/0xc0 [ 323.507426] ? kill_litter_super+0x90/0x90 [ 323.511635] ? ns_capable_common+0xcf/0x160 [ 323.515938] ? ns_test_super+0x50/0x50 [ 323.519798] ? kill_litter_super+0x90/0x90 [ 323.524011] sget+0xd2/0x120 [ 323.527025] mount_bdev+0x109/0x370 [ 323.530628] ? fuse_get_root_inode+0x190/0x190 [ 323.535189] fuse_mount_blk+0x34/0x40 [ 323.538967] mount_fs+0x66/0x2d0 [ 323.542314] vfs_kern_mount.part.26+0xc6/0x4a0 [ 323.546874] ? may_umount+0xa0/0xa0 [ 323.550475] ? _raw_read_unlock+0x22/0x30 [ 323.554597] ? __get_fs_type+0x8a/0xc0 [ 323.558465] do_mount+0xea4/0x2bb0 [ 323.561993] ? copy_mount_string+0x40/0x40 [ 323.566206] ? rcu_pm_notify+0xc0/0xc0 [ 323.570077] ? copy_mount_options+0x5f/0x2e0 [ 323.574460] ? rcu_read_lock_sched_held+0x108/0x120 [ 323.579454] ? kmem_cache_alloc_trace+0x459/0x740 [ 323.584272] ? kasan_check_write+0x14/0x20 [ 323.588480] ? _copy_from_user+0x99/0x110 [ 323.592606] ? copy_mount_options+0x1f7/0x2e0 [ 323.597082] SyS_mount+0xab/0x120 [ 323.600508] ? copy_mnt_ns+0xb30/0xb30 [ 323.604371] do_syscall_64+0x281/0x940 [ 323.608237] ? trace_event_raw_event_sys_exit+0x260/0x260 [ 323.613754] ? syscall_return_slowpath+0x550/0x550 [ 323.618658] ? syscall_return_slowpath+0x2ac/0x550 [ 323.623568] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 323.628913] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 323.633739] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 323.638902] RIP: 0033:0x4548b9 2018/03/29 11:12:03 executing program 1: io_setup(0x3, &(0x7f0000000000)=0x0) accept$unix(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000100)=0x6e) r1 = syz_open_dev$usbmon(&(0x7f0000000200)='/dev/usbmon#\x00', 0x0, 0x0) io_cancel(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0xf, 0x3, 0xffffffffffffffff, &(0x7f0000000140)="940c1f2149747e7734510c34c143183667a187dc4f624f6c2de12452792a6fb529e6bf2a661dc23a844b00925c244a9f2967c0ca9868ee50eacf67a2ad7681d82f5a38cbd6d7641f843fa129e00f701fb01835f497b53672b3e5a3f6838f28aa240bf21eb5e5cbe7804fd307404474ae0242f8dea7a08e0fe9479b06f2795f857f8eec271d35ba7f61a91c87296814189cc1dfc9c659cc5437452a0bd178323c50e8c005ba7fa9519b27965c9f6ffbc7dcaa8e658616cc83188fb131a703222d", 0xc0, 0x5, 0x0, 0x1}, &(0x7f0000000280)) io_getevents(r0, 0x2, 0x8f, &(0x7f0000d83f60)=[{}, {}], &(0x7f00005cfff0)={0x4000000000001, 0x7}) io_getevents(r0, 0x0, 0x5, &(0x7f00000002c0)=[{}, {}, {}, {}, {}], &(0x7f00000003c0)) io_setup(0x7, &(0x7f0000000040)) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/route\x00') ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000440)=0x0) perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x4a, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ef4}, r3, 0x0, 0xffffffffffffffff, 0x1) pread64(r2, &(0x7f0000000000)=""/85, 0xfe42, 0x5d) r4 = memfd_create(&(0x7f0000000240)=':+lo#\x00', 0x0) fdatasync(r4) io_submit(0x0, 0x1, &(0x7f0000001280)=[&(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f0000000100)}]) timerfd_create(0x7, 0x80800) io_destroy(r0) setsockopt$llc_int(r1, 0x10c, 0x9, &(0x7f0000000380)=0x3, 0x4) 2018/03/29 11:12:03 executing program 3: io_setup(0x3, &(0x7f0000000000)=0x0) accept$unix(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000100)=0x6e) r1 = syz_open_dev$usbmon(&(0x7f0000000200)='/dev/usbmon#\x00', 0x7ff, 0x0) io_cancel(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0xf, 0x0, 0xffffffffffffffff, &(0x7f0000000140)="940c1f2149747e7734510c34c143183667a187dc4f624f6c2de12452792a6fb529e6bf2a661dc23a844b00925c244a9f2967c0ca9868ee50eacf67a2ad7681d82f5a38cbd6d7641f843fa129e00f701fb01835f497b53672b3e5a3f6838f28aa240bf21eb5e5cbe7804fd307404474ae0242f8dea7a08e0fe9479b06f2795f857f8eec271d35ba7f61a91c87296814189cc1dfc9c659cc5437452a0bd178323c50e8c005ba7fa9519b27965c9f6ffbc7dcaa8e658616cc83188fb131a703222d", 0xc0, 0x5, 0x0, 0x1, r1}, &(0x7f0000000280)) io_getevents(r0, 0x2, 0x8f, &(0x7f0000d83f60)=[{}, {}], &(0x7f00005cfff0)={0x4000000000001, 0x7}) io_getevents(r0, 0x0, 0x5, &(0x7f00000002c0)=[{}, {}, {}, {}, {}], &(0x7f00000003c0)) io_setup(0x7, &(0x7f0000000040)) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/route\x00') ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f00000004c0)={0x3, &(0x7f0000000480)=[{}, {}, {0x0}]}) ioctl$DRM_IOCTL_NEW_CTX(r1, 0x40086425, &(0x7f0000000500)={r3, 0x2}) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000440)=0x0) perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x4a, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ef4}, r4, 0x0, r1, 0x1) pread64(r2, &(0x7f0000000000)=""/85, 0xfe42, 0x5d) r5 = memfd_create(&(0x7f0000000240)=':+lo#\x00', 0x0) fdatasync(r5) io_submit(r0, 0x1, &(0x7f0000001280)=[&(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, 0x0, r5, &(0x7f0000000100)}]) timerfd_create(0x7, 0x80800) io_destroy(r0) setsockopt$llc_int(r1, 0x10c, 0x9, &(0x7f0000000540)=0x3, 0x4) 2018/03/29 11:12:04 executing program 0: r0 = perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x4a, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffff9c, 0xc00caee0, &(0x7f0000000180)={0x0, r0, 0x1}) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) fcntl$getownex(r0, 0x10, &(0x7f0000000400)={0x0, 0x0}) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0xffff, 0xe3, 0x6, 0x4, 0x0, 0x7, 0x0, 0x2, 0x10001, 0x1, 0x7, 0x8, 0x100, 0x4, 0x0, 0x7f, 0x20, 0x0, 0x4, 0x5, 0x90a4, 0x7, 0x2, 0x73, 0x8, 0x7, 0x4, 0x7e0, 0x101, 0x0, 0x2, 0x309, 0x0, 0x9, 0xfffffffffffffff9, 0x9, 0x0, 0x4, 0x0, @perf_config_ext={0x20, 0x1}, 0x0, 0x2, 0x0, 0x4, 0xca1, 0xb5}, r4, 0x4, r1, 0x8) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) futimesat(r1, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0)={{r2, r3/1000+10000}, {r5, r6/1000+10000}}) unshare(0x8000000) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0xdc, 0x40}, 0x341) r8 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8910, &(0x7f0000000080)=@buf={0x0, &(0x7f0000000000)}) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x13, &(0x7f0000000ffc), 0x4) mq_open(&(0x7f00000000c0)='syzkaller0\x00', 0x40, 0x8, &(0x7f0000000100)={0x5, 0x80000000, 0x0, 0xfffffffffffffff9, 0x1, 0xfffffffffffffffd, 0x7fff, 0x200}) socket$inet_tcp(0x2, 0x1, 0x0) r9 = dup3(r8, r7, 0x80000) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r9, 0x84, 0x66, &(0x7f00000002c0)={0x0, 0x8ed6}, &(0x7f0000000300)=0x1) bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) shmget(0xffffffffffffffff, 0x8000, 0x49b, &(0x7f0000ff8000/0x8000)=nil) ioctl$sock_inet_SIOCGIFPFLAGS(r8, 0x8935, &(0x7f0000000080)={'syzkaller0\x00'}) ppoll(&(0x7f0000000780)=[{r1, 0x300}, {r1, 0x8401}], 0x2, &(0x7f00000007c0)={0x77359400}, &(0x7f0000000800)={0x9}, 0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000280)={0x0, 0x0, 0x9}, 0x10) r10 = semget$private(0x0, 0x4, 0x0) semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0x0, 0x1000}], 0x1, &(0x7f0000000080)={0x0, 0x1c9c380}) semctl$IPC_RMID(r10, 0x0, 0x0) 2018/03/29 11:12:04 executing program 7: io_setup(0x3, &(0x7f0000000000)=0x0) accept$unix(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000100)=0x6e) r1 = syz_open_dev$usbmon(&(0x7f0000000200)='/dev/usbmon#\x00', 0x7ff, 0x0) io_cancel(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0xf, 0x3, 0xffffffffffffffff, &(0x7f0000000140)="940c1f2149747e7734510c34c143183667a187dc4f624f6c2de12452792a6fb529e6bf2a661dc23a844b00925c244a9f2967c0ca9868ee50eacf67a2ad7681d82f5a38cbd6d7641f843fa129e00f701fb01835f497b53672b3e5a3f6838f28aa240bf21eb5e5cbe7804fd307404474ae0242f8dea7a08e0fe9479b06f2795f857f8eec271d35ba7f61a91c87296814189cc1dfc9c659cc5437452a0bd178323c50e8c005ba7fa9519b27965c9f6ffbc7dcaa8e658616cc83188fb131a703222d", 0xc0, 0x5, 0x0, 0x1}, &(0x7f0000000280)) io_getevents(r0, 0x2, 0x8f, &(0x7f0000d83f60)=[{}, {}], &(0x7f00005cfff0)={0x4000000000001, 0x7}) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) io_getevents(r0, 0x0, 0x5, &(0x7f00000002c0)=[{}, {}, {}, {}, {}], &(0x7f00000003c0)) io_setup(0x7, &(0x7f0000000040)) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/route\x00') ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000440)=0x0) perf_event_open(&(0x7f0000aaa000)={0x3, 0x70, 0x4a, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ef4}, r3, 0x0, 0xffffffffffffffff, 0x1) pread64(r2, &(0x7f0000000000)=""/85, 0xfe42, 0x5d) r4 = memfd_create(&(0x7f0000000240)=':+lo#\x00', 0x0) fdatasync(r4) io_submit(r0, 0x1, &(0x7f0000001280)=[&(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f0000000100)}]) socketpair$inet_sctp(0x2, 0x1, 0x84, &(0x7f0000000480)={0xffffffffffffffff}) timerfd_create(0x7, 0x80800) io_destroy(r0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x9, &(0x7f0000000380)=0x3, 0x4) setsockopt$inet_MCAST_LEAVE_GROUP(r5, 0x0, 0x2d, &(0x7f0000000540)={0x3ffc000, {{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xf}}}}, 0x88) [ 323.642068] RSP: 002b:00007f032fc57b08 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 323.649750] RAX: ffffffffffffffda RBX: 0000000000000019 RCX: 00000000004548b9 [ 323.656995] RDX: 00000000004b9225 RSI: 0000000020001740 RDI: 0000000020001780 [ 323.664244] RBP: 0000000020001780 R08: 00007f032fc57b20 R09: 0000000000000000 [ 323.671489] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 323.678733] R13: 00000000000003ff R14: 0000000000000000 R15: ffffffffffffffff 2018/03/29 11:12:04 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) readv(r0, &(0x7f0000001480)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x3}) r1 = syz_open_pts(r0, 0x2) r2 = dup3(r1, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000c34fff), 0xffffff0b) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0) preadv(r3, &(0x7f00000004c0)=[{&(0x7f0000000480)=""/21, 0x15}], 0x1, 0x0) fchdir(0xffffffffffffffff) mkdir(&(0x7f0000000280)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f", 0xfffffffffffffffc) fchmod(r2, 0x0) splice(r3, &(0x7f0000000400), 0xffffffffffffffff, &(0x7f0000000440), 0x9, 0x2) rename(&(0x7f0000001e00)='./file0\x00', &(0x7f0000000100)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f") setsockopt$inet6_int(r2, 0x29, 0xff, &(0x7f0000000200)=0x8646, 0x4) mkdir(&(0x7f000000e000)='./control\x00', 0x0) r4 = open(&(0x7f0000000000)='./control\x00', 0x0, 0x0) renameat2(r4, &(0x7f0000000040)='./file0\x00', r4, &(0x7f0000000080)='./control\x00', 0x2) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000300)={0x0, 0x80}, &(0x7f0000000340)=0x8) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000380)={r5, 0x5}, &(0x7f00000003c0)=0x8) mknodat(r4, &(0x7f000003f000)='./control\x00', 0x0, 0x0) ioctl$SIOCGIFHWADDR(r2, 0x8927, &(0x7f0000000240)) symlink(&(0x7f0000000180)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f", &(0x7f00000000c0)='./file0\x00') perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(r4, &(0x7f0000010000)='./control\x00', &(0x7f000003f000), &(0x7f0000001fe8), 0x0) 2018/03/29 11:12:04 executing program 2 (fault-call:21 fault-nth:19): r0 = syz_open_procfs(0x0, &(0x7f00000004c0)='oom_score_adj\x00') perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x49, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(r0, 0x0, 0x83, &(0x7f0000001800)={'nat\x00', 0x0, 0x3, 0x1000, [], 0x2, &(0x7f0000001280)=[{}, {}], &(0x7f0000002040)=""/4096}, &(0x7f00000013c0)=0x78) ioprio_get$pid(0x0, 0x0) timer_create(0x0, &(0x7f0000cd0000), &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00004b1fe0)={{0x0, 0x1c9c380}, {0x0, 0x9}}, &(0x7f0000040000)) r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x7fff) truncate(&(0x7f0000001180)='./bus\x00', 0x4) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000f40000)='/dev/ptmx\x00', 0x200000000101002, 0x0) sendfile(r2, 0xffffffffffffffff, &(0x7f00000010c0), 0x10000065) sendfile(r0, r1, &(0x7f0000000000), 0x4) tkill(0x0, 0x0) r3 = memfd_create(&(0x7f0000000000)='\x00', 0x1) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000001200)) recvmsg(0xffffffffffffff9c, &(0x7f0000001500)={&(0x7f00000012c0)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @remote}}}, 0x80, &(0x7f0000001400)=[{&(0x7f0000001340)=""/103, 0x67}], 0x1, &(0x7f0000001440)=""/155, 0x9b}, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000001540)) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000001640)={0x1ff, {0x2, 0x4e21}, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, {0x2, 0x0, @multicast2=0xe0000002}, 0x0, 0x9, 0x2, 0x6, 0x0, &(0x7f0000001240)='teql0\x00', 0x0, 0x80}) inotify_rm_watch(0xffffffffffffffff, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000140), &(0x7f0000000100)=0xffffffa4) getgroups(0x1, &(0x7f0000001600)=[0x0]) syz_fuseblk_mount(&(0x7f0000001740)='./file0\x00', &(0x7f0000001780)='./file0\x00', 0x0, 0x0, 0xffffffffffffffff, 0x3ff, 0x1, 0x0) getpgrp(0xffffffffffffffff) getegid() sendmmsg$unix(r3, &(0x7f0000001880), 0x0, 0x0) setsockopt$netrom_NETROM_T4(0xffffffffffffffff, 0x103, 0x6, &(0x7f00000017c0), 0xfffffffffffffc77) readv(0xffffffffffffffff, &(0x7f000004ffe0), 0x0) [ 323.764836] FAULT_INJECTION: forcing a failure. [ 323.764836] name failslab, interval 1, probability 0, space 0, times 0 [ 323.776186] CPU: 0 PID: 8844 Comm: syz-executor2 Not tainted 4.16.0-rc7+ #5 [ 323.783290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 323.792637] Call Trace: [ 323.795231] dump_stack+0x194/0x24d [ 323.798851] ? arch_local_irq_restore+0x53/0x53 [ 323.803501] ? kernel_text_address+0x102/0x140 [ 323.808067] should_fail+0x8c0/0xa40 [ 323.811759] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 323.816863] ? save_stack+0x43/0xd0 [ 323.820481] ? kasan_kmalloc+0xad/0xe0 [ 323.824363] ? __kmalloc+0x162/0x760 [ 323.828057] ? __list_lru_init+0xcf/0x750 [ 323.832192] ? find_held_lock+0x35/0x1d0 [ 323.836269] ? __lock_is_held+0xb6/0x140 [ 323.840352] ? check_same_owner+0x320/0x320 [ 323.844671] ? rcu_note_context_switch+0x710/0x710 [ 323.849613] should_failslab+0xec/0x120 [ 323.853581] kmem_cache_alloc_node_trace+0x5a/0x760 [ 323.858577] ? mark_held_locks+0xaf/0x100 [ 323.862710] ? __raw_spin_lock_init+0x1c/0x100 [ 323.867300] __kmalloc_node+0x33/0x70 [ 323.871106] kvmalloc_node+0x99/0xd0 [ 323.874821] __list_lru_init+0x5d5/0x750 [ 323.878878] ? memcg_destroy_list_lru_node.isra.7+0x110/0x110 [ 323.884741] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 323.889737] ? __lockdep_init_map+0xe4/0x650 [ 323.894119] ? lockdep_init_map+0x9/0x10 [ 323.898161] sget_userns+0x691/0xe40 [ 323.901847] ? kill_litter_super+0x90/0x90 [ 323.906059] ? ns_test_super+0x50/0x50 [ 323.909920] ? destroy_unused_super.part.6+0xd0/0xd0 [ 323.914994] ? do_raw_spin_trylock+0x190/0x190 [ 323.919558] ? kobject_put+0x6b/0x250 [ 323.923354] ? blkdev_get+0x3a1/0xb00 [ 323.927156] ? cap_capable+0x1b5/0x230 [ 323.931033] ? __blkdev_get+0x13b0/0x13b0 [ 323.935179] ? security_capable+0x8e/0xc0 [ 323.939322] ? kill_litter_super+0x90/0x90 [ 323.943538] ? ns_capable_common+0xcf/0x160 [ 323.947840] ? ns_test_super+0x50/0x50 [ 323.951702] ? kill_litter_super+0x90/0x90 [ 323.955913] sget+0xd2/0x120 [ 323.958913] mount_bdev+0x109/0x370 [ 323.962510] ? fuse_get_root_inode+0x190/0x190 [ 323.967071] fuse_mount_blk+0x34/0x40 [ 323.970846] mount_fs+0x66/0x2d0 [ 323.974190] vfs_kern_mount.part.26+0xc6/0x4a0 [ 323.978747] ? may_umount+0xa0/0xa0 [ 323.982349] ? _raw_read_unlock+0x22/0x30 [ 323.986477] ? __get_fs_type+0x8a/0xc0 [ 323.990359] do_mount+0xea4/0x2bb0 [ 323.993883] ? copy_mount_string+0x40/0x40 [ 323.998091] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 324.003081] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 324.007818] ? retint_kernel+0x10/0x10 [ 324.011691] ? copy_mount_options+0x149/0x2e0 [ 324.016162] ? __sanitizer_cov_trace_pc+0x3b/0x50 [ 324.020980] ? copy_mount_options+0x1f7/0x2e0 [ 324.025451] SyS_mount+0xab/0x120 [ 324.028888] ? copy_mnt_ns+0xb30/0xb30 [ 324.032755] do_syscall_64+0x281/0x940 [ 324.036621] ? __do_page_fault+0xc90/0xc90 [ 324.040835] ? _raw_spin_unlock_irq+0x27/0x70 [ 324.045313] ? finish_task_switch+0x1c1/0x7e0 [ 324.049798] ? syscall_return_slowpath+0x550/0x550 [ 324.054709] ? syscall_return_slowpath+0x2ac/0x550 [ 324.059623] ? prepare_exit_to_usermode+0x350/0x350 [ 324.064624] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 324.069967] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 324.074790] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 324.079952] RIP: 0033:0x4548b9 [ 324.083118] RSP: 002b:00007f032fc57b08 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 324.090801] RAX: ffffffffffffffda RBX: 0000000000000019 RCX: 00000000004548b9 [ 324.098049] RDX: 00000000004b9225 RSI: 0000000020001740 RDI: 0000000020001780 [ 324.105292] RBP: 0000000020001780 R08: 00007f032fc57b20 R09: 0000000000000000 [ 324.112539] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 324.119788] R13: 00000000000003ff R14: 0000000000000000 R15: ffffffffffffffff 2018/03/29 11:12:04 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) mkdir(&(0x7f0000000280)='./file1\x00', 0x0) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000811ffa)='bdev\x00', 0x0, &(0x7f0000444000)) mount(&(0x7f0000fb6000)='./file0\x00', &(0x7f0000d78000)='.', &(0x7f0000fdb000)='ubifs\x00', 0x1003, 0x0) mount(&(0x7f00002b9ff8)='./file0\x00', &(0x7f0000cbeff8)='./file0\x00', &(0x7f00005f7ffa)='ramfs\x00', 0x80000, &(0x7f000002f000)) mount(&(0x7f0000000040)='.', &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0)='binfmt_misc\x00', 0x0, &(0x7f0000000100)) r0 = syz_open_dev$sndpcmc(&(0x7f0000000340)='/dev/snd/pcmC#D#c\x00', 0x0, 0x20000) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000380)={0x0}, &(0x7f00000003c0)=0x8) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000400)={r1, 0x200}, &(0x7f0000000440)=0x8) sigaltstack(&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000240)) epoll_create(0xffffffffffffff62) r2 = syz_open_dev$sndmidi(&(0x7f00000002c0)='/dev/snd/midiC#D#\x00', 0x5, 0x100) fchmodat(r2, &(0x7f0000000300)='./file1\x00', 0x100) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) mount(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./file1\x00', &(0x7f0000000200)='anon_inodefs\x00', 0x2000, &(0x7f0000000240)) mount(&(0x7f0000adcff8)='./file0\x00', &(0x7f0000e08fff)='.', &(0x7f0000000100)='cifs\x00', 0x2000, &(0x7f0000000140)="ad8981a7c7b4fae7db26e4c9b35f4893f8d382") 2018/03/29 11:12:04 executing program 0: r0 = perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x4a, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffff9c, 0xc00caee0, &(0x7f0000000180)={0x0, r0, 0x1}) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) fcntl$getownex(r0, 0x10, &(0x7f0000000400)={0x0, 0x0}) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0xffff, 0xe3, 0x6, 0x4, 0x0, 0x7, 0x0, 0x2, 0x10001, 0x1, 0x7, 0x8, 0x100, 0x4, 0x0, 0x7f, 0x20, 0x0, 0x4, 0x5, 0x90a4, 0x7, 0x2, 0x73, 0x8, 0x7, 0x4, 0x7e0, 0x101, 0x0, 0x2, 0x309, 0x0, 0x9, 0xfffffffffffffff9, 0x9, 0x0, 0x4, 0x0, @perf_config_ext={0x20, 0x1}, 0x8140, 0x0, 0x0, 0x4, 0xca1, 0xb5}, r4, 0x4, r1, 0x8) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) futimesat(r1, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0)={{r2, r3/1000+10000}, {r5, r6/1000+10000}}) unshare(0x8000000) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0xdc, 0x40}, 0x341) r8 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8910, &(0x7f0000000080)=@buf={0x0, &(0x7f0000000000)}) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x13, &(0x7f0000000ffc), 0x4) mq_open(&(0x7f00000000c0)='syzkaller0\x00', 0x40, 0x8, &(0x7f0000000100)={0x5, 0x80000000, 0x0, 0xfffffffffffffff9, 0x1, 0xfffffffffffffffd, 0x7fff, 0x200}) socket$inet_tcp(0x2, 0x1, 0x0) r9 = dup3(r8, r7, 0x80000) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r9, 0x84, 0x66, &(0x7f00000002c0)={0x0, 0x8ed6}, &(0x7f0000000300)=0x1) bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) shmget(0xffffffffffffffff, 0x8000, 0x49b, &(0x7f0000ff8000/0x8000)=nil) ioctl$sock_inet_SIOCGIFPFLAGS(r8, 0x8935, &(0x7f0000000080)={'syzkaller0\x00'}) ppoll(&(0x7f0000000780)=[{r1, 0x300}, {r1, 0x8401}], 0x2, &(0x7f00000007c0)={0x77359400}, &(0x7f0000000800)={0x9}, 0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000280)={0x0, 0x0, 0x9}, 0x10) r10 = semget$private(0x0, 0x4, 0x0) semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0x0, 0x1000}], 0x1, &(0x7f0000000080)={0x0, 0x1c9c380}) semctl$IPC_RMID(r10, 0x0, 0x0) 2018/03/29 11:12:04 executing program 1: io_setup(0x3, &(0x7f0000000000)=0x0) accept$unix(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000100)=0x6e) r1 = syz_open_dev$usbmon(&(0x7f0000000200)='/dev/usbmon#\x00', 0x0, 0x0) io_cancel(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0xf, 0x3, 0xffffffffffffffff, &(0x7f0000000140)="940c1f2149747e7734510c34c143183667a187dc4f624f6c2de12452792a6fb529e6bf2a661dc23a844b00925c244a9f2967c0ca9868ee50eacf67a2ad7681d82f5a38cbd6d7641f843fa129e00f701fb01835f497b53672b3e5a3f6838f28aa240bf21eb5e5cbe7804fd307404474ae0242f8dea7a08e0fe9479b06f2795f857f8eec271d35ba7f61a91c87296814189cc1dfc9c659cc5437452a0bd178323c50e8c005ba7fa9519b27965c9f6ffbc7dcaa8e658616cc83188fb131a703222d", 0xc0, 0x5, 0x0, 0x1}, &(0x7f0000000280)) io_getevents(r0, 0x2, 0x8f, &(0x7f0000d83f60)=[{}, {}], &(0x7f00005cfff0)={0x4000000000001, 0x7}) io_getevents(r0, 0x0, 0x5, &(0x7f00000002c0)=[{}, {}, {}, {}, {}], &(0x7f00000003c0)) io_setup(0x7, &(0x7f0000000040)) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/route\x00') ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000440)=0x0) perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x4a, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ef4}, r3, 0x0, 0xffffffffffffffff, 0x1) pread64(r2, &(0x7f0000000000)=""/85, 0xfe42, 0x5d) r4 = memfd_create(&(0x7f0000000240)=':+lo#\x00', 0x0) fdatasync(r4) io_submit(r0, 0x0, &(0x7f0000001280)) timerfd_create(0x7, 0x80800) io_destroy(r0) setsockopt$llc_int(r1, 0x10c, 0x9, &(0x7f0000000380)=0x3, 0x4) 2018/03/29 11:12:04 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) readv(r0, &(0x7f0000001480)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x3}) r1 = syz_open_pts(r0, 0x2) r2 = dup3(r1, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000c34fff), 0xffffff0b) r3 = geteuid() r4 = geteuid() setreuid(r3, r4) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0) preadv(r5, &(0x7f00000004c0)=[{&(0x7f0000000480)=""/21, 0x15}], 0x1, 0x0) fchdir(0xffffffffffffffff) mkdir(&(0x7f0000000280)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f", 0xfffffffffffffffc) fchmod(r2, 0x0) r6 = syz_genetlink_get_family_id$fou(&(0x7f0000001500)='fou\x00') sendmsg$FOU_CMD_ADD(r2, &(0x7f00000015c0)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001580)={&(0x7f0000001540)={0x1c, r6, 0x420, 0x70bd27, 0x25dfdbfd, {0x1}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x404c000}, 0x20000001) splice(r5, &(0x7f0000000400), 0xffffffffffffffff, &(0x7f0000000440), 0x9, 0x2) rename(&(0x7f0000001e00)='./file0\x00', &(0x7f0000000100)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f") mkdir(&(0x7f000000e000)='./control\x00', 0x0) r7 = open(&(0x7f0000000000)='./control\x00', 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ppp\x00', 0x10000, 0x0) renameat2(r7, &(0x7f0000000040)='./file0\x00', r7, &(0x7f0000000080)='./control\x00', 0x2) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r7, 0x84, 0x76, &(0x7f0000000300)={0x0, 0x80}, &(0x7f0000000340)=0x8) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r7, 0x84, 0x76, &(0x7f0000000380)={r8, 0x5}, &(0x7f00000003c0)=0x8) mknodat(r7, &(0x7f000003f000)='./control\x00', 0x0, 0x0) symlink(&(0x7f0000000180)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f", &(0x7f00000000c0)='./file0\x00') perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(r7, &(0x7f0000010000)='./control\x00', &(0x7f000003f000), &(0x7f0000001fe8), 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000240)=0x1f) 2018/03/29 11:12:04 executing program 3: io_setup(0x3, &(0x7f0000000000)=0x0) accept$unix(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000100)=0x6e) r1 = syz_open_dev$usbmon(&(0x7f0000000200)='/dev/usbmon#\x00', 0x7ff, 0x0) io_cancel(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0xf, 0x0, 0xffffffffffffffff, &(0x7f0000000140)="940c1f2149747e7734510c34c143183667a187dc4f624f6c2de12452792a6fb529e6bf2a661dc23a844b00925c244a9f2967c0ca9868ee50eacf67a2ad7681d82f5a38cbd6d7641f843fa129e00f701fb01835f497b53672b3e5a3f6838f28aa240bf21eb5e5cbe7804fd307404474ae0242f8dea7a08e0fe9479b06f2795f857f8eec271d35ba7f61a91c87296814189cc1dfc9c659cc5437452a0bd178323c50e8c005ba7fa9519b27965c9f6ffbc7dcaa8e658616cc83188fb131a703222d", 0xc0, 0x5, 0x0, 0x1, r1}, &(0x7f0000000280)) io_getevents(r0, 0x2, 0x8f, &(0x7f0000d83f60)=[{}, {}], &(0x7f00005cfff0)={0x4000000000001, 0x7}) io_getevents(r0, 0x0, 0x5, &(0x7f00000002c0)=[{}, {}, {}, {}, {}], &(0x7f00000003c0)) io_setup(0x7, &(0x7f0000000040)) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/route\x00') ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000440)=0x0) perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x4a, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ef4}, r3, 0x0, r1, 0x1) pread64(r2, &(0x7f0000000000)=""/85, 0xfe42, 0x5d) r4 = memfd_create(&(0x7f0000000240)=':+lo#\x00', 0x0) fdatasync(r4) io_submit(r0, 0x1, &(0x7f0000001280)=[&(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f0000000100)}]) timerfd_create(0x7, 0x80800) io_destroy(r0) setsockopt$llc_int(r1, 0x10c, 0x9, &(0x7f0000000380)=0x3, 0x4) connect$netlink(r4, &(0x7f0000000480)=@unspec, 0xc) 2018/03/29 11:12:04 executing program 2 (fault-call:21 fault-nth:20): r0 = syz_open_procfs(0x0, &(0x7f00000004c0)='oom_score_adj\x00') perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x49, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(r0, 0x0, 0x83, &(0x7f0000001800)={'nat\x00', 0x0, 0x3, 0x1000, [], 0x2, &(0x7f0000001280)=[{}, {}], &(0x7f0000002040)=""/4096}, &(0x7f00000013c0)=0x78) ioprio_get$pid(0x0, 0x0) timer_create(0x0, &(0x7f0000cd0000), &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00004b1fe0)={{0x0, 0x1c9c380}, {0x0, 0x9}}, &(0x7f0000040000)) r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x7fff) truncate(&(0x7f0000001180)='./bus\x00', 0x4) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000f40000)='/dev/ptmx\x00', 0x200000000101002, 0x0) sendfile(r2, 0xffffffffffffffff, &(0x7f00000010c0), 0x10000065) sendfile(r0, r1, &(0x7f0000000000), 0x4) tkill(0x0, 0x0) r3 = memfd_create(&(0x7f0000000000)='\x00', 0x1) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000001200)) recvmsg(0xffffffffffffff9c, &(0x7f0000001500)={&(0x7f00000012c0)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @remote}}}, 0x80, &(0x7f0000001400)=[{&(0x7f0000001340)=""/103, 0x67}], 0x1, &(0x7f0000001440)=""/155, 0x9b}, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000001540)) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000001640)={0x1ff, {0x2, 0x4e21}, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, {0x2, 0x0, @multicast2=0xe0000002}, 0x0, 0x9, 0x2, 0x6, 0x0, &(0x7f0000001240)='teql0\x00', 0x0, 0x80}) inotify_rm_watch(0xffffffffffffffff, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000140), &(0x7f0000000100)=0xffffffa4) getgroups(0x1, &(0x7f0000001600)=[0x0]) syz_fuseblk_mount(&(0x7f0000001740)='./file0\x00', &(0x7f0000001780)='./file0\x00', 0x0, 0x0, 0xffffffffffffffff, 0x3ff, 0x1, 0x0) getpgrp(0xffffffffffffffff) getegid() sendmmsg$unix(r3, &(0x7f0000001880), 0x0, 0x0) setsockopt$netrom_NETROM_T4(0xffffffffffffffff, 0x103, 0x6, &(0x7f00000017c0), 0xfffffffffffffc77) readv(0xffffffffffffffff, &(0x7f000004ffe0), 0x0) 2018/03/29 11:12:04 executing program 6: openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x0, 0x0) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, &(0x7f0000000340)=0x1) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f000051cff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000943ffc)=0xa35) read(r0, &(0x7f00003fefff)=""/1, 0x1) r1 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000029000)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r0, &(0x7f0000dcdff0)=[{&(0x7f0000cd8000)=""/1, 0x1}], 0x1) ioctl$int_in(r2, 0x5452, &(0x7f0000b28000)=0x3c) write$cgroup_type(0xffffffffffffffff, &(0x7f00000002c0)='threaded\x00', 0x9) syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x0, 0x802) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000fb9000)) fcntl$setsig(r2, 0xa, 0x12) poll(&(0x7f0000b2c000), 0x0, 0xfffffffffffffff8) read$eventfd(0xffffffffffffffff, &(0x7f0000000040), 0x8) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)) r4 = dup2(r2, r3) fcntl$setown(r4, 0x8, r1) ptrace$cont(0xffffffffffffffff, r1, 0x0, 0x8) tkill(r1, 0x16) r5 = gettid() process_vm_readv(r5, &(0x7f0000001880)=[{&(0x7f0000000680)=""/198, 0xc6}, {&(0x7f0000000780)=""/247, 0xf7}, {&(0x7f0000000380)=""/12, 0xc}, {&(0x7f00000003c0)=""/6, 0x6}, {&(0x7f0000000400)=""/14, 0xe}], 0x5, &(0x7f00000019c0)=[{&(0x7f0000001900)=""/41, 0x29}, {&(0x7f0000001940)=""/112, 0x70}], 0x2, 0x0) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f0000000240)={{{@in6}}, {{@in=@local}, 0x0, @in=@local}}, &(0x7f0000000100)=0xe8) 2018/03/29 11:12:04 executing program 7: io_setup(0x3, &(0x7f0000000000)=0x0) accept$unix(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000100)=0x6e) syz_open_dev$usbmon(&(0x7f0000000200)='/dev/usbmon#\x00', 0x7ff, 0x0) io_cancel(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0xf, 0x3, 0xffffffffffffffff, &(0x7f0000000140)="940c1f2149747e7734510c34c143183667a187dc4f624f6c2de12452792a6fb529e6bf2a661dc23a844b00925c244a9f2967c0ca9868ee50eacf67a2ad7681d82f5a38cbd6d7641f843fa129e00f701fb01835f497b53672b3e5a3f6838f28aa240bf21eb5e5cbe7804fd307404474ae0242f8dea7a08e0fe9479b06f2795f857f8eec271d35ba7f61a91c87296814189cc1dfc9c659cc5437452a0bd178323c50e8c005ba7fa9519b27965c9f6ffbc7dcaa8e658616cc83188fb131a703222d", 0xc0, 0x5, 0x0, 0x1}, &(0x7f0000000280)) io_getevents(r0, 0x2, 0x8f, &(0x7f0000d83f60)=[{}, {}], &(0x7f00005cfff0)={0x4000000000001, 0x7}) io_getevents(r0, 0x0, 0x5, &(0x7f00000002c0)=[{}, {}, {}, {}, {}], &(0x7f00000003c0)) io_setup(0x7, &(0x7f0000000040)) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/route\x00') ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000440)=0x0) perf_event_open(&(0x7f0000aaa000)={0x0, 0x70, 0x4a, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ef4}, r2, 0x0, 0xffffffffffffffff, 0x1) pread64(r1, &(0x7f0000000000)=""/85, 0xfe42, 0x5d) r3 = memfd_create(&(0x7f0000000240)=':+lo#\x00', 0x0) fdatasync(r3) io_submit(r0, 0x1, &(0x7f0000001280)=[&(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000000100)}]) r4 = timerfd_create(0x7, 0x80800) io_destroy(r0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x9, &(0x7f0000000380)=0x3, 0x4) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f00000004c0)={0x0, &(0x7f0000000480), 0x8, r4, 0x1}) [ 324.337241] FAULT_INJECTION: forcing a failure. [ 324.337241] name failslab, interval 1, probability 0, space 0, times 0 [ 324.348592] CPU: 1 PID: 8868 Comm: syz-executor2 Not tainted 4.16.0-rc7+ #5 [ 324.355694] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 324.365031] Call Trace: [ 324.367597] dump_stack+0x194/0x24d [ 324.371204] ? arch_local_irq_restore+0x53/0x53 [ 324.375855] ? kernel_text_address+0x102/0x140 [ 324.380424] should_fail+0x8c0/0xa40 [ 324.384115] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 324.389205] ? save_stack+0x43/0xd0 [ 324.392805] ? kasan_kmalloc+0xad/0xe0 [ 324.396668] ? __kmalloc+0x162/0x760 [ 324.400360] ? __list_lru_init+0xcf/0x750 [ 324.404486] ? find_held_lock+0x35/0x1d0 [ 324.408526] ? __lock_is_held+0xb6/0x140 [ 324.412578] ? check_same_owner+0x320/0x320 [ 324.416877] ? rcu_note_context_switch+0x710/0x710 [ 324.421789] should_failslab+0xec/0x120 [ 324.425742] kmem_cache_alloc_node_trace+0x5a/0x760 [ 324.430732] ? mark_held_locks+0xaf/0x100 [ 324.434858] ? __raw_spin_lock_init+0x1c/0x100 [ 324.439422] __kmalloc_node+0x33/0x70 [ 324.443201] kvmalloc_node+0x99/0xd0 [ 324.446892] __list_lru_init+0x5d5/0x750 [ 324.450937] ? memcg_destroy_list_lru_node.isra.7+0x110/0x110 [ 324.456797] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 324.461788] ? __lockdep_init_map+0xe4/0x650 [ 324.466176] ? lockdep_init_map+0x9/0x10 [ 324.470220] sget_userns+0x691/0xe40 [ 324.473908] ? kill_litter_super+0x90/0x90 [ 324.478124] ? ns_test_super+0x50/0x50 [ 324.481991] ? destroy_unused_super.part.6+0xd0/0xd0 [ 324.487069] ? do_raw_spin_trylock+0x190/0x190 [ 324.491630] ? kobject_put+0x6b/0x250 [ 324.495414] ? blkdev_get+0x3a1/0xb00 [ 324.499196] ? cap_capable+0x1b5/0x230 [ 324.503057] ? __blkdev_get+0x13b0/0x13b0 [ 324.507185] ? security_capable+0x8e/0xc0 [ 324.511310] ? kill_litter_super+0x90/0x90 [ 324.515518] ? ns_capable_common+0xcf/0x160 [ 324.519819] ? ns_test_super+0x50/0x50 [ 324.523678] ? kill_litter_super+0x90/0x90 [ 324.527888] sget+0xd2/0x120 [ 324.530888] mount_bdev+0x109/0x370 [ 324.534487] ? fuse_get_root_inode+0x190/0x190 [ 324.539049] fuse_mount_blk+0x34/0x40 [ 324.542829] mount_fs+0x66/0x2d0 [ 324.546178] vfs_kern_mount.part.26+0xc6/0x4a0 [ 324.550736] ? may_umount+0xa0/0xa0 [ 324.554340] ? _raw_read_unlock+0x22/0x30 [ 324.558464] ? __get_fs_type+0x8a/0xc0 [ 324.562334] do_mount+0xea4/0x2bb0 [ 324.565857] ? copy_mount_string+0x40/0x40 [ 324.570068] ? rcu_pm_notify+0xc0/0xc0 [ 324.573941] ? copy_mount_options+0x5f/0x2e0 [ 324.578332] ? rcu_read_lock_sched_held+0x108/0x120 [ 324.583325] ? kmem_cache_alloc_trace+0x459/0x740 [ 324.588144] ? kasan_check_write+0x14/0x20 [ 324.592355] ? _copy_from_user+0x99/0x110 [ 324.596484] ? copy_mount_options+0x1f7/0x2e0 [ 324.600957] SyS_mount+0xab/0x120 [ 324.604386] ? copy_mnt_ns+0xb30/0xb30 [ 324.608253] do_syscall_64+0x281/0x940 [ 324.612115] ? __do_page_fault+0xc90/0xc90 [ 324.616322] ? _raw_spin_unlock_irq+0x27/0x70 [ 324.620795] ? finish_task_switch+0x1c1/0x7e0 [ 324.625266] ? syscall_return_slowpath+0x550/0x550 [ 324.630172] ? syscall_return_slowpath+0x2ac/0x550 [ 324.635075] ? prepare_exit_to_usermode+0x350/0x350 [ 324.640068] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 324.645414] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 324.650241] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 324.655403] RIP: 0033:0x4548b9 [ 324.658568] RSP: 002b:00007f032fc57b08 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 324.666249] RAX: ffffffffffffffda RBX: 0000000000000019 RCX: 00000000004548b9 [ 324.673492] RDX: 00000000004b9225 RSI: 0000000020001740 RDI: 0000000020001780 [ 324.680734] RBP: 0000000020001780 R08: 00007f032fc57b20 R09: 0000000000000000 2018/03/29 11:12:05 executing program 2 (fault-call:21 fault-nth:21): r0 = syz_open_procfs(0x0, &(0x7f00000004c0)='oom_score_adj\x00') perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x49, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(r0, 0x0, 0x83, &(0x7f0000001800)={'nat\x00', 0x0, 0x3, 0x1000, [], 0x2, &(0x7f0000001280)=[{}, {}], &(0x7f0000002040)=""/4096}, &(0x7f00000013c0)=0x78) ioprio_get$pid(0x0, 0x0) timer_create(0x0, &(0x7f0000cd0000), &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00004b1fe0)={{0x0, 0x1c9c380}, {0x0, 0x9}}, &(0x7f0000040000)) r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x7fff) truncate(&(0x7f0000001180)='./bus\x00', 0x4) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000f40000)='/dev/ptmx\x00', 0x200000000101002, 0x0) sendfile(r2, 0xffffffffffffffff, &(0x7f00000010c0), 0x10000065) sendfile(r0, r1, &(0x7f0000000000), 0x4) tkill(0x0, 0x0) r3 = memfd_create(&(0x7f0000000000)='\x00', 0x1) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000001200)) recvmsg(0xffffffffffffff9c, &(0x7f0000001500)={&(0x7f00000012c0)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @remote}}}, 0x80, &(0x7f0000001400)=[{&(0x7f0000001340)=""/103, 0x67}], 0x1, &(0x7f0000001440)=""/155, 0x9b}, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000001540)) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000001640)={0x1ff, {0x2, 0x4e21}, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, {0x2, 0x0, @multicast2=0xe0000002}, 0x0, 0x9, 0x2, 0x6, 0x0, &(0x7f0000001240)='teql0\x00', 0x0, 0x80}) inotify_rm_watch(0xffffffffffffffff, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000140), &(0x7f0000000100)=0xffffffa4) getgroups(0x1, &(0x7f0000001600)=[0x0]) syz_fuseblk_mount(&(0x7f0000001740)='./file0\x00', &(0x7f0000001780)='./file0\x00', 0x0, 0x0, 0xffffffffffffffff, 0x3ff, 0x1, 0x0) getpgrp(0xffffffffffffffff) getegid() sendmmsg$unix(r3, &(0x7f0000001880), 0x0, 0x0) setsockopt$netrom_NETROM_T4(0xffffffffffffffff, 0x103, 0x6, &(0x7f00000017c0), 0xfffffffffffffc77) readv(0xffffffffffffffff, &(0x7f000004ffe0), 0x0) 2018/03/29 11:12:05 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000001bfc8)={&(0x7f0000016000)={0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000021000)=@mpls_getroute={0x1c, 0x1a, 0x9, 0x0, 0x0, {0x1c}}, 0x1c}, 0x1}, 0x0) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) mkdir(&(0x7f0000000000)='./file1\x00', 0x0) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000811ffa)='bdev\x00', 0x0, &(0x7f0000444000)) mount(&(0x7f0000fb6000)='./file0\x00', &(0x7f0000d78000)='.', &(0x7f0000fdb000)='ubifs\x00', 0x1003, 0x0) mount(&(0x7f00002b9ff8)='./file0\x00', &(0x7f0000cbeff8)='./file0\x00', &(0x7f00005f7ffa)='ramfs\x00', 0x80000, &(0x7f000002f000)) mount(&(0x7f0000000040)='.', &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0)='binfmt_misc\x00', 0x0, &(0x7f0000000100)) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) mount(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./file1\x00', &(0x7f0000000200)='anon_inodefs\x00', 0x2000, &(0x7f0000000240)) mount(&(0x7f0000adcff8)='./file0\x00', &(0x7f0000e08fff)='.', &(0x7f00005e9000)='cifs\x00', 0x2000, &(0x7f0000ad5000)) [ 324.687976] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 324.695219] R13: 00000000000003ff R14: 0000000000000000 R15: ffffffffffffffff 2018/03/29 11:12:05 executing program 1: io_setup(0x3, &(0x7f0000000000)=0x0) accept$unix(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000100)=0x6e) r1 = syz_open_dev$usbmon(&(0x7f0000000200)='/dev/usbmon#\x00', 0x0, 0x0) io_cancel(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0xf, 0x3, 0xffffffffffffffff, &(0x7f0000000140)="940c1f2149747e7734510c34c143183667a187dc4f624f6c2de12452792a6fb529e6bf2a661dc23a844b00925c244a9f2967c0ca9868ee50eacf67a2ad7681d82f5a38cbd6d7641f843fa129e00f701fb01835f497b53672b3e5a3f6838f28aa240bf21eb5e5cbe7804fd307404474ae0242f8dea7a08e0fe9479b06f2795f857f8eec271d35ba7f61a91c87296814189cc1dfc9c659cc5437452a0bd178323c50e8c005ba7fa9519b27965c9f6ffbc7dcaa8e658616cc83188fb131a703222d", 0xc0, 0x5, 0x0, 0x1}, &(0x7f0000000280)) io_getevents(r0, 0x2, 0x8f, &(0x7f0000d83f60)=[{}, {}], &(0x7f00005cfff0)={0x4000000000001, 0x7}) io_getevents(r0, 0x0, 0x5, &(0x7f00000002c0)=[{}, {}, {}, {}, {}], &(0x7f00000003c0)) io_setup(0x7, &(0x7f0000000040)) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/route\x00') ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000440)=0x0) perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x4a, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ef4}, r3, 0x0, 0xffffffffffffffff, 0x1) pread64(r2, &(0x7f0000000000)=""/85, 0xfe42, 0x5d) r4 = memfd_create(&(0x7f0000000240)=':+lo#\x00', 0x0) fdatasync(r4) io_submit(r0, 0x1, &(0x7f0000001280)=[&(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000100)}]) timerfd_create(0x7, 0x80800) io_destroy(r0) setsockopt$llc_int(r1, 0x10c, 0x9, &(0x7f0000000380)=0x3, 0x4) [ 324.767421] FAULT_INJECTION: forcing a failure. [ 324.767421] name failslab, interval 1, probability 0, space 0, times 0 [ 324.778902] CPU: 1 PID: 8884 Comm: syz-executor2 Not tainted 4.16.0-rc7+ #5 [ 324.785997] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 324.795335] Call Trace: [ 324.797905] dump_stack+0x194/0x24d [ 324.801511] ? arch_local_irq_restore+0x53/0x53 [ 324.806158] ? rcutorture_record_progress+0x10/0x10 [ 324.811156] should_fail+0x8c0/0xa40 [ 324.814847] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 324.819923] ? __kernel_text_address+0xd/0x40 [ 324.824393] ? unwind_get_return_address+0x61/0xa0 [ 324.829312] ? find_held_lock+0x35/0x1d0 [ 324.833353] ? __lock_is_held+0xb6/0x140 [ 324.837405] ? check_same_owner+0x320/0x320 [ 324.841703] ? rcu_note_context_switch+0x710/0x710 [ 324.846617] should_failslab+0xec/0x120 [ 324.850569] kmem_cache_alloc_trace+0x4b/0x740 [ 324.855129] ? __kmalloc_node+0x33/0x70 [ 324.859078] ? __kmalloc_node+0x33/0x70 [ 324.863035] ? rcu_read_lock_sched_held+0x108/0x120 [ 324.868037] __memcg_init_list_lru_node+0x169/0x270 [ 324.873036] ? list_lru_add+0x7c0/0x7c0 [ 324.876986] ? __kmalloc_node+0x47/0x70 [ 324.880943] __list_lru_init+0x544/0x750 [ 324.884988] ? memcg_destroy_list_lru_node.isra.7+0x110/0x110 [ 324.890851] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 324.895845] ? __lockdep_init_map+0xe4/0x650 [ 324.900232] ? lockdep_init_map+0x9/0x10 [ 324.904275] sget_userns+0x691/0xe40 [ 324.907960] ? kill_litter_super+0x90/0x90 [ 324.912174] ? ns_test_super+0x50/0x50 [ 324.916041] ? destroy_unused_super.part.6+0xd0/0xd0 [ 324.921117] ? do_raw_spin_trylock+0x190/0x190 [ 324.925679] ? kobject_put+0x6b/0x250 [ 324.929464] ? blkdev_get+0x3a1/0xb00 [ 324.933247] ? cap_capable+0x1b5/0x230 [ 324.937113] ? __blkdev_get+0x13b0/0x13b0 [ 324.941244] ? security_capable+0x8e/0xc0 [ 324.945370] ? kill_litter_super+0x90/0x90 [ 324.949579] ? ns_capable_common+0xcf/0x160 [ 324.953876] ? ns_test_super+0x50/0x50 [ 324.957739] ? kill_litter_super+0x90/0x90 [ 324.961947] sget+0xd2/0x120 [ 324.964958] mount_bdev+0x109/0x370 [ 324.968557] ? fuse_get_root_inode+0x190/0x190 [ 324.973121] fuse_mount_blk+0x34/0x40 [ 324.976901] mount_fs+0x66/0x2d0 [ 324.980248] vfs_kern_mount.part.26+0xc6/0x4a0 [ 324.984808] ? may_umount+0xa0/0xa0 [ 324.988409] ? _raw_read_unlock+0x22/0x30 [ 324.992531] ? __get_fs_type+0x8a/0xc0 [ 324.996400] do_mount+0xea4/0x2bb0 [ 324.999921] ? copy_mount_string+0x40/0x40 [ 325.004131] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 325.009126] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 325.013862] ? retint_kernel+0x10/0x10 [ 325.017733] ? copy_mount_options+0x18b/0x2e0 [ 325.022204] ? copy_mount_options+0x196/0x2e0 [ 325.026673] ? copy_mount_options+0x1f7/0x2e0 [ 325.031150] SyS_mount+0xab/0x120 [ 325.034580] ? copy_mnt_ns+0xb30/0xb30 [ 325.038443] do_syscall_64+0x281/0x940 [ 325.042310] ? trace_event_raw_event_sys_exit+0x260/0x260 [ 325.047824] ? syscall_return_slowpath+0x550/0x550 [ 325.052729] ? syscall_return_slowpath+0x2ac/0x550 [ 325.057640] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 325.062984] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 325.067809] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 325.072972] RIP: 0033:0x4548b9 [ 325.076152] RSP: 002b:00007f032fc57b08 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 325.083835] RAX: ffffffffffffffda RBX: 0000000000000019 RCX: 00000000004548b9 [ 325.091080] RDX: 00000000004b9225 RSI: 0000000020001740 RDI: 0000000020001780 [ 325.098324] RBP: 0000000020001780 R08: 00007f032fc57b20 R09: 0000000000000000 [ 325.105565] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 2018/03/29 11:12:05 executing program 3: io_setup(0x3, &(0x7f0000000000)=0x0) r1 = accept$unix(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000100)=0x6e) r2 = syz_open_dev$usbmon(&(0x7f0000000200)='/dev/usbmon#\x00', 0x7ff, 0x0) io_cancel(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0xf, 0x0, 0xffffffffffffffff, &(0x7f0000000140)="940c1f2149747e7734510c34c143183667a187dc4f624f6c2de12452792a6fb529e6bf2a661dc23a844b00925c244a9f2967c0ca9868ee50eacf67a2ad7681d82f5a38cbd6d7641f843fa129e00f701fb01835f497b53672b3e5a3f6838f28aa240bf21eb5e5cbe7804fd307404474ae0242f8dea7a08e0fe9479b06f2795f857f8eec271d35ba7f61a91c87296814189cc1dfc9c659cc5437452a0bd178323c50e8c005ba7fa9519b27965c9f6ffbc7dcaa8e658616cc83188fb131a703222d", 0xc0, 0x5, 0x0, 0x1, r2}, &(0x7f0000000280)) io_getevents(r0, 0x2, 0x8f, &(0x7f0000d83f60)=[{}, {}], &(0x7f00005cfff0)={0x4000000000001, 0x7}) io_getevents(r0, 0x84, 0x5, &(0x7f00000002c0)=[{}, {}, {}, {}, {}], &(0x7f0000000480)) io_setup(0x3, &(0x7f0000000040)) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/route\x00') ioctl$KVM_SET_TSS_ADDR(r3, 0xae47, 0xd000) ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f0000000440)=0x0) perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x4a, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ef4}, r4, 0x0, r2, 0x1) pread64(r1, &(0x7f0000000000)=""/85, 0x100c5, 0x5d) r5 = memfd_create(&(0x7f0000000240)=':+lo#\x00', 0x0) fdatasync(r5) io_submit(r0, 0x1, &(0x7f0000001280)=[&(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, 0x0, r5, &(0x7f0000000100)}]) timerfd_create(0x7, 0x80800) io_destroy(r0) setsockopt$llc_int(r2, 0x10c, 0x9, &(0x7f0000000380)=0x3, 0x4) 2018/03/29 11:12:05 executing program 7: io_setup(0x3, &(0x7f0000000000)=0x0) accept$unix(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000100)=0x6e) syz_open_dev$usbmon(&(0x7f0000000200)='/dev/usbmon#\x00', 0x7ff, 0x0) io_cancel(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0xf, 0x3, 0xffffffffffffffff, &(0x7f0000000140)="940c1f2149747e7734510c34c143183667a187dc4f624f6c2de12452792a6fb529e6bf2a661dc23a844b00925c244a9f2967c0ca9868ee50eacf67a2ad7681d82f5a38cbd6d7641f843fa129e00f701fb01835f497b53672b3e5a3f6838f28aa240bf21eb5e5cbe7804fd307404474ae0242f8dea7a08e0fe9479b06f2795f857f8eec271d35ba7f61a91c87296814189cc1dfc9c659cc5437452a0bd178323c50e8c005ba7fa9519b27965c9f6ffbc7dcaa8e658616cc83188fb131a703222d", 0xc0, 0x5, 0x0, 0x1}, &(0x7f0000000280)) io_getevents(r0, 0x2, 0x8f, &(0x7f0000d83f60)=[{}, {}], &(0x7f00005cfff0)={0x4000000000001, 0x7}) io_getevents(r0, 0x0, 0x5, &(0x7f00000002c0)=[{}, {}, {}, {}, {}], &(0x7f00000003c0)) io_setup(0x7, &(0x7f0000000040)) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/route\x00') ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000480)=0x0) perf_event_open(&(0x7f0000aaa000)={0x0, 0x70, 0x4a, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ef4}, r2, 0x0, 0xffffffffffffffff, 0x1) pread64(r1, &(0x7f0000000000)=""/85, 0xfe42, 0x5d) r3 = memfd_create(&(0x7f0000000240)=':+lo#\x00', 0x0) fdatasync(r3) io_submit(r0, 0x1, &(0x7f0000001280)=[&(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000000100)}]) timerfd_create(0x7, 0x80800) io_destroy(r0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x9, &(0x7f0000000380)=0x3, 0x4) 2018/03/29 11:12:05 executing program 0: r0 = perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x4a, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffff9c, 0xc00caee0, &(0x7f0000000180)={0x0, r0, 0x1}) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) fcntl$getownex(r0, 0x10, &(0x7f0000000400)={0x0, 0x0}) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0xffff, 0xe3, 0x6, 0x4, 0x0, 0x7, 0x0, 0x2, 0x10001, 0x1, 0x7, 0x8, 0x100, 0x4, 0x0, 0x7f, 0x20, 0x0, 0x4, 0x5, 0x90a4, 0x7, 0x2, 0x73, 0x8, 0x7, 0x4, 0x7e0, 0x101, 0x0, 0x2, 0x309, 0x0, 0x9, 0xfffffffffffffff9, 0x9, 0x0, 0x4, 0x0, @perf_config_ext={0x20, 0x1}, 0x8140, 0x0, 0x0, 0x4, 0xca1, 0xb5}, r4, 0x4, r1, 0x8) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) futimesat(r1, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0)={{r2, r3/1000+10000}, {r5, r6/1000+10000}}) unshare(0x8000000) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0xdc, 0x40}, 0x341) r8 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8910, &(0x7f0000000080)=@buf={0x0, &(0x7f0000000000)}) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x13, &(0x7f0000000ffc), 0x4) mq_open(&(0x7f00000000c0)='syzkaller0\x00', 0x40, 0x8, &(0x7f0000000100)={0x5, 0x80000000, 0x0, 0xfffffffffffffff9, 0x1, 0xfffffffffffffffd, 0x7fff, 0x200}) socket$inet_tcp(0x2, 0x1, 0x0) r9 = dup3(r8, r7, 0x80000) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r9, 0x84, 0x66, &(0x7f00000002c0)={0x0, 0x8ed6}, &(0x7f0000000300)=0x1) bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) shmget(0xffffffffffffffff, 0x8000, 0x49b, &(0x7f0000ff8000/0x8000)=nil) ioctl$sock_inet_SIOCGIFPFLAGS(r8, 0x8935, &(0x7f0000000080)={'syzkaller0\x00'}) ppoll(&(0x7f0000000780)=[{r1, 0x300}, {r1, 0x8401}], 0x2, &(0x7f00000007c0)={0x77359400}, &(0x7f0000000800)={0x9}, 0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000280)={0x0, 0x0, 0x9}, 0x10) r10 = semget$private(0x0, 0x4, 0x0) semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0x0, 0x1000}], 0x1, &(0x7f0000000080)={0x0, 0x1c9c380}) semctl$IPC_RMID(r10, 0x0, 0x0) [ 325.112809] R13: 00000000000003ff R14: 0000000000000000 R15: ffffffffffffffff 2018/03/29 11:12:06 executing program 2 (fault-call:21 fault-nth:22): r0 = syz_open_procfs(0x0, &(0x7f00000004c0)='oom_score_adj\x00') perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x49, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(r0, 0x0, 0x83, &(0x7f0000001800)={'nat\x00', 0x0, 0x3, 0x1000, [], 0x2, &(0x7f0000001280)=[{}, {}], &(0x7f0000002040)=""/4096}, &(0x7f00000013c0)=0x78) ioprio_get$pid(0x0, 0x0) timer_create(0x0, &(0x7f0000cd0000), &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00004b1fe0)={{0x0, 0x1c9c380}, {0x0, 0x9}}, &(0x7f0000040000)) r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x7fff) truncate(&(0x7f0000001180)='./bus\x00', 0x4) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000f40000)='/dev/ptmx\x00', 0x200000000101002, 0x0) sendfile(r2, 0xffffffffffffffff, &(0x7f00000010c0), 0x10000065) sendfile(r0, r1, &(0x7f0000000000), 0x4) tkill(0x0, 0x0) r3 = memfd_create(&(0x7f0000000000)='\x00', 0x1) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000001200)) recvmsg(0xffffffffffffff9c, &(0x7f0000001500)={&(0x7f00000012c0)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @remote}}}, 0x80, &(0x7f0000001400)=[{&(0x7f0000001340)=""/103, 0x67}], 0x1, &(0x7f0000001440)=""/155, 0x9b}, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000001540)) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000001640)={0x1ff, {0x2, 0x4e21}, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, {0x2, 0x0, @multicast2=0xe0000002}, 0x0, 0x9, 0x2, 0x6, 0x0, &(0x7f0000001240)='teql0\x00', 0x0, 0x80}) inotify_rm_watch(0xffffffffffffffff, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000140), &(0x7f0000000100)=0xffffffa4) getgroups(0x1, &(0x7f0000001600)=[0x0]) syz_fuseblk_mount(&(0x7f0000001740)='./file0\x00', &(0x7f0000001780)='./file0\x00', 0x0, 0x0, 0xffffffffffffffff, 0x3ff, 0x1, 0x0) getpgrp(0xffffffffffffffff) getegid() sendmmsg$unix(r3, &(0x7f0000001880), 0x0, 0x0) setsockopt$netrom_NETROM_T4(0xffffffffffffffff, 0x103, 0x6, &(0x7f00000017c0), 0xfffffffffffffc77) readv(0xffffffffffffffff, &(0x7f000004ffe0), 0x0) 2018/03/29 11:12:06 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) readv(r0, &(0x7f0000001480)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x3}) r1 = syz_open_pts(r0, 0x2) r2 = dup3(r1, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000c34fff), 0xffffff0b) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0) preadv(r3, &(0x7f00000004c0)=[{&(0x7f0000000480)=""/21, 0x15}], 0x1, 0x0) fchdir(0xffffffffffffffff) mkdir(&(0x7f0000000280)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f", 0xfffffffffffffffc) fchmod(r2, 0x0) splice(r3, &(0x7f0000000400), 0xffffffffffffffff, &(0x7f0000000440), 0x9, 0x2) rename(&(0x7f0000001e00)='./file0\x00', &(0x7f0000000100)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f") mkdir(&(0x7f000000e000)='./control\x00', 0x0) r4 = open(&(0x7f0000000000)='./control\x00', 0x0, 0x0) renameat2(r4, &(0x7f0000000040)='./file0\x00', r4, &(0x7f0000000080)='./control\x00', 0x2) openat$cgroup_ro(r2, &(0x7f0000000200)='memory.swap.current\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000300)={0x0, 0x80}, &(0x7f0000000340)=0x8) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000380)={r5, 0x5}, &(0x7f00000003c0)=0x8) mknodat(r4, &(0x7f000003f000)='./control\x00', 0x0, 0x0) symlink(&(0x7f0000000180)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f", &(0x7f00000000c0)='./file0\x00') perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(r4, &(0x7f0000010000)='./control\x00', &(0x7f000003f000), &(0x7f0000001fe8), 0x0) 2018/03/29 11:12:06 executing program 7: io_setup(0x3, &(0x7f0000000000)=0x0) r1 = accept$unix(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000100)=0x6e) r2 = syz_open_dev$usbmon(&(0x7f0000000200)='/dev/usbmon#\x00', 0x7ff, 0x0) io_cancel(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0xf, 0x3, 0xffffffffffffffff, &(0x7f0000000140)="940c1f2149747e7734510c34c143183667a187dc4f624f6c2de12452792a6fb529e6bf2a661dc23a844b00925c244a9f2967c0ca9868ee50eacf67a2ad7681d82f5a38cbd6d7641f843fa129e00f701fb01835f497b53672b3e5a3f6838f28aa240bf21eb5e5cbe7804fd307404474ae0242f8dea7a08e0fe9479b06f2795f857f8eec271d35ba7f61a91c87296814189cc1dfc9c659cc5437452a0bd178323c50e8c005ba7fa9519b27965c9f6ffbc7dcaa8e658616cc83188fb131a703222d", 0xc0, 0x5, 0x0, 0x1}, &(0x7f0000000280)) io_getevents(r0, 0x2, 0x8f, &(0x7f0000d83f60)=[{}, {}], &(0x7f00005cfff0)={0x4000000000001, 0x7}) io_getevents(r0, 0x0, 0x5, &(0x7f00000002c0)=[{}, {}, {}, {}, {}], &(0x7f00000003c0)) io_setup(0x7, &(0x7f0000000040)) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/route\x00') ioctl$sock_bt_bnep_BNEPGETCONNINFO(r2, 0x800442d3, &(0x7f0000000680)={0x1, 0x9, 0x9, @random="d40a81ebe1d3", 'syz_tun\x00'}) ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f0000000440)=0x0) perf_event_open(&(0x7f0000aaa000)={0x0, 0x70, 0x4a, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ef4}, r4, 0x0, 0xffffffffffffffff, 0x1) pread64(r3, &(0x7f0000000000)=""/85, 0xfe42, 0x5d) syz_init_net_socket$nfc_llcp(0x27, 0xfffffffffffffffe, 0x1) r5 = memfd_create(&(0x7f0000000880)="de", 0x3) r6 = syz_genetlink_get_family_id$fou(&(0x7f0000000640)='fou\x00') sendmsg$FOU_CMD_GET(r3, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10040800}, 