fbcb81815d86e8dbd5cfa232686bdfad1e166d4afd74aa8a82a9dfc4ef7072d7e60d98c57d2e38c80f4a"]}, 0x13cc}, {&(0x7f0000004e80)={0x2330, 0x16, 0xd20, 0x70bd2a, 0x25dfdbfc, "", [@typed={0x8, 0x8e, @pid=r10}, @generic="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", @typed={0x8, 0x11, @uid=r11}, @nested={0x12f8, 0x8c, [@typed={0x8, 0x7, @fd=r0}, @generic="1208a7fd8c16bf09a89f90afd18260708a2ad579004e54c7c18ea1", @typed={0x8, 0x55, @u32=0x6}, @generic="ad8fc97e800e22e510abef04d5cb8a370d8ddb72d6becf6016b41a27668193bc08bdb8599318cd4f36cf33a29b135b1593038388fde66b8935b7642d195a95c1b033d85e8d0e859d8d78f88e40b78231705e3e7fd3", @typed={0xcc, 0x77, @binary="fdbf6053d08014315ef206cbd187601ac4611fa47cd48ee35d2a820b9c15dc6dfc674c36c4358e1b58d870e0c59ba851b4ae3d78b4548f01d8385004b76d24350f2c4ee20f600fa4651ba77f22479f1fd45bcd5d413a2bb9e43dd94873c92d488f68c1e40e9a1f2fc741d35b1da38036d0b76fd4c70e082d32f23a3811156b08418d9f0c456944bdf611192aafbb8077445b94eaf817fdff33a68b592c1f4d5bcefcd3d5b0003dd1587b8a0136ca519b7ab52d68b07e203278c0c8f5974289bd9c134551149552fb"}, @generic="7cfa10170a823701a677906bc7716aafabcde4933c66aed6fa6f40321b42f586dd0399a706cdd2a62aeef5ca02958e3473307eae4706b22c777e4c77dcbb3690bf216f4f422ea3d204f09879c3082f5b936bed2a25d9030e811272aab9fd5715c8edc44bcb9dc2e2d398e89315698e07421c9b3db5f84234e8add3335a0f52f5d848baa66091f7af7b5075bad08caf56ef3f01c811e0f0c5386ea3065c17668862", @generic="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", @generic="125b906eb4fac6c7e891a86bb883f23916d6d61a29f9ab607f70abf7ab98fe4327f067ff8e01ef9490ee2a36f309e27236193417ae34b762861277cdb13d210b5002e783c89c77e0434ce218b1ac7068123515c78d77329e2788915ed6d48297e20ae12fa9d451204d40ec9d27be70a76a9d2b152e7443f63000848f7006bec552e117d79649a8a5c36df5f927b8f4c7a8af42aaac1037448736f2143d8f7c281cce9740772eed35dc46d0d0c35d9f237e508ebca4a56d1c463d4f1d77551c63bf7d7ee1b6beb03607f1f526af6bf63ef5389a6fc6b9b81901", @typed={0x2c, 0x7b, @str='/proc/sys/net/ipv4/vs/lblc_expiration\x00'}]}, @nested={0x18, 0x9, [@typed={0xc, 0x56, @str='icmp\x00'}, @typed={0x8, 0x4a, @ipv4=@multicast2=0xe0000002}]}]}, 0x2330}, {&(0x7f00000071c0)={0xd8, 0x11, 0x1, 0x1, 0x25dfdbfb, "", [@generic="e8173d0bd24d6dd3abe6d89b9c4d29df9ffccc83a93838f517f81a394f9983d954d4e3d5ea908f7111f58b973782dfc12dd522fe091d948f183af8707cd5fd99684bbeb49d0ea0da0124340789ff403996e091528daf543aef3ac377f70a8e304613f6bc4bda7f89bf27b80c09ed1eec4831de9a59e30fbedd43b09078a937353c5c11a53ca9ac59f75cb7f0b39e5e47b30d63454fc0be6e002dec3a2db323f5187473846a34a9e2257f582e4d31c57e1e08e5c5f0c5b7033f32c7be9cd67bd221c84426ebfe"]}, 0xd8}, {&(0x7f00000072c0)={0x1740, 0x3c, 0x2, 0x70bd26, 0x25dfdbfd, "", [@generic="40344e77932ca67f10ca22619cbac5894ddf8f36d50cb8356e9ca6819249392233f919c16df1b57a998518428c46dee4acb31949fa23b29a1af53885d3b94e55647b522ba43dfd9e25c87d7ebd27fa2b440efd704add6f2fe2cfe9c5f2ae3cfad0beeba992acd4b491446a141d7e4cd1adbd334bb1f0a73825e180e61d9d7f71e244a6e92d23c248f548ad1ed1edf6567164da1859ef067011ce567b9d30f2d78fef21f98bdf4cfcc9d3434464323db8cd303a8795a840765de2b5669d01aa0b28ec5de198504f0b46e9b67a9a342e71958516f3a013dc56b5528e6ab433acfd66ebbb864585bd7ccdd87b6b7234a936dd287d7f4bf797e2b6", @nested={0x110, 0xc, [@typed={0x8, 0x8d, @fd=r0}, @generic="5e709651b23610ab8735cf7a58698eb0ec39b8d6cd2b0ea728fb2855bf82df2ab92e68c8411de843887247f86ab164cb7300853f143ae42d5b0284084eb6cedaa0c0fb2bf9f91d45d084cc27974cd28ec12b39acd9b58931f9177052bc4088c4846f7a3938b35894ebf29c17b782f02a33aa49598075918fa404a88ab91f13b5788c1c93406d0777972bca333eae43feece1089c5cf71b1ddc9210d773102c482dcfff6bf6f6244898ba7d7151e53e3362edd5ba3ac7ce3f2108b07064bad7f0e5cfa0e36770c9966301023491fa24f4552aa18e03118c5b0e3450ac717a7310f0aef76465bd7ac11a8d73152417cc2b05eecedb1bdd", @typed={0xc, 0x23, @u64=0x1}]}, @nested={0xc, 0x7e, [@typed={0x8, 0x42, @u32=0xfff}]}, @generic="106ccde3b3f855ac48fd2f6f6c22145375a57fc3ba8698f140bf27ce43c126e73eb52ffdb0458697661fd3d9e00c5778f5f8c71bd50f72be25a09c559ba72dc3", @nested={0x1bc, 0x37, [@typed={0x4, 0x22}, @generic="d32e710adea4fe61d5d7e6c39253a4272baa9a3d2e5e736d6919f4de47387d6ba69d5fa948f065a96e43fade79e739674bffac7cd6ca214c2718ebbaa9fea2cad8d9dd25928ed0310fe01f20206b2a6f07640288968d013a49d32a768a118b32128babaf21067ef07a", @generic="bae8f318fc", @typed={0x8, 0x91, @ipv4=@local={0xac, 0x14, 0x14, 0xaa}}, @generic="0a768aeed1b879575584f936285571c31e0a0988fb61a66aec355ebd1fab56e0dc80083ecc92575cfd6d68fbce928496540ae406fb657373bd6a34ce6f7e9a31067afd47e8", @generic="1fdc5deb3706e3e8d8a2de88ed45e21de289be8c8dae044047c2672bd3327226eb5738b227c2a9cfd028d22415ff975102fe949377889c908d96bbc8ea7c74c53033da6145ca598e6df145756a759008c9d4d55c25d8cd38d2822e2fa28ce52c4e0e2a141fd84155c23b2a69874195c2f36a9a7ca6b82f716a61626ffe381652e6d0969324f35c57", @typed={0x68, 0x8a, @binary="ba2a78a195fdba140b0d8d42b6a1b6b2d5f0bdb6f71802c93e56deedd0497cdc5c6e5661b10310f48f7db4fddc76ea9a1a9f4bc6e7148da231085f239db78ab771cef0621d40033f12b9f8601c7e5bd205fea0871b1f773f820b725d8d7b5052980a8ad1"}, @typed={0x8, 0x41, @ipv4=@local={0xac, 0x14, 0x14, 0xaa}}]}, @nested={0x10ec, 0x51, [@typed={0xc, 0x65, @u64=0x10001}, @generic="9156870d53b34a874a1d3a79029cd77fe7fa016ef9610fd795aa395efe8495cde35610031fe5b28de923d199c0fc03dddc3ef21944f3ed60f9370a19b63c35069c51b34638c7851be3bd3eed0cab623a871b81def46ae43987defee1f217d6d1964b92a81ecf0b55ed289e9d300af71f61e33e90fddf4e1fcfcb1dc62a6527d55498db7654d24b7dbccc45bd2864ae493becb5240ad0a6b438f63462be9f29e79fcf537ab8c0d73be83e9b194e10a00c537e1f299d0386d5484a69b2ed667f569beef3cfc76bd792ef5c8d8d4767419b4f866156c72ffc7b88b1", @generic="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"]}, @generic="b0dac0c1e99c44c9e8db6740e7868a16bcd3fb6b82c5cf09964e5c5cf148cfd5ab46e42a03bc8789a627b45c14c56b6e935d61d2df88868423f7c3af94f19c887fddae8623d42988de738bcfc9fa5de3c4f70198707b18b4a03258c87c9a6d71f07a7690", @nested={0x12c, 0x5d, [@typed={0x8, 0x15, @u32=0x7}, @generic="4a6cbb806ce2244adc695b07b41916fe55722401cd6c90156dd775697d1fda8ecc8168c933ae0ce198a1d6dbeebb1f32864555f4553dcdca83334bd8a5a14388896f03647c883a12b728895563cd77058a3b09ff1f26789ce030850fd291f8a67bbe4647ff698ced667e81f41ce1cbda3f100451a4b12ba83b3b62fa6b4e75d8b707db542cccbe56ce29b57684694294285431b3c6f84dd6e6db98b279d0dc87e676a8d7a4c9f3c0c3d095ac441765f02a727201d78c3be9f6051ae470529143cd41a84fc885ad6fcc0ed01dd7290eca4b0adffb4b7407bd16ebb72ea1687ee8df32878ade49253de9ee63b7cbf3b1ec4dfad0f56fe26bf570048c558c", @typed={0x20, 0x2d, @binary="339bb8084696190d5ce4a69366438dbdb34f08ae0b09014712d583"}]}, @generic="f206832347144718a16159f4e1b3850ccf819f79ad1b9a46c67f7e60ee489b999e0c04d481ed119c149b4cfe72464dfbd72366b70eb6fe061dbfb5eb7077a15ed9e01e1134abcd5b672a9ef74ad8ac60ed2a538c072dfbe1f2837bd94e28ff5014b0f133cab33c93b968775e1f57d5354a11c573c705f581d6cbf50b15c8cae41c49799d848a6766d91ea4ab8d4c6d86da80c37bb641f5d185d826b4366d84c8f1"]}, 0x1740}, {&(0x7f0000008a00)={0xd0, 0x24, 0x10, 0x70bd2d, 0x25dfdbfc, "", [@nested={0xc0, 0x89, [@typed={0xc, 0x50, @u64=0xf1a3}, @generic="be6c4d194f0ede96caa6a1b6c796f82d8b16fcb448cb6ea6c32bebd90bee13233f8c698dddbdf1d6431ce5213b43d7243136e97c8c17dbcfe055cb98f49ff49e60c8e74bf929d68f4f2576874612b6778b85df7c294a55bcd1e02a8d2f681408cbe794de11e6b8baf3b330202200cf12166a181c1c15281072450eefee4df6879d29ed35f5f6205f130c5b6ccfc3f463e31bb701250ac12f437d3c1ede34257ea358ddd641f1e76183d45e6f5cc8ee"]}]}, 0xd0}, {&(0x7f0000008b00)={0x1684, 0x40, 0x10, 0x70bd2c, 0x25dfdbfb, "", [@generic="5ed69c601736b9871136f399beda79fb4b9c2140e612738731a5fb50a1a3a51b09bd060283e0eceb163bf8fc1aa43f65a951f304b735783c62673a710760555b0383b30a7a805198a132dd9fbd9b1312fc688df7160c16f68bb09849d7fce34117b6785829c7d0d18f91edde522f8f52d39f68656c496359bf9ef0d5de8d58562bbc99384724a785bf07e27cb61643cd18194ed609a211134d8a46c1ca201c4f6101a13bf68c4c203640edd471087e1e1f6c602ef1999a161338147212950aceb6ca4e8fead8d4e520dbdd0c48710ffd29e2377f86f809cadd1b4922b2b512903f6c792240642daf7fab82d614d6a5fb248682aec7c7a9b773c2d17cca5d55f0eec422fd77e43b9e3539016654ed6ff88d51591839655eb8d826e6e5cd898db68f0405999f056a49bc7bb6c1c369a89a9ddf89fb0e99a9b7d03284729a9f2ea6cc827098b04581e5c23ce7fdecbea24a2d895cd9beb1eed56093b57cb6bf7c61be6497998f4811ef33858312397d813705851105136116137db5c5b686065f106950702735d10601a070e281958d4cc4a4440ca817deee4d2675ce7874e4a25ac9cd611944b0653cff279534d4ee60a8b9efdf5e2ccdcf6906577b31ab953ab5079cf9770ac179efe1ac2cb467b1f5d3b601c478667a28f95ca721efc2c0fc95dda60c81d542caeaf46a4bb136bb81fa241e7e5fdbfb57e0df9fcd82a626ec101440a398d7d739eec562b11e7251fa7fde24b9191dd7f847f9a108c55ab8d08bb08e7664d968a9dbf5f6041a0b4c2ce5946546f78000893fa72cd87eb0c187115d96bbdf2d23ae92a82deaad1cbd338b9f2a020afba21acdbcd504cd40e8690120cae9730f7739000b542d745630bac7fee0a57eab02d042952fd524b5de988af40c8895e5004c2c4f75b2e05ac56b08625d55285cad0e6869dae2eae1eae94f48574e86286877908004158c1488f79ec357c477265ba6f1ed97706d30b830775f31480826fd9e5efaf336ce603ae80d54700265c06d1b398dd1820b42bf07208f503a0c9c0dffe7013e24d806058e15ae2b7c1623e65617743b2b16d2520ae3fbc55a75eb281b8e20cc733f8b24440c7c746f943172ed4d27dad5c3b47c1fb0492db4a4f2f1bc1823d6ad51366ab6fa6de70efd5de33386f73f19b7d01edc6c520d88875caeaf08eb2a02ec5555bdab98e04582a6d6db215479a9b40b72ae224fc22779ee37404f06bd3b59bbafe1f6527ae223d96e301126f239fafde4e64acb047a4483164b8cbd4bf1998e5e78366a7e08972e8fb81c5ed3e84c80896c388bd2f5056ddd93d0a550d8cea8843516d8a5300d37173ed7233580cc4b90eab6035af054c0374ada7670aaa9eab2ef35fd71365b693c111c13c0aabcd4c04b515ec5973737c76fbba9705218988e84ab659bf851eb8b5b265cd0b699bda86058e21045c1c68923553e0a6f000433fbc3d3da248742bb9122e59cfe1fd5c5d94ca876eb7a56ab61cef9548e3c74a950d6b20ea51a1e1aea18c045c6701233ff93a07969e33f27ce27f142f14f735118008bd16d6482b48e8fa8b8aca8134265d1ec3b781d59e0c5a08305981b0606f18c4609dc4450e67e3af10f8296118b3b9185c9dfbc8c824a25082b0d454729ca7bb012fbfa450d56f3b896caa15a1570d6cc255d35bbdd21604a4981050ab3140c628ddcf1a787aa50a6a91e18b7128656e0c218408470174a2c51a9d7fc0657e896a9d89c56907ae00a4b955f88833ce44286061c5cb6696092c6a0058240c8adafb3edf3e5452fd8968b5b340382decd02b42220ba621bdb2a715cca21b44723afa7886c1c6c7a10edaf77a0b835aa5af51be34a84e1198b151b6a5f59bdd32ebdaadbace871e4efa07c5fd0fb7ccadf26ed1a42281d02eb56e41dcc76a148aebf1d8f8dca963f43631c59c4a27d3514c6e547598c9e42af5c1bf837cc584ee2465cd0a98f472dec7a58c84c9825b73bbafaadce360dffa2119f61b900c785a87893c63ca0bf09416521e2de6323951c89389957a8f515411dbb821ff717c109b611a7040b96fe75daf3fe8c77b8d564ce8a07cb28e8d7b10ee202d9c89808d8d1c3e6f2aeb5823d3d664ba6bbe35023ec10ee5cb2a21d372cfbe523be00b9a6624a1d35ac14d2c7347a12208eef785380a4b85ad17816d4296e5a04b93898b77233c15a38f9393f11aa3da85a0b6a4b7e9ffb48a46746f08197596253a76aa8cc2c774c8796fd2d4bbfd83f1fa40f31f354e21273572c8d60f294f85f7f27307b1e3f05cd83435ebb0d7ddb75d6f92bbe05de5516eeec7e4dd31d5ef79e4108efeb6c89141dc0284b5a3acdfda6a5f75832d62654f016274009953df6e8fb69495f14cbe92126bfe7d70f73ec005b2622e27706646fe7fa84567155307c2420eef69d1b0b3784befaca6396625ce9ad452f2e01e4d036827b730f049369451b6daace58b2a722c9c09079146403298da2b0807274f8da8a684aab93d0855e0135e80b34690996d6cdf69d40382ed786cbbf7fd812cd751d11b57f1dd4a3fbdae15d9660e27cc8bd7e478712163f8e79798a7345cb4f446590ba823aaeb2f401f4563b52d91e47503c16f7e1e58f8cad2ed249d302f0f68ff4ecc45a7fe752