0xc, &(0x7f0000000700)={&(0x7f0000000780)=ANY=[@ANYBLOB="4800001e4ca7750fcc246e6e2e73fcf43800205386421af92bd2b0203643f4f78fe8e4ce9d33aeab6b2a2fb6ef4746d06019e7ee34df4704941df6ef31f45e927ef534abdc5c5780e47aaeb631bdb703bdd1056357e8968a61ad608842db1499697cfe2a1a672fc656ac0331f1ace522e2705a93537d8d4be6f5c7e8b7e1b59dc82e4c4ace3a1d", @ANYRES16=r6, @ANYBLOB="010428bd7000fbdbdf2503000000080003006c000000040005000800040003000000080001004e2000000800040002000000080003001d0000000800040002000000"], 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x88c0) fdatasync(r1) io_submit(r0, 0x1, &(0x7f0000001280)=[&(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, 0x0, r5, &(0x7f0000000100)}]) timerfd_create(0x7, 0x800) io_destroy(r0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x66, &(0x7f0000000480)={0x0, 0x2}, &(0x7f00000004c0)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r5, 0x84, 0xf, &(0x7f0000000500)={r7, @in6={{0xa, 0x4e23, 0xf66, @ipv4={[], [0xff, 0xff], @rand_addr=0x80000000}}}, 0x80, 0x80, 0x20, 0x7fff, 0x6}, &(0x7f00000005c0)=0x98) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x9, &(0x7f0000000380)=0x3, 0x4) userfaultfd(0x80000) 2018/03/29 11:12:06 executing program 1: io_setup(0x3, &(0x7f0000000000)=0x0) accept$unix(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000100)=0x6e) r1 = syz_open_dev$usbmon(&(0x7f0000000200)='/dev/usbmon#\x00', 0x0, 0x0) io_cancel(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0xf, 0x3, 0xffffffffffffffff, &(0x7f0000000140)="940c1f2149747e7734510c34c143183667a187dc4f624f6c2de12452792a6fb529e6bf2a661dc23a844b00925c244a9f2967c0ca9868ee50eacf67a2ad7681d82f5a38cbd6d7641f843fa129e00f701fb01835f497b53672b3e5a3f6838f28aa240bf21eb5e5cbe7804fd307404474ae0242f8dea7a08e0fe9479b06f2795f857f8eec271d35ba7f61a91c87296814189cc1dfc9c659cc5437452a0bd178323c50e8c005ba7fa9519b27965c9f6ffbc7dcaa8e658616cc83188fb131a703222d", 0xc0, 0x5, 0x0, 0x1}, &(0x7f0000000280)) io_getevents(r0, 0x2, 0x8f, &(0x7f0000d83f60)=[{}, {}], &(0x7f00005cfff0)={0x4000000000001, 0x7}) io_getevents(r0, 0x0, 0x5, &(0x7f00000002c0)=[{}, {}, {}, {}, {}], &(0x7f00000003c0)) io_setup(0x7, &(0x7f0000000040)) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/route\x00') ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000440)=0x0) perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x4a, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ef4}, r3, 0x0, 0xffffffffffffffff, 0x1) pread64(r2, &(0x7f0000000000)=""/85, 0xfe42, 0x5d) r4 = memfd_create(&(0x7f0000000240)=':+lo#\x00', 0x0) fdatasync(r4) io_submit(r0, 0x1, &(0x7f0000001280)=[&(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f0000000100)}]) timerfd_create(0x0, 0x80800) io_destroy(r0) setsockopt$llc_int(r1, 0x10c, 0x9, &(0x7f0000000380)=0x3, 0x4) 2018/03/29 11:12:06 executing program 5: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/dsp\x00', 0x141002, 0x0) ioctl$DRM_IOCTL_GET_STATS(r0, 0x80f86406, &(0x7f0000000340)=""/65) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) mkdir(&(0x7f0000000000)='./file1\x00', 0x0) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000811ffa)='bdev\x00', 0x0, &(0x7f0000444000)) mount(&(0x7f0000fb6000)='./file0\x00', &(0x7f0000d78000)='.', &(0x7f0000fdb000)='ubifs\x00', 0x1003, 0x0) mount(&(0x7f00002b9ff8)='./file0\x00', &(0x7f0000cbeff8)='./file0\x00', &(0x7f00005f7ffa)='ramfs\x00', 0x80000, &(0x7f000002f000)) mount(&(0x7f0000000040)='.', &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0)='binfmt_misc\x00', 0x0, &(0x7f0000000100)) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) mount(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./file1\x00', &(0x7f0000000200)='anon_inodefs\x00', 0x1ffc, &(0x7f0000000300)="385679ddc48a3727e3f4ad5e86ca1abac4ed29fa0c19f63547bd66a39581681f79f17e373d3c12e17246f40000000000000000a713515f0284") listxattr(&(0x7f0000000140)='.', &(0x7f0000000240)=""/34, 0x22) r1 = creat(&(0x7f0000000100)='./file1\x00', 0x100) mount(&(0x7f0000adcff8)='./file0\x00', &(0x7f0000e08fff)='.', &(0x7f00005e9000)='cifs\x00', 0x2000, &(0x7f0000ad5000)) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000280)={0x9, 0x7, 0x8000, 0x8, 0x4, 0xfffffffffffffffe, 0x0, 0x3, 0x80000001, 0x7, 0x6, 0x3}) 2018/03/29 11:12:06 executing program 6: openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x0, 0x0) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, &(0x7f0000000340)=0x1) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f000051cff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000943ffc)=0xa35) read(r0, &(0x7f00003fefff)=""/1, 0x1) r1 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000029000)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r0, &(0x7f0000dcdff0)=[{&(0x7f0000cd8000)=""/1, 0x1}], 0x1) ioctl$int_in(r2, 0x5452, &(0x7f0000b28000)=0x3c) write$cgroup_type(0xffffffffffffffff, &(0x7f00000002c0)='threaded\x00', 0x9) syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x0, 0x802) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000fb9000)) fcntl$setsig(r2, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{}], 0x1, 0xfffffffffffffff8) read$eventfd(0xffffffffffffffff, &(0x7f0000000040), 0x8) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)) r4 = dup2(r2, r3) fcntl$setown(r4, 0x8, r1) ptrace$cont(0xffffffffffffffff, r1, 0x0, 0x8) tkill(r1, 0x16) r5 = gettid() process_vm_readv(r5, &(0x7f0000001880)=[{&(0x7f0000000680)=""/198, 0xc6}, {&(0x7f0000000780)=""/247, 0xf7}, {&(0x7f0000000380)=""/12, 0xc}, {&(0x7f00000003c0)=""/6, 0x6}, {&(0x7f0000000400)=""/14, 0xe}], 0x5, &(0x7f00000019c0)=[{&(0x7f0000001900)=""/41, 0x29}, {&(0x7f0000001940)=""/112, 0x70}], 0x2, 0x0) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f0000000240)={{{@in6}}, {{@in=@local}, 0x0, @in=@local}}, &(0x7f0000000100)=0xe8) 2018/03/29 11:12:06 executing program 3: io_setup(0x3, &(0x7f0000000000)=0x0) r1 = accept$unix(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000100)=0x6e) r2 = syz_open_dev$usbmon(&(0x7f0000000200)='/dev/usbmon#\x00', 0x7ff, 0x0) io_cancel(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0xf, 0x0, 0xffffffffffffffff, &(0x7f0000000140)="940c1f2149747e7734510c34c143183667a187dc4f624f6c2de12452792a6fb529e6bf2a661dc23a844b00925c244a9f2967c0ca9868ee50eacf67a2ad7681d82f5a38cbd6d7641f843fa129e00f701fb01835f497b53672b3e5a3f6838f28aa240bf21eb5e5cbe7804fd307404474ae0242f8dea7a08e0fe9479b06f2795f857f8eec271d35ba7f61a91c87296814189cc1dfc9c659cc5437452a0bd178323c50e8c005ba7fa9519b27965c9f6ffbc7dcaa8e658616cc83188fb131a703222d", 0xc0, 0x5, 0x0, 0x1, r2}, &(0x7f0000000280)) io_getevents(r0, 0x2, 0x8f, &(0x7f0000d83f60)=[{}, {}], &(0x7f00005cfff0)={0x4000000000001, 0x7}) io_getevents(r0, 0x0, 0xe9aa6e88f0a0574e, &(0x7f00000002c0)=[{}, {}, {}, {}, {}], &(0x7f00000003c0)) io_setup(0x7, &(0x7f0000000040)) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/route\x00') ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f0000000440)=0x0) perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x4a, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ef4}, r4, 0x0, r2, 0x1) pread64(r3, &(0x7f0000000000)=""/85, 0xfe42, 0x5d) r5 = memfd_create(&(0x7f0000000240)=':+lo#\x00', 0x0) fdatasync(r1) io_submit(r0, 0x1, &(0x7f0000001280)=[&(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, 0x0, r5, &(0x7f0000000100)}]) timerfd_create(0x7, 0x80800) io_destroy(r0) setsockopt$llc_int(r2, 0x10c, 0x9, &(0x7f0000000380)=0x3, 0x4) 2018/03/29 11:12:06 executing program 0: r0 = perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x4a, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffff9c, 0xc00caee0, &(0x7f0000000180)={0x0, r0, 0x1}) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) fcntl$getownex(r0, 0x10, &(0x7f0000000400)={0x0, 0x0}) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0xffff, 0xe3, 0x6, 0x4, 0x0, 0x7, 0x0, 0x2, 0x10001, 0x1, 0x7, 0x8, 0x100, 0x4, 0x0, 0x7f, 0x20, 0x0, 0x4, 0x5, 0x90a4, 0x7, 0x2, 0x73, 0x8, 0x7, 0x4, 0x7e0, 0x101, 0x0, 0x2, 0x309, 0x0, 0x9, 0xfffffffffffffff9, 0x9, 0x0, 0x4, 0x0, @perf_config_ext={0x20, 0x1}, 0x8140, 0x0, 0x0, 0x4, 0xca1, 0xb5}, r4, 0x4, r1, 0x8) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) futimesat(r1, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0)={{r2, r3/1000+10000}, {r5, r6/1000+10000}}) unshare(0x8000000) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0xdc, 0x40}, 0x341) r8 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8910, &(0x7f0000000080)=@buf={0x0, &(0x7f0000000000)}) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x13, &(0x7f0000000ffc), 0x4) mq_open(&(0x7f00000000c0)='syzkaller0\x00', 0x40, 0x8, &(0x7f0000000100)={0x5, 0x80000000, 0x0, 0xfffffffffffffff9, 0x1, 0xfffffffffffffffd, 0x7fff, 0x200}) socket$inet_tcp(0x2, 0x1, 0x0) r9 = dup3(r8, r7, 0x80000) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r9, 0x84, 0x66, &(0x7f00000002c0)={0x0, 0x8ed6}, &(0x7f0000000300)=0x1) bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) shmget(0xffffffffffffffff, 0x8000, 0x49b, &(0x7f0000ff8000/0x8000)=nil) ioctl$sock_inet_SIOCGIFPFLAGS(r8, 0x8935, &(0x7f0000000080)={'syzkaller0\x00'}) ppoll(&(0x7f0000000780)=[{r1, 0x300}, {r1, 0x8401}], 0x2, &(0x7f00000007c0)={0x77359400}, &(0x7f0000000800)={0x9}, 0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000280)={0x0, 0x0, 0x9}, 0x10) r10 = semget$private(0x0, 0x4, 0x0) semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0x0, 0x1000}], 0x1, &(0x7f0000000080)={0x0, 0x1c9c380}) semctl$IPC_RMID(r10, 0x0, 0x0) [ 325.686616] FAULT_INJECTION: forcing a failure. [ 325.686616] name failslab, interval 1, probability 0, space 0, times 0 [ 325.697993] CPU: 1 PID: 8911 Comm: syz-executor2 Not tainted 4.16.0-rc7+ #5 [ 325.705094] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 325.714425] Call Trace: [ 325.716997] dump_stack+0x194/0x24d [ 325.720607] ? arch_local_irq_restore+0x53/0x53 [ 325.725256] ? rcutorture_record_progress+0x10/0x10 [ 325.730256] should_fail+0x8c0/0xa40 [ 325.733950] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 325.739030] ? __kernel_text_address+0xd/0x40 [ 325.743500] ? unwind_get_return_address+0x61/0xa0 [ 325.748423] ? find_held_lock+0x35/0x1d0 [ 325.752466] ? __lock_is_held+0xb6/0x140 [ 325.756520] ? check_same_owner+0x320/0x320 [ 325.760820] ? rcu_note_context_switch+0x710/0x710 [ 325.765736] should_failslab+0xec/0x120 [ 325.769688] kmem_cache_alloc_trace+0x4b/0x740 [ 325.774245] ? __kmalloc_node+0x33/0x70 [ 325.778196] ? __kmalloc_node+0x33/0x70 [ 325.782148] ? rcu_read_lock_sched_held+0x108/0x120 [ 325.787146] __memcg_init_list_lru_node+0x169/0x270 [ 325.792145] ? list_lru_add+0x7c0/0x7c0 [ 325.796096] ? __kmalloc_node+0x47/0x70 [ 325.800055] __list_lru_init+0x544/0x750 [ 325.804097] ? memcg_destroy_list_lru_node.isra.7+0x110/0x110 [ 325.809958] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 325.814953] ? __lockdep_init_map+0xe4/0x650 [ 325.819337] ? lockdep_init_map+0x9/0x10 [ 325.823377] sget_userns+0x691/0xe40 [ 325.827063] ? kill_litter_super+0x90/0x90 [ 325.831279] ? ns_test_super+0x50/0x50 [ 325.835141] ? destroy_unused_super.part.6+0xd0/0xd0 [ 325.840217] ? do_raw_spin_trylock+0x190/0x190 [ 325.844782] ? kobject_put+0x6b/0x250 [ 325.848568] ? blkdev_get+0x3a1/0xb00 [ 325.852349] ? cap_capable+0x1b5/0x230 [ 325.856214] ? __blkdev_get+0x13b0/0x13b0 [ 325.860339] ? security_capable+0x8e/0xc0 [ 325.864465] ? kill_litter_super+0x90/0x90 [ 325.868673] ? ns_capable_common+0xcf/0x160 [ 325.872973] ? ns_test_super+0x50/0x50 [ 325.876833] ? kill_litter_super+0x90/0x90 [ 325.881043] sget+0xd2/0x120 [ 325.884045] mount_bdev+0x109/0x370 [ 325.887646] ? fuse_get_root_inode+0x190/0x190 [ 325.892207] fuse_mount_blk+0x34/0x40 [ 325.895988] mount_fs+0x66/0x2d0 [ 325.899338] vfs_kern_mount.part.26+0xc6/0x4a0 [ 325.903898] ? may_umount+0xa0/0xa0 [ 325.907502] ? _raw_read_unlock+0x22/0x30 [ 325.911622] ? __get_fs_type+0x8a/0xc0 [ 325.915493] do_mount+0xea4/0x2bb0 [ 325.919024] ? copy_mount_string+0x40/0x40 [ 325.923235] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 325.928229] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 325.932968] ? retint_kernel+0x10/0x10 [ 325.936840] ? copy_mount_options+0x18b/0x2e0 [ 325.941311] ? copy_mount_options+0x191/0x2e0 [ 325.945783] ? copy_mount_options+0x1f7/0x2e0 [ 325.950261] SyS_mount+0xab/0x120 [ 325.953686] ? copy_mnt_ns+0xb30/0xb30 [ 325.957551] do_syscall_64+0x281/0x940 [ 325.961411] ? __do_page_fault+0xc90/0xc90 [ 325.965619] ? _raw_spin_unlock_irq+0x27/0x70 [ 325.970087] ? finish_task_switch+0x1c1/0x7e0 [ 325.974557] ? syscall_return_slowpath+0x550/0x550 [ 325.979464] ? syscall_return_slowpath+0x2ac/0x550 [ 325.984367] ? prepare_exit_to_usermode+0x350/0x350 [ 325.989360] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 325.994704] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 325.999530] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 326.004692] RIP: 0033:0x4548b9 [ 326.007879] RSP: 002b:00007f032fc57b08 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 326.015560] RAX: ffffffffffffffda RBX: 0000000000000019 RCX: 00000000004548b9 [ 326.022805] RDX: 00000000004b9225 RSI: 0000000020001740 RDI: 0000000020001780 [ 326.030048] RBP: 0000000020001780 R08: 00007f032fc57b20 R09: 0000000000000000 2018/03/29 11:12:06 executing program 2 (fault-call:21 fault-nth:23): r0 = syz_open_procfs(0x0, &(0x7f00000004c0)='oom_score_adj\x00') perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x49, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(r0, 0x0, 0x83, &(0x7f0000001800)={'nat\x00', 0x0, 0x3, 0x1000, [], 0x2, &(0x7f0000001280)=[{}, {}], &(0x7f0000002040)=""/4096}, &(0x7f00000013c0)=0x78) ioprio_get$pid(0x0, 0x0) timer_create(0x0, &(0x7f0000cd0000), &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00004b1fe0)={{0x0, 0x1c9c380}, {0x0, 0x9}}, &(0x7f0000040000)) r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x7fff) truncate(&(0x7f0000001180)='./bus\x00', 0x4) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000f40000)='/dev/ptmx\x00', 0x200000000101002, 0x0) sendfile(r2, 0xffffffffffffffff, &(0x7f00000010c0), 0x10000065) sendfile(r0, r1, &(0x7f0000000000), 0x4) tkill(0x0, 0x0) r3 = memfd_create(&(0x7f0000000000)='\x00', 0x1) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000001200)) recvmsg(0xffffffffffffff9c, &(0x7f0000001500)={&(0x7f00000012c0)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @remote}}}, 0x80, &(0x7f0000001400)=[{&(0x7f0000001340)=""/103, 0x67}], 0x1, &(0x7f0000001440)=""/155, 0x9b}, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000001540)) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000001640)={0x1ff, {0x2, 0x4e21}, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, {0x2, 0x0, @multicast2=0xe0000002}, 0x0, 0x9, 0x2, 0x6, 0x0, &(0x7f0000001240)='teql0\x00', 0x0, 0x80}) inotify_rm_watch(0xffffffffffffffff, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000140), &(0x7f0000000100)=0xffffffa4) getgroups(0x1, &(0x7f0000001600)=[0x0]) syz_fuseblk_mount(&(0x7f0000001740)='./file0\x00', &(0x7f0000001780)='./file0\x00', 0x0, 0x0, 0xffffffffffffffff, 0x3ff, 0x1, 0x0) getpgrp(0xffffffffffffffff) getegid() sendmmsg$unix(r3, &(0x7f0000001880), 0x0, 0x0) setsockopt$netrom_NETROM_T4(0xffffffffffffffff, 0x103, 0x6, &(0x7f00000017c0), 0xfffffffffffffc77) readv(0xffffffffffffffff, &(0x7f000004ffe0), 0x0) [ 326.037292] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 326.044537] R13: 00000000000003ff R14: 0000000000000000 R15: ffffffffffffffff 2018/03/29 11:12:06 executing program 5: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240)='/dev/sequencer2\x00', 0x902, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000280)) mkdir(&(0x7f0000000000)='./file1\x00', 0x0) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000811ffa)='bdev\x00', 0x0, &(0x7f0000444000)) mount(&(0x7f0000fb6000)='./file0\x00', &(0x7f0000d78000)='.', &(0x7f0000fdb000)='ubifs\x00', 0x1003, 0x0) mount(&(0x7f00002b9ff8)='./file0\x00', &(0x7f0000cbeff8)='./file0\x00', &(0x7f00005f7ffa)='ramfs\x00', 0x80000, &(0x7f000002f000)) r1 = syz_open_dev$adsp(&(0x7f0000000100)='/dev/adsp#\x00', 0x4, 0x2) r2 = inotify_add_watch(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x200) inotify_rm_watch(r1, r2) mount(&(0x7f0000000040)='.', &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0)='binfmt_misc\x00', 0x0, &(0x7f0000000100)) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) mount(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./file1\x00', &(0x7f0000000200)='anon_inodefs\x00', 0x2000, &(0x7f0000000240)) mount(&(0x7f0000adcff8)='./file0\x00', &(0x7f0000e08fff)='.', &(0x7f00005e9000)='cifs\x00', 0x2000, &(0x7f0000ad5000)) 2018/03/29 11:12:06 executing program 1: io_setup(0x3, &(0x7f0000000000)=0x0) accept$unix(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000100)=0x6e) r1 = syz_open_dev$usbmon(&(0x7f0000000200)='/dev/usbmon#\x00', 0x0, 0x0) io_cancel(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0xf, 0x3, 0xffffffffffffffff, &(0x7f0000000140)="940c1f2149747e7734510c34c143183667a187dc4f624f6c2de12452792a6fb529e6bf2a661dc23a844b00925c244a9f2967c0ca9868ee50eacf67a2ad7681d82f5a38cbd6d7641f843fa129e00f701fb01835f497b53672b3e5a3f6838f28aa240bf21eb5e5cbe7804fd307404474ae0242f8dea7a08e0fe9479b06f2795f857f8eec271d35ba7f61a91c87296814189cc1dfc9c659cc5437452a0bd178323c50e8c005ba7fa9519b27965c9f6ffbc7dcaa8e658616cc83188fb131a703222d", 0xc0, 0x5, 0x0, 0x1}, &(0x7f0000000280)) io_getevents(r0, 0x2, 0x8f, &(0x7f0000d83f60)=[{}, {}], &(0x7f00005cfff0)={0x4000000000001, 0x7}) io_getevents(r0, 0x0, 0x5, &(0x7f00000002c0)=[{}, {}, {}, {}, {}], &(0x7f00000003c0)) io_setup(0x7, &(0x7f0000000040)) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/route\x00') ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000440)=0x0) perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x4a, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ef4}, r3, 0x0, 0xffffffffffffffff, 0x1) pread64(r2, &(0x7f0000000000)=""/85, 0xfe42, 0x5d) r4 = memfd_create(&(0x7f0000000240)=':+lo#\x00', 0x0) fdatasync(r4) io_submit(r0, 0x1, &(0x7f0000001280)=[&(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f0000000100)}]) timerfd_create(0x0, 0x80800) io_destroy(r0) setsockopt$llc_int(r1, 0x10c, 0x9, &(0x7f0000000380)=0x3, 0x4) 2018/03/29 11:12:06 executing program 3: io_setup(0x3, &(0x7f0000000000)=0x0) accept$unix(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000100)=0x6e) r1 = syz_open_dev$usbmon(&(0x7f0000000200)='/dev/usbmon#\x00', 0x7ff, 0x0) io_cancel(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0xf, 0x0, 0xffffffffffffffff, &(0x7f0000000140)="940c1f2149747e7734510c34c143183667a187dc4f624f6c2de12452792a6fb529e6bf2a661dc23a844b00925c244a9f2967c0ca9868ee50eacf67a2ad7681d82f5a38cbd6d7641f843fa129e00f701fb01835f497b53672b3e5a3f6838f28aa240bf21eb5e5cbe7804fd307404474ae0242f8dea7a08e0fe9479b06f2795f857f8eec271d35ba7f61a91c87296814189cc1dfc9c659cc5437452a0bd178323c50e8c005ba7fa9519b27965c9f6ffbc7dcaa8e658616cc83188fb131a703222d", 0xc0, 0x5, 0x0, 0x1, r1}, &(0x7f0000000280)) io_getevents(r0, 0x2, 0x8f, &(0x7f0000d83f60)=[{}, {}], &(0x7f00005cfff0)={0x4000000000001, 0x7}) io_getevents(r0, 0x0, 0x5, &(0x7f00000002c0)=[{}, {}, {}, {}, {}], &(0x7f00000003c0)) io_setup(0x7, &(0x7f0000000040)) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/route\x00') ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000440)=0x0) perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x4a, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ef4}, r3, 0x0, r1, 0x1) pread64(r2, &(0x7f0000000000)=""/85, 0xfe42, 0x5d) r4 = memfd_create(&(0x7f0000000240)=':+lo#\x00', 0x0) write(r2, &(0x7f0000000480)="0a5fc73703b49551e8a4b5cf6ce8b2126a830d3960ee8fc06357d3e8eb4674c6419f463e3faa912e1e02d17ce02219a80a27f784be994b362e5c2df96f4ecaca2c07be5a0d88755060d58c0857b99caf1a8a19", 0x53) fdatasync(r4) io_submit(r0, 0x1, &(0x7f0000001280)=[&(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f0000000100)}]) timerfd_create(0x7, 0x80800) io_destroy(r0) setsockopt$llc_int(r1, 0x10c, 0x9, &(0x7f0000000380)=0x3, 0x4) 2018/03/29 11:12:06 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) readv(r0, &(0x7f0000001480)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x3}) r1 = syz_open_pts(r0, 0x2) r2 = dup3(r1, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f00000015c0)="f3221516753ae64f3dcb377772540f50abcd3d8077ec422115bb021bfb57c41e12fc944d3f892a46f4406280d0", 0x2d) getdents64(r2, &(0x7f00000014c0)=""/213, 0xd5) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0) preadv(r3, &(0x7f00000004c0)=[{&(0x7f0000000480)=""/21, 0x15}], 0x1, 0x0) fchdir(0xffffffffffffffff) fstatfs(r3, &(0x7f0000001740)=""/188) mkdir(&(0x7f0000000200)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f", 0x40) fchmod(r3, 0x80000000000190) splice(r3, &(0x7f0000000400), 0xffffffffffffffff, &(0x7f0000000440), 0x9, 0x2) rename(&(0x7f0000001e00)='./file0\x00', &(0x7f0000000100)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f") mkdir(&(0x7f000000e000)='./control\x00', 0x0) r4 = open(&(0x7f0000000000)='./control\x00', 0x0, 0x0) setsockopt$ALG_SET_AEAD_AUTHSIZE(r4, 0x117, 0x5, 0x0, 0x10000) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000001600)={0x0, @in={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xffffffffffff8000}}}}, &(0x7f00000016c0)=0x84) setsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000001700)={r5, 0xff}, 0x8) renameat2(r4, &(0x7f0000000040)='./file0\x00', r4, &(0x7f0000000080)='./control\x00', 0x2) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000300)={0x0, 0x80}, &(0x7f0000000340)=0x8) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000380)={r6, 0x5}, &(0x7f00000003c0)=0x8) mknodat(r4, &(0x7f000003f000)='./control\x00', 0x0, 0x0) socketpair$inet6_dccp(0xa, 0x6, 0x0, &(0x7f00000002c0)) ioctl$TIOCGSOFTCAR(r0, 0x5419, &(0x7f0000000280)) symlink(&(0x7f0000000180)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f", &(0x7f00000000c0)='./file0\x00') perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(r4, &(0x7f0000010000)='./control\x00', &(0x7f000003f000), &(0x7f0000001fe8), 0x0) [ 326.115765] FAULT_INJECTION: forcing a failure. [ 326.115765] name failslab, interval 1, probability 0, space 0, times 0 [ 326.127127] CPU: 1 PID: 8936 Comm: syz-executor2 Not tainted 4.16.0-rc7+ #5 [ 326.134224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 326.143573] Call Trace: [ 326.146165] dump_stack+0x194/0x24d [ 326.149797] ? arch_local_irq_restore+0x53/0x53 [ 326.154465] ? __save_stack_trace+0x7e/0xd0 [ 326.158796] should_fail+0x8c0/0xa40 [ 326.162516] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 326.167614] ? kasan_kmalloc+0xad/0xe0 [ 326.171501] ? kmem_cache_alloc_trace+0x136/0x740 [ 326.176337] ? __memcg_init_list_lru_node+0x169/0x270 [ 326.181512] ? __list_lru_init+0x544/0x750 [ 326.185734] ? sget_userns+0x691/0xe40 [ 326.189601] ? mount_fs+0x66/0x2d0 [ 326.193116] ? vfs_kern_mount.part.26+0xc6/0x4a0 [ 326.197849] ? do_mount+0xea4/0x2bb0 [ 326.201558] ? SyS_mount+0xab/0x120 [ 326.205164] ? do_syscall_64+0x281/0x940 [ 326.209214] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7 2018/03/29 11:12:06 executing program 4: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000200)='/dev/mixer\x00', 0x2100, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000240)={0x0, 0xfffffffffffffffc, 0x20}, &(0x7f00000014c0)=0xc) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000001500)={r1, 0x2, 0x7ff}, &(0x7f0000001540)=0x8) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) readv(r2, &(0x7f0000001480)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003b9fdc)) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x3}) r3 = syz_open_pts(r2, 0x2) r4 = dup3(r3, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000c34fff), 0xffffff0b) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0) preadv(r5, &(0x7f00000004c0)=[{&(0x7f0000000480)=""/21, 0x15}], 0x1, 0x0) fchdir(0xffffffffffffffff) mkdir(&(0x7f0000000280)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f", 0xfffffffffffffffc) fchmod(r4, 0x0) splice(r5, &(0x7f0000000400), 0xffffffffffffffff, &(0x7f0000000440), 0x9, 0x2) rename(&(0x7f0000001e00)='./file0\x00', &(0x7f0000000100)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f") mkdir(&(0x7f000000e000)='./control\x00', 0x0) r6 = open(&(0x7f0000000000)='./control\x00', 0x0, 0x0) getsockname$packet(r5, &(0x7f0000001580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f00000015c0)=0x14) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f0000001600)={r7, 0x1, 0x6, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x13}}, 0x10) renameat2(r6, &(0x7f0000000040)='./file0\x00', r6, &(0x7f0000000080)='./control\x00', 0x2) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r6, 0x84, 0x76, &(0x7f0000000300)={0x0, 0x80}, &(0x7f0000000340)=0x8) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r6, 0x84, 0x76, &(0x7f0000000380)={r8, 0x5}, &(0x7f00000003c0)=0x8) mknodat(r6, &(0x7f000003f000)='./control\x00', 0x0, 0x0) symlink(&(0x7f0000000180)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f", &(0x7f00000000c0)='./file0\x00') perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(r6, &(0x7f0000010000)='./control\x00', &(0x7f000003f000), &(0x7f0000001fe8), 0x0) [ 326.214581] ? find_held_lock+0x35/0x1d0 [ 326.218627] ? __lock_is_held+0xb6/0x140 [ 326.222682] ? check_same_owner+0x320/0x320 [ 326.226990] ? rcu_note_context_switch+0x710/0x710 [ 326.231913] should_failslab+0xec/0x120 [ 326.235875] kmem_cache_alloc_trace+0x4b/0x740 [ 326.240451] ? __kmalloc_node+0x33/0x70 [ 326.244417] ? __kmalloc_node+0x33/0x70 [ 326.248383] ? rcu_read_lock_sched_held+0x108/0x120 [ 326.253408] __memcg_init_list_lru_node+0x169/0x270 [ 326.258436] ? list_lru_add+0x7c0/0x7c0 [ 326.262405] ? __kmalloc_node+0x47/0x70 [ 326.266374] __list_lru_init+0x544/0x750 [ 326.270417] ? memcg_destroy_list_lru_node.isra.7+0x110/0x110 [ 326.276277] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 326.281281] ? __lockdep_init_map+0xe4/0x650 [ 326.285680] ? lockdep_init_map+0x9/0x10 [ 326.289728] sget_userns+0x691/0xe40 [ 326.293429] ? kill_litter_super+0x90/0x90 [ 326.297663] ? ns_test_super+0x50/0x50 [ 326.301535] ? destroy_unused_super.part.6+0xd0/0xd0 [ 326.306624] ? do_raw_spin_trylock+0x190/0x190 [ 326.311206] ? kobject_put+0x6b/0x250 [ 326.314996] ? blkdev_get+0x3a1/0xb00 [ 326.318794] ? cap_capable+0x1b5/0x230 [ 326.322659] ? __blkdev_get+0x13b0/0x13b0 [ 326.326788] ? security_capable+0x8e/0xc0 [ 326.330921] ? kill_litter_super+0x90/0x90 [ 326.335140] ? ns_capable_common+0xcf/0x160 [ 326.339449] ? ns_test_super+0x50/0x50 [ 326.343314] ? kill_litter_super+0x90/0x90 [ 326.347522] sget+0xd2/0x120 [ 326.350525] mount_bdev+0x109/0x370 [ 326.354127] ? fuse_get_root_inode+0x190/0x190 [ 326.358688] fuse_mount_blk+0x34/0x40 [ 326.362476] mount_fs+0x66/0x2d0 2018/03/29 11:12:06 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) readv(r0, &(0x7f0000001480)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x3}) r1 = syz_open_pts(r0, 0x2) r2 = dup3(r1, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000c34fff), 0xffffff0b) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0) preadv(r3, &(0x7f00000004c0)=[{&(0x7f0000000480)=""/21, 0x15}], 0x1, 0x0) fchdir(0xffffffffffffffff) mkdir(&(0x7f0000000280)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f", 0xfffffffffffffffc) fchmod(r2, 0x0) splice(r3, &(0x7f0000000400), 0xffffffffffffffff, &(0x7f0000000440), 0x9, 0x2) getsockopt$EBT_SO_GET_INIT_INFO(r2, 0x0, 0x82, &(0x7f0000000200)={'nat\x00'}, &(0x7f00000014c0)=0x78) rename(&(0x7f0000001e00)='./file0\x00', &(0x7f0000000100)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f") mkdir(&(0x7f000000e000)='./control\x00', 0x0) r4 = open(&(0x7f0000000000)='./control\x00', 0x0, 0x0) renameat2(r4, &(0x7f0000000040)='./file0\x00', r4, &(0x7f0000000080)='./control\x00', 0x2) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000300)={0x0, 0x80}, &(0x7f0000000340)=0x8) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000380)={r5, 0x5}, &(0x7f00000003c0)=0x8) mknodat(r4, &(0x7f000003f000)='./control\x00', 0x0, 0x0) symlink(&(0x7f0000000180)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f", &(0x7f00000000c0)='./file0\x00') perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(r4, &(0x7f0000010000)='./control\x00', &(0x7f000003f000), &(0x7f0000001fe8), 0x0) [ 326.365837] vfs_kern_mount.part.26+0xc6/0x4a0 [ 326.370405] ? may_umount+0xa0/0xa0 [ 326.374009] ? _raw_read_unlock+0x22/0x30 [ 326.378148] ? __get_fs_type+0x8a/0xc0 [ 326.382040] do_mount+0xea4/0x2bb0 [ 326.385586] ? copy_mount_string+0x40/0x40 [ 326.389822] ? rcu_pm_notify+0xc0/0xc0 [ 326.393718] ? copy_mount_options+0x5f/0x2e0 [ 326.398124] ? rcu_read_lock_sched_held+0x108/0x120 [ 326.403121] ? kmem_cache_alloc_trace+0x459/0x740 [ 326.407943] ? kasan_check_write+0x14/0x20 [ 326.412173] ? copy_mount_options+0x1f7/0x2e0 [ 326.416658] SyS_mount+0xab/0x120 [ 326.420098] ? copy_mnt_ns+0xb30/0xb30 [ 326.423978] do_syscall_64+0x281/0x940 [ 326.427841] ? __do_page_fault+0xc90/0xc90 [ 326.432059] ? _raw_spin_unlock_irq+0x27/0x70 [ 326.436550] ? finish_task_switch+0x1c1/0x7e0 [ 326.441042] ? syscall_return_slowpath+0x550/0x550 [ 326.445968] ? syscall_return_slowpath+0x2ac/0x550 [ 326.450885] ? prepare_exit_to_usermode+0x350/0x350 [ 326.455887] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 326.461333] ? trace_hardirqs_off_thunk+0x1a/0x1c 2018/03/29 11:12:06 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) readv(r0, &(0x7f0000001480)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x3}) r1 = syz_open_pts(r0, 0x2) r2 = dup3(r1, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000c34fff), 0xffffff0b) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0) preadv(r3, &(0x7f00000004c0)=[{&(0x7f0000000480)=""/21, 0x15}], 0x1, 0x0) fchdir(0xffffffffffffffff) mkdir(&(0x7f0000000280)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f", 0xfffffffffffffffc) fchmod(r2, 0x0) splice(r3, &(0x7f0000000400), 0xffffffffffffffff, &(0x7f0000000440), 0x9, 0x2) rename(&(0x7f0000001e00)='./file0\x00', &(0x7f0000000100)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f") mkdir(&(0x7f000000e000)='./control\x00', 0x0) r4 = open(&(0x7f0000000000)='./control\x00', 0x0, 0x0) renameat2(r4, &(0x7f0000000040)='./file0\x00', r4, &(0x7f0000000080)='./control\x00', 0x2) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000300)={0x0, 0x80}, &(0x7f0000000340)=0x8) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000380)={r5, 0x5}, &(0x7f00000003c0)=0x8) mknodat(r4, &(0x7f000003f000)='./control\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r2, 0xc008551b, &(0x7f00000015c0)={0x6, 0x4, [0x3]}) symlink(&(0x7f0000000180)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f", &(0x7f00000000c0)='./file0\x00') perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(r2, &(0x7f0000000200)='./control\x00', &(0x7f000003f000), &(0x7f0000001580)=[&(0x7f0000000240)='/dev/ptmx\x00', &(0x7f00000014c0)='trustedlovboxnet0:\x00', &(0x7f0000001500)='./cgroup\x00', &(0x7f0000001540)='./cgroup\x00'], 0x0) [ 326.466190] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 326.471361] RIP: 0033:0x4548b9 [ 326.474529] RSP: 002b:00007f032fc57b08 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 326.482220] RAX: ffffffffffffffda RBX: 0000000000000019 RCX: 00000000004548b9 [ 326.489485] RDX: 00000000004b9225 RSI: 0000000020001740 RDI: 0000000020001780 [ 326.496748] RBP: 0000000020001780 R08: 00007f032fc57b20 R09: 0000000000000000 [ 326.504008] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 2018/03/29 11:12:07 executing program 0: r0 = perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x4a, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffff9c, 0xc00caee0, &(0x7f0000000180)={0x0, r0, 0x1}) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) fcntl$getownex(r0, 0x10, &(0x7f0000000400)={0x0, 0x0}) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0xffff, 0xe3, 0x6, 0x4, 0x0, 0x7, 0x0, 0x2, 0x10001, 0x1, 0x7, 0x8, 0x100, 0x4, 0x0, 0x7f, 0x20, 0x0, 0x4, 0x5, 0x90a4, 0x7, 0x2, 0x73, 0x8, 0x7, 0x4, 0x7e0, 0x101, 0x0, 0x2, 0x309, 0x0, 0x9, 0xfffffffffffffff9, 0x9, 0x0, 0x4, 0x0, @perf_config_ext={0x20, 0x1}, 0x8140, 0x2, 0x0, 0x0, 0xca1, 0xb5}, r4, 0x4, r1, 0x8) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) futimesat(r1, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0)={{r2, r3/1000+10000}, {r5, r6/1000+10000}}) unshare(0x8000000) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0xdc, 0x40}, 0x341) r8 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8910, &(0x7f0000000080)=@buf={0x0, &(0x7f0000000000)}) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x13, &(0x7f0000000ffc), 0x4) mq_open(&(0x7f00000000c0)='syzkaller0\x00', 0x40, 0x8, &(0x7f0000000100)={0x5, 0x80000000, 0x0, 0xfffffffffffffff9, 0x1, 0xfffffffffffffffd, 0x7fff, 0x200}) socket$inet_tcp(0x2, 0x1, 0x0) r9 = dup3(r8, r7, 0x80000) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r9, 0x84, 0x66, &(0x7f00000002c0)={0x0, 0x8ed6}, &(0x7f0000000300)=0x1) bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) shmget(0xffffffffffffffff, 0x8000, 0x49b, &(0x7f0000ff8000/0x8000)=nil) ioctl$sock_inet_SIOCGIFPFLAGS(r8, 0x8935, &(0x7f0000000080)={'syzkaller0\x00'}) ppoll(&(0x7f0000000780)=[{r1, 0x300}, {r1, 0x8401}], 0x2, &(0x7f00000007c0)={0x77359400}, &(0x7f0000000800)={0x9}, 0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000280)={0x0, 0x0, 0x9}, 0x10) r10 = semget$private(0x0, 0x4, 0x0) semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0x0, 0x1000}], 0x1, &(0x7f0000000080)={0x0, 0x1c9c380}) semctl$IPC_RMID(r10, 0x0, 0x0) 2018/03/29 11:12:07 executing program 7: io_setup(0x3, &(0x7f0000000000)=0x0) accept$unix(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000480)=0x6e) r1 = syz_open_dev$usbmon(&(0x7f0000000200)='/dev/usbmon#\x00', 0x7ff, 0x0) io_cancel(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0xf, 0x3, 0xffffffffffffffff, &(0x7f0000000140)="940c1f2149747e7734510c34c143183667a187dc4f624f6c2de12452792a6fb529e6bf2a661dc23a844b00925c244a9f2967c0ca9868ee50eacf67a2ad7681d82f5a38cbd6d7641f843fa129e00f701fb01835f497b53672b3e5a3f6838f28aa240bf21eb5e5cbe7804fd307404474ae0242f8dea7a08e0fe9479b06f2795f857f8eec271d35ba7f61a91c87296814189cc1dfc9c659cc5437452a0bd178323c50e8c005ba7fa9519b27965c9f6ffbc7dcaa8e658616cc83188fb131a703222d", 0xc0, 0x5, 0x0, 0x1}, &(0x7f0000000280)) socketpair$inet(0x2, 0xf, 0x61, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) io_getevents(r0, 0x2, 0x8f, &(0x7f0000d83f60)=[{}, {}], &(0x7f00005cfff0)={0x4000000000001, 0x7}) io_getevents(r0, 0x0, 0x5, &(0x7f00000002c0)=[{}, {}, {}, {}, {}], &(0x7f00000003c0)) ioctl$KVM_INTERRUPT(r1, 0x4004ae86, &(0x7f0000000100)=0x3) io_setup(0x7, &(0x7f0000000040)) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/route\x00') accept4$netrom(r3, &(0x7f00000004c0)=@full, &(0x7f0000000540)=0x48, 0x0) ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f0000000440)=0x0) perf_event_open(&(0x7f0000aaa000)={0x0, 0x70, 0x4a, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ef4}, r4, 0x0, 0xffffffffffffffff, 0x1) pread64(r3, &(0x7f0000000000)=""/85, 0xfe42, 0x5d) r5 = memfd_create(&(0x7f0000000240)=':+lo#\x00', 0x0) fcntl$dupfd(r1, 0x0, r2) fdatasync(r5) io_submit(r0, 0x1, &(0x7f0000001280)=[&(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, 0x0, r5, &(0x7f0000000100)}]) timerfd_create(0xa, 0x80800) io_destroy(r0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x9, &(0x7f0000000380)=0x3, 0x4) 2018/03/29 11:12:07 executing program 2 (fault-call:21 fault-nth:24): r0 = syz_open_procfs(0x0, &(0x7f00000004c0)='oom_score_adj\x00') perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x49, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(r0, 0x0, 0x83, &(0x7f0000001800)={'nat\x00', 0x0, 0x3, 0x1000, [], 0x2, &(0x7f0000001280)=[{}, {}], &(0x7f0000002040)=""/4096}, &(0x7f00000013c0)=0x78) ioprio_get$pid(0x0, 0x0) timer_create(0x0, &(0x7f0000cd0000), &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00004b1fe0)={{0x0, 0x1c9c380}, {0x0, 0x9}}, &(0x7f0000040000)) r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x7fff) truncate(&(0x7f0000001180)='./bus\x00', 0x4) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000f40000)='/dev/ptmx\x00', 0x200000000101002, 0x0) sendfile(r2, 0xffffffffffffffff, &(0x7f00000010c0), 0x10000065) sendfile(r0, r1, &(0x7f0000000000), 0x4) tkill(0x0, 0x0) r3 = memfd_create(&(0x7f0000000000)='\x00', 0x1) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000001200)) recvmsg(0xffffffffffffff9c, &(0x7f0000001500)={&(0x7f00000012c0)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @remote}}}, 0x80, &(0x7f0000001400)=[{&(0x7f0000001340)=""/103, 0x67}], 0x1, &(0x7f0000001440)=""/155, 0x9b}, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000001540)) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000001640)={0x1ff, {0x2, 0x4e21}, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, {0x2, 0x0, @multicast2=0xe0000002}, 0x0, 0x9, 0x2, 0x6, 0x0, &(0x7f0000001240)='teql0\x00', 0x0, 0x80}) inotify_rm_watch(0xffffffffffffffff, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000140), &(0x7f0000000100)=0xffffffa4) getgroups(0x1, &(0x7f0000001600)=[0x0]) syz_fuseblk_mount(&(0x7f0000001740)='./file0\x00', &(0x7f0000001780)='./file0\x00', 0x0, 0x0, 0xffffffffffffffff, 0x3ff, 0x1, 0x0) getpgrp(0xffffffffffffffff) getegid() sendmmsg$unix(r3, &(0x7f0000001880), 0x0, 0x0) setsockopt$netrom_NETROM_T4(0xffffffffffffffff, 0x103, 0x6, &(0x7f00000017c0), 0xfffffffffffffc77) readv(0xffffffffffffffff, &(0x7f000004ffe0), 0x0) 2018/03/29 11:12:07 executing program 3: io_setup(0x3, &(0x7f0000000000)=0x0) accept$unix(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000100)=0x6e) r1 = syz_open_dev$usbmon(&(0x7f0000000200)='/dev/usbmon#\x00', 0x7ff, 0x0) io_cancel(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0xf, 0x0, 0xffffffffffffffff, &(0x7f0000000140)="940c1f2149747e7734510c34c143183667a187dc4f624f6c2de12452792a6fb529e6bf2a661dc23a844b00925c244a9f2967c0ca9868ee50eacf67a2ad7681d82f5a38cbd6d7641f843fa129e00f701fb01835f497b53672b3e5a3f6838f28aa240bf21eb5e5cbe7804fd307404474ae0242f8dea7a08e0fe9479b06f2795f857f8eec271d35ba7f61a91c87296814189cc1dfc9c659cc5437452a0bd178323c50e8c005ba7fa9519b27965c9f6ffbc7dcaa8e658616cc83188fb131a703222d", 0xc0, 0x5, 0x0, 0x1, r1}, &(0x7f0000000280)) io_getevents(r0, 0x2, 0x8f, &(0x7f0000d83f60)=[{}, {}], &(0x7f00005cfff0)={0x4000000000001, 0x7}) io_getevents(r0, 0x0, 0x5, &(0x7f00000002c0)=[{}, {}, {}, {}, {}], &(0x7f00000003c0)) io_setup(0x7, &(0x7f0000000040)) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/route\x00') ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000440)=0x0) perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x4a, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ef4}, r3, 0x0, r1, 0x1) pread64(r2, &(0x7f0000000000)=""/85, 0xfe42, 0x5d) r4 = memfd_create(&(0x7f0000000240)=':+lo#\x00', 0x0) fdatasync(r4) io_submit(r0, 0x1, &(0x7f0000001280)=[&(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f0000000100)}]) timerfd_create(0x7, 0x80800) syz_open_dev$random(&(0x7f0000000480)='/dev/random\x00', 0x0, 0x64000) io_destroy(r0) setsockopt$llc_int(r1, 0x10c, 0x9, &(0x7f0000000380)=0x3, 0x4) [ 326.511262] R13: 00000000000003ff R14: 0000000000000000 R15: ffffffffffffffff [ 326.582184] FAULT_INJECTION: forcing a failure. [ 326.582184] name failslab, interval 1, probability 0, space 0, times 0 [ 326.593586] CPU: 0 PID: 8972 Comm: syz-executor2 Not tainted 4.16.0-rc7+ #5 [ 326.600689] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 326.610034] Call Trace: [ 326.612612] dump_stack+0x194/0x24d [ 326.616217] ? arch_local_irq_restore+0x53/0x53 [ 326.620862] ? __save_stack_trace+0x7e/0xd0 [ 326.625170] should_fail+0x8c0/0xa40 [ 326.628861] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 326.633939] ? kasan_kmalloc+0xad/0xe0 [ 326.637798] ? kmem_cache_alloc_trace+0x136/0x740 [ 326.642615] ? __memcg_init_list_lru_node+0x169/0x270 [ 326.647776] ? __list_lru_init+0x544/0x750 [ 326.651985] ? sget_userns+0x691/0xe40 [ 326.655850] ? mount_fs+0x66/0x2d0 [ 326.659364] ? vfs_kern_mount.part.26+0xc6/0x4a0 [ 326.664090] ? do_mount+0xea4/0x2bb0 [ 326.667775] ? SyS_mount+0xab/0x120 [ 326.671374] ? do_syscall_64+0x281/0x940 [ 326.675409] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 326.680753] ? find_held_lock+0x35/0x1d0 [ 326.684795] ? __lock_is_held+0xb6/0x140 [ 326.688846] ? check_same_owner+0x320/0x320 [ 326.693147] ? rcu_note_context_switch+0x710/0x710 [ 326.698060] should_failslab+0xec/0x120 [ 326.702014] kmem_cache_alloc_trace+0x4b/0x740 [ 326.706573] ? __kmalloc_node+0x33/0x70 [ 326.710523] ? __kmalloc_node+0x33/0x70 [ 326.714474] ? rcu_read_lock_sched_held+0x108/0x120 [ 326.721122] __memcg_init_list_lru_node+0x169/0x270 [ 326.726118] ? list_lru_add+0x7c0/0x7c0 [ 326.730068] ? __kmalloc_node+0x47/0x70 [ 326.734033] __list_lru_init+0x544/0x750 [ 326.738077] ? memcg_destroy_list_lru_node.isra.7+0x110/0x110 [ 326.743948] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 326.748946] ? __lockdep_init_map+0xe4/0x650 [ 326.753335] ? lockdep_init_map+0x9/0x10 [ 326.757376] sget_userns+0x691/0xe40 [ 326.761063] ? kill_litter_super+0x90/0x90 [ 326.765277] ? ns_test_super+0x50/0x50 [ 326.769144] ? destroy_unused_super.part.6+0xd0/0xd0 [ 326.774222] ? do_raw_spin_trylock+0x190/0x190 [ 326.778788] ? kobject_put+0x6b/0x250 [ 326.782573] ? blkdev_get+0x3a1/0xb00 [ 326.786357] ? cap_capable+0x1b5/0x230 [ 326.790221] ? __blkdev_get+0x13b0/0x13b0 [ 326.794350] ? security_capable+0x8e/0xc0 [ 326.798478] ? kill_litter_super+0x90/0x90 [ 326.802690] ? ns_capable_common+0xcf/0x160 [ 326.806988] ? ns_test_super+0x50/0x50 [ 326.810851] ? kill_litter_super+0x90/0x90 [ 326.815147] sget+0xd2/0x120 [ 326.818148] mount_bdev+0x109/0x370 [ 326.821753] ? fuse_get_root_inode+0x190/0x190 [ 326.826315] fuse_mount_blk+0x34/0x40 [ 326.830094] mount_fs+0x66/0x2d0 [ 326.833445] vfs_kern_mount.part.26+0xc6/0x4a0 [ 326.838010] ? may_umount+0xa0/0xa0 [ 326.841615] ? _raw_read_unlock+0x22/0x30 [ 326.845737] ? __get_fs_type+0x8a/0xc0 [ 326.849607] do_mount+0xea4/0x2bb0 [ 326.853131] ? copy_mount_string+0x40/0x40 [ 326.857344] ? rcu_pm_notify+0xc0/0xc0 [ 326.861216] ? copy_mount_options+0x5f/0x2e0 [ 326.865599] ? rcu_read_lock_sched_held+0x108/0x120 [ 326.870591] ? kmem_cache_alloc_trace+0x459/0x740 [ 326.875424] ? copy_mount_options+0x1f7/0x2e0 [ 326.879901] SyS_mount+0xab/0x120 [ 326.883331] ? copy_mnt_ns+0xb30/0xb30 [ 326.887199] do_syscall_64+0x281/0x940 [ 326.891060] ? __do_page_fault+0xc90/0xc90 [ 326.895270] ? _raw_spin_unlock_irq+0x27/0x70 [ 326.899743] ? finish_task_switch+0x1c1/0x7e0 [ 326.904216] ? syscall_return_slowpath+0x550/0x550 [ 326.909123] ? syscall_return_slowpath+0x2ac/0x550 [ 326.914034] ? prepare_exit_to_usermode+0x350/0x350 [ 326.919028] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 326.924373] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 326.929198] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 326.934360] RIP: 0033:0x4548b9 [ 326.937525] RSP: 002b:00007f032fc57b08 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 326.945208] RAX: ffffffffffffffda RBX: 0000000000000019 RCX: 00000000004548b9 [ 326.952453] RDX: 00000000004b9225 RSI: 0000000020001740 RDI: 0000000020001780 [ 326.959699] RBP: 0000000020001780 R08: 00007f032fc57b20 R09: 0000000000000000 [ 326.966949] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 326.974192] R13: 00000000000003ff R14: 0000000000000000 R15: ffffffffffffffff 2018/03/29 11:12:07 executing program 1: io_setup(0x3, &(0x7f0000000000)=0x0) accept$unix(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000100)=0x6e) r1 = syz_open_dev$usbmon(&(0x7f0000000200)='/dev/usbmon#\x00', 0x0, 0x0) io_cancel(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0xf, 0x3, 0xffffffffffffffff, &(0x7f0000000140)="940c1f2149747e7734510c34c143183667a187dc4f624f6c2de12452792a6fb529e6bf2a661dc23a844b00925c244a9f2967c0ca9868ee50eacf67a2ad7681d82f5a38cbd6d7641f843fa129e00f701fb01835f497b53672b3e5a3f6838f28aa240bf21eb5e5cbe7804fd307404474ae0242f8dea7a08e0fe9479b06f2795f857f8eec271d35ba7f61a91c87296814189cc1dfc9c659cc5437452a0bd178323c50e8c005ba7fa9519b27965c9f6ffbc7dcaa8e658616cc83188fb131a703222d", 0xc0, 0x5, 0x0, 0x1}, &(0x7f0000000280)) io_getevents(r0, 0x2, 0x8f, &(0x7f0000d83f60)=[{}, {}], &(0x7f00005cfff0)={0x4000000000001, 0x7}) io_getevents(r0, 0x0, 0x5, &(0x7f00000002c0)=[{}, {}, {}, {}, {}], &(0x7f00000003c0)) io_setup(0x7, &(0x7f0000000040)) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/route\x00') ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000440)=0x0) perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x4a, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ef4}, r3, 0x0, 0xffffffffffffffff, 0x1) pread64(r2, &(0x7f0000000000)=""/85, 0xfe42, 0x5d) r4 = memfd_create(&(0x7f0000000240)=':+lo#\x00', 0x0) fdatasync(r4) io_submit(r0, 0x1, &(0x7f0000001280)=[&(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f0000000100)}]) timerfd_create(0x0, 0x80800) io_destroy(r0) setsockopt$llc_int(r1, 0x10c, 0x9, &(0x7f0000000380)=0x3, 0x4) 2018/03/29 11:12:07 executing program 3: io_setup(0x3, &(0x7f0000000000)=0x0) accept$unix(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000100)=0x6e) r1 = syz_open_dev$usbmon(&(0x7f0000000200)='/dev/usbmon#\x00', 0x7ff, 0x0) io_cancel(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0xf, 0x0, 0xffffffffffffffff, &(0x7f0000000140)="940c1f2149747e7734510c34c143183667a187dc4f624f6c2de12452792a6fb529e6bf2a661dc23a844b00925c244a9f2967c0ca9868ee50eacf67a2ad7681d82f5a38cbd6d7641f843fa129e00f701fb01835f497b53672b3e5a3f6838f28aa240bf21eb5e5cbe7804fd307404474ae0242f8dea7a08e0fe9479b06f2795f857f8eec271d35ba7f61a91c87296814189cc1dfc9c659cc5437452a0bd178323c50e8c005ba7fa9519b27965c9f6ffbc7dcaa8e658616cc83188fb131a703222d", 0xc0, 0x5, 0x0, 0x1, r1}, &(0x7f0000000280)) io_getevents(r0, 0x2, 0x8f, &(0x7f0000d83f60)=[{}, {}], &(0x7f00005cfff0)={0x4000000000001, 0x7}) io_getevents(r0, 0x0, 0x5, &(0x7f00000002c0)=[{}, {}, {}, {}, {}], &(0x7f00000003c0)) io_setup(0x7, &(0x7f0000000040)) ioctl$DRM_IOCTL_GET_MAGIC(r1, 0x80046402, &(0x7f0000000480)=0x6) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/route\x00') ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000440)=0x0) perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x4a, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ef4}, r3, 0x0, r1, 0x1) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r2, 0x40045532, &(0x7f00000004c0)=0xff) pread64(r2, &(0x7f0000000000)=""/85, 0xfe42, 0x5d) r4 = memfd_create(&(0x7f0000000240)=':+lo#\x00', 0x0) fdatasync(r4) io_submit(r0, 0x1, &(0x7f0000001280)=[&(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f0000000100)}]) timerfd_create(0x7, 0x80800) io_destroy(r0) setsockopt$llc_int(r1, 0x10c, 0x9, &(0x7f0000000380)=0x3, 0x4) 2018/03/29 11:12:07 executing program 5: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) mkdir(&(0x7f0000000000)='./file1\x00', 0x0) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000811ffa)='bdev\x00', 0x0, &(0x7f0000444000)) mount(&(0x7f0000fb6000)='./file0\x00', &(0x7f0000d78000)='.', &(0x7f0000fdb000)='ubifs\x00', 0x1003, 0x0) mount(&(0x7f00002b9ff8)='./file0\x00', &(0x7f0000cbeff8)='./file0\x00', &(0x7f00005f7ffa)='ramfs\x00', 0x80000, &(0x7f000002f000)) mount(&(0x7f0000000040)='.', &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0)='binfmt_misc\x00', 0x0, &(0x7f0000000100)) r0 = syz_open_dev$audion(&(0x7f0000000380)='/dev/audio#\x00', 0x9, 0x40000) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000003c0)=0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r0, 0xc1105518, &(0x7f0000000440)={{0x492, 0x4, 0x96e, 0x2, "886a55b01fd241467247f8618389901400db4659fd367a481c5ba5d15198ed10d8c1ad9fd6052d90634ec751", 0x8}, 0x0, 0x0, 0x9, r1, 0x1ff, 0xb4, "94864145eb76066952321b7d555bbb543f4c3484c128b8f440a3b779ef8d0e18a57cdc55e9e1360611473278a188bb29453f0718a96f7fd5a1c142c9cc2be10c", &(0x7f0000000400)='binfmt_misc\x00', 0xc, [], [0xffffffffffffff8e, 0x1, 0x4, 0x7]}) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x400, 0x0) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffff9c, 0x84, 0x1, &(0x7f0000000240)={0x0, 0x100000000, 0xb2, 0x0, 0x1, 0x3}, &(0x7f0000000280)=0x14) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000580)={r3, @in={{0x2, 0x4e22, @multicast1=0xe0000001}}, 0x80000001, 0x7fff}, 0x302) lremovexattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)=@known='security.evm\x00') mount(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./file1\x00', &(0x7f0000000200)='anon_inodefs\x00', 0x2000, &(0x7f0000000240)) truncate(&(0x7f0000000100)='.', 0x200) mount(&(0x7f0000adcff8)='./file0\x00', &(0x7f0000e08fff)='.', &(0x7f00005e9000)='cifs\x00', 0x2000, &(0x7f0000ad5000)) 2018/03/29 11:12:07 executing program 0: r0 = perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x4a, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffff9c, 0xc00caee0, &(0x7f0000000180)={0x0, r0, 0x1}) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) fcntl$getownex(r0, 0x10, &(0x7f0000000400)={0x0, 0x0}) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0xffff, 0xe3, 0x6, 0x4, 0x0, 0x7, 0x0, 0x2, 0x10001, 0x1, 0x7, 0x8, 0x100, 0x4, 0x0, 0x7f, 0x20, 0x0, 0x4, 0x5, 0x90a4, 0x7, 0x2, 0x73, 0x8, 0x7, 0x4, 0x7e0, 0x101, 0x0, 0x2, 0x309, 0x0, 0x9, 0xfffffffffffffff9, 0x9, 0x0, 0x4, 0x0, @perf_config_ext={0x20, 0x1}, 0x8140, 0x2, 0x0, 0x0, 0xca1, 0xb5}, r4, 0x4, r1, 0x8) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) futimesat(r1, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0)={{r2, r3/1000+10000}, {r5, r6/1000+10000}}) unshare(0x8000000) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0xdc, 0x40}, 0x341) r8 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8910, &(0x7f0000000080)=@buf={0x0, &(0x7f0000000000)}) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x13, &(0x7f0000000ffc), 0x4) mq_open(&(0x7f00000000c0)='syzkaller0\x00', 0x40, 0x8, &(0x7f0000000100)={0x5, 0x80000000, 0x0, 0xfffffffffffffff9, 0x1, 0xfffffffffffffffd, 0x7fff, 0x200}) socket$inet_tcp(0x2, 0x1, 0x0) r9 = dup3(r8, r7, 0x80000) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r9, 0x84, 0x66, &(0x7f00000002c0)={0x0, 0x8ed6}, &(0x7f0000000300)=0x1) bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) shmget(0xffffffffffffffff, 0x8000, 0x49b, &(0x7f0000ff8000/0x8000)=nil) ioctl$sock_inet_SIOCGIFPFLAGS(r8, 0x8935, &(0x7f0000000080)={'syzkaller0\x00'}) ppoll(&(0x7f0000000780)=[{r1, 0x300}, {r1, 0x8401}], 0x2, &(0x7f00000007c0)={0x77359400}, &(0x7f0000000800)={0x9}, 0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000280)={0x0, 0x0, 0x9}, 0x10) r10 = semget$private(0x0, 0x4, 0x0) semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0x0, 0x1000}], 0x1, &(0x7f0000000080)={0x0, 0x1c9c380}) semctl$IPC_RMID(r10, 0x0, 0x0) 2018/03/29 11:12:07 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) readv(r0, &(0x7f0000001480)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x3}) r1 = syz_open_pts(r0, 0x2) r2 = dup3(r1, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000c34fff), 0xffffff0b) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0) preadv(r3, &(0x7f00000004c0)=[{&(0x7f0000000480)=""/21, 0x15}], 0x1, 0x0) fchdir(0xffffffffffffffff) mkdir(&(0x7f0000000280)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f", 0xfffffffffffffffc) fchmod(r2, 0x0) splice(r3, &(0x7f0000000400), 0xffffffffffffffff, &(0x7f0000000440), 0x9, 0x2) rename(&(0x7f0000001e00)='./file0\x00', &(0x7f0000000100)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f") mkdir(&(0x7f000000e000)='./control\x00', 0x0) r4 = open(&(0x7f0000000000)='./control\x00', 0x0, 0x0) renameat2(r4, &(0x7f0000000040)='./file0\x00', r4, &(0x7f0000000080)='./control\x00', 0x2) readv(r0, &(0x7f0000001940)=[{&(0x7f00000014c0)=""/173, 0xad}, {&(0x7f0000001580)=""/241, 0xf1}, {&(0x7f0000001680)=""/148, 0x94}, {&(0x7f0000000200)=""/53, 0x35}, {&(0x7f0000001740)=""/239, 0xef}, {&(0x7f0000001840)=""/69, 0x45}, {&(0x7f0000002000)=""/4096, 0x1000}, {&(0x7f00000018c0)=""/95, 0x5f}], 0x8) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000300)={0x0, 0x80}, &(0x7f0000000340)=0x8) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000380)={r5, 0x5}, &(0x7f00000003c0)=0x8) mknodat(r4, &(0x7f000003f000)='./control\x00', 0x0, 0x0) symlink(&(0x7f0000000180)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f", &(0x7f00000000c0)='./file0\x00') perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(r4, &(0x7f0000010000)='./control\x00', &(0x7f000003f000), &(0x7f0000001fe8), 0x0) 2018/03/29 11:12:07 executing program 6: openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x0, 0x0) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, &(0x7f0000000340)=0x1) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f000051cff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000943ffc)=0xa35) read(r0, &(0x7f00003fefff)=""/1, 0x1) r1 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000029000)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r0, &(0x7f0000dcdff0)=[{&(0x7f0000cd8000)=""/1, 0x1}], 0x1) ioctl$int_in(r2, 0x5452, &(0x7f0000b28000)=0x3c) write$cgroup_type(0xffffffffffffffff, &(0x7f00000002c0)='threaded\x00', 0x9) syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x0, 0x802) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000fb9000)) fcntl$setsig(r2, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{}], 0x1, 0xfffffffffffffff8) read$eventfd(0xffffffffffffffff, &(0x7f0000000040), 0x8) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)) r4 = dup2(r2, r3) fcntl$setown(r4, 0x8, r1) ptrace$cont(0xffffffffffffffff, r1, 0x0, 0x8) tkill(r1, 0x16) r5 = gettid() process_vm_readv(r5, &(0x7f0000001880)=[{&(0x7f0000000680)=""/198, 0xc6}, {&(0x7f0000000780)=""/247, 0xf7}, {&(0x7f0000000380)=""/12, 0xc}, {&(0x7f00000003c0)=""/6, 0x6}, {&(0x7f0000000400)=""/14, 0xe}], 0x5, &(0x7f00000019c0)=[{&(0x7f0000001900)=""/41, 0x29}, {&(0x7f0000001940)=""/112, 0x70}], 0x2, 0x0) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f0000000240)={{{@in6}}, {{@in=@local}, 0x0, @in=@local}}, &(0x7f0000000100)=0xe8) 2018/03/29 11:12:07 executing program 2 (fault-call:21 fault-nth:25): r0 = syz_open_procfs(0x0, &(0x7f00000004c0)='oom_score_adj\x00') perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x49, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(r0, 0x0, 0x83, &(0x7f0000001800)={'nat\x00', 0x0, 0x3, 0x1000, [], 0x2, &(0x7f0000001280)=[{}, {}], &(0x7f0000002040)=""/4096}, &(0x7f00000013c0)=0x78) ioprio_get$pid(0x0, 0x0) timer_create(0x0, &(0x7f0000cd0000), &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00004b1fe0)={{0x0, 0x1c9c380}, {0x0, 0x9}}, &(0x7f0000040000)) r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x7fff) truncate(&(0x7f0000001180)='./bus\x00', 0x4) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000f40000)='/dev/ptmx\x00', 0x200000000101002, 0x0) sendfile(r2, 0xffffffffffffffff, &(0x7f00000010c0), 0x10000065) sendfile(r0, r1, &(0x7f0000000000), 0x4) tkill(0x0, 0x0) r3 = memfd_create(&(0x7f0000000000)='\x00', 0x1) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000001200)) recvmsg(0xffffffffffffff9c, &(0x7f0000001500)={&(0x7f00000012c0)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @remote}}}, 0x80, &(0x7f0000001400)=[{&(0x7f0000001340)=""/103, 0x67}], 0x1, &(0x7f0000001440)=""/155, 0x9b}, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000001540)) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000001640)={0x1ff, {0x2, 0x4e21}, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, {0x2, 0x0, @multicast2=0xe0000002}, 0x0, 0x9, 0x2, 0x6, 0x0, &(0x7f0000001240)='teql0\x00', 0x0, 0x80}) inotify_rm_watch(0xffffffffffffffff, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000140), &(0x7f0000000100)=0xffffffa4) getgroups(0x1, &(0x7f0000001600)=[0x0]) syz_fuseblk_mount(&(0x7f0000001740)='./file0\x00', &(0x7f0000001780)='./file0\x00', 0x0, 0x0, 0xffffffffffffffff, 0x3ff, 0x1, 0x0) getpgrp(0xffffffffffffffff) getegid() sendmmsg$unix(r3, &(0x7f0000001880), 0x0, 0x0) setsockopt$netrom_NETROM_T4(0xffffffffffffffff, 0x103, 0x6, &(0x7f00000017c0), 0xfffffffffffffc77) readv(0xffffffffffffffff, &(0x7f000004ffe0), 0x0) 2018/03/29 11:12:07 executing program 7: io_setup(0xfe, &(0x7f00000005c0)=0x0) accept$unix(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000100)=0x6e) syz_open_dev$usbmon(&(0x7f0000000200)='/dev/usbmon#\x00', 0x7ff, 0x0) io_cancel(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0xf, 0x3, 0xffffffffffffffff, &(0x7f0000000140)="940c1f2149747e7734510c34c143183667a187dc4f624f6c2de12452792a6fb529e6bf2a661dc23a844b00925c244a9f2967c0ca9868ee50eacf67a2ad7681d82f5a38cbd6d7641f843fa129e00f701fb01835f497b53672b3e5a3f6838f28aa240bf21eb5e5cbe7804fd307404474ae0242f8dea7a08e0fe9479b06f2795f857f8eec271d35ba7f61a91c87296814189cc1dfc9c659cc5437452a0bd178323c50e8c005ba7fa9519b27965c9f6ffbc7dcaa8e658616cc83188fb131a703222d", 0xc0, 0x5, 0x0, 0x1}, &(0x7f0000000280)) io_getevents(r0, 0x2, 0x8f, &(0x7f0000d83f60)=[{}, {}], &(0x7f00005cfff0)={0x4000000000001, 0x7}) io_getevents(r0, 0x0, 0x5, &(0x7f00000002c0)=[{}, {}, {}, {}, {}], &(0x7f00000003c0)) io_setup(0x7, &(0x7f0000000040)) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/route\x00') ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000440)=0x0) perf_event_open(&(0x7f0000aaa000)={0x0, 0x70, 0x4a, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ef4}, r2, 0x0, 0xffffffffffffffff, 0x1) pread64(r1, &(0x7f0000000000)=""/85, 0xfe42, 0x5d) r3 = memfd_create(&(0x7f0000000240)=':+lo#\x00', 0x0) fdatasync(r3) io_submit(r0, 0x1, &(0x7f0000001280)=[&(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000000100)}]) timerfd_create(0x7, 0x80800) io_destroy(r0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x9, &(0x7f0000000380)=0x3, 0x4) [ 327.105946] FAULT_INJECTION: forcing a failure. [ 327.105946] name failslab, interval 1, probability 0, space 0, times 0 [ 327.117296] CPU: 0 PID: 8999 Comm: syz-executor2 Not tainted 4.16.0-rc7+ #5 [ 327.124397] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 327.133754] Call Trace: [ 327.136348] dump_stack+0x194/0x24d [ 327.139990] ? arch_local_irq_restore+0x53/0x53 [ 327.144659] ? __save_stack_trace+0x7e/0xd0 [ 327.148995] should_fail+0x8c0/0xa40 [ 327.152713] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 327.157805] ? kasan_kmalloc+0xad/0xe0 [ 327.161685] ? kmem_cache_alloc_trace+0x136/0x740 [ 327.166517] ? __memcg_init_list_lru_node+0x169/0x270 [ 327.171704] ? __list_lru_init+0x544/0x750 [ 327.175936] ? sget_userns+0x691/0xe40 [ 327.179810] ? mount_fs+0x66/0x2d0 [ 327.183344] ? vfs_kern_mount.part.26+0xc6/0x4a0 [ 327.188085] ? do_mount+0xea4/0x2bb0 [ 327.191786] ? SyS_mount+0xab/0x120 [ 327.195401] ? do_syscall_64+0x281/0x940 [ 327.199456] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7 2018/03/29 11:12:07 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) readv(r0, &(0x7f0000000240)=[{&(0x7f0000002000)=""/4096, 0xf62}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x3}) r1 = syz_open_pts(r0, 0x2) r2 = dup3(r1, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000c34fff), 0xffffff0b) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0) preadv(r3, &(0x7f00000004c0)=[{&(0x7f0000000480)=""/21, 0x15}], 0x1, 0x0) fchdir(0xffffffffffffffff) mkdir(&(0x7f0000001680)='./control\x00', 0x98) fchmod(r2, 0x0) splice(r3, &(0x7f0000000400), 0xffffffffffffffff, &(0x7f0000000440), 0x9, 0x2) rename(&(0x7f0000001e00)='./file0\x00', &(0x7f0000000100)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f") mkdir(&(0x7f000000e000)='./control\x00', 0x0) r4 = open(&(0x7f0000000000)='./control\x00', 0x0, 0x0) renameat2(r4, &(0x7f0000000040)='./file0\x00', r4, &(0x7f0000000080)='./control\x00', 0x2) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000300)={0x0, 0x80}, &(0x7f0000000340)=0x8) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000380)={r5, 0x5}, &(0x7f00000003c0)=0x8) mknodat(r4, &(0x7f000003f000)='./control\x00', 0x0, 0x0) symlink(&(0x7f0000000180)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f", &(0x7f00000000c0)='./file0\x00') perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(r4, &(0x7f0000010000)='./control\x00', &(0x7f000003f000), &(0x7f0000001fe8), 0x0) [ 327.204826] ? find_held_lock+0x35/0x1d0 [ 327.208897] ? __lock_is_held+0xb6/0x140 [ 327.212981] ? check_same_owner+0x320/0x320 [ 327.217308] ? rcu_note_context_switch+0x710/0x710 [ 327.222242] should_failslab+0xec/0x120 [ 327.226201] kmem_cache_alloc_trace+0x4b/0x740 [ 327.230763] ? __kmalloc_node+0x33/0x70 [ 327.234712] ? __kmalloc_node+0x33/0x70 [ 327.238674] ? rcu_read_lock_sched_held+0x108/0x120 [ 327.243682] __memcg_init_list_lru_node+0x169/0x270 [ 327.248693] ? list_lru_add+0x7c0/0x7c0 [ 327.252659] ? __kmalloc_node+0x47/0x70 [ 327.256642] __list_lru_init+0x544/0x750 [ 327.260698] ? memcg_destroy_list_lru_node.isra.7+0x110/0x110 [ 327.266574] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 327.271575] ? __lockdep_init_map+0xe4/0x650 [ 327.275983] ? lockdep_init_map+0x9/0x10 [ 327.280038] sget_userns+0x691/0xe40 [ 327.283742] ? kill_litter_super+0x90/0x90 [ 327.287962] ? ns_test_super+0x50/0x50 [ 327.291839] ? destroy_unused_super.part.6+0xd0/0xd0 [ 327.296931] ? do_raw_spin_trylock+0x190/0x190 [ 327.301497] ? kobject_put+0x6b/0x250 2018/03/29 11:12:07 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) readv(r0, &(0x7f0000001480)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x0, 0x1}) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x3}) r1 = syz_open_pts(r0, 0x2) r2 = dup3(r1, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000c34fff), 0xffffff0b) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.net/syz1\x00', 0x200002, 0x0) preadv(r3, &(0x7f00000004c0)=[{&(0x7f0000000480)=""/21, 0x15}], 0x1, 0x0) fchdir(0xffffffffffffffff) mkdir(&(0x7f0000000280)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f", 0xfffffffffffffffc) fchmod(r2, 0x0) splice(r3, &(0x7f0000000400), 0xffffffffffffffff, &(0x7f0000000440), 0x9, 0x2) rename(&(0x7f0000001e00)='./file0\x00', &(0x7f0000000100)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f") mkdir(&(0x7f000000e000)='./control\x00', 0x0) r4 = open(&(0x7f0000000000)='./control\x00', 0x0, 0x0) renameat2(r4, &(0x7f0000000040)='./file0\x00', r4, &(0x7f0000000080)='./control\x00', 0x2) ioctl$TIOCGSID(r4, 0x5429, &(0x7f0000000240)=0x0) stat(&(0x7f00000018c0)='./control\x00', &(0x7f0000001900)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000001980)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f", &(0x7f0000001a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000001a80)={r5, r6, r7}, 0xc) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f00000014c0)={"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"}) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000300)={0x0, 0x80}, &(0x7f0000000340)=0x8) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000380)={r8, 0x5}, &(0x7f00000003c0)=0x8) setsockopt$bt_hci_HCI_TIME_STAMP(r2, 0x0, 0x3, &(0x7f0000001b80)=0x9, 0x4) mknodat(r4, &(0x7f000003f000)='./control\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001b40)={r2, 0x50, &(0x7f0000001ac0)}, 0x10) symlink(&(0x7f0000000180)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f", &(0x7f00000000c0)='./file0\x00') perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(r4, &(0x7f0000010000)='./control\x00', &(0x7f000003f000), &(0x7f0000001fe8), 0x0) [ 327.305295] ? blkdev_get+0x3a1/0xb00 [ 327.309097] ? cap_capable+0x1b5/0x230 [ 327.312978] ? __blkdev_get+0x13b0/0x13b0 [ 327.317127] ? security_capable+0x8e/0xc0 [ 327.321278] ? kill_litter_super+0x90/0x90 [ 327.325514] ? ns_capable_common+0xcf/0x160 [ 327.329827] ? ns_test_super+0x50/0x50 [ 327.333691] ? kill_litter_super+0x90/0x90 [ 327.337906] sget+0xd2/0x120 [ 327.340917] mount_bdev+0x109/0x370 [ 327.344519] ? fuse_get_root_inode+0x190/0x190 [ 327.349099] fuse_mount_blk+0x34/0x40 [ 327.352889] mount_fs+0x66/0x2d0 [ 327.356243] vfs_kern_mount.part.26+0xc6/0x4a0 [ 327.360806] ? may_umount+0xa0/0xa0 [ 327.364417] ? _raw_read_unlock+0x22/0x30 [ 327.368551] ? __get_fs_type+0x8a/0xc0 [ 327.372433] do_mount+0xea4/0x2bb0 [ 327.375958] ? copy_mount_string+0x40/0x40 [ 327.380174] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 327.385177] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 327.389919] ? retint_kernel+0x10/0x10 [ 327.393811] ? audit_kill_trees+0x430/0x430 [ 327.398127] ? copy_mount_options+0x1f7/0x2e0 [ 327.402608] SyS_mount+0xab/0x120 2018/03/29 11:12:07 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) readv(r0, &(0x7f0000001480)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x3}) r1 = syz_open_pts(r0, 0x2) r2 = dup3(r1, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000c34fff), 0xffffff0b) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0) ioctl$EVIOCGABS3F(r2, 0x8018457f, &(0x7f0000000200)=""/32) preadv(r3, &(0x7f00000004c0)=[{&(0x7f0000000480)=""/21, 0x15}], 0x1, 0x0) fchdir(0xffffffffffffffff) mkdir(&(0x7f0000000280)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f", 0xfffffffffffffffc) fchmod(r2, 0x0) splice(r3, &(0x7f0000000400), 0xffffffffffffffff, &(0x7f0000000440), 0x9, 0x2) rename(&(0x7f0000001e00)='./file0\x00', &(0x7f0000000100)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f") mkdir(&(0x7f000000e000)='./control\x00', 0x0) r4 = open(&(0x7f0000000000)='./control\x00', 0x0, 0x0) renameat2(r4, &(0x7f0000000040)='./file0\x00', r4, &(0x7f0000000080)='./control\x00', 0x2) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000300)={0x0, 0x80}, &(0x7f0000000340)=0x8) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000380)={r5, 0x5}, &(0x7f00000003c0)=0x8) mknodat(r4, &(0x7f000003f000)='./control\x00', 0x0, 0x0) symlink(&(0x7f0000000180)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f", &(0x7f00000000c0)='./file0\x00') perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(r4, &(0x7f0000010000)='./control\x00', &(0x7f000003f000), &(0x7f0000001fe8), 0x0) [ 327.406046] ? copy_mnt_ns+0xb30/0xb30 [ 327.409927] do_syscall_64+0x281/0x940 [ 327.413793] ? __do_page_fault+0xc90/0xc90 [ 327.418017] ? _raw_spin_unlock_irq+0x27/0x70 [ 327.422509] ? finish_task_switch+0x1c1/0x7e0 [ 327.426996] ? syscall_return_slowpath+0x550/0x550 [ 327.431918] ? syscall_return_slowpath+0x2ac/0x550 [ 327.436832] ? prepare_exit_to_usermode+0x350/0x350 [ 327.441835] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 327.447181] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 327.452011] entry_SYSCALL_64_after_hwframe+0x42/0xb7 2018/03/29 11:12:07 executing program 0: r0 = perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x4a, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffff9c, 0xc00caee0, &(0x7f0000000180)={0x0, r0, 0x1}) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) fcntl$getownex(r0, 0x10, &(0x7f0000000400)={0x0, 0x0}) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0xffff, 0xe3, 0x6, 0x4, 0x0, 0x7, 0x0, 0x2, 0x10001, 0x1, 0x7, 0x8, 0x100, 0x4, 0x0, 0x7f, 0x20, 0x0, 0x4, 0x5, 0x90a4, 0x7, 0x2, 0x73, 0x8, 0x7, 0x4, 0x7e0, 0x101, 0x0, 0x2, 0x309, 0x0, 0x9, 0xfffffffffffffff9, 0x9, 0x0, 0x4, 0x0, @perf_config_ext={0x20, 0x1}, 0x8140, 0x2, 0x0, 0x0, 0xca1, 0xb5}, r4, 0x4, r1, 0x8) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) futimesat(r1, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0)={{r2, r3/1000+10000}, {r5, r6/1000+10000}}) unshare(0x8000000) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0xdc, 0x40}, 0x341) r8 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8910, &(0x7f0000000080)=@buf={0x0, &(0x7f0000000000)}) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x13, &(0x7f0000000ffc), 0x4) mq_open(&(0x7f00000000c0)='syzkaller0\x00', 0x40, 0x8, &(0x7f0000000100)={0x5, 0x80000000, 0x0, 0xfffffffffffffff9, 0x1, 0xfffffffffffffffd, 0x7fff, 0x200}) socket$inet_tcp(0x2, 0x1, 0x0) r9 = dup3(r8, r7, 0x80000) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r9, 0x84, 0x66, &(0x7f00000002c0)={0x0, 0x8ed6}, &(0x7f0000000300)=0x1) bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) shmget(0xffffffffffffffff, 0x8000, 0x49b, &(0x7f0000ff8000/0x8000)=nil) ioctl$sock_inet_SIOCGIFPFLAGS(r8, 0x8935, &(0x7f0000000080)={'syzkaller0\x00'}) ppoll(&(0x7f0000000780)=[{r1, 0x300}, {r1, 0x8401}], 0x2, &(0x7f00000007c0)={0x77359400}, &(0x7f0000000800)={0x9}, 0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000280)={0x0, 0x0, 0x9}, 0x10) r10 = semget$private(0x0, 0x4, 0x0) semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0x0, 0x1000}], 0x1, &(0x7f0000000080)={0x0, 0x1c9c380}) semctl$IPC_RMID(r10, 0x0, 0x0) [ 327.457189] RIP: 0033:0x4548b9 [ 327.460359] RSP: 002b:00007f032fc57b08 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 327.468046] RAX: ffffffffffffffda RBX: 0000000000000019 RCX: 00000000004548b9 [ 327.475298] RDX: 00000000004b9225 RSI: 0000000020001740 RDI: 0000000020001780 [ 327.482548] RBP: 0000000020001780 R08: 00007f032fc57b20 R09: 0000000000000000 [ 327.489797] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 327.497050] R13: 00000000000003ff R14: 0000000000000000 R15: ffffffffffffffff [ 327.546981] bond0 (unregistering): Released all slaves [ 328.249201] IPVS: ftp: loaded support on port[0] = 21 [ 328.553534] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 328.980846] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 328.986940] 8021q: adding VLAN 0 to HW filter on device bond0 [ 329.031914] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready 2018/03/29 11:12:09 executing program 2 (fault-call:21 fault-nth:26): r0 = syz_open_procfs(0x0, &(0x7f00000004c0)='oom_score_adj\x00') perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x49, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(r0, 0x0, 0x83, &(0x7f0000001800)={'nat\x00', 0x0, 0x3, 0x1000, [], 0x2, &(0x7f0000001280)=[{}, {}], &(0x7f0000002040)=""/4096}, &(0x7f00000013c0)=0x78) ioprio_get$pid(0x0, 0x0) timer_create(0x0, &(0x7f0000cd0000), &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00004b1fe0)={{0x0, 0x1c9c380}, {0x0, 0x9}}, &(0x7f0000040000)) r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x7fff) truncate(&(0x7f0000001180)='./bus\x00', 0x4) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000f40000)='/dev/ptmx\x00', 0x200000000101002, 0x0) sendfile(r2, 0xffffffffffffffff, &(0x7f00000010c0), 0x10000065) sendfile(r0, r1, &(0x7f0000000000), 0x4) tkill(0x0, 0x0) r3 = memfd_create(&(0x7f0000000000)='\x00', 0x1) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000001200)) recvmsg(0xffffffffffffff9c, &(0x7f0000001500)={&(0x7f00000012c0)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @remote}}}, 0x80, &(0x7f0000001400)=[{&(0x7f0000001340)=""/103, 0x67}], 0x1, &(0x7f0000001440)=""/155, 0x9b}, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000001540)) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000001640)={0x1ff, {0x2, 0x4e21}, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, {0x2, 0x0, @multicast2=0xe0000002}, 0x0, 0x9, 0x2, 0x6, 0x0, &(0x7f0000001240)='teql0\x00', 0x0, 0x80}) inotify_rm_watch(0xffffffffffffffff, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000140), &(0x7f0000000100)=0xffffffa4) getgroups(0x1, &(0x7f0000001600)=[0x0]) syz_fuseblk_mount(&(0x7f0000001740)='./file0\x00', &(0x7f0000001780)='./file0\x00', 0x0, 0x0, 0xffffffffffffffff, 0x3ff, 0x1, 0x0) getpgrp(0xffffffffffffffff) getegid() sendmmsg$unix(r3, &(0x7f0000001880), 0x0, 0x0) setsockopt$netrom_NETROM_T4(0xffffffffffffffff, 0x103, 0x6, &(0x7f00000017c0), 0xfffffffffffffc77) readv(0xffffffffffffffff, &(0x7f000004ffe0), 0x0) 2018/03/29 11:12:09 executing program 3: io_setup(0x1, &(0x7f0000000000)=0x0) accept$unix(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000100)=0x6e) r1 = syz_open_dev$usbmon(&(0x7f0000000200)='/dev/usbmon#\x00', 0x7ff, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r1, 0xc008551b, &(0x7f0000000440)={0x9, 0x18, [0x3, 0x80000000, 0x3, 0x5, 0x3, 0x6]}) io_cancel(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0xf, 0x0, 0xffffffffffffffff, &(0x7f0000000140)="940c1f2149747e7734510c34c143183667a187dc4f624f6c2de12452792a6fb529e6bf2a661dc23a844b00ff07000000000000ca9868ee50eacf67a2ad7681d82f5a38cbd6d7641f843fa129e00f701fb01835f497b53672b3e5a3f6838f28aa240bf21eb5e5cbe7804fd307404474ae0242f8dea7a08e0fe9479b06f2795f857f8eec271d35ba7f61a91c87297cb2420e1c23724b126814189cc1dfc9c659cc5437452a0bd19c2a88dee8c005ba7fa9519b27965c9f6ffbc7dcaa8e658616cc", 0xc0, 0x5ca4, 0x0, 0x1, r1}, &(0x7f0000000600)) io_getevents(r0, 0x2, 0x8f, &(0x7f0000d83f60)=[{}, {}], &(0x7f00005cfff0)={0x4000000000001, 0x7}) io_getevents(r0, 0x0, 0x5, &(0x7f00000002c0)=[{}, {}, {}, {}, {}], &(0x7f00000003c0)) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/route\x00') ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000640)=0x0) perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x4a, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ef4}, r3, 0x0, r1, 0x1) pread64(r2, &(0x7f0000000000)=""/85, 0xfe42, 0x5d) getsockname$netlink(r1, &(0x7f0000000580), &(0x7f00000005c0)=0xc) r4 = memfd_create(&(0x7f0000000240)=':+lo#\x00', 0x0) fdatasync(r4) io_submit(r0, 0x1, &(0x7f0000001280)=[&(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f0000000100)}]) timerfd_create(0x7, 0x80800) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f00000006c0)=0x800, 0x4) timer_create(0x7, &(0x7f0000000480)={0x0, 0x5, 0x5, @tid=r3}, &(0x7f00000004c0)=0x0) timer_gettime(r5, &(0x7f0000000540)) io_destroy(r0) setsockopt$llc_int(r1, 0x10c, 0x9, &(0x7f0000000380)=0x3, 0x4) 2018/03/29 11:12:09 executing program 5: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) mkdir(&(0x7f0000000000)='./file1\x00', 0x0) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000811ffa)='bdev\x00', 0x0, &(0x7f0000444000)) mount(&(0x7f0000fb6000)='./file0\x00', &(0x7f0000d78000)='.', &(0x7f0000fdb000)='ubifs\x00', 0x1003, 0x0) mount(&(0x7f00002b9ff8)='./file0\x00', &(0x7f0000cbeff8)='./file0\x00', &(0x7f00005f7ffa)='ramfs\x00', 0x80000, &(0x7f000002f000)) mount(&(0x7f0000000040)='.', &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0)='binfmt_misc\x00', 0x0, &(0x7f0000000100)) listxattr(&(0x7f0000000100)='./file1\x00', &(0x7f0000000240)=""/155, 0x9b) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) mount(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./file1\x00', &(0x7f0000000200)='anon_inodefs\x00', 0x2000, &(0x7f0000000240)) mount(&(0x7f0000adcff8)='./file0\x00', &(0x7f0000e08fff)='.', &(0x7f00005e9000)='cifs\x00', 0x2000, &(0x7f0000ad5000)) 2018/03/29 11:12:09 executing program 1: io_setup(0x3, &(0x7f0000000000)=0x0) accept$unix(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000100)=0x6e) r1 = syz_open_dev$usbmon(&(0x7f0000000200)='/dev/usbmon#\x00', 0x0, 0x0) io_cancel(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0xf, 0x3, 0xffffffffffffffff, &(0x7f0000000140)="940c1f2149747e7734510c34c143183667a187dc4f624f6c2de12452792a6fb529e6bf2a661dc23a844b00925c244a9f2967c0ca9868ee50eacf67a2ad7681d82f5a38cbd6d7641f843fa129e00f701fb01835f497b53672b3e5a3f6838f28aa240bf21eb5e5cbe7804fd307404474ae0242f8dea7a08e0fe9479b06f2795f857f8eec271d35ba7f61a91c87296814189cc1dfc9c659cc5437452a0bd178323c50e8c005ba7fa9519b27965c9f6ffbc7dcaa8e658616cc83188fb131a703222d", 0xc0, 0x5, 0x0, 0x1}, &(0x7f0000000280)) io_getevents(r0, 0x2, 0x8f, &(0x7f0000d83f60)=[{}, {}], &(0x7f00005cfff0)={0x4000000000001, 0x7}) io_getevents(r0, 0x0, 0x5, &(0x7f00000002c0)=[{}, {}, {}, {}, {}], &(0x7f00000003c0)) io_setup(0x7, &(0x7f0000000040)) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/route\x00') ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000440)=0x0) perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x4a, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ef4}, r3, 0x0, 0xffffffffffffffff, 0x1) pread64(r2, &(0x7f0000000000)=""/85, 0xfe42, 0x5d) r4 = memfd_create(&(0x7f0000000240)=':+lo#\x00', 0x0) fdatasync(r4) io_submit(r0, 0x1, &(0x7f0000001280)=[&(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f0000000100)}]) timerfd_create(0x7, 0x0) io_destroy(r0) setsockopt$llc_int(r1, 0x10c, 0x9, &(0x7f0000000380)=0x3, 0x4) 2018/03/29 11:12:09 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) readv(r0, &(0x7f0000001480)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x3}) r1 = syz_open_pts(r0, 0x2) r2 = dup3(r1, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000c34fff), 0xffffff0b) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0) preadv(r3, &(0x7f00000004c0)=[{&(0x7f0000000480)=""/21, 0x15}], 0x1, 0x0) fchdir(r1) mkdir(&(0x7f0000000280)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f", 0xfffffffffffffffc) fchmod(r2, 0x0) splice(r3, &(0x7f0000000400), 0xffffffffffffffff, &(0x7f0000000440), 0x9, 0x2) rename(&(0x7f0000001e00)='./file0\x00', &(0x7f0000000100)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f") mkdir(&(0x7f000000e000)='./control\x00', 0x0) r4 = open(&(0x7f0000000000)='./control\x00', 0x0, 0x0) renameat2(r4, &(0x7f0000000040)='./file0\x00', r4, &(0x7f0000000080)='./control\x00', 0x2) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000300)={0x0, 0x80}, &(0x7f0000000340)=0x8) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000380)={r5, 0x5}, &(0x7f00000003c0)=0x8) mknodat(r4, &(0x7f000003f000)='./control\x00', 0x0, 0x0) symlink(&(0x7f0000000180)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f", &(0x7f00000000c0)='./file0\x00') perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r4, 0x40045532, &(0x7f0000000200)=0x7) execveat(r4, &(0x7f0000010000)='./control\x00', &(0x7f000003f000), &(0x7f0000001fe8), 0x0) 2018/03/29 11:12:09 executing program 7: io_setup(0x3, &(0x7f0000000000)=0x0) accept$unix(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000100)=0x6e) r1 = syz_open_dev$usbmon(&(0x7f0000000200)='/dev/usbmon#\x00', 0x7ff, 0x0) ioctl$KVM_SET_FPU(r1, 0x41a0ae8d, &(0x7f00000004c0)={[], 0x7, 0x1, 0xa0a, 0x0, 0x6, 0x14000, 0x100000}) io_cancel(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0xf, 0x3, 0xffffffffffffffff, &(0x7f0000000140)="940c1f2149747e7734510c34c143183667a187dc4f624f6c2de12452792a6fb529e6bf2a661dc23a844b00925c244a9f2967c0ca9868ee50eacf67a2ad7681d82f5a38cbd6d7641f843fa129e00f701fb01835f497b53672b3e5a3f6838f28aa240bf21eb5e5cbe7804fd307404474ae0242f8dea7a08e0fe9479b06f2795f857f8eec271d35ba7f61a91c87296814189cc1dfc9c659cc5437452a0bd178323c50e8c005ba7fa9519b27965c9f6ffbc7dcaa8e658616cc83188fb131a703222d", 0xc0, 0x5, 0x0, 0x1}, &(0x7f0000000280)) io_getevents(r0, 0x2, 0x8f, &(0x7f0000d83f60)=[{}, {}], &(0x7f00005cfff0)={0x4000000000001, 0x7}) io_getevents(r0, 0x0, 0x5, &(0x7f00000002c0)=[{}, {}, {}, {}, {}], &(0x7f00000003c0)) io_setup(0x7, &(0x7f0000000040)) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/route\x00') ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000440)=0x0) perf_event_open(&(0x7f0000aaa000)={0x0, 0x70, 0x4a, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ef4}, r3, 0x0, 0xffffffffffffffff, 0x1) pread64(r2, &(0x7f0000000000)=""/85, 0xfe42, 0x5d) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r2, 0xc05c5340, &(0x7f0000000680)={0x20, 0x5, 0x4000000000000000, {0x77359400}, 0x6, 0x4}) r4 = memfd_create(&(0x7f0000000240)=':+lo#\x00', 0x0) syz_open_dev$sndmidi(&(0x7f0000000480)='/dev/snd/midiC#D#\x00', 0x0, 0x10000) fdatasync(r4) io_submit(r0, 0x1, &(0x7f0000001280)=[&(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f0000000100)}]) timerfd_create(0x7, 0x80800) io_destroy(r0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x9, &(0x7f0000000380)=0x3, 0x4) 2018/03/29 11:12:09 executing program 0: r0 = perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x4a, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffff9c, 0xc00caee0, &(0x7f0000000180)={0x0, r0, 0x1}) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) fcntl$getownex(r0, 0x10, &(0x7f0000000400)={0x0, 0x0}) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0xffff, 0xe3, 0x6, 0x4, 0x0, 0x7, 0x0, 0x2, 0x10001, 0x1, 0x7, 0x8, 0x100, 0x4, 0x0, 0x7f, 0x20, 0x0, 0x4, 0x5, 0x90a4, 0x7, 0x2, 0x73, 0x8, 0x7, 0x4, 0x7e0, 0x101, 0x0, 0x2, 0x309, 0x0, 0x9, 0xfffffffffffffff9, 0x9, 0x0, 0x4, 0x0, @perf_config_ext={0x20, 0x1}, 0x8140, 0x2, 0x0, 0x4, 0x0, 0xb5}, r4, 0x4, r1, 0x8) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) futimesat(r1, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0)={{r2, r3/1000+10000}, {r5, r6/1000+10000}}) unshare(0x8000000) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0xdc, 0x40}, 0x341) r8 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8910, &(0x7f0000000080)=@buf={0x0, &(0x7f0000000000)}) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x13, &(0x7f0000000ffc), 0x4) mq_open(&(0x7f00000000c0)='syzkaller0\x00', 0x40, 0x8, &(0x7f0000000100)={0x5, 0x80000000, 0x0, 0xfffffffffffffff9, 0x1, 0xfffffffffffffffd, 0x7fff, 0x200}) socket$inet_tcp(0x2, 0x1, 0x0) r9 = dup3(r8, r7, 0x80000) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r9, 0x84, 0x66, &(0x7f00000002c0)={0x0, 0x8ed6}, &(0x7f0000000300)=0x1) bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) shmget(0xffffffffffffffff, 0x8000, 0x49b, &(0x7f0000ff8000/0x8000)=nil) ioctl$sock_inet_SIOCGIFPFLAGS(r8, 0x8935, &(0x7f0000000080)={'syzkaller0\x00'}) ppoll(&(0x7f0000000780)=[{r1, 0x300}, {r1, 0x8401}], 0x2, &(0x7f00000007c0)={0x77359400}, &(0x7f0000000800)={0x9}, 0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000280)={0x0, 0x0, 0x9}, 0x10) r10 = semget$private(0x0, 0x4, 0x0) semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0x0, 0x1000}], 0x1, &(0x7f0000000080)={0x0, 0x1c9c380}) semctl$IPC_RMID(r10, 0x0, 0x0) 2018/03/29 11:12:09 executing program 6: openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x0, 0x0) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, &(0x7f0000000340)=0x1) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f000051cff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000943ffc)=0xa35) read(r0, &(0x7f00003fefff)=""/1, 0x1) r1 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000029000)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r0, &(0x7f0000dcdff0)=[{&(0x7f0000cd8000)=""/1, 0x1}], 0x1) ioctl$int_in(r2, 0x5452, &(0x7f0000b28000)=0x3c) write$cgroup_type(0xffffffffffffffff, &(0x7f00000002c0)='threaded\x00', 0x9) syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x0, 0x802) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000fb9000)) fcntl$setsig(r2, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{}], 0x1, 0xfffffffffffffff8) read$eventfd(0xffffffffffffffff, &(0x7f0000000040), 0x8) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)) r4 = dup2(r2, r3) fcntl$setown(r4, 0x8, r1) ptrace$cont(0xffffffffffffffff, r1, 0x0, 0x8) tkill(r1, 0x16) r5 = gettid() process_vm_readv(r5, &(0x7f0000001880)=[{&(0x7f0000000680)=""/198, 0xc6}, {&(0x7f0000000780)=""/247, 0xf7}, {&(0x7f0000000380)=""/12, 0xc}, {&(0x7f00000003c0)=""/6, 0x6}, {&(0x7f0000000400)=""/14, 0xe}], 0x5, &(0x7f00000019c0)=[{&(0x7f0000001900)=""/41, 0x29}, {&(0x7f0000001940)=""/112, 0x70}], 0x2, 0x0) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f0000000240)={{{@in6}}, {{@in=@local}, 0x0, @in=@local}}, &(0x7f0000000100)=0xe8) [ 329.076382] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 329.082567] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 329.089818] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 329.148527] FAULT_INJECTION: forcing a failure. [ 329.148527] name failslab, interval 1, probability 0, space 0, times 0 [ 329.160275] CPU: 0 PID: 9212 Comm: syz-executor2 Not tainted 4.16.0-rc7+ #5 [ 329.167360] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 329.176692] Call Trace: [ 329.179265] dump_stack+0x194/0x24d [ 329.182872] ? arch_local_irq_restore+0x53/0x53 [ 329.187519] ? __save_stack_trace+0x7e/0xd0 [ 329.191829] should_fail+0x8c0/0xa40 [ 329.195524] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 329.200603] ? kasan_kmalloc+0xad/0xe0 [ 329.204464] ? kmem_cache_alloc_trace+0x136/0x740 [ 329.209280] ? __memcg_init_list_lru_node+0x169/0x270 [ 329.214491] ? __list_lru_init+0x544/0x750 [ 329.218704] ? sget_userns+0x691/0xe40 [ 329.222571] ? mount_fs+0x66/0x2d0 [ 329.226089] ? vfs_kern_mount.part.26+0xc6/0x4a0 [ 329.230818] ? do_mount+0xea4/0x2bb0 [ 329.234505] ? SyS_mount+0xab/0x120 [ 329.238108] ? do_syscall_64+0x281/0x940 [ 329.242144] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 329.247490] ? find_held_lock+0x35/0x1d0 [ 329.251534] ? __lock_is_held+0xb6/0x140 [ 329.255587] ? check_same_owner+0x320/0x320 [ 329.259886] ? rcu_note_context_switch+0x710/0x710 [ 329.264798] should_failslab+0xec/0x120 [ 329.268747] kmem_cache_alloc_trace+0x4b/0x740 [ 329.273304] ? __kmalloc_node+0x33/0x70 [ 329.277253] ? __kmalloc_node+0x33/0x70 [ 329.281206] ? rcu_read_lock_sched_held+0x108/0x120 [ 329.286203] __memcg_init_list_lru_node+0x169/0x270 [ 329.291199] ? list_lru_add+0x7c0/0x7c0 [ 329.295150] ? __kmalloc_node+0x47/0x70 [ 329.299107] __list_lru_init+0x544/0x750 [ 329.303158] ? memcg_destroy_list_lru_node.isra.7+0x110/0x110 [ 329.309027] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 329.314028] ? __lockdep_init_map+0xe4/0x650 [ 329.318417] ? lockdep_init_map+0x9/0x10 [ 329.322460] sget_userns+0x691/0xe40 [ 329.326146] ? kill_litter_super+0x90/0x90 [ 329.330362] ? ns_test_super+0x50/0x50 [ 329.334227] ? destroy_unused_super.part.6+0xd0/0xd0 [ 329.339305] ? do_raw_spin_trylock+0x190/0x190 [ 329.343867] ? kobject_put+0x6b/0x250 [ 329.347652] ? blkdev_get+0x3a1/0xb00 [ 329.351955] ? cap_capable+0x1b5/0x230 [ 329.355817] ? __blkdev_get+0x13b0/0x13b0 [ 329.359949] ? security_capable+0x8e/0xc0 [ 329.364076] ? kill_litter_super+0x90/0x90 [ 329.368286] ? ns_capable_common+0xcf/0x160 [ 329.372583] ? ns_test_super+0x50/0x50 [ 329.376446] ? kill_litter_super+0x90/0x90 [ 329.380658] sget+0xd2/0x120 [ 329.383658] mount_bdev+0x109/0x370 [ 329.387259] ? fuse_get_root_inode+0x190/0x190 [ 329.391819] fuse_mount_blk+0x34/0x40 [ 329.395596] mount_fs+0x66/0x2d0 [ 329.398946] vfs_kern_mount.part.26+0xc6/0x4a0 [ 329.403505] ? may_umount+0xa0/0xa0 [ 329.407106] ? _raw_read_unlock+0x22/0x30 [ 329.411227] ? __get_fs_type+0x8a/0xc0 [ 329.415096] do_mount+0xea4/0x2bb0 [ 329.418621] ? copy_mount_string+0x40/0x40 [ 329.422829] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 329.427821] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 329.432560] ? retint_kernel+0x10/0x10 [ 329.436436] ? copy_mount_options+0x181/0x2e0 [ 329.440906] ? copy_mount_options+0x1f7/0x2e0 [ 329.445381] SyS_mount+0xab/0x120 [ 329.448808] ? copy_mnt_ns+0xb30/0xb30 [ 329.452672] do_syscall_64+0x281/0x940 [ 329.456531] ? __do_page_fault+0xc90/0xc90 [ 329.460740] ? _raw_spin_unlock_irq+0x27/0x70 [ 329.465213] ? finish_task_switch+0x1c1/0x7e0 [ 329.469684] ? syscall_return_slowpath+0x550/0x550 [ 329.474592] ? syscall_return_slowpath+0x2ac/0x550 [ 329.479497] ? prepare_exit_to_usermode+0x350/0x350 [ 329.484491] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 329.489833] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 329.494658] entry_SYSCALL_64_after_hwframe+0x42/0xb7 2018/03/29 11:12:10 executing program 2 (fault-call:21 fault-nth:27): r0 = syz_open_procfs(0x0, &(0x7f00000004c0)='oom_score_adj\x00') perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x49, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(r0, 0x0, 0x83, &(0x7f0000001800)={'nat\x00', 0x0, 0x3, 0x1000, [], 0x2, &(0x7f0000001280)=[{}, {}], &(0x7f0000002040)=""/4096}, &(0x7f00000013c0)=0x78) ioprio_get$pid(0x0, 0x0) timer_create(0x0, &(0x7f0000cd0000), &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00004b1fe0)={{0x0, 0x1c9c380}, {0x0, 0x9}}, &(0x7f0000040000)) r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x7fff) truncate(&(0x7f0000001180)='./bus\x00', 0x4) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000f40000)='/dev/ptmx\x00', 0x200000000101002, 0x0) sendfile(r2, 0xffffffffffffffff, &(0x7f00000010c0), 0x10000065) sendfile(r0, r1, &(0x7f0000000000), 0x4) tkill(0x0, 0x0) r3 = memfd_create(&(0x7f0000000000)='\x00', 0x1) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000001200)) recvmsg(0xffffffffffffff9c, &(0x7f0000001500)={&(0x7f00000012c0)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @remote}}}, 0x80, &(0x7f0000001400)=[{&(0x7f0000001340)=""/103, 0x67}], 0x1, &(0x7f0000001440)=""/155, 0x9b}, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000001540)) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000001640)={0x1ff, {0x2, 0x4e21}, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, {0x2, 0x0, @multicast2=0xe0000002}, 0x0, 0x9, 0x2, 0x6, 0x0, &(0x7f0000001240)='teql0\x00', 0x0, 0x80}) inotify_rm_watch(0xffffffffffffffff, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000140), &(0x7f0000000100)=0xffffffa4) getgroups(0x1, &(0x7f0000001600)=[0x0]) syz_fuseblk_mount(&(0x7f0000001740)='./file0\x00', &(0x7f0000001780)='./file0\x00', 0x0, 0x0, 0xffffffffffffffff, 0x3ff, 0x1, 0x0) getpgrp(0xffffffffffffffff) getegid() sendmmsg$unix(r3, &(0x7f0000001880), 0x0, 0x0) setsockopt$netrom_NETROM_T4(0xffffffffffffffff, 0x103, 0x6, &(0x7f00000017c0), 0xfffffffffffffc77) readv(0xffffffffffffffff, &(0x7f000004ffe0), 0x0) [ 329.499821] RIP: 0033:0x4548b9 [ 329.502985] RSP: 002b:00007f032fc57b08 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 329.510670] RAX: ffffffffffffffda RBX: 0000000000000019 RCX: 00000000004548b9 [ 329.517913] RDX: 00000000004b9225 RSI: 0000000020001740 RDI: 0000000020001780 [ 329.525156] RBP: 0000000020001780 R08: 00007f032fc57b20 R09: 0000000000000000 [ 329.532400] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 329.539644] R13: 00000000000003ff R14: 0000000000000000 R15: ffffffffffffffff 2018/03/29 11:12:10 executing program 1: io_setup(0x3, &(0x7f0000000000)=0x0) accept$unix(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000100)=0x6e) r1 = syz_open_dev$usbmon(&(0x7f0000000200)='/dev/usbmon#\x00', 0x0, 0x0) io_cancel(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0xf, 0x3, 0xffffffffffffffff, &(0x7f0000000140)="940c1f2149747e7734510c34c143183667a187dc4f624f6c2de12452792a6fb529e6bf2a661dc23a844b00925c244a9f2967c0ca9868ee50eacf67a2ad7681d82f5a38cbd6d7641f843fa129e00f701fb01835f497b53672b3e5a3f6838f28aa240bf21eb5e5cbe7804fd307404474ae0242f8dea7a08e0fe9479b06f2795f857f8eec271d35ba7f61a91c87296814189cc1dfc9c659cc5437452a0bd178323c50e8c005ba7fa9519b27965c9f6ffbc7dcaa8e658616cc83188fb131a703222d", 0xc0, 0x5, 0x0, 0x1}, &(0x7f0000000280)) io_getevents(r0, 0x2, 0x8f, &(0x7f0000d83f60)=[{}, {}], &(0x7f00005cfff0)={0x4000000000001, 0x7}) io_getevents(r0, 0x0, 0x5, &(0x7f00000002c0)=[{}, {}, {}, {}, {}], &(0x7f00000003c0)) io_setup(0x7, &(0x7f0000000040)) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/route\x00') ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000440)=0x0) perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x4a, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ef4}, r3, 0x0, 0xffffffffffffffff, 0x1) pread64(r2, &(0x7f0000000000)=""/85, 0xfe42, 0x5d) r4 = memfd_create(&(0x7f0000000240)=':+lo#\x00', 0x0) fdatasync(r4) io_submit(r0, 0x1, &(0x7f0000001280)=[&(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f0000000100)}]) timerfd_create(0x7, 0x0) io_destroy(r0) setsockopt$llc_int(r1, 0x10c, 0x9, &(0x7f0000000380)=0x3, 0x4) 2018/03/29 11:12:10 executing program 3: io_setup(0x3, &(0x7f0000000000)=0x0) r1 = accept$inet6(0xffffffffffffff9c, &(0x7f0000000580)={0x0, 0x0, 0x0, @mcast1}, &(0x7f00000005c0)=0x1c) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000600)={{{@in6=@dev, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@local}}, &(0x7f0000000700)=0xe8) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000740)={@mcast2={0xff, 0x2, [], 0x1}, r2}, 0x14) r3 = syz_open_dev$sg(&(0x7f0000000480)='/dev/sg#\x00', 0x6, 0x400) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f00000004c0)={0x0, 0x1f, 0x30}, &(0x7f0000000500)=0xc) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000540)={0x6, 0x8000, 0xddf, 0xd66, r4}, 0x10) accept$unix(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000100)=0x6e) timerfd_create(0x3, 0x80000) r5 = syz_open_dev$usbmon(&(0x7f0000000200)='/dev/usbmon#\x00', 0x7ff, 0x0) io_cancel(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0xf, 0x0, 0xffffffffffffffff, &(0x7f0000000140)="940c1f2149747e7734510c34c143183667a187dc4f624f6c2de12452792a6fb529e6bf2a661dc23a844b00925c244a9f2967c0ca9868ee50eacf67a2ad7681d82f5a38cbd6d7641f843fa129e00f701fb01835f497b53672b3e5a3f6838f28aa240bf21eb5e5cbe7804fd307404474ae0242f8dea7a08e0fe9479b06f2795f857f8eec271d35ba7f61a91c87296814189cc1dfc9c659cc5437452a0bd178323c50e8c005ba7fa9519b27965c9f6ffbc7dcaa8e658616cc83188fb131a703222d", 0xc0, 0x5, 0x0, 0x1, r5}, &(0x7f0000000280)) io_getevents(r0, 0x2, 0x8f, &(0x7f0000d83f60)=[{}, {}], &(0x7f00005cfff0)={0x4000000000001, 0x7}) io_getevents(r0, 0x0, 0x5, &(0x7f00000002c0)=[{}, {}, {}, {}, {}], &(0x7f00000003c0)) io_setup(0x7, &(0x7f0000000040)=0x0) r7 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/route\x00') socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000780)) socket$nl_crypto(0x10, 0x3, 0x15) ioctl$TIOCGPGRP(r7, 0x540f, &(0x7f0000000440)=0x0) perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x4a, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ef4}, r8, 0x0, r5, 0x1) pread64(r7, &(0x7f0000000000)=""/85, 0xfe42, 0x5d) r9 = memfd_create(&(0x7f0000000240)=':+lo#\x00', 0x0) fdatasync(r9) io_submit(r0, 0x1, &(0x7f0000001280)=[&(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, 0x0, r9, &(0x7f0000000100)}]) timerfd_create(0x7, 0x80800) io_destroy(r6) setsockopt$llc_int(r5, 0x10c, 0x9, &(0x7f0000000380)=0x3, 0x4) [ 329.589869] FAULT_INJECTION: forcing a failure. [ 329.589869] name failslab, interval 1, probability 0, space 0, times 0 [ 329.601333] CPU: 1 PID: 9224 Comm: syz-executor2 Not tainted 4.16.0-rc7+ #5 [ 329.608436] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 329.617789] Call Trace: [ 329.620382] dump_stack+0x194/0x24d [ 329.624018] ? arch_local_irq_restore+0x53/0x53 [ 329.628689] ? kernel_text_address+0x102/0x140 [ 329.633269] should_fail+0x8c0/0xa40 [ 329.636963] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 329.642054] ? save_stack+0x43/0xd0 [ 329.645652] ? kasan_kmalloc+0xad/0xe0 [ 329.649512] ? __kmalloc+0x162/0x760 [ 329.653202] ? __list_lru_init+0xcf/0x750 [ 329.657332] ? find_held_lock+0x35/0x1d0 [ 329.661375] ? __lock_is_held+0xb6/0x140 [ 329.665427] ? check_same_owner+0x320/0x320 [ 329.669726] ? rcu_note_context_switch+0x710/0x710 [ 329.674640] should_failslab+0xec/0x120 [ 329.678590] kmem_cache_alloc_node_trace+0x5a/0x760 [ 329.683578] ? mark_held_locks+0xaf/0x100 [ 329.687703] ? __raw_spin_lock_init+0x1c/0x100 [ 329.692268] __kmalloc_node+0x33/0x70 [ 329.696045] kvmalloc_node+0x99/0xd0 [ 329.699736] __list_lru_init+0x5d5/0x750 [ 329.703779] ? memcg_destroy_list_lru_node.isra.7+0x110/0x110 [ 329.709638] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 329.714636] ? lockdep_init_map+0x9/0x10 [ 329.718680] sget_userns+0x6b1/0xe40 [ 329.722368] ? kill_litter_super+0x90/0x90 [ 329.726583] ? ns_test_super+0x50/0x50 [ 329.730449] ? destroy_unused_super.part.6+0xd0/0xd0 [ 329.735526] ? do_raw_spin_trylock+0x190/0x190 [ 329.740091] ? kobject_put+0x6b/0x250 [ 329.743874] ? blkdev_get+0x3a1/0xb00 [ 329.747657] ? cap_capable+0x1b5/0x230 [ 329.751521] ? __blkdev_get+0x13b0/0x13b0 [ 329.755649] ? security_capable+0x8e/0xc0 [ 329.759774] ? kill_litter_super+0x90/0x90 [ 329.763985] ? ns_capable_common+0xcf/0x160 [ 329.768283] ? ns_test_super+0x50/0x50 [ 329.772143] ? kill_litter_super+0x90/0x90 [ 329.776351] sget+0xd2/0x120 [ 329.779349] mount_bdev+0x109/0x370 [ 329.782950] ? fuse_get_root_inode+0x190/0x190 [ 329.787512] fuse_mount_blk+0x34/0x40 [ 329.791289] mount_fs+0x66/0x2d0 [ 329.794637] vfs_kern_mount.part.26+0xc6/0x4a0 [ 329.799195] ? may_umount+0xa0/0xa0 [ 329.802799] ? _raw_read_unlock+0x22/0x30 [ 329.806923] ? __get_fs_type+0x8a/0xc0 [ 329.810794] do_mount+0xea4/0x2bb0 [ 329.814319] ? copy_mount_string+0x40/0x40 [ 329.818542] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 329.823536] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 329.828274] ? retint_kernel+0x10/0x10 [ 329.832163] ? copy_mount_options+0x149/0x2e0 [ 329.836643] ? __sanitizer_cov_trace_pc+0x26/0x50 [ 329.841470] ? copy_mount_options+0x1f7/0x2e0 [ 329.845946] SyS_mount+0xab/0x120 [ 329.849375] ? copy_mnt_ns+0xb30/0xb30 [ 329.853239] do_syscall_64+0x281/0x940 [ 329.857100] ? __do_page_fault+0xc90/0xc90 [ 329.861308] ? _raw_spin_unlock_irq+0x27/0x70 [ 329.865779] ? finish_task_switch+0x1c1/0x7e0 [ 329.870250] ? syscall_return_slowpath+0x550/0x550 [ 329.875157] ? syscall_return_slowpath+0x2ac/0x550 [ 329.880065] ? prepare_exit_to_usermode+0x350/0x350 [ 329.885059] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 329.890402] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 329.895228] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 329.900392] RIP: 0033:0x4548b9 [ 329.903554] RSP: 002b:00007f032fc57b08 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 329.911236] RAX: ffffffffffffffda RBX: 0000000000000019 RCX: 00000000004548b9 [ 329.918480] RDX: 00000000004b9225 RSI: 0000000020001740 RDI: 0000000020001780 [ 329.925725] RBP: 0000000020001780 R08: 00007f032fc57b20 R09: 0000000000000000 [ 329.932969] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 2018/03/29 11:12:10 executing program 0: r0 = perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x4a, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffff9c, 0xc00caee0, &(0x7f0000000180)={0x0, r0, 0x1}) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) fcntl$getownex(r0, 0x10, &(0x7f0000000400)={0x0, 0x0}) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0xffff, 0xe3, 0x6, 0x4, 0x0, 0x7, 0x0, 0x2, 0x10001, 0x1, 0x7, 0x8, 0x100, 0x4, 0x0, 0x7f, 0x20, 0x0, 0x4, 0x5, 0x90a4, 0x7, 0x2, 0x73, 0x8, 0x7, 0x4, 0x7e0, 0x101, 0x0, 0x2, 0x309, 0x0, 0x9, 0xfffffffffffffff9, 0x9, 0x0, 0x4, 0x0, @perf_config_ext={0x20, 0x1}, 0x8140, 0x2, 0x0, 0x4, 0x0, 0xb5}, r4, 0x4, r1, 0x8) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) futimesat(r1, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0)={{r2, r3/1000+10000}, {r5, r6/1000+10000}}) unshare(0x8000000) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0xdc, 0x40}, 0x341) r8 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8910, &(0x7f0000000080)=@buf={0x0, &(0x7f0000000000)}) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x13, &(0x7f0000000ffc), 0x4) mq_open(&(0x7f00000000c0)='syzkaller0\x00', 0x40, 0x8, &(0x7f0000000100)={0x5, 0x80000000, 0x0, 0xfffffffffffffff9, 0x1, 0xfffffffffffffffd, 0x7fff, 0x200}) socket$inet_tcp(0x2, 0x1, 0x0) r9 = dup3(r8, r7, 0x80000) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r9, 0x84, 0x66, &(0x7f00000002c0)={0x0, 0x8ed6}, &(0x7f0000000300)=0x1) bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) shmget(0xffffffffffffffff, 0x8000, 0x49b, &(0x7f0000ff8000/0x8000)=nil) ioctl$sock_inet_SIOCGIFPFLAGS(r8, 0x8935, &(0x7f0000000080)={'syzkaller0\x00'}) ppoll(&(0x7f0000000780)=[{r1, 0x300}, {r1, 0x8401}], 0x2, &(0x7f00000007c0)={0x77359400}, &(0x7f0000000800)={0x9}, 0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000280)={0x0, 0x0, 0x9}, 0x10) r10 = semget$private(0x0, 0x4, 0x0) semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0x0, 0x1000}], 0x1, &(0x7f0000000080)={0x0, 0x1c9c380}) semctl$IPC_RMID(r10, 0x0, 0x0) 2018/03/29 11:12:10 executing program 7: io_setup(0x3, &(0x7f0000000000)=0x0) accept$unix(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000100)=0x6e) syz_open_dev$usbmon(&(0x7f0000000200)='/dev/usbmon#\x00', 0x7ff, 0x0) io_cancel(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0xf, 0x3, 0xffffffffffffffff, &(0x7f0000000140)="940c1f2149747e7734510c34c143183667a187dc4f624f6c2de12452792a6fb529e6bf2a661dc23a844b00925c244a9f2967c0ca9868ee50eacf67a2ad7681d82f5a38cbd6d7641f843fa129e00f701fb01835f497b53672b3e5a3f6838f28aa240bf21eb5e5cbe7804fd307404474ae0242f8dea7a08e0fe9479b06f2795f857f8eec271d35ba7f61a91c87296814189cc1dfc9c659cc5437452a0bd178323c50e8c005ba7fa9519b27965c9f6ffbc7dcaa8e658616cc83188fb131a703222d", 0xc0, 0x5, 0x0, 0x1}, &(0x7f0000000280)) io_getevents(r0, 0x2, 0x8f, &(0x7f0000d83f60)=[{}, {}], &(0x7f00005cfff0)={0x4000000000001, 0x7}) io_getevents(r0, 0x0, 0x5, &(0x7f00000002c0)=[{}, {}, {}, {}, {}], &(0x7f00000003c0)) io_setup(0x7, &(0x7f0000000040)) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/route\x00') ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000440)=0x0) perf_event_open(&(0x7f0000aaa000)={0x0, 0x70, 0x4a, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ef4}, r2, 0x0, 0xffffffffffffffff, 0x1) msgget$private(0x0, 0x181) pread64(r1, &(0x7f0000000000)=""/85, 0xfe42, 0x5d) r3 = memfd_create(&(0x7f0000000240)=':+lo#\x00', 0x0) fdatasync(r3) io_submit(r0, 0x1, &(0x7f0000001280)=[&(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000000100)}]) timerfd_create(0x7, 0x80800) io_destroy(r0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x9, &(0x7f0000000380)=0x3, 0x4) 2018/03/29 11:12:10 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) readv(r0, &(0x7f0000001480)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x3}) r1 = syz_open_pts(r0, 0x2) r2 = dup3(r1, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000c34fff), 0xffffff0b) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0) preadv(r3, &(0x7f00000004c0)=[{&(0x7f0000000480)=""/21, 0x15}], 0x1, 0x0) fchdir(r1) mkdir(&(0x7f0000000280)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f", 0xfffffffffffffffc) fchmod(r2, 0x0) splice(r3, &(0x7f0000000400), 0xffffffffffffffff, &(0x7f0000000440), 0x9, 0x2) rename(&(0x7f0000001e00)='./file0\x00', &(0x7f0000000100)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f") mkdir(&(0x7f000000e000)='./control\x00', 0x0) r4 = open(&(0x7f0000000000)='./control\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r2, 0x80404509, &(0x7f0000000200)=""/74) renameat2(r4, &(0x7f0000000040)='./file0\x00', r4, &(0x7f0000000080)='./control\x00', 0x2) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000300)={0x0, 0x80}, &(0x7f0000000340)=0x8) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000380)={r5, 0x5}, &(0x7f00000003c0)=0x8) mknodat(r4, &(0x7f000003f000)='./control\x00', 0x0, 0x0) symlink(&(0x7f0000000180)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f", &(0x7f00000000c0)='./file0\x00') r6 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r6, 0x84, 0x75, &(0x7f00000014c0)={r5, 0x1000}, &(0x7f0000001500)=0x8) execveat(r4, &(0x7f0000010000)='./control\x00', &(0x7f000003f000), &(0x7f0000001fe8), 0x0) 2018/03/29 11:12:10 executing program 2 (fault-call:21 fault-nth:28): r0 = syz_open_procfs(0x0, &(0x7f00000004c0)='oom_score_adj\x00') perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x49, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(r0, 0x0, 0x83, &(0x7f0000001800)={'nat\x00', 0x0, 0x3, 0x1000, [], 0x2, &(0x7f0000001280)=[{}, {}], &(0x7f0000002040)=""/4096}, &(0x7f00000013c0)=0x78) ioprio_get$pid(0x0, 0x0) timer_create(0x0, &(0x7f0000cd0000), &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00004b1fe0)={{0x0, 0x1c9c380}, {0x0, 0x9}}, &(0x7f0000040000)) r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x7fff) truncate(&(0x7f0000001180)='./bus\x00', 0x4) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000f40000)='/dev/ptmx\x00', 0x200000000101002, 0x0) sendfile(r2, 0xffffffffffffffff, &(0x7f00000010c0), 0x10000065) sendfile(r0, r1, &(0x7f0000000000), 0x4) tkill(0x0, 0x0) r3 = memfd_create(&(0x7f0000000000)='\x00', 0x1) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000001200)) recvmsg(0xffffffffffffff9c, &(0x7f0000001500)={&(0x7f00000012c0)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @remote}}}, 0x80, &(0x7f0000001400)=[{&(0x7f0000001340)=""/103, 0x67}], 0x1, &(0x7f0000001440)=""/155, 0x9b}, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000001540)) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000001640)={0x1ff, {0x2, 0x4e21}, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, {0x2, 0x0, @multicast2=0xe0000002}, 0x0, 0x9, 0x2, 0x6, 0x0, &(0x7f0000001240)='teql0\x00', 0x0, 0x80}) inotify_rm_watch(0xffffffffffffffff, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000140), &(0x7f0000000100)=0xffffffa4) getgroups(0x1, &(0x7f0000001600)=[0x0]) syz_fuseblk_mount(&(0x7f0000001740)='./file0\x00', &(0x7f0000001780)='./file0\x00', 0x0, 0x0, 0xffffffffffffffff, 0x3ff, 0x1, 0x0) getpgrp(0xffffffffffffffff) getegid() sendmmsg$unix(r3, &(0x7f0000001880), 0x0, 0x0) setsockopt$netrom_NETROM_T4(0xffffffffffffffff, 0x103, 0x6, &(0x7f00000017c0), 0xfffffffffffffc77) readv(0xffffffffffffffff, &(0x7f000004ffe0), 0x0) [ 329.940215] R13: 00000000000003ff R14: 0000000000000000 R15: ffffffffffffffff 2018/03/29 11:12:10 executing program 1: io_setup(0x3, &(0x7f0000000000)=0x0) accept$unix(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000100)=0x6e) r1 = syz_open_dev$usbmon(&(0x7f0000000200)='/dev/usbmon#\x00', 0x0, 0x0) io_cancel(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0xf, 0x3, 0xffffffffffffffff, &(0x7f0000000140)="940c1f2149747e7734510c34c143183667a187dc4f624f6c2de12452792a6fb529e6bf2a661dc23a844b00925c244a9f2967c0ca9868ee50eacf67a2ad7681d82f5a38cbd6d7641f843fa129e00f701fb01835f497b53672b3e5a3f6838f28aa240bf21eb5e5cbe7804fd307404474ae0242f8dea7a08e0fe9479b06f2795f857f8eec271d35ba7f61a91c87296814189cc1dfc9c659cc5437452a0bd178323c50e8c005ba7fa9519b27965c9f6ffbc7dcaa8e658616cc83188fb131a703222d", 0xc0, 0x5, 0x0, 0x1}, &(0x7f0000000280)) io_getevents(r0, 0x2, 0x8f, &(0x7f0000d83f60)=[{}, {}], &(0x7f00005cfff0)={0x4000000000001, 0x7}) io_getevents(r0, 0x0, 0x5, &(0x7f00000002c0)=[{}, {}, {}, {}, {}], &(0x7f00000003c0)) io_setup(0x7, &(0x7f0000000040)) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/route\x00') ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000440)=0x0) perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x4a, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ef4}, r3, 0x0, 0xffffffffffffffff, 0x1) pread64(r2, &(0x7f0000000000)=""/85, 0xfe42, 0x5d) r4 = memfd_create(&(0x7f0000000240)=':+lo#\x00', 0x0) fdatasync(r4) io_submit(r0, 0x1, &(0x7f0000001280)=[&(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f0000000100)}]) timerfd_create(0x7, 0x0) io_destroy(r0) setsockopt$llc_int(r1, 0x10c, 0x9, &(0x7f0000000380)=0x3, 0x4) 2018/03/29 11:12:10 executing program 5: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) mkdir(&(0x7f0000000000)='./file1\x00', 0x0) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000811ffa)='bdev\x00', 0x0, &(0x7f0000444000)) mount(&(0x7f0000fb6000)='./file0\x00', &(0x7f0000d78000)='.', &(0x7f0000fdb000)='ubifs\x00', 0x1003, 0x0) mount(&(0x7f00002b9ff8)='./file0\x00', &(0x7f0000cbeff8)='./file0\x00', &(0x7f00005f7ffa)='ramfs\x00', 0x80000, &(0x7f000002f000)) r0 = syz_open_dev$sndpcmp(&(0x7f0000000100)='/dev/snd/pcmC#D#p\x00', 0x44f0, 0xc0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/autofs\x00', 0x4081c0, 0x0) fcntl$addseals(r0, 0x409, 0x2) mount(&(0x7f0000000040)='.', &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0)='binfmt_misc\x00', 0x0, &(0x7f0000000100)) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) mount(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./file1\x00', &(0x7f0000000480)='anon_inodefs\x00', 0x2000, &(0x7f0000000240)) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000240)={{{@in=@local, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@local}}, &(0x7f0000000340)=0xe8) r3 = getuid() setsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000380)={{{@in6=@mcast1={0xff, 0x1, [], 0x1}, @in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x4e20, 0x0, 0x4e23, 0xdd, 0xa, 0xa0, 0x80, 0x2, r2, r3}, {0x8, 0x7fffffff, 0x40, 0x8000, 0x2d03, 0x7, 0x10001, 0x4}, {0x0, 0xb, 0x4, 0xffffffff}, 0x3, 0x6e6bc0, 0x0, 0x1, 0x2, 0x3}, {{@in6=@loopback={0x0, 0x1}, 0x4d6, 0xff}, 0xa, @in, 0x3501, 0x7, 0x2, 0x30, 0x4, 0x9, 0x9}}, 0xe8) mount(&(0x7f0000adcff8)='./file0\x00', &(0x7f0000e08fff)='.', &(0x7f00005e9000)='cifs\x00', 0x2000, &(0x7f0000ad5000)) [ 330.025547] FAULT_INJECTION: forcing a failure. [ 330.025547] name failslab, interval 1, probability 0, space 0, times 0 [ 330.036890] CPU: 0 PID: 9247 Comm: syz-executor2 Not tainted 4.16.0-rc7+ #5 [ 330.043986] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 330.053327] Call Trace: [ 330.055908] dump_stack+0x194/0x24d [ 330.059715] ? arch_local_irq_restore+0x53/0x53 [ 330.064384] ? __save_stack_trace+0x7e/0xd0 [ 330.068701] should_fail+0x8c0/0xa40 2018/03/29 11:12:10 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000014c0)='/dev/ptmx\x00', 0x0, 0x0) readv(r0, &(0x7f0000001480)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x3}) r1 = syz_open_pts(r0, 0x2) r2 = dup3(r1, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000c34fff), 0xffffff0b) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0) preadv(r3, &(0x7f00000004c0)=[{&(0x7f0000000480)=""/21, 0x15}], 0x1, 0x0) fchdir(0xffffffffffffffff) mkdir(&(0x7f0000000280)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f", 0xfffffffffffffffc) fchmod(r2, 0x0) splice(r3, &(0x7f0000000400), 0xffffffffffffffff, &(0x7f0000000440), 0x9, 0x2) rename(&(0x7f0000001e00)='./file0\x00', &(0x7f0000000100)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f") mkdir(&(0x7f000000e000)='./control\x00', 0x0) r4 = open(&(0x7f0000000000)='./control\x00', 0x0, 0x0) renameat2(r4, &(0x7f0000000040)='./file0\x00', r4, &(0x7f0000000080)='./control\x00', 0x2) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000300)={0x0, 0x80}, &(0x7f0000000340)=0x8) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000380)={r5, 0x5}, &(0x7f00000003c0)=0x8) mknodat(r4, &(0x7f000003f000)='./control\x00', 0x0, 0x0) symlink(&(0x7f0000000180)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f", &(0x7f00000000c0)='./file0\x00') perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(r4, &(0x7f0000010000)='./control\x00', &(0x7f000003f000), &(0x7f0000001fe8), 0x0) [ 330.072415] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 330.077511] ? kasan_kmalloc+0xad/0xe0 [ 330.081392] ? kmem_cache_alloc_trace+0x136/0x740 [ 330.086226] ? __memcg_init_list_lru_node+0x169/0x270 [ 330.091399] ? __list_lru_init+0x544/0x750 [ 330.095612] ? sget_userns+0x691/0xe40 [ 330.099482] ? mount_fs+0x66/0x2d0 [ 330.103013] ? vfs_kern_mount.part.26+0xc6/0x4a0 [ 330.107752] ? do_mount+0xea4/0x2bb0 [ 330.111440] ? SyS_mount+0xab/0x120 [ 330.115048] ? do_syscall_64+0x281/0x940 [ 330.119093] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 330.124454] ? find_held_lock+0x35/0x1d0 [ 330.128522] ? __lock_is_held+0xb6/0x140 [ 330.132599] ? check_same_owner+0x320/0x320 [ 330.136913] ? rcu_note_context_switch+0x710/0x710 [ 330.141826] should_failslab+0xec/0x120 [ 330.145783] kmem_cache_alloc_trace+0x4b/0x740 [ 330.150348] ? __kmalloc_node+0x33/0x70 [ 330.154295] ? __kmalloc_node+0x33/0x70 [ 330.158255] ? rcu_read_lock_sched_held+0x108/0x120 [ 330.163275] __memcg_init_list_lru_node+0x169/0x270 [ 330.168282] ? list_lru_add+0x7c0/0x7c0 [ 330.172234] ? __kmalloc_node+0x47/0x70 [ 330.176194] __list_lru_init+0x544/0x750 [ 330.180250] ? memcg_destroy_list_lru_node.isra.7+0x110/0x110 [ 330.186121] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 330.191135] ? __lockdep_init_map+0xe4/0x650 [ 330.195528] ? lockdep_init_map+0x9/0x10 [ 330.199575] sget_userns+0x691/0xe40 [ 330.203265] ? kill_litter_super+0x90/0x90 [ 330.207494] ? ns_test_super+0x50/0x50 [ 330.211374] ? destroy_unused_super.part.6+0xd0/0xd0 [ 330.216456] ? do_raw_spin_trylock+0x190/0x190 [ 330.221033] ? kobject_put+0x6b/0x250 2018/03/29 11:12:10 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) readv(r0, &(0x7f0000001480)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x3}) r1 = syz_open_pts(r0, 0x2) r2 = dup3(r1, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000c34fff), 0xffffff0b) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0) preadv(r3, &(0x7f00000004c0)=[{&(0x7f0000000480)=""/21, 0x15}], 0x1, 0x0) fchdir(0xffffffffffffffff) mkdir(&(0x7f0000000280)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f", 0xfffffffffffffffc) setsockopt$inet_tcp_int(r2, 0x6, 0xf, &(0x7f0000000200)=0x4, 0x4) fchmod(r2, 0x0) splice(r3, &(0x7f0000000400), 0xffffffffffffffff, &(0x7f0000000440), 0x9, 0x2) rename(&(0x7f0000001e00)='./file0\x00', &(0x7f0000000100)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f") mkdir(&(0x7f000000e000)='./control\x00', 0x0) r4 = open(&(0x7f0000000000)='./control\x00', 0x0, 0x0) renameat2(r4, &(0x7f0000000040)='./file0\x00', r4, &(0x7f0000000080)='./control\x00', 0x2) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000300)={0x0, 0x80}, &(0x7f0000000340)=0x8) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000380)={r5, 0x5}, &(0x7f00000003c0)=0x8) mknodat(r4, &(0x7f000003f000)='./control\x00', 0x0, 0x0) symlink(&(0x7f0000000180)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f", &(0x7f00000000c0)='./file0\x00') perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(r4, &(0x7f0000010000)='./control\x00', &(0x7f000003f000), &(0x7f0000001fe8), 0x0) [ 330.224841] ? blkdev_get+0x3a1/0xb00 [ 330.228643] ? cap_capable+0x1b5/0x230 [ 330.232519] ? __blkdev_get+0x13b0/0x13b0 [ 330.236670] ? security_capable+0x8e/0xc0 [ 330.240816] ? kill_litter_super+0x90/0x90 [ 330.245045] ? ns_capable_common+0xcf/0x160 [ 330.249350] ? ns_test_super+0x50/0x50 [ 330.253210] ? kill_litter_super+0x90/0x90 [ 330.257426] sget+0xd2/0x120 [ 330.260444] mount_bdev+0x109/0x370 [ 330.264058] ? fuse_get_root_inode+0x190/0x190 [ 330.268634] fuse_mount_blk+0x34/0x40 [ 330.272415] mount_fs+0x66/0x2d0 [ 330.275765] vfs_kern_mount.part.26+0xc6/0x4a0 [ 330.280336] ? may_umount+0xa0/0xa0 [ 330.283950] ? _raw_read_unlock+0x22/0x30 [ 330.288084] ? __get_fs_type+0x8a/0xc0 [ 330.291965] do_mount+0xea4/0x2bb0 [ 330.295507] ? copy_mount_string+0x40/0x40 [ 330.299723] ? rcu_pm_notify+0xc0/0xc0 [ 330.303613] ? copy_mount_options+0x5f/0x2e0 [ 330.308019] ? rcu_read_lock_sched_held+0x108/0x120 [ 330.313031] ? kmem_cache_alloc_trace+0x459/0x740 [ 330.317875] ? kasan_check_write+0x14/0x20 [ 330.322105] ? _copy_from_user+0x99/0x110 [ 330.326257] ? copy_mount_options+0x1f7/0x2e0 [ 330.330750] SyS_mount+0xab/0x120 [ 330.334192] ? copy_mnt_ns+0xb30/0xb30 [ 330.338083] do_syscall_64+0x281/0x940 [ 330.342535] ? __do_page_fault+0xc90/0xc90 [ 330.346766] ? _raw_spin_unlock_irq+0x27/0x70 [ 330.351259] ? finish_task_switch+0x1c1/0x7e0 [ 330.355752] ? syscall_return_slowpath+0x550/0x550 [ 330.360667] ? syscall_return_slowpath+0x2ac/0x550 [ 330.365575] ? prepare_exit_to_usermode+0x350/0x350 [ 330.370580] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 330.375931] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 330.380774] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 330.385955] RIP: 0033:0x4548b9 [ 330.389128] RSP: 002b:00007f032fc57b08 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 330.396822] RAX: ffffffffffffffda RBX: 0000000000000019 RCX: 00000000004548b9 [ 330.404078] RDX: 00000000004b9225 RSI: 0000000020001740 RDI: 0000000020001780 [ 330.411324] RBP: 0000000020001780 R08: 00007f032fc57b20 R09: 0000000000000000 [ 330.418568] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 2018/03/29 11:12:10 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) readv(r0, &(0x7f0000001480)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x3}) r1 = syz_open_pts(r0, 0x2) r2 = dup3(r1, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000c34fff), 0xffffff0b) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0) preadv(r3, &(0x7f00000004c0)=[{&(0x7f0000000480)=""/21, 0x15}], 0x1, 0x0) fchdir(0xffffffffffffffff) mkdir(&(0x7f0000000280)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f", 0xfffffffffffffffc) fchmod(r2, 0x0) splice(r3, &(0x7f0000000400), 0xffffffffffffffff, &(0x7f0000000440), 0x9, 0x2) rename(&(0x7f0000001e00)='./file0\x00', &(0x7f0000000100)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f") mkdir(&(0x7f000000e000)='./control\x00', 0x0) r4 = open(&(0x7f0000000000)='./control\x00', 0x0, 0x0) renameat2(r4, &(0x7f0000000040)='./file0\x00', r4, &(0x7f0000000080)='./control\x00', 0x2) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000300)={0x0, 0x80}, &(0x7f0000000340)=0x8) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000380)={r5, 0x5}, &(0x7f00000003c0)=0x8) mknodat(r4, &(0x7f000003f000)='./control\x00', 0x0, 0x0) symlink(&(0x7f0000000180)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f", &(0x7f00000000c0)='./file0\x00') perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x0, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x3) execveat(r4, &(0x7f0000010000)='./control\x00', &(0x7f000003f000), &(0x7f0000001fe8), 0x0) 2018/03/29 11:12:10 executing program 0: r0 = perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x4a, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffff9c, 0xc00caee0, &(0x7f0000000180)={0x0, r0, 0x1}) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) fcntl$getownex(r0, 0x10, &(0x7f0000000400)={0x0, 0x0}) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0xffff, 0xe3, 0x6, 0x4, 0x0, 0x7, 0x0, 0x2, 0x10001, 0x1, 0x7, 0x8, 0x100, 0x4, 0x0, 0x7f, 0x20, 0x0, 0x4, 0x5, 0x90a4, 0x7, 0x2, 0x73, 0x8, 0x7, 0x4, 0x7e0, 0x101, 0x0, 0x2, 0x309, 0x0, 0x9, 0xfffffffffffffff9, 0x9, 0x0, 0x4, 0x0, @perf_config_ext={0x20, 0x1}, 0x8140, 0x2, 0x0, 0x4, 0x0, 0xb5}, r4, 0x4, r1, 0x8) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) futimesat(r1, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0)={{r2, r3/1000+10000}, {r5, r6/1000+10000}}) unshare(0x8000000) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0xdc, 0x40}, 0x341) r8 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8910, &(0x7f0000000080)=@buf={0x0, &(0x7f0000000000)}) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x13, &(0x7f0000000ffc), 0x4) mq_open(&(0x7f00000000c0)='syzkaller0\x00', 0x40, 0x8, &(0x7f0000000100)={0x5, 0x80000000, 0x0, 0xfffffffffffffff9, 0x1, 0xfffffffffffffffd, 0x7fff, 0x200}) socket$inet_tcp(0x2, 0x1, 0x0) r9 = dup3(r8, r7, 0x80000) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r9, 0x84, 0x66, &(0x7f00000002c0)={0x0, 0x8ed6}, &(0x7f0000000300)=0x1) bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) shmget(0xffffffffffffffff, 0x8000, 0x49b, &(0x7f0000ff8000/0x8000)=nil) ioctl$sock_inet_SIOCGIFPFLAGS(r8, 0x8935, &(0x7f0000000080)={'syzkaller0\x00'}) ppoll(&(0x7f0000000780)=[{r1, 0x300}, {r1, 0x8401}], 0x2, &(0x7f00000007c0)={0x77359400}, &(0x7f0000000800)={0x9}, 0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000280)={0x0, 0x0, 0x9}, 0x10) r10 = semget$private(0x0, 0x4, 0x0) semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0x0, 0x1000}], 0x1, &(0x7f0000000080)={0x0, 0x1c9c380}) semctl$IPC_RMID(r10, 0x0, 0x0) 2018/03/29 11:12:10 executing program 2 (fault-call:21 fault-nth:29): r0 = syz_open_procfs(0x0, &(0x7f00000004c0)='oom_score_adj\x00') perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x49, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(r0, 0x0, 0x83, &(0x7f0000001800)={'nat\x00', 0x0, 0x3, 0x1000, [], 0x2, &(0x7f0000001280)=[{}, {}], &(0x7f0000002040)=""/4096}, &(0x7f00000013c0)=0x78) ioprio_get$pid(0x0, 0x0) timer_create(0x0, &(0x7f0000cd0000), &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00004b1fe0)={{0x0, 0x1c9c380}, {0x0, 0x9}}, &(0x7f0000040000)) r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x7fff) truncate(&(0x7f0000001180)='./bus\x00', 0x4) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000f40000)='/dev/ptmx\x00', 0x200000000101002, 0x0) sendfile(r2, 0xffffffffffffffff, &(0x7f00000010c0), 0x10000065) sendfile(r0, r1, &(0x7f0000000000), 0x4) tkill(0x0, 0x0) r3 = memfd_create(&(0x7f0000000000)='\x00', 0x1) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000001200)) recvmsg(0xffffffffffffff9c, &(0x7f0000001500)={&(0x7f00000012c0)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @remote}}}, 0x80, &(0x7f0000001400)=[{&(0x7f0000001340)=""/103, 0x67}], 0x1, &(0x7f0000001440)=""/155, 0x9b}, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000001540)) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000001640)={0x1ff, {0x2, 0x4e21}, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, {0x2, 0x0, @multicast2=0xe0000002}, 0x0, 0x9, 0x2, 0x6, 0x0, &(0x7f0000001240)='teql0\x00', 0x0, 0x80}) inotify_rm_watch(0xffffffffffffffff, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000140), &(0x7f0000000100)=0xffffffa4) getgroups(0x1, &(0x7f0000001600)=[0x0]) syz_fuseblk_mount(&(0x7f0000001740)='./file0\x00', &(0x7f0000001780)='./file0\x00', 0x0, 0x0, 0xffffffffffffffff, 0x3ff, 0x1, 0x0) getpgrp(0xffffffffffffffff) getegid() sendmmsg$unix(r3, &(0x7f0000001880), 0x0, 0x0) setsockopt$netrom_NETROM_T4(0xffffffffffffffff, 0x103, 0x6, &(0x7f00000017c0), 0xfffffffffffffc77) readv(0xffffffffffffffff, &(0x7f000004ffe0), 0x0) [ 330.425812] R13: 00000000000003ff R14: 0000000000000000 R15: ffffffffffffffff [ 330.484765] FAULT_INJECTION: forcing a failure. [ 330.484765] name failslab, interval 1, probability 0, space 0, times 0 [ 330.496086] CPU: 1 PID: 9279 Comm: syz-executor2 Not tainted 4.16.0-rc7+ #5 [ 330.503180] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 330.512514] Call Trace: [ 330.515100] dump_stack+0x194/0x24d [ 330.518716] ? arch_local_irq_restore+0x53/0x53 [ 330.523360] ? __save_stack_trace+0x7e/0xd0 [ 330.527671] should_fail+0x8c0/0xa40 [ 330.531367] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 330.536445] ? kasan_kmalloc+0xad/0xe0 [ 330.540308] ? kmem_cache_alloc_trace+0x136/0x740 [ 330.545128] ? __memcg_init_list_lru_node+0x169/0x270 [ 330.550291] ? __list_lru_init+0x544/0x750 [ 330.554500] ? sget_userns+0x691/0xe40 [ 330.558365] ? mount_fs+0x66/0x2d0 [ 330.561880] ? vfs_kern_mount.part.26+0xc6/0x4a0 [ 330.566610] ? do_mount+0xea4/0x2bb0 [ 330.570298] ? SyS_mount+0xab/0x120 [ 330.573899] ? do_syscall_64+0x281/0x940 [ 330.577936] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 330.583282] ? find_held_lock+0x35/0x1d0 [ 330.587326] ? __lock_is_held+0xb6/0x140 [ 330.591379] ? check_same_owner+0x320/0x320 [ 330.595681] ? rcu_note_context_switch+0x710/0x710 [ 330.600596] should_failslab+0xec/0x120 [ 330.604549] kmem_cache_alloc_trace+0x4b/0x740 [ 330.609109] ? __kmalloc_node+0x33/0x70 [ 330.613060] ? __kmalloc_node+0x33/0x70 [ 330.617014] ? rcu_read_lock_sched_held+0x108/0x120 [ 330.622019] __memcg_init_list_lru_node+0x169/0x270 [ 330.627031] ? list_lru_add+0x7c0/0x7c0 [ 330.630983] ? __kmalloc_node+0x47/0x70 [ 330.634939] __list_lru_init+0x544/0x750 [ 330.638984] ? memcg_destroy_list_lru_node.isra.7+0x110/0x110 [ 330.644844] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 330.649839] ? __lockdep_init_map+0xe4/0x650 [ 330.654227] ? lockdep_init_map+0x9/0x10 [ 330.658267] sget_userns+0x691/0xe40 [ 330.661953] ? kill_litter_super+0x90/0x90 [ 330.666171] ? ns_test_super+0x50/0x50 [ 330.670038] ? destroy_unused_super.part.6+0xd0/0xd0 [ 330.675117] ? do_raw_spin_trylock+0x190/0x190 [ 330.679679] ? kobject_put+0x6b/0x250 [ 330.683462] ? blkdev_get+0x3a1/0xb00 [ 330.687246] ? cap_capable+0x1b5/0x230 [ 330.691112] ? __blkdev_get+0x13b0/0x13b0 [ 330.695240] ? security_capable+0x8e/0xc0 [ 330.699368] ? kill_litter_super+0x90/0x90 [ 330.703579] ? ns_capable_common+0xcf/0x160 [ 330.707880] ? ns_test_super+0x50/0x50 [ 330.711741] ? kill_litter_super+0x90/0x90 [ 330.715950] sget+0xd2/0x120 [ 330.718952] mount_bdev+0x109/0x370 [ 330.722555] ? fuse_get_root_inode+0x190/0x190 [ 330.727116] fuse_mount_blk+0x34/0x40 [ 330.730896] mount_fs+0x66/0x2d0 [ 330.734244] vfs_kern_mount.part.26+0xc6/0x4a0 [ 330.738803] ? may_umount+0xa0/0xa0 [ 330.742404] ? _raw_read_unlock+0x22/0x30 [ 330.746526] ? __get_fs_type+0x8a/0xc0 [ 330.750408] do_mount+0xea4/0x2bb0 [ 330.753934] ? copy_mount_string+0x40/0x40 [ 330.758144] ? rcu_pm_notify+0xc0/0xc0 [ 330.762032] ? copy_mount_options+0x5f/0x2e0 [ 330.766415] ? rcu_read_lock_sched_held+0x108/0x120 [ 330.771409] ? kmem_cache_alloc_trace+0x459/0x740 [ 330.776229] ? kasan_check_write+0x14/0x20 [ 330.780445] ? _copy_from_user+0x99/0x110 [ 330.784574] ? copy_mount_options+0x1f7/0x2e0 [ 330.789050] SyS_mount+0xab/0x120 [ 330.792476] ? copy_mnt_ns+0xb30/0xb30 [ 330.796343] do_syscall_64+0x281/0x940 [ 330.800204] ? __do_page_fault+0xc90/0xc90 [ 330.804413] ? _raw_spin_unlock_irq+0x27/0x70 [ 330.808885] ? finish_task_switch+0x1c1/0x7e0 [ 330.813357] ? syscall_return_slowpath+0x550/0x550 [ 330.818265] ? syscall_return_slowpath+0x2ac/0x550 [ 330.823169] ? prepare_exit_to_usermode+0x350/0x350 [ 330.828162] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 330.833507] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 330.838335] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 330.843499] RIP: 0033:0x4548b9 [ 330.846675] RSP: 002b:00007f032fc57b08 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 330.854357] RAX: ffffffffffffffda RBX: 0000000000000019 RCX: 00000000004548b9 [ 330.861602] RDX: 00000000004b9225 RSI: 0000000020001740 RDI: 0000000020001780 [ 330.868846] RBP: 0000000020001780 R08: 00007f032fc57b20 R09: 0000000000000000 [ 330.876089] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 330.883334] R13: 00000000000003ff R14: 0000000000000000 R15: ffffffffffffffff 2018/03/29 11:12:11 executing program 5: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='.', &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='fuseblk\x00', 0x0, &(0x7f000000a000)) mkdir(&(0x7f0000000000)='./file1\x00', 0x0) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000811ffa)='bdev\x00', 0x0, &(0x7f0000444000)) mount(&(0x7f0000fb6000)='./file0\x00', &(0x7f0000d78000)='.', &(0x7f0000fdb000)='ubifs\x00', 0x1003, 0x0) mount(&(0x7f00002b9ff8)='./file0\x00', &(0x7f0000cbeff8)='./file0\x00', &(0x7f00005f7ffa)='ramfs\x00', 0x80000, &(0x7f000002f000)) mount(&(0x7f0000000040)='.', &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0)='binfmt_misc\x00', 0x0, &(0x7f0000000100)) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) mount(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./file1\x00', &(0x7f0000000200)='anon_inodefs\x00', 0x2000, &(0x7f0000000240)) mount(&(0x7f0000adcff8)='./file0\x00', &(0x7f0000e08fff)='.', &(0x7f00005e9000)='cifs\x00', 0x2000, &(0x7f0000ad5000)) 2018/03/29 11:12:11 executing program 6: openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x0, 0x0) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, &(0x7f0000000340)=0x1) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f000051cff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000943ffc)=0xa35) read(r0, &(0x7f00003fefff)=""/1, 0x1) r1 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000029000)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r0, &(0x7f0000dcdff0)=[{&(0x7f0000cd8000)=""/1, 0x1}], 0x1) ioctl$int_in(r2, 0x5452, &(0x7f0000b28000)=0x3c) write$cgroup_type(0xffffffffffffffff, &(0x7f00000002c0)='threaded\x00', 0x9) syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x0, 0x802) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000fb9000)) fcntl$setsig(r2, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r3}], 0x1, 0x0) read$eventfd(0xffffffffffffffff, &(0x7f0000000040), 0x8) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)) r4 = dup2(r2, r3) fcntl$setown(r4, 0x8, r1) ptrace$cont(0xffffffffffffffff, r1, 0x0, 0x8) tkill(r1, 0x16) r5 = gettid() process_vm_readv(r5, &(0x7f0000001880)=[{&(0x7f0000000680)=""/198, 0xc6}, {&(0x7f0000000780)=""/247, 0xf7}, {&(0x7f0000000380)=""/12, 0xc}, {&(0x7f00000003c0)=""/6, 0x6}, {&(0x7f0000000400)=""/14, 0xe}], 0x5, &(0x7f00000019c0)=[{&(0x7f0000001900)=""/41, 0x29}, {&(0x7f0000001940)=""/112, 0x70}], 0x2, 0x0) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f0000000240)={{{@in6}}, {{@in=@local}, 0x0, @in=@local}}, &(0x7f0000000100)=0xe8) 2018/03/29 11:12:11 executing program 3: io_setup(0x3, &(0x7f0000000000)=0x0) accept$unix(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000100)=0x6e) r1 = syz_open_dev$usbmon(&(0x7f0000000200)='/dev/usbmon#\x00', 0x7ff, 0x0) io_cancel(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0xf, 0x0, 0xffffffffffffffff, &(0x7f0000000140)="940c1f2149747e7734510c34c143183667a187dc4f624f6c2de12452792a6fb529e6bf2a661dc23a844b00925c244a9f2967c0ca9868ee50eacf67a2ad7681d82f5a38cbd6d7641f843fa129e00f701fb01835f497b53672b3e5a3f6838f28aa240bf21eb5e5cbe7804fd307404474ae0242f8dea7a08e0fe9479b06f2795f857f8eec271d35ba7f61a91c87296814189cc1dfc9c659cc5437452a0bd178323c50e8c005ba7fa9519b27965c9f6ffbc7dcaa8e658616cc83188fb131a703222d", 0xc0, 0x5, 0x0, 0x1, r1}, &(0x7f0000000280)) io_getevents(r0, 0x2, 0x8f, &(0x7f0000d83f60)=[{}, {}], &(0x7f00005cfff0)={0x4000000000001, 0x7}) io_getevents(r0, 0x0, 0x5, &(0x7f00000002c0)=[{}, {}, {}, {}, {}], &(0x7f00000003c0)) io_setup(0x7, &(0x7f0000000040)) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000480)={0x0, 0x0, r1}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f00000004c0)={r2, 0x80000, r1}) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/route\x00') ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f0000000440)=0x0) perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x4a, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ef4}, r4, 0x0, r1, 0x1) pread64(r3, &(0x7f0000000000)=""/85, 0xfe42, 0x5d) r5 = memfd_create(&(0x7f0000000240)=':+lo#\x00', 0x0) fdatasync(r5) io_submit(r0, 0x1, &(0x7f0000001280)=[&(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, 0x0, r5, &(0x7f0000000100)}]) timerfd_create(0x7, 0x80800) io_destroy(r0) setsockopt$llc_int(r1, 0x10c, 0x9, &(0x7f0000000380)=0x3, 0x4) 2018/03/29 11:12:11 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) readv(r0, &(0x7f0000001480)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x3}) r1 = syz_open_pts(r0, 0x2) r2 = dup3(r1, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000c34fff), 0xffffff0b) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0) preadv(r3, &(0x7f00000004c0)=[{&(0x7f0000000480)=""/21, 0x15}], 0x1, 0x0) fchdir(0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) mkdir(&(0x7f0000000280)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f", 0xfffffffffffffffc) fchmod(r2, 0x0) splice(r3, &(0x7f0000000400), 0xffffffffffffffff, &(0x7f0000000440), 0x9, 0x2) rename(&(0x7f0000001e00)='./file0\x00', &(0x7f0000000100)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f") mkdir(&(0x7f000000e000)='./control\x00', 0x0) r4 = open(&(0x7f0000000000)='./control\x00', 0x0, 0x1) renameat2(r4, &(0x7f0000000040)='./file0\x00', r4, &(0x7f0000000080)='./control\x00', 0x2) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000300)={0x0, 0x80}, &(0x7f0000000340)=0x8) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000380)={r5, 0x5}, &(0x7f00000003c0)=0x8) mknodat(r4, &(0x7f000003f000)='./control\x00', 0x0, 0x0) symlink(&(0x7f0000000180)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f", &(0x7f00000000c0)='./file0\x00') perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000200)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f", 0x101000, 0x34) execveat(r4, &(0x7f0000010000)='./control\x00', &(0x7f000003f000), &(0x7f0000001fe8), 0x0) 2018/03/29 11:12:11 executing program 7: io_setup(0x3, &(0x7f0000000000)=0x0) accept$unix(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000100)=0x6e) syz_open_dev$usbmon(&(0x7f0000000200)='/dev/usbmon#\x00', 0x7ff, 0x0) io_cancel(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0xf, 0x3, 0xffffffffffffffff, &(0x7f0000000140)="940c1f2149747e7734510c34c143183667a187dc4f624f6c2de12452792a6fb529e6bf2a661dc23a844b00925c244a9f2967c0ca9868ee50eacf67a2ad7681d82f5a38cbd6d7641f843fa129e00f701fb01835f497b53672b3e5a3f6838f28aa240bf21eb5e5cbe7804fd307404474ae0242f8dea7a08e0fe9479b06f2795f857f8eec271d35ba7f61a91c87296814189cc1dfc9c659cc5437452a0bd178323c50e8c005ba7fa9519b27965c9f6ffbc7dcaa8e658616cc83188fb131a703222d", 0xc0, 0x5, 0x0, 0x1}, &(0x7f0000000280)) io_getevents(r0, 0x2, 0x8f, &(0x7f0000d83f60)=[{}, {}], &(0x7f00005cfff0)={0x4000000000001, 0x7}) io_getevents(r0, 0x0, 0x5, &(0x7f00000002c0)=[{}, {}, {}, {}, {}], &(0x7f00000003c0)) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/route\x00') ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000440)=0x0) perf_event_open(&(0x7f0000aaa000)={0x0, 0x70, 0x4a, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ef4}, r2, 0x0, 0xffffffffffffffff, 0x1) pread64(r1, &(0x7f0000000000)=""/85, 0xfe42, 0x5d) r3 = memfd_create(&(0x7f0000000240)=':+lo#\x00', 0x0) fdatasync(r3) io_submit(r0, 0x1, &(0x7f0000001280)=[&(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000000100)}]) timerfd_create(0x7, 0x80800) io_destroy(r0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x9, &(0x7f0000000380)=0x3, 0x4) 2018/03/29 11:12:11 executing program 2 (fault-call:21 fault-nth:30): r0 = syz_open_procfs(0x0, &(0x7f00000004c0)='oom_score_adj\x00') perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x49, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(r0, 0x0, 0x83, &(0x7f0000001800)={'nat\x00', 0x0, 0x3, 0x1000, [], 0x2, &(0x7f0000001280)=[{}, {}], &(0x7f0000002040)=""/4096}, &(0x7f00000013c0)=0x78) ioprio_get$pid(0x0, 0x0) timer_create(0x0, &(0x7f0000cd0000), &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00004b1fe0)={{0x0, 0x1c9c380}, {0x0, 0x9}}, &(0x7f0000040000)) r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x7fff) truncate(&(0x7f0000001180)='./bus\x00', 0x4) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000f40000)='/dev/ptmx\x00', 0x200000000101002, 0x0) sendfile(r2, 0xffffffffffffffff, &(0x7f00000010c0), 0x10000065) sendfile(r0, r1, &(0x7f0000000000), 0x4) tkill(0x0, 0x0) r3 = memfd_create(&(0x7f0000000000)='\x00', 0x1) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000001200)) recvmsg(0xffffffffffffff9c, &(0x7f0000001500)={&(0x7f00000012c0)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @remote}}}, 0x80, &(0x7f0000001400)=[{&(0x7f0000001340)=""/103, 0x67}], 0x1, &(0x7f0000001440)=""/155, 0x9b}, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000001540)) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000001640)={0x1ff, {0x2, 0x4e21}, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, {0x2, 0x0, @multicast2=0xe0000002}, 0x0, 0x9, 0x2, 0x6, 0x0, &(0x7f0000001240)='teql0\x00', 0x0, 0x80}) inotify_rm_watch(0xffffffffffffffff, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000140), &(0x7f0000000100)=0xffffffa4) getgroups(0x1, &(0x7f0000001600)=[0x0]) syz_fuseblk_mount(&(0x7f0000001740)='./file0\x00', &(0x7f0000001780)='./file0\x00', 0x0, 0x0, 0xffffffffffffffff, 0x3ff, 0x1, 0x0) getpgrp(0xffffffffffffffff) getegid() sendmmsg$unix(r3, &(0x7f0000001880), 0x0, 0x0) setsockopt$netrom_NETROM_T4(0xffffffffffffffff, 0x103, 0x6, &(0x7f00000017c0), 0xfffffffffffffc77) readv(0xffffffffffffffff, &(0x7f000004ffe0), 0x0) 2018/03/29 11:12:11 executing program 0: r0 = perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x4a, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffff9c, 0xc00caee0, &(0x7f0000000180)={0x0, r0, 0x1}) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) fcntl$getownex(r0, 0x10, &(0x7f0000000400)={0x0, 0x0}) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0xffff, 0xe3, 0x6, 0x4, 0x0, 0x7, 0x0, 0x2, 0x10001, 0x1, 0x7, 0x8, 0x100, 0x4, 0x0, 0x7f, 0x20, 0x0, 0x4, 0x5, 0x90a4, 0x7, 0x2, 0x73, 0x8, 0x7, 0x4, 0x7e0, 0x101, 0x0, 0x2, 0x309, 0x0, 0x9, 0xfffffffffffffff9, 0x9, 0x0, 0x4, 0x0, @perf_config_ext={0x20, 0x1}, 0x8140, 0x2, 0x0, 0x4, 0xca1}, r4, 0x4, r1, 0x8) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) futimesat(r1, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0)={{r2, r3/1000+10000}, {r5, r6/1000+10000}}) unshare(0x8000000) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0xdc, 0x40}, 0x341) r8 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8910, &(0x7f0000000080)=@buf={0x0, &(0x7f0000000000)}) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x13, &(0x7f0000000ffc), 0x4) mq_open(&(0x7f00000000c0)='syzkaller0\x00', 0x40, 0x8, &(0x7f0000000100)={0x5, 0x80000000, 0x0, 0xfffffffffffffff9, 0x1, 0xfffffffffffffffd, 0x7fff, 0x200}) socket$inet_tcp(0x2, 0x1, 0x0) r9 = dup3(r8, r7, 0x80000) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r9, 0x84, 0x66, &(0x7f00000002c0)={0x0, 0x8ed6}, &(0x7f0000000300)=0x1) bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) shmget(0xffffffffffffffff, 0x8000, 0x49b, &(0x7f0000ff8000/0x8000)=nil) ioctl$sock_inet_SIOCGIFPFLAGS(r8, 0x8935, &(0x7f0000000080)={'syzkaller0\x00'}) ppoll(&(0x7f0000000780)=[{r1, 0x300}, {r1, 0x8401}], 0x2, &(0x7f00000007c0)={0x77359400}, &(0x7f0000000800)={0x9}, 0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000280)={0x0, 0x0, 0x9}, 0x10) r10 = semget$private(0x0, 0x4, 0x0) semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0x0, 0x1000}], 0x1, &(0x7f0000000080)={0x0, 0x1c9c380}) semctl$IPC_RMID(r10, 0x0, 0x0) 2018/03/29 11:12:11 executing program 1: io_setup(0x3, &(0x7f0000000000)=0x0) accept$unix(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000100)=0x6e) r1 = syz_open_dev$usbmon(&(0x7f0000000200)='/dev/usbmon#\x00', 0x0, 0x0) io_cancel(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0xf, 0x3, 0xffffffffffffffff, &(0x7f0000000140)="940c1f2149747e7734510c34c143183667a187dc4f624f6c2de12452792a6fb529e6bf2a661dc23a844b00925c244a9f2967c0ca9868ee50eacf67a2ad7681d82f5a38cbd6d7641f843fa129e00f701fb01835f497b53672b3e5a3f6838f28aa240bf21eb5e5cbe7804fd307404474ae0242f8dea7a08e0fe9479b06f2795f857f8eec271d35ba7f61a91c87296814189cc1dfc9c659cc5437452a0bd178323c50e8c005ba7fa9519b27965c9f6ffbc7dcaa8e658616cc83188fb131a703222d", 0xc0, 0x5, 0x0, 0x1}, &(0x7f0000000280)) io_getevents(r0, 0x2, 0x8f, &(0x7f0000d83f60)=[{}, {}], &(0x7f00005cfff0)={0x4000000000001, 0x7}) io_getevents(r0, 0x0, 0x5, &(0x7f00000002c0)=[{}, {}, {}, {}, {}], &(0x7f00000003c0)) io_setup(0x7, &(0x7f0000000040)) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/route\x00') ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000440)=0x0) perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x4a, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ef4}, r3, 0x0, 0xffffffffffffffff, 0x1) pread64(r2, &(0x7f0000000000)=""/85, 0xfe42, 0x5d) r4 = memfd_create(&(0x7f0000000240)=':+lo#\x00', 0x0) fdatasync(r4) io_submit(r0, 0x1, &(0x7f0000001280)=[&(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f0000000100)}]) timerfd_create(0x7, 0x80800) io_destroy(0x0) setsockopt$llc_int(r1, 0x10c, 0x9, &(0x7f0000000380)=0x3, 0x4) [ 330.973920] FAULT_INJECTION: forcing a failure. [ 330.973920] name failslab, interval 1, probability 0, space 0, times 0 [ 330.985285] CPU: 0 PID: 9300 Comm: syz-executor2 Not tainted 4.16.0-rc7+ #5 [ 330.992377] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 331.001710] Call Trace: [ 331.004294] dump_stack+0x194/0x24d [ 331.007925] ? arch_local_irq_restore+0x53/0x53 [ 331.012585] ? __save_stack_trace+0x7e/0xd0 [ 331.016902] should_fail+0x8c0/0xa40 2018/03/29 11:12:11 executing program 4: r0 = dup2(0xffffffffffffffff, 0xffffffffffffff9c) getpeername$ax25(r0, &(0x7f0000001940), &(0x7f0000001980)=0x10) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) readv(r1, &(0x7f0000001480)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x3}) r2 = syz_open_pts(r1, 0x2) creat(&(0x7f0000000200)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f", 0x8) r3 = dup3(r2, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000c34fff), 0xffffff0b) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0) preadv(r4, &(0x7f00000004c0)=[{&(0x7f0000000480)=""/21, 0x15}], 0x1, 0x0) fchdir(0xffffffffffffffff) mkdir(&(0x7f0000000280)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f", 0xfffffffffffffffc) fchmod(r3, 0x0) setsockopt$RDS_FREE_MR(r0, 0x114, 0x3, &(0x7f00000014c0)={{0x200, 0x2}, 0x2}, 0x10) splice(r4, &(0x7f0000000400), 0xffffffffffffffff, &(0x7f0000000440), 0x9, 0x2) rename(&(0x7f0000001e00)='./file0\x00', &(0x7f0000000100)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f") mkdir(&(0x7f000000e000)='./control\x00', 0x0) r5 = open(&(0x7f0000000000)='./control\x00', 0x0, 0x0) renameat2(r5, &(0x7f0000000040)='./file0\x00', r5, &(0x7f0000000080)='./control\x00', 0x2) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r5, 0x84, 0x76, &(0x7f0000000300)={0x0, 0x80}, &(0x7f0000000340)=0x8) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r5, 0x84, 0x76, &(0x7f0000000380)={r6, 0x5}, &(0x7f00000003c0)=0x8) mknodat(r5, &(0x7f000003f000)='./control\x00', 0x0, 0x0) symlink(&(0x7f0000000180)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f", &(0x7f00000000c0)='./file0\x00') perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(r5, &(0x7f0000010000)='./control\x00', &(0x7f000003f000), &(0x7f00000014c0), 0x0) [ 331.020612] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 331.025715] ? kasan_kmalloc+0xad/0xe0 [ 331.029606] ? kmem_cache_alloc_trace+0x136/0x740 [ 331.034435] ? __memcg_init_list_lru_node+0x169/0x270 [ 331.039610] ? __list_lru_init+0x544/0x750 [ 331.043834] ? sget_userns+0x691/0xe40 [ 331.047706] ? mount_fs+0x66/0x2d0 [ 331.051231] ? vfs_kern_mount.part.26+0xc6/0x4a0 [ 331.055979] ? do_mount+0xea4/0x2bb0 [ 331.059683] ? SyS_mount+0xab/0x120 [ 331.063304] ? do_syscall_64+0x281/0x940 [ 331.067354] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 331.072721] ? find_held_lock+0x35/0x1d0 [ 331.076790] ? __lock_is_held+0xb6/0x140 [ 331.080868] ? check_same_owner+0x320/0x320 [ 331.085189] ? rcu_note_context_switch+0x710/0x710 [ 331.090123] should_failslab+0xec/0x120 [ 331.094085] kmem_cache_alloc_trace+0x4b/0x740 [ 331.098649] ? __kmalloc_node+0x33/0x70 [ 331.102607] ? __kmalloc_node+0x33/0x70 [ 331.106561] ? rcu_read_lock_sched_held+0x108/0x120 [ 331.111565] __memcg_init_list_lru_node+0x169/0x270 [ 331.116567] ? list_lru_add+0x7c0/0x7c0 [ 331.120519] ? __kmalloc_node+0x47/0x70 [ 331.124494] __list_lru_init+0x544/0x750 [ 331.128557] ? memcg_destroy_list_lru_node.isra.7+0x110/0x110 [ 331.134435] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 331.139438] ? __lockdep_init_map+0xe4/0x650 [ 331.143824] ? lockdep_init_map+0x9/0x10 [ 331.147867] sget_userns+0x691/0xe40 [ 331.151570] ? kill_litter_super+0x90/0x90 [ 331.155793] ? ns_test_super+0x50/0x50 [ 331.159671] ? destroy_unused_super.part.6+0xd0/0xd0 [ 331.164756] ? do_raw_spin_trylock+0x190/0x190 [ 331.169334] ? kobject_put+0x6b/0x250 2018/03/29 11:12:11 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) readv(r0, &(0x7f0000001480)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x3}) r1 = syz_open_pts(r0, 0x2) r2 = dup3(r1, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000c34fff), 0xffffff0b) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0) preadv(r3, &(0x7f00000004c0)=[{&(0x7f0000000480)=""/21, 0x15}], 0x1, 0x0) fchdir(0xffffffffffffffff) mkdir(&(0x7f0000000280)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f", 0xfffffffffffffffc) fchmod(r2, 0x0) splice(r3, &(0x7f0000000400), 0xffffffffffffffff, &(0x7f0000000440), 0x9, 0x2) rename(&(0x7f0000001e00)='./file0\x00', &(0x7f0000000100)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f") mkdir(&(0x7f000000e000)='./control\x00', 0x0) r4 = open(&(0x7f0000000000)='./control\x00', 0x0, 0x0) renameat2(r4, &(0x7f0000000040)='./file0\x00', r4, &(0x7f0000000080)='./control\x00', 0x2) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000300)={0x0, 0x80}, &(0x7f0000000340)=0x8) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000380)={r5, 0x5}, &(0x7f00000003c0)=0x8) ioctl$TIOCGLCKTRMIOS(r0, 0x5456, &(0x7f00000014c0)={0x20, 0xfffffffffffffb37, 0x8, 0xfffffffffffeffff, 0x80000001, 0x200, 0x8, 0x9, 0x401, 0x6a8, 0x7, 0x1f}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000001540)={0x0, 0x0}, &(0x7f0000001580)=0xc) setfsuid(r6) mknodat(r4, &(0x7f000003f000)='./control\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000001500)={'bond0\x00', 0xd703}) symlink(&(0x7f0000000180)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f", &(0x7f00000000c0)='./file0\x00') perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(r4, &(0x7f0000000240)='./control\x00', &(0x7f000003f000), &(0x7f0000001fe8), 0x0) ioctl$sock_ipx_SIOCAIPXITFCRT(r2, 0x89e0, &(0x7f0000000200)=0xffffffff) [ 331.173129] ? blkdev_get+0x3a1/0xb00 [ 331.176926] ? cap_capable+0x1b5/0x230 [ 331.180801] ? __blkdev_get+0x13b0/0x13b0 [ 331.184945] ? security_capable+0x8e/0xc0 [ 331.189088] ? kill_litter_super+0x90/0x90 [ 331.193318] ? ns_capable_common+0xcf/0x160 [ 331.197627] ? ns_test_super+0x50/0x50 [ 331.201502] ? kill_litter_super+0x90/0x90 [ 331.205713] sget+0xd2/0x120 [ 331.208718] mount_bdev+0x109/0x370 [ 331.212325] ? fuse_get_root_inode+0x190/0x190 [ 331.216897] fuse_mount_blk+0x34/0x40 [ 331.220690] mount_fs+0x66/0x2d0 [ 331.224050] vfs_kern_mount.part.26+0xc6/0x4a0 [ 331.228629] ? may_umount+0xa0/0xa0 [ 331.232257] ? _raw_read_unlock+0x22/0x30 [ 331.236394] ? __get_fs_type+0x8a/0xc0 [ 331.240286] do_mount+0xea4/0x2bb0 [ 331.243816] ? copy_mount_string+0x40/0x40 [ 331.248037] ? rcu_pm_notify+0xc0/0xc0 [ 331.251917] ? copy_mount_options+0x5f/0x2e0 [ 331.256300] ? rcu_read_lock_sched_held+0x108/0x120 [ 331.261301] ? kmem_cache_alloc_trace+0x459/0x740 [ 331.266132] ? kasan_check_write+0x14/0x20 [ 331.270370] ? copy_mount_options+0x1f7/0x2e0 2018/03/29 11:12:11 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) readv(r0, &(0x7f0000001480)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000240)=0x0) ptrace$peekuser(0x3, r1, 0x9) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x3}) r2 = syz_open_pts(r0, 0x2) r3 = dup3(r2, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000c34fff), 0xffffff0b) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0) preadv(r4, &(0x7f00000004c0)=[{&(0x7f0000000480)=""/21, 0x15}], 0x1086, 0xfffffffffffffffc) fchdir(0xffffffffffffffff) ioctl$KVM_X86_SETUP_MCE(r3, 0x4008ae9c, &(0x7f00000014c0)={0x1, 0x1, 0xfffffffffffffffc}) mkdir(&(0x7f0000000280)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f", 0xfffffffffffffffc) fchmod(r3, 0x0) splice(r4, &(0x7f0000000400), 0xffffffffffffffff, &(0x7f0000000440), 0x9, 0x2) rename(&(0x7f0000001e00)='./file0\x00', &(0x7f0000000100)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f") mkdir(&(0x7f000000e000)='./control\x00', 0x0) r5 = open(&(0x7f0000000000)='./control\x00', 0x0, 0x0) renameat2(r5, &(0x7f0000000040)='./file0\x00', r5, &(0x7f0000000080)='./control\x00', 0x2) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r5, 0x84, 0x76, &(0x7f0000000300)={0x0, 0x80}, &(0x7f0000000340)=0x8) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000380)={r6, 0x2}, &(0x7f00000003c0)=0xffffffffffffff31) mknodat(r0, &(0x7f0000000200)='./control\x00', 0x0, 0x0) symlink(&(0x7f0000000180)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f", &(0x7f00000000c0)='./file0\x00') perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(r5, &(0x7f0000010000)='./control\x00', &(0x7f000003f000), &(0x7f0000001fe8), 0x0) [ 331.274861] SyS_mount+0xab/0x120 [ 331.278312] ? copy_mnt_ns+0xb30/0xb30 [ 331.282199] do_syscall_64+0x281/0x940 [ 331.286081] ? __do_page_fault+0xc90/0xc90 [ 331.290312] ? _raw_spin_unlock_irq+0x27/0x70 [ 331.294803] ? finish_task_switch+0x1c1/0x7e0 [ 331.299289] ? syscall_return_slowpath+0x550/0x550 [ 331.304197] ? syscall_return_slowpath+0x2ac/0x550 [ 331.309104] ? prepare_exit_to_usermode+0x350/0x350 [ 331.314100] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 331.319451] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 331.324279] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 331.329444] RIP: 0033:0x4548b9 [ 331.332610] RSP: 002b:00007f032fc57b08 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 331.340301] RAX: ffffffffffffffda RBX: 0000000000000019 RCX: 00000000004548b9 [ 331.347561] RDX: 00000000004b9225 RSI: 0000000020001740 RDI: 0000000020001780 [ 331.354815] RBP: 0000000020001780 R08: 00007f032fc57b20 R09: 0000000000000000 [ 331.362065] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 2018/03/29 11:12:11 executing program 0: r0 = perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x4a, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffff9c, 0xc00caee0, &(0x7f0000000180)={0x0, r0, 0x1}) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) fcntl$getownex(r0, 0x10, &(0x7f0000000400)={0x0, 0x0}) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0xffff, 0xe3, 0x6, 0x4, 0x0, 0x7, 0x0, 0x2, 0x10001, 0x1, 0x7, 0x8, 0x100, 0x4, 0x0, 0x7f, 0x20, 0x0, 0x4, 0x5, 0x90a4, 0x7, 0x2, 0x73, 0x8, 0x7, 0x4, 0x7e0, 0x101, 0x0, 0x2, 0x309, 0x0, 0x9, 0xfffffffffffffff9, 0x9, 0x0, 0x4, 0x0, @perf_config_ext={0x20, 0x1}, 0x8140, 0x2, 0x0, 0x4, 0xca1}, r4, 0x4, r1, 0x8) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) futimesat(r1, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0)={{r2, r3/1000+10000}, {r5, r6/1000+10000}}) unshare(0x8000000) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0xdc, 0x40}, 0x341) r8 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8910, &(0x7f0000000080)=@buf={0x0, &(0x7f0000000000)}) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x13, &(0x7f0000000ffc), 0x4) mq_open(&(0x7f00000000c0)='syzkaller0\x00', 0x40, 0x8, &(0x7f0000000100)={0x5, 0x80000000, 0x0, 0xfffffffffffffff9, 0x1, 0xfffffffffffffffd, 0x7fff, 0x200}) socket$inet_tcp(0x2, 0x1, 0x0) r9 = dup3(r8, r7, 0x80000) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r9, 0x84, 0x66, &(0x7f00000002c0)={0x0, 0x8ed6}, &(0x7f0000000300)=0x1) bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) shmget(0xffffffffffffffff, 0x8000, 0x49b, &(0x7f0000ff8000/0x8000)=nil) ioctl$sock_inet_SIOCGIFPFLAGS(r8, 0x8935, &(0x7f0000000080)={'syzkaller0\x00'}) ppoll(&(0x7f0000000780)=[{r1, 0x300}, {r1, 0x8401}], 0x2, &(0x7f00000007c0)={0x77359400}, &(0x7f0000000800)={0x9}, 0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000280)={0x0, 0x0, 0x9}, 0x10) r10 = semget$private(0x0, 0x4, 0x0) semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0x0, 0x1000}], 0x1, &(0x7f0000000080)={0x0, 0x1c9c380}) semctl$IPC_RMID(r10, 0x0, 0x0) [ 331.369315] R13: 00000000000003ff R14: 0000000000000000 R15: ffffffffffffffff 2018/03/29 11:12:12 executing program 7: io_setup(0x3, &(0x7f0000000000)=0x0) r1 = accept$unix(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000100)=0x6e) r2 = fcntl$dupfd(r1, 0x406, r1) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r2, 0x800448d2, &(0x7f0000000800)={0x6, &(0x7f0000000480)=[{}, {}, {}, {}, {}, {}]}) r3 = syz_open_dev$usbmon(&(0x7f0000000200)='/dev/usbmon#\x00', 0x7ff, 0x0) io_cancel(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0xf, 0x3, 0xffffffffffffffff, &(0x7f0000000140)="940c1f2149747e7734510c34c143183667a187dc4f624f6c2de12452792a6fb529e6bf2a661dc23a844b00925c244a9f2967c0ca9868ee50eacf67a2ad7681d82f5a38cbd6d7641f843fa129e00f701fb01835f497b53672b3e5a3f6838f28aa240bf21eb5e5cbe7804fd307404474ae0242f8dea7a08e0fe9479b06f2795f857f8eec271d35ba7f61a91c87296814189cc1dfc9c659cc5437452a0bd178323c50e8c005ba7fa9519b27965c9f6ffbc7dcaa8e658616cc83188fb131a703222d", 0xc0, 0x5, 0x0, 0x1}, &(0x7f0000000280)) io_getevents(r0, 0x2, 0x8f, &(0x7f0000d83f60)=[{}, {}], &(0x7f00005cfff0)={0x4000000000001, 0x7}) io_getevents(r0, 0x2, 0x8000000000000e1, &(0x7f00000002c0)=[{}, {}, {}, {}, {}], &(0x7f00000003c0)) io_setup(0x7, &(0x7f0000000040)=0x0) r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/route\x00') ioctl$TIOCGPGRP(r5, 0x540f, &(0x7f0000000440)=0x0) perf_event_open(&(0x7f0000aaa000)={0x0, 0x70, 0x4a, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ef4}, r6, 0x0, 0xffffffffffffffff, 0x1) pread64(r5, &(0x7f0000000000)=""/85, 0xfe42, 0x5d) r7 = memfd_create(&(0x7f0000000240)=':+lo#\x00', 0x0) fdatasync(r7) io_submit(r0, 0x1, &(0x7f0000001280)=[&(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, 0x0, r7, &(0x7f0000000100)}]) timerfd_create(0x7, 0x80800) io_destroy(r0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x9, &(0x7f0000000380)=0x3, 0x4) io_cancel(r4, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0xe, 0x4, r2, &(0x7f0000000840)="ce0dff06c823d84047abb61f2ef27514223070954333aea2d52d9bec63f665a305a4b64d8794c518bb9cefeffcfa820759b67fb971250ced4b82a6d6c2ac2a9db647c6d82f16ed8d832cd6506503ec55", 0x50, 0x98f, 0x0, 0x1, r3}, &(0x7f0000000900)) 2018/03/29 11:12:12 executing program 2 (fault-call:21 fault-nth:31): r0 = syz_open_procfs(0x0, &(0x7f00000004c0)='oom_score_adj\x00') perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x49, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(r0, 0x0, 0x83, &(0x7f0000001800)={'nat\x00', 0x0, 0x3, 0x1000, [], 0x2, &(0x7f0000001280)=[{}, {}], &(0x7f0000002040)=""/4096}, &(0x7f00000013c0)=0x78) ioprio_get$pid(0x0, 0x0) timer_create(0x0, &(0x7f0000cd0000), &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00004b1fe0)={{0x0, 0x1c9c380}, {0x0, 0x9}}, &(0x7f0000040000)) r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x7fff) truncate(&(0x7f0000001180)='./bus\x00', 0x4) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000f40000)='/dev/ptmx\x00', 0x200000000101002, 0x0) sendfile(r2, 0xffffffffffffffff, &(0x7f00000010c0), 0x10000065) sendfile(r0, r1, &(0x7f0000000000), 0x4) tkill(0x0, 0x0) r3 = memfd_create(&(0x7f0000000000)='\x00', 0x1) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000001200)) recvmsg(0xffffffffffffff9c, &(0x7f0000001500)={&(0x7f00000012c0)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @remote}}}, 0x80, &(0x7f0000001400)=[{&(0x7f0000001340)=""/103, 0x67}], 0x1, &(0x7f0000001440)=""/155, 0x9b}, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000001540)) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000001640)={0x1ff, {0x2, 0x4e21}, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, {0x2, 0x0, @multicast2=0xe0000002}, 0x0, 0x9, 0x2, 0x6, 0x0, &(0x7f0000001240)='teql0\x00', 0x0, 0x80}) inotify_rm_watch(0xffffffffffffffff, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000140), &(0x7f0000000100)=0xffffffa4) getgroups(0x1, &(0x7f0000001600)=[0x0]) syz_fuseblk_mount(&(0x7f0000001740)='./file0\x00', &(0x7f0000001780)='./file0\x00', 0x0, 0x0, 0xffffffffffffffff, 0x3ff, 0x1, 0x0) getpgrp(0xffffffffffffffff) getegid() sendmmsg$unix(r3, &(0x7f0000001880), 0x0, 0x0) setsockopt$netrom_NETROM_T4(0xffffffffffffffff, 0x103, 0x6, &(0x7f00000017c0), 0xfffffffffffffc77) readv(0xffffffffffffffff, &(0x7f000004ffe0), 0x0) 2018/03/29 11:12:12 executing program 1: io_setup(0x3, &(0x7f0000000000)=0x0) accept$unix(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000100)=0x6e) r1 = syz_open_dev$usbmon(&(0x7f0000000200)='/dev/usbmon#\x00', 0x0, 0x0) io_cancel(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0xf, 0x3, 0xffffffffffffffff, &(0x7f0000000140)="940c1f2149747e7734510c34c143183667a187dc4f624f6c2de12452792a6fb529e6bf2a661dc23a844b00925c244a9f2967c0ca9868ee50eacf67a2ad7681d82f5a38cbd6d7641f843fa129e00f701fb01835f497b53672b3e5a3f6838f28aa240bf21eb5e5cbe7804fd307404474ae0242f8dea7a08e0fe9479b06f2795f857f8eec271d35ba7f61a91c87296814189cc1dfc9c659cc5437452a0bd178323c50e8c005ba7fa9519b27965c9f6ffbc7dcaa8e658616cc83188fb131a703222d", 0xc0, 0x5, 0x0, 0x1}, &(0x7f0000000280)) io_getevents(r0, 0x2, 0x8f, &(0x7f0000d83f60)=[{}, {}], &(0x7f00005cfff0)={0x4000000000001, 0x7}) io_getevents(r0, 0x0, 0x5, &(0x7f00000002c0)=[{}, {}, {}, {}, {}], &(0x7f00000003c0)) io_setup(0x7, &(0x7f0000000040)) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/route\x00') ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000440)=0x0) perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x4a, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ef4}, r3, 0x0, 0xffffffffffffffff, 0x1) pread64(r2, &(0x7f0000000000)=""/85, 0xfe42, 0x5d) r4 = memfd_create(&(0x7f0000000240)=':+lo#\x00', 0x0) fdatasync(r4) io_submit(r0, 0x1, &(0x7f0000001280)=[&(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f0000000100)}]) timerfd_create(0x7, 0x80800) io_destroy(0x0) setsockopt$llc_int(r1, 0x10c, 0x9, &(0x7f0000000380)=0x3, 0x4) 2018/03/29 11:12:12 executing program 5: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) mkdir(&(0x7f0000000100)='./file1\x00', 0x0) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000811ffa)='bdev\x00', 0x0, &(0x7f0000444000)) mount(&(0x7f0000fb6000)='./file0\x00', &(0x7f0000d78000)='.', &(0x7f0000fdb000)='ubifs\x00', 0x1003, 0x0) mount(&(0x7f00002b9ff8)='./file0\x00', &(0x7f0000cbeff8)='./file0\x00', &(0x7f00005f7ffa)='ramfs\x00', 0x80000, &(0x7f000002f000)) mount(&(0x7f0000000040)='.', &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0)='binfmt_misc\x00', 0x0, &(0x7f0000000100)) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = syz_open_dev$midi(&(0x7f0000000240)='/dev/midi#\x00', 0x8, 0x0) ioctl$VT_RELDISP(r1, 0x5605) renameat(r0, &(0x7f0000000140)='./file1\x00', r1, &(0x7f0000000280)='./file0\x00') mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) mount(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./file1\x00', &(0x7f0000000200)='anon_inodefs\x00', 0x2000, &(0x7f0000000240)) mount(&(0x7f0000adcff8)='./file0\x00', &(0x7f0000e08fff)='.', &(0x7f00005e9000)='cifs\x00', 0x2000, &(0x7f0000ad5000)) 2018/03/29 11:12:12 executing program 6: openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x0, 0x0) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, &(0x7f0000000340)=0x1) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f000051cff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000943ffc)=0xa35) read(r0, &(0x7f00003fefff)=""/1, 0x1) r1 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000029000)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r0, &(0x7f0000dcdff0)=[{&(0x7f0000cd8000)=""/1, 0x1}], 0x1) ioctl$int_in(r2, 0x5452, &(0x7f0000b28000)=0x3c) write$cgroup_type(0xffffffffffffffff, &(0x7f00000002c0)='threaded\x00', 0x9) syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x0, 0x802) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000fb9000)) fcntl$setsig(r2, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r3}], 0x1, 0x0) read$eventfd(0xffffffffffffffff, &(0x7f0000000040), 0x8) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)) r4 = dup2(r2, r3) fcntl$setown(r4, 0x8, r1) ptrace$cont(0xffffffffffffffff, r1, 0x0, 0x8) tkill(r1, 0x16) r5 = gettid() process_vm_readv(r5, &(0x7f0000001880)=[{&(0x7f0000000680)=""/198, 0xc6}, {&(0x7f0000000780)=""/247, 0xf7}, {&(0x7f0000000380)=""/12, 0xc}, {&(0x7f00000003c0)=""/6, 0x6}, {&(0x7f0000000400)=""/14, 0xe}], 0x5, &(0x7f00000019c0)=[{&(0x7f0000001900)=""/41, 0x29}, {&(0x7f0000001940)=""/112, 0x70}], 0x2, 0x0) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f0000000240)={{{@in6}}, {{@in=@local}, 0x0, @in=@local}}, &(0x7f0000000100)=0xe8) 2018/03/29 11:12:12 executing program 0: r0 = perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x4a, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffff9c, 0xc00caee0, &(0x7f0000000180)={0x0, r0, 0x1}) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) fcntl$getownex(r0, 0x10, &(0x7f0000000400)={0x0, 0x0}) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0xffff, 0xe3, 0x6, 0x4, 0x0, 0x7, 0x0, 0x2, 0x10001, 0x1, 0x7, 0x8, 0x100, 0x4, 0x0, 0x7f, 0x20, 0x0, 0x4, 0x5, 0x90a4, 0x7, 0x2, 0x73, 0x8, 0x7, 0x4, 0x7e0, 0x101, 0x0, 0x2, 0x309, 0x0, 0x9, 0xfffffffffffffff9, 0x9, 0x0, 0x4, 0x0, @perf_config_ext={0x20, 0x1}, 0x8140, 0x2, 0x0, 0x4, 0xca1}, r4, 0x4, r1, 0x8) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) futimesat(r1, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0)={{r2, r3/1000+10000}, {r5, r6/1000+10000}}) unshare(0x8000000) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0xdc, 0x40}, 0x341) r8 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8910, &(0x7f0000000080)=@buf={0x0, &(0x7f0000000000)}) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x13, &(0x7f0000000ffc), 0x4) mq_open(&(0x7f00000000c0)='syzkaller0\x00', 0x40, 0x8, &(0x7f0000000100)={0x5, 0x80000000, 0x0, 0xfffffffffffffff9, 0x1, 0xfffffffffffffffd, 0x7fff, 0x200}) socket$inet_tcp(0x2, 0x1, 0x0) r9 = dup3(r8, r7, 0x80000) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r9, 0x84, 0x66, &(0x7f00000002c0)={0x0, 0x8ed6}, &(0x7f0000000300)=0x1) bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) shmget(0xffffffffffffffff, 0x8000, 0x49b, &(0x7f0000ff8000/0x8000)=nil) ioctl$sock_inet_SIOCGIFPFLAGS(r8, 0x8935, &(0x7f0000000080)={'syzkaller0\x00'}) ppoll(&(0x7f0000000780)=[{r1, 0x300}, {r1, 0x8401}], 0x2, &(0x7f00000007c0)={0x77359400}, &(0x7f0000000800)={0x9}, 0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000280)={0x0, 0x0, 0x9}, 0x10) r10 = semget$private(0x0, 0x4, 0x0) semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0x0, 0x1000}], 0x1, &(0x7f0000000080)={0x0, 0x1c9c380}) semctl$IPC_RMID(r10, 0x0, 0x0) 2018/03/29 11:12:12 executing program 3: io_setup(0x3, &(0x7f0000000000)=0x0) accept$unix(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000100)=0x6e) r1 = syz_open_dev$usbmon(&(0x7f0000000200)='/dev/usbmon#\x00', 0x7ff, 0x0) io_cancel(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0xf, 0x0, 0xffffffffffffffff, &(0x7f0000000140)="940c1f2149747e7734510c34c143183667a187dc4f624f6c2de12452792a6fb529e6bf2a661dc23a844b00925c244a9f2967c0ca9868ee50eacf67a2ad7681d82f5a38cbd6d7641f843fa129e00f701fb01835f497b53672b3e5a3f6838f28aa240bf21eb5e5cbe7804fd307404474ae0242f8dea7a08e0fe9479b06f2795f857f8eec271d35ba7f61a91c87296814189cc1dfc9c659cc5437452a0bd178323c50e8c005ba7fa9519b27965c9f6ffbc7dcaa8e658616cc83188fb131a703222d", 0xc0, 0x5, 0x0, 0x1, r1}, &(0x7f0000000280)) io_getevents(r0, 0xfffffffffffffffe, 0x2, &(0x7f0000d83f60)=[{}, {}], &(0x7f00005cfff0)={0x4000000000001, 0x7}) io_getevents(r0, 0x0, 0x5, &(0x7f00000002c0)=[{}, {}, {}, {}, {}], &(0x7f00000003c0)) io_setup(0x7, &(0x7f0000000040)) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/route\x00') ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000480)={0x1c, 0x4, 0x323}) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000440)=0x0) perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x4a, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ef4}, r3, 0x0, r1, 0x1) syz_extract_tcp_res(&(0x7f00000004c0), 0x8000, 0x80000000) pread64(r2, &(0x7f0000000000)=""/85, 0xfe42, 0x5d) memfd_create(&(0x7f0000000240)=':+lo#\x00', 0x0) fdatasync(r1) timerfd_create(0x7, 0x80800) io_destroy(r0) setsockopt$llc_int(r1, 0x10c, 0x9, &(0x7f0000000380)=0x3, 0x4) 2018/03/29 11:12:12 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) readv(r0, &(0x7f0000001480)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x3}) r1 = syz_open_pts(r0, 0x2) r2 = dup3(r1, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000c34fff), 0xffffff0b) execveat(r2, &(0x7f0000001500)='./control\x00', &(0x7f00000017c0)=[&(0x7f0000001540)='/dev/ptmx\x00', &(0x7f0000001580)='/dev/ptmx\x00', &(0x7f00000015c0)='./cgroup\x00', &(0x7f0000001600)='./cgroup\x00', &(0x7f0000001640)='\x00', &(0x7f0000001680)='/dev/ptmx\x00', &(0x7f00000016c0)='./cgroup\x00', &(0x7f0000001700)='!eth1!\x00', &(0x7f0000001740)='\x00', &(0x7f0000001780)='vmnet1ppp0&\x00'], &(0x7f0000001940)=[&(0x7f0000001840)='(self+GPL/\\)ppp1ppp1\x00', &(0x7f0000001880)='./cgroup\x00', &(0x7f00000018c0)='./cgroup\x00', &(0x7f0000001900)='security(vboxnet1GPLem0cgroup\x00'], 0x1c00) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0) preadv(r3, &(0x7f00000004c0)=[{&(0x7f0000000480)=""/21, 0x15}], 0x1, 0x0) fchdir(0xffffffffffffffff) mkdir(&(0x7f0000000280)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f", 0xfffffffffffffffc) syz_open_pts(r1, 0x402000) fchmod(r2, 0x0) splice(r3, &(0x7f0000000400), 0xffffffffffffffff, &(0x7f0000000440), 0x9, 0x2) bind$rds(r2, &(0x7f0000000240)={0x2, 0x4e24, @broadcast=0xffffffff}, 0x10) rename(&(0x7f0000001e00)='./file0\x00', &(0x7f0000000100)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f") mkdir(&(0x7f000000e000)='./control\x00', 0x0) r4 = open(&(0x7f00000014c0)='./control\x00', 0x18000, 0xfffffffffffffffe) renameat2(r4, &(0x7f0000000040)='./file0\x00', r4, &(0x7f0000000080)='./control\x00', 0x2) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000300)={0x0, 0x80}, &(0x7f0000000340)=0x8) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000380)={r5, 0x5}, &(0x7f00000003c0)=0x8) mknodat(r4, &(0x7f000003f000)='./control\x00', 0x0, 0x0) symlink(&(0x7f0000000180)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f", &(0x7f00000000c0)='./file0\x00') perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$l2tp(r4, &(0x7f0000000200)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x13}}, 0x1, 0x4, 0x4, 0x4}}, 0x26) execveat(r4, &(0x7f0000010000)='./control\x00', &(0x7f000003f000), &(0x7f0000001fe8), 0x0) [ 331.638315] FAULT_INJECTION: forcing a failure. [ 331.638315] name failslab, interval 1, probability 0, space 0, times 0 [ 331.649624] CPU: 1 PID: 9343 Comm: syz-executor2 Not tainted 4.16.0-rc7+ #5 [ 331.656718] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 331.666061] Call Trace: [ 331.668648] dump_stack+0x194/0x24d [ 331.672279] ? arch_local_irq_restore+0x53/0x53 [ 331.676938] ? kernel_text_address+0x102/0x140 [ 331.681526] should_fail+0x8c0/0xa40 [ 331.685238] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 331.690338] ? save_stack+0x43/0xd0 [ 331.693942] ? kasan_kmalloc+0xad/0xe0 [ 331.697804] ? __kmalloc+0x162/0x760 [ 331.701491] ? __list_lru_init+0xcf/0x750 [ 331.705621] ? find_held_lock+0x35/0x1d0 [ 331.709663] ? __lock_is_held+0xb6/0x140 [ 331.713714] ? check_same_owner+0x320/0x320 [ 331.718022] ? rcu_note_context_switch+0x710/0x710 [ 331.722939] should_failslab+0xec/0x120 [ 331.726891] kmem_cache_alloc_node_trace+0x5a/0x760 [ 331.731881] ? mark_held_locks+0xaf/0x100 [ 331.736011] ? __raw_spin_lock_init+0x1c/0x100 [ 331.740580] __kmalloc_node+0x33/0x70 [ 331.744362] kvmalloc_node+0x99/0xd0 [ 331.748056] __list_lru_init+0x5d5/0x750 [ 331.752102] ? memcg_destroy_list_lru_node.isra.7+0x110/0x110 [ 331.757962] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 331.762961] ? lockdep_init_map+0x9/0x10 [ 331.767009] sget_userns+0x6b1/0xe40 [ 331.770701] ? kill_litter_super+0x90/0x90 [ 331.774915] ? ns_test_super+0x50/0x50 [ 331.778778] ? destroy_unused_super.part.6+0xd0/0xd0 [ 331.783854] ? do_raw_spin_trylock+0x190/0x190 [ 331.788416] ? kobject_put+0x6b/0x250 [ 331.792201] ? blkdev_get+0x3a1/0xb00 [ 331.795983] ? cap_capable+0x1b5/0x230 [ 331.799850] ? __blkdev_get+0x13b0/0x13b0 [ 331.803978] ? security_capable+0x8e/0xc0 [ 331.808105] ? kill_litter_super+0x90/0x90 [ 331.812315] ? ns_capable_common+0xcf/0x160 [ 331.816612] ? ns_test_super+0x50/0x50 [ 331.820475] ? kill_litter_super+0x90/0x90 [ 331.824684] sget+0xd2/0x120 [ 331.827683] mount_bdev+0x109/0x370 [ 331.831285] ? fuse_get_root_inode+0x190/0x190 [ 331.835848] fuse_mount_blk+0x34/0x40 [ 331.839628] mount_fs+0x66/0x2d0 [ 331.842978] vfs_kern_mount.part.26+0xc6/0x4a0 [ 331.847547] ? may_umount+0xa0/0xa0 [ 331.851150] ? _raw_read_unlock+0x22/0x30 [ 331.855272] ? __get_fs_type+0x8a/0xc0 [ 331.859143] do_mount+0xea4/0x2bb0 [ 331.862668] ? copy_mount_string+0x40/0x40 [ 331.866879] ? rcu_pm_notify+0xc0/0xc0 [ 331.870751] ? copy_mount_options+0x5f/0x2e0 [ 331.875134] ? rcu_read_lock_sched_held+0x108/0x120 [ 331.880127] ? kmem_cache_alloc_trace+0x459/0x740 [ 331.884945] ? kasan_check_write+0x14/0x20 [ 331.889155] ? _copy_from_user+0x99/0x110 [ 331.893283] ? copy_mount_options+0x1f7/0x2e0 [ 331.897759] SyS_mount+0xab/0x120 [ 331.901187] ? copy_mnt_ns+0xb30/0xb30 [ 331.905053] do_syscall_64+0x281/0x940 [ 331.908914] ? __do_page_fault+0xc90/0xc90 [ 331.913122] ? _raw_spin_unlock_irq+0x27/0x70 [ 331.917594] ? finish_task_switch+0x1c1/0x7e0 [ 331.922065] ? syscall_return_slowpath+0x550/0x550 [ 331.926970] ? syscall_return_slowpath+0x2ac/0x550 [ 331.931880] ? prepare_exit_to_usermode+0x350/0x350 [ 331.936873] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 331.942220] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 331.947052] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 331.952216] RIP: 0033:0x4548b9 [ 331.955379] RSP: 002b:00007f032fc57b08 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 331.963061] RAX: ffffffffffffffda RBX: 0000000000000019 RCX: 00000000004548b9 [ 331.970308] RDX: 00000000004b9225 RSI: 0000000020001740 RDI: 0000000020001780 [ 331.977552] RBP: 0000000020001780 R08: 00007f032fc57b20 R09: 0000000000000000 2018/03/29 11:12:12 executing program 3: io_setup(0x3, &(0x7f0000000000)=0x0) accept$unix(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000100)=0x6e) r1 = syz_open_dev$usbmon(&(0x7f0000000200)='/dev/usbmon#\x00', 0x7ff, 0x0) io_cancel(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0xf, 0x10001, 0xffffffffffffffff, &(0x7f0000000480)="2149747e7734510c34c143183667a187dc4f624f6c2de12452792a6fb529e6bf2a661dc23a844b00925c244a9f2967c0ca9868ee50eacf67a2ad7681d82f5a38cbd6d7641f843fa129e00f701fb01835f497b53672b3e5a3f6838f28aa240bf21eb5e5cbe7804fd307404474ae0242f8dea7a08e0fe9479b06f2795f857f8eec271d35ba7f61a91c87296814189cc1dfc9c659cc5437452a0bd178323c50e8c005ba7fa9519b27965c9f6ffbc7dcaa8e658616cc83188fb131a703222d", 0xbd, 0x3, 0x0, 0x1, r1}, &(0x7f0000000280)) io_getevents(r0, 0x2, 0x8f, &(0x7f0000d83f60)=[{}, {}], &(0x7f00005cfff0)={0x4000000000001, 0x7}) io_getevents(r0, 0x0, 0x5, &(0x7f00000002c0)=[{}, {}, {}, {}, {}], &(0x7f00000003c0)) io_setup(0x7, &(0x7f0000000040)=0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='net/route\x00') ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f0000000440)=0x0) perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x4a, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ef4}, r4, 0x0, r1, 0x1) pread64(r3, &(0x7f0000000000)=""/85, 0xfe42, 0x5d) r5 = memfd_create(&(0x7f0000000240)=':+lo#\x00', 0x0) fdatasync(r5) io_submit(r0, 0x1, &(0x7f0000001280)=[&(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, 0x0, r5, &(0x7f0000000100)}]) timerfd_create(0x7, 0x80800) io_destroy(r2) setsockopt$llc_int(r1, 0x10c, 0x9, &(0x7f0000000380)=0x3, 0x4) 2018/03/29 11:12:12 executing program 2 (fault-call:21 fault-nth:32): r0 = syz_open_procfs(0x0, &(0x7f00000004c0)='oom_score_adj\x00') perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x49, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(r0, 0x0, 0x83, &(0x7f0000001800)={'nat\x00', 0x0, 0x3, 0x1000, [], 0x2, &(0x7f0000001280)=[{}, {}], &(0x7f0000002040)=""/4096}, &(0x7f00000013c0)=0x78) ioprio_get$pid(0x0, 0x0) timer_create(0x0, &(0x7f0000cd0000), &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00004b1fe0)={{0x0, 0x1c9c380}, {0x0, 0x9}}, &(0x7f0000040000)) r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x7fff) truncate(&(0x7f0000001180)='./bus\x00', 0x4) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000f40000)='/dev/ptmx\x00', 0x200000000101002, 0x0) sendfile(r2, 0xffffffffffffffff, &(0x7f00000010c0), 0x10000065) sendfile(r0, r1, &(0x7f0000000000), 0x4) tkill(0x0, 0x0) r3 = memfd_create(&(0x7f0000000000)='\x00', 0x1) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000001200)) recvmsg(0xffffffffffffff9c, &(0x7f0000001500)={&(0x7f00000012c0)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @remote}}}, 0x80, &(0x7f0000001400)=[{&(0x7f0000001340)=""/103, 0x67}], 0x1, &(0x7f0000001440)=""/155, 0x9b}, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000001540)) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000001640)={0x1ff, {0x2, 0x4e21}, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, {0x2, 0x0, @multicast2=0xe0000002}, 0x0, 0x9, 0x2, 0x6, 0x0, &(0x7f0000001240)='teql0\x00', 0x0, 0x80}) inotify_rm_watch(0xffffffffffffffff, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000140), &(0x7f0000000100)=0xffffffa4) getgroups(0x1, &(0x7f0000001600)=[0x0]) syz_fuseblk_mount(&(0x7f0000001740)='./file0\x00', &(0x7f0000001780)='./file0\x00', 0x0, 0x0, 0xffffffffffffffff, 0x3ff, 0x1, 0x0) getpgrp(0xffffffffffffffff) getegid() sendmmsg$unix(r3, &(0x7f0000001880), 0x0, 0x0) setsockopt$netrom_NETROM_T4(0xffffffffffffffff, 0x103, 0x6, &(0x7f00000017c0), 0xfffffffffffffc77) readv(0xffffffffffffffff, &(0x7f000004ffe0), 0x0) [ 331.984797] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 331.992044] R13: 00000000000003ff R14: 0000000000000000 R15: ffffffffffffffff 2018/03/29 11:12:12 executing program 1: io_setup(0x3, &(0x7f0000000000)=0x0) accept$unix(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000100)=0x6e) r1 = syz_open_dev$usbmon(&(0x7f0000000200)='/dev/usbmon#\x00', 0x0, 0x0) io_cancel(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0xf, 0x3, 0xffffffffffffffff, &(0x7f0000000140)="940c1f2149747e7734510c34c143183667a187dc4f624f6c2de12452792a6fb529e6bf2a661dc23a844b00925c244a9f2967c0ca9868ee50eacf67a2ad7681d82f5a38cbd6d7641f843fa129e00f701fb01835f497b53672b3e5a3f6838f28aa240bf21eb5e5cbe7804fd307404474ae0242f8dea7a08e0fe9479b06f2795f857f8eec271d35ba7f61a91c87296814189cc1dfc9c659cc5437452a0bd178323c50e8c005ba7fa9519b27965c9f6ffbc7dcaa8e658616cc83188fb131a703222d", 0xc0, 0x5, 0x0, 0x1}, &(0x7f0000000280)) io_getevents(r0, 0x2, 0x8f, &(0x7f0000d83f60)=[{}, {}], &(0x7f00005cfff0)={0x4000000000001, 0x7}) io_getevents(r0, 0x0, 0x5, &(0x7f00000002c0)=[{}, {}, {}, {}, {}], &(0x7f00000003c0)) io_setup(0x7, &(0x7f0000000040)) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/route\x00') ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000440)=0x0) perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x4a, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ef4}, r3, 0x0, 0xffffffffffffffff, 0x1) pread64(r2, &(0x7f0000000000)=""/85, 0xfe42, 0x5d) r4 = memfd_create(&(0x7f0000000240)=':+lo#\x00', 0x0) fdatasync(r4) io_submit(r0, 0x1, &(0x7f0000001280)=[&(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f0000000100)}]) timerfd_create(0x7, 0x80800) io_destroy(0x0) setsockopt$llc_int(r1, 0x10c, 0x9, &(0x7f0000000380)=0x3, 0x4) 2018/03/29 11:12:12 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) readv(r0, &(0x7f0000001480)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x3}) r1 = syz_open_pts(r0, 0x2) r2 = dup3(r1, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000c34fff), 0xffffff0b) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0) preadv(r3, &(0x7f00000004c0)=[{&(0x7f0000000480)=""/21, 0x15}], 0x1, 0x0) fchdir(0xffffffffffffffff) mkdir(&(0x7f0000000280)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f", 0xfffffffffffffffc) fchmod(r2, 0x0) splice(r3, &(0x7f0000000400), 0xffffffffffffffff, &(0x7f0000000440), 0x9, 0x2) rename(&(0x7f0000001e00)='./file0\x00', &(0x7f0000000100)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f") mkdir(&(0x7f000000e000)='./control\x00', 0x0) r4 = open(&(0x7f0000000000)='./control\x00', 0x0, 0x0) renameat2(r4, &(0x7f0000000040)='./file0\x00', r4, &(0x7f0000000080)='./control\x00', 0x2) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000300)={0x0, 0x80}, &(0x7f0000000340)=0x8) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000380)={r5, 0x5}, &(0x7f00000003c0)=0x8) mknodat(r4, &(0x7f000003f000)='./control\x00', 0x0, 0x0) symlink(&(0x7f0000000180)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f", &(0x7f00000000c0)='./file0\x00') accept4(r4, 0x0, &(0x7f0000000200), 0x800) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(r4, &(0x7f0000010000)='./control\x00', &(0x7f000003f000), &(0x7f0000001fe8), 0x0) 2018/03/29 11:12:12 executing program 7: io_setup(0x3, &(0x7f0000000000)=0x0) accept$unix(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000100)=0x6e) syz_open_dev$usbmon(&(0x7f0000000200)='/dev/usbmon#\x00', 0x7ff, 0x0) io_cancel(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0xf, 0x3, 0xffffffffffffffff, &(0x7f0000000140)="940c1f2149747e7734510c34c143183667a187dc4f624f6c2de12452792a6fb529e6bf2a661dc23a844b00925c244a9f2967c0ca9868ee50eacf67a2ad7681d82f5a38cbd6d7641f843fa129e00f701fb01835f497b53672b3e5a3f6838f28aa240bf21eb5e5cbe7804fd307404474ae0242f8dea7a08e0fe9479b06f2795f857f8eec271d35ba7f61a91c87296814189cc1dfc9c659cc5437452a0bd178323c50e8c005ba7fa9519b27965c9f6ffbc7dcaa8e658616cc83188fb131a703222d", 0xc0, 0x5, 0x0, 0x1}, &(0x7f0000000280)) io_getevents(r0, 0x0, 0x5, &(0x7f00000002c0)=[{}, {}, {}, {}, {}], &(0x7f00000003c0)) io_setup(0x40000000000007, &(0x7f0000000740)=0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/route\x00') ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000440)=0x0) r4 = perf_event_open(&(0x7f0000aaa000)={0x0, 0x70, 0x4a, 0x2, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x12, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ef4}, r3, 0x0, 0xffffffffffffffff, 0x9) pread64(r2, &(0x7f0000000000)=""/85, 0xfe42, 0x5d) r5 = syz_open_dev$mice(&(0x7f0000000680)='/dev/input/mice\x00', 0x0, 0x400000) io_cancel(r1, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x2, 0x4, r4, &(0x7f0000000600)="f9a3de649dcbf76da1f05652b3b9c0606b7a6cce7f8414765cff564615cbf3dcb162c4eed1c3698bf07d20f58847b463c263e2c97879c1d5828b2cb2cc0c7833d0d7c159918b74a5cee44eef58b5655a83a69e", 0x53, 0x1, 0x0, 0x1, r5}, &(0x7f0000000700)) r6 = memfd_create(&(0x7f0000000240)=':+lo#\x00', 0x0) fdatasync(r6) utimensat(r6, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)={{0x0, 0x2710}, {0x0, 0x2710}}, 0x100) write(r2, &(0x7f0000000480)="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", 0xfc) io_submit(r0, 0x1, &(0x7f0000001280)=[&(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, 0x0, r6, &(0x7f0000000100)}]) timerfd_create(0x7, 0x80800) bind$pptp(r2, &(0x7f0000000780)={0x18, 0x2, {0x2, @loopback=0x7f000001}}, 0x1e) io_destroy(r0) setsockopt$llc_int(r5, 0x10c, 0x9, &(0x7f00000007c0)=0xffff, 0x4) 2018/03/29 11:12:12 executing program 0: r0 = perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x4a, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffff9c, 0xc00caee0, &(0x7f0000000180)={0x0, r0, 0x1}) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) fcntl$getownex(r0, 0x10, &(0x7f0000000400)={0x0, 0x0}) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0xffff, 0xe3, 0x6, 0x4, 0x0, 0x7, 0x0, 0x2, 0x10001, 0x1, 0x7, 0x8, 0x100, 0x4, 0x0, 0x7f, 0x20, 0x0, 0x4, 0x5, 0x90a4, 0x7, 0x2, 0x73, 0x8, 0x7, 0x4, 0x7e0, 0x101, 0x0, 0x2, 0x309, 0x0, 0x9, 0xfffffffffffffff9, 0x9, 0x0, 0x4, 0x0, @perf_config_ext={0x20, 0x1}, 0x8140, 0x2, 0x0, 0x4, 0xca1, 0xb5}, 0x0, 0x4, r1, 0x8) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) futimesat(r1, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0)={{r2, r3/1000+10000}, {r5, r6/1000+10000}}) unshare(0x8000000) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0xdc, 0x40}, 0x341) r8 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8910, &(0x7f0000000080)=@buf={0x0, &(0x7f0000000000)}) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x13, &(0x7f0000000ffc), 0x4) mq_open(&(0x7f00000000c0)='syzkaller0\x00', 0x40, 0x8, &(0x7f0000000100)={0x5, 0x80000000, 0x0, 0xfffffffffffffff9, 0x1, 0xfffffffffffffffd, 0x7fff, 0x200}) socket$inet_tcp(0x2, 0x1, 0x0) r9 = dup3(r8, r7, 0x80000) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r9, 0x84, 0x66, &(0x7f00000002c0)={0x0, 0x8ed6}, &(0x7f0000000300)=0x1) bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) shmget(0xffffffffffffffff, 0x8000, 0x49b, &(0x7f0000ff8000/0x8000)=nil) ioctl$sock_inet_SIOCGIFPFLAGS(r8, 0x8935, &(0x7f0000000080)={'syzkaller0\x00'}) ppoll(&(0x7f0000000780)=[{r1, 0x300}, {r1, 0x8401}], 0x2, &(0x7f00000007c0)={0x77359400}, &(0x7f0000000800)={0x9}, 0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000280)={0x0, 0x0, 0x9}, 0x10) r10 = semget$private(0x0, 0x4, 0x0) semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0x0, 0x1000}], 0x1, &(0x7f0000000080)={0x0, 0x1c9c380}) semctl$IPC_RMID(r10, 0x0, 0x0) [ 332.079079] bond0 (unregistering): Released all slaves 2018/03/29 11:12:12 executing program 1: io_setup(0x3, &(0x7f0000000000)=0x0) accept$unix(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000100)=0x6e) r1 = syz_open_dev$usbmon(&(0x7f0000000200)='/dev/usbmon#\x00', 0x0, 0x0) io_cancel(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0xf, 0x3, 0xffffffffffffffff, &(0x7f0000000140)="940c1f2149747e7734510c34c143183667a187dc4f624f6c2de12452792a6fb529e6bf2a661dc23a844b00925c244a9f2967c0ca9868ee50eacf67a2ad7681d82f5a38cbd6d7641f843fa129e00f701fb01835f497b53672b3e5a3f6838f28aa240bf21eb5e5cbe7804fd307404474ae0242f8dea7a08e0fe9479b06f2795f857f8eec271d35ba7f61a91c87296814189cc1dfc9c659cc5437452a0bd178323c50e8c005ba7fa9519b27965c9f6ffbc7dcaa8e658616cc83188fb131a703222d", 0xc0, 0x5, 0x0, 0x1}, &(0x7f0000000280)) io_getevents(r0, 0x2, 0x8f, &(0x7f0000d83f60)=[{}, {}], &(0x7f00005cfff0)={0x4000000000001, 0x7}) io_getevents(r0, 0x0, 0x5, &(0x7f00000002c0)=[{}, {}, {}, {}, {}], &(0x7f00000003c0)) io_setup(0x7, &(0x7f0000000040)) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/route\x00') ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000440)=0x0) perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x4a, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ef4}, r3, 0x0, 0xffffffffffffffff, 0x1) pread64(r2, &(0x7f0000000000)=""/85, 0xfe42, 0x5d) r4 = memfd_create(&(0x7f0000000240)=':+lo#\x00', 0x0) fdatasync(r4) io_submit(r0, 0x1, &(0x7f0000001280)=[&(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f0000000100)}]) timerfd_create(0x7, 0x80800) io_destroy(r0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x9, &(0x7f0000000380)=0x3, 0x4) 2018/03/29 11:12:12 executing program 7: membarrier(0x10, 0x0) io_setup(0x3, &(0x7f0000000000)=0x0) accept$unix(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000100)=0x6e) socket$nl_crypto(0x10, 0x3, 0x15) r1 = syz_open_dev$usbmon(&(0x7f0000000200)='/dev/usbmon#\x00', 0x7ff, 0x0) ioctl$EVIOCGABS2F(r1, 0x8018456f, &(0x7f0000000600)=""/72) io_cancel(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0xf, 0x3, 0xffffffffffffffff, &(0x7f0000000140)="940c1f2149747e7734510c34c143183667a187dc4f624f6c2de12452792a6fb529e6bf2a661dc23a844b00925c244a9f2967c0ca9868ee50eacf67a2ad7681d82f5a38cbd6d7641f843fa129e00f701fb01835f497b53672b3e5a3f6838f28aa240bf21eb5e5cbe7804fd307404474ae0242f8dea7a08e0fe9479b06f2795f857f8eec271d35ba7f61a91c87296814189cc1dfc9c659cc5437452a0bd178323c50e8c005ba7fa9519b27965c9f6ffbc7dcaa8e658616cc83188fb131a703222d", 0xc0, 0x5, 0x0, 0x1}, &(0x7f0000000280)) io_getevents(r0, 0x2, 0x8f, &(0x7f0000d83f60)=[{}, {}], &(0x7f00005cfff0)={0x4000000000001, 0x7}) io_getevents(r0, 0x0, 0x5, &(0x7f00000002c0)=[{}, {}, {}, {}, {}], &(0x7f0000000740)) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000480)={0x0, 0x3, 0x1, 0x3ff}, &(0x7f0000000680)=0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f00000006c0)={r2, 0x1d}, &(0x7f0000000700)=0x8) io_setup(0x7, &(0x7f0000000040)) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/route\x00') ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f0000000440)=0x0) perf_event_open(&(0x7f0000aaa000)={0x0, 0x70, 0x4a, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ef4}, r4, 0x0, 0xffffffffffffffff, 0x1) pread64(r3, &(0x7f0000000000)=""/85, 0xfe42, 0x5d) r5 = memfd_create(&(0x7f00000004c0)='/dev/usbmon#\x00', 0x4000000000002) fdatasync(r5) io_submit(r0, 0x1, &(0x7f0000001280)=[&(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, 0x0, r5, &(0x7f0000000100)}]) timerfd_create(0x7, 0x80800) io_destroy(r0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x9, &(0x7f0000000380)=0x3, 0x4) ioctl$TCSETA(r1, 0x5406, &(0x7f00000003c0)={0xf40000000000, 0xfffffffffffffffb, 0x8648, 0xd6d, 0xffffffffffff8001, 0x7, 0x3ff, 0x3, 0x1, 0x1}) getsockopt$sock_buf(r5, 0x1, 0x37, &(0x7f0000000500)=""/193, &(0x7f0000000240)=0xc1) 2018/03/29 11:12:12 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) readv(r0, &(0x7f0000001480)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x3}) r1 = syz_open_pts(r0, 0x2) r2 = dup3(r1, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000c34fff), 0xffffff0b) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0) preadv(r3, &(0x7f00000004c0)=[{&(0x7f0000000480)=""/21, 0x15}], 0x1, 0x0) fchdir(0xffffffffffffffff) mkdir(&(0x7f0000000280)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f", 0xfffffffffffffffc) fchmod(r2, 0x0) splice(r3, &(0x7f0000000400), 0xffffffffffffffff, &(0x7f0000000440), 0x9, 0x2) rename(&(0x7f0000001e00)='./file0\x00', &(0x7f0000000100)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f") mkdir(&(0x7f000000e000)='./control\x00', 0x0) r4 = open(&(0x7f0000000000)='./control\x00', 0x600000, 0x0) renameat2(r4, &(0x7f0000000040)='./file0\x00', r4, &(0x7f0000000080)='./control\x00', 0x2) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000300)={0x0, 0x80}, &(0x7f0000000340)=0x8) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000380)={r5, 0x5}, &(0x7f00000003c0)=0x8) linkat(r4, &(0x7f0000000200)='./file0\x00', r4, &(0x7f0000000240)='./file0\x00', 0x400) mknodat(r4, &(0x7f000003f000)='./control\x00', 0x0, 0x0) symlink(&(0x7f0000001540)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f", &(0x7f00000015c0)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f") perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(r4, &(0x7f0000010000)='./control\x00', &(0x7f000003f000), &(0x7f0000001fe8), 0x0) [ 332.157380] FAULT_INJECTION: forcing a failure. [ 332.157380] name failslab, interval 1, probability 0, space 0, times 0 [ 332.168942] CPU: 0 PID: 9374 Comm: syz-executor2 Not tainted 4.16.0-rc7+ #5 [ 332.176048] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 332.185397] Call Trace: [ 332.187991] dump_stack+0x194/0x24d [ 332.191630] ? arch_local_irq_restore+0x53/0x53 [ 332.196294] ? save_stack+0x43/0xd0 [ 332.199912] ? mutex_lock_io_nested+0x1900/0x1900 [ 332.204753] should_fail+0x8c0/0xa40 [ 332.208467] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 332.213564] ? trace_hardirqs_off+0x10/0x10 [ 332.217879] ? lock_downgrade+0x980/0x980 [ 332.222025] ? trace_hardirqs_off+0x10/0x10 [ 332.226343] ? find_held_lock+0x35/0x1d0 [ 332.230405] ? __lock_is_held+0xb6/0x140 [ 332.234479] ? check_same_owner+0x320/0x320 [ 332.238789] ? rcu_note_context_switch+0x710/0x710 [ 332.243702] ? rcu_note_context_switch+0x710/0x710 [ 332.248629] should_failslab+0xec/0x120 [ 332.252591] __kmalloc+0x63/0x760 2018/03/29 11:12:12 executing program 4: r0 = syz_open_dev$admmidi(&(0x7f0000000200)='/dev/admmidi#\x00', 0x3ff, 0x101182) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000240)={0x0, 0x6}, &(0x7f00000014c0)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000001500)={r1, 0x4}, 0x8) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) readv(r2, &(0x7f0000001480)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003b9fdc)) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x3}) r3 = syz_open_pts(r2, 0x2) r4 = dup3(r3, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000c34fff), 0xffffff0b) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0) preadv(r5, &(0x7f00000004c0)=[{&(0x7f0000000480)=""/21, 0x15}], 0x1, 0x0) fchdir(0xffffffffffffffff) mkdir(&(0x7f0000000280)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f", 0xfffffffffffffffc) fchmod(r4, 0x0) splice(r5, &(0x7f0000000400), 0xffffffffffffffff, &(0x7f0000000440), 0x9, 0x2) rename(&(0x7f0000001e00)='./file0\x00', &(0x7f0000000100)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f") mkdir(&(0x7f000000e000)='./control\x00', 0x0) r6 = open(&(0x7f0000000000)='./control\x00', 0x0, 0x0) renameat2(r6, &(0x7f0000000040)='./file0\x00', r6, &(0x7f0000000080)='./control\x00', 0x2) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r6, 0x84, 0x76, &(0x7f0000000300)={0x0, 0x80}, &(0x7f0000000340)=0x8) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r6, 0x84, 0x76, &(0x7f0000000380)={r7, 0x5}, &(0x7f00000003c0)=0x8) mknodat(r6, &(0x7f000003f000)='./control\x00', 0x0, 0x0) symlink(&(0x7f0000000180)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f", &(0x7f00000000c0)='./file0\x00') perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(r6, &(0x7f0000010000)='./control\x00', &(0x7f000003f000), &(0x7f0000001fe8), 0x0) [ 332.256040] ? __kmalloc_node+0x47/0x70 [ 332.260003] ? __list_lru_init+0xcf/0x750 [ 332.264148] __list_lru_init+0xcf/0x750 [ 332.268123] ? memcg_destroy_list_lru_node.isra.7+0x110/0x110 [ 332.274001] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 332.279019] ? lockdep_init_map+0x9/0x10 [ 332.283076] sget_userns+0x6b1/0xe40 [ 332.286779] ? kill_litter_super+0x90/0x90 [ 332.291012] ? ns_test_super+0x50/0x50 [ 332.294897] ? destroy_unused_super.part.6+0xd0/0xd0 [ 332.299985] ? do_raw_spin_trylock+0x190/0x190 [ 332.304568] ? kobject_put+0x6b/0x250 [ 332.308370] ? blkdev_get+0x3a1/0xb00 [ 332.312169] ? cap_capable+0x1b5/0x230 [ 332.316049] ? __blkdev_get+0x13b0/0x13b0 [ 332.320193] ? security_capable+0x8e/0xc0 [ 332.324333] ? kill_litter_super+0x90/0x90 [ 332.328557] ? ns_capable_common+0xcf/0x160 [ 332.332867] ? ns_test_super+0x50/0x50 [ 332.336747] ? kill_litter_super+0x90/0x90 [ 332.341571] sget+0xd2/0x120 [ 332.344588] mount_bdev+0x109/0x370 [ 332.348200] ? fuse_get_root_inode+0x190/0x190 [ 332.352780] fuse_mount_blk+0x34/0x40 [ 332.356572] mount_fs+0x66/0x2d0 [ 332.359933] vfs_kern_mount.part.26+0xc6/0x4a0 [ 332.364504] ? may_umount+0xa0/0xa0 [ 332.368118] ? _raw_read_unlock+0x22/0x30 [ 332.372254] ? __get_fs_type+0x8a/0xc0 [ 332.376145] do_mount+0xea4/0x2bb0 [ 332.379682] ? copy_mount_string+0x40/0x40 [ 332.383898] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 332.388904] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 332.393656] ? retint_kernel+0x10/0x10 [ 332.397548] ? copy_mount_options+0x149/0x2e0 [ 332.402036] ? __sanitizer_cov_trace_pc+0x48/0x50 2018/03/29 11:12:12 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) readv(r0, &(0x7f0000001480)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x3}) r1 = syz_open_pts(r0, 0x2) r2 = dup3(r1, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000c34fff), 0xffffff0b) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0) recvfrom$ax25(r2, &(0x7f0000000200)=""/59, 0x3b, 0x0, &(0x7f0000000240)={0x3, {"232d005f340f3a"}, 0x8}, 0x10) preadv(r3, &(0x7f00000004c0)=[{&(0x7f0000000480)=""/21, 0x15}], 0x1, 0x0) fchdir(0xffffffffffffffff) mkdir(&(0x7f0000000280)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f", 0xfffffffffffffffc) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) fchmod(r2, 0x0) splice(r3, &(0x7f0000000400), 0xffffffffffffffff, &(0x7f0000000440), 0x9, 0x2) rename(&(0x7f0000001e00)='./file0\x00', &(0x7f0000000100)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f") mkdir(&(0x7f000000e000)='./control\x00', 0x0) r4 = open(&(0x7f0000000000)='./control\x00', 0x0, 0x0) renameat2(r4, &(0x7f0000000040)='./file0\x00', r4, &(0x7f0000000080)='./control\x00', 0x2) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000300)={0x0, 0x80}, &(0x7f0000000340)=0x8) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000380)={r5, 0x5}, &(0x7f00000003c0)=0x8) mknodat(r4, &(0x7f000003f000)='./control\x00', 0x0, 0x0) symlink(&(0x7f0000000180)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f", &(0x7f00000000c0)='./file0\x00') perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(r4, &(0x7f0000010000)='./control\x00', &(0x7f000003f000), &(0x7f0000001fe8), 0x0) [ 332.406870] ? copy_mount_options+0x1f7/0x2e0 [ 332.411359] SyS_mount+0xab/0x120 [ 332.414798] ? copy_mnt_ns+0xb30/0xb30 [ 332.418679] do_syscall_64+0x281/0x940 [ 332.422557] ? __do_page_fault+0xc90/0xc90 [ 332.426782] ? _raw_spin_unlock_irq+0x27/0x70 [ 332.431267] ? finish_task_switch+0x1c1/0x7e0 [ 332.435760] ? syscall_return_slowpath+0x550/0x550 [ 332.440685] ? syscall_return_slowpath+0x2ac/0x550 [ 332.445603] ? prepare_exit_to_usermode+0x350/0x350 [ 332.450597] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 332.455941] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 332.460764] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 332.465927] RIP: 0033:0x4548b9 [ 332.469094] RSP: 002b:00007f032fc57b08 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 332.476775] RAX: ffffffffffffffda RBX: 0000000000000018 RCX: 00000000004548b9 [ 332.484024] RDX: 00000000004b9225 RSI: 0000000020001740 RDI: 0000000020001780 [ 332.491270] RBP: 0000000020001780 R08: 00007f032fc57b20 R09: 0000000000000000 [ 332.498512] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 2018/03/29 11:12:13 executing program 0: r0 = perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x4a, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffff9c, 0xc00caee0, &(0x7f0000000180)={0x0, r0, 0x1}) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) fcntl$getownex(r0, 0x10, &(0x7f0000000400)={0x0, 0x0}) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0xffff, 0xe3, 0x6, 0x4, 0x0, 0x7, 0x0, 0x2, 0x10001, 0x1, 0x7, 0x8, 0x100, 0x4, 0x0, 0x7f, 0x20, 0x0, 0x4, 0x5, 0x90a4, 0x7, 0x2, 0x73, 0x8, 0x7, 0x4, 0x7e0, 0x101, 0x0, 0x2, 0x309, 0x0, 0x9, 0xfffffffffffffff9, 0x9, 0x0, 0x4, 0x0, @perf_config_ext={0x20, 0x1}, 0x8140, 0x2, 0x0, 0x4, 0xca1, 0xb5}, 0x0, 0x4, r1, 0x8) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) futimesat(r1, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0)={{r2, r3/1000+10000}, {r5, r6/1000+10000}}) unshare(0x8000000) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0xdc, 0x40}, 0x341) r8 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8910, &(0x7f0000000080)=@buf={0x0, &(0x7f0000000000)}) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x13, &(0x7f0000000ffc), 0x4) mq_open(&(0x7f00000000c0)='syzkaller0\x00', 0x40, 0x8, &(0x7f0000000100)={0x5, 0x80000000, 0x0, 0xfffffffffffffff9, 0x1, 0xfffffffffffffffd, 0x7fff, 0x200}) socket$inet_tcp(0x2, 0x1, 0x0) r9 = dup3(r8, r7, 0x80000) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r9, 0x84, 0x66, &(0x7f00000002c0)={0x0, 0x8ed6}, &(0x7f0000000300)=0x1) bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) shmget(0xffffffffffffffff, 0x8000, 0x49b, &(0x7f0000ff8000/0x8000)=nil) ioctl$sock_inet_SIOCGIFPFLAGS(r8, 0x8935, &(0x7f0000000080)={'syzkaller0\x00'}) ppoll(&(0x7f0000000780)=[{r1, 0x300}, {r1, 0x8401}], 0x2, &(0x7f00000007c0)={0x77359400}, &(0x7f0000000800)={0x9}, 0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000280)={0x0, 0x0, 0x9}, 0x10) r10 = semget$private(0x0, 0x4, 0x0) semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0x0, 0x1000}], 0x1, &(0x7f0000000080)={0x0, 0x1c9c380}) semctl$IPC_RMID(r10, 0x0, 0x0) [ 332.505753] R13: 00000000000003ff R14: 0000000000000000 R15: ffffffffffffffff [ 333.647498] IPVS: ftp: loaded support on port[0] = 21 [ 333.952359] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 334.410108] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 334.416210] 8021q: adding VLAN 0 to HW filter on device bond0 [ 334.464515] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready 2018/03/29 11:12:15 executing program 3: io_setup(0x3, &(0x7f0000000000)=0x0) accept$unix(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000100)=0x6e) r1 = syz_open_dev$usbmon(&(0x7f0000000200)='/dev/usbmon#\x00', 0x7ff, 0x0) io_cancel(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0xf, 0x0, 0xffffffffffffffff, &(0x7f0000000140)="940c1f2149747e7734510c34c143183667a187dc4f624f6c2de12452792a6fb529e6bf2a661dc23a844b00925c244a9f2967c0ca9868ee50eacf67a2ad7681d82f5a38cbd6d7641f843fa129e00f701fb01835f497b53672b3e5a3f6838f28aa240bf21eb5e5cbe7804fd307404474ae0242f8dea7a08e0fe9479b06f2795f857f8eec271d35ba7f61a91c87296814189cc1dfc9c659cc5437452a0bd178323c50e8c005ba7fa9519b27965c9f6ffbc7dcaa8e658616cc83188fb131a703222d", 0xc0, 0x5, 0x0, 0x1, r1}, &(0x7f0000000280)) io_getevents(r0, 0x2, 0x8f, &(0x7f0000d83f60)=[{}, {}], &(0x7f00005cfff0)={0x4000000000001, 0x7}) io_getevents(r0, 0x0, 0x5, &(0x7f00000002c0)=[{}, {}, {}, {}, {}], &(0x7f00000003c0)) io_setup(0x7, &(0x7f0000000040)) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/route\x00') ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000440)=0x0) perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x4a, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ef4}, r3, 0x0, r1, 0x1) pread64(r2, &(0x7f0000000000)=""/85, 0xfe42, 0x5d) r4 = memfd_create(&(0x7f0000000240)=':+lo#\x00', 0x0) fdatasync(r4) io_submit(r0, 0x1, &(0x7f0000001280)=[&(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f0000000100)}]) timerfd_create(0x7, 0x80800) io_destroy(r0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f0000000580)=0x9, 0x4) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000480)={0x0, 0x5}, &(0x7f00000004c0)=0x8) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000500)={r5, 0x5}, &(0x7f0000000540)=0x8) setsockopt$llc_int(r1, 0x10c, 0x9, &(0x7f0000000380)=0x3, 0x4) 2018/03/29 11:12:15 executing program 2 (fault-call:21 fault-nth:33): r0 = syz_open_procfs(0x0, &(0x7f00000004c0)='oom_score_adj\x00') perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x49, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(r0, 0x0, 0x83, &(0x7f0000001800)={'nat\x00', 0x0, 0x3, 0x1000, [], 0x2, &(0x7f0000001280)=[{}, {}], &(0x7f0000002040)=""/4096}, &(0x7f00000013c0)=0x78) ioprio_get$pid(0x0, 0x0) timer_create(0x0, &(0x7f0000cd0000), &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00004b1fe0)={{0x0, 0x1c9c380}, {0x0, 0x9}}, &(0x7f0000040000)) r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x7fff) truncate(&(0x7f0000001180)='./bus\x00', 0x4) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000f40000)='/dev/ptmx\x00', 0x200000000101002, 0x0) sendfile(r2, 0xffffffffffffffff, &(0x7f00000010c0), 0x10000065) sendfile(r0, r1, &(0x7f0000000000), 0x4) tkill(0x0, 0x0) r3 = memfd_create(&(0x7f0000000000)='\x00', 0x1) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000001200)) recvmsg(0xffffffffffffff9c, &(0x7f0000001500)={&(0x7f00000012c0)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @remote}}}, 0x80, &(0x7f0000001400)=[{&(0x7f0000001340)=""/103, 0x67}], 0x1, &(0x7f0000001440)=""/155, 0x9b}, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000001540)) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000001640)={0x1ff, {0x2, 0x4e21}, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, {0x2, 0x0, @multicast2=0xe0000002}, 0x0, 0x9, 0x2, 0x6, 0x0, &(0x7f0000001240)='teql0\x00', 0x0, 0x80}) inotify_rm_watch(0xffffffffffffffff, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000140), &(0x7f0000000100)=0xffffffa4) getgroups(0x1, &(0x7f0000001600)=[0x0]) syz_fuseblk_mount(&(0x7f0000001740)='./file0\x00', &(0x7f0000001780)='./file0\x00', 0x0, 0x0, 0xffffffffffffffff, 0x3ff, 0x1, 0x0) getpgrp(0xffffffffffffffff) getegid() sendmmsg$unix(r3, &(0x7f0000001880), 0x0, 0x0) setsockopt$netrom_NETROM_T4(0xffffffffffffffff, 0x103, 0x6, &(0x7f00000017c0), 0xfffffffffffffc77) readv(0xffffffffffffffff, &(0x7f000004ffe0), 0x0) 2018/03/29 11:12:15 executing program 7: io_setup(0x3, &(0x7f0000000000)=0x0) accept$unix(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000100)=0x6e) syz_open_dev$usbmon(&(0x7f0000000200)='/dev/usbmon#\x00', 0x7ff, 0x0) io_cancel(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0xf, 0x3, 0xffffffffffffffff, &(0x7f0000000140)="940c1f2149747e7734510c34c143183667a187dc4f624f6c2de12452792a6fb529e6bf2a661dc23a844b00925c244a9f2967c0ca9868ee50eacf67a2ad7681d82f5a38cbd6d7641f843fa129e00f701fb01835f497b53672b3e5a3f6838f28aa240bf21eb5e5cbe7804fd307404474ae0242f8dea7a08e0fe9479b06f2795f857f8eec271d35ba7f61a91c87296814189cc1dfc9c659cc5437452a0bd178323c50e8c005ba7fa9519b27965c9f6ffbc7dcaa8e658616cc83188fb131a703222d", 0xc0, 0x5, 0x0, 0x1}, &(0x7f0000000280)) io_getevents(r0, 0x2, 0x8f, &(0x7f0000d83f60)=[{}, {}], &(0x7f00005cfff0)={0x4000000000001, 0x7}) io_getevents(r0, 0x0, 0x5, &(0x7f00000002c0)=[{}, {}, {}, {}, {}], &(0x7f00000003c0)) io_setup(0x7, &(0x7f0000000040)) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/route\x00') ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000440)=0x0) perf_event_open(&(0x7f0000aaa000)={0x0, 0x70, 0x4a, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ef4}, r2, 0x0, 0xffffffffffffffff, 0x1) pread64(r1, &(0x7f0000000000)=""/85, 0xfe42, 0x5d) r3 = memfd_create(&(0x7f0000000240)=':+lo#\x00', 0x0) fdatasync(r3) io_submit(r0, 0x1, &(0x7f0000001280)=[&(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000000100)}]) timerfd_create(0x7, 0x80800) io_destroy(r0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x9, &(0x7f0000000380)=0x3, 0x4) getsockopt$inet6_udp_int(r3, 0x11, 0x66, &(0x7f0000000480), &(0x7f00000004c0)=0x4) 2018/03/29 11:12:15 executing program 6: openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x0, 0x0) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, &(0x7f0000000340)=0x1) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f000051cff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000943ffc)=0xa35) read(r0, &(0x7f00003fefff)=""/1, 0x1) r1 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000029000)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r0, &(0x7f0000dcdff0)=[{&(0x7f0000cd8000)=""/1, 0x1}], 0x1) ioctl$int_in(r2, 0x5452, &(0x7f0000b28000)=0x3c) write$cgroup_type(0xffffffffffffffff, &(0x7f00000002c0)='threaded\x00', 0x9) syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x0, 0x802) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000fb9000)) fcntl$setsig(r2, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r3}], 0x1, 0x0) read$eventfd(0xffffffffffffffff, &(0x7f0000000040), 0x8) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)) r4 = dup2(r2, r3) fcntl$setown(r4, 0x8, r1) ptrace$cont(0xffffffffffffffff, r1, 0x0, 0x8) tkill(r1, 0x16) r5 = gettid() process_vm_readv(r5, &(0x7f0000001880)=[{&(0x7f0000000680)=""/198, 0xc6}, {&(0x7f0000000780)=""/247, 0xf7}, {&(0x7f0000000380)=""/12, 0xc}, {&(0x7f00000003c0)=""/6, 0x6}, {&(0x7f0000000400)=""/14, 0xe}], 0x5, &(0x7f00000019c0)=[{&(0x7f0000001900)=""/41, 0x29}, {&(0x7f0000001940)=""/112, 0x70}], 0x2, 0x0) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f0000000240)={{{@in6}}, {{@in=@local}, 0x0, @in=@local}}, &(0x7f0000000100)=0xe8) 2018/03/29 11:12:15 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) readv(r0, &(0x7f0000001480)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x3}) r1 = syz_open_pts(r0, 0x2) r2 = dup3(r1, r0, 0x0) write(0xffffffffffffffff, &(0x7f0000c34fff), 0xffffff0b) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0) preadv(r3, &(0x7f00000004c0)=[{&(0x7f0000000480)=""/21, 0x15}], 0x1, 0x0) fchdir(0xffffffffffffffff) mkdir(&(0x7f0000000280)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f", 0xfffffffffffffffc) fchmod(r2, 0x0) splice(r3, &(0x7f0000000400), 0xffffffffffffffff, &(0x7f0000000440), 0x9, 0x2) ioctl$TIOCLINUX6(r2, 0x541c, &(0x7f0000000200)={0x6, 0x400}) rename(&(0x7f0000001e00)='./file0\x00', &(0x7f0000000100)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f") mkdir(&(0x7f000000e000)='./control\x00', 0x0) r4 = open(&(0x7f0000000000)='./control\x00', 0x0, 0x0) renameat2(r4, &(0x7f0000000040)='./file0\x00', r4, &(0x7f0000000080)='./control\x00', 0x2) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000300)={0x0, 0x80}, &(0x7f0000000340)=0x8) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000380)={r5, 0x5}, &(0x7f00000003c0)=0x8) mknodat(r4, &(0x7f000003f000)='./control\x00', 0x0, 0x0) symlink(&(0x7f0000000180)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f", &(0x7f00000000c0)='./file0\x00') perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(r4, &(0x7f0000010000)='./control\x00', &(0x7f000003f000), &(0x7f0000001fe8), 0x0) 2018/03/29 11:12:15 executing program 5: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) mkdir(&(0x7f0000000000)='./file1\x00', 0x0) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000811ffa)='bdev\x00', 0x0, &(0x7f0000444000)) mount(&(0x7f0000fb6000)='./file0\x00', &(0x7f0000d78000)='.', &(0x7f0000fdb000)='ubifs\x00', 0x1003, 0x0) mount(&(0x7f00002b9ff8)='./file0\x00', &(0x7f0000cbeff8)='./file0\x00', &(0x7f00005f7ffa)='ramfs\x00', 0x80000, &(0x7f000002f000)) mount(&(0x7f0000000040)='.', &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0)='binfmt_misc\x00', 0x0, &(0x7f0000000100)) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) mount(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./file1\x00', &(0x7f0000000200)='anon_inodefs\x00', 0x2000, &(0x7f0000000240)) mount(&(0x7f0000adcff8)='./file0\x00', &(0x7f0000e08fff)='.', &(0x7f00005e9000)='cifs\x00', 0x2000, &(0x7f0000ad5000)) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/mixer\x00', 0x210402, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000340)={r0, &(0x7f0000000240)="63f1a2ca03ee0f2412685bff067a6f037244cf2d671a0e0933688a65101f9b41ebf903d12cf9aa77284b348d723a4ba49537865f66811a68019c7875fd23f03af67abaa62be63a1a01a2d517e0e0e1364698c8cf0645ff39ac1c33235d9742ee8169c8d5bde13c3277093047594585bef15f61464e89272b8771b706f4e945675047db99a86decc5c78780ba69b4b81cd7a0bd017ab79565b98d55db54c9a86292871104ce903bef5f746cb697eeda1c83ea7aa008160aead0b831f5aad3871b59704cc30ec0808b050b3e1735af677f84e35dc9c0c048c03cec2eef3e083a301ccaab93539d1aa93a089bbeba8544e746", &(0x7f0000000140)=""/50}, 0x18) 2018/03/29 11:12:15 executing program 1: io_setup(0x3, &(0x7f0000000000)=0x0) accept$unix(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000100)=0x6e) r1 = syz_open_dev$usbmon(&(0x7f0000000200)='/dev/usbmon#\x00', 0x0, 0x0) io_cancel(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0xf, 0x3, 0xffffffffffffffff, &(0x7f0000000140)="940c1f2149747e7734510c34c143183667a187dc4f624f6c2de12452792a6fb529e6bf2a661dc23a844b00925c244a9f2967c0ca9868ee50eacf67a2ad7681d82f5a38cbd6d7641f843fa129e00f701fb01835f497b53672b3e5a3f6838f28aa240bf21eb5e5cbe7804fd307404474ae0242f8dea7a08e0fe9479b06f2795f857f8eec271d35ba7f61a91c87296814189cc1dfc9c659cc5437452a0bd178323c50e8c005ba7fa9519b27965c9f6ffbc7dcaa8e658616cc83188fb131a703222d", 0xc0, 0x5, 0x0, 0x1}, &(0x7f0000000280)) io_getevents(r0, 0x2, 0x8f, &(0x7f0000d83f60)=[{}, {}], &(0x7f00005cfff0)={0x4000000000001, 0x7}) io_getevents(r0, 0x0, 0x5, &(0x7f00000002c0)=[{}, {}, {}, {}, {}], &(0x7f00000003c0)) io_setup(0x7, &(0x7f0000000040)) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/route\x00') ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000440)=0x0) perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x4a, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ef4}, r3, 0x0, 0xffffffffffffffff, 0x1) pread64(r2, &(0x7f0000000000)=""/85, 0xfe42, 0x5d) r4 = memfd_create(&(0x7f0000000240)=':+lo#\x00', 0x0) fdatasync(r4) io_submit(r0, 0x1, &(0x7f0000001280)=[&(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f0000000100)}]) timerfd_create(0x7, 0x80800) io_destroy(r0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x9, &(0x7f0000000380)=0x3, 0x4) 2018/03/29 11:12:15 executing program 0: r0 = perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x4a, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffff9c, 0xc00caee0, &(0x7f0000000180)={0x0, r0, 0x1}) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) fcntl$getownex(r0, 0x10, &(0x7f0000000400)={0x0, 0x0}) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0xffff, 0xe3, 0x6, 0x4, 0x0, 0x7, 0x0, 0x2, 0x10001, 0x1, 0x7, 0x8, 0x100, 0x4, 0x0, 0x7f, 0x20, 0x0, 0x4, 0x5, 0x90a4, 0x7, 0x2, 0x73, 0x8, 0x7, 0x4, 0x7e0, 0x101, 0x0, 0x2, 0x309, 0x0, 0x9, 0xfffffffffffffff9, 0x9, 0x0, 0x4, 0x0, @perf_config_ext={0x20, 0x1}, 0x8140, 0x2, 0x0, 0x4, 0xca1, 0xb5}, 0x0, 0x4, r1, 0x8) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) futimesat(r1, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0)={{r2, r3/1000+10000}, {r5, r6/1000+10000}}) unshare(0x8000000) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0xdc, 0x40}, 0x341) r8 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8910, &(0x7f0000000080)=@buf={0x0, &(0x7f0000000000)}) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x13, &(0x7f0000000ffc), 0x4) mq_open(&(0x7f00000000c0)='syzkaller0\x00', 0x40, 0x8, &(0x7f0000000100)={0x5, 0x80000000, 0x0, 0xfffffffffffffff9, 0x1, 0xfffffffffffffffd, 0x7fff, 0x200}) socket$inet_tcp(0x2, 0x1, 0x0) r9 = dup3(r8, r7, 0x80000) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r9, 0x84, 0x66, &(0x7f00000002c0)={0x0, 0x8ed6}, &(0x7f0000000300)=0x1) bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) shmget(0xffffffffffffffff, 0x8000, 0x49b, &(0x7f0000ff8000/0x8000)=nil) ioctl$sock_inet_SIOCGIFPFLAGS(r8, 0x8935, &(0x7f0000000080)={'syzkaller0\x00'}) ppoll(&(0x7f0000000780)=[{r1, 0x300}, {r1, 0x8401}], 0x2, &(0x7f00000007c0)={0x77359400}, &(0x7f0000000800)={0x9}, 0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000280)={0x0, 0x0, 0x9}, 0x10) r10 = semget$private(0x0, 0x4, 0x0) semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0x0, 0x1000}], 0x1, &(0x7f0000000080)={0x0, 0x1c9c380}) semctl$IPC_RMID(r10, 0x0, 0x0) [ 334.511788] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 334.583225] FAULT_INJECTION: forcing a failure. [ 334.583225] name failslab, interval 1, probability 0, space 0, times 0 [ 334.594636] CPU: 0 PID: 9597 Comm: syz-executor2 Not tainted 4.16.0-rc7+ #5 [ 334.601740] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 334.611101] Call Trace: [ 334.613687] dump_stack+0x194/0x24d [ 334.617305] ? arch_local_irq_restore+0x53/0x53 [ 334.621973] ? __save_stack_trace+0x7e/0xd0 [ 334.626290] should_fail+0x8c0/0xa40 [ 334.630003] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 334.635100] ? kasan_kmalloc+0xad/0xe0 [ 334.638975] ? kmem_cache_alloc_trace+0x136/0x740 [ 334.643801] ? __memcg_init_list_lru_node+0x169/0x270 [ 334.648975] ? __list_lru_init+0x544/0x750 [ 334.653202] ? sget_userns+0x6b1/0xe40 [ 334.657090] ? mount_fs+0x66/0x2d0 [ 334.660621] ? vfs_kern_mount.part.26+0xc6/0x4a0 [ 334.665366] ? do_mount+0xea4/0x2bb0 [ 334.669074] ? SyS_mount+0xab/0x120 [ 334.672706] ? do_syscall_64+0x281/0x940 [ 334.676762] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 334.682136] ? find_held_lock+0x35/0x1d0 [ 334.686200] ? __lock_is_held+0xb6/0x140 [ 334.690264] ? check_same_owner+0x320/0x320 [ 334.694564] ? rcu_note_context_switch+0x710/0x710 [ 334.699477] should_failslab+0xec/0x120 [ 334.703429] kmem_cache_alloc_trace+0x4b/0x740 [ 334.707994] ? __kmalloc_node+0x33/0x70 [ 334.711950] ? __kmalloc_node+0x33/0x70 [ 334.715899] ? rcu_read_lock_sched_held+0x108/0x120 [ 334.720898] __memcg_init_list_lru_node+0x169/0x270 [ 334.725893] ? list_lru_add+0x7c0/0x7c0 [ 334.729844] ? __kmalloc_node+0x47/0x70 [ 334.733815] __list_lru_init+0x544/0x750 [ 334.737867] ? memcg_destroy_list_lru_node.isra.7+0x110/0x110 [ 334.743736] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 334.748735] ? lockdep_init_map+0x9/0x10 [ 334.752789] sget_userns+0x6b1/0xe40 [ 334.756489] ? kill_litter_super+0x90/0x90 [ 334.760717] ? ns_test_super+0x50/0x50 [ 334.764590] ? destroy_unused_super.part.6+0xd0/0xd0 [ 334.769669] ? do_raw_spin_trylock+0x190/0x190 [ 334.774243] ? kobject_put+0x6b/0x250 [ 334.778038] ? blkdev_get+0x3a1/0xb00 [ 334.781826] ? cap_capable+0x1b5/0x230 [ 334.785697] ? __blkdev_get+0x13b0/0x13b0 [ 334.789833] ? security_capable+0x8e/0xc0 [ 334.793959] ? kill_litter_super+0x90/0x90 [ 334.798180] ? ns_capable_common+0xcf/0x160 [ 334.802487] ? ns_test_super+0x50/0x50 [ 334.806355] ? kill_litter_super+0x90/0x90 [ 334.810564] sget+0xd2/0x120 [ 334.813572] mount_bdev+0x109/0x370 [ 334.817176] ? fuse_get_root_inode+0x190/0x190 [ 334.821742] fuse_mount_blk+0x34/0x40 [ 334.825520] mount_fs+0x66/0x2d0 [ 334.828866] vfs_kern_mount.part.26+0xc6/0x4a0 [ 334.833424] ? may_umount+0xa0/0xa0 [ 334.837034] ? _raw_read_unlock+0x22/0x30 [ 334.841166] ? __get_fs_type+0x8a/0xc0 [ 334.845045] do_mount+0xea4/0x2bb0 [ 334.848569] ? copy_mount_string+0x40/0x40 [ 334.852782] ? rcu_pm_notify+0xc0/0xc0 [ 334.856653] ? copy_mount_options+0x5f/0x2e0 [ 334.861046] ? rcu_read_lock_sched_held+0x108/0x120 [ 334.866054] ? kmem_cache_alloc_trace+0x459/0x740 [ 334.870873] ? kasan_check_write+0x14/0x20 [ 334.875083] ? _copy_from_user+0x99/0x110 [ 334.879224] ? copy_mount_options+0x1f7/0x2e0 [ 334.883701] SyS_mount+0xab/0x120 [ 334.887131] ? copy_mnt_ns+0xb30/0xb30 [ 334.890998] do_syscall_64+0x281/0x940 [ 334.894866] ? __do_page_fault+0xc90/0xc90 [ 334.899075] ? _raw_spin_unlock_irq+0x27/0x70 [ 334.903547] ? finish_task_switch+0x1c1/0x7e0 [ 334.908028] ? syscall_return_slowpath+0x550/0x550 [ 334.912937] ? syscall_return_slowpath+0x2ac/0x550 [ 334.917841] ? prepare_exit_to_usermode+0x350/0x350 [ 334.922835] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 334.928180] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 334.933005] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 334.938185] RIP: 0033:0x4548b9 [ 334.941359] RSP: 002b:00007f032fc57b08 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 334.949039] RAX: ffffffffffffffda RBX: 0000000000000019 RCX: 00000000004548b9 [ 334.956282] RDX: 00000000004b9225 RSI: 0000000020001740 RDI: 0000000020001780 [ 334.963528] RBP: 0000000020001780 R08: 00007f032fc57b20 R09: 0000000000000000 [ 334.970770] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 334.978017] R13: 00000000000003ff R14: 0000000000000000 R15: ffffffffffffffff 2018/03/29 11:12:15 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) readv(r0, &(0x7f0000001480)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x3}) r1 = syz_open_pts(r0, 0x2) r2 = dup3(r1, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000c34fff), 0xffffff0b) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0) preadv(r3, &(0x7f00000004c0)=[{&(0x7f0000000480)=""/21, 0x15}], 0x1, 0x0) fchdir(0xffffffffffffffff) mkdir(&(0x7f0000000280)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f", 0xfffffffffffffffc) fchmod(r2, 0x0) splice(r3, &(0x7f0000000400), 0xffffffffffffffff, &(0x7f0000000440), 0x9, 0x2) rename(&(0x7f0000001e00)='./file0\x00', &(0x7f0000000100)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f") mkdir(&(0x7f000000e000)='./control\x00', 0x0) pipe(&(0x7f0000000200)) r4 = open(&(0x7f0000000000)='./control\x00', 0x0, 0x0) renameat2(r4, &(0x7f0000000040)='./file0\x00', r4, &(0x7f0000000080)='./control\x00', 0x2) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000300)={0x0, 0x80}, &(0x7f0000000340)=0x8) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000380)={r5, 0x5}, &(0x7f00000003c0)=0x8) mknodat(r4, &(0x7f000003f000)='./control\x00', 0x0, 0x0) symlink(&(0x7f0000000180)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f", &(0x7f00000000c0)='./file0\x00') perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(r4, &(0x7f0000010000)='./control\x00', &(0x7f000003f000), &(0x7f0000001fe8), 0x0) 2018/03/29 11:12:15 executing program 5: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) mkdir(&(0x7f0000000000)='./file1\x00', 0x0) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000811ffa)='bdev\x00', 0x0, &(0x7f0000444000)) mount(&(0x7f0000fb6000)='./file0\x00', &(0x7f0000d78000)='.', &(0x7f0000fdb000)='ubifs\x00', 0x1003, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f00000002c0)='/dev/snd/pcmC#D#c\x00', 0x1f, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x9, 0x3, 0x298, 0x0, 0xffffffff, 0xffffffff, 0x120, 0xffffffff, 0x200, 0xffffffff, 0xffffffff, 0x200, 0xffffffff, 0x3, &(0x7f0000000300), {[{{@ip={@rand_addr=0x80000000, @remote={0xac, 0x14, 0x14, 0xbb}, 0xff, 0xffffff00, 'gre0\x00', 'irlan0\x00', {0xff}, {0xff}, 0xb7, 0x0, 0x5}, 0x0, 0xc0, 0x120, 0x0, {}, [@common=@icmp={0x28, 'icmp\x00', 0x0, {0xf, 0x4, 0x9, 0x1}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @random="4dafa8503412", 0x7, 0xe, [0x23, 0x14, 0x17, 0x31, 0x35, 0x1d, 0x16, 0x3b, 0x2b, 0x36, 0x31, 0x26, 0xe, 0x2c, 0x3e, 0x39], 0x0, 0x9, 0x100000000}}}, {{@uncond, 0x0, 0xc0, 0xe0, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0x8}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x2f8) mount(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f00005f7ffa)='ext4\x00', 0x80000, &(0x7f000002f000)) mount(&(0x7f0000000040)='.', &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0)='binfmt_misc\x00', 0x0, &(0x7f0000000100)) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) r1 = dup3(0xffffffffffffffff, 0xffffffffffffff9c, 0x80000) ioctl$EVIOCGLED(r1, 0x80404519, &(0x7f0000000240)=""/97) mount(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./file1\x00', &(0x7f0000000200)='anon_inodefs\x00', 0x2000, &(0x7f0000000240)) mount(&(0x7f0000adcff8)='./file0\x00', &(0x7f0000e08fff)='.', &(0x7f00005e9000)='cifs\x00', 0x2000, &(0x7f0000ad5000)) 2018/03/29 11:12:15 executing program 0: r0 = perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x4a, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffff9c, 0xc00caee0, &(0x7f0000000180)={0x0, r0, 0x1}) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) fcntl$getownex(r0, 0x10, &(0x7f0000000400)={0x0, 0x0}) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0xffff, 0xe3, 0x6, 0x4, 0x0, 0x7, 0x0, 0x2, 0x10001, 0x1, 0x7, 0x8, 0x100, 0x4, 0x0, 0x7f, 0x20, 0x0, 0x4, 0x5, 0x90a4, 0x7, 0x2, 0x73, 0x8, 0x7, 0x4, 0x7e0, 0x101, 0x0, 0x2, 0x309, 0x0, 0x9, 0xfffffffffffffff9, 0x9, 0x0, 0x4, 0x0, @perf_config_ext={0x20, 0x1}, 0x8140, 0x2, 0x0, 0x4, 0xca1, 0xb5}, r4, 0x0, r1, 0x8) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) futimesat(r1, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0)={{r2, r3/1000+10000}, {r5, r6/1000+10000}}) unshare(0x8000000) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0xdc, 0x40}, 0x341) r8 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8910, &(0x7f0000000080)=@buf={0x0, &(0x7f0000000000)}) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x13, &(0x7f0000000ffc), 0x4) mq_open(&(0x7f00000000c0)='syzkaller0\x00', 0x40, 0x8, &(0x7f0000000100)={0x5, 0x80000000, 0x0, 0xfffffffffffffff9, 0x1, 0xfffffffffffffffd, 0x7fff, 0x200}) socket$inet_tcp(0x2, 0x1, 0x0) r9 = dup3(r8, r7, 0x80000) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r9, 0x84, 0x66, &(0x7f00000002c0)={0x0, 0x8ed6}, &(0x7f0000000300)=0x1) bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) shmget(0xffffffffffffffff, 0x8000, 0x49b, &(0x7f0000ff8000/0x8000)=nil) ioctl$sock_inet_SIOCGIFPFLAGS(r8, 0x8935, &(0x7f0000000080)={'syzkaller0\x00'}) ppoll(&(0x7f0000000780)=[{r1, 0x300}, {r1, 0x8401}], 0x2, &(0x7f00000007c0)={0x77359400}, &(0x7f0000000800)={0x9}, 0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000280)={0x0, 0x0, 0x9}, 0x10) r10 = semget$private(0x0, 0x4, 0x0) semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0x0, 0x1000}], 0x1, &(0x7f0000000080)={0x0, 0x1c9c380}) semctl$IPC_RMID(r10, 0x0, 0x0) 2018/03/29 11:12:15 executing program 2 (fault-call:21 fault-nth:34): r0 = syz_open_procfs(0x0, &(0x7f00000004c0)='oom_score_adj\x00') perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x49, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(r0, 0x0, 0x83, &(0x7f0000001800)={'nat\x00', 0x0, 0x3, 0x1000, [], 0x2, &(0x7f0000001280)=[{}, {}], &(0x7f0000002040)=""/4096}, &(0x7f00000013c0)=0x78) ioprio_get$pid(0x0, 0x0) timer_create(0x0, &(0x7f0000cd0000), &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00004b1fe0)={{0x0, 0x1c9c380}, {0x0, 0x9}}, &(0x7f0000040000)) r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x7fff) truncate(&(0x7f0000001180)='./bus\x00', 0x4) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000f40000)='/dev/ptmx\x00', 0x200000000101002, 0x0) sendfile(r2, 0xffffffffffffffff, &(0x7f00000010c0), 0x10000065) sendfile(r0, r1, &(0x7f0000000000), 0x4) tkill(0x0, 0x0) r3 = memfd_create(&(0x7f0000000000)='\x00', 0x1) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000001200)) recvmsg(0xffffffffffffff9c, &(0x7f0000001500)={&(0x7f00000012c0)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @remote}}}, 0x80, &(0x7f0000001400)=[{&(0x7f0000001340)=""/103, 0x67}], 0x1, &(0x7f0000001440)=""/155, 0x9b}, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000001540)) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000001640)={0x1ff, {0x2, 0x4e21}, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, {0x2, 0x0, @multicast2=0xe0000002}, 0x0, 0x9, 0x2, 0x6, 0x0, &(0x7f0000001240)='teql0\x00', 0x0, 0x80}) inotify_rm_watch(0xffffffffffffffff, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000140), &(0x7f0000000100)=0xffffffa4) getgroups(0x1, &(0x7f0000001600)=[0x0]) syz_fuseblk_mount(&(0x7f0000001740)='./file0\x00', &(0x7f0000001780)='./file0\x00', 0x0, 0x0, 0xffffffffffffffff, 0x3ff, 0x1, 0x0) getpgrp(0xffffffffffffffff) getegid() sendmmsg$unix(r3, &(0x7f0000001880), 0x0, 0x0) setsockopt$netrom_NETROM_T4(0xffffffffffffffff, 0x103, 0x6, &(0x7f00000017c0), 0xfffffffffffffc77) readv(0xffffffffffffffff, &(0x7f000004ffe0), 0x0) 2018/03/29 11:12:15 executing program 1: io_setup(0x3, &(0x7f0000000000)=0x0) accept$unix(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000100)=0x6e) r1 = syz_open_dev$usbmon(&(0x7f0000000200)='/dev/usbmon#\x00', 0x0, 0x0) io_cancel(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0xf, 0x3, 0xffffffffffffffff, &(0x7f0000000140)="940c1f2149747e7734510c34c143183667a187dc4f624f6c2de12452792a6fb529e6bf2a661dc23a844b00925c244a9f2967c0ca9868ee50eacf67a2ad7681d82f5a38cbd6d7641f843fa129e00f701fb01835f497b53672b3e5a3f6838f28aa240bf21eb5e5cbe7804fd307404474ae0242f8dea7a08e0fe9479b06f2795f857f8eec271d35ba7f61a91c87296814189cc1dfc9c659cc5437452a0bd178323c50e8c005ba7fa9519b27965c9f6ffbc7dcaa8e658616cc83188fb131a703222d", 0xc0, 0x5, 0x0, 0x1}, &(0x7f0000000280)) io_getevents(r0, 0x2, 0x8f, &(0x7f0000d83f60)=[{}, {}], &(0x7f00005cfff0)={0x4000000000001, 0x7}) io_getevents(r0, 0x0, 0x5, &(0x7f00000002c0)=[{}, {}, {}, {}, {}], &(0x7f00000003c0)) io_setup(0x7, &(0x7f0000000040)) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/route\x00') ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000440)=0x0) perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x4a, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ef4}, r3, 0x0, 0xffffffffffffffff, 0x1) pread64(r2, &(0x7f0000000000)=""/85, 0xfe42, 0x5d) r4 = memfd_create(&(0x7f0000000240)=':+lo#\x00', 0x0) fdatasync(r4) io_submit(r0, 0x1, &(0x7f0000001280)=[&(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f0000000100)}]) timerfd_create(0x7, 0x80800) io_destroy(r0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x9, &(0x7f0000000380)=0x3, 0x4) 2018/03/29 11:12:15 executing program 3: io_setup(0x3, &(0x7f0000000000)=0x0) r1 = accept$unix(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000100)=0x6e) r2 = syz_open_dev$usbmon(&(0x7f0000000200)='/dev/usbmon#\x00', 0x7ff, 0x0) io_cancel(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0xf, 0x0, 0xffffffffffffffff, &(0x7f0000000140)="940c1f2149747e7734510c34c143183667a187dc4f624f6c2de12452792a6fb529e6bf2a661dc23a844b00925c244a9f2967c0ca9868ee50eacf67a2ad7681d82f5a38cbd6d7641f843fa129e00f701fb01835f497b53672b3e5a3f6838f28aa240bf21eb5e5cbe7804fd307404474ae0242f8dea7a08e0fe9479b06f2795f857f8eec271d35ba7f61a91c87296814189cc1dfc9c659cc5437452a0bd178323c50e8c005ba7fa9519b27965c9f6ffbc7dcaa8e658616cc83188fb131a703222d", 0xc0, 0x5, 0x0, 0x1, r2}, &(0x7f0000000280)) io_getevents(r0, 0x2, 0x8f, &(0x7f0000d83f60)=[{}, {}], &(0x7f00005cfff0)={0x4000000000001, 0x7}) io_getevents(r0, 0x0, 0x5, &(0x7f00000002c0)=[{}, {}, {}, {}, {}], &(0x7f00000003c0)) io_setup(0x7, &(0x7f0000000040)) r3 = getpid() r4 = syz_open_procfs(r3, &(0x7f00000001c0)='net/route\x00') ioctl$TIOCGPGRP(r4, 0x540f, &(0x7f0000000440)=0x0) perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x4a, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ef4}, r5, 0x0, r2, 0x1) syz_open_dev$sndpcmc(&(0x7f0000000500)='/dev/snd/pcmC#D#c\x00', 0x2000, 0x200) pread64(r4, &(0x7f0000000000)=""/85, 0xfe42, 0x5d) getsockopt$IP_VS_SO_GET_INFO(r1, 0x0, 0x481, &(0x7f0000000480), &(0x7f00000004c0)=0xc) r6 = memfd_create(&(0x7f0000000240)=':+lo#\x00', 0x0) fdatasync(r6) io_submit(r0, 0x1, &(0x7f0000001280)=[&(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, 0x0, r6, &(0x7f0000000100)}]) io_destroy(r0) setsockopt$llc_int(r2, 0x10c, 0x9, &(0x7f0000000380)=0x3, 0x4) epoll_ctl$EPOLL_CTL_DEL(r4, 0x2, 0xffffffffffffffff) 2018/03/29 11:12:15 executing program 6: openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x0, 0x0) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, &(0x7f0000000340)=0x1) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f000051cff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000943ffc)=0xa35) read(r0, &(0x7f00003fefff)=""/1, 0x1) r1 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000029000)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r0, &(0x7f0000dcdff0)=[{&(0x7f0000cd8000)=""/1, 0x1}], 0x1) ioctl$int_in(r2, 0x5452, &(0x7f0000b28000)=0x3c) write$cgroup_type(0xffffffffffffffff, &(0x7f00000002c0)='threaded\x00', 0x9) syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x0, 0x802) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000fb9000)) fcntl$setsig(r2, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r3}], 0x1, 0xfffffffffffffff8) read$eventfd(0xffffffffffffffff, &(0x7f0000000040), 0x8) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000080)) r4 = dup2(r2, r3) fcntl$setown(r4, 0x8, r1) ptrace$cont(0xffffffffffffffff, r1, 0x0, 0x8) tkill(r1, 0x16) r5 = gettid() process_vm_readv(r5, &(0x7f0000001880)=[{&(0x7f0000000680)=""/198, 0xc6}, {&(0x7f0000000780)=""/247, 0xf7}, {&(0x7f0000000380)=""/12, 0xc}, {&(0x7f00000003c0)=""/6, 0x6}, {&(0x7f0000000400)=""/14, 0xe}], 0x5, &(0x7f00000019c0)=[{&(0x7f0000001900)=""/41, 0x29}, {&(0x7f0000001940)=""/112, 0x70}], 0x2, 0x0) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f0000000240)={{{@in6}}, {{@in=@local}, 0x0, @in=@local}}, &(0x7f0000000100)=0xe8) 2018/03/29 11:12:15 executing program 7: io_setup(0x3, &(0x7f0000000000)=0x0) accept$unix(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000100)=0x6e) r1 = syz_open_dev$usbmon(&(0x7f0000000200)='/dev/usbmon#\x00', 0x7ff, 0x0) io_cancel(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0xf, 0x3, 0xffffffffffffffff, &(0x7f0000000140)="940c1f2149747e7734510c34c143183667a187dc4f624f6c2de12452792a6fb529e6bf2a661dc23a844b00925c244a9f2967c0ca9868ee50eacf67a2ad7681d82f5a38cbd6d7641f843fa129e00f701fb01835f497b53672b3e5a3f6838f28aa240bf21eb5e5cbe7804fd307404474ae0242f8dea7a08e0fe9479b06f2795f857f8eec271d35ba7f61a91c87296814189cc1dfc9c659cc5437452a0bd178323c50e8c005ba7fa9519b27965c9f6ffbc7dcaa8e658616cc83188fb131a703222d", 0xc0, 0x5, 0x0, 0x1}, &(0x7f0000000280)) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000480)={{{@in=@broadcast, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@multicast2}}, &(0x7f0000000580)=0xe8) ioctl$TUNSETOWNER(r1, 0x400454cc, r2) io_getevents(r0, 0x2, 0x8f, &(0x7f0000d83f60)=[{}, {}], &(0x7f00005cfff0)={0x4000000000001, 0x7}) io_getevents(r0, 0x0, 0x5, &(0x7f00000002c0)=[{}, {}, {}, {}, {}], &(0x7f00000003c0)) io_setup(0x7, &(0x7f0000000040)) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/route\x00') ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f0000000440)=0x0) r5 = perf_event_open(&(0x7f0000aaa000)={0x0, 0x70, 0x4a, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ef4}, r4, 0x0, 0xffffffffffffffff, 0x1) pread64(r3, &(0x7f0000000000)=""/85, 0xfe42, 0x5d) r6 = memfd_create(&(0x7f0000000240)=':+lo#\x00', 0x0) fdatasync(r5) io_submit(r0, 0x1, &(0x7f0000001280)=[&(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, 0x0, r6, &(0x7f0000000100)}]) timerfd_create(0x7, 0x80800) io_destroy(r0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x9, &(0x7f0000000380)=0x3, 0x4) 2018/03/29 11:12:15 executing program 5: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) mkdir(&(0x7f0000000000)='./file1\x00', 0x0) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000811ffa)='bdev\x00', 0x0, &(0x7f0000444000)) mount(&(0x7f0000fb6000)='./file0\x00', &(0x7f0000d78000)='.', &(0x7f0000fdb000)='ubifs\x00', 0x1003, 0x0) mount(&(0x7f00002b9ff8)='./file0\x00', &(0x7f0000cbeff8)='./file0\x00', &(0x7f00005f7ffa)='ramfs\x00', 0x80000, &(0x7f000002f000)) mount(&(0x7f0000000040)='.', &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0)='binfmt_misc\x00', 0x0, &(0x7f0000000100)) mount(&(0x7f0000000480)='./file1\x00', &(0x7f00000004c0)='.', &(0x7f0000000140)='es\x00', 0x5010, &(0x7f0000000300)="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") mount(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./file1\x00', &(0x7f0000000200)='anon_inodefs\x00', 0x2000, &(0x7f0000000240)) mount(&(0x7f0000adcff8)='./file0\x00', &(0x7f0000e08fff)='.', &(0x7f00005e9000)='cifs\x00', 0x2000, &(0x7f0000ad5000)) [ 335.226952] FAULT_INJECTION: forcing a failure. [ 335.226952] name failslab, interval 1, probability 0, space 0, times 0 [ 335.238318] CPU: 1 PID: 9626 Comm: syz-executor2 Not tainted 4.16.0-rc7+ #5 [ 335.245419] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 335.254774] Call Trace: [ 335.257374] dump_stack+0x194/0x24d [ 335.261016] ? arch_local_irq_restore+0x53/0x53 [ 335.265691] ? __save_stack_trace+0x7e/0xd0 [ 335.270033] should_fail+0x8c0/0xa40 [ 335.273768] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 335.278862] ? kasan_kmalloc+0xad/0xe0 [ 335.282739] ? kmem_cache_alloc_trace+0x136/0x740 [ 335.287577] ? __memcg_init_list_lru_node+0x169/0x270 [ 335.292767] ? __list_lru_init+0x544/0x750 [ 335.297006] ? sget_userns+0x6b1/0xe40 [ 335.300899] ? mount_fs+0x66/0x2d0 [ 335.304441] ? vfs_kern_mount.part.26+0xc6/0x4a0 [ 335.309191] ? do_mount+0xea4/0x2bb0 [ 335.312903] ? SyS_mount+0xab/0x120 [ 335.316508] ? do_syscall_64+0x281/0x940 [ 335.320548] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7 2018/03/29 11:12:15 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) readv(r0, &(0x7f0000001480)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1) mount(&(0x7f0000001680)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f", &(0x7f0000001600)='./file0\x00', &(0x7f0000001700)='v7\x00', 0x10000, &(0x7f0000001740)="6a18e9fcd06e3b367694ee6338ce2efd81693db4889c68ac48bc65d4869f52cda01e4c6825076e094d670b29c720a57f9a40250faee06ed4d23afe1083da875430d411cbe7955df47f25f5c9322efe10063b1a6b48d0dbb069b19ffed799ed1203d96877f1a0087dd7aa21a2a239785cdd647f1029f4aba0f8e23ce910ab0ecde09a7a177adeccf304e42cac2290994764fd15ff2220ab1cc0b56909af6818b3ada51a7221506287189c8eb4fd3cb47252b4957811ace24507953caa47d7c2ddcef21bb6917e") ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x3}) r1 = syz_open_pts(r0, 0x2) r2 = dup3(r1, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000c34fff), 0xffffff0b) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001640)='./cgroup\x00', 0x200002, 0x0) preadv(r3, &(0x7f00000004c0)=[{&(0x7f0000000480)=""/21, 0x15}], 0x1, 0x0) fchdir(0xffffffffffffffff) mkdir(&(0x7f0000000280)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f", 0xfffffffffffffffc) fchmod(r2, 0x0) splice(r3, &(0x7f0000000400), 0xffffffffffffffff, &(0x7f0000000440), 0x9, 0x2) rename(&(0x7f0000001e00)='./file0\x00', &(0x7f0000000100)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f") mkdir(&(0x7f000000e000)='./control\x00', 0x0) r4 = open(&(0x7f0000000000)='./control\x00', 0x0, 0x0) renameat2(r4, &(0x7f0000000040)='./file0\x00', r4, &(0x7f0000000080)='./control\x00', 0x2) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000300)={0x0, 0x80}, &(0x7f0000000340)=0x8) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000380)={r5, 0x5}, &(0x7f00000003c0)=0x8) setsockopt$inet6_group_source_req(r2, 0x29, 0x2b, &(0x7f00000014c0)={0x8, {{0xa, 0x4e23, 0x5609eb34, @loopback={0x0, 0x1}, 0x4}}, {{0xa, 0x4e20, 0x9, @dev={0xfe, 0x80, [], 0xe}, 0x4}}}, 0x108) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000200)={r5, 0x4}, &(0x7f0000000240)=0x8) mknodat(r4, &(0x7f000003f000)='./control\x00', 0x0, 0x0) listen(r4, 0x6) symlink(&(0x7f0000000180)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f", &(0x7f00000000c0)='./file0\x00') perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(r4, &(0x7f0000010000)='./control\x00', &(0x7f000003f000), &(0x7f0000001fe8), 0x0) [ 335.325907] ? find_held_lock+0x35/0x1d0 [ 335.329971] ? __lock_is_held+0xb6/0x140 [ 335.334051] ? check_same_owner+0x320/0x320 [ 335.338370] ? rcu_note_context_switch+0x710/0x710 [ 335.343311] should_failslab+0xec/0x120 [ 335.347279] kmem_cache_alloc_trace+0x4b/0x740 [ 335.351850] ? __kmalloc_node+0x33/0x70 [ 335.355814] ? __kmalloc_node+0x33/0x70 [ 335.359798] ? rcu_read_lock_sched_held+0x108/0x120 [ 335.364815] __memcg_init_list_lru_node+0x169/0x270 [ 335.369820] ? list_lru_add+0x7c0/0x7c0 [ 335.373789] ? __kmalloc_node+0x47/0x70 2018/03/29 11:12:15 executing program 6: openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x0, 0x0) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, &(0x7f0000000340)=0x1) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f000051cff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000943ffc)=0xa35) read(r0, &(0x7f00003fefff)=""/1, 0x1) r1 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000029000)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r0, &(0x7f0000dcdff0)=[{&(0x7f0000cd8000)=""/1, 0x1}], 0x1) ioctl$int_in(r2, 0x5452, &(0x7f0000b28000)=0x3c) write$cgroup_type(0xffffffffffffffff, &(0x7f00000002c0)='threaded\x00', 0x9) syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x0, 0x802) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000fb9000)) fcntl$setsig(r2, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r3}], 0x1, 0xfffffffffffffff8) read$eventfd(0xffffffffffffffff, &(0x7f0000000040), 0x8) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000080)) r4 = dup2(r2, r3) fcntl$setown(r4, 0x8, r1) ptrace$cont(0xffffffffffffffff, r1, 0x0, 0x8) tkill(r1, 0x16) r5 = gettid() process_vm_readv(r5, &(0x7f0000001880)=[{&(0x7f0000000680)=""/198, 0xc6}, {&(0x7f0000000780)=""/247, 0xf7}, {&(0x7f0000000380)=""/12, 0xc}, {&(0x7f00000003c0)=""/6, 0x6}, {&(0x7f0000000400)=""/14, 0xe}], 0x5, &(0x7f00000019c0)=[{&(0x7f0000001900)=""/41, 0x29}, {&(0x7f0000001940)=""/112, 0x70}], 0x2, 0x0) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f0000000240)={{{@in6}}, {{@in=@local}, 0x0, @in=@local}}, &(0x7f0000000100)=0xe8) [ 335.377760] __list_lru_init+0x544/0x750 [ 335.381820] ? memcg_destroy_list_lru_node.isra.7+0x110/0x110 [ 335.387705] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 335.392739] ? lockdep_init_map+0x9/0x10 [ 335.396803] sget_userns+0x6b1/0xe40 [ 335.400510] ? kill_litter_super+0x90/0x90 [ 335.404743] ? ns_test_super+0x50/0x50 [ 335.408613] ? destroy_unused_super.part.6+0xd0/0xd0 [ 335.413694] ? do_raw_spin_trylock+0x190/0x190 [ 335.418260] ? kobject_put+0x6b/0x250 [ 335.422062] ? blkdev_get+0x3a1/0xb00 [ 335.425855] ? cap_capable+0x1b5/0x230 [ 335.429726] ? __blkdev_get+0x13b0/0x13b0 [ 335.433870] ? security_capable+0x8e/0xc0 [ 335.438012] ? kill_litter_super+0x90/0x90 [ 335.442232] ? ns_capable_common+0xcf/0x160 [ 335.446534] ? ns_test_super+0x50/0x50 [ 335.450405] ? kill_litter_super+0x90/0x90 [ 335.454631] sget+0xd2/0x120 [ 335.457664] mount_bdev+0x109/0x370 [ 335.461282] ? fuse_get_root_inode+0x190/0x190 [ 335.465854] fuse_mount_blk+0x34/0x40 [ 335.469648] mount_fs+0x66/0x2d0 [ 335.473017] vfs_kern_mount.part.26+0xc6/0x4a0 2018/03/29 11:12:15 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) readv(r0, &(0x7f0000001480)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x3}) r1 = syz_open_pts(r0, 0x2) r2 = dup3(r1, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000c34fff), 0xffffff0b) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0) preadv(r3, &(0x7f00000004c0)=[{&(0x7f0000000480)=""/21, 0x15}], 0x1, 0x0) fchdir(0xffffffffffffffff) mkdir(&(0x7f0000000280)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f", 0xfffffffffffffffc) fchmod(r2, 0x0) splice(r3, &(0x7f0000000400), 0xffffffffffffffff, &(0x7f0000000440), 0x9, 0x2) rename(&(0x7f0000001e00)='./file0\x00', &(0x7f0000000100)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f") mkdir(&(0x7f000000e000)='./control\x00', 0x0) r4 = open(&(0x7f0000000000)='./control\x00', 0x0, 0x0) renameat2(r4, &(0x7f0000000040)='./file0\x00', r4, &(0x7f0000000080)='./control\x00', 0x2) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000300)={0x0, 0x80}, &(0x7f0000000340)=0x8) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000380)={r5, 0x5}, &(0x7f00000003c0)=0x8) mknodat(r4, &(0x7f000003f000)='./control\x00', 0x0, 0x0) symlink(&(0x7f0000000180)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f", &(0x7f00000000c0)='./file0\x00') execveat(r4, &(0x7f0000010000)='./control\x00', &(0x7f000003f000), &(0x7f0000001fe8), 0x0) [ 335.477588] ? may_umount+0xa0/0xa0 [ 335.481194] ? _raw_read_unlock+0x22/0x30 [ 335.485317] ? __get_fs_type+0x8a/0xc0 [ 335.489199] do_mount+0xea4/0x2bb0 [ 335.492747] ? copy_mount_string+0x40/0x40 [ 335.496972] ? rcu_pm_notify+0xc0/0xc0 [ 335.500868] ? copy_mount_options+0x5f/0x2e0 [ 335.505272] ? rcu_read_lock_sched_held+0x108/0x120 [ 335.510279] ? kmem_cache_alloc_trace+0x459/0x740 [ 335.515103] ? kasan_check_write+0x14/0x20 [ 335.519326] ? _copy_from_user+0x99/0x110 [ 335.523468] ? copy_mount_options+0x1f7/0x2e0 2018/03/29 11:12:16 executing program 6: openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x0, 0x0) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, &(0x7f0000000340)=0x1) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f000051cff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000943ffc)=0xa35) read(r0, &(0x7f00003fefff)=""/1, 0x1) r1 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000029000)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r0, &(0x7f0000dcdff0)=[{&(0x7f0000cd8000)=""/1, 0x1}], 0x1) ioctl$int_in(r2, 0x5452, &(0x7f0000b28000)=0x3c) write$cgroup_type(0xffffffffffffffff, &(0x7f00000002c0)='threaded\x00', 0x9) syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x0, 0x802) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000fb9000)) fcntl$setsig(r2, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r3}], 0x1, 0xfffffffffffffff8) read$eventfd(0xffffffffffffffff, &(0x7f0000000040), 0x8) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000080)) r4 = dup2(r2, r3) fcntl$setown(r4, 0x8, r1) ptrace$cont(0xffffffffffffffff, r1, 0x0, 0x8) tkill(r1, 0x16) r5 = gettid() process_vm_readv(r5, &(0x7f0000001880)=[{&(0x7f0000000680)=""/198, 0xc6}, {&(0x7f0000000780)=""/247, 0xf7}, {&(0x7f0000000380)=""/12, 0xc}, {&(0x7f00000003c0)=""/6, 0x6}, {&(0x7f0000000400)=""/14, 0xe}], 0x5, &(0x7f00000019c0)=[{&(0x7f0000001900)=""/41, 0x29}, {&(0x7f0000001940)=""/112, 0x70}], 0x2, 0x0) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f0000000240)={{{@in6}}, {{@in=@local}, 0x0, @in=@local}}, &(0x7f0000000100)=0xe8) [ 335.527944] SyS_mount+0xab/0x120 [ 335.531383] ? copy_mnt_ns+0xb30/0xb30 [ 335.535274] do_syscall_64+0x281/0x940 [ 335.539148] ? __do_page_fault+0xc90/0xc90 [ 335.543378] ? _raw_spin_unlock_irq+0x27/0x70 [ 335.547853] ? finish_task_switch+0x1c1/0x7e0 [ 335.552338] ? syscall_return_slowpath+0x550/0x550 [ 335.557263] ? syscall_return_slowpath+0x2ac/0x550 [ 335.562186] ? prepare_exit_to_usermode+0x350/0x350 [ 335.567192] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 335.572558] ? trace_hardirqs_off_thunk+0x1a/0x1c 2018/03/29 11:12:16 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) readv(r0, &(0x7f0000001480)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x3}) r1 = syz_open_pts(r0, 0x2) r2 = dup3(r1, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000c34fff), 0xffffff0b) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0) preadv(r3, &(0x7f00000004c0)=[{&(0x7f0000000480)=""/21, 0x15}], 0x1, 0x0) fchdir(0xffffffffffffffff) mkdir(&(0x7f0000000280)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f", 0xfffffffffffffffc) fchmod(r2, 0x0) splice(r3, &(0x7f0000000400), 0xffffffffffffffff, &(0x7f0000000440), 0x9, 0x2) rename(&(0x7f0000001e00)='./file0\x00', &(0x7f0000000100)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f") mkdir(&(0x7f000000e000)='./control\x00', 0x0) ioctl$KDDISABIO(r1, 0x4b37) r4 = open(&(0x7f0000000240)='./control\x00', 0x0, 0x2000000000) renameat2(r4, &(0x7f0000000040)='./file0\x00', r4, &(0x7f0000000080)='./control\x00', 0x2) openat$cgroup_int(r3, &(0x7f0000000200)='cpu.weight.nice\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000300)={0x0, 0x80}, &(0x7f0000000340)=0x8) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000380)={r5, 0x5}, &(0x7f00000003c0)=0x8) mknodat(r4, &(0x7f000003f000)='./control\x00', 0x0, 0x0) ioctl$KIOCSOUND(r4, 0x4b2f, 0x0) symlink(&(0x7f0000000180)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f", &(0x7f00000000c0)='./file0\x00') perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(r4, &(0x7f0000010000)='./control\x00', &(0x7f000003f000), &(0x7f0000001fe8), 0x0) [ 335.577410] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 335.582583] RIP: 0033:0x4548b9 [ 335.585748] RSP: 002b:00007f032fc57b08 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 335.593440] RAX: ffffffffffffffda RBX: 0000000000000019 RCX: 00000000004548b9 [ 335.600706] RDX: 00000000004b9225 RSI: 0000000020001740 RDI: 0000000020001780 [ 335.607970] RBP: 0000000020001780 R08: 00007f032fc57b20 R09: 0000000000000000 [ 335.615233] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 2018/03/29 11:12:16 executing program 0: r0 = perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x4a, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffff9c, 0xc00caee0, &(0x7f0000000180)={0x0, r0, 0x1}) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) fcntl$getownex(r0, 0x10, &(0x7f0000000400)={0x0, 0x0}) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0xffff, 0xe3, 0x6, 0x4, 0x0, 0x7, 0x0, 0x2, 0x10001, 0x1, 0x7, 0x8, 0x100, 0x4, 0x0, 0x7f, 0x20, 0x0, 0x4, 0x5, 0x90a4, 0x7, 0x2, 0x73, 0x8, 0x7, 0x4, 0x7e0, 0x101, 0x0, 0x2, 0x309, 0x0, 0x9, 0xfffffffffffffff9, 0x9, 0x0, 0x4, 0x0, @perf_config_ext={0x20, 0x1}, 0x8140, 0x2, 0x0, 0x4, 0xca1, 0xb5}, r4, 0x0, r1, 0x8) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) futimesat(r1, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0)={{r2, r3/1000+10000}, {r5, r6/1000+10000}}) unshare(0x8000000) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0xdc, 0x40}, 0x341) r8 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8910, &(0x7f0000000080)=@buf={0x0, &(0x7f0000000000)}) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x13, &(0x7f0000000ffc), 0x4) mq_open(&(0x7f00000000c0)='syzkaller0\x00', 0x40, 0x8, &(0x7f0000000100)={0x5, 0x80000000, 0x0, 0xfffffffffffffff9, 0x1, 0xfffffffffffffffd, 0x7fff, 0x200}) socket$inet_tcp(0x2, 0x1, 0x0) r9 = dup3(r8, r7, 0x80000) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r9, 0x84, 0x66, &(0x7f00000002c0)={0x0, 0x8ed6}, &(0x7f0000000300)=0x1) bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) shmget(0xffffffffffffffff, 0x8000, 0x49b, &(0x7f0000ff8000/0x8000)=nil) ioctl$sock_inet_SIOCGIFPFLAGS(r8, 0x8935, &(0x7f0000000080)={'syzkaller0\x00'}) ppoll(&(0x7f0000000780)=[{r1, 0x300}, {r1, 0x8401}], 0x2, &(0x7f00000007c0)={0x77359400}, &(0x7f0000000800)={0x9}, 0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000280)={0x0, 0x0, 0x9}, 0x10) r10 = semget$private(0x0, 0x4, 0x0) semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0x0, 0x1000}], 0x1, &(0x7f0000000080)={0x0, 0x1c9c380}) semctl$IPC_RMID(r10, 0x0, 0x0) 2018/03/29 11:12:16 executing program 2 (fault-call:21 fault-nth:35): r0 = syz_open_procfs(0x0, &(0x7f00000004c0)='oom_score_adj\x00') perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x49, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(r0, 0x0, 0x83, &(0x7f0000001800)={'nat\x00', 0x0, 0x3, 0x1000, [], 0x2, &(0x7f0000001280)=[{}, {}], &(0x7f0000002040)=""/4096}, &(0x7f00000013c0)=0x78) ioprio_get$pid(0x0, 0x0) timer_create(0x0, &(0x7f0000cd0000), &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00004b1fe0)={{0x0, 0x1c9c380}, {0x0, 0x9}}, &(0x7f0000040000)) r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x7fff) truncate(&(0x7f0000001180)='./bus\x00', 0x4) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000f40000)='/dev/ptmx\x00', 0x200000000101002, 0x0) sendfile(r2, 0xffffffffffffffff, &(0x7f00000010c0), 0x10000065) sendfile(r0, r1, &(0x7f0000000000), 0x4) tkill(0x0, 0x0) r3 = memfd_create(&(0x7f0000000000)='\x00', 0x1) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000001200)) recvmsg(0xffffffffffffff9c, &(0x7f0000001500)={&(0x7f00000012c0)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @remote}}}, 0x80, &(0x7f0000001400)=[{&(0x7f0000001340)=""/103, 0x67}], 0x1, &(0x7f0000001440)=""/155, 0x9b}, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000001540)) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000001640)={0x1ff, {0x2, 0x4e21}, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, {0x2, 0x0, @multicast2=0xe0000002}, 0x0, 0x9, 0x2, 0x6, 0x0, &(0x7f0000001240)='teql0\x00', 0x0, 0x80}) inotify_rm_watch(0xffffffffffffffff, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000140), &(0x7f0000000100)=0xffffffa4) getgroups(0x1, &(0x7f0000001600)=[0x0]) syz_fuseblk_mount(&(0x7f0000001740)='./file0\x00', &(0x7f0000001780)='./file0\x00', 0x0, 0x0, 0xffffffffffffffff, 0x3ff, 0x1, 0x0) getpgrp(0xffffffffffffffff) getegid() sendmmsg$unix(r3, &(0x7f0000001880), 0x0, 0x0) setsockopt$netrom_NETROM_T4(0xffffffffffffffff, 0x103, 0x6, &(0x7f00000017c0), 0xfffffffffffffc77) readv(0xffffffffffffffff, &(0x7f000004ffe0), 0x0) [ 335.622496] R13: 00000000000003ff R14: 0000000000000000 R15: ffffffffffffffff [ 335.663185] FAULT_INJECTION: forcing a failure. [ 335.663185] name failslab, interval 1, probability 0, space 0, times 0 [ 335.674522] CPU: 1 PID: 9675 Comm: syz-executor2 Not tainted 4.16.0-rc7+ #5 [ 335.681660] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 335.690991] Call Trace: [ 335.693565] dump_stack+0x194/0x24d [ 335.697174] ? arch_local_irq_restore+0x53/0x53 [ 335.701818] ? __save_stack_trace+0x7e/0xd0 [ 335.706126] should_fail+0x8c0/0xa40 [ 335.709821] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 335.714903] ? kasan_kmalloc+0xad/0xe0 [ 335.718766] ? kmem_cache_alloc_trace+0x136/0x740 [ 335.723583] ? __memcg_init_list_lru_node+0x169/0x270 [ 335.728745] ? __list_lru_init+0x544/0x750 [ 335.732954] ? sget_userns+0x6b1/0xe40 [ 335.736819] ? mount_fs+0x66/0x2d0 [ 335.740334] ? vfs_kern_mount.part.26+0xc6/0x4a0 [ 335.745063] ? do_mount+0xea4/0x2bb0 [ 335.748750] ? SyS_mount+0xab/0x120 [ 335.752351] ? do_syscall_64+0x281/0x940 [ 335.756387] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 335.761733] ? find_held_lock+0x35/0x1d0 [ 335.765780] ? __lock_is_held+0xb6/0x140 [ 335.769837] ? check_same_owner+0x320/0x320 [ 335.774142] ? rcu_note_context_switch+0x710/0x710 [ 335.779060] should_failslab+0xec/0x120 [ 335.783018] kmem_cache_alloc_trace+0x4b/0x740 [ 335.787578] ? __kmalloc_node+0x33/0x70 [ 335.791527] ? __kmalloc_node+0x33/0x70 [ 335.795478] ? rcu_read_lock_sched_held+0x108/0x120 [ 335.800479] __memcg_init_list_lru_node+0x169/0x270 [ 335.805478] ? list_lru_add+0x7c0/0x7c0 [ 335.809429] ? __kmalloc_node+0x47/0x70 [ 335.813386] __list_lru_init+0x544/0x750 [ 335.817431] ? memcg_destroy_list_lru_node.isra.7+0x110/0x110 [ 335.823294] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 335.828294] ? lockdep_init_map+0x9/0x10 [ 335.832334] sget_userns+0x6b1/0xe40 [ 335.836027] ? kill_litter_super+0x90/0x90 [ 335.840245] ? ns_test_super+0x50/0x50 [ 335.844110] ? destroy_unused_super.part.6+0xd0/0xd0 [ 335.849187] ? do_raw_spin_trylock+0x190/0x190 [ 335.853750] ? kobject_put+0x6b/0x250 [ 335.857534] ? blkdev_get+0x3a1/0xb00 [ 335.861319] ? cap_capable+0x1b5/0x230 [ 335.865182] ? __blkdev_get+0x13b0/0x13b0 [ 335.869309] ? security_capable+0x8e/0xc0 [ 335.873434] ? kill_litter_super+0x90/0x90 [ 335.877646] ? ns_capable_common+0xcf/0x160 [ 335.881945] ? ns_test_super+0x50/0x50 [ 335.885806] ? kill_litter_super+0x90/0x90 [ 335.890021] sget+0xd2/0x120 [ 335.893030] mount_bdev+0x109/0x370 [ 335.896632] ? fuse_get_root_inode+0x190/0x190 [ 335.901194] fuse_mount_blk+0x34/0x40 [ 335.904974] mount_fs+0x66/0x2d0 [ 335.908320] vfs_kern_mount.part.26+0xc6/0x4a0 [ 335.912883] ? may_umount+0xa0/0xa0 [ 335.916485] ? _raw_read_unlock+0x22/0x30 [ 335.920606] ? __get_fs_type+0x8a/0xc0 [ 335.924482] do_mount+0xea4/0x2bb0 [ 335.928007] ? copy_mount_string+0x40/0x40 [ 335.932224] ? rcu_pm_notify+0xc0/0xc0 [ 335.936097] ? copy_mount_options+0x5f/0x2e0 [ 335.940480] ? rcu_read_lock_sched_held+0x108/0x120 [ 335.945473] ? kmem_cache_alloc_trace+0x459/0x740 [ 335.950295] ? kasan_check_write+0x14/0x20 [ 335.954505] ? _copy_from_user+0x99/0x110 [ 335.958633] ? copy_mount_options+0x1f7/0x2e0 [ 335.963119] SyS_mount+0xab/0x120 [ 335.966546] ? copy_mnt_ns+0xb30/0xb30 [ 335.970415] do_syscall_64+0x281/0x940 [ 335.974275] ? __do_page_fault+0xc90/0xc90 [ 335.978485] ? _raw_spin_unlock_irq+0x27/0x70 [ 335.982956] ? finish_task_switch+0x1c1/0x7e0 [ 335.987429] ? syscall_return_slowpath+0x550/0x550 [ 335.992337] ? syscall_return_slowpath+0x2ac/0x550 [ 335.997247] ? prepare_exit_to_usermode+0x350/0x350 [ 336.002240] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 336.007586] ? trace_hardirqs_off_thunk+0x1a/0x1c 2018/03/29 11:12:16 executing program 1: io_setup(0x3, &(0x7f0000000000)=0x0) accept$unix(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000100)=0x6e) r1 = syz_open_dev$usbmon(&(0x7f0000000200)='/dev/usbmon#\x00', 0x0, 0x0) io_cancel(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0xf, 0x3, 0xffffffffffffffff, &(0x7f0000000140)="940c1f2149747e7734510c34c143183667a187dc4f624f6c2de12452792a6fb529e6bf2a661dc23a844b00925c244a9f2967c0ca9868ee50eacf67a2ad7681d82f5a38cbd6d7641f843fa129e00f701fb01835f497b53672b3e5a3f6838f28aa240bf21eb5e5cbe7804fd307404474ae0242f8dea7a08e0fe9479b06f2795f857f8eec271d35ba7f61a91c87296814189cc1dfc9c659cc5437452a0bd178323c50e8c005ba7fa9519b27965c9f6ffbc7dcaa8e658616cc83188fb131a703222d", 0xc0, 0x5, 0x0, 0x1}, &(0x7f0000000280)) io_getevents(r0, 0x2, 0x8f, &(0x7f0000d83f60)=[{}, {}], &(0x7f00005cfff0)={0x4000000000001, 0x7}) io_getevents(r0, 0x0, 0x5, &(0x7f00000002c0)=[{}, {}, {}, {}, {}], &(0x7f00000003c0)) io_setup(0x7, &(0x7f0000000040)) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/route\x00') ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000440)=0x0) perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x4a, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ef4}, r3, 0x0, 0xffffffffffffffff, 0x1) pread64(r2, &(0x7f0000000000)=""/85, 0xfe42, 0x5d) r4 = memfd_create(&(0x7f0000000240)=':+lo#\x00', 0x0) fdatasync(r4) io_submit(r0, 0x1, &(0x7f0000001280)=[&(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f0000000100)}]) timerfd_create(0x7, 0x80800) io_destroy(r0) setsockopt$llc_int(r1, 0x10c, 0x0, &(0x7f0000000380)=0x3, 0x4) 2018/03/29 11:12:16 executing program 3: io_setup(0x3, &(0x7f0000000000)=0x0) accept$unix(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000100)=0x6e) r1 = syz_open_dev$usbmon(&(0x7f0000000200)='/dev/usbmon#\x00', 0x7ff, 0x0) io_cancel(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0xf, 0x0, 0xffffffffffffffff, &(0x7f0000000140)="940c1f2149747e7734510c34c143183667a187dc4f624f6c2de12452792a6fb529e6bf2a661dc23a844b00925c244a9f2967c0ca9868ee50eacf67a2ad7681d82f5a38cbd6d7641f843fa129e00f701fb01835f497b53672b3e5a3f6838f28aa240bf21eb5e5cbe7804fd307404474ae0242f8dea7a08e0fe9479b06f2795f857f8eec271d35ba7f61a91c87296814189cc1dfc9c659cc5437452a0bd178323c50e8c005ba7fa9519b27965c9f6ffbc7dcaa8e658616cc83188fb131a703222d", 0xc0, 0x5, 0x0, 0x1, r1}, &(0x7f0000000280)) io_getevents(r0, 0x2, 0x8f, &(0x7f0000d83f60)=[{}, {}], &(0x7f00005cfff0)={0x4000000000001, 0x7}) io_getevents(r0, 0x0, 0x5, &(0x7f00000002c0)=[{}, {}, {}, {}, {}], &(0x7f00000003c0)) io_setup(0x7, &(0x7f0000000040)) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/route\x00') getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f0000000480)={0x0, 0x1}, &(0x7f00000004c0)=0x8) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000000500)={r3, 0x100000000, 0x20, 0x9, 0x9}, &(0x7f0000000540)=0x18) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000440)=0x0) perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x4a, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ef4}, r4, 0x0, r1, 0x1) pread64(r2, &(0x7f0000000000)=""/85, 0xfe42, 0x5d) r5 = memfd_create(&(0x7f0000000240)=':+lo#\x00', 0x0) fdatasync(r5) io_submit(r0, 0x1, &(0x7f0000001280)=[&(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, 0x0, r5, &(0x7f0000000100)}]) timerfd_create(0x7, 0x80800) io_destroy(r0) setsockopt$llc_int(r1, 0x10c, 0x9, &(0x7f0000000380)=0x3, 0x4) 2018/03/29 11:12:16 executing program 7: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000580)='/dev/mixer\x00', 0x2001, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000600)='/dev/sequencer2\x00', 0x2, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000640)={&(0x7f00000012c0)={0x26a8, 0x3f, 0x2, 0x70bd27, 0x25dfdbfe, {0x4}, [@nested={0x14, 0x79, [@typed={0x8, 0x72, @u32=0x100000001}, @typed={0x8, 0x1c, @ipv4=@broadcast=0xffffffff}]}, @typed={0x8, 0x5b, @ipv4=@local={0xac, 0x14, 0x14, 0xaa}}, @nested={0x12cc, 0x37, [@generic="35da1fd4073813bfeeeaf84207bb507ba60f14fc61d76a6fe54ea8eddff74abe58326361c20f39edfaa14c285fa97ff238394a86778508400cd00dcfcc3717d6d999f9", @generic="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", @typed={0x8, 0x4, @fd=r1}, @generic="745c39bd06a7eb66885365620e1df428a015ae629eb16854d1bffba0ed118575ee3a2fe26ed657d5ef94edc94455c2dd33c2b3d118ff7c826db931d2d07421c2dfbf347d2ec5f0cd65e1fe0adc9efc9a44169fada99f2c6fadf73c4e4824d4d9de37f800d7ff04238accf73d98e388af02418e295fe2bd021968d1e7c0293cf168276446339d2c4e4c99e43b44cb8975a4d6f7d758967e4058ace92098364658aefeb2709bdca83e5639a3ff9757b17a0015d5", @typed={0x100, 0x42, @binary="c58636b903c3f8846fd54e249b249224c68566baaf3f5393152189ff801f9d9419cf7ec9cfaecb63ce52b0905f3014f1817c7e6920cf66666d1d9e71c81ed4392a989cdfa25cc3fedd0f6b9ca06273aee4dfde14e210642e95a24a762b0a27c7f8f01516b008110be31a9a6034f0d8f2a1e641bcd22097ece87414f225bfbe761c35212a3cb96be6c3b89900e1352b8795e7941a9f6d2c58484ec27539ca38cb84444737b749bef4e84189f83a33121163c3c562f793e848b7615e0960570fd7dece7c210685febaec91f8ce7f8e1d09215aaebc784a76849db93f97efe77f52314e0ce85fa2f336167c5744f0f90a9d051d8eeebd147220d3"}, @generic="a8e9b150e55f4bf41dddfe220da01c87817b8dd09ba6cf1f14ed2f5896ac3345417339bf920b915255ba5ce0e530720e7f5183899168a111f59a18522b52cf3d9a705b4ef64c9bf4635dafdf1f364393ea79539a46c596f6cc46cf70325aa57556071737c79eb93d7e79ba743c2d50e9e9d80c07265af80023c8e432606d41f89591a1363e4c51706eb2317f2c515e36b0d14400f47aae24a686f281012a917528e3e6dffcf1215121465892e09bb3258357bf606b9af3a9d569b212c5a73d2ae54cb888009df2a8"]}, @nested={0x60, 0x8e, [@typed={0x14, 0x54, @ipv6=@dev={0xfe, 0x80, [], 0x19}}, @generic="43ea7eb849738de31a9748eeba92fecf63e40db8a68d15cde47c3d158ec6bc1995aa9f7d4a618c72605226ed7453ff9b003b76710347abb87e39c3", @typed={0xc, 0x64, @u64=0xfffffffffffffffb}]}, @generic="399d39911a92a6b698dc38901a12acd14356a965f5ced5f221d54e0c227565fce3578c5b1d6d36187319217c7e99b9c5cb3f46807f4199e92cdebc2d59697cd10dd096c52cd008866c25d6a523c8afef2bb38510fda029aa8323b3bdb6713fd4199f9ccbc32754840b6e99915950816985cf906cc632d89c91cabeda0603618675ee352b12df2faa1eb85180b0a4b2e774952d5f08711abe3e5a6f425ac5c868b9d3334c3e74e70c2b36222ccabe07a5ecc439c2a6a400ca7b45c67dfb2e9a16968391acf3f214ac58685fde80a50350f2b7a56e05f3da9f2631a7419f0d21ae04d0f708a9dda27163502ecf", @nested={0x1198, 0x8b, [@generic="65b5dad9e87f8460c836b737e4c68056095f2efd6f51610b9e234f1a90d60b8cb1539ef9c67ed7261ef216dcb52d9eb8864206349a004052631ff0f8a8e39fe9c3e90ec0f09b9387e91d61eb79c5c1b5d3a8bee94d7fae24d9b2f20108d3ac228c10fd8e78b61862c7425705554e981084f87a704fb119cfeeb339d6e05eada1a81f52342f87269751dab72a36e11d39f0d3", @typed={0x100, 0x8, @binary="b73cb245124981d36c971ad4036e589d03bcf47da7c0b2c878fae8e6259182ee452b0c20b1d0517145fa26edefcb37cf88e6a97836e8ce1d75f3a9771f45d1774ad40cc4025288550fb663b85ee298eb3f932827ce9ae970da0c6c3c1c4530f793bc5e6ef0b11d81f9fbd4e22e56ffe3e542449ebb68146ac29c0b2035f02e3a0d3a24f677ec29e360da02075cd33763205a96cfdb0f54449440b49cb65a008f2a2ae7952c220e533fed645b666aac2b4ba14222d2cc06ee45a167c1907ce84fceb2830c27ecb62a9b5d76eb841b9b7a62ba68488ea98a62eaa51eebbdfb23248a325a478693c41616b2463f95f34d94c614c241ceb3c941eb6390"}, @generic="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"]}, @generic="bc3f091bf19f90758ea5bd0058866db58832160326c5806820f60c94af3e5da94686939087f3e8e054ce2b2e3d0f2c0daf886ca40778d52e42d410a16b46d2581d081ce0267e20d51fb0d18e727d1c6165432b6f07504ea54447f7a524eb96c866d4dfb270a5b8e668a797e32e450d93afa9db10f7bb77e0bfce9868e53c75bc1fd36242c163e8a9cc6feb5127e7a9ff576de0e274c442903eaf130dae641a284836a257405fc26dae26aac4d20b14aaf113ba12b0d4240b9300096ce1ea44dbe5cd9ac646b76f"]}, 0x26a8}, 0x1, 0x0, 0x0, 0x40}, 0x801) io_setup(0x3, &(0x7f0000000000)=0x0) accept$unix(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000100)=0x6e) r3 = syz_open_dev$usbmon(&(0x7f0000000200)='/dev/usbmon#\x00', 0x7ff, 0x0) io_cancel(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0xf, 0x3, 0xffffffffffffffff, &(0x7f0000000140)="940c1f2149747e7734510c34c143183667a187dc4f624f6c2de12452792a6fb529e6bf2a661dc23a844b00925c244a9f2967c0ca9868ee50eacf67a2ad7681d82f5a38cbd6d7641f843fa129e00f701fb01835f497b53672b3e5a3f6838f28aa240bf21eb5e5cbe7804fd307404474ae0242f8dea7a08e0fe9479b06f2795f857f8eec271d35ba7f61a91c87296814189cc1dfc9c659cc5437452a0bd178323c50e8c005ba7fa9519b27965c9f6ffbc7dcaa8e658616cc83188fb131a703222d", 0xc0, 0x5, 0x0, 0x1}, &(0x7f0000000280)) io_getevents(r2, 0x2, 0x8f, &(0x7f0000d83f60)=[{}, {}], &(0x7f00005cfff0)={0x4000000000001, 0x7}) io_getevents(r2, 0x0, 0x5, &(0x7f00000002c0)=[{}, {}, {}, {}, {}], &(0x7f00000003c0)) select(0x40, &(0x7f0000000740)={0x800, 0x6, 0x81, 0x0, 0x0, 0x6, 0x80, 0x100000000}, &(0x7f0000000780)={0x0, 0x8, 0x9, 0x4, 0x8001, 0xba0, 0x3, 0x6}, &(0x7f00000007c0)={0x2, 0xd847, 0x101, 0x100000000, 0x8, 0xca1b, 0xd5, 0x6}, &(0x7f0000000800)={0x77359400}) io_setup(0x7, &(0x7f0000000040)=0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='net/route\x00') ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f0000000440)=0x0) perf_event_open(&(0x7f0000aaa000)={0x0, 0x70, 0x4a, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ef4}, r5, 0x0, 0xffffffffffffffff, 0x1) pread64(r3, &(0x7f00000006c0)=""/85, 0x55, 0x5d) r6 = memfd_create(&(0x7f0000000240)=':+lo#\x00', 0x0) fdatasync(r6) io_submit(r2, 0x1, &(0x7f0000001280)=[&(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, 0x0, r6, &(0x7f0000000100)}]) timerfd_create(0x7, 0x80800) io_destroy(r4) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x9, &(0x7f0000000380)=0x3, 0x4) getsockopt$inet6_dccp_buf(r3, 0x21, 0xd, &(0x7f0000000480)=""/187, &(0x7f0000000540)=0xbb) [ 336.012416] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 336.017582] RIP: 0033:0x4548b9 [ 336.020752] RSP: 002b:00007f032fc57b08 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 336.028435] RAX: ffffffffffffffda RBX: 0000000000000019 RCX: 00000000004548b9 [ 336.035682] RDX: 00000000004b9225 RSI: 0000000020001740 RDI: 0000000020001780 [ 336.042930] RBP: 0000000020001780 R08: 00007f032fc57b20 R09: 0000000000000000 [ 336.050175] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 336.057422] R13: 00000000000003ff R14: 0000000000000000 R15: ffffffffffffffff 2018/03/29 11:12:16 executing program 2 (fault-call:21 fault-nth:36): r0 = syz_open_procfs(0x0, &(0x7f00000004c0)='oom_score_adj\x00') perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x49, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(r0, 0x0, 0x83, &(0x7f0000001800)={'nat\x00', 0x0, 0x3, 0x1000, [], 0x2, &(0x7f0000001280)=[{}, {}], &(0x7f0000002040)=""/4096}, &(0x7f00000013c0)=0x78) ioprio_get$pid(0x0, 0x0) timer_create(0x0, &(0x7f0000cd0000), &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00004b1fe0)={{0x0, 0x1c9c380}, {0x0, 0x9}}, &(0x7f0000040000)) r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x7fff) truncate(&(0x7f0000001180)='./bus\x00', 0x4) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000f40000)='/dev/ptmx\x00', 0x200000000101002, 0x0) sendfile(r2, 0xffffffffffffffff, &(0x7f00000010c0), 0x10000065) sendfile(r0, r1, &(0x7f0000000000), 0x4) tkill(0x0, 0x0) r3 = memfd_create(&(0x7f0000000000)='\x00', 0x1) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000001200)) recvmsg(0xffffffffffffff9c, &(0x7f0000001500)={&(0x7f00000012c0)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @remote}}}, 0x80, &(0x7f0000001400)=[{&(0x7f0000001340)=""/103, 0x67}], 0x1, &(0x7f0000001440)=""/155, 0x9b}, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000001540)) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000001640)={0x1ff, {0x2, 0x4e21}, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, {0x2, 0x0, @multicast2=0xe0000002}, 0x0, 0x9, 0x2, 0x6, 0x0, &(0x7f0000001240)='teql0\x00', 0x0, 0x80}) inotify_rm_watch(0xffffffffffffffff, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000140), &(0x7f0000000100)=0xffffffa4) getgroups(0x1, &(0x7f0000001600)=[0x0]) syz_fuseblk_mount(&(0x7f0000001740)='./file0\x00', &(0x7f0000001780)='./file0\x00', 0x0, 0x0, 0xffffffffffffffff, 0x3ff, 0x1, 0x0) getpgrp(0xffffffffffffffff) getegid() sendmmsg$unix(r3, &(0x7f0000001880), 0x0, 0x0) setsockopt$netrom_NETROM_T4(0xffffffffffffffff, 0x103, 0x6, &(0x7f00000017c0), 0xfffffffffffffc77) readv(0xffffffffffffffff, &(0x7f000004ffe0), 0x0) [ 336.123761] FAULT_INJECTION: forcing a failure. [ 336.123761] name failslab, interval 1, probability 0, space 0, times 0 [ 336.135101] CPU: 1 PID: 9689 Comm: syz-executor2 Not tainted 4.16.0-rc7+ #5 [ 336.142202] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 336.151551] Call Trace: [ 336.154141] dump_stack+0x194/0x24d [ 336.157783] ? arch_local_irq_restore+0x53/0x53 [ 336.162448] ? __save_stack_trace+0x7e/0xd0 [ 336.166762] should_fail+0x8c0/0xa40 [ 336.170476] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 336.175577] ? kasan_kmalloc+0xad/0xe0 [ 336.179455] ? kmem_cache_alloc_trace+0x136/0x740 [ 336.184274] ? __memcg_init_list_lru_node+0x169/0x270 [ 336.189444] ? __list_lru_init+0x544/0x750 [ 336.193664] ? sget_userns+0x6b1/0xe40 [ 336.197531] ? mount_fs+0x66/0x2d0 [ 336.201055] ? vfs_kern_mount.part.26+0xc6/0x4a0 [ 336.205800] ? do_mount+0xea4/0x2bb0 [ 336.209494] ? SyS_mount+0xab/0x120 [ 336.213093] ? do_syscall_64+0x281/0x940 [ 336.217144] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 336.222489] ? find_held_lock+0x35/0x1d0 [ 336.226529] ? __lock_is_held+0xb6/0x140 [ 336.230581] ? check_same_owner+0x320/0x320 [ 336.234894] ? rcu_note_context_switch+0x710/0x710 [ 336.239809] should_failslab+0xec/0x120 [ 336.243761] kmem_cache_alloc_trace+0x4b/0x740 [ 336.248318] ? __kmalloc_node+0x33/0x70 [ 336.252272] ? __kmalloc_node+0x33/0x70 [ 336.256232] ? rcu_read_lock_sched_held+0x108/0x120 [ 336.261229] __memcg_init_list_lru_node+0x169/0x270 [ 336.266223] ? list_lru_add+0x7c0/0x7c0 [ 336.270172] ? __kmalloc_node+0x47/0x70 [ 336.274128] __list_lru_init+0x544/0x750 [ 336.278172] ? memcg_destroy_list_lru_node.isra.7+0x110/0x110 [ 336.284039] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 336.289045] ? lockdep_init_map+0x9/0x10 [ 336.293086] sget_userns+0x6b1/0xe40 [ 336.296774] ? kill_litter_super+0x90/0x90 [ 336.301002] ? ns_test_super+0x50/0x50 [ 336.304874] ? destroy_unused_super.part.6+0xd0/0xd0 [ 336.309950] ? do_raw_spin_trylock+0x190/0x190 [ 336.314513] ? kobject_put+0x6b/0x250 [ 336.318307] ? blkdev_get+0x3a1/0xb00 [ 336.322094] ? cap_capable+0x1b5/0x230 [ 336.325957] ? __blkdev_get+0x13b0/0x13b0 [ 336.330081] ? security_capable+0x8e/0xc0 [ 336.334205] ? kill_litter_super+0x90/0x90 [ 336.338423] ? ns_capable_common+0xcf/0x160 [ 336.342736] ? ns_test_super+0x50/0x50 [ 336.346616] ? kill_litter_super+0x90/0x90 [ 336.350830] sget+0xd2/0x120 [ 336.353832] mount_bdev+0x109/0x370 [ 336.357431] ? fuse_get_root_inode+0x190/0x190 [ 336.361992] fuse_mount_blk+0x34/0x40 [ 336.365781] mount_fs+0x66/0x2d0 [ 336.369146] vfs_kern_mount.part.26+0xc6/0x4a0 [ 336.373712] ? may_umount+0xa0/0xa0 [ 336.377312] ? _raw_read_unlock+0x22/0x30 [ 336.381435] ? __get_fs_type+0x8a/0xc0 [ 336.385318] do_mount+0xea4/0x2bb0 [ 336.388859] ? copy_mount_string+0x40/0x40 [ 336.393084] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 336.398090] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 336.402838] ? retint_kernel+0x10/0x10 [ 336.406712] ? copy_mount_options+0x160/0x2e0 [ 336.411181] ? copy_mount_options+0x1f7/0x2e0 [ 336.415653] SyS_mount+0xab/0x120 [ 336.419080] ? copy_mnt_ns+0xb30/0xb30 [ 336.422951] do_syscall_64+0x281/0x940 [ 336.426820] ? __do_page_fault+0xc90/0xc90 [ 336.431045] ? _raw_spin_unlock_irq+0x27/0x70 [ 336.435532] ? finish_task_switch+0x1c1/0x7e0 [ 336.440021] ? syscall_return_slowpath+0x550/0x550 [ 336.444946] ? syscall_return_slowpath+0x2ac/0x550 [ 336.449870] ? prepare_exit_to_usermode+0x350/0x350 [ 336.454875] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 336.460217] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 336.465043] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 336.470206] RIP: 0033:0x4548b9 [ 336.473368] RSP: 002b:00007f032fc57b08 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 336.481052] RAX: ffffffffffffffda RBX: 0000000000000019 RCX: 00000000004548b9 [ 336.488293] RDX: 00000000004b9225 RSI: 0000000020001740 RDI: 0000000020001780 [ 336.495547] RBP: 0000000020001780 R08: 00007f032fc57b20 R09: 0000000000000000 [ 336.502798] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 336.510048] R13: 00000000000003ff R14: 0000000000000000 R15: ffffffffffffffff 2018/03/29 11:12:17 executing program 6: openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x0, 0x0) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, &(0x7f0000000340)=0x1) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f000051cff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000943ffc)=0xa35) read(r0, &(0x7f00003fefff)=""/1, 0x1) r1 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000029000)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r0, &(0x7f0000dcdff0)=[{&(0x7f0000cd8000)=""/1, 0x1}], 0x1) ioctl$int_in(r2, 0x5452, &(0x7f0000b28000)=0x3c) write$cgroup_type(0xffffffffffffffff, &(0x7f00000002c0)='threaded\x00', 0x9) syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x0, 0x802) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000fb9000)) fcntl$setsig(r2, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r3}], 0x1, 0xfffffffffffffff8) read$eventfd(0xffffffffffffffff, &(0x7f0000000040), 0x8) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)) r4 = dup2(0xffffffffffffffff, r3) fcntl$setown(r4, 0x8, r1) ptrace$cont(0xffffffffffffffff, r1, 0x0, 0x8) tkill(r1, 0x16) r5 = gettid() process_vm_readv(r5, &(0x7f0000001880)=[{&(0x7f0000000680)=""/198, 0xc6}, {&(0x7f0000000780)=""/247, 0xf7}, {&(0x7f0000000380)=""/12, 0xc}, {&(0x7f00000003c0)=""/6, 0x6}, {&(0x7f0000000400)=""/14, 0xe}], 0x5, &(0x7f00000019c0)=[{&(0x7f0000001900)=""/41, 0x29}, {&(0x7f0000001940)=""/112, 0x70}], 0x2, 0x0) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f0000000240)={{{@in6}}, {{@in=@local}, 0x0, @in=@local}}, &(0x7f0000000100)=0xe8) 2018/03/29 11:12:17 executing program 3: io_setup(0x3, &(0x7f0000000000)=0x0) accept$unix(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000100)=0x6e) r1 = syz_open_dev$usbmon(&(0x7f0000000200)='/dev/usbmon#\x00', 0x7ff, 0x0) io_cancel(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0xf, 0x0, 0xffffffffffffffff, &(0x7f0000000140)="940c1f2149747e7734510c34c143183667a187dc4f624f6c2de12452792a6fb529e6bf2a661dc23a844b00925c244a9f2967c0ca9868ee50eacf67a2ad7681d82f5a38cbd6d7641f843fa129e00f701fb01835f497b53672b3e5a3f6838f28aa240bf21eb5e5cbe7804fd307404474ae0242f8dea7a08e0fe9479b06f2795f857f8eec271d35ba7f61a91c87296814189cc1dfc9c659cc5437452a0bd178323c50e8c005ba7fa9519b27965c9f6ffbc7dcaa8e658616cc83188fb131a703222d", 0xc0, 0x5, 0x0, 0x1, r1}, &(0x7f0000000280)) io_getevents(r0, 0x2, 0x8f, &(0x7f0000d83f60)=[{}, {}], &(0x7f00005cfff0)={0x4000000000001, 0x7}) io_getevents(r0, 0x0, 0x5, &(0x7f00000002c0)=[{}, {}, {}, {}, {}], &(0x7f00000003c0)) getsockopt$inet_dccp_int(r1, 0x21, 0x5, &(0x7f0000000640), &(0x7f0000000680)=0x4) io_setup(0x7, &(0x7f0000000040)) getsockopt$inet_dccp_int(r1, 0x21, 0x15, &(0x7f00000006c0), &(0x7f0000000700)=0x4) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000440)=0x0) perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x4a, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ef4}, r2, 0x0, r1, 0x1) pread64(0xffffffffffffffff, &(0x7f0000000000)=""/85, 0xfe42, 0x5d) r3 = memfd_create(&(0x7f0000000240)=':+lo#\x00', 0x0) fdatasync(r3) io_submit(r0, 0x1, &(0x7f0000001280)=[&(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000000100)}]) timerfd_create(0x7, 0x80800) io_destroy(r0) setsockopt$llc_int(r1, 0x10c, 0x9, &(0x7f0000000380)=0x3, 0x4) get_robust_list(r2, &(0x7f00000005c0)=&(0x7f0000000580)={&(0x7f00000004c0)={&(0x7f0000000480)}, 0x0, &(0x7f0000000540)={&(0x7f0000000500)}}, &(0x7f0000000600)=0x18) 2018/03/29 11:12:17 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) readv(r0, &(0x7f0000001480)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x3}) r1 = syz_open_pts(r0, 0x2) r2 = dup3(r1, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000001600)="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", 0x1a8) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0) preadv(r3, &(0x7f00000004c0)=[{&(0x7f0000000480)=""/21, 0x15}], 0x1, 0x0) fchdir(0xffffffffffffffff) mkdir(&(0x7f0000000280)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f", 0xfffffffffffffffc) fchmod(r2, 0x0) splice(r3, &(0x7f0000000400), 0xffffffffffffffff, &(0x7f0000000440), 0x9, 0x2) rename(&(0x7f0000001e00)='./file0\x00', &(0x7f0000000100)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f") mkdir(&(0x7f000000e000)='./control\x00', 0x0) r4 = open(&(0x7f0000000000)='./control\x00', 0x0, 0x0) renameat2(r4, &(0x7f0000000040)='./file0\x00', r4, &(0x7f0000000080)='./control\x00', 0x2) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000300)={0x0, 0x80}, &(0x7f0000000340)=0x8) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000380)={r5, 0x5}, &(0x7f00000003c0)=0x8) mknodat(r4, &(0x7f000003f000)='./control\x00', 0x0, 0x0) symlink(&(0x7f0000000180)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f", &(0x7f00000000c0)='./file0\x00') perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(r4, &(0x7f0000010000)='./control\x00', &(0x7f000003f000), &(0x7f0000001fe8), 0x0) 2018/03/29 11:12:17 executing program 5: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) mkdir(&(0x7f0000000000)='./file1\x00', 0x0) lgetxattr(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)=@known='com.apple.system.Security\x00', &(0x7f0000000240)=""/231, 0xe7) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000811ffa)='bdev\x00', 0x0, &(0x7f0000444000)) mount(&(0x7f0000fb6000)='./file0\x00', &(0x7f0000d78000)='.', &(0x7f0000fdb000)='ubifs\x00', 0x1003, 0x0) mount(&(0x7f00002b9ff8)='./file0\x00', &(0x7f0000cbeff8)='./file0\x00', &(0x7f00005f7ffa)='ramfs\x00', 0x80000, &(0x7f000002f000)) mount(&(0x7f0000000040)='.', &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0)='binfmt_misc\x00', 0x0, &(0x7f0000000100)) r0 = syz_open_dev$sg(&(0x7f0000000540)='/dev/sg#\x00', 0x4692, 0x20000) r1 = accept$inet6(0xffffffffffffff9c, &(0x7f0000000700), &(0x7f0000000740)=0x1c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000780)={0xffffffffffffffff}) socketpair$packet(0x11, 0x3, 0x300, &(0x7f00000007c0)={0xffffffffffffffff}) r4 = dup2(r3, 0xffffffffffffffff) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000800)={0x0, 0x80000, 0xffffffffffffff9c}) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000840)={0xffffffffffffffff}) r7 = accept4$ipx(0xffffffffffffffff, &(0x7f0000000880), &(0x7f00000008c0)=0x10, 0x800) r8 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000940)={&(0x7f0000000900)='./file0\x00', 0x0, 0x8}, 0x10) r9 = syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1) pipe2(&(0x7f0000000980)={0xffffffffffffffff}, 0x80800) r11 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f00000009c0)={0x28, 0x0, 0x2710, @my=0x1}, 0x10, 0x800) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000a00)={0x0, 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000a40)={{{@in=@loopback, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@remote}}, &(0x7f0000000b40)=0xe8) fstat(0xffffffffffffff9c, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r15 = gettid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000c00)={0x0, 0x0}, &(0x7f0000000c40)=0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000c80)={0x0, 0x0, 0x0}, &(0x7f0000000cc0)=0xc) r18 = socket$key(0xf, 0x3, 0x2) r19 = bpf$MAP_CREATE(0x0, &(0x7f0000000d00)={0xa, 0xfffffffffffffff9, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x4}, 0x2c) r20 = socket$bt_hidp(0x1f, 0x3, 0x6) r21 = dup(r18) r22 = socket$nl_xfrm(0x10, 0x3, 0x6) r23 = syz_init_net_socket$nfc_raw(0x27, 0x1, 0x0) fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000003e80)={0x0, 0x0}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0}, &(0x7f0000003f00)=0xc) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000003fc0)=0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000004000)={{{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@mcast1}}, &(0x7f0000004100)=0xe8) r28 = getegid() r29 = getpgid(0xffffffffffffffff) stat(&(0x7f0000004140)='./file1\x00', &(0x7f0000004180)={0x0, 0x0, 0x0, 0x0, 0x0}) r31 = getgid() sendmsg$unix(r0, &(0x7f0000004380)={&(0x7f0000000580)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f00000006c0)=[{&(0x7f0000000600)="c0cb8eaa156618310742888f3603df9be6be60a8e54285dfa972df28d24052baa38c115f39a616925d5b2da90a4d37b67267cb52b0584ae9da8bfe08c9d11cfb2dfa4cc088fe97e851a94588b445bc5f2f51d86a20081e4b7cbc", 0x5a}, {&(0x7f0000000680)}], 0x2, &(0x7f0000000d40)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32=r1, @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32=r4, @ANYRES32=r5, @ANYRES32=r6, @ANYRES32=r7, @ANYRES32=r8, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32=r9, @ANYRES32=r10, @ANYRES32=r11, @ANYBLOB="0000000020000000000000000100000002000000", @ANYRES32=r12, @ANYRES32=r13, @ANYRES32=r14, @ANYBLOB="0000000020000000000000000100000002000000", @ANYRES32=r15, @ANYRES32=r16, @ANYRES32=r17, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32=r18, @ANYRES32=r19, @ANYRES32=r20, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32=r21, @ANYRES32=r22, @ANYRES32=r23, @ANYBLOB="0000000020000000000000000100000002000000", @ANYRES32=r24, @ANYRES32=r25, @ANYRES32, @ANYBLOB="0000000020000000000000000100000002000000", @ANYRES32=r26, @ANYRES32=r27, @ANYRES32=r28, @ANYBLOB="0000000020000000000000000100000002000000", @ANYRES32=r29, @ANYRES32=r30, @ANYRES32=r31, @ANYBLOB="0000000017521f01923b1716c55a7f15d4398d2219a6325beaaa8534f82eba5db55ca20e8060b2fbe6c3c7ce307ce3b29c2da5f34794b6f4db0c7df09d6cd975d123a5c92fbd8abd01de14ec4525b0b2a2a0acc6910b388027a6d585d8c3ae794127f849392a19156ecbc5a66426dff962dc1de36021"], 0x148, 0x24000000}, 0x20040000) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) r32 = open(&(0x7f0000000340)='./file0\x00', 0x40, 0x4) setsockopt$nfc_llcp_NFC_LLCP_RW(r32, 0x118, 0x0, &(0x7f0000000380)=0x8, 0x4) mount(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./file1\x00', &(0x7f0000000200)='anon_inodefs\x00', 0x2000, &(0x7f0000000240)) mount(&(0x7f0000adcff8)='./file0\x00', &(0x7f0000e08fff)='.', &(0x7f00005e9000)='cifs\x00', 0x2000, &(0x7f0000ad5000)) getsockopt$inet6_IPV6_IPSEC_POLICY(r32, 0x29, 0x22, &(0x7f0000000400)={{{@in=@rand_addr, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@local}}, &(0x7f0000000500)=0xe8) r34 = getegid() chown(&(0x7f00000003c0)='.', r33, r34) 2018/03/29 11:12:17 executing program 0: r0 = perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x4a, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffff9c, 0xc00caee0, &(0x7f0000000180)={0x0, r0, 0x1}) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) fcntl$getownex(r0, 0x10, &(0x7f0000000400)={0x0, 0x0}) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0xffff, 0xe3, 0x6, 0x4, 0x0, 0x7, 0x0, 0x2, 0x10001, 0x1, 0x7, 0x8, 0x100, 0x4, 0x0, 0x7f, 0x20, 0x0, 0x4, 0x5, 0x90a4, 0x7, 0x2, 0x73, 0x8, 0x7, 0x4, 0x7e0, 0x101, 0x0, 0x2, 0x309, 0x0, 0x9, 0xfffffffffffffff9, 0x9, 0x0, 0x4, 0x0, @perf_config_ext={0x20, 0x1}, 0x8140, 0x2, 0x0, 0x4, 0xca1, 0xb5}, r4, 0x0, r1, 0x8) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) futimesat(r1, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0)={{r2, r3/1000+10000}, {r5, r6/1000+10000}}) unshare(0x8000000) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0xdc, 0x40}, 0x341) r8 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8910, &(0x7f0000000080)=@buf={0x0, &(0x7f0000000000)}) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x13, &(0x7f0000000ffc), 0x4) mq_open(&(0x7f00000000c0)='syzkaller0\x00', 0x40, 0x8, &(0x7f0000000100)={0x5, 0x80000000, 0x0, 0xfffffffffffffff9, 0x1, 0xfffffffffffffffd, 0x7fff, 0x200}) socket$inet_tcp(0x2, 0x1, 0x0) r9 = dup3(r8, r7, 0x80000) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r9, 0x84, 0x66, &(0x7f00000002c0)={0x0, 0x8ed6}, &(0x7f0000000300)=0x1) bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) shmget(0xffffffffffffffff, 0x8000, 0x49b, &(0x7f0000ff8000/0x8000)=nil) ioctl$sock_inet_SIOCGIFPFLAGS(r8, 0x8935, &(0x7f0000000080)={'syzkaller0\x00'}) ppoll(&(0x7f0000000780)=[{r1, 0x300}, {r1, 0x8401}], 0x2, &(0x7f00000007c0)={0x77359400}, &(0x7f0000000800)={0x9}, 0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000280)={0x0, 0x0, 0x9}, 0x10) r10 = semget$private(0x0, 0x4, 0x0) semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0x0, 0x1000}], 0x1, &(0x7f0000000080)={0x0, 0x1c9c380}) semctl$IPC_RMID(r10, 0x0, 0x0) 2018/03/29 11:12:17 executing program 7: io_setup(0x3, &(0x7f0000000000)=0x0) accept$unix(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000100)=0x6e) r1 = syz_open_dev$usbmon(&(0x7f0000000200)='/dev/usbmon#\x00', 0x7ff, 0x0) io_cancel(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0xf, 0x3, 0xffffffffffffffff, &(0x7f0000000140)="940c1f2149747e7734510c34c143183667a187dc4f624f6c2de12452792a6fb529e6bf2a661dc23a844b00925c244a9f2967c0ca9868ee50eacf67a2ad7681d82f5a38cbd6d7641f843fa129e00f701fb01835f497b53672b3e5a3f6838f28aa240bf21eb5e5cbe7804fd307404474ae0242f8dea7a08e0fe9479b06f2795f857f8eec271d35ba7f61a91c87296814189cc1dfc9c659cc5437452a0bd178323c50e8c005ba7fa9519b27965c9f6ffbc7dcaa8e658616cc83188fb131a703222d", 0xc0, 0x5, 0x0, 0x1}, &(0x7f0000000280)) io_getevents(r0, 0x2, 0x8f, &(0x7f0000d83f60)=[{}, {}], &(0x7f00005cfff0)={0x4000000000001, 0x7}) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f00000004c0)=[{0x7, 0x80000000}, {0xf, 0x7ff}, {0x4, 0x257c4e92}, {0x2, 0x3}, {0xe, 0x9ad7}, {0x3, 0x44a9}], 0x6) io_getevents(r0, 0x0, 0x5, &(0x7f00000002c0)=[{}, {}, {}, {}, {}], &(0x7f00000003c0)) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r1, 0x84, 0x65, &(0x7f0000000580)=[@in={0x2, 0x4e21, @remote={0xac, 0x14, 0x14, 0xbb}}, @in={0x2, 0x4e24, @rand_addr=0x9}, @in6={0xa, 0x4e20, 0x20, @loopback={0x0, 0x1}, 0x2}, @in6={0xa, 0x4e21, 0x40, @remote={0xfe, 0x80, [], 0xbb}, 0x100}, @in={0x2, 0x4e20, @multicast1=0xe0000001}], 0x68) io_setup(0x7, &(0x7f0000000040)) getpgid(0xffffffffffffffff) r2 = getpgid(0x0) r3 = syz_open_procfs(r2, &(0x7f0000000500)="6ef45e2f62bee39830767000") ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f0000000440)=0x0) perf_event_open(&(0x7f0000aaa000)={0x0, 0x70, 0x4a, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ef4}, r4, 0x0, 0xffffffffffffffff, 0x1) pread64(r3, &(0x7f0000000000)=""/85, 0xfe42, 0x5d) ioctl$VT_GETMODE(r3, 0x5601, &(0x7f0000000540)) r5 = memfd_create(&(0x7f0000000240)=':+lo#\x00', 0x0) umount2(&(0x7f0000000480)='./file0\x00', 0x4) fdatasync(r5) io_submit(r0, 0x1, &(0x7f0000001280)=[&(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, 0x0, r5, &(0x7f0000000100)}]) timerfd_create(0x7, 0x80800) io_destroy(r0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x9, &(0x7f0000000380)=0x3, 0x4) 2018/03/29 11:12:17 executing program 2 (fault-call:21 fault-nth:37): r0 = syz_open_procfs(0x0, &(0x7f00000004c0)='oom_score_adj\x00') perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x49, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(r0, 0x0, 0x83, &(0x7f0000001800)={'nat\x00', 0x0, 0x3, 0x1000, [], 0x2, &(0x7f0000001280)=[{}, {}], &(0x7f0000002040)=""/4096}, &(0x7f00000013c0)=0x78) ioprio_get$pid(0x0, 0x0) timer_create(0x0, &(0x7f0000cd0000), &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00004b1fe0)={{0x0, 0x1c9c380}, {0x0, 0x9}}, &(0x7f0000040000)) r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x7fff) truncate(&(0x7f0000001180)='./bus\x00', 0x4) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000f40000)='/dev/ptmx\x00', 0x200000000101002, 0x0) sendfile(r2, 0xffffffffffffffff, &(0x7f00000010c0), 0x10000065) sendfile(r0, r1, &(0x7f0000000000), 0x4) tkill(0x0, 0x0) r3 = memfd_create(&(0x7f0000000000)='\x00', 0x1) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000001200)) recvmsg(0xffffffffffffff9c, &(0x7f0000001500)={&(0x7f00000012c0)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @remote}}}, 0x80, &(0x7f0000001400)=[{&(0x7f0000001340)=""/103, 0x67}], 0x1, &(0x7f0000001440)=""/155, 0x9b}, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000001540)) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000001640)={0x1ff, {0x2, 0x4e21}, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, {0x2, 0x0, @multicast2=0xe0000002}, 0x0, 0x9, 0x2, 0x6, 0x0, &(0x7f0000001240)='teql0\x00', 0x0, 0x80}) inotify_rm_watch(0xffffffffffffffff, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000140), &(0x7f0000000100)=0xffffffa4) getgroups(0x1, &(0x7f0000001600)=[0x0]) syz_fuseblk_mount(&(0x7f0000001740)='./file0\x00', &(0x7f0000001780)='./file0\x00', 0x0, 0x0, 0xffffffffffffffff, 0x3ff, 0x1, 0x0) getpgrp(0xffffffffffffffff) getegid() sendmmsg$unix(r3, &(0x7f0000001880), 0x0, 0x0) setsockopt$netrom_NETROM_T4(0xffffffffffffffff, 0x103, 0x6, &(0x7f00000017c0), 0xfffffffffffffc77) readv(0xffffffffffffffff, &(0x7f000004ffe0), 0x0) 2018/03/29 11:12:17 executing program 1: io_setup(0x3, &(0x7f0000000000)=0x0) accept$unix(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000100)=0x6e) r1 = syz_open_dev$usbmon(&(0x7f0000000200)='/dev/usbmon#\x00', 0x0, 0x0) io_cancel(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0xf, 0x3, 0xffffffffffffffff, &(0x7f0000000140)="940c1f2149747e7734510c34c143183667a187dc4f624f6c2de12452792a6fb529e6bf2a661dc23a844b00925c244a9f2967c0ca9868ee50eacf67a2ad7681d82f5a38cbd6d7641f843fa129e00f701fb01835f497b53672b3e5a3f6838f28aa240bf21eb5e5cbe7804fd307404474ae0242f8dea7a08e0fe9479b06f2795f857f8eec271d35ba7f61a91c87296814189cc1dfc9c659cc5437452a0bd178323c50e8c005ba7fa9519b27965c9f6ffbc7dcaa8e658616cc83188fb131a703222d", 0xc0, 0x5, 0x0, 0x1}, &(0x7f0000000280)) io_getevents(r0, 0x2, 0x8f, &(0x7f0000d83f60)=[{}, {}], &(0x7f00005cfff0)={0x4000000000001, 0x7}) io_getevents(r0, 0x0, 0x5, &(0x7f00000002c0)=[{}, {}, {}, {}, {}], &(0x7f00000003c0)) io_setup(0x7, &(0x7f0000000040)) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/route\x00') ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000440)=0x0) perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x4a, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ef4}, r3, 0x0, 0xffffffffffffffff, 0x1) pread64(r2, &(0x7f0000000000)=""/85, 0xfe42, 0x5d) r4 = memfd_create(&(0x7f0000000240)=':+lo#\x00', 0x0) fdatasync(r4) io_submit(r0, 0x1, &(0x7f0000001280)=[&(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f0000000100)}]) timerfd_create(0x7, 0x80800) io_destroy(r0) setsockopt$llc_int(r1, 0x10c, 0x0, &(0x7f0000000380)=0x3, 0x4) [ 336.633432] FAULT_INJECTION: forcing a failure. [ 336.633432] name failslab, interval 1, probability 0, space 0, times 0 [ 336.644838] CPU: 1 PID: 9717 Comm: syz-executor2 Not tainted 4.16.0-rc7+ #5 [ 336.651929] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 336.661275] Call Trace: [ 336.663860] dump_stack+0x194/0x24d [ 336.667488] ? arch_local_irq_restore+0x53/0x53 [ 336.672152] ? __save_stack_trace+0x7e/0xd0 [ 336.676476] should_fail+0x8c0/0xa40 [ 336.680184] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 336.685277] ? kasan_kmalloc+0xad/0xe0 [ 336.689158] ? kmem_cache_alloc_trace+0x136/0x740 [ 336.693990] ? __memcg_init_list_lru_node+0x169/0x270 [ 336.699170] ? __list_lru_init+0x544/0x750 [ 336.703391] ? sget_userns+0x6b1/0xe40 [ 336.707269] ? mount_fs+0x66/0x2d0 [ 336.710795] ? vfs_kern_mount.part.26+0xc6/0x4a0 [ 336.715536] ? do_mount+0xea4/0x2bb0 [ 336.719243] ? SyS_mount+0xab/0x120 [ 336.722859] ? do_syscall_64+0x281/0x940 [ 336.726908] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 336.732269] ? find_held_lock+0x35/0x1d0 [ 336.736327] ? __lock_is_held+0xb6/0x140 [ 336.740391] ? check_same_owner+0x320/0x320 [ 336.744701] ? rcu_note_context_switch+0x710/0x710 [ 336.749630] should_failslab+0xec/0x120 [ 336.753597] kmem_cache_alloc_trace+0x4b/0x740 [ 336.758183] __memcg_init_list_lru_node+0x169/0x270 [ 336.763196] ? list_lru_add+0x7c0/0x7c0 [ 336.767158] ? __kmalloc_node+0x47/0x70 [ 336.771131] __list_lru_init+0x544/0x750 [ 336.775187] ? memcg_destroy_list_lru_node.isra.7+0x110/0x110 [ 336.781059] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 336.786074] ? lockdep_init_map+0x9/0x10 [ 336.790127] sget_userns+0x6b1/0xe40 [ 336.793830] ? kill_litter_super+0x90/0x90 [ 336.798064] ? ns_test_super+0x50/0x50 [ 336.801944] ? destroy_unused_super.part.6+0xd0/0xd0 [ 336.807034] ? do_raw_spin_trylock+0x190/0x190 [ 336.811614] ? kobject_put+0x6b/0x250 [ 336.815411] ? blkdev_get+0x3a1/0xb00 [ 336.819209] ? cap_capable+0x1b5/0x230 [ 336.823088] ? __blkdev_get+0x13b0/0x13b0 [ 336.827230] ? security_capable+0x8e/0xc0 [ 336.831366] ? kill_litter_super+0x90/0x90 [ 336.835589] ? ns_capable_common+0xcf/0x160 [ 336.839901] ? ns_test_super+0x50/0x50 [ 336.843793] ? kill_litter_super+0x90/0x90 [ 336.848016] sget+0xd2/0x120 [ 336.851033] mount_bdev+0x109/0x370 [ 336.854646] ? fuse_get_root_inode+0x190/0x190 [ 336.859221] fuse_mount_blk+0x34/0x40 [ 336.863015] mount_fs+0x66/0x2d0 [ 336.866378] vfs_kern_mount.part.26+0xc6/0x4a0 [ 336.870950] ? may_umount+0xa0/0xa0 [ 336.874565] ? _raw_read_unlock+0x22/0x30 [ 336.878698] ? __get_fs_type+0x8a/0xc0 [ 336.882581] do_mount+0xea4/0x2bb0 [ 336.886116] ? copy_mount_string+0x40/0x40 [ 336.890340] ? rcu_pm_notify+0xc0/0xc0 [ 336.894223] ? copy_mount_options+0x5f/0x2e0 [ 336.898618] ? rcu_read_lock_sched_held+0x108/0x120 [ 336.903621] ? kmem_cache_alloc_trace+0x459/0x740 [ 336.908452] ? kasan_check_write+0x14/0x20 [ 336.912675] ? _copy_from_user+0x99/0x110 [ 336.916821] ? copy_mount_options+0x1f7/0x2e0 [ 336.921316] SyS_mount+0xab/0x120 [ 336.924761] ? copy_mnt_ns+0xb30/0xb30 [ 336.928640] do_syscall_64+0x281/0x940 2018/03/29 11:12:17 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) readv(r0, &(0x7f0000001480)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x3}) openat$autofs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/autofs\x00', 0x400040, 0x0) r1 = syz_open_pts(r0, 0x2) r2 = dup3(r1, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000c34fff), 0xffffff0b) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0) preadv(r3, &(0x7f00000004c0)=[{&(0x7f0000000480)=""/21, 0x15}], 0x1, 0x0) fchdir(0xffffffffffffffff) mkdir(&(0x7f0000000280)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f", 0xfffffffffffffffc) fchmod(r2, 0x0) splice(r3, &(0x7f0000000400), 0xffffffffffffffff, &(0x7f0000000440), 0x9, 0x2) rename(&(0x7f0000001e00)='./file0\x00', &(0x7f0000000100)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f") mkdir(&(0x7f000000e000)='./control\x00', 0x0) r4 = open(&(0x7f0000000000)='./control\x00', 0x0, 0x0) renameat2(r4, &(0x7f0000000040)='./file0\x00', r4, &(0x7f0000000080)='./control\x00', 0x2) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000300)={0x0, 0x80}, &(0x7f0000000340)=0x8) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000380)={r5, 0x5}, &(0x7f00000003c0)=0x8) mknodat(r4, &(0x7f000003f000)='./control\x00', 0x0, 0x0) symlink(&(0x7f0000000180)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f", &(0x7f00000000c0)='./file0\x00') perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(r4, &(0x7f0000010000)='./control\x00', &(0x7f000003f000), &(0x7f0000001fe8), 0x0) [ 336.932524] ? trace_event_raw_event_sys_exit+0x260/0x260 [ 336.938053] ? syscall_return_slowpath+0x550/0x550 [ 336.942982] ? syscall_return_slowpath+0x2ac/0x550 [ 336.947911] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 336.953278] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 336.958126] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 336.963305] RIP: 0033:0x4548b9 [ 336.966485] RSP: 002b:00007f032fc57b08 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 336.974188] RAX: ffffffffffffffda RBX: 0000000000000019 RCX: 00000000004548b9 2018/03/29 11:12:17 executing program 0: r0 = perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x4a, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffff9c, 0xc00caee0, &(0x7f0000000180)={0x0, r0, 0x1}) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) fcntl$getownex(r0, 0x10, &(0x7f0000000400)={0x0, 0x0}) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0xffff, 0xe3, 0x6, 0x4, 0x0, 0x7, 0x0, 0x2, 0x10001, 0x1, 0x7, 0x8, 0x100, 0x4, 0x0, 0x7f, 0x20, 0x0, 0x4, 0x5, 0x90a4, 0x7, 0x2, 0x73, 0x8, 0x7, 0x4, 0x7e0, 0x101, 0x0, 0x2, 0x309, 0x0, 0x9, 0xfffffffffffffff9, 0x9, 0x0, 0x4, 0x0, @perf_config_ext={0x20, 0x1}, 0x8140, 0x2, 0x0, 0x4, 0xca1, 0xb5}, r4, 0x4, 0xffffffffffffffff, 0x8) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) futimesat(r1, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0)={{r2, r3/1000+10000}, {r5, r6/1000+10000}}) unshare(0x8000000) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0xdc, 0x40}, 0x341) r8 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8910, &(0x7f0000000080)=@buf={0x0, &(0x7f0000000000)}) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x13, &(0x7f0000000ffc), 0x4) mq_open(&(0x7f00000000c0)='syzkaller0\x00', 0x40, 0x8, &(0x7f0000000100)={0x5, 0x80000000, 0x0, 0xfffffffffffffff9, 0x1, 0xfffffffffffffffd, 0x7fff, 0x200}) socket$inet_tcp(0x2, 0x1, 0x0) r9 = dup3(r8, r7, 0x80000) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r9, 0x84, 0x66, &(0x7f00000002c0)={0x0, 0x8ed6}, &(0x7f0000000300)=0x1) bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) shmget(0xffffffffffffffff, 0x8000, 0x49b, &(0x7f0000ff8000/0x8000)=nil) ioctl$sock_inet_SIOCGIFPFLAGS(r8, 0x8935, &(0x7f0000000080)={'syzkaller0\x00'}) ppoll(&(0x7f0000000780)=[{r1, 0x300}, {r1, 0x8401}], 0x2, &(0x7f00000007c0)={0x77359400}, &(0x7f0000000800)={0x9}, 0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000280)={0x0, 0x0, 0x9}, 0x10) r10 = semget$private(0x0, 0x4, 0x0) semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0x0, 0x1000}], 0x1, &(0x7f0000000080)={0x0, 0x1c9c380}) semctl$IPC_RMID(r10, 0x0, 0x0) 2018/03/29 11:12:17 executing program 2 (fault-call:21 fault-nth:38): r0 = syz_open_procfs(0x0, &(0x7f00000004c0)='oom_score_adj\x00') perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x49, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(r0, 0x0, 0x83, &(0x7f0000001800)={'nat\x00', 0x0, 0x3, 0x1000, [], 0x2, &(0x7f0000001280)=[{}, {}], &(0x7f0000002040)=""/4096}, &(0x7f00000013c0)=0x78) ioprio_get$pid(0x0, 0x0) timer_create(0x0, &(0x7f0000cd0000), &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00004b1fe0)={{0x0, 0x1c9c380}, {0x0, 0x9}}, &(0x7f0000040000)) r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x7fff) truncate(&(0x7f0000001180)='./bus\x00', 0x4) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000f40000)='/dev/ptmx\x00', 0x200000000101002, 0x0) sendfile(r2, 0xffffffffffffffff, &(0x7f00000010c0), 0x10000065) sendfile(r0, r1, &(0x7f0000000000), 0x4) tkill(0x0, 0x0) r3 = memfd_create(&(0x7f0000000000)='\x00', 0x1) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000001200)) recvmsg(0xffffffffffffff9c, &(0x7f0000001500)={&(0x7f00000012c0)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @remote}}}, 0x80, &(0x7f0000001400)=[{&(0x7f0000001340)=""/103, 0x67}], 0x1, &(0x7f0000001440)=""/155, 0x9b}, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000001540)) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000001640)={0x1ff, {0x2, 0x4e21}, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, {0x2, 0x0, @multicast2=0xe0000002}, 0x0, 0x9, 0x2, 0x6, 0x0, &(0x7f0000001240)='teql0\x00', 0x0, 0x80}) inotify_rm_watch(0xffffffffffffffff, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000140), &(0x7f0000000100)=0xffffffa4) getgroups(0x1, &(0x7f0000001600)=[0x0]) syz_fuseblk_mount(&(0x7f0000001740)='./file0\x00', &(0x7f0000001780)='./file0\x00', 0x0, 0x0, 0xffffffffffffffff, 0x3ff, 0x1, 0x0) getpgrp(0xffffffffffffffff) getegid() sendmmsg$unix(r3, &(0x7f0000001880), 0x0, 0x0) setsockopt$netrom_NETROM_T4(0xffffffffffffffff, 0x103, 0x6, &(0x7f00000017c0), 0xfffffffffffffc77) readv(0xffffffffffffffff, &(0x7f000004ffe0), 0x0) 2018/03/29 11:12:17 executing program 7: io_setup(0x3, &(0x7f0000000000)=0x0) accept$unix(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000100)=0x6e) r1 = syz_open_dev$usbmon(&(0x7f0000000200)='/dev/usbmon#\x00', 0x7ff, 0x0) io_cancel(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0xf, 0x3, 0xffffffffffffffff, &(0x7f0000000140)="940c1f2149747e7734510c34c143183667a187dc4f624f6c2de12452792a6fb529e6bf2a661dc23a844b00925c244a9f2967c0ca9868ee50eacf67a2ad7681d82f5a38cbd6d7641f843fa129e00f701fb01835f497b53672b3e5a3f6838f28aa240bf21eb5e5cbe7804fd307404474ae0242f8dea7a08e0fe9479b06f2795f857f8eec271d35ba7f61a91c87296814189cc1dfc9c659cc5437452a0bd178323c50e8c005ba7fa9519b27965c9f6ffbc7dcaa8e658616cc83188fb131a703222d", 0xc0, 0x5, 0x0, 0x1}, &(0x7f0000000280)) io_getevents(r0, 0x0, 0x5, &(0x7f00000002c0)=[{}, {}, {}, {}, {}], &(0x7f00000003c0)) io_setup(0x7, &(0x7f0000000040)) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/route\x00') ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000004c0)=0x0) perf_event_open(&(0x7f0000aaa000)={0x0, 0x70, 0x4a, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ef4}, r3, 0x0, 0xffffffffffffffff, 0x1) pread64(r2, &(0x7f0000000000)=""/85, 0xfe42, 0x5d) socket$pptp(0x18, 0x1, 0x2) r4 = memfd_create(&(0x7f0000000240)=':+lo#\x00', 0x0) fdatasync(r4) io_submit(r0, 0x1, &(0x7f0000001280)=[&(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f0000000100)}]) timerfd_create(0x7, 0x80800) io_destroy(r0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x9, &(0x7f0000000380)=0x3, 0x4) [ 336.981439] RDX: 00000000004b9225 RSI: 0000000020001740 RDI: 0000000020001780 [ 336.988694] RBP: 0000000020001780 R08: 00007f032fc57b20 R09: 0000000000000000 [ 336.995952] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 337.003204] R13: 00000000000003ff R14: 0000000000000000 R15: ffffffffffffffff [ 337.049596] FAULT_INJECTION: forcing a failure. [ 337.049596] name failslab, interval 1, probability 0, space 0, times 0 [ 337.060910] CPU: 0 PID: 9743 Comm: syz-executor2 Not tainted 4.16.0-rc7+ #5 [ 337.068001] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 337.077340] Call Trace: [ 337.079911] dump_stack+0x194/0x24d [ 337.083519] ? arch_local_irq_restore+0x53/0x53 [ 337.088167] ? __save_stack_trace+0x7e/0xd0 [ 337.092477] should_fail+0x8c0/0xa40 [ 337.096169] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 337.101248] ? kasan_kmalloc+0xad/0xe0 [ 337.105112] ? kmem_cache_alloc_trace+0x136/0x740 [ 337.109930] ? __memcg_init_list_lru_node+0x169/0x270 [ 337.115095] ? __list_lru_init+0x544/0x750 [ 337.119305] ? sget_userns+0x6b1/0xe40 [ 337.123172] ? mount_fs+0x66/0x2d0 [ 337.126692] ? vfs_kern_mount.part.26+0xc6/0x4a0 [ 337.131422] ? do_mount+0xea4/0x2bb0 [ 337.135107] ? SyS_mount+0xab/0x120 [ 337.138708] ? do_syscall_64+0x281/0x940 [ 337.142756] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 337.148102] ? find_held_lock+0x35/0x1d0 [ 337.152144] ? __lock_is_held+0xb6/0x140 [ 337.156195] ? check_same_owner+0x320/0x320 [ 337.160494] ? rcu_note_context_switch+0x710/0x710 [ 337.165412] should_failslab+0xec/0x120 [ 337.169362] kmem_cache_alloc_trace+0x4b/0x740 [ 337.173930] ? __kmalloc_node+0x33/0x70 [ 337.177879] ? __kmalloc_node+0x33/0x70 [ 337.181829] ? rcu_read_lock_sched_held+0x108/0x120 [ 337.186826] __memcg_init_list_lru_node+0x169/0x270 [ 337.191821] ? list_lru_add+0x7c0/0x7c0 [ 337.195773] ? __kmalloc_node+0x47/0x70 [ 337.199732] __list_lru_init+0x544/0x750 [ 337.203774] ? memcg_destroy_list_lru_node.isra.7+0x110/0x110 [ 337.209638] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 337.214637] ? lockdep_init_map+0x9/0x10 [ 337.218679] sget_userns+0x6b1/0xe40 [ 337.222367] ? kill_litter_super+0x90/0x90 [ 337.226584] ? ns_test_super+0x50/0x50 [ 337.230449] ? destroy_unused_super.part.6+0xd0/0xd0 [ 337.235524] ? do_raw_spin_trylock+0x190/0x190 [ 337.240089] ? kobject_put+0x6b/0x250 [ 337.243874] ? blkdev_get+0x3a1/0xb00 [ 337.247657] ? cap_capable+0x1b5/0x230 [ 337.251519] ? __blkdev_get+0x13b0/0x13b0 [ 337.255646] ? security_capable+0x8e/0xc0 [ 337.259773] ? kill_litter_super+0x90/0x90 [ 337.263983] ? ns_capable_common+0xcf/0x160 [ 337.268284] ? ns_test_super+0x50/0x50 [ 337.272145] ? kill_litter_super+0x90/0x90 [ 337.276355] sget+0xd2/0x120 [ 337.279357] mount_bdev+0x109/0x370 [ 337.282961] ? fuse_get_root_inode+0x190/0x190 [ 337.287522] fuse_mount_blk+0x34/0x40 [ 337.291302] mount_fs+0x66/0x2d0 [ 337.294649] vfs_kern_mount.part.26+0xc6/0x4a0 [ 337.299207] ? may_umount+0xa0/0xa0 [ 337.302813] ? _raw_read_unlock+0x22/0x30 [ 337.306937] ? __get_fs_type+0x8a/0xc0 [ 337.310808] do_mount+0xea4/0x2bb0 [ 337.314332] ? copy_mount_string+0x40/0x40 [ 337.318552] ? rcu_pm_notify+0xc0/0xc0 [ 337.322427] ? copy_mount_options+0x5f/0x2e0 [ 337.326810] ? rcu_read_lock_sched_held+0x108/0x120 [ 337.331805] ? kmem_cache_alloc_trace+0x459/0x740 [ 337.336628] ? kasan_check_write+0x14/0x20 [ 337.340837] ? _copy_from_user+0x99/0x110 [ 337.344964] ? copy_mount_options+0x1f7/0x2e0 [ 337.349442] SyS_mount+0xab/0x120 [ 337.352870] ? copy_mnt_ns+0xb30/0xb30 [ 337.356736] do_syscall_64+0x281/0x940 [ 337.360597] ? __do_page_fault+0xc90/0xc90 [ 337.364806] ? _raw_spin_unlock_irq+0x27/0x70 [ 337.369276] ? finish_task_switch+0x1c1/0x7e0 [ 337.373747] ? syscall_return_slowpath+0x550/0x550 [ 337.378652] ? syscall_return_slowpath+0x2ac/0x550 [ 337.383559] ? prepare_exit_to_usermode+0x350/0x350 [ 337.388553] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 337.393898] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 337.398723] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 337.403894] RIP: 0033:0x4548b9 [ 337.407070] RSP: 002b:00007f032fc57b08 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 337.414753] RAX: ffffffffffffffda RBX: 0000000000000019 RCX: 00000000004548b9 [ 337.421999] RDX: 00000000004b9225 RSI: 0000000020001740 RDI: 0000000020001780 [ 337.429248] RBP: 0000000020001780 R08: 00007f032fc57b20 R09: 0000000000000000 [ 337.436491] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 337.443735] R13: 00000000000003ff R14: 0000000000000000 R15: ffffffffffffffff [ 337.491877] bond0 (unregistering): Released all slaves [ 338.197946] IPVS: ftp: loaded support on port[0] = 21 [ 338.494455] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 338.915179] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 338.921285] 8021q: adding VLAN 0 to HW filter on device bond0 [ 338.964285] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 339.008767] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 339.014922] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 339.022205] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready 2018/03/29 11:12:19 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) socketpair(0x10, 0x3, 0x4, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_TPR_ACCESS_REPORTING(r1, 0xc028ae92, &(0x7f0000001540)={0x1, 0x9}) readv(r0, &(0x7f0000001480)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x3}) r2 = syz_open_pts(r0, 0x2) r3 = dup3(r2, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000c34fff), 0xffffff0b) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0) preadv(r4, &(0x7f00000004c0)=[{&(0x7f0000000480)=""/21, 0x15}], 0x1, 0x0) fchdir(r2) socketpair$ipx(0x4, 0x2, 0x0, &(0x7f0000001580)) mkdir(&(0x7f0000000280)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f", 0xfffffffffffffffc) fchmod(r3, 0x0) splice(r4, &(0x7f0000000400), 0xffffffffffffffff, &(0x7f0000000440), 0x9, 0x2) rename(&(0x7f0000001e00)='./file0\x00', &(0x7f0000000100)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f") mkdir(&(0x7f000000e000)='./control\x00', 0x0) r5 = open(&(0x7f0000000000)='./control\x00', 0x0, 0x0) renameat2(r5, &(0x7f0000000040)='./file0\x00', r5, &(0x7f0000000080)='./control\x00', 0x2) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r5, 0x84, 0x76, &(0x7f0000000300)={0x0, 0x80}, &(0x7f0000000340)=0x8) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000200)={'nr0\x00', 0x0}) bind(r5, &(0x7f00000014c0)=@can={0x1d, r7}, 0x80) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r5, 0x84, 0x76, &(0x7f0000000380)={r6, 0x5}, &(0x7f00000003c0)=0x8) mknodat(r5, &(0x7f000003f000)='./control\x00', 0x0, 0x0) symlink(&(0x7f0000000180)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f", &(0x7f00000000c0)='./file0\x00') perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(r5, &(0x7f0000010000)='./control\x00', &(0x7f000003f000), &(0x7f0000001fe8), 0x0) 2018/03/29 11:12:19 executing program 7: io_setup(0x3, &(0x7f0000000000)=0x0) r1 = accept$unix(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000100)=0x6e) syz_open_dev$usbmon(&(0x7f0000000200)='/dev/usbmon#\x00', 0x7ff, 0x0) io_cancel(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0xf, 0x3, 0xffffffffffffffff, &(0x7f0000000140)="940c1f2149747e7734510c34c143183667a187dc4f624f6c2de12452792a6fb529e6bf2a661dc23a844b00925c244a9f2967c0ca9868ee50eacf67a2ad7681d82f5a38cbd6d7641f843fa129e00f701fb01835f497b53672b3e5a3f6838f28aa240bf21eb5e5cbe7804fd307404474ae0242f8dea7a08e0fe9479b06f2795f857f8eec271d35ba7f61a91c87296814189cc1dfc9c659cc5437452a0bd178323c50e8c005ba7fa9519b27965c9f6ffbc7dcaa8e658616cc83188fb131a703222d", 0xc0, 0x5, 0x0, 0x1}, &(0x7f0000000280)) io_getevents(r0, 0x2, 0x8f, &(0x7f0000d83f60)=[{}, {}], &(0x7f00005cfff0)={0x4000000000001, 0x7}) io_getevents(r0, 0x0, 0x5, &(0x7f00000002c0)=[{}, {}, {}, {}, {}], &(0x7f00000003c0)) getpeername$unix(r1, &(0x7f0000000480), &(0x7f0000000500)=0x6e) io_setup(0x7, &(0x7f0000000040)) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/route\x00') ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000440)=0x0) perf_event_open(&(0x7f0000aaa000)={0x0, 0x70, 0x4a, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ef4}, r3, 0x0, 0xffffffffffffffff, 0x1) pread64(r2, &(0x7f0000000000)=""/85, 0xfe42, 0x5d) r4 = memfd_create(&(0x7f0000000240)=':+lo#\x00', 0x0) fdatasync(r4) io_submit(r0, 0x1, &(0x7f0000001280)=[&(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f0000000100)}]) timerfd_create(0x4, 0x80801) io_destroy(r0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x9, &(0x7f0000000380)=0x3, 0x4) 2018/03/29 11:12:19 executing program 1: io_setup(0x3, &(0x7f0000000000)=0x0) accept$unix(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000100)=0x6e) r1 = syz_open_dev$usbmon(&(0x7f0000000200)='/dev/usbmon#\x00', 0x0, 0x0) io_cancel(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0xf, 0x3, 0xffffffffffffffff, &(0x7f0000000140)="940c1f2149747e7734510c34c143183667a187dc4f624f6c2de12452792a6fb529e6bf2a661dc23a844b00925c244a9f2967c0ca9868ee50eacf67a2ad7681d82f5a38cbd6d7641f843fa129e00f701fb01835f497b53672b3e5a3f6838f28aa240bf21eb5e5cbe7804fd307404474ae0242f8dea7a08e0fe9479b06f2795f857f8eec271d35ba7f61a91c87296814189cc1dfc9c659cc5437452a0bd178323c50e8c005ba7fa9519b27965c9f6ffbc7dcaa8e658616cc83188fb131a703222d", 0xc0, 0x5, 0x0, 0x1}, &(0x7f0000000280)) io_getevents(r0, 0x2, 0x8f, &(0x7f0000d83f60)=[{}, {}], &(0x7f00005cfff0)={0x4000000000001, 0x7}) io_getevents(r0, 0x0, 0x5, &(0x7f00000002c0)=[{}, {}, {}, {}, {}], &(0x7f00000003c0)) io_setup(0x7, &(0x7f0000000040)) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/route\x00') ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000440)=0x0) perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x4a, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ef4}, r3, 0x0, 0xffffffffffffffff, 0x1) pread64(r2, &(0x7f0000000000)=""/85, 0xfe42, 0x5d) r4 = memfd_create(&(0x7f0000000240)=':+lo#\x00', 0x0) fdatasync(r4) io_submit(r0, 0x1, &(0x7f0000001280)=[&(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f0000000100)}]) timerfd_create(0x7, 0x80800) io_destroy(r0) setsockopt$llc_int(r1, 0x10c, 0x0, &(0x7f0000000380)=0x3, 0x4) 2018/03/29 11:12:19 executing program 3: io_setup(0x3, &(0x7f0000000000)=0x0) accept$unix(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000100)=0x6e) r1 = syz_open_dev$usbmon(&(0x7f0000000200)='/dev/usbmon#\x00', 0x7ff, 0x0) io_cancel(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0xf, 0x0, 0xffffffffffffffff, &(0x7f0000000140)="940c1f2149747e7734510c34c143183667a187dc4f624f6c2de12452792a6fb529e6bf2a661dc23a844b00925c244a9f2967c0ca9868ee50eacf67a2ad7681d82f5a38cbd6d7641f843fa129e00f701fb01835f497b53672b3e5a3f6838f28aa240bf21eb5e5cbe7804fd307404474ae0242f8dea7a08e0fe9479b06f2795f857f8eec271d35ba7f61a91c87296814189cc1dfc9c659cc5437452a0bd178323c50e8c005ba7fa9519b27965c9f6ffbc7dcaa8e658616cc83188fb131a703222d", 0xc0, 0x5, 0x0, 0x1, r1}, &(0x7f0000000280)) io_getevents(r0, 0x2, 0x8f, &(0x7f0000d83f60)=[{}, {}], &(0x7f00005cfff0)={0x4000000000001, 0x7}) io_getevents(r0, 0x0, 0x5, &(0x7f00000002c0)=[{}, {}, {}, {}, {}], &(0x7f00000003c0)) io_setup(0x100, &(0x7f00000004c0)) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/route\x00') ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000440)=0x0) perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x4a, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ef4}, r3, 0x0, r1, 0x1) pread64(r2, &(0x7f0000000000)=""/85, 0xfe42, 0x5d) r4 = memfd_create(&(0x7f0000000240)=':+lo#\x00', 0x0) fdatasync(r4) io_submit(r0, 0x1, &(0x7f0000001280)=[&(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f0000000100)}]) timerfd_create(0x7, 0x80800) io_destroy(r0) setsockopt$llc_int(r1, 0x10c, 0x9, &(0x7f0000000380)=0x3, 0x4) 2018/03/29 11:12:19 executing program 2 (fault-call:21 fault-nth:39): r0 = syz_open_procfs(0x0, &(0x7f00000004c0)='oom_score_adj\x00') perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x49, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(r0, 0x0, 0x83, &(0x7f0000001800)={'nat\x00', 0x0, 0x3, 0x1000, [], 0x2, &(0x7f0000001280)=[{}, {}], &(0x7f0000002040)=""/4096}, &(0x7f00000013c0)=0x78) ioprio_get$pid(0x0, 0x0) timer_create(0x0, &(0x7f0000cd0000), &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00004b1fe0)={{0x0, 0x1c9c380}, {0x0, 0x9}}, &(0x7f0000040000)) r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x7fff) truncate(&(0x7f0000001180)='./bus\x00', 0x4) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000f40000)='/dev/ptmx\x00', 0x200000000101002, 0x0) sendfile(r2, 0xffffffffffffffff, &(0x7f00000010c0), 0x10000065) sendfile(r0, r1, &(0x7f0000000000), 0x4) tkill(0x0, 0x0) r3 = memfd_create(&(0x7f0000000000)='\x00', 0x1) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000001200)) recvmsg(0xffffffffffffff9c, &(0x7f0000001500)={&(0x7f00000012c0)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @remote}}}, 0x80, &(0x7f0000001400)=[{&(0x7f0000001340)=""/103, 0x67}], 0x1, &(0x7f0000001440)=""/155, 0x9b}, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000001540)) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000001640)={0x1ff, {0x2, 0x4e21}, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, {0x2, 0x0, @multicast2=0xe0000002}, 0x0, 0x9, 0x2, 0x6, 0x0, &(0x7f0000001240)='teql0\x00', 0x0, 0x80}) inotify_rm_watch(0xffffffffffffffff, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000140), &(0x7f0000000100)=0xffffffa4) getgroups(0x1, &(0x7f0000001600)=[0x0]) syz_fuseblk_mount(&(0x7f0000001740)='./file0\x00', &(0x7f0000001780)='./file0\x00', 0x0, 0x0, 0xffffffffffffffff, 0x3ff, 0x1, 0x0) getpgrp(0xffffffffffffffff) getegid() sendmmsg$unix(r3, &(0x7f0000001880), 0x0, 0x0) setsockopt$netrom_NETROM_T4(0xffffffffffffffff, 0x103, 0x6, &(0x7f00000017c0), 0xfffffffffffffc77) readv(0xffffffffffffffff, &(0x7f000004ffe0), 0x0) 2018/03/29 11:12:19 executing program 0: r0 = perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x4a, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffff9c, 0xc00caee0, &(0x7f0000000180)={0x0, r0, 0x1}) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) fcntl$getownex(r0, 0x10, &(0x7f0000000400)={0x0, 0x0}) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0xffff, 0xe3, 0x6, 0x4, 0x0, 0x7, 0x0, 0x2, 0x10001, 0x1, 0x7, 0x8, 0x100, 0x4, 0x0, 0x7f, 0x20, 0x0, 0x4, 0x5, 0x90a4, 0x7, 0x2, 0x73, 0x8, 0x7, 0x4, 0x7e0, 0x101, 0x0, 0x2, 0x309, 0x0, 0x9, 0xfffffffffffffff9, 0x9, 0x0, 0x4, 0x0, @perf_config_ext={0x20, 0x1}, 0x8140, 0x2, 0x0, 0x4, 0xca1, 0xb5}, r4, 0x4, 0xffffffffffffffff, 0x8) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) futimesat(r1, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0)={{r2, r3/1000+10000}, {r5, r6/1000+10000}}) unshare(0x8000000) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0xdc, 0x40}, 0x341) r8 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8910, &(0x7f0000000080)=@buf={0x0, &(0x7f0000000000)}) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x13, &(0x7f0000000ffc), 0x4) mq_open(&(0x7f00000000c0)='syzkaller0\x00', 0x40, 0x8, &(0x7f0000000100)={0x5, 0x80000000, 0x0, 0xfffffffffffffff9, 0x1, 0xfffffffffffffffd, 0x7fff, 0x200}) socket$inet_tcp(0x2, 0x1, 0x0) r9 = dup3(r8, r7, 0x80000) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r9, 0x84, 0x66, &(0x7f00000002c0)={0x0, 0x8ed6}, &(0x7f0000000300)=0x1) bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) shmget(0xffffffffffffffff, 0x8000, 0x49b, &(0x7f0000ff8000/0x8000)=nil) ioctl$sock_inet_SIOCGIFPFLAGS(r8, 0x8935, &(0x7f0000000080)={'syzkaller0\x00'}) ppoll(&(0x7f0000000780)=[{r1, 0x300}, {r1, 0x8401}], 0x2, &(0x7f00000007c0)={0x77359400}, &(0x7f0000000800)={0x9}, 0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000280)={0x0, 0x0, 0x9}, 0x10) r10 = semget$private(0x0, 0x4, 0x0) semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0x0, 0x1000}], 0x1, &(0x7f0000000080)={0x0, 0x1c9c380}) semctl$IPC_RMID(r10, 0x0, 0x0) 2018/03/29 11:12:19 executing program 6: openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x0, 0x0) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, &(0x7f0000000340)=0x1) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f000051cff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000943ffc)=0xa35) read(r0, &(0x7f00003fefff)=""/1, 0x1) r1 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000029000)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r0, &(0x7f0000dcdff0)=[{&(0x7f0000cd8000)=""/1, 0x1}], 0x1) ioctl$int_in(r2, 0x5452, &(0x7f0000b28000)=0x3c) write$cgroup_type(0xffffffffffffffff, &(0x7f00000002c0)='threaded\x00', 0x9) syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x0, 0x802) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000fb9000)) fcntl$setsig(r2, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r3}], 0x1, 0xfffffffffffffff8) read$eventfd(0xffffffffffffffff, &(0x7f0000000040), 0x8) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)) r4 = dup2(0xffffffffffffffff, r3) fcntl$setown(r4, 0x8, r1) ptrace$cont(0xffffffffffffffff, r1, 0x0, 0x8) tkill(r1, 0x16) r5 = gettid() process_vm_readv(r5, &(0x7f0000001880)=[{&(0x7f0000000680)=""/198, 0xc6}, {&(0x7f0000000780)=""/247, 0xf7}, {&(0x7f0000000380)=""/12, 0xc}, {&(0x7f00000003c0)=""/6, 0x6}, {&(0x7f0000000400)=""/14, 0xe}], 0x5, &(0x7f00000019c0)=[{&(0x7f0000001900)=""/41, 0x29}, {&(0x7f0000001940)=""/112, 0x70}], 0x2, 0x0) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f0000000240)={{{@in6}}, {{@in=@local}, 0x0, @in=@local}}, &(0x7f0000000100)=0xe8) 2018/03/29 11:12:19 executing program 5: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000340)='/dev/sequencer2\x00', 0x2, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000380)={0x0, 0x10000}, &(0x7f00000003c0)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000400)={r1, 0xff58, 0x42, "c3882d3d9418a005ea6420bbe43717dd56f655b9113c31e8f8afa7fc17c5156709fa015c58c93e78879492a7c086fc6a7cd7a971e10f2f7ae41a2324c406e28ccb1c"}, 0x4a) mkdir(&(0x7f0000000000)='./file1\x00', 0x0) mount(&(0x7f0000000140)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f00000002c0)='bdev\x00', 0x0, &(0x7f0000000240)="8229ce838bacf0d30f9f6bc719129af0c7a4ec704e3ab8ea5398417bef42815ff4bf1b4f97104d2045352827cc5fc543af43e214afafb0d33bac45fa4adf8adc50e490eed36d087b7a3aab9261e2cd453e8618a9a7ffc2734eb5ea8b2daa519122aa41") mount(&(0x7f0000fb6000)='./file0\x00', &(0x7f0000d78000)='.', &(0x7f0000fdb000)='ubifs\x00', 0x1003, 0x0) mount(&(0x7f00002b9ff8)='./file0\x00', &(0x7f0000cbeff8)='./file0\x00', &(0x7f00005f7ffa)='ramfs\x00', 0x80000, &(0x7f000002f000)) open(&(0x7f0000000300)='./file1\x00', 0x10201, 0x80) open$dir(&(0x7f0000000100)='./file0\x00', 0x101000, 0x80) mount(&(0x7f0000000040)='.', &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0)='binfmt_misc\x00', 0x0, &(0x7f0000000100)) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) mount(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./file1\x00', &(0x7f0000000200)='anon_inodefs\x00', 0x2000, &(0x7f0000000240)) mount(&(0x7f0000adcff8)='./file0\x00', &(0x7f0000e08fff)='.', &(0x7f00005e9000)='cifs\x00', 0x2000, &(0x7f0000ad5000)) [ 339.147373] FAULT_INJECTION: forcing a failure. [ 339.147373] name failslab, interval 1, probability 0, space 0, times 0 [ 339.158648] CPU: 0 PID: 9922 Comm: syz-executor2 Not tainted 4.16.0-rc7+ #5 [ 339.165737] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 339.175067] Call Trace: [ 339.177648] dump_stack+0x194/0x24d [ 339.181354] ? arch_local_irq_restore+0x53/0x53 [ 339.186010] ? __save_stack_trace+0x7e/0xd0 [ 339.190342] should_fail+0x8c0/0xa40 [ 339.194057] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 339.199147] ? kasan_kmalloc+0xad/0xe0 [ 339.203016] ? kmem_cache_alloc_trace+0x136/0x740 [ 339.207839] ? __memcg_init_list_lru_node+0x169/0x270 [ 339.213002] ? __list_lru_init+0x544/0x750 [ 339.217214] ? sget_userns+0x6b1/0xe40 [ 339.221077] ? mount_fs+0x66/0x2d0 [ 339.224608] ? vfs_kern_mount.part.26+0xc6/0x4a0 [ 339.229337] ? do_mount+0xea4/0x2bb0 [ 339.233034] ? SyS_mount+0xab/0x120 [ 339.236639] ? do_syscall_64+0x281/0x940 [ 339.240679] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 339.246029] ? find_held_lock+0x35/0x1d0 [ 339.250076] ? __lock_is_held+0xb6/0x140 [ 339.254127] ? check_same_owner+0x320/0x320 [ 339.258428] ? rcu_note_context_switch+0x710/0x710 [ 339.263344] should_failslab+0xec/0x120 [ 339.267296] kmem_cache_alloc_trace+0x4b/0x740 [ 339.271853] ? __kmalloc_node+0x33/0x70 [ 339.275802] ? __kmalloc_node+0x33/0x70 [ 339.279755] ? rcu_read_lock_sched_held+0x108/0x120 [ 339.284752] __memcg_init_list_lru_node+0x169/0x270 [ 339.289747] ? list_lru_add+0x7c0/0x7c0 [ 339.293698] ? __kmalloc_node+0x47/0x70 [ 339.297656] __list_lru_init+0x544/0x750 [ 339.301700] ? memcg_destroy_list_lru_node.isra.7+0x110/0x110 [ 339.307560] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 339.312560] ? lockdep_init_map+0x9/0x10 [ 339.316600] sget_userns+0x6b1/0xe40 [ 339.320290] ? kill_litter_super+0x90/0x90 [ 339.324506] ? ns_test_super+0x50/0x50 [ 339.328372] ? destroy_unused_super.part.6+0xd0/0xd0 [ 339.333451] ? do_raw_spin_trylock+0x190/0x190 [ 339.338018] ? kobject_put+0x6b/0x250 [ 339.341809] ? blkdev_get+0x3a1/0xb00 [ 339.345590] ? cap_capable+0x1b5/0x230 [ 339.349452] ? __blkdev_get+0x13b0/0x13b0 [ 339.353599] ? security_capable+0x8e/0xc0 [ 339.357724] ? kill_litter_super+0x90/0x90 [ 339.361935] ? ns_capable_common+0xcf/0x160 [ 339.366233] ? ns_test_super+0x50/0x50 [ 339.370092] ? kill_litter_super+0x90/0x90 [ 339.374301] sget+0xd2/0x120 [ 339.377304] mount_bdev+0x109/0x370 [ 339.380908] ? fuse_get_root_inode+0x190/0x190 [ 339.385471] fuse_mount_blk+0x34/0x40 [ 339.389251] mount_fs+0x66/0x2d0 [ 339.392601] vfs_kern_mount.part.26+0xc6/0x4a0 [ 339.397162] ? may_umount+0xa0/0xa0 [ 339.400771] ? _raw_read_unlock+0x22/0x30 [ 339.404903] ? __get_fs_type+0x8a/0xc0 [ 339.408775] do_mount+0xea4/0x2bb0 [ 339.412302] ? copy_mount_string+0x40/0x40 [ 339.416514] ? rcu_pm_notify+0xc0/0xc0 [ 339.420386] ? copy_mount_options+0x5f/0x2e0 [ 339.424768] ? rcu_read_lock_sched_held+0x108/0x120 [ 339.429760] ? kmem_cache_alloc_trace+0x459/0x740 [ 339.434581] ? kasan_check_write+0x14/0x20 [ 339.438798] ? _copy_from_user+0x99/0x110 [ 339.442928] ? copy_mount_options+0x1f7/0x2e0 [ 339.447402] SyS_mount+0xab/0x120 [ 339.450830] ? copy_mnt_ns+0xb30/0xb30 [ 339.454694] do_syscall_64+0x281/0x940 [ 339.458554] ? __do_page_fault+0xc90/0xc90 [ 339.462762] ? _raw_spin_unlock_irq+0x27/0x70 [ 339.467232] ? finish_task_switch+0x1c1/0x7e0 [ 339.471704] ? syscall_return_slowpath+0x550/0x550 [ 339.476608] ? syscall_return_slowpath+0x2ac/0x550 [ 339.481514] ? prepare_exit_to_usermode+0x350/0x350 [ 339.486508] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 339.491850] ? trace_hardirqs_off_thunk+0x1a/0x1c 2018/03/29 11:12:20 executing program 0: r0 = perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x4a, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffff9c, 0xc00caee0, &(0x7f0000000180)={0x0, r0, 0x1}) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) fcntl$getownex(r0, 0x10, &(0x7f0000000400)={0x0, 0x0}) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0xffff, 0xe3, 0x6, 0x4, 0x0, 0x7, 0x0, 0x2, 0x10001, 0x1, 0x7, 0x8, 0x100, 0x4, 0x0, 0x7f, 0x20, 0x0, 0x4, 0x5, 0x90a4, 0x7, 0x2, 0x73, 0x8, 0x7, 0x4, 0x7e0, 0x101, 0x0, 0x2, 0x309, 0x0, 0x9, 0xfffffffffffffff9, 0x9, 0x0, 0x4, 0x0, @perf_config_ext={0x20, 0x1}, 0x8140, 0x2, 0x0, 0x4, 0xca1, 0xb5}, r4, 0x4, 0xffffffffffffffff, 0x8) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) futimesat(r1, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0)={{r2, r3/1000+10000}, {r5, r6/1000+10000}}) unshare(0x8000000) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0xdc, 0x40}, 0x341) r8 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8910, &(0x7f0000000080)=@buf={0x0, &(0x7f0000000000)}) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x13, &(0x7f0000000ffc), 0x4) mq_open(&(0x7f00000000c0)='syzkaller0\x00', 0x40, 0x8, &(0x7f0000000100)={0x5, 0x80000000, 0x0, 0xfffffffffffffff9, 0x1, 0xfffffffffffffffd, 0x7fff, 0x200}) socket$inet_tcp(0x2, 0x1, 0x0) r9 = dup3(r8, r7, 0x80000) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r9, 0x84, 0x66, &(0x7f00000002c0)={0x0, 0x8ed6}, &(0x7f0000000300)=0x1) bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) shmget(0xffffffffffffffff, 0x8000, 0x49b, &(0x7f0000ff8000/0x8000)=nil) ioctl$sock_inet_SIOCGIFPFLAGS(r8, 0x8935, &(0x7f0000000080)={'syzkaller0\x00'}) ppoll(&(0x7f0000000780)=[{r1, 0x300}, {r1, 0x8401}], 0x2, &(0x7f00000007c0)={0x77359400}, &(0x7f0000000800)={0x9}, 0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000280)={0x0, 0x0, 0x9}, 0x10) r10 = semget$private(0x0, 0x4, 0x0) semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0x0, 0x1000}], 0x1, &(0x7f0000000080)={0x0, 0x1c9c380}) semctl$IPC_RMID(r10, 0x0, 0x0) 2018/03/29 11:12:20 executing program 2 (fault-call:21 fault-nth:40): r0 = syz_open_procfs(0x0, &(0x7f00000004c0)='oom_score_adj\x00') perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x49, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(r0, 0x0, 0x83, &(0x7f0000001800)={'nat\x00', 0x0, 0x3, 0x1000, [], 0x2, &(0x7f0000001280)=[{}, {}], &(0x7f0000002040)=""/4096}, &(0x7f00000013c0)=0x78) ioprio_get$pid(0x0, 0x0) timer_create(0x0, &(0x7f0000cd0000), &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00004b1fe0)={{0x0, 0x1c9c380}, {0x0, 0x9}}, &(0x7f0000040000)) r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x7fff) truncate(&(0x7f0000001180)='./bus\x00', 0x4) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000f40000)='/dev/ptmx\x00', 0x200000000101002, 0x0) sendfile(r2, 0xffffffffffffffff, &(0x7f00000010c0), 0x10000065) sendfile(r0, r1, &(0x7f0000000000), 0x4) tkill(0x0, 0x0) r3 = memfd_create(&(0x7f0000000000)='\x00', 0x1) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000001200)) recvmsg(0xffffffffffffff9c, &(0x7f0000001500)={&(0x7f00000012c0)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @remote}}}, 0x80, &(0x7f0000001400)=[{&(0x7f0000001340)=""/103, 0x67}], 0x1, &(0x7f0000001440)=""/155, 0x9b}, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000001540)) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000001640)={0x1ff, {0x2, 0x4e21}, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, {0x2, 0x0, @multicast2=0xe0000002}, 0x0, 0x9, 0x2, 0x6, 0x0, &(0x7f0000001240)='teql0\x00', 0x0, 0x80}) inotify_rm_watch(0xffffffffffffffff, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000140), &(0x7f0000000100)=0xffffffa4) getgroups(0x1, &(0x7f0000001600)=[0x0]) syz_fuseblk_mount(&(0x7f0000001740)='./file0\x00', &(0x7f0000001780)='./file0\x00', 0x0, 0x0, 0xffffffffffffffff, 0x3ff, 0x1, 0x0) getpgrp(0xffffffffffffffff) getegid() sendmmsg$unix(r3, &(0x7f0000001880), 0x0, 0x0) setsockopt$netrom_NETROM_T4(0xffffffffffffffff, 0x103, 0x6, &(0x7f00000017c0), 0xfffffffffffffc77) readv(0xffffffffffffffff, &(0x7f000004ffe0), 0x0) [ 339.496676] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 339.501840] RIP: 0033:0x4548b9 [ 339.505006] RSP: 002b:00007f032fc57b08 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 339.512693] RAX: ffffffffffffffda RBX: 0000000000000019 RCX: 00000000004548b9 [ 339.519937] RDX: 00000000004b9225 RSI: 0000000020001740 RDI: 0000000020001780 [ 339.527179] RBP: 0000000020001780 R08: 00007f032fc57b20 R09: 0000000000000000 [ 339.534430] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 339.541672] R13: 00000000000003ff R14: 0000000000000000 R15: ffffffffffffffff [ 339.596701] FAULT_INJECTION: forcing a failure. [ 339.596701] name failslab, interval 1, probability 0, space 0, times 0 [ 339.608053] CPU: 0 PID: 9941 Comm: syz-executor2 Not tainted 4.16.0-rc7+ #5 [ 339.615136] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 339.624463] Call Trace: [ 339.627034] dump_stack+0x194/0x24d [ 339.630655] ? arch_local_irq_restore+0x53/0x53 [ 339.635300] ? __save_stack_trace+0x7e/0xd0 [ 339.639609] should_fail+0x8c0/0xa40 [ 339.643416] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 339.648495] ? kasan_kmalloc+0xad/0xe0 [ 339.652357] ? kmem_cache_alloc_trace+0x136/0x740 [ 339.657174] ? __memcg_init_list_lru_node+0x169/0x270 [ 339.662335] ? __list_lru_init+0x544/0x750 [ 339.666558] ? sget_userns+0x6b1/0xe40 [ 339.670420] ? mount_fs+0x66/0x2d0 [ 339.674026] ? vfs_kern_mount.part.26+0xc6/0x4a0 [ 339.678754] ? do_mount+0xea4/0x2bb0 [ 339.682443] ? SyS_mount+0xab/0x120 [ 339.686042] ? do_syscall_64+0x281/0x940 [ 339.690078] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 339.695423] ? find_held_lock+0x35/0x1d0 [ 339.699464] ? __lock_is_held+0xb6/0x140 [ 339.703516] ? check_same_owner+0x320/0x320 [ 339.707814] ? rcu_note_context_switch+0x710/0x710 [ 339.712725] should_failslab+0xec/0x120 [ 339.716763] kmem_cache_alloc_trace+0x4b/0x740 [ 339.721322] ? __kmalloc_node+0x33/0x70 [ 339.725270] ? __kmalloc_node+0x33/0x70 [ 339.729313] ? rcu_read_lock_sched_held+0x108/0x120 [ 339.734310] __memcg_init_list_lru_node+0x169/0x270 [ 339.739306] ? list_lru_add+0x7c0/0x7c0 [ 339.743256] ? __kmalloc_node+0x47/0x70 [ 339.747212] __list_lru_init+0x544/0x750 [ 339.751253] ? memcg_destroy_list_lru_node.isra.7+0x110/0x110 [ 339.757116] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 339.762115] ? lockdep_init_map+0x9/0x10 [ 339.766158] sget_userns+0x6b1/0xe40 [ 339.769847] ? kill_litter_super+0x90/0x90 [ 339.774066] ? ns_test_super+0x50/0x50 [ 339.777933] ? destroy_unused_super.part.6+0xd0/0xd0 [ 339.783015] ? do_raw_spin_trylock+0x190/0x190 [ 339.787583] ? kobject_put+0x6b/0x250 [ 339.791366] ? blkdev_get+0x3a1/0xb00 [ 339.795150] ? cap_capable+0x1b5/0x230 [ 339.799020] ? __blkdev_get+0x13b0/0x13b0 [ 339.803147] ? security_capable+0x8e/0xc0 [ 339.807271] ? kill_litter_super+0x90/0x90 [ 339.811483] ? ns_capable_common+0xcf/0x160 [ 339.815782] ? ns_test_super+0x50/0x50 [ 339.819643] ? kill_litter_super+0x90/0x90 [ 339.823851] sget+0xd2/0x120 [ 339.826852] mount_bdev+0x109/0x370 [ 339.830456] ? fuse_get_root_inode+0x190/0x190 [ 339.835022] fuse_mount_blk+0x34/0x40 [ 339.839148] mount_fs+0x66/0x2d0 [ 339.842493] vfs_kern_mount.part.26+0xc6/0x4a0 [ 339.847055] ? may_umount+0xa0/0xa0 [ 339.850656] ? _raw_read_unlock+0x22/0x30 [ 339.854777] ? __get_fs_type+0x8a/0xc0 [ 339.858647] do_mount+0xea4/0x2bb0 [ 339.862170] ? copy_mount_string+0x40/0x40 [ 339.866380] ? rcu_pm_notify+0xc0/0xc0 [ 339.870254] ? copy_mount_options+0x5f/0x2e0 [ 339.874640] ? rcu_read_lock_sched_held+0x108/0x120 [ 339.879630] ? kmem_cache_alloc_trace+0x459/0x740 [ 339.884450] ? kasan_check_write+0x14/0x20 [ 339.888669] ? copy_mount_options+0x1f7/0x2e0 [ 339.893145] SyS_mount+0xab/0x120 [ 339.896574] ? copy_mnt_ns+0xb30/0xb30 [ 339.900438] do_syscall_64+0x281/0x940 [ 339.904298] ? __do_page_fault+0xc90/0xc90 [ 339.908508] ? _raw_spin_unlock_irq+0x27/0x70 [ 339.912978] ? finish_task_switch+0x1c1/0x7e0 [ 339.917450] ? syscall_return_slowpath+0x550/0x550 [ 339.922357] ? syscall_return_slowpath+0x2ac/0x550 [ 339.927262] ? prepare_exit_to_usermode+0x350/0x350 [ 339.932255] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 339.937600] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 339.942424] entry_SYSCALL_64_after_hwframe+0x42/0xb7 2018/03/29 11:12:20 executing program 1: io_setup(0x3, &(0x7f0000000000)=0x0) accept$unix(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000100)=0x6e) r1 = syz_open_dev$usbmon(&(0x7f0000000200)='/dev/usbmon#\x00', 0x0, 0x0) io_cancel(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0xf, 0x3, 0xffffffffffffffff, &(0x7f0000000140)="940c1f2149747e7734510c34c143183667a187dc4f624f6c2de12452792a6fb529e6bf2a661dc23a844b00925c244a9f2967c0ca9868ee50eacf67a2ad7681d82f5a38cbd6d7641f843fa129e00f701fb01835f497b53672b3e5a3f6838f28aa240bf21eb5e5cbe7804fd307404474ae0242f8dea7a08e0fe9479b06f2795f857f8eec271d35ba7f61a91c87296814189cc1dfc9c659cc5437452a0bd178323c50e8c005ba7fa9519b27965c9f6ffbc7dcaa8e658616cc83188fb131a703222d", 0xc0, 0x5, 0x0, 0x1}, &(0x7f0000000280)) io_getevents(r0, 0x2, 0x8f, &(0x7f0000d83f60)=[{}, {}], &(0x7f00005cfff0)={0x4000000000001, 0x7}) io_getevents(r0, 0x0, 0x5, &(0x7f00000002c0)=[{}, {}, {}, {}, {}], &(0x7f00000003c0)) io_setup(0x7, &(0x7f0000000040)) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/route\x00') ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000440)=0x0) perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x4a, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ef4}, r3, 0x0, 0xffffffffffffffff, 0x1) pread64(r2, &(0x7f0000000000)=""/85, 0xfe42, 0x5d) r4 = memfd_create(&(0x7f0000000240)=':+lo#\x00', 0x0) fdatasync(r4) io_submit(r0, 0x1, &(0x7f0000001280)=[&(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f0000000100)}]) timerfd_create(0x7, 0x80800) io_destroy(r0) setsockopt$llc_int(r1, 0x10c, 0x9, &(0x7f0000000380), 0x4) 2018/03/29 11:12:20 executing program 7: io_setup(0x3, &(0x7f0000000000)=0x0) accept$unix(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000100)=0x6e) syz_open_dev$usbmon(&(0x7f0000000200)='/dev/usbmon#\x00', 0x7ff, 0x0) io_cancel(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0xf, 0x3, 0xffffffffffffffff, &(0x7f0000000140)="940c1f2149747e7734510c34c143183667a187dc4f624f6c2de12452792a6fb529e6bf2a661dc23a844b00925c244a9f2967c0ca9868ee50eacf67a2ad7681d82f5a38cbd6d7641f843fa129e00f701fb01835f497b53672b3e5a3f6838f28aa240bf21eb5e5cbe7804fd307404474ae0242f8dea7a08e0fe9479b06f2795f857f8eec271d35ba7f61a91c87296814189cc1dfc9c659cc5437452a0bd178323c50e8c005ba7fa9519b27965c9f6ffbc7dcaa8e658616cc83188fb131a703222d", 0xc0, 0x5, 0x0, 0x1}, &(0x7f0000000280)) io_getevents(r0, 0x2, 0x8f, &(0x7f0000d83f60)=[{}, {}], &(0x7f00005cfff0)={0x4000000000001, 0x7}) io_getevents(r0, 0x0, 0x5, &(0x7f00000002c0)=[{}, {}, {}, {}, {}], &(0x7f00000003c0)) io_setup(0x7, &(0x7f0000000040)) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/route\x00') ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000440)=0x0) perf_event_open(&(0x7f0000aaa000)={0x0, 0x70, 0x4a, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ef4}, r2, 0x0, 0xffffffffffffffff, 0x1) pread64(r1, &(0x7f0000000000)=""/85, 0xfe42, 0x5d) r3 = memfd_create(&(0x7f0000000240)=':+lo#\x00', 0x0) fdatasync(r3) io_submit(r0, 0x1, &(0x7f0000001280)=[&(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000000100)}]) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r1, 0xc08c5334, &(0x7f0000000480)={0x800, 0x401, 0x2, 'queue1\x00', 0x80}) timerfd_create(0x7, 0x80800) io_destroy(r0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x9, &(0x7f0000000380)=0x3, 0x4) 2018/03/29 11:12:20 executing program 3: io_setup(0x3, &(0x7f0000000000)=0x0) accept$unix(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000100)=0x6e) r1 = syz_open_dev$usbmon(&(0x7f0000000200)='/dev/usbmon#\x00', 0x7ff, 0x0) io_cancel(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0xf, 0x0, 0xffffffffffffffff, &(0x7f0000000140)="940c1f2149747e7734510c34c143183667a187dc4f624f6c2de12452792a6fb529e6bf2a661dc23a844b00925c244a9f2967c0ca9868ee50eacf67a2ad7681d82f5a38cbd6d7641f843fa129e00f701fb01835f497b53672b3e5a3f6838f28aa240bf21eb5e5cbe7804fd307404474ae0242f8dea7a08e0fe9479b06f2795f857f8eec271d35ba7f61a91c87296814189cc1dfc9c659cc5437452a0bd178323c50e8c005ba7fa9519b27965c9f6ffbc7dcaa8e658616cc83188fb131a703222d", 0xc0, 0x5, 0x0, 0x1, r1}, &(0x7f0000000280)) io_getevents(r0, 0x2, 0x8f, &(0x7f0000d83f60)=[{}, {}], &(0x7f00005cfff0)={0x4000000000001, 0x7}) io_getevents(r0, 0x0, 0x5, &(0x7f00000002c0)=[{}, {}, {}, {}, {}], &(0x7f00000003c0)) io_setup(0x7, &(0x7f0000000040)) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/route\x00') ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000440)=0x0) perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x4a, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ef4}, r3, 0x0, r1, 0x1) pread64(r2, &(0x7f0000000000)=""/85, 0xfe42, 0x5d) r4 = memfd_create(&(0x7f0000000240)=':+lo#\x00', 0x0) name_to_handle_at(r2, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)={0x33, 0x3f, "d8e24e9210eb07638ca4d414a3756c53d059362be01b9c1f600bade43fb3ad7afdcdb311a382dd050585ad"}, &(0x7f0000000500), 0x1000) fdatasync(r4) io_submit(r0, 0x1, &(0x7f0000001280)=[&(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f0000000100)}]) timerfd_create(0x7, 0x80800) io_destroy(r0) setsockopt$llc_int(r1, 0x10c, 0x9, &(0x7f0000000380)=0x3, 0x4) [ 339.947586] RIP: 0033:0x4548b9 [ 339.950752] RSP: 002b:00007f032fc57b08 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 339.958437] RAX: ffffffffffffffda RBX: 0000000000000019 RCX: 00000000004548b9 [ 339.965683] RDX: 00000000004b9225 RSI: 0000000020001740 RDI: 0000000020001780 [ 339.972925] RBP: 0000000020001780 R08: 00007f032fc57b20 R09: 0000000000000000 [ 339.980171] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 339.987416] R13: 00000000000003ff R14: 0000000000000000 R15: ffffffffffffffff 2018/03/29 11:12:20 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) readv(r0, &(0x7f0000001480)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x3}) r1 = syz_open_pts(r0, 0x2) r2 = dup3(r1, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f00000015c0)="34016fff7eba4a3c09ecb3a2c6f78af53e73395fc846c661a2225d8e9699c09d9459a0872275e7411aa07de23b795b6fe340c466d09cf8ae88635d9a0b2daff48a12ca8bc5e0f7ff548ca94e6cf78cc081345af0b3572abdf7dad1982536fb3788d542f5a9a1", 0xfffffffffffffce5) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0) mkdir(&(0x7f0000001640)='./control\x00', 0x40) preadv(r3, &(0x7f00000004c0)=[{&(0x7f0000000480)=""/21, 0x15}], 0x1, 0x0) fchdir(0xffffffffffffffff) r4 = creat(&(0x7f0000000240)='./control\x00', 0x120) mkdir(&(0x7f0000000280)='./file0\x00', 0xffffbffffffffff7) fchmod(r2, 0x0) splice(r3, &(0x7f0000000400), 0xffffffffffffffff, &(0x7f0000000440), 0x9, 0x2) inotify_add_watch(r2, &(0x7f0000000200)='./file0\x00', 0x80) r5 = getpgrp(0xffffffffffffffff) ioctl$sock_SIOCSPGRP(r4, 0x8902, &(0x7f0000001500)=r5) rename(&(0x7f0000001540)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f", &(0x7f0000000100)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f") mkdir(&(0x7f000000e000)='./control\x00', 0x0) ioctl$VHOST_SET_LOG_BASE(r2, 0x4008af04, &(0x7f00000014c0)=&(0x7f00000002c0)) r6 = open(&(0x7f0000000000)='./control\x00', 0x0, 0x0) renameat2(r6, &(0x7f0000000040)='./file0\x00', r6, &(0x7f0000000080)='./control\x00', 0x2) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r6, 0x84, 0x76, &(0x7f0000000300)={0x0, 0x80}, &(0x7f0000000340)=0x8) mount(&(0x7f0000001680)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f2f66696c653000", &(0x7f0000001700)='./file0\x00', &(0x7f0000001740)='nsfs\x00', 0x0, &(0x7f0000002000)="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") getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r6, 0x84, 0x76, &(0x7f0000000380)={r7, 0x5}, &(0x7f00000003c0)=0x8) epoll_create(0x1) symlink(&(0x7f0000000180)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f", &(0x7f00000000c0)='./file0\x00') perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8cc6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(r6, &(0x7f0000010000)='./control\x00', &(0x7f000003f000), &(0x7f0000001fe8), 0x0) 2018/03/29 11:12:20 executing program 2 (fault-call:21 fault-nth:41): r0 = syz_open_procfs(0x0, &(0x7f00000004c0)='oom_score_adj\x00') perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x49, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(r0, 0x0, 0x83, &(0x7f0000001800)={'nat\x00', 0x0, 0x3, 0x1000, [], 0x2, &(0x7f0000001280)=[{}, {}], &(0x7f0000002040)=""/4096}, &(0x7f00000013c0)=0x78) ioprio_get$pid(0x0, 0x0) timer_create(0x0, &(0x7f0000cd0000), &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00004b1fe0)={{0x0, 0x1c9c380}, {0x0, 0x9}}, &(0x7f0000040000)) r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x7fff) truncate(&(0x7f0000001180)='./bus\x00', 0x4) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000f40000)='/dev/ptmx\x00', 0x200000000101002, 0x0) sendfile(r2, 0xffffffffffffffff, &(0x7f00000010c0), 0x10000065) sendfile(r0, r1, &(0x7f0000000000), 0x4) tkill(0x0, 0x0) r3 = memfd_create(&(0x7f0000000000)='\x00', 0x1) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000001200)) recvmsg(0xffffffffffffff9c, &(0x7f0000001500)={&(0x7f00000012c0)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @remote}}}, 0x80, &(0x7f0000001400)=[{&(0x7f0000001340)=""/103, 0x67}], 0x1, &(0x7f0000001440)=""/155, 0x9b}, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000001540)) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000001640)={0x1ff, {0x2, 0x4e21}, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, {0x2, 0x0, @multicast2=0xe0000002}, 0x0, 0x9, 0x2, 0x6, 0x0, &(0x7f0000001240)='teql0\x00', 0x0, 0x80}) inotify_rm_watch(0xffffffffffffffff, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000140), &(0x7f0000000100)=0xffffffa4) getgroups(0x1, &(0x7f0000001600)=[0x0]) syz_fuseblk_mount(&(0x7f0000001740)='./file0\x00', &(0x7f0000001780)='./file0\x00', 0x0, 0x0, 0xffffffffffffffff, 0x3ff, 0x1, 0x0) getpgrp(0xffffffffffffffff) getegid() sendmmsg$unix(r3, &(0x7f0000001880), 0x0, 0x0) setsockopt$netrom_NETROM_T4(0xffffffffffffffff, 0x103, 0x6, &(0x7f00000017c0), 0xfffffffffffffc77) readv(0xffffffffffffffff, &(0x7f000004ffe0), 0x0) 2018/03/29 11:12:20 executing program 5: mkdir(&(0x7f0000000480)='./file1\x00', 0xc0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) mkdir(&(0x7f0000000000)='./file1\x00', 0x0) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000811ffa)='bdev\x00', 0x0, &(0x7f0000444000)) mount(&(0x7f0000fb6000)='./file0\x00', &(0x7f0000d78000)='.', &(0x7f0000fdb000)='ubifs\x00', 0x1003, 0x0) mount(&(0x7f00002b9ff8)='./file0\x00', &(0x7f0000cbeff8)='./file0\x00', &(0x7f00005f7ffa)='ramfs\x00', 0x80000, &(0x7f000002f000)) lremovexattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)=@random={'system.', 'binfmt_misc\x00'}) mount(&(0x7f0000000040)='.', &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0)='binfmt_misc\x00', 0x0, &(0x7f0000000100)) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000000440)='autofs\x00', 0x5010, &(0x7f00000e7000)) mount(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./file1\x00', &(0x7f0000000200)='anon_inodefs\x00', 0x2000, &(0x7f0000000240)) mount(&(0x7f0000adcff8)='./file0\x00', &(0x7f0000e08fff)='.', &(0x7f00005e9000)='cifs\x00', 0x2000, &(0x7f0000ad5000)) mount(&(0x7f0000000280)='.', &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='msdos\x00', 0x2020000, &(0x7f0000000340)="5124744bbe94440c03654f5165693a3edd7814642c0e6cc007dd0b16b6be628e47541322a536b9312bba752eface899965ead5aa93c29e127c63611847e91ba221f55aa82682902d3165b9f12c1ab127593f4f770907581bca1cfd808f7382672a5683491bff28cf0d960a978a7055c6ae31f2f7eb18bb9fe8f157a05e79275f16a50ef7e8f67a8ea8ae95d015fcc9af2e6aa7475cd6965eb3060cf1fc9ae5c89b4cdbb6d53f994e238e3ad05202dd84bb1d34b273184fcc59d1c2ec7d64d9d765daf409fec7f280e9009ccea598f961a6c879ae37fe179f98855dcdc077993fa2da7ce97d87b9258f4c988b85b9a2bb28bb57d5") [ 340.086645] FAULT_INJECTION: forcing a failure. [ 340.086645] name failslab, interval 1, probability 0, space 0, times 0 [ 340.098066] CPU: 0 PID: 9966 Comm: syz-executor2 Not tainted 4.16.0-rc7+ #5 [ 340.105162] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 340.114503] Call Trace: [ 340.117086] dump_stack+0x194/0x24d [ 340.120698] ? arch_local_irq_restore+0x53/0x53 [ 340.125347] ? __save_stack_trace+0x7e/0xd0 [ 340.129658] should_fail+0x8c0/0xa40 [ 340.133361] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 340.138459] ? kasan_kmalloc+0xad/0xe0 [ 340.142344] ? kmem_cache_alloc_trace+0x136/0x740 [ 340.147174] ? __memcg_init_list_lru_node+0x169/0x270 [ 340.152347] ? __list_lru_init+0x544/0x750 [ 340.156568] ? sget_userns+0x6b1/0xe40 [ 340.160452] ? mount_fs+0x66/0x2d0 [ 340.163980] ? vfs_kern_mount.part.26+0xc6/0x4a0 [ 340.168719] ? do_mount+0xea4/0x2bb0 [ 340.172429] ? SyS_mount+0xab/0x120 [ 340.176046] ? do_syscall_64+0x281/0x940 [ 340.180103] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7 2018/03/29 11:12:20 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) readv(r0, &(0x7f0000001480)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x3}) r1 = syz_open_pts(r0, 0x2) r2 = dup3(r1, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000c34fff), 0xffffff0b) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0) preadv(r3, &(0x7f00000004c0)=[{&(0x7f0000000480)=""/21, 0x15}], 0x1, 0x0) fchdir(0xffffffffffffffff) mkdir(&(0x7f0000000280)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f", 0xfffffffffffffffc) fchmod(r2, 0x0) splice(r3, &(0x7f0000000400), 0xffffffffffffffff, &(0x7f0000000440), 0x9, 0x2) rename(&(0x7f0000001e00)='./file0\x00', &(0x7f0000000100)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f") mkdir(&(0x7f000000e000)='./control\x00', 0x0) r4 = open(&(0x7f0000000000)='./control\x00', 0x0, 0x0) renameat2(r4, &(0x7f0000000040)='./file0\x00', r4, &(0x7f0000000080)='./control\x00', 0x2) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000300)={0x0, 0x80}, &(0x7f0000000340)=0x8) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000380)={r5, 0x5}, &(0x7f00000003c0)=0x8) mknodat(r4, &(0x7f000003f000)='./control\x00', 0x0, 0x0) symlink(&(0x7f0000000180)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f", &(0x7f00000000c0)='./file0\x00') perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(r4, &(0x7f0000010000)='./control\x00', &(0x7f000003f000), &(0x7f0000001fe8), 0x0) fallocate(r1, 0x1, 0x1, 0x131f) [ 340.185458] ? find_held_lock+0x35/0x1d0 [ 340.189523] ? __lock_is_held+0xb6/0x140 [ 340.193599] ? check_same_owner+0x320/0x320 [ 340.197920] ? rcu_note_context_switch+0x710/0x710 [ 340.202860] should_failslab+0xec/0x120 [ 340.206823] kmem_cache_alloc_trace+0x4b/0x740 [ 340.211381] ? __kmalloc_node+0x33/0x70 [ 340.215329] ? __kmalloc_node+0x33/0x70 [ 340.219280] ? rcu_read_lock_sched_held+0x108/0x120 [ 340.224279] __memcg_init_list_lru_node+0x169/0x270 [ 340.229278] ? list_lru_add+0x7c0/0x7c0 [ 340.233235] ? __kmalloc_node+0x47/0x70 [ 340.237215] __list_lru_init+0x544/0x750 [ 340.241267] ? memcg_destroy_list_lru_node.isra.7+0x110/0x110 [ 340.247138] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 340.252151] ? lockdep_init_map+0x9/0x10 [ 340.256205] sget_userns+0x6b1/0xe40 [ 340.259899] ? kill_litter_super+0x90/0x90 [ 340.264111] ? ns_test_super+0x50/0x50 [ 340.267988] ? destroy_unused_super.part.6+0xd0/0xd0 [ 340.273079] ? do_raw_spin_trylock+0x190/0x190 [ 340.277652] ? kobject_put+0x6b/0x250 [ 340.281443] ? blkdev_get+0x3a1/0xb00 2018/03/29 11:12:20 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) readv(r0, &(0x7f0000000240)=[{&(0x7f00000014c0)=""/249}, {&(0x7f00000016c0)=""/247, 0xfffffff1}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x3}) r1 = syz_open_pts(r0, 0x2) r2 = dup3(r1, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000c34fff), 0xffffff0b) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0) preadv(r3, &(0x7f00000004c0)=[{&(0x7f0000000480)=""/21, 0x15}], 0x1, 0x0) fchdir(0xffffffffffffffff) mkdir(&(0x7f0000000280)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f", 0xfffffffffffffffc) fchmod(r2, 0x0) splice(r3, &(0x7f0000000400), 0xffffffffffffffff, &(0x7f0000000440), 0x9, 0x2) rename(&(0x7f0000001e00)='./file0\x00', &(0x7f0000000100)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f") mkdir(&(0x7f000000e000)='./control\x00', 0x0) r4 = open(&(0x7f0000000000)='./control\x00', 0x0, 0x0) renameat2(r4, &(0x7f0000000040)='./file0\x00', r4, &(0x7f0000000080)='./control\x00', 0x2) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000300)={0x0, 0x80}, &(0x7f0000000340)=0x8) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000380)={r5, 0x5}, &(0x7f00000003c0)=0x8) mknodat(r4, &(0x7f000003f000)='./control\x00', 0x0, 0x0) symlink(&(0x7f0000000180)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f", &(0x7f00000000c0)='./file0\x00') setsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000200)=@int=0x2, 0x4) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(r4, &(0x7f0000010000)='./control\x00', &(0x7f000003f000), &(0x7f0000001fe8), 0x0) arch_prctl(0x1007, &(0x7f0000000500)="fad7a9afa8c1d9db8aa60e8e8ce94695c73fbfda0a09f58d9032e84ccad2a046a2afc07a6be7568b044b8f43edeef28ec15bff1454503f32a4acbd16c6711b028de1b789a1aa5bdc2bad6c1bbe9ec6204bde741af6996073d1dee7f4781a871f6344be304668609705e07053dddd37a5471fb4bed6f0a35469bcf5a8701829a1888c14139ee82ff5d92b064df36a86f13ec0c754e235974d24523f54c07d337416bbf7f8960091a6bd0c68a7411df2abbcba3c372bfd2b02df51c9857354ccbf9baba0f8b0191cd67ab7e67ddc0fb54cd731b015dc2bb790498f3d005124552c92581cb4cc3c70d4415d672e2e5bcfdcef185d1969fd3d7997") [ 340.285238] ? cap_capable+0x1b5/0x230 [ 340.289120] ? __blkdev_get+0x13b0/0x13b0 [ 340.293265] ? security_capable+0x8e/0xc0 [ 340.297415] ? kill_litter_super+0x90/0x90 [ 340.301644] ? ns_capable_common+0xcf/0x160 [ 340.305960] ? ns_test_super+0x50/0x50 [ 340.309837] ? kill_litter_super+0x90/0x90 [ 340.314060] sget+0xd2/0x120 [ 340.317077] mount_bdev+0x109/0x370 [ 340.320689] ? fuse_get_root_inode+0x190/0x190 [ 340.325265] fuse_mount_blk+0x34/0x40 [ 340.329058] mount_fs+0x66/0x2d0 [ 340.332424] vfs_kern_mount.part.26+0xc6/0x4a0 [ 340.336996] ? may_umount+0xa0/0xa0 [ 340.341090] ? _raw_read_unlock+0x22/0x30 [ 340.345227] ? __get_fs_type+0x8a/0xc0 [ 340.349117] do_mount+0xea4/0x2bb0 [ 340.352649] ? copy_mount_string+0x40/0x40 [ 340.356863] ? rcu_pm_notify+0xc0/0xc0 [ 340.360740] ? copy_mount_options+0x5f/0x2e0 [ 340.365127] ? rcu_read_lock_sched_held+0x108/0x120 [ 340.370125] ? kmem_cache_alloc_trace+0x459/0x740 [ 340.374954] ? kasan_check_write+0x14/0x20 [ 340.379171] ? copy_mount_options+0x1f7/0x2e0 [ 340.383657] SyS_mount+0xab/0x120 [ 340.387097] ? copy_mnt_ns+0xb30/0xb30 [ 340.390975] do_syscall_64+0x281/0x940 [ 340.394838] ? __do_page_fault+0xc90/0xc90 [ 340.399059] ? _raw_spin_unlock_irq+0x27/0x70 [ 340.403540] ? finish_task_switch+0x1c1/0x7e0 [ 340.408017] ? syscall_return_slowpath+0x550/0x550 [ 340.412943] ? syscall_return_slowpath+0x2ac/0x550 [ 340.417870] ? prepare_exit_to_usermode+0x350/0x350 [ 340.422874] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 340.428234] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 340.433074] entry_SYSCALL_64_after_hwframe+0x42/0xb7 2018/03/29 11:12:20 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) readv(r0, &(0x7f0000001480)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0xfffffffffffffffe, 0x0, 0x0, 0x2000000, 0x0, 0x1}) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x3}) r1 = syz_open_pts(r0, 0x2) r2 = dup3(r1, 0xffffffffffffffff, 0x0) socket$bt_bnep(0x1f, 0x3, 0x4) write(0xffffffffffffffff, &(0x7f0000c34fff), 0xffffff0b) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0) preadv(r3, &(0x7f00000004c0)=[{&(0x7f0000000480)=""/21, 0x15}], 0x1, 0x0) fchdir(0xffffffffffffffff) mkdir(&(0x7f0000000280)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f", 0xfffffffffffffffc) fchmod(r2, 0x0) splice(r3, &(0x7f0000000400), 0xffffffffffffffff, &(0x7f0000000440), 0x9, 0x2) rename(&(0x7f0000001e00)='./file0\x00', &(0x7f0000000100)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f") mkdir(&(0x7f000000e000)='./control\x00', 0x0) r4 = open(&(0x7f0000000000)='./control\x00', 0x0, 0x0) renameat2(r4, &(0x7f0000000040)='./file0\x00', r4, &(0x7f0000000080)='./control\x00', 0x2) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000300)={0x0, 0x80}, &(0x7f0000000340)=0x8) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000380)={r5, 0x5}, &(0x7f00000003c0)=0x8) mknodat(r4, &(0x7f000003f000)='./control\x00', 0x0, 0x0) symlink(&(0x7f0000000180)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f", &(0x7f00000000c0)='./file0\x00') perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(r4, &(0x7f0000010000)='./control\x00', &(0x7f000003f000), &(0x7f0000001fe8), 0x0) 2018/03/29 11:12:20 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x3}) r1 = syz_open_pts(r0, 0x2) r2 = dup3(r1, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000c34fff), 0xffffff0b) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0) preadv(r3, &(0x7f00000004c0)=[{&(0x7f0000000480)=""/21, 0x15}], 0x1, 0x0) fchdir(0xffffffffffffffff) mkdir(&(0x7f0000000280)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f", 0xfffffffffffffffc) fchmod(r2, 0x0) splice(r3, &(0x7f0000000400), 0xffffffffffffffff, &(0x7f0000000440), 0x9, 0x2) rename(&(0x7f0000001e00)='./file0\x00', &(0x7f0000000100)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f") mkdir(&(0x7f000000e000)='./control\x00', 0x0) r4 = open(&(0x7f0000000000)='./control\x00', 0x0, 0x0) renameat2(r4, &(0x7f0000000040)='./file0\x00', r4, &(0x7f0000000080)='./control\x00', 0x2) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000300)={0x0, 0x80}, &(0x7f0000000340)=0x8) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000380)={r5, 0x5}, &(0x7f00000003c0)=0x8) mknodat(r4, &(0x7f000003f000)='./control\x00', 0x0, 0x0) symlink(&(0x7f0000000180)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f", &(0x7f00000000c0)='./file0\x00') perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(r4, &(0x7f0000010000)='./control\x00', &(0x7f000003f000), &(0x7f0000001fe8), 0x0) 2018/03/29 11:12:20 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) readv(r0, &(0x7f0000001480)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x3}) r1 = syz_open_pts(r0, 0x2) r2 = dup3(r1, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000c34fff), 0xffffff0b) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0) preadv(r3, &(0x7f00000004c0)=[{&(0x7f0000000480)=""/21, 0x15}], 0x1, 0x0) fchdir(0xffffffffffffffff) mkdir(&(0x7f0000000280)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f", 0xfffffffffffffffc) fchmod(r2, 0x0) splice(r3, &(0x7f0000000400), 0xffffffffffffffff, &(0x7f0000000440), 0x9, 0x2) rename(&(0x7f0000001e00)='./file0\x00', &(0x7f0000000100)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f") mkdir(&(0x7f000000e000)='./control\x00', 0x0) r4 = open(&(0x7f0000000000)='./control\x00', 0x0, 0x0) renameat2(r4, &(0x7f0000000040)='./file0\x00', r4, &(0x7f0000000080)='./control\x00', 0x2) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000300)={0x0, 0x80}, &(0x7f0000000340)=0x8) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000380)={r5, 0x5}, &(0x7f00000003c0)=0x8) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f00000000c0)=0x0) fcntl$setownex(r2, 0xf, &(0x7f00000001c0)={0xefefb30c11295cdb, r6}) mknodat(r4, &(0x7f000003f000)='./control\x00', 0x0, 0x0) symlink(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='./control\x00') perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(r4, &(0x7f0000010000)='./control\x00', &(0x7f000003f000), &(0x7f0000001fe8), 0x0) 2018/03/29 11:12:20 executing program 0: r0 = perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x4a, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffff9c, 0xc00caee0, &(0x7f0000000180)={0x0, r0, 0x1}) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) fcntl$getownex(r0, 0x10, &(0x7f0000000400)={0x0, 0x0}) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0xffff, 0xe3, 0x6, 0x4, 0x0, 0x7, 0x0, 0x2, 0x10001, 0x1, 0x7, 0x8, 0x100, 0x4, 0x0, 0x7f, 0x20, 0x0, 0x4, 0x5, 0x90a4, 0x7, 0x2, 0x73, 0x8, 0x7, 0x4, 0x7e0, 0x101, 0x0, 0x2, 0x309, 0x0, 0x9, 0xfffffffffffffff9, 0x9, 0x0, 0x4, 0x0, @perf_config_ext={0x20, 0x1}, 0x8140, 0x2, 0x0, 0x4, 0xca1, 0xb5}, r4, 0x4, r1, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) futimesat(r1, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0)={{r2, r3/1000+10000}, {r5, r6/1000+10000}}) unshare(0x8000000) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0xdc, 0x40}, 0x341) r8 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8910, &(0x7f0000000080)=@buf={0x0, &(0x7f0000000000)}) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x13, &(0x7f0000000ffc), 0x4) mq_open(&(0x7f00000000c0)='syzkaller0\x00', 0x40, 0x8, &(0x7f0000000100)={0x5, 0x80000000, 0x0, 0xfffffffffffffff9, 0x1, 0xfffffffffffffffd, 0x7fff, 0x200}) socket$inet_tcp(0x2, 0x1, 0x0) r9 = dup3(r8, r7, 0x80000) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r9, 0x84, 0x66, &(0x7f00000002c0)={0x0, 0x8ed6}, &(0x7f0000000300)=0x1) bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) shmget(0xffffffffffffffff, 0x8000, 0x49b, &(0x7f0000ff8000/0x8000)=nil) ioctl$sock_inet_SIOCGIFPFLAGS(r8, 0x8935, &(0x7f0000000080)={'syzkaller0\x00'}) ppoll(&(0x7f0000000780)=[{r1, 0x300}, {r1, 0x8401}], 0x2, &(0x7f00000007c0)={0x77359400}, &(0x7f0000000800)={0x9}, 0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000280)={0x0, 0x0, 0x9}, 0x10) r10 = semget$private(0x0, 0x4, 0x0) semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0x0, 0x1000}], 0x1, &(0x7f0000000080)={0x0, 0x1c9c380}) semctl$IPC_RMID(r10, 0x0, 0x0) 2018/03/29 11:12:20 executing program 1: io_setup(0x3, &(0x7f0000000000)=0x0) accept$unix(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000100)=0x6e) r1 = syz_open_dev$usbmon(&(0x7f0000000200)='/dev/usbmon#\x00', 0x0, 0x0) io_cancel(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0xf, 0x3, 0xffffffffffffffff, &(0x7f0000000140)="940c1f2149747e7734510c34c143183667a187dc4f624f6c2de12452792a6fb529e6bf2a661dc23a844b00925c244a9f2967c0ca9868ee50eacf67a2ad7681d82f5a38cbd6d7641f843fa129e00f701fb01835f497b53672b3e5a3f6838f28aa240bf21eb5e5cbe7804fd307404474ae0242f8dea7a08e0fe9479b06f2795f857f8eec271d35ba7f61a91c87296814189cc1dfc9c659cc5437452a0bd178323c50e8c005ba7fa9519b27965c9f6ffbc7dcaa8e658616cc83188fb131a703222d", 0xc0, 0x5, 0x0, 0x1}, &(0x7f0000000280)) io_getevents(r0, 0x2, 0x8f, &(0x7f0000d83f60)=[{}, {}], &(0x7f00005cfff0)={0x4000000000001, 0x7}) io_getevents(r0, 0x0, 0x5, &(0x7f00000002c0)=[{}, {}, {}, {}, {}], &(0x7f00000003c0)) io_setup(0x7, &(0x7f0000000040)) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/route\x00') ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000440)=0x0) perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x4a, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ef4}, r3, 0x0, 0xffffffffffffffff, 0x1) pread64(r2, &(0x7f0000000000)=""/85, 0xfe42, 0x5d) r4 = memfd_create(&(0x7f0000000240)=':+lo#\x00', 0x0) fdatasync(r4) io_submit(r0, 0x1, &(0x7f0000001280)=[&(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f0000000100)}]) timerfd_create(0x7, 0x80800) io_destroy(r0) setsockopt$llc_int(r1, 0x10c, 0x9, &(0x7f0000000380), 0x4) [ 340.438246] RIP: 0033:0x4548b9 [ 340.441424] RSP: 002b:00007f032fc57b08 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 340.449122] RAX: ffffffffffffffda RBX: 0000000000000019 RCX: 00000000004548b9 [ 340.456384] RDX: 00000000004b9225 RSI: 0000000020001740 RDI: 0000000020001780 [ 340.463638] RBP: 0000000020001780 R08: 00007f032fc57b20 R09: 0000000000000000 [ 340.470887] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 340.478145] R13: 00000000000003ff R14: 0000000000000000 R15: ffffffffffffffff 2018/03/29 11:12:21 executing program 6: openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x0, 0x0) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, &(0x7f0000000340)=0x1) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f000051cff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000943ffc)=0xa35) read(r0, &(0x7f00003fefff)=""/1, 0x1) r1 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000029000)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r0, &(0x7f0000dcdff0)=[{&(0x7f0000cd8000)=""/1, 0x1}], 0x1) ioctl$int_in(r2, 0x5452, &(0x7f0000b28000)=0x3c) write$cgroup_type(0xffffffffffffffff, &(0x7f00000002c0)='threaded\x00', 0x9) syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x0, 0x802) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000fb9000)) fcntl$setsig(r2, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r3}], 0x1, 0xfffffffffffffff8) read$eventfd(0xffffffffffffffff, &(0x7f0000000040), 0x8) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)) r4 = dup2(0xffffffffffffffff, r3) fcntl$setown(r4, 0x8, r1) ptrace$cont(0xffffffffffffffff, r1, 0x0, 0x8) tkill(r1, 0x16) r5 = gettid() process_vm_readv(r5, &(0x7f0000001880)=[{&(0x7f0000000680)=""/198, 0xc6}, {&(0x7f0000000780)=""/247, 0xf7}, {&(0x7f0000000380)=""/12, 0xc}, {&(0x7f00000003c0)=""/6, 0x6}, {&(0x7f0000000400)=""/14, 0xe}], 0x5, &(0x7f00000019c0)=[{&(0x7f0000001900)=""/41, 0x29}, {&(0x7f0000001940)=""/112, 0x70}], 0x2, 0x0) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f0000000240)={{{@in6}}, {{@in=@local}, 0x0, @in=@local}}, &(0x7f0000000100)=0xe8) 2018/03/29 11:12:21 executing program 2 (fault-call:21 fault-nth:42): r0 = syz_open_procfs(0x0, &(0x7f00000004c0)='oom_score_adj\x00') perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x49, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(r0, 0x0, 0x83, &(0x7f0000001800)={'nat\x00', 0x0, 0x3, 0x1000, [], 0x2, &(0x7f0000001280)=[{}, {}], &(0x7f0000002040)=""/4096}, &(0x7f00000013c0)=0x78) ioprio_get$pid(0x0, 0x0) timer_create(0x0, &(0x7f0000cd0000), &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00004b1fe0)={{0x0, 0x1c9c380}, {0x0, 0x9}}, &(0x7f0000040000)) r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x7fff) truncate(&(0x7f0000001180)='./bus\x00', 0x4) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000f40000)='/dev/ptmx\x00', 0x200000000101002, 0x0) sendfile(r2, 0xffffffffffffffff, &(0x7f00000010c0), 0x10000065) sendfile(r0, r1, &(0x7f0000000000), 0x4) tkill(0x0, 0x0) r3 = memfd_create(&(0x7f0000000000)='\x00', 0x1) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000001200)) recvmsg(0xffffffffffffff9c, &(0x7f0000001500)={&(0x7f00000012c0)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @remote}}}, 0x80, &(0x7f0000001400)=[{&(0x7f0000001340)=""/103, 0x67}], 0x1, &(0x7f0000001440)=""/155, 0x9b}, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000001540)) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000001640)={0x1ff, {0x2, 0x4e21}, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, {0x2, 0x0, @multicast2=0xe0000002}, 0x0, 0x9, 0x2, 0x6, 0x0, &(0x7f0000001240)='teql0\x00', 0x0, 0x80}) inotify_rm_watch(0xffffffffffffffff, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000140), &(0x7f0000000100)=0xffffffa4) getgroups(0x1, &(0x7f0000001600)=[0x0]) syz_fuseblk_mount(&(0x7f0000001740)='./file0\x00', &(0x7f0000001780)='./file0\x00', 0x0, 0x0, 0xffffffffffffffff, 0x3ff, 0x1, 0x0) getpgrp(0xffffffffffffffff) getegid() sendmmsg$unix(r3, &(0x7f0000001880), 0x0, 0x0) setsockopt$netrom_NETROM_T4(0xffffffffffffffff, 0x103, 0x6, &(0x7f00000017c0), 0xfffffffffffffc77) readv(0xffffffffffffffff, &(0x7f000004ffe0), 0x0) 2018/03/29 11:12:21 executing program 7: io_setup(0x3, &(0x7f0000000000)=0x0) accept$unix(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000100)=0x6e) syz_open_dev$usbmon(&(0x7f0000000200)='/dev/usbmon#\x00', 0x7ff, 0x0) io_cancel(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0xf, 0x3, 0xffffffffffffffff, &(0x7f0000000140)="940c1f2149747e7734510c34c143183667a187dc4f624f6c2de12452792a6fb529e6bf2a661dc23a844b00925c244a9f2967c0ca9868ee50eacf67a2ad7681d82f5a38cbd6d7641f843fa129e00f701fb01835f497b53672b3e5a3f6838f28aa240bf21eb5e5cbe7804fd307404474ae0242f8dea7a08e0fe9479b06f2795f857f8eec271d35ba7f61a91c87296814189cc1dfc9c659cc5437452a0bd178323c50e8c005ba7fa9519b27965c9f6ffbc7dcaa8e658616cc83188fb131a703222d", 0xc0, 0x5, 0x0, 0x1}, &(0x7f0000000280)) io_getevents(r0, 0x2, 0x8f, &(0x7f0000d83f60)=[{}, {}], &(0x7f00005cfff0)={0x4000000000001, 0x7}) io_getevents(r0, 0x0, 0x5, &(0x7f00000002c0)=[{}, {}, {}, {}, {}], &(0x7f00000003c0)) io_setup(0x7, &(0x7f0000000040)) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/route\x00') ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000440)=0x0) perf_event_open(&(0x7f0000aaa000)={0x0, 0x70, 0x4a, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ef4}, r2, 0x0, 0xffffffffffffffff, 0x1) pread64(r1, &(0x7f0000000000)=""/85, 0xfe42, 0x5d) r3 = memfd_create(&(0x7f0000000240)=':+lo#\x00', 0x0) fdatasync(r3) io_submit(r0, 0x1, &(0x7f0000001280)=[&(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000000100)}]) r4 = shmget$private(0x0, 0x1000, 0x54001002, &(0x7f0000ffd000/0x1000)=nil) shmctl$SHM_STAT(r4, 0xd, &(0x7f0000000480)=""/105) timerfd_create(0x7, 0x80800) io_destroy(r0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x9, &(0x7f0000000380)=0x3, 0x4) 2018/03/29 11:12:21 executing program 5: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) mkdir(&(0x7f0000000000)='./file1\x00', 0x0) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000811ffa)='bdev\x00', 0x0, &(0x7f0000444000)) mount(&(0x7f0000fb6000)='./file0\x00', &(0x7f0000d78000)='.', &(0x7f0000fdb000)='ubifs\x00', 0x1003, 0x0) mount(&(0x7f00002b9ff8)='./file0\x00', &(0x7f0000cbeff8)='./file0\x00', &(0x7f00005f7ffa)='ramfs\x00', 0x80000, &(0x7f000002f000)) mount(&(0x7f0000000040)='.', &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0)='binfmt_misc\x00', 0x0, &(0x7f0000000100)) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) mount(&(0x7f0000000180)='./file0\x00', &(0x7f0000000140)='./file1\x00', &(0x7f0000000200)='anon_inodefs\x00', 0x2000, &(0x7f0000000240)) mount(&(0x7f0000adcff8)='./file0\x00', &(0x7f0000e08fff)='.', &(0x7f0000000100)='cifs\x00', 0x2000, &(0x7f0000ad5000)) 2018/03/29 11:12:21 executing program 0: r0 = perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x4a, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffff9c, 0xc00caee0, &(0x7f0000000180)={0x0, r0, 0x1}) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) fcntl$getownex(r0, 0x10, &(0x7f0000000400)={0x0, 0x0}) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0xffff, 0xe3, 0x6, 0x4, 0x0, 0x7, 0x0, 0x2, 0x10001, 0x1, 0x7, 0x8, 0x100, 0x4, 0x0, 0x7f, 0x20, 0x0, 0x4, 0x5, 0x90a4, 0x7, 0x2, 0x73, 0x8, 0x7, 0x4, 0x7e0, 0x101, 0x0, 0x2, 0x309, 0x0, 0x9, 0xfffffffffffffff9, 0x9, 0x0, 0x4, 0x0, @perf_config_ext={0x20, 0x1}, 0x8140, 0x2, 0x0, 0x4, 0xca1, 0xb5}, r4, 0x4, r1, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) futimesat(r1, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0)={{r2, r3/1000+10000}, {r5, r6/1000+10000}}) unshare(0x8000000) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0xdc, 0x40}, 0x341) r8 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8910, &(0x7f0000000080)=@buf={0x0, &(0x7f0000000000)}) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x13, &(0x7f0000000ffc), 0x4) mq_open(&(0x7f00000000c0)='syzkaller0\x00', 0x40, 0x8, &(0x7f0000000100)={0x5, 0x80000000, 0x0, 0xfffffffffffffff9, 0x1, 0xfffffffffffffffd, 0x7fff, 0x200}) socket$inet_tcp(0x2, 0x1, 0x0) r9 = dup3(r8, r7, 0x80000) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r9, 0x84, 0x66, &(0x7f00000002c0)={0x0, 0x8ed6}, &(0x7f0000000300)=0x1) bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) shmget(0xffffffffffffffff, 0x8000, 0x49b, &(0x7f0000ff8000/0x8000)=nil) ioctl$sock_inet_SIOCGIFPFLAGS(r8, 0x8935, &(0x7f0000000080)={'syzkaller0\x00'}) ppoll(&(0x7f0000000780)=[{r1, 0x300}, {r1, 0x8401}], 0x2, &(0x7f00000007c0)={0x77359400}, &(0x7f0000000800)={0x9}, 0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000280)={0x0, 0x0, 0x9}, 0x10) r10 = semget$private(0x0, 0x4, 0x0) semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0x0, 0x1000}], 0x1, &(0x7f0000000080)={0x0, 0x1c9c380}) semctl$IPC_RMID(r10, 0x0, 0x0) 2018/03/29 11:12:21 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) readv(r0, &(0x7f0000001480)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x3}) r1 = syz_open_pts(r0, 0x2) r2 = dup3(r1, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000c34fff), 0xffffff0b) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0) preadv(r3, &(0x7f00000004c0)=[{&(0x7f0000000480)=""/21, 0x15}], 0x1, 0x0) fchdir(0xffffffffffffffff) mkdir(&(0x7f0000000280)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f", 0xfffffffffffffffc) fchmod(r2, 0x0) splice(r3, &(0x7f0000000400), 0xffffffffffffffff, &(0x7f0000000440), 0x9, 0x2) rename(&(0x7f0000001e00)='./file0\x00', &(0x7f0000000100)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f") mkdir(&(0x7f000000e000)='./control\x00', 0x0) r4 = open(&(0x7f0000000000)='./control\x00', 0x0, 0x0) renameat2(r4, &(0x7f0000000040)='./file0\x00', r4, &(0x7f0000000080)='./control\x00', 0x2) ioctl$sock_inet6_tcp_SIOCATMARK(r4, 0x8905, &(0x7f0000001540)) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000300)={0x0, 0x80}, &(0x7f0000000340)=0x8) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000380)={r5, 0x5}, &(0x7f00000003c0)=0x8) mknodat(r4, &(0x7f000003f000)='./control\x00', 0x0, 0x0) symlink(&(0x7f0000000180)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f", &(0x7f00000000c0)='./file0\x00') perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) name_to_handle_at(r2, &(0x7f0000000200)='./control\x00', &(0x7f00000014c0)={0x65, 0x9, "0b3c1fcd23fb566f07ab9bdc0e0e8f3e4964a46057bdd22065e21539667b836d0be988b6a84a22a57ac0d7c44e8b6b69ce15397935c07f8ee1e17ce19d9b543c19ea82ec2000787b7f5bfb8d36a67c9bcf8ed895193aebd9301fdfb566"}, &(0x7f0000000240), 0x1400) execveat(r4, &(0x7f0000010000)='./control\x00', &(0x7f000003f000), &(0x7f0000001fe8), 0x0) 2018/03/29 11:12:21 executing program 1: io_setup(0x3, &(0x7f0000000000)=0x0) accept$unix(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000100)=0x6e) r1 = syz_open_dev$usbmon(&(0x7f0000000200)='/dev/usbmon#\x00', 0x0, 0x0) io_cancel(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0xf, 0x3, 0xffffffffffffffff, &(0x7f0000000140)="940c1f2149747e7734510c34c143183667a187dc4f624f6c2de12452792a6fb529e6bf2a661dc23a844b00925c244a9f2967c0ca9868ee50eacf67a2ad7681d82f5a38cbd6d7641f843fa129e00f701fb01835f497b53672b3e5a3f6838f28aa240bf21eb5e5cbe7804fd307404474ae0242f8dea7a08e0fe9479b06f2795f857f8eec271d35ba7f61a91c87296814189cc1dfc9c659cc5437452a0bd178323c50e8c005ba7fa9519b27965c9f6ffbc7dcaa8e658616cc83188fb131a703222d", 0xc0, 0x5, 0x0, 0x1}, &(0x7f0000000280)) io_getevents(r0, 0x2, 0x8f, &(0x7f0000d83f60)=[{}, {}], &(0x7f00005cfff0)={0x4000000000001, 0x7}) io_getevents(r0, 0x0, 0x5, &(0x7f00000002c0)=[{}, {}, {}, {}, {}], &(0x7f00000003c0)) io_setup(0x7, &(0x7f0000000040)) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/route\x00') ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000440)=0x0) perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x4a, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ef4}, r3, 0x0, 0xffffffffffffffff, 0x1) pread64(r2, &(0x7f0000000000)=""/85, 0xfe42, 0x5d) r4 = memfd_create(&(0x7f0000000240)=':+lo#\x00', 0x0) fdatasync(r4) io_submit(r0, 0x1, &(0x7f0000001280)=[&(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f0000000100)}]) timerfd_create(0x7, 0x80800) io_destroy(r0) setsockopt$llc_int(r1, 0x10c, 0x9, &(0x7f0000000380), 0x4) 2018/03/29 11:12:21 executing program 3: io_setup(0x3, &(0x7f0000000000)=0x0) accept$unix(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000100)=0x6e) r1 = syz_open_dev$mouse(&(0x7f0000000480)='/dev/input/mouse#\x00', 0x5, 0x8140) openat$cgroup_ro(r1, &(0x7f00000004c0)='cgroup.stat\x00', 0x0, 0x0) r2 = syz_open_dev$usbmon(&(0x7f0000000200)='/dev/usbmon#\x00', 0x7ff, 0x0) io_cancel(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0xf, 0x0, 0xffffffffffffffff, &(0x7f0000000140)="940c1f2149747e7734510c34c143183667a187dc4f624f6c2de12452792a6fb529e6bf2a661dc23a844b00925c244a9f2967c0ca9868ee50eacf67a2ad7681d82f5a38cbd6d7641f843fa129e00f701fb01835f497b53672b3e5a3f6838f28aa240bf21eb5e5cbe7804fd307404474ae0242f8dea7a08e0fe9479b06f2795f857f8eec271d35ba7f61a91c87296814189cc1dfc9c659cc5437452a0bd178323c50e8c005ba7fa9519b27965c9f6ffbc7dcaa8e658616cc83188fb131a703222d", 0xc0, 0x5, 0x0, 0x1, r2}, &(0x7f0000000280)) io_getevents(r0, 0x2, 0x8f, &(0x7f0000d83f60)=[{}, {}], &(0x7f00005cfff0)={0x4000000000001, 0x7}) io_getevents(r0, 0x0, 0x5, &(0x7f00000002c0)=[{}, {}, {}, {}, {}], &(0x7f00000003c0)) io_setup(0x7, &(0x7f0000000040)) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/route\x00') ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f0000000440)=0x0) perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x4a, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ef4}, r4, 0x0, r2, 0x1) pread64(r3, &(0x7f0000000000)=""/85, 0xfe42, 0x5d) r5 = memfd_create(&(0x7f0000000240)=':+lo#\x00', 0x0) fdatasync(r5) io_submit(r0, 0x1, &(0x7f0000001280)=[&(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, 0x0, r5, &(0x7f0000000100)}]) timerfd_create(0x7, 0x80800) io_destroy(r0) setsockopt$llc_int(r2, 0x10c, 0x9, &(0x7f0000000380)=0x3, 0x4) [ 340.652668] FAULT_INJECTION: forcing a failure. [ 340.652668] name failslab, interval 1, probability 0, space 0, times 0 [ 340.664287] CPU: 1 PID: 10012 Comm: syz-executor2 Not tainted 4.16.0-rc7+ #5 [ 340.671468] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 340.680816] Call Trace: [ 340.683407] dump_stack+0x194/0x24d [ 340.687038] ? arch_local_irq_restore+0x53/0x53 [ 340.691701] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 340.696888] ? find_held_lock+0x35/0x1d0 2018/03/29 11:12:21 executing program 5: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) mkdir(&(0x7f0000000000)='./file1\x00', 0x0) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000811ffa)='bdev\x00', 0x0, &(0x7f0000444000)) mount(&(0x7f0000fb6000)='./file0\x00', &(0x7f0000d78000)='.', &(0x7f0000fdb000)='ubifs\x00', 0x1003, 0x0) mount(&(0x7f00002b9ff8)='./file0\x00', &(0x7f0000cbeff8)='./file0\x00', &(0x7f00005f7ffa)='ramfs\x00', 0x80000, &(0x7f000002f000)) mount(&(0x7f0000000040)='.', &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0)='binfmt_misc\x00', 0x0, &(0x7f0000000100)) mount(&(0x7f0000377ff8)='.', &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='devpts\x00', 0x1220000, &(0x7f0000000280)="93a81070b798b46236d3d267d136a8f4629843fa6b99fc00000000000000000000000000") mount(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./file1\x00', &(0x7f0000000200)='anon_inodefs\x00', 0x2000, &(0x7f0000000240)) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000240)='adfs\x00', 0x800001, &(0x7f0000000340)="93006c1fc71fb9ac6c06542f96eddd120de6f1c7dec240e38bfd51bb84688150583b82af97d01f1173095a51dd023a226cdf6e948a82711d464a30cfa3630f9911e1cc93063c11555302a783472a3a0e746745b63acb7c35412edd89a987ad29851f9efd5dfbfb3191004ba6eac7831d8861ba7185ef8d4f3b61529a1c3f0a941e0faf8349ddaaff515c16430aff7882e8c3") mount(&(0x7f0000adcff8)='./file0\x00', &(0x7f0000e08fff)='.', &(0x7f00005e9000)='cifs\x00', 0x2000, &(0x7f0000ad5000)) [ 340.700964] should_fail+0x8c0/0xa40 [ 340.704673] ? __list_lru_init+0x352/0x750 [ 340.708907] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 340.714006] ? trace_hardirqs_off+0x10/0x10 [ 340.718329] ? print_irqtrace_events+0x270/0x270 [ 340.723090] ? find_held_lock+0x35/0x1d0 [ 340.727159] ? __lock_is_held+0xb6/0x140 [ 340.731279] ? check_same_owner+0x320/0x320 [ 340.735610] ? rcu_note_context_switch+0x710/0x710 [ 340.740518] ? find_held_lock+0x35/0x1d0 [ 340.744562] should_failslab+0xec/0x120 [ 340.748520] __kmalloc+0x63/0x760 [ 340.751958] ? lock_downgrade+0x980/0x980 [ 340.756097] ? register_shrinker+0x10e/0x2d0 [ 340.760482] ? trace_event_raw_event_module_request+0x320/0x320 [ 340.766522] register_shrinker+0x10e/0x2d0 [ 340.770738] ? prepare_kswapd_sleep+0x1f0/0x1f0 [ 340.775385] ? memcpy+0x45/0x50 [ 340.778656] sget_userns+0xbbf/0xe40 [ 340.782361] ? kill_litter_super+0x90/0x90 [ 340.786580] ? ns_test_super+0x50/0x50 [ 340.790458] ? destroy_unused_super.part.6+0xd0/0xd0 [ 340.795553] ? do_raw_spin_trylock+0x190/0x190 [ 340.800133] ? kobject_put+0x6b/0x250 [ 340.803923] ? blkdev_get+0x3a1/0xb00 [ 340.807713] ? cap_capable+0x1b5/0x230 [ 340.811584] ? __blkdev_get+0x13b0/0x13b0 [ 340.815711] ? security_capable+0x8e/0xc0 [ 340.819855] ? kill_litter_super+0x90/0x90 [ 340.824077] ? ns_capable_common+0xcf/0x160 [ 340.828386] ? ns_test_super+0x50/0x50 [ 340.832246] ? kill_litter_super+0x90/0x90 [ 340.836471] sget+0xd2/0x120 [ 340.839482] mount_bdev+0x109/0x370 [ 340.843086] ? fuse_get_root_inode+0x190/0x190 [ 340.847647] fuse_mount_blk+0x34/0x40 [ 340.851431] mount_fs+0x66/0x2d0 [ 340.854779] vfs_kern_mount.part.26+0xc6/0x4a0 [ 340.859338] ? may_umount+0xa0/0xa0 [ 340.862940] ? _raw_read_unlock+0x22/0x30 [ 340.867065] ? __get_fs_type+0x8a/0xc0 [ 340.870949] do_mount+0xea4/0x2bb0 [ 340.874480] ? copy_mount_string+0x40/0x40 [ 340.878702] ? rcu_pm_notify+0xc0/0xc0 [ 340.882578] ? copy_mount_options+0x5f/0x2e0 [ 340.886961] ? rcu_read_lock_sched_held+0x108/0x120 [ 340.891957] ? kmem_cache_alloc_trace+0x459/0x740 [ 340.896776] ? kasan_check_write+0x14/0x20 [ 340.900994] ? _copy_from_user+0x99/0x110 [ 340.905140] ? copy_mount_options+0x1f7/0x2e0 [ 340.909627] SyS_mount+0xab/0x120 [ 340.913064] ? copy_mnt_ns+0xb30/0xb30 [ 340.916935] do_syscall_64+0x281/0x940 [ 340.920796] ? __do_page_fault+0xc90/0xc90 [ 340.925007] ? _raw_spin_unlock_irq+0x27/0x70 [ 340.929493] ? finish_task_switch+0x1c1/0x7e0 [ 340.933977] ? syscall_return_slowpath+0x550/0x550 [ 340.938882] ? syscall_return_slowpath+0x2ac/0x550 [ 340.943789] ? prepare_exit_to_usermode+0x350/0x350 [ 340.948800] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 340.954144] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 340.958980] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 340.964166] RIP: 0033:0x4548b9 [ 340.967329] RSP: 002b:00007f032fc57b08 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 340.975013] RAX: ffffffffffffffda RBX: 0000000000000019 RCX: 00000000004548b9 [ 340.982264] RDX: 00000000004b9225 RSI: 0000000020001740 RDI: 0000000020001780 [ 340.989514] RBP: 0000000020001780 R08: 00007f032fc57b20 R09: 0000000000000000 [ 340.996758] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 341.004006] R13: 00000000000003ff R14: 0000000000000000 R15: ffffffffffffffff [ 341.011461] WARNING: CPU: 1 PID: 10012 at fs/super.c:1148 kill_block_super+0xc9/0xf0 [ 341.019551] Kernel panic - not syncing: panic_on_warn set ... [ 341.019551] [ 341.026890] CPU: 1 PID: 10012 Comm: syz-executor2 Not tainted 4.16.0-rc7+ #5 [ 341.034062] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 341.043390] Call Trace: [ 341.045959] dump_stack+0x194/0x24d [ 341.049567] ? arch_local_irq_restore+0x53/0x53 [ 341.054229] ? vsnprintf+0x1ed/0x1900 [ 341.058018] panic+0x1e4/0x41c [ 341.061198] ? refcount_error_report+0x214/0x214 [ 341.065931] ? show_regs_print_info+0x18/0x18 [ 341.070410] ? __warn+0x1c1/0x200 [ 341.073843] ? kill_block_super+0xc9/0xf0 [ 341.077966] __warn+0x1dc/0x200 [ 341.081218] ? lock_downgrade+0x980/0x980 [ 341.085341] ? kill_block_super+0xc9/0xf0 [ 341.089466] report_bug+0x1f4/0x2b0 [ 341.093074] fixup_bug.part.11+0x37/0x80 [ 341.097110] do_error_trap+0x2d7/0x3e0 [ 341.100976] ? math_error+0x400/0x400 [ 341.104752] ? up_write+0x6b/0x120 [ 341.108276] ? refcount_dec_and_test+0x1a/0x20 [ 341.112858] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 341.117682] do_invalid_op+0x1b/0x20 [ 341.121371] invalid_op+0x1b/0x40 [ 341.124798] RIP: 0010:kill_block_super+0xc9/0xf0 [ 341.129525] RSP: 0018:ffff8801ae0b77a0 EFLAGS: 00010246 [ 341.134863] RAX: 0000000000010000 RBX: ffff8801b8574800 RCX: ffffffff81b31649 [ 341.142110] RDX: 0000000000010000 RSI: ffffc90002246000 RDI: ffff880197d7aa60 [ 341.149354] RBP: ffff8801ae0b77b8 R08: 0000000000000000 R09: 1ffff10035c16ea5 [ 341.156599] R10: ffff8801ae0b7568 R11: 0000000000000001 R12: ffff880197d7a6c0 [ 341.163846] R13: 0000000000000000 R14: ffff8801ae0b7a10 R15: ffff8801b8574800 [ 341.171103] ? kill_block_super+0xc9/0xf0 [ 341.175693] fuse_kill_sb_blk+0x90/0xb0 [ 341.179650] deactivate_locked_super+0x88/0xd0 [ 341.184209] sget_userns+0xbda/0xe40 [ 341.187896] ? kill_litter_super+0x90/0x90 [ 341.192111] ? ns_test_super+0x50/0x50 [ 341.195979] ? destroy_unused_super.part.6+0xd0/0xd0 [ 341.201055] ? do_raw_spin_trylock+0x190/0x190 [ 341.205618] ? kobject_put+0x6b/0x250 [ 341.209402] ? blkdev_get+0x3a1/0xb00 [ 341.213185] ? cap_capable+0x1b5/0x230 [ 341.217065] ? __blkdev_get+0x13b0/0x13b0 [ 341.221199] ? security_capable+0x8e/0xc0 [ 341.225412] ? kill_litter_super+0x90/0x90 [ 341.229626] ? ns_capable_common+0xcf/0x160 [ 341.233927] ? ns_test_super+0x50/0x50 [ 341.237982] ? kill_litter_super+0x90/0x90 [ 341.242192] sget+0xd2/0x120 [ 341.245194] mount_bdev+0x109/0x370 [ 341.248793] ? fuse_get_root_inode+0x190/0x190 [ 341.253356] fuse_mount_blk+0x34/0x40 [ 341.257136] mount_fs+0x66/0x2d0 [ 341.260481] vfs_kern_mount.part.26+0xc6/0x4a0 [ 341.265053] ? may_umount+0xa0/0xa0 [ 341.268655] ? _raw_read_unlock+0x22/0x30 [ 341.272778] ? __get_fs_type+0x8a/0xc0 [ 341.276655] do_mount+0xea4/0x2bb0 [ 341.280180] ? copy_mount_string+0x40/0x40 [ 341.284394] ? rcu_pm_notify+0xc0/0xc0 [ 341.288267] ? copy_mount_options+0x5f/0x2e0 [ 341.292649] ? rcu_read_lock_sched_held+0x108/0x120 [ 341.297645] ? kmem_cache_alloc_trace+0x459/0x740 [ 341.302466] ? kasan_check_write+0x14/0x20 [ 341.306678] ? _copy_from_user+0x99/0x110 [ 341.310806] ? copy_mount_options+0x1f7/0x2e0 [ 341.315285] SyS_mount+0xab/0x120 [ 341.318711] ? copy_mnt_ns+0xb30/0xb30 [ 341.322581] do_syscall_64+0x281/0x940 [ 341.326443] ? __do_page_fault+0xc90/0xc90 [ 341.330653] ? _raw_spin_unlock_irq+0x27/0x70 [ 341.335127] ? finish_task_switch+0x1c1/0x7e0 [ 341.339601] ? syscall_return_slowpath+0x550/0x550 [ 341.344508] ? syscall_return_slowpath+0x2ac/0x550 [ 341.349415] ? prepare_exit_to_usermode+0x350/0x350 [ 341.354411] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 341.359757] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 341.364584] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 341.369750] RIP: 0033:0x4548b9 [ 341.372924] RSP: 002b:00007f032fc57b08 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 341.380609] RAX: ffffffffffffffda RBX: 0000000000000019 RCX: 00000000004548b9 [ 341.387858] RDX: 00000000004b9225 RSI: 0000000020001740 RDI: 0000000020001780 [ 341.395198] RBP: 0000000020001780 R08: 00007f032fc57b20 R09: 0000000000000000 [ 341.402442] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 341.409688] R13: 00000000000003ff R14: 0000000000000000 R15: ffffffffffffffff [ 341.417703] Dumping ftrace buffer: [ 341.421441] (ftrace buffer empty) [ 341.425126] Kernel Offset: disabled [ 341.428739] Rebooting in 86400 seconds..