bee4e048c757a330c319bb27977a3d4d2ae49d3ff968e95f6dd018d79e8fbcf9a8d34671fac290ffd92dc573d593a1f93723d236f16b2ea8d643b6b9948bd0d462a233debe9839e0b6a39fda90bac1c8215764a23ce9ec0c7da305a4861435ae1a43b26f419da3b24a17dd1a14d36590ea06354f29ba4ee6e1d9f20230eeb03e2f0915d8bd4812bdb1db44c0a82a4aa4ff161b790566b1493468214a79dbeaaca22169ec20327e3a40ac4b290eb765a2e839ce40b42a7f4ab49150169458fa378d9773c48b6e11434f100f42f7d5a908c964e828be48b92dd69f812150aa1f185f3d5f7c21fb4d8d81cbdc613d1effd5e112e3b3eef5f756734c2239b6e29f36eef74b08f5e8d5b82a0a060d5349f83bd3639d3b193f6e78593274bfe0d013f5bf5da5f777f3a22970180ec032aafa077747cf8f1662088180718727c67dfe4ac5639a1fbd87695cf4951cf6d8399b02c7b684465215c4c740a837983910e1f14340966a70c02c4bc88a20e0195c0e606c202207862f8922ff1d343b11b2156d80d672bf64467a76323b14c000d693a89762df3c2dae5e3afdba7082b69126b4ee5f2ae663268c70300b789536793610ce859870508f1978be961da1598bdb8690ded6ea4becae3d447ff5e778f141a77cbcc674a95ca593bec22014d5601bc475743341da656b82ed6718958553d4acba0fbdd2f119d5d8f5cc776f31c37d000ac91d171df78ccd236ae96272e4b92502ae77241ac25df2c9e08a24e1f645d31c30f9fd1d96082bf7a1b986d61f5e8c6e4ad0ebc2c63808b92a9a496fe49efbfcce83216934a958be9669680d5609ab7898ac6e22ae7ef950e05a7675c08c5ae6a8ff4b9ef64688e1fbd0cf12775d0cd5e17f8fd25a1f9a1be162be70d556b634b3911dc9162e6250c59109cfb3ab4c91530c632b92ef50bae9f5a94cd0abf54acb409ed4668e15dd9d94013c7859480b520267d04f32091335b0feaa6c28515380f4d90df342648f9cb13275be1bc68dc62e00a49ad39017368126d5293071b1929584bdbb1a566e0382c83e1f041bda91ee38a78caf9feb0fb192706f0077cd23fcde046f53168441f586269665653ad80ad2419d42405f74807dba6c1c47bd757203932c06ad03d92281f98aff0e380559b845d7c3dfcb78c20a31f537bec9cec6f1e61053b9d4968bd8676eba800ddf827117608a1da4e1cf1f4aad8df7a2c4a0a256f867a80357edaec06efc5fbe84e4198b0c6ea0ba55bbb09f256c1d697bd9f68374838fb22aa195696addcefd0342a87fd298afd4d7ec5886cdfd70b02b73caeb94efe3e6d6dfcee2e7d273accf1193b4992ecebe1535ce121e699d88a1bd7228fc9afb943415c95bb8cd947175887a0996164182c3d8c3e48a2c9c9cff8592471e1006cb2cf781fd69d1c7d391cfc3331cf61810de85395964d4f37a0578515e33fcdfab63a4e80ca780cffc65944c6e1ee712ada2e34f11021df64311c255bef0db86bf555bf86ffc14990383ea1c6038bfc56f24edf7e1154f74836b46341eb15ab046e30d485e05a1f2ce87a0b80bbce849864b05bc9be46fc44a2bf79f69a32eae878e43420404d290a61ae8bb64b3eb31888e7bcea50541198fb88102af9438654273db91cffeb2db6739669bbdbb7c3dba4d73107a0766da9c8124acdc292b57453d3ffaaf8f7876085d999578698e3fc4414d558f6e42b91cab1aaf89fa210fca8ee448456f2a3f7e073190cc4797b6dcf6f3869fb16e01470392529138f8660614cca7778fd7bdf0a963b025366fcaefc1d54352a85f1b92142fa32ac131d3b5a5e0c1b1b3ade0467c6d48a0913c10155b624f5534f8d350f13fa140b08377ae5ed4580d2dc8abbc721166f09180f2bd417b31229f6dc62c9908a8d87a8f2dc8f2ec2c17e630290671a4edc0cd5045c0f8767eb85e7d6f16cb65a5285fd26d8b7cd12c530149a99d54fd393cabe48e22080cfeae214b8f05191d7be76b61ee0aaa0f7559a414791ee870c7d9727303dd047e0c8607bd7ba92e2b4cac117550d34525db7f348874ba1ef23c0d6646cf38155c8aa73d871b3aa8fff08edf119197b2ef0dc38bcd003d00c5a6bcf89bdb64853e846db28d93ba57feb50550d74ae17e8c5cf07c806c048aab12252ae7cc3df36c5374750088e863734f45141a55a0cf8fb72b251b0beba3a7e43d5890efe8eb73f2df1b50358103ef96443b8dd1442a24bd0722c96a49d96c493756f2053a8722b9e33ac965aa4204588500974c1eb4c3789af3664157fb5c3bc4ce929f0c4d2c4691ecd9ab2f7ec20320bcadfba964e18325382d79d5aa17d3c30f717f106ecce22e71f78dbb60aabc2a1732a4e37e017bfac2ba4f13f0357db4a630d012f8a2f08aa81997e5641c8f783423bae7eb4ddc1228f98c024ae63609955bfc9cd902c1bfeef8d29fb1be5cdf3c14ce5e7c57618e7acd2d35236464a479109a201281951305a45db8bf02743af45edd4f40170e821f8df4cd21f3bc70818d9197548e066456561ced2937873b50822c0a7dee1ce3edec09e582f9ebb8d353df97ed251e266dde37b7055331de5e675a7ecd34b862095bce3db393bbdedcf26ac737b0c36f7623116ddc2cfd8130bcf919072e9949bbf7b90e0ef3298ff4cb870df4f71620fa0ff955879f87fcf6a14844ec0fdef93ecc1f279dc663955dccc2560bb436b71e0c7d6a154b5884468720dee5c7d90ff71cb4ffccc79a4eab0aefe55eaf231a6888e7e81b980df743d4f8c3ff24bad7bbd21f098a52dc5dc87ae3b35d69053a8f98105768f00e95db02e6796d0556c2099895279debfb08c3ca37d66a7a0582da0ad346539f4bcf05671b452f88da39277ec3452986dce7adf83ce1cd4d9d153f9b3722f86e9fcde6d260d7bd300e3aecca103be06544ee8220ba41670796596a0826b1e57287cbca65eb9186fbe9aaf46d1c387cac102a793acce0bc51a26bef9d15263c68980cb526d3e85393a140efe3289c19ee512868fdfaed865ba30f4943e01d815d383da94a6c579dac233b3c05fa9dfd6bdddf8de68a34b8deeff94a734d2316330b9f232e11ed7bc8bc5981885656d75e82af764cc1a7009eab13d95cc7f704254c9be6f729a3a9d74a1681a9e0e2", @generic, @nested={0x2bc, 0x31, [@typed={0x14, 0x53, @ipv6=@local={0xfe, 0x80, [], 0xaa}}, @generic="6dba6f3bb31e075b13", @typed={0x8, 0xa, @u32=0x6}, @generic="74c83d291dc37cd154f200d67a14e820138252bf642762b8ff110a68df272fa95fc60fcb9e82092f773529e26e39da7ef0fd32bf6ac2fa3d458003507e3699c8961026983e4a164a1600dc6585fe131b0eee4f5126dc3bf1e70588568a0cf7cbd4c1f9e46a3719f8d91a9947be28775af7f8970cd051d3a02aa1aa950777dba33e90fb522862176d160b9189e1597dbcd2901a74bd00f12f4a3c47e86458687040f95419b101b6d212e7918df6489e3f38327c92f63382d5dfb26b6f66c9d69ae8660b936bd6ea2db441666e051d9bbff744257aff6882cc53537dd228cd56cd40f472cf8e", @typed={0x8, 0x41, @ipv4=@loopback=0x7f000001}, @typed={0x100, 0x38, @binary="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"}, @typed={0x4, 0x5}, @generic="3c4be08876364767cf3997c8323888ab669b4609078db846cdf7e3b111818731075690b965537ba73f89c0ef48a735570f947cedd9208caf37b01e1f734cf8ccda92422637ccae4b64a12c73f7fb91eabeb761c3077f71f8f1fecd2667889938bd5b633e541af2e30c93d49970a7f5d23af9086229e3fddcec6701b95cf0dffbb310921cefefa25c34f9fa4882c7a22d6b42eefd9892fd409c703615822341d76c"]}, @nested={0x1bc, 0x5a, [@generic="172513e72c9306e21b001fc0ec7eccd51401a159e6426a780fcc8deca4d3381733e6f602b04c75a8ddb7dd38906209a584d24dc75a4a2efde76c2c425f9b4f15a80820092d1e9bf3c99e616e51ec3f1ca319c1a977e55660d3f6bf58d530eca1ac2cd4bf20c03be2a6ad30a5d47f2e3eccf48150c9fa4a6dfbbe6368b6dbf537fb879a8923e40de325a375955700e3bb77c3f773c49fbe3feda8de347cb7ccbe326c4fe0590221dcf4e74481c08c9fdb6a290b7c2309", @generic="bf0557f9cd03b8acab7119e42dd61a128b5d4535cc68c519bec0b4391f2ab4d118197d9ce5a8bb1002022629577027fffe3973293b421890893519373406e3cd24284d0f81869c1c216a577c7208080df0ab011bd89ac3c8af7576ff042804a754587956cc9229061b654613ad0158722e48e67139b6fbc07b98ae1940f9370db5255ca98c0ca2c788e02366932aa07902d481a9c6624d4c5443cc0a86e3120692bf0b792d1dd686e3", @typed={0x8, 0x8c, @u32=0x4}, @generic="f6931d08eb48029a541e7db1d8297ce1b5733458d540c1612d27b10f405713846ee8cfc547ec2c8421db1e8a4c7b6a68cae293e6beb6a73ed7eda1", @typed={0x14, 0x22, @ipv6}]}, @nested={0xd0, 0x3b, [@typed={0x8, 0x4d, @fd=r0}, @generic="0a4f8aeab30201d3", @generic="c252151d357e749d1d28533ca2123fb76308c9389c1031a087ea95444c60241e72649f65e72137d4034f4096dd3fb378dcbf22f673770920d4da7cce95d08cfaeb1a837f9b8c80909502a97ed928e725e1", @typed={0x68, 0x13, @binary="029da4b4a627422ef40059292bbd86abb2d2f677a9255c722cb04d7a34a3390f06a97096f43058e6ff7d7a73603b6f601169ff122652ab8a450231d7283ced6d64cfbc315335e66ed06d8be83dddec4309c5e6a3263b2ab7282235aa77443cffa23140"}]}, @nested={0xf4, 0x75, [@typed={0x8, 0x69, @fd=r0}, @generic="3d14e0b039f4b9b576ff1407d9427e2e342ed7f0a4b3de157469f55c7831911b09208e4bd09892fccfdf6cc3fe414b11843c25e6e02ea6f538e76c1d193aeb60149b17dc61522c5f423d45ef69ce640dd6caee476e3d1806b6e660f286fda1fe0ecb649f62", @generic="e1161bc4762fb6cb46f361fb6beb9f86495fb94c03529a4e55b7e29d03dcb93efa11593fdb6dce7428e0554fd4299ca2ed1a507e710d91", @generic="f5bab295a01aa0f635def8c8cd6ee48b20ab180eb76141f64b3180c24529e8d63a73881610536b9fa8781c6f094c3c6e509b6fbc42ea7939a71f25cc2d0781ebf72c3c41", @typed={0x8, 0x4a, @pid=r12}]}, @nested={0x38, 0x3a, [@generic="397096c820a45914022bf0c1116d680e375d9dba02f611976a5fdb89596a2ac2f5f88ffce1b0c9", @generic="505a0efdbe94c3a4a6d8545efc"]}]}, 0x1684}], 0xa, &(0x7f000000a700)=[@cred={0x20, 0x1, 0x2, r13, r14, r15}, @cred={0x20, 0x1, 0x2, r16, r17, r18}, @cred={0x20, 0x1, 0x2, r19, r20, r21}, @cred={0x20, 0x1, 0x2, r22, r23, r24}], 0x80, 0x4000000}, 0x7097a17bd82e7fab) 2018/03/31 07:26:03 executing program 2: r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000040)={0x18, 0x2, {0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}}, 0x1e) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x800, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r1, 0x114, 0x1, &(0x7f00000000c0)={0x2, 0x4e21, @loopback=0x7f000001}, 0x10) connect$pptp(r0, &(0x7f0000000000)={0x18, 0x2}, 0x1e) [ 172.484983] FAULT_INJECTION: forcing a failure. [ 172.484983] name failslab, interval 1, probability 0, space 0, times 0 [ 172.496304] CPU: 1 PID: 13060 Comm: syz-executor1 Not tainted 4.16.0-rc7+ #372 [ 172.503669] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 172.513022] Call Trace: [ 172.515612] dump_stack+0x194/0x24d [ 172.519244] ? arch_local_irq_restore+0x53/0x53 [ 172.523923] should_fail+0x8c0/0xa40 [ 172.527639] ? kstrdup+0x39/0x70 [ 172.531008] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 172.536108] ? cgroup_mkdir+0x553/0xfc0 [ 172.540077] ? vfs_mkdir+0x390/0x600 [ 172.543791] ? SyS_mkdir+0x220/0x2a0 [ 172.547500] ? do_syscall_64+0x281/0x940 [ 172.551559] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 172.556924] ? find_held_lock+0x35/0x1d0 [ 172.561010] ? find_held_lock+0x35/0x1d0 [ 172.565076] ? __lock_is_held+0xb6/0x140 [ 172.569154] ? check_same_owner+0x320/0x320 [ 172.573481] ? rcu_note_context_switch+0x710/0x710 [ 172.578409] ? rcu_read_lock_sched_held+0x108/0x120 [ 172.583429] should_failslab+0xec/0x120 [ 172.587402] kmem_cache_alloc+0x47/0x760 [ 172.591463] ? memcpy+0x45/0x50 [ 172.594741] ? kstrdup+0x59/0x70 [ 172.598116] __kernfs_new_node+0xe2/0x570 [ 172.602266] ? kernfs_dop_revalidate+0x380/0x380 [ 172.607034] ? find_held_lock+0x35/0x1d0 [ 172.611098] ? kasan_check_read+0x11/0x20 [ 172.615245] ? read_word_at_a_time+0x12/0x20 [ 172.619655] ? strscpy+0x186/0x500 [ 172.623196] ? kernfs_add_one+0x278/0x450 [ 172.627349] kernfs_new_node+0x80/0xe0 [ 172.631234] __kernfs_create_file+0x4b/0x320 [ 172.635638] cgroup_addrm_files+0x3c5/0xa70 [ 172.639951] ? cgroup_file_write+0x710/0x710 [ 172.644340] ? __getnstimeofday64+0x317/0x470 [ 172.648818] ? getrawmonotonic64+0x460/0x460 [ 172.653209] ? kernfs_active+0x92/0x160 [ 172.657168] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 172.662080] ? cgroup_kn_set_ugid+0x2c7/0x370 [ 172.666556] ? cgroup_file_name+0x1d0/0x1d0 [ 172.670864] css_populate_dir+0x340/0x420 [ 172.674993] cgroup_mkdir+0x553/0xfc0 [ 172.678775] ? __lock_is_held+0xb6/0x140 [ 172.682818] ? cgroup_destroy_locked+0x750/0x750 [ 172.687551] ? rcu_read_lock_sched_held+0x108/0x120 [ 172.692545] ? kmem_cache_free+0x258/0x2a0 [ 172.696761] ? set_nlink+0xc1/0x160 [ 172.700368] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 172.705274] ? generic_permission+0x105/0x3c0 [ 172.709749] ? cgroup_destroy_locked+0x750/0x750 [ 172.714485] kernfs_iop_mkdir+0x153/0x1e0 [ 172.718612] vfs_mkdir+0x390/0x600 [ 172.722133] SyS_mkdir+0x220/0x2a0 [ 172.725655] ? SyS_mkdirat+0x2b0/0x2b0 [ 172.729521] ? do_syscall_64+0xb7/0x940 [ 172.733476] ? SyS_mkdirat+0x2b0/0x2b0 [ 172.737352] do_syscall_64+0x281/0x940 [ 172.741218] ? vmalloc_sync_all+0x30/0x30 [ 172.745344] ? trace_event_raw_event_sys_exit+0x260/0x260 [ 172.750860] ? syscall_return_slowpath+0x550/0x550 [ 172.755768] ? syscall_return_slowpath+0x2ac/0x550 [ 172.760681] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 172.766029] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 172.770859] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 172.776028] RIP: 0033:0x454e79 [ 172.779199] RSP: 002b:00007f2d4ca09c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 172.786884] RAX: ffffffffffffffda RBX: 00007f2d4ca0a6d4 RCX: 0000000000454e79 [ 172.794132] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000020000340 [ 172.801380] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 172.808629] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000013 [ 172.815878] R13: 00000000000003ea R14: 00000000006f7e90 R15: 0000000000000008 [ 172.824480] cgroup: cgroup_addrm_files: failed to add cgroup.type, err=-12 [ 172.840578] FAULT_INJECTION: forcing a failure. [ 172.840578] name failslab, interval 1, probability 0, space 0, times 0 [ 172.851852] CPU: 1 PID: 13058 Comm: syz-executor7 Not tainted 4.16.0-rc7+ #372 [ 172.859206] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 172.868551] Call Trace: [ 172.871135] dump_stack+0x194/0x24d [ 172.875227] ? arch_local_irq_restore+0x53/0x53 [ 172.879901] should_fail+0x8c0/0xa40 [ 172.883615] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 172.888712] ? rcu_read_lock_sched_held+0x108/0x120 [ 172.893726] ? kmem_cache_alloc+0x466/0x760 [ 172.898060] ? find_held_lock+0x35/0x1d0 [ 172.902123] ? __lock_is_held+0xb6/0x140 [ 172.906173] ? check_same_owner+0x320/0x320 [ 172.910476] ? rcu_note_context_switch+0x710/0x710 [ 172.915398] should_failslab+0xec/0x120 [ 172.919352] __kmalloc_track_caller+0x5f/0x760 [ 172.923921] ? rb_first_postorder+0xa0/0xa0 [ 172.928233] ? __mutex_lock+0x16f/0x1a80 [ 172.932284] ? kstrdup_const+0x39/0x50 [ 172.936158] kstrdup+0x39/0x70 [ 172.939336] kstrdup_const+0x39/0x50 [ 172.943034] __kernfs_new_node+0xa2/0x570 [ 172.947163] ? kernfs_dop_revalidate+0x380/0x380 [ 172.951896] ? find_held_lock+0x35/0x1d0 [ 172.955935] ? kasan_check_read+0x11/0x20 [ 172.960070] ? read_word_at_a_time+0x12/0x20 [ 172.964471] ? strscpy+0x186/0x500 [ 172.967995] ? kernfs_add_one+0x278/0x450 [ 172.972129] kernfs_new_node+0x80/0xe0 [ 172.975995] __kernfs_create_file+0x4b/0x320 [ 172.980386] cgroup_addrm_files+0x3c5/0xa70 [ 172.984688] ? cgroup_file_write+0x710/0x710 [ 172.989089] ? __getnstimeofday64+0x317/0x470 [ 172.993562] ? getrawmonotonic64+0x460/0x460 [ 172.997948] ? kernfs_active+0x92/0x160 [ 173.001907] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 173.006819] ? cgroup_kn_set_ugid+0x2c7/0x370 [ 173.011288] ? cgroup_file_name+0x1d0/0x1d0 [ 173.015587] css_populate_dir+0x340/0x420 [ 173.019710] cgroup_mkdir+0x553/0xfc0 [ 173.023483] ? __lock_is_held+0xb6/0x140 [ 173.027521] ? cgroup_destroy_locked+0x750/0x750 [ 173.032249] ? rcu_read_lock_sched_held+0x108/0x120 [ 173.037239] ? kmem_cache_free+0x258/0x2a0 [ 173.041451] ? set_nlink+0xc1/0x160 [ 173.045055] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 173.049959] ? generic_permission+0x105/0x3c0 [ 173.054435] ? cgroup_destroy_locked+0x750/0x750 [ 173.059174] kernfs_iop_mkdir+0x153/0x1e0 [ 173.063300] vfs_mkdir+0x390/0x600 [ 173.066817] SyS_mkdir+0x220/0x2a0 [ 173.070334] ? SyS_mkdirat+0x2b0/0x2b0 [ 173.074201] ? do_syscall_64+0xb7/0x940 [ 173.078152] ? SyS_mkdirat+0x2b0/0x2b0 [ 173.082021] do_syscall_64+0x281/0x940 [ 173.085899] ? vmalloc_sync_all+0x30/0x30 [ 173.090035] ? _raw_spin_unlock_irq+0x27/0x70 [ 173.094508] ? finish_task_switch+0x1c1/0x7e0 [ 173.098985] ? syscall_return_slowpath+0x550/0x550 [ 173.103891] ? syscall_return_slowpath+0x2ac/0x550 [ 173.108794] ? prepare_exit_to_usermode+0x350/0x350 [ 173.113784] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 173.119124] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 173.123946] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 173.129108] RIP: 0033:0x454e79 [ 173.132277] RSP: 002b:00007f49041e4c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 173.139968] RAX: ffffffffffffffda RBX: 00007f49041e56d4 RCX: 0000000000454e79 [ 173.147212] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000020000340 [ 173.154457] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 173.161704] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000013 [ 173.168950] R13: 00000000000003ea R14: 00000000006f7e90 R15: 0000000000000007 [ 173.177226] cgroup: cgroup_addrm_files: failed to add cgroup.type, err=-12 2018/03/31 07:26:03 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) getpeername$netlink(r0, &(0x7f0000000140), &(0x7f0000000180)=0xc) add_key$keyring(&(0x7f0000000740)='keyring\x00', &(0x7f0000000780)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffffc) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, &(0x7f0000000040)={0xffffffffffffffff}) setsockopt$IP_VS_SO_SET_DELDEST(r1, 0x0, 0x488, &(0x7f00000000c0)={{0xff, @broadcast=0xffffffff, 0x4e24, 0x4, 'lblcr\x00', 0x0, 0x7, 0x44}, {@multicast2=0xe0000002, 0x4e22, 0x4, 0x5, 0xba3, 0x8}}, 0x44) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x400080, 0x0) write$sndseq(r2, &(0x7f000086afd0)=[{0x10081, 0x8}], 0x30) readv(r2, &(0x7f0000000880)=[{&(0x7f0000000080)=""/8, 0x8}, {&(0x7f0000000800)=""/120, 0x78}], 0x2) 2018/03/31 07:26:03 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x8002, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) ppoll(&(0x7f0000000080)=[{}, {}, {}], 0x20000000000002fb, &(0x7f0000000100)={0x77359400}, &(0x7f0000000140), 0x8) 2018/03/31 07:26:03 executing program 1 (fault-call:6 fault-nth:9): mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) open(&(0x7f00000000c0)='./file0\x00', 0xa0441, 0x80) syz_mount_image$msdos(&(0x7f0000000140)='msdos\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x1, &(0x7f0000000100)=[{&(0x7f0000000480)="9196b107dc9e5c731d56d84afae6a7bf24", 0x11, 0x1f}], 0x0, &(0x7f0000000000)=ANY=[]) rmdir(&(0x7f0000000080)='./file0//ile0\x00') mkdir(&(0x7f0000000340)='./file0//ile0\x00', 0x1) r0 = semget$private(0x0, 0x4, 0x21) semctl$GETPID(r0, 0x1, 0xb, &(0x7f0000000200)=""/154) 2018/03/31 07:26:03 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'lo\x00'}) setsockopt$inet_sctp_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f0000000500)={0x6, 0x9}, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000780)={'yam0\x00', 0x1400}) pread64(0xffffffffffffffff, &(0x7f0000000080)=""/156, 0x9c, 0x19) r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) r2 = dup(r1) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000380)={0x6, 0x2, 0x1, 0x7f, 0x0, 0x1d, 0x2, 0x6, 0x0}, &(0x7f0000000540)=0x20) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000680)={r3, 0x5c, &(0x7f0000000580)=[@in={0x2, 0x4e24}, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x12}}, @in={0x2, 0x4e24, @loopback=0x7f000001}, @in6={0xa, 0x4e20, 0x7, @ipv4={[], [0xff, 0xff], @rand_addr=0xd1}, 0x2}, @in={0x2, 0x4e23, @loopback=0x7f000001}]}, &(0x7f00000006c0)=0x10) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000040)) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x4802, 0x0) ioctl$PERF_EVENT_IOC_ID(r4, 0x80042407, &(0x7f0000000340)) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) close(0xffffffffffffffff) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r5, 0x0, 0x2a, &(0x7f0000c33f70)={0x1, {{0x2, 0xffffffffffffffff, @multicast2=0xe0000002}}}, 0x88) r8 = syz_open_dev$vcsn(&(0x7f00000001c0)='/dev/vcs#\x00', 0x680, 0x40003) setsockopt$inet_MCAST_JOIN_GROUP(r8, 0x0, 0x2a, &(0x7f0000000440)={0xffff, {{0x2, 0x4e21, @local={0xac, 0x14, 0x14, 0xaa}}}}, 0x88) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000600)={0x0}, &(0x7f0000000640)=0x31) sysinfo(&(0x7f0000000940)=""/201) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000400)={0x0, 0x8}, 0xff3e) ioctl$sock_inet_SIOCADDRT(r7, 0x890b, &(0x7f0000000140)={0x9, {0x2, 0x4e22}, {0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, {0x2, 0x0, @multicast1=0xe0000001}, 0x0, 0x1, 0x8, 0x0, 0x200, 0x0, 0x0, 0x1, 0xfff}) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000680)=ANY=[], &(0x7f0000000280)) setsockopt$ipx_IPX_TYPE(0xffffffffffffffff, 0x100, 0x1, &(0x7f00000003c0), 0x4) ioctl$sock_inet_SIOCADDRT(r6, 0x890b, &(0x7f0000000200)={0x0, {0x2, 0x4e22, @broadcast=0xffffffff}, {0x2, 0x4e23}, {0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x0, 0x7, 0x0, 0xfff, 0x7, &(0x7f00000000c0)='sit0\x00', 0x3ff, 0x2}) prctl$setfpexc(0xc, 0x40000) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f00000002c0)={r9, @in={{0x2, 0x4e20, @multicast1=0xe0000001}}, 0x0, 0x2}, 0x90) setsockopt$inet_MCAST_JOIN_GROUP(r7, 0x0, 0x2a, &(0x7f0000acf000)={0x1, {{0x2, 0x4, @broadcast=0xffffffff}}}, 0x88) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r6, 0x84, 0x1, &(0x7f0000000040)={0x0, 0x3ff, 0x0, 0x0, 0x8001}, &(0x7f0000000080)=0x14) 2018/03/31 07:26:03 executing program 7 (fault-call:7 fault-nth:8): mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) open(&(0x7f00000000c0)='./file0\x00', 0xa0441, 0x80) syz_mount_image$msdos(&(0x7f0000000140)='msdos\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x1, &(0x7f0000000100)=[{&(0x7f0000000480)="9196b107dc9e5c731d56d84afae6a7bf24", 0x11, 0x1f}], 0x0, &(0x7f0000000000)=ANY=[]) mkdir(&(0x7f0000000180)='./file0//ile0\x00', 0x112) rmdir(&(0x7f0000000080)='./file0//ile0\x00') mkdir(&(0x7f0000000340)='./file0//ile0\x00', 0x1) r0 = semget$private(0x0, 0x4, 0x21) semctl$GETPID(r0, 0x1, 0xb, &(0x7f0000000200)=""/154) 2018/03/31 07:26:03 executing program 2: r0 = syz_open_dev$sg(&(0x7f000028fff7)='/dev/sg#\x00', 0x0, 0x0) ioctl(r0, 0x4000000000001276, &(0x7f0000000040)) msgget(0x2, 0x0) getsockopt$nfc_llcp(0xffffffffffffffff, 0x118, 0x4, &(0x7f0000000740)=""/223, 0xdf) r1 = accept4$nfc_llcp(r0, &(0x7f0000000fc0), &(0x7f0000000080)=0x60, 0x800) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(0xffffffffffffffff, 0xc1105511, &(0x7f0000000100)={{0x0, 0x0, 0x0, 0x0, "386aea20273dc03c3d18dd0dbd4a0ca15f9f580393cc4ec3b8ee256b9aa630224ba64c6ff43ee01d2996c914"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "eda422cd37591b3a5a7a683380f7e0b9e790c6b72cd0a4f3342f7431c1699a305ca3091bb2320e8df4e298a2cca26637866a68c1426ffbd8a6c7da1d8ea77d9d", &(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x13}) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/self/net/pfkey\x00', 0x800, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) add_key$user(&(0x7f0000000480)='user\x00', &(0x7f00000004c0)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000500)="d3238eea76b0470531092a0a77b0b49789a0fc97b8f8b9e23a2a5a5a0c169ed6e83480b4801dbf79db3527904ee3128c05ce2806e210237c36b88ceabe99d8784860e5d0e91fe33d38d0133e056cdd1e2910d57fc5eb1b23db3b60a7077ff33bb6c7445cd258ee25f9187269c22d1ed05acb2b9b599bd285b692257a631754ab9befebd3fdb3167361c24c5c5dcf90e476e052b9d22362c57878cb7205fe361346d6beb77b7844fe94", 0xa9, 0xfffffffffffffffe) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000300)={'gretap0\x00', {0x2, 0x4e24, @loopback=0x7f000001}}) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000780)=[{&(0x7f0000000840)="edb4a01f68d76905035a4ebdd427d31585a5a650581902b1c077f74ca8f1ce7d3e2f6e1c6760433af9664b3f3bebab3a1a1c4ef86f42c39b758accc1e7637bb18d28248dc7a1719b73388830b162613b17fd02220bd1fe2ad86adb96efcfc672d126ae58f745fba0e7534cdbae947449df767bd76a0c38b5752dcd13f7065edea86dc156c0708e76c2c99a94a95f1e93ff73cb3eb94e06d399cf48aaac7963d13e4b3a6b32bc2b19d5461545dcf3f71bb24442d286421f8d891d77a3c4c1c9435bbdf187682c22ded22b669b7790d05b4894166a2d5f33098cf908a23a2e0671d824e88942fbe0bd1416c98d9b", 0xed}], 0x1, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r4, 0x4010ae68, &(0x7f0000000000)={0x1, 0x5000}) ioctl$KVM_CREATE_PIT2(r4, 0x4040ae77, &(0x7f0000000440)={0xfffffffffffffff7}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) setsockopt$inet_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000280)='tls\x00', 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000005fd8)={'vcan0\x00'}) socket$can_raw(0x1d, 0x3, 0x1) socket$inet6(0xa, 0x0, 0x0) r6 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x0, 0x0) connect$vsock_stream(r6, &(0x7f0000000080)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) dup2(r3, r5) dup3(r3, r4, 0x0) getsockopt$netrom_NETROM_T1(0xffffffffffffffff, 0x103, 0x1, &(0x7f0000000240), &(0x7f0000000280)=0x4) openat$dsp(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/dsp\x00', 0x10000, 0x0) execveat(r0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000580)=[&(0x7f0000000500)='proc-\x00', &(0x7f0000000540)='/dev/sg#\x00'], &(0x7f0000000680)=[&(0x7f00000005c0)='/dev/sg#\x00', &(0x7f0000000600)='/dev/sg#\x00'], 0x1d00) ioctl$KVM_CREATE_DEVICE(r0, 0xc00caee0, &(0x7f0000000180)={0x0, r1, 0x1}) 2018/03/31 07:26:03 executing program 6: unshare(0x80002900) r0 = socket(0x11, 0x100000802, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'ifb0\x00', 0x400b}) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000300)={0x3, 0x0, [{0x3000, 0x8c, &(0x7f0000000100)=""/140}, {0x110000, 0xbb, &(0x7f00000001c0)=""/187}, {0x5000, 0x78, &(0x7f0000000280)=""/120}]}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'ifb0\x00', 0xa201}) 2018/03/31 07:26:03 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000240)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af1f0200f5ab26d7a071fb35331ce39c5a") ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={0x4, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14}}, {0x2, 0x4e23, @loopback=0x7f000001}, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x19}}, 0x0, 0x0, 0x0, 0x0, 0x8000, &(0x7f0000000000)='syzkaller1\x00', 0x0, 0x0, 0x81}) epoll_wait(0xffffffffffffffff, &(0x7f0000000200)=[{}], 0x1, 0x10000) fcntl$setstatus(r0, 0x4, 0x6000) pread64(r0, &(0x7f0000003c00)=""/4096, 0xffffff72, 0x0) r1 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f00000001c0)={0x73, 0x79, 0x7a, 0x2}, 0x0, 0x0, 0xfffffffffffffffe) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000540)={0x8}, 0x4) r2 = socket(0xa, 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) fcntl$setlease(r0, 0x400, 0x3) r3 = open(&(0x7f00004b8ff8)='./file0\x00', 0x28042, 0x0) connect$inet6(r2, &(0x7f0000d3cfe4)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0x3}, 0x1c) ioctl$DRM_IOCTL_ADD_CTX(r3, 0xc0086420, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_NEW_CTX(r3, 0x40086425, &(0x7f0000000080)={r4}) fallocate(r3, 0x0, 0xffff, 0x1f) setsockopt$inet6_mtu(r2, 0x29, 0x17, &(0x7f0000000100), 0x4) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e22, @multicast1=0xe0000001}, 0x10) sendfile(r2, r3, &(0x7f00005faff8), 0xfffb) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000400)={0x0, 0x0, 0xffffffff, 0x0, 0xfffffffffffffffe, 0x200, 0x9, 0x0, {0x0, @in={{0x2, 0x0, @broadcast=0xffffffff}}, 0x0, 0x7f, 0x6, 0x7, 0xc3}}, &(0x7f00000004c0)=0xb0) unlinkat(r2, &(0x7f0000000140)='./file0/file0\x00', 0x0) add_key$keyring(&(0x7f0000000480)='keyring\x00', &(0x7f00000004c0)={0x73, 0x79, 0x7a, 0x2}, 0x0, 0x0, r1) request_key(&(0x7f0000000680)='dns_resolver\x00', &(0x7f0000000700)={0x73, 0x79, 0x7a, 0x0}, &(0x7f00000006c0)="7b2d23776c616e3076626f786e657431766d6e657430142400", r1) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f0000000440), 0x4) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000500)) request_key(&(0x7f00000000c0)='ceph\x00', &(0x7f0000000100)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000140)='vboxnet1\x00', 0x0) add_key$user(&(0x7f0000000280)='user\x00', &(0x7f00000002c0)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000300)="3dde79763ec09bbf6917ffd1e8c401c99e25f23f4979b631bf4aa314195f066c86763061ba5fe74f345a408ba4c56bba2ac4f64642a19a81f72b1d3fb74e5d348e1ebba568683ff0239d512690e15513090485647b5e6cf3c325e2617b08d0977acc58881ccab2dee3754f484a36de5d157e161b881b08d3bd4638a58e83814385f71a085426a0178716f773ce16b3", 0x8f, r1) [ 173.325461] FAULT_INJECTION: forcing a failure. [ 173.325461] name failslab, interval 1, probability 0, space 0, times 0 [ 173.336762] CPU: 1 PID: 13111 Comm: syz-executor1 Not tainted 4.16.0-rc7+ #372 [ 173.344248] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 173.353596] Call Trace: [ 173.356171] dump_stack+0x194/0x24d [ 173.359882] ? arch_local_irq_restore+0x53/0x53 [ 173.364536] should_fail+0x8c0/0xa40 [ 173.368228] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 173.373311] ? rb_first_postorder+0xa0/0xa0 [ 173.377610] ? __mutex_lock+0x16f/0x1a80 [ 173.381648] ? trace_event_raw_event_lock+0x340/0x340 [ 173.386815] ? trace_hardirqs_off+0x10/0x10 [ 173.391118] ? find_held_lock+0x35/0x1d0 [ 173.395162] ? __lock_is_held+0xb6/0x140 [ 173.399211] ? check_same_owner+0x320/0x320 [ 173.403510] ? lock_downgrade+0x980/0x980 [ 173.407637] ? rcu_note_context_switch+0x710/0x710 [ 173.412547] should_failslab+0xec/0x120 [ 173.416587] __kmalloc_track_caller+0x5f/0x760 [ 173.421150] ? idr_alloc_cyclic+0x1d6/0x320 [ 173.425451] ? kstrdup_const+0x39/0x50 [ 173.429315] ? __mutex_unlock_slowpath+0xe9/0xac0 [ 173.434134] kstrdup+0x39/0x70 [ 173.437302] kstrdup_const+0x39/0x50 [ 173.440995] __kernfs_new_node+0xa2/0x570 [ 173.445127] ? kernfs_dop_revalidate+0x380/0x380 [ 173.449860] ? find_held_lock+0x35/0x1d0 [ 173.453898] ? kasan_check_read+0x11/0x20 [ 173.458031] ? read_word_at_a_time+0x12/0x20 [ 173.462419] ? strscpy+0x186/0x500 [ 173.465944] kernfs_new_node+0x80/0xe0 [ 173.469810] __kernfs_create_file+0x4b/0x320 [ 173.474200] cgroup_addrm_files+0x3c5/0xa70 [ 173.478504] ? cgroup_file_write+0x710/0x710 [ 173.482891] ? __getnstimeofday64+0x317/0x470 [ 173.487363] ? getrawmonotonic64+0x460/0x460 [ 173.491748] ? kernfs_active+0x92/0x160 [ 173.495701] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 173.500607] ? cgroup_kn_set_ugid+0x2c7/0x370 [ 173.505079] ? cgroup_file_name+0x1d0/0x1d0 [ 173.509381] css_populate_dir+0x340/0x420 [ 173.513507] cgroup_mkdir+0x553/0xfc0 [ 173.517283] ? __lock_is_held+0xb6/0x140 [ 173.521332] ? cgroup_destroy_locked+0x750/0x750 [ 173.526066] ? rcu_read_lock_sched_held+0x108/0x120 [ 173.531146] ? kmem_cache_free+0x258/0x2a0 [ 173.535356] ? set_nlink+0xc1/0x160 [ 173.538961] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 173.543866] ? generic_permission+0x105/0x3c0 [ 173.548349] ? cgroup_destroy_locked+0x750/0x750 [ 173.553086] kernfs_iop_mkdir+0x153/0x1e0 [ 173.557213] vfs_mkdir+0x390/0x600 [ 173.560734] SyS_mkdir+0x220/0x2a0 [ 173.564251] ? SyS_mkdirat+0x2b0/0x2b0 [ 173.568117] ? do_syscall_64+0xb7/0x940 [ 173.572067] ? SyS_mkdirat+0x2b0/0x2b0 [ 173.575932] do_syscall_64+0x281/0x940 [ 173.579795] ? vmalloc_sync_all+0x30/0x30 [ 173.583921] ? _raw_spin_unlock_irq+0x27/0x70 [ 173.588394] ? finish_task_switch+0x1c1/0x7e0 [ 173.592865] ? syscall_return_slowpath+0x550/0x550 [ 173.597770] ? syscall_return_slowpath+0x2ac/0x550 [ 173.602673] ? prepare_exit_to_usermode+0x350/0x350 [ 173.607666] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 173.613014] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 173.617839] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 173.623006] RIP: 0033:0x454e79 [ 173.626177] RSP: 002b:00007f2d4ca09c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 173.633861] RAX: ffffffffffffffda RBX: 00007f2d4ca0a6d4 RCX: 0000000000454e79 [ 173.641105] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000020000340 [ 173.648352] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 173.655600] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000013 [ 173.662846] R13: 00000000000003ea R14: 00000000006f7e90 R15: 0000000000000009 [ 173.670282] cgroup: cgroup_addrm_files: failed to add cgroup.procs, err=-12 2018/03/31 07:26:04 executing program 0: unshare(0x400) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={0x7}, 0x8, 0x0) flock(r0, 0x2) [ 173.742196] FAULT_INJECTION: forcing a failure. [ 173.742196] name failslab, interval 1, probability 0, space 0, times 0 [ 173.753580] CPU: 1 PID: 13101 Comm: syz-executor7 Not tainted 4.16.0-rc7+ #372 [ 173.760938] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 173.770269] Call Trace: [ 173.772838] dump_stack+0x194/0x24d [ 173.776445] ? arch_local_irq_restore+0x53/0x53 [ 173.781099] should_fail+0x8c0/0xa40 [ 173.784793] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 173.789872] ? rb_first_postorder+0xa0/0xa0 [ 173.794173] ? __mutex_lock+0x16f/0x1a80 [ 173.798218] ? trace_event_raw_event_lock+0x340/0x340 [ 173.803387] ? trace_hardirqs_off+0x10/0x10 [ 173.807687] ? find_held_lock+0x35/0x1d0 [ 173.811728] ? __lock_is_held+0xb6/0x140 [ 173.815771] ? check_same_owner+0x320/0x320 [ 173.820068] ? lock_downgrade+0x980/0x980 [ 173.824192] ? rcu_note_context_switch+0x710/0x710 [ 173.829104] should_failslab+0xec/0x120 [ 173.833055] __kmalloc_track_caller+0x5f/0x760 [ 173.837615] ? idr_alloc_cyclic+0x1d6/0x320 [ 173.841914] ? kstrdup_const+0x39/0x50 [ 173.845777] ? __mutex_unlock_slowpath+0xe9/0xac0 [ 173.850601] kstrdup+0x39/0x70 [ 173.853774] kstrdup_const+0x39/0x50 [ 173.857468] __kernfs_new_node+0xa2/0x570 [ 173.861593] ? kernfs_dop_revalidate+0x380/0x380 [ 173.866326] ? find_held_lock+0x35/0x1d0 [ 173.870364] ? kasan_check_read+0x11/0x20 [ 173.874491] ? read_word_at_a_time+0x12/0x20 [ 173.878877] ? strscpy+0x186/0x500 [ 173.882404] kernfs_new_node+0x80/0xe0 [ 173.886270] __kernfs_create_file+0x4b/0x320 [ 173.890659] cgroup_addrm_files+0x3c5/0xa70 [ 173.894965] ? cgroup_file_write+0x710/0x710 [ 173.899357] ? __getnstimeofday64+0x317/0x470 [ 173.903831] ? getrawmonotonic64+0x460/0x460 [ 173.908218] ? kernfs_active+0x92/0x160 [ 173.912172] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 173.917077] ? cgroup_kn_set_ugid+0x2c7/0x370 [ 173.921550] ? cgroup_file_name+0x1d0/0x1d0 [ 173.925854] css_populate_dir+0x340/0x420 [ 173.929982] cgroup_mkdir+0x553/0xfc0 [ 173.933762] ? __lock_is_held+0xb6/0x140 [ 173.937803] ? cgroup_destroy_locked+0x750/0x750 [ 173.942547] ? rcu_read_lock_sched_held+0x108/0x120 [ 173.947539] ? kmem_cache_free+0x258/0x2a0 [ 173.951753] ? set_nlink+0xc1/0x160 [ 173.955358] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 173.960266] ? generic_permission+0x105/0x3c0 [ 173.964737] ? cgroup_destroy_locked+0x750/0x750 [ 173.969472] kernfs_iop_mkdir+0x153/0x1e0 [ 173.973598] vfs_mkdir+0x390/0x600 [ 173.977115] SyS_mkdir+0x220/0x2a0 [ 173.980740] ? SyS_mkdirat+0x2b0/0x2b0 [ 173.984605] ? do_syscall_64+0xb7/0x940 [ 173.988555] ? SyS_mkdirat+0x2b0/0x2b0 [ 173.992419] do_syscall_64+0x281/0x940 [ 173.996283] ? vmalloc_sync_all+0x30/0x30 [ 174.000408] ? _raw_spin_unlock_irq+0x27/0x70 [ 174.004879] ? finish_task_switch+0x1c1/0x7e0 [ 174.009351] ? syscall_return_slowpath+0x550/0x550 [ 174.014257] ? syscall_return_slowpath+0x2ac/0x550 [ 174.019162] ? prepare_exit_to_usermode+0x350/0x350 [ 174.024156] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 174.029501] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 174.034326] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 174.039494] RIP: 0033:0x454e79 [ 174.042668] RSP: 002b:00007f49041e4c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 174.050358] RAX: ffffffffffffffda RBX: 00007f49041e56d4 RCX: 0000000000454e79 [ 174.057604] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000020000340 [ 174.064848] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 174.072092] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000013 [ 174.079336] R13: 00000000000003ea R14: 00000000006f7e90 R15: 0000000000000008 [ 174.086777] cgroup: cgroup_addrm_files: failed to add cgroup.procs, err=-12 2018/03/31 07:26:04 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000540)='setgroups\x00') r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0)='IPVS\x00') sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000700)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x1412020}, 0xc, &(0x7f00000006c0)={&(0x7f0000000600)={0xc0, r1, 0x824, 0x70bd25, 0x25dfdbfe, {0xc}, [@IPVS_CMD_ATTR_SERVICE={0x58, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e24}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x5}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e24}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x34}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7ff}, @IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x9a}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge0\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'syz_tun\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x6}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x20000001}, 0x800) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=@ipv4_getroute={0x14, 0x1a, 0x0, 0x0, 0x25dfdbfe, {0x2}}, 0x14}, 0x1}, 0x0) write(r2, &(0x7f0000000140), 0x1c4) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x82040, 0x0) setsockopt$packet_buf(r3, 0x107, 0x5, &(0x7f0000000200)="534d3645eca10e71eddf95570f00affc9d3e8dc93184bc1b2a97651b7b8a95647b9732cc6cbf67c5f974a9364027de8edc63006f8eb2cc259323f4f7c7e05ac0df7765cf8eb3c9c9616036ecce1d55787d264f3e9512d8461267af161588fd374a1075e5186bae5d8f6aab69c15dc4e7d2d27b7b3ec77dc94e8e1c0476bac5092f5dbd8e", 0x84) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DAEMON(r3, &(0x7f0000000440)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x41000}, 0xc, &(0x7f0000000400)={&(0x7f00000002c0)={0x114, r4, 0x400, 0x70bd2a, 0x25dfdbfb, {0xa}, [@IPVS_CMD_ATTR_SERVICE={0x20, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'nq\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblc\x00'}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, [@IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e20}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xa4c7}, @IPVS_CMD_ATTR_SERVICE={0x40, 0x1, [@IPVS_SVC_ATTR_AF={0x8, 0x1, 0x2}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1=0xe0000001}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x16}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0xff}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x2d}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xac72}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffffffff}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xe55}, @IPVS_CMD_ATTR_SERVICE={0x64, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0xc}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@broadcast=0xffffffff}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x6}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x7, 0xc}}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e23}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x29}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x21}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3f}]}, 0x114}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f0000000480)=0x1, 0x4) 2018/03/31 07:26:04 executing program 4: syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x110, 0x10000}, {&(0x7f0000013300)="000000000000000000000004000000000000000001000000000000008040000000000000000000000000000010000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000040000000000", 0x60, 0x405720}, {&(0x7f0000013c00)="000000000000000000040000000000000000000000000000000060400000000000000000000000000000100000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000400000000000000", 0x60, 0x405ee0}], 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1f00417cb541b60dbf87c87711b3d2f348ccf4737e44420c16433a90714fa69e84efd75cd61994abbfe90011f2e1a7316500a731d3668997c86eca1352fc83170300020064d44c85debd135420c2722ab28bf55cf2ab"]) r0 = dup(0xffffffffffffff9c) ioctl$KDSKBSENT(r0, 0x4b49, &(0x7f00000000c0)="48560ab2ab1576e8aa0580d3b1d12e19e81df722f97295c715a6abb7654a8c1f27a33bd3f0ddb40b0a3dfc41098a49561a43fa926f69d95d16d6b5f60662") ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f0000000180)={0x4, &(0x7f0000000140)=[{0x2, 0x100000001}, {0x0, 0x7f}, {0xc5, 0x6}, {0x8}]}) 2018/03/31 07:26:04 executing program 6: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$rdma_cm(r0, &(0x7f0000000f80)=ANY=[@ANYBLOB, @ANYRES32=0xffffffff, @ANYBLOB="0000000002000000ac141400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x90) 2018/03/31 07:26:04 executing program 7 (fault-call:7 fault-nth:9): mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) open(&(0x7f00000000c0)='./file0\x00', 0xa0441, 0x80) syz_mount_image$msdos(&(0x7f0000000140)='msdos\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x1, &(0x7f0000000100)=[{&(0x7f0000000480)="9196b107dc9e5c731d56d84afae6a7bf24", 0x11, 0x1f}], 0x0, &(0x7f0000000000)=ANY=[]) mkdir(&(0x7f0000000180)='./file0//ile0\x00', 0x112) rmdir(&(0x7f0000000080)='./file0//ile0\x00') mkdir(&(0x7f0000000340)='./file0//ile0\x00', 0x1) r0 = semget$private(0x0, 0x4, 0x21) semctl$GETPID(r0, 0x1, 0xb, &(0x7f0000000200)=""/154) 2018/03/31 07:26:04 executing program 1 (fault-call:6 fault-nth:10): mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) open(&(0x7f00000000c0)='./file0\x00', 0xa0441, 0x80) syz_mount_image$msdos(&(0x7f0000000140)='msdos\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x1, &(0x7f0000000100)=[{&(0x7f0000000480)="9196b107dc9e5c731d56d84afae6a7bf24", 0x11, 0x1f}], 0x0, &(0x7f0000000000)=ANY=[]) rmdir(&(0x7f0000000080)='./file0//ile0\x00') mkdir(&(0x7f0000000340)='./file0//ile0\x00', 0x1) r0 = semget$private(0x0, 0x4, 0x21) semctl$GETPID(r0, 0x1, 0xb, &(0x7f0000000200)=""/154) 2018/03/31 07:26:04 executing program 0: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$rdma_cm(r0, &(0x7f0000000200)=@query_route={0x5, 0x10, 0xfa00, {&(0x7f0000000400)}}, 0x18) [ 174.188305] BTRFS: device fsid ecf6f2a3-2997-48ae-b81e-1b00920efd9a devid 1 transid 5 /dev/loop4 [ 174.217681] FAULT_INJECTION: forcing a failure. [ 174.217681] name failslab, interval 1, probability 0, space 0, times 0 [ 174.228962] CPU: 0 PID: 13156 Comm: syz-executor7 Not tainted 4.16.0-rc7+ #372 [ 174.236352] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 174.245691] Call Trace: [ 174.248264] dump_stack+0x194/0x24d [ 174.251873] ? arch_local_irq_restore+0x53/0x53 [ 174.256533] should_fail+0x8c0/0xa40 [ 174.260224] ? kstrdup+0x39/0x70 [ 174.263582] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 174.268671] ? cgroup_mkdir+0x553/0xfc0 [ 174.272622] ? vfs_mkdir+0x390/0x600 [ 174.276314] ? SyS_mkdir+0x220/0x2a0 [ 174.280011] ? do_syscall_64+0x281/0x940 [ 174.284056] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 174.289402] ? find_held_lock+0x35/0x1d0 [ 174.293449] ? find_held_lock+0x35/0x1d0 [ 174.297495] ? __lock_is_held+0xb6/0x140 [ 174.301560] ? check_same_owner+0x320/0x320 [ 174.305862] ? rcu_note_context_switch+0x710/0x710 [ 174.310769] ? rcu_read_lock_sched_held+0x108/0x120 [ 174.315769] should_failslab+0xec/0x120 [ 174.319724] kmem_cache_alloc+0x47/0x760 [ 174.323767] ? memcpy+0x45/0x50 [ 174.327031] ? kstrdup+0x59/0x70 [ 174.330383] __kernfs_new_node+0xe2/0x570 [ 174.334510] ? kernfs_dop_revalidate+0x380/0x380 [ 174.339248] ? find_held_lock+0x35/0x1d0 [ 174.343290] ? kasan_check_read+0x11/0x20 [ 174.347420] ? read_word_at_a_time+0x12/0x20 [ 174.351810] ? strscpy+0x186/0x500 [ 174.355338] kernfs_new_node+0x80/0xe0 [ 174.359211] __kernfs_create_file+0x4b/0x320 [ 174.363604] cgroup_addrm_files+0x3c5/0xa70 [ 174.367914] ? cgroup_file_write+0x710/0x710 [ 174.372306] ? __getnstimeofday64+0x317/0x470 [ 174.376782] ? getrawmonotonic64+0x460/0x460 [ 174.381171] ? kernfs_active+0x92/0x160 [ 174.385129] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 174.390036] ? cgroup_kn_set_ugid+0x2c7/0x370 [ 174.394513] ? cgroup_file_name+0x1d0/0x1d0 [ 174.398818] css_populate_dir+0x340/0x420 [ 174.402948] cgroup_mkdir+0x553/0xfc0 [ 174.406728] ? __lock_is_held+0xb6/0x140 [ 174.410770] ? cgroup_destroy_locked+0x750/0x750 [ 174.415505] ? rcu_read_lock_sched_held+0x108/0x120 [ 174.420498] ? kmem_cache_free+0x258/0x2a0 [ 174.424714] ? set_nlink+0xc1/0x160 [ 174.428323] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 174.433236] ? generic_permission+0x105/0x3c0 [ 174.437711] ? cgroup_destroy_locked+0x750/0x750 [ 174.442448] kernfs_iop_mkdir+0x153/0x1e0 [ 174.446577] vfs_mkdir+0x390/0x600 [ 174.450100] SyS_mkdir+0x220/0x2a0 [ 174.453619] ? SyS_mkdirat+0x2b0/0x2b0 [ 174.457488] ? do_syscall_64+0xb7/0x940 [ 174.461444] ? SyS_mkdirat+0x2b0/0x2b0 [ 174.465310] do_syscall_64+0x281/0x940 [ 174.469174] ? vmalloc_sync_all+0x30/0x30 [ 174.473299] ? _raw_spin_unlock_irq+0x27/0x70 [ 174.477772] ? finish_task_switch+0x1c1/0x7e0 [ 174.482244] ? syscall_return_slowpath+0x550/0x550 [ 174.487153] ? syscall_return_slowpath+0x2ac/0x550 [ 174.492061] ? prepare_exit_to_usermode+0x350/0x350 [ 174.497059] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 174.502403] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 174.507238] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 174.512406] RIP: 0033:0x454e79 [ 174.515577] RSP: 002b:00007f49041e4c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 174.523269] RAX: ffffffffffffffda RBX: 00007f49041e56d4 RCX: 0000000000454e79 [ 174.530518] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000020000340 2018/03/31 07:26:05 executing program 3: socketpair$inet6(0xa, 0x1, 0x1000, &(0x7f0000000080)={0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffff9c, 0x84, 0x7c, &(0x7f00000000c0)={0x0, 0xffffffffffffffff}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000140)={r1, 0x5a6, 0xc450, 0x40}, 0x10) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r2, 0x29, 0x8, &(0x7f00004aaffc)=0x6, 0x4) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sloppy_tcp\x00', 0x2, 0x0) ioctl$KVM_TRANSLATE(r3, 0xc018ae85, &(0x7f0000000040)={0xf000, 0xd000, 0x100, 0x5, 0xf80000000}) epoll_ctl$EPOLL_CTL_DEL(r3, 0x2, r2) getsockopt$inet6_buf(r2, 0x29, 0x6, &(0x7f0000c86000), &(0x7f0000d1b252)) 2018/03/31 07:26:05 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(crc32-pclmul)\x00'}, 0x58) 2018/03/31 07:26:05 executing program 6: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000040)) r0 = semget(0x2, 0x3, 0x8) semctl$GETPID(r0, 0x0, 0xb, &(0x7f0000000080)=""/69) gettid() r1 = getpgrp(0xffffffffffffffff) r2 = syz_open_procfs(r1, &(0x7f0000000180)='net/ip6_mr_cache\x00') fcntl$lock(r2, 0x6, &(0x7f0000000280)={0x0, 0x0, 0x0, 0xffffffffffff4766}) ioctl$KVM_GET_DEBUGREGS(r2, 0x8080aea1, &(0x7f0000000100)) [ 174.537766] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 174.545022] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000013 [ 174.552270] R13: 00000000000003ea R14: 00000000006f7e90 R15: 0000000000000009 [ 174.559709] cgroup: cgroup_addrm_files: failed to add cgroup.procs, err=-12 2018/03/31 07:26:05 executing program 7 (fault-call:7 fault-nth:10): mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) open(&(0x7f00000000c0)='./file0\x00', 0xa0441, 0x80) syz_mount_image$msdos(&(0x7f0000000140)='msdos\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x1, &(0x7f0000000100)=[{&(0x7f0000000480)="9196b107dc9e5c731d56d84afae6a7bf24", 0x11, 0x1f}], 0x0, &(0x7f0000000000)=ANY=[]) mkdir(&(0x7f0000000180)='./file0//ile0\x00', 0x112) rmdir(&(0x7f0000000080)='./file0//ile0\x00') mkdir(&(0x7f0000000340)='./file0//ile0\x00', 0x1) r0 = semget$private(0x0, 0x4, 0x21) semctl$GETPID(r0, 0x1, 0xb, &(0x7f0000000200)=""/154) 2018/03/31 07:26:05 executing program 3: r0 = creat(&(0x7f0000000b40)='./file0\x00', 0x20) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f0000000b80)={0x5, 0x0, 0x10003, 0x81}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000bc0)={0x3, r1}) r2 = socket$inet(0x2, 0x6, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f00000008c0)=@broute={'broute\x00', 0x20, 0x2, 0x3e8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000280], 0x0, &(0x7f0000000240), &(0x7f0000000280)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff01000000110000000000000000006970366772657461703000000000f8010000000000006e000000000000000000697036746e6c3000000000000000000073797a5f74756e0000000000000000000180c200000000000000ff00aaaaaaaaaabb00000000000000007000000008010000580100005241544545535400000000000000000000000000000000000000000000000000200000000000000073797a30000000000000000000000000000000000000000000000000000000004c45440000000000000000000000000000000000000000000000000000000000280000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000049444c4554494d4552000000000000000000000000000000000000000000000028000000000000000000010073797a30000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000ffffffff010000000d0000000000000086dd73797a6b616c6c65723000000000000074756e6c3000000000000000000000007369743000000000000000000000000069666230000000000000000000000000000000000000000000000000ffffffffffff000000000000000030010000b001000000020000697036000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000ffffac1414aa0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006c696d6974000000000000000000000000000000000000000000000000000000200000000000000000000000ec00000000000000000000000000000000000000000000000000000049444c4554494d4552000000000000000000000000000000000000000000000028000000000000008100000073797a3100000000000000000000000000000000000000000000000000000000000000004e46515545554500000000000000000000000000000000000000000000000000080000000000000000000000000000004c45440000000000000000000000000000000000000000000000000000000000280000000000000073797a30000000000000000000000000000000000000000000000000000000000000000000000000"]}, 0x460) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffff9c, 0x84, 0x11, &(0x7f0000000000)={0x0, 0x7}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000140)={0x0, 0xa2b, 0x0, 0x0, 0x2, 0x20, 0x10000, 0x8a82, r3}, &(0x7f0000000180)=0x20) r4 = socket(0x1d, 0xb, 0x0) setsockopt$inet_group_source_req(r4, 0x0, 0xfe0d64ad1c6cb9f1, &(0x7f0000000680)={0x1000, {{0x2, 0x4e23, @multicast1=0xe0000001}}, {{0x2, 0x4e22, @broadcast=0xffffffff}}}, 0x108) ioctl$DRM_IOCTL_AGP_ENABLE(r4, 0x40086432, &(0x7f0000000100)) ioctl$TIOCGSOFTCAR(0xffffffffffffffff, 0x5419, &(0x7f00000007c0)) r5 = socket$inet6(0x10, 0x2, 0x0) sendmsg(r5, &(0x7f0000000080)={&(0x7f0000000240)=@nl=@kern={0x10}, 0x80, &(0x7f0000000040), 0x0, &(0x7f00000000c0)}, 0x0) socket$bt_cmtp(0x1f, 0x3, 0x5) syz_open_dev$sndmidi(&(0x7f0000000c00)='/dev/snd/midiC#D#\x00', 0x100000001, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000001640)=@broute={'broute\x00', 0x20, 0x1, 0x1e8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20001700], 0x0, &(0x7f0000001980), &(0x7f0000001700)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x13, 0x0, 0x0, 'vcan0\x00', 'ifb0\x00', 'syzkaller0\x00', 'vcan0\x00', @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], @link_local={0x1, 0x80, 0xc2}, [], 0x70, 0xf8, 0x128}, [@common=@dnat={'dnat\x00', 0x10, {{@dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, 0xffffffffffffffff}}}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x4, 'syz0\x00'}}}]}, @common=@NFQUEUE0={'NFQUEUE\x00', 0x8}}]}, {0x0, '\x00', 0x1, 0xffffbffffffffffe}]}, 0x260) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000840)=@nat={'nat\x00', 0x19, 0x1, 0x200, [0x20000940, 0x0, 0x0, 0x20000970, 0x200009a0], 0x0, &(0x7f0000000800), &(0x7f0000000940)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0xb, 0x14, 0x98ab, 'teql0\x00', 'ip6gretap0\x00', 'ip_vti0\x00', 'nr0\x00', @empty, [0x0, 0x0, 0x0, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2}, [0xff, 0x0, 0xff, 0x0, 0x0, 0xff], 0x100, 0x138, 0x170, [@time={'time\x00', 0x18, {{0x7, 0x3, 0x13782, 0x14fdf, 0x80, 0x4, 0x1}}}, @nfacct={'nfacct\x00', 0x28, {{'syz1\x00', 0x2}}}]}, [@snat={'snat\x00', 0x10, {{@random="07901c8f0140"}}}]}, @common=@dnat={'dnat\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, 0x10}}}}]}]}, 0x278) [ 174.626150] FAULT_INJECTION: forcing a failure. [ 174.626150] name failslab, interval 1, probability 0, space 0, times 0 [ 174.637516] CPU: 0 PID: 13163 Comm: syz-executor1 Not tainted 4.16.0-rc7+ #372 [ 174.644871] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 174.654223] Call Trace: [ 174.656815] dump_stack+0x194/0x24d [ 174.660441] ? arch_local_irq_restore+0x53/0x53 [ 174.665116] should_fail+0x8c0/0xa40 [ 174.668838] ? fault_create_debugfs_attr+0x1f0/0x1f0 2018/03/31 07:26:05 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000440)={0x0, 0x5, 0xa, "3fa9d76d7b729e490ddb"}, 0x12) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x200, 0x0) write$rdma_cm(r2, &(0x7f0000000180)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @dev={0xfe, 0x80}}, r1}}, 0x48) write$rdma_cm(r0, &(0x7f0000000040)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000000240)}}, 0x10) r3 = shmget(0x0, 0x1000, 0x0, &(0x7f0000ffe000/0x1000)=nil) shmctl$SHM_STAT(r3, 0xd, &(0x7f0000000100)=""/125) [ 174.673940] ? rb_first_postorder+0xa0/0xa0 [ 174.678256] ? __mutex_lock+0x16f/0x1a80 [ 174.682316] ? save_stack+0x43/0xd0 [ 174.685936] ? kasan_kmalloc+0xad/0xe0 [ 174.689824] ? find_held_lock+0x35/0x1d0 [ 174.693885] ? __lock_is_held+0xb6/0x140 [ 174.697951] ? check_same_owner+0x320/0x320 [ 174.702268] ? lock_downgrade+0x980/0x980 [ 174.706421] ? rcu_note_context_switch+0x710/0x710 [ 174.711357] should_failslab+0xec/0x120 [ 174.715323] __kmalloc_track_caller+0x5f/0x760 [ 174.719900] ? idr_alloc_cyclic+0x1d6/0x320 2018/03/31 07:26:05 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa}, 0x1c) sendmmsg(r0, &(0x7f0000007e00)=[{{0x0, 0x0, &(0x7f0000000380), 0x0, &(0x7f00000003c0)}}, {{&(0x7f00000004c0)=@in6={0xa, 0x4e22, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x80, &(0x7f00000001c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1400000000000000290000004300000003040000"], 0x14}}], 0x2, 0x0) [ 174.724217] ? trace_hardirqs_off+0x10/0x10 [ 174.728535] ? kstrdup_const+0x39/0x50 [ 174.732429] ? __mutex_unlock_slowpath+0xe9/0xac0 [ 174.737267] kstrdup+0x39/0x70 [ 174.740461] kstrdup_const+0x39/0x50 [ 174.744171] __kernfs_new_node+0xa2/0x570 [ 174.748318] ? kernfs_dop_revalidate+0x380/0x380 [ 174.753076] ? kasan_check_read+0x11/0x20 [ 174.757224] ? read_word_at_a_time+0x12/0x20 [ 174.761628] ? strscpy+0x186/0x500 [ 174.765176] kernfs_new_node+0x80/0xe0 [ 174.769068] __kernfs_create_file+0x4b/0x320 2018/03/31 07:26:05 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x4, 0x4000) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000100)=0x8, 0x4) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x103000, 0x0) ioctl$TIOCNXCL(r2, 0x540d) 2018/03/31 07:26:05 executing program 5: r0 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x7, 0x400402) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x2, 0x2, 0x8000, 0xb, 0x18, 0x0, 0x70bd28, 0x25dfdbfb, [@sadb_x_policy={0x8, 0x12, 0x4, 0x0, 0x0, 0x0, 0x8, {0x6, 0x33, 0x7f, 0x3, 0x0, 0x6, 0x0, @in, @in=@loopback=0x7f000001}}, @sadb_x_kmaddress={0x7, 0x19, 0x0, @in={0x2, 0x4e20, @broadcast=0xffffffff}, @in6={0xa, 0x4e20, 0x0, @local={0xfe, 0x80, [], 0xaa}, 0x1}}, @sadb_x_filter={0x5, 0x1a, @in6=@dev={0xfe, 0x80, [], 0x14}, @in6=@loopback={0x0, 0x1}, 0x0, 0x4, 0x14}, @sadb_x_sa2={0x2, 0x13, 0x2, 0x0, 0x0, 0x70bd2c, 0x3507}]}, 0xc0}, 0x1}, 0x4081) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000f56000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000da9000)={0x2, 0x3, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa}}, @sadb_sa={0x2, 0x1}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}]}, 0x70}, 0x1}, 0x0) sendmsg$key(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x15, 0x0, 0x3, 0x2}, 0x10}, 0x1}, 0x0) [ 174.773478] cgroup_addrm_files+0x3c5/0xa70 [ 174.777807] ? cgroup_file_write+0x710/0x710 [ 174.782210] ? __getnstimeofday64+0x317/0x470 [ 174.786705] ? getrawmonotonic64+0x460/0x460 [ 174.791113] ? kernfs_active+0x92/0x160 [ 174.795089] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 174.800010] ? cgroup_kn_set_ugid+0x2c7/0x370 [ 174.804499] ? cgroup_file_name+0x1d0/0x1d0 [ 174.808819] css_populate_dir+0x340/0x420 [ 174.812963] cgroup_mkdir+0x553/0xfc0 [ 174.816753] ? __lock_is_held+0xb6/0x140 [ 174.820808] ? cgroup_destroy_locked+0x750/0x750 [ 174.825559] ? rcu_read_lock_sched_held+0x108/0x120 2018/03/31 07:26:05 executing program 1 (fault-call:6 fault-nth:11): mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) open(&(0x7f00000000c0)='./file0\x00', 0xa0441, 0x80) syz_mount_image$msdos(&(0x7f0000000140)='msdos\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x1, &(0x7f0000000100)=[{&(0x7f0000000480)="9196b107dc9e5c731d56d84afae6a7bf24", 0x11, 0x1f}], 0x0, &(0x7f0000000000)=ANY=[]) rmdir(&(0x7f0000000080)='./file0//ile0\x00') mkdir(&(0x7f0000000340)='./file0//ile0\x00', 0x1) r0 = semget$private(0x0, 0x4, 0x21) semctl$GETPID(r0, 0x1, 0xb, &(0x7f0000000200)=""/154) [ 174.831039] ? kmem_cache_free+0x258/0x2a0 [ 174.831065] ? set_nlink+0xc1/0x160 [ 174.831076] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 174.831084] ? generic_permission+0x105/0x3c0 [ 174.831095] ? cgroup_destroy_locked+0x750/0x750 [ 174.831107] kernfs_iop_mkdir+0x153/0x1e0 [ 174.831117] vfs_mkdir+0x390/0x600 [ 174.831127] SyS_mkdir+0x220/0x2a0 [ 174.831138] ? SyS_mkdirat+0x2b0/0x2b0 [ 174.831149] ? do_syscall_64+0xb7/0x940 [ 174.831159] ? SyS_mkdirat+0x2b0/0x2b0 [ 174.831168] do_syscall_64+0x281/0x940 2018/03/31 07:26:05 executing program 6: r0 = socket$inet(0x2, 0x5, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000008c0)=@broute={'broute\x00', 0x20, 0x2, 0x3e8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000280], 0x0, &(0x7f0000000240), &(0x7f0000000280)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x0, 'ip6gretap0\x00', 'syz_tun\x00', 'ip6tnl0\x00', 'syz_tun\x00', @link_local={0x1, 0x80, 0xc2}, [0x0, 0x1000], @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], 0x70, 0x108, 0x158}, [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz0\x00'}}}, @common=@LED={'LED\x00', 0x28, {{'syz0\x00'}}}]}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x10000, 'syz0\x00'}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff, 0x1, [{{{0xd, 0x0, 0x86dd, 'syzkaller0\x00', 'tunl0\x00', 'sit0\x00', 'ifb0\x00', @empty, [], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], 0x130, 0x1b0, 0x200, [@ip6={'ip6\x00', 0x50, {{@empty, @ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0x14, 0xaa}}}}}, @limit={'limit\x00', 0x20, {{0x0, 0xec}}}]}, [@common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x81, 'syz1\x00'}}}, @common=@NFQUEUE0={'NFQUEUE\x00', 0x8}]}, @common=@LED={'LED\x00', 0x28, {{'syz0\x00'}}}}]}]}, 0x460) mlock(&(0x7f0000ffa000/0x4000)=nil, 0x4000) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffff9c, 0x84, 0x11, &(0x7f0000000000)={0x0, 0x7}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000140)={0x2, 0xa2b, 0x4, 0x7, 0x2, 0x20, 0x10000, 0x8a82, r1}, &(0x7f0000000180)=0x20) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0xfe0d64ad1c6cb9f1, &(0x7f0000000680)={0x1000, {{0x2, 0x4e23, @multicast1=0xe0000001}}, {{0x2, 0x0, @broadcast=0xffffffff}}}, 0x108) ioctl$DRM_IOCTL_AGP_ENABLE(0xffffffffffffffff, 0x40086432, &(0x7f0000000100)) r2 = socket$inet6(0x10, 0x2, 0x0) sendmsg(r2, &(0x7f0000000080)={&(0x7f0000000240)=@nl=@kern={0x10}, 0x80, &(0x7f0000000040)=[{&(0x7f00000001c0)="5500000018007f04002d1cb2a4a280930a0600007da843cf19d0f869390009402f002100040000001900050000fc1700000000dc1338d54400009b84136ef75afb83de448daa7227c43a", 0x4a}], 0x1, &(0x7f00000000c0)}, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000940)=@broute={'broute\x00', 0x20, 0x1, 0x1e8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20001700], 0x0, &(0x7f0000001980), &(0x7f0000001700)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x13, 0x0, 0x0, 'vcan0\x00', 'ifb0\x00', 'syzkaller0\x00', 'vcan0\x00', @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], @link_local={0x1, 0x80, 0xc2}, [], 0x70, 0xf8, 0x128}, [@common=@dnat={'dnat\x00', 0x10, {{@dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, 0xffffffffffffffff}}}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x4, 'syz0\x00'}}}]}, @common=@NFQUEUE0={'NFQUEUE\x00', 0x8}}]}, {0x0, '\x00', 0x1, 0xffffbffffffffffe}]}, 0x260) setxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f00000007c0)=@known='security.ima\x00', &(0x7f0000000800)='IDLETIMER\x00', 0xa, 0x2) [ 174.831178] ? vmalloc_sync_all+0x30/0x30 [ 174.831188] ? _raw_spin_unlock_irq+0x27/0x70 [ 174.831197] ? finish_task_switch+0x1c1/0x7e0 [ 174.831206] ? syscall_return_slowpath+0x550/0x550 [ 174.831216] ? syscall_return_slowpath+0x2ac/0x550 [ 174.831225] ? prepare_exit_to_usermode+0x350/0x350 [ 174.831236] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 174.831247] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 174.831261] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 174.831268] RIP: 0033:0x454e79 2018/03/31 07:26:05 executing program 6: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00002e8fa8)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001000)="a23364fd", 0xfffffffffffffcee) io_setup(0x800, &(0x7f00002eeff8)=0x0) io_submit(r2, 0x1, &(0x7f00001f5ff8)=[&(0x7f000011e000)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000)="9d", 0x1}]) syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x604880) llistxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=""/128, 0x80) [ 174.831272] RSP: 002b:00007f2d4ca09c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 174.831282] RAX: ffffffffffffffda RBX: 00007f2d4ca0a6d4 RCX: 0000000000454e79 [ 174.831286] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000020000340 [ 174.831291] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 174.831296] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000013 [ 174.831301] R13: 00000000000003ea R14: 00000000006f7e90 R15: 000000000000000a [ 174.831397] cgroup: cgroup_addrm_files: failed to add cgroup.threads, err=-12 [ 174.857920] xt_nfacct: accounting object `syz1' does not exists [ 175.036499] FAULT_INJECTION: forcing a failure. [ 175.036499] name failslab, interval 1, probability 0, space 0, times 0 [ 175.047810] CPU: 1 PID: 13202 Comm: syz-executor7 Not tainted 4.16.0-rc7+ #372 [ 175.055167] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 175.064523] Call Trace: [ 175.067111] dump_stack+0x194/0x24d [ 175.070745] ? arch_local_irq_restore+0x53/0x53 [ 175.075425] should_fail+0x8c0/0xa40 [ 175.079142] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 175.084249] ? rb_first_postorder+0xa0/0xa0 [ 175.088569] ? __mutex_lock+0x16f/0x1a80 [ 175.092635] ? trace_event_raw_event_lock+0x340/0x340 [ 175.097830] ? find_held_lock+0x35/0x1d0 [ 175.101904] ? __lock_is_held+0xb6/0x140 [ 175.105975] ? check_same_owner+0x320/0x320 [ 175.110289] ? perf_trace_lock+0xd6/0x900 [ 175.114433] ? rcu_note_context_switch+0x710/0x710 [ 175.119368] should_failslab+0xec/0x120 [ 175.123340] __kmalloc_track_caller+0x5f/0x760 [ 175.127922] ? idr_alloc_cyclic+0x1d6/0x320 [ 175.132236] ? trace_hardirqs_off+0x10/0x10 [ 175.136547] ? kstrdup_const+0x39/0x50 [ 175.140430] ? __mutex_unlock_slowpath+0xe9/0xac0 [ 175.145276] kstrdup+0x39/0x70 [ 175.148466] kstrdup_const+0x39/0x50 [ 175.152177] __kernfs_new_node+0xa2/0x570 [ 175.156319] ? kernfs_dop_revalidate+0x380/0x380 [ 175.161068] ? kasan_check_read+0x11/0x20 [ 175.165218] ? read_word_at_a_time+0x12/0x20 [ 175.169626] ? strscpy+0x186/0x500 [ 175.172878] xt_nfacct: accounting object `syz1' does not exists [ 175.173170] kernfs_new_node+0x80/0xe0 [ 175.173187] __kernfs_create_file+0x4b/0x320 [ 175.187506] cgroup_addrm_files+0x3c5/0xa70 [ 175.191834] ? cgroup_file_write+0x710/0x710 [ 175.196250] ? __getnstimeofday64+0x317/0x470 [ 175.200751] ? getrawmonotonic64+0x460/0x460 [ 175.205162] ? kernfs_active+0x92/0x160 [ 175.209136] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 175.214062] ? cgroup_kn_set_ugid+0x2c7/0x370 [ 175.218545] ? cgroup_file_name+0x1d0/0x1d0 [ 175.222887] css_populate_dir+0x340/0x420 [ 175.227022] cgroup_mkdir+0x553/0xfc0 [ 175.230817] ? __lock_is_held+0xb6/0x140 [ 175.234871] ? cgroup_destroy_locked+0x750/0x750 [ 175.239602] ? rcu_read_lock_sched_held+0x108/0x120 [ 175.244595] ? kmem_cache_free+0x258/0x2a0 [ 175.248808] ? set_nlink+0xc1/0x160 [ 175.252411] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 175.257314] ? generic_permission+0x105/0x3c0 [ 175.261787] ? cgroup_destroy_locked+0x750/0x750 [ 175.266521] kernfs_iop_mkdir+0x153/0x1e0 [ 175.270651] vfs_mkdir+0x390/0x600 [ 175.274171] SyS_mkdir+0x220/0x2a0 [ 175.277701] ? SyS_mkdirat+0x2b0/0x2b0 [ 175.281578] ? do_syscall_64+0xb7/0x940 [ 175.285537] ? SyS_mkdirat+0x2b0/0x2b0 [ 175.289413] do_syscall_64+0x281/0x940 [ 175.293285] ? vmalloc_sync_all+0x30/0x30 [ 175.297411] ? _raw_spin_unlock_irq+0x27/0x70 [ 175.301882] ? finish_task_switch+0x1c1/0x7e0 [ 175.306355] ? syscall_return_slowpath+0x550/0x550 [ 175.311261] ? syscall_return_slowpath+0x2ac/0x550 [ 175.316182] ? prepare_exit_to_usermode+0x350/0x350 [ 175.321181] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 175.326523] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 175.331347] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 175.336510] RIP: 0033:0x454e79 [ 175.339673] RSP: 002b:00007f49041e4c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 175.347357] RAX: ffffffffffffffda RBX: 00007f49041e56d4 RCX: 0000000000454e79 [ 175.354611] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000020000340 [ 175.361862] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 175.369111] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000013 [ 175.376358] R13: 00000000000003ea R14: 00000000006f7e90 R15: 000000000000000a [ 175.383860] cgroup: cgroup_addrm_files: failed to add cgroup.threads, err=-12 [ 175.393522] FAULT_INJECTION: forcing a failure. [ 175.393522] name failslab, interval 1, probability 0, space 0, times 0 [ 175.404780] CPU: 1 PID: 13226 Comm: syz-executor1 Not tainted 4.16.0-rc7+ #372 [ 175.412142] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 175.421486] Call Trace: [ 175.424064] dump_stack+0x194/0x24d [ 175.427688] ? arch_local_irq_restore+0x53/0x53 [ 175.432348] should_fail+0x8c0/0xa40 [ 175.436048] ? kstrdup+0x39/0x70 [ 175.439402] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 175.444481] ? cgroup_mkdir+0x553/0xfc0 [ 175.448431] ? vfs_mkdir+0x390/0x600 [ 175.452127] ? SyS_mkdir+0x220/0x2a0 [ 175.455828] ? do_syscall_64+0x281/0x940 [ 175.459877] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 175.465230] ? find_held_lock+0x35/0x1d0 [ 175.469275] ? find_held_lock+0x35/0x1d0 [ 175.473324] ? __lock_is_held+0xb6/0x140 [ 175.477370] ? check_same_owner+0x320/0x320 [ 175.481674] ? rcu_note_context_switch+0x710/0x710 [ 175.486583] ? rcu_read_lock_sched_held+0x108/0x120 [ 175.491582] should_failslab+0xec/0x120 [ 175.495534] kmem_cache_alloc+0x47/0x760 [ 175.499571] ? memcpy+0x45/0x50 [ 175.502838] ? kstrdup+0x59/0x70 [ 175.506186] __kernfs_new_node+0xe2/0x570 [ 175.510314] ? kernfs_dop_revalidate+0x380/0x380 [ 175.515060] ? kasan_check_read+0x11/0x20 [ 175.519201] ? read_word_at_a_time+0x12/0x20 [ 175.523598] ? strscpy+0x186/0x500 [ 175.527123] kernfs_new_node+0x80/0xe0 [ 175.531000] __kernfs_create_file+0x4b/0x320 [ 175.535410] cgroup_addrm_files+0x3c5/0xa70 [ 175.539726] ? cgroup_file_write+0x710/0x710 [ 175.544129] ? __getnstimeofday64+0x317/0x470 [ 175.548624] ? getrawmonotonic64+0x460/0x460 [ 175.553029] ? kernfs_active+0x92/0x160 [ 175.556998] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 175.562001] ? cgroup_kn_set_ugid+0x2c7/0x370 [ 175.566480] ? cgroup_file_name+0x1d0/0x1d0 [ 175.570782] css_populate_dir+0x340/0x420 [ 175.574907] cgroup_mkdir+0x553/0xfc0 [ 175.578684] ? __lock_is_held+0xb6/0x140 [ 175.582727] ? cgroup_destroy_locked+0x750/0x750 [ 175.587473] ? rcu_read_lock_sched_held+0x108/0x120 [ 175.592467] ? kmem_cache_free+0x258/0x2a0 [ 175.596686] ? set_nlink+0xc1/0x160 [ 175.600289] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 175.605195] ? generic_permission+0x105/0x3c0 [ 175.609671] ? cgroup_destroy_locked+0x750/0x750 [ 175.614404] kernfs_iop_mkdir+0x153/0x1e0 [ 175.618531] vfs_mkdir+0x390/0x600 [ 175.622052] SyS_mkdir+0x220/0x2a0 [ 175.625579] ? SyS_mkdirat+0x2b0/0x2b0 [ 175.629446] ? do_syscall_64+0xb7/0x940 [ 175.633397] ? SyS_mkdirat+0x2b0/0x2b0 [ 175.637262] do_syscall_64+0x281/0x940 [ 175.641129] ? vmalloc_sync_all+0x30/0x30 [ 175.645262] ? _raw_spin_unlock_irq+0x27/0x70 [ 175.649734] ? finish_task_switch+0x1c1/0x7e0 [ 175.654210] ? syscall_return_slowpath+0x550/0x550 [ 175.659117] ? syscall_return_slowpath+0x2ac/0x550 [ 175.664032] ? prepare_exit_to_usermode+0x350/0x350 [ 175.669046] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 175.674406] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 175.679236] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 175.684405] RIP: 0033:0x454e79 [ 175.687575] RSP: 002b:00007f2d4ca09c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 175.695265] RAX: ffffffffffffffda RBX: 00007f2d4ca0a6d4 RCX: 0000000000454e79 [ 175.702515] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000020000340 [ 175.709768] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 175.717029] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000013 [ 175.724398] R13: 00000000000003ea R14: 00000000006f7e90 R15: 000000000000000b [ 175.731862] cgroup: cgroup_addrm_files: failed to add cgroup.threads, err=-12 2018/03/31 07:26:06 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000040), 0x0) ioctl$DRM_IOCTL_INFO_BUFS(0xffffffffffffffff, 0xc0106418, &(0x7f0000000140)={0x80, 0x0, 0xffffffffffffffd7}) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000080), 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f000034d000), 0x236, 0x80000) unshare(0x400) signalfd(r0, &(0x7f0000000000), 0x8) 2018/03/31 07:26:06 executing program 2: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/enforce\x00', 0x80, 0x0) perf_event_open(&(0x7f0000b5a000)={0x4000000002, 0x70, 0x1e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x6, 0x0) perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x6, 0x200000) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000bc0)={0x0, 0xed69, 0x30, 0x101}, &(0x7f0000000c00)=0x18) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffff9c, 0x84, 0x6f, &(0x7f0000000100)={r1, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e22, 0x6, @remote={0xfe, 0x80, [], 0xbb}, 0x26}, @in6={0xa, 0x4e23, 0x10000, @empty, 0xfffffffffffff131}, @in6={0xa, 0x4e22, 0x8, @local={0xfe, 0x80, [], 0xaa}, 0x8}, @in={0x2, 0x4e23, @multicast1=0xe0000001}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000c40)=ANY=[@ANYRES32=r2, @ANYBLOB="790000001ac0c57feafa701dffc605a99acf3adb5813c1ec1435ca028421bdfb2d584f7595152b1100000027020ebfca87e28286801243f0ffcebc9aad725742a74bdf6b2c267550f05e864875b902fff302293de15d050b8e3500040000fd1df9a050cc3bf386fd5050891bcde12f3f2d61573a23e81a554e18eaa9e51767a663f9f9f1b5bddd67b7934ebb875d2ef81b585ccf98b0d233358d195a6830a4efaa98534ad94ec0da480e95e01d5db1c1061a4c435a2af673b5937cee37be1b92831e00c39f68a9a124682c7c63d3a1a3fd5bac81ebdcafc5edc4905341956c87"], &(0x7f0000000180)=0x2) r3 = semget$private(0x0, 0x1, 0x80) sendmsg$inet_sctp(r0, &(0x7f0000000b00)={&(0x7f00000009c0)=@in6={0xa, 0x4e20, 0x2ea, @local={0xfe, 0x80, [], 0xaa}}, 0x1c, &(0x7f0000000a40)=[{&(0x7f0000000d40)="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", 0x1000}, {&(0x7f0000000a00)="3a0817bd1b4b096435f8f78b", 0xc}], 0x2, &(0x7f0000001d40)=[@init={0x18, 0x84, 0x0, {0x8, 0x400, 0x4, 0xfffffffffffff000}}, @init={0x18, 0x84, 0x0, {0x0, 0x9, 0x8, 0x5}}, @init={0x18, 0x84, 0x0, {0xcd39, 0x100000001, 0x100000001, 0x2}}, @sndinfo={0x20, 0x84, 0x2, {0x3, 0x5, 0x9, 0x4, r1}}], 0xc0, 0x800}, 0x880) semctl$SEM_STAT(r3, 0x2, 0x12, &(0x7f0000000940)=""/78) r4 = socket$inet(0x2, 0x6, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, &(0x7f00000008c0)=@broute={'broute\x00', 0x20, 0x2, 0x3e8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000280], 0x0, &(0x7f0000000240), &(0x7f0000000280)=ANY=[@ANYBLOB="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"]}, 0x460) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f0000000140)={0x2, 0xa2b, 0x4, 0x7, 0x2, 0x20, 0x10000, 0x8a82}, &(0x7f0000000180)=0x20) r5 = socket(0x1d, 0xb, 0x0) setsockopt$inet_group_source_req(r5, 0x0, 0xfe0d64ad1c6cb9f1, &(0x7f0000000680)={0x1000, {{0x2, 0x4e23, @multicast1=0xe0000001}}, {{0x2, 0x4e22, @broadcast=0xffffffff}}}, 0x108) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0) r6 = syz_open_dev$loop(&(0x7f0000000b80)='/dev/loop#\x00', 0x0, 0x4006) r7 = memfd_create(&(0x7f0000000000)="74086e750000000000000000008c00", 0x0) pwritev(r7, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000640)={0x0, @in6={{0xa, 0x4e23, 0x81, @mcast2={0xff, 0x2, [], 0x1}, 0x7fff}}, 0x2, 0x4, 0xf8, 0x1, 0x6}, &(0x7f0000000700)=0x98) ioctl$KVM_ASSIGN_SET_INTX_MASK(r0, 0x4040aea4, &(0x7f0000000200)={0x3f, 0x7fffffff, 0x8, 0x1, 0x5}) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r7, 0x84, 0x6, &(0x7f00000007c0)={0x0, @in6={{0xa, 0x4e23, 0x7, @dev={0xfe, 0x80, [], 0xe}, 0x3}}}, &(0x7f0000000880)=0x84) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f0000000280)=@in={0x2, 0x4e20}, 0x10, &(0x7f00000003c0)=[{&(0x7f00000002c0)="b25b2002e7d8bc055c7d9ed742f2ca865f150419606e27d187b4ce0f2f81d8a0ab0d18a71f265b68c86f9c82600911dcc4698a4baebfb56adf90bec3", 0x3c}], 0x1, &(0x7f0000000940), 0x0, 0x24000001}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={"0100", @ifru_mtu=0x1}) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r7) sendfile(r6, r6, &(0x7f0000000a80), 0x102000004) 2018/03/31 07:26:06 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x10000, 0x0) msync(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x6) r1 = epoll_create(0x4) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000f9e000)) r2 = syz_open_pts(r0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000040)) r3 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000100)="daea114f8757b38abccaccbe7355d401ee61073a8d6d8dcc071882c9232dfd0525dee2f7fcb9e9e68b728cb8a3b4badf43d1796259f8db2a614dcbef723d603031e50424cabb45cdd905efaefa46925a1a198aa2c125d8d9ec322cf640704ec65efd0b7679f52b508f4949ed9b70d622c67f79bdf60c253334361ce67c8e96b5c754362a71994df2573282ab4eaf4e150aee025ddbb1a0343fed1f595e8dd5df7946c7d8d51cb8c61f0b368817746aa6718d5158ac15c9bfebb781401f9de7b8383170b073cb7e5e2dbeace6fa2ec5a97de1ae20f801", 0xd6, 0xfffffffffffffff8) r4 = request_key(&(0x7f0000000200)='cifs.spnego\x00', &(0x7f0000000240)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000280)='mime_typeselinux{,/vboxnet1{\'vmnet0)vboxnet1wlan1\x00', 0xfffffffffffffffa) keyctl$negate(0xd, r3, 0x7, r4) r5 = dup2(r0, r0) r6 = dup2(r2, r5) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r6, 0x84, 0x1e, &(0x7f0000000300)=0x2, 0x4) epoll_wait(r1, &(0x7f0000000080)=[{}], 0x1, 0x0) 2018/03/31 07:26:06 executing program 7 (fault-call:7 fault-nth:11): mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) open(&(0x7f00000000c0)='./file0\x00', 0xa0441, 0x80) syz_mount_image$msdos(&(0x7f0000000140)='msdos\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x1, &(0x7f0000000100)=[{&(0x7f0000000480)="9196b107dc9e5c731d56d84afae6a7bf24", 0x11, 0x1f}], 0x0, &(0x7f0000000000)=ANY=[]) mkdir(&(0x7f0000000180)='./file0//ile0\x00', 0x112) rmdir(&(0x7f0000000080)='./file0//ile0\x00') mkdir(&(0x7f0000000340)='./file0//ile0\x00', 0x1) r0 = semget$private(0x0, 0x4, 0x21) semctl$GETPID(r0, 0x1, 0xb, &(0x7f0000000200)=""/154) 2018/03/31 07:26:06 executing program 6: r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3ae, 0xc0240) getsockopt$inet6_udp_int(r0, 0x11, 0x65, &(0x7f0000000040), &(0x7f0000000080)=0x4) connect$inet6(0xffffffffffffffff, &(0x7f000000cfe4)={0xa}, 0xffffffffffffff73) shutdown(0xffffffffffffffff, 0x0) 2018/03/31 07:26:06 executing program 5: r0 = socket$inet6(0xa, 0x3, 0xe4) r1 = syz_open_pts(0xffffffffffffff9c, 0x40000) ioctl$VT_GETSTATE(r1, 0x5603, &(0x7f0000000040)={0x4, 0xb6b7, 0x9}) bind$inet6(r0, &(0x7f0000001980)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0x7}, 0x1c) bind$inet6(r0, &(0x7f0000002600)={0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, 0x19) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) 2018/03/31 07:26:06 executing program 4: perf_event_open(&(0x7f000000a000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$bt_cmtp(0x1f, 0x3, 0x5) mount(&(0x7f00008deff8)='./file0\x00', &(0x7f0000343ff8)='./file0\x00', &(0x7f00007fc000)='nfs\x00', 0x0, &(0x7f000000a000)) 2018/03/31 07:26:06 executing program 1 (fault-call:6 fault-nth:12): mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) open(&(0x7f00000000c0)='./file0\x00', 0xa0441, 0x80) syz_mount_image$msdos(&(0x7f0000000140)='msdos\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x1, &(0x7f0000000100)=[{&(0x7f0000000480)="9196b107dc9e5c731d56d84afae6a7bf24", 0x11, 0x1f}], 0x0, &(0x7f0000000000)=ANY=[]) rmdir(&(0x7f0000000080)='./file0//ile0\x00') mkdir(&(0x7f0000000340)='./file0//ile0\x00', 0x1) r0 = semget$private(0x0, 0x4, 0x21) semctl$GETPID(r0, 0x1, 0xb, &(0x7f0000000200)=""/154) 2018/03/31 07:26:06 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000000040)={0x2, 0x9, 0x2, 0x7fffffff}) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}}, 0x0, 0x2}, &(0x7f0000000280)=0x90) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu\x00', 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000000)='cpuset.cpus\x00', 0x2, 0x0) write$cgroup_int(r4, &(0x7f0000000040)={[0x2c, 0x31]}, 0x2) getsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000b80)=@assoc_value={r2, 0x1}, &(0x7f0000000540)=0xfffffffffffffd89) r5 = accept4$nfc_llcp(r1, &(0x7f0000000340), &(0x7f00000003c0)=0x60, 0x0) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000400)=0x2, 0x4) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000440)=0xc, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000480)={0x2, 0x7, 0x6, 0x3, 0x8001}, 0x14) setsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f0000000500)=0x2, 0x2) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000a40)=ANY=[@ANYBLOB="ac1414167f0000010000ac14140aac1414bbe0005ad3b87f448ac615021adf0001ac1414160000003a1267bf567ec00542fc8a00e0000001ac1414aa355dda1b61fdce4fb12af79f0518452196c09621dfb0bf823213910bcf3af86afaa6950f9952e43f876b819397290f92900338a9b5d69f465c884aaa323f8adefc7f257fa39c817b1b1d2a423d91a9b7a196d4b1cc995f0df0f297fd4b1fdd1457df58873df447cf1f"], 0x1) timer_create(0x2, &(0x7f0000000580)={0x0, 0x2b, 0x0, @tid=0xffffffffffffffff}, &(0x7f00000005c0)=0x0) getsockopt$packet_int(r1, 0x107, 0x0, &(0x7f0000000100), &(0x7f0000000140)=0x4) ioctl$sock_inet_SIOCGIFBRDADDR(r1, 0x8919, &(0x7f00000000c0)={'bcsh0\x00', {0x2, 0x0, @broadcast=0xffffffff}}) timer_delete(r6) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000600)={0x0, @local, @remote}, &(0x7f0000000640)=0xc) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000680)={@empty, @mcast1={0xff, 0x1, [], 0x1}, @dev={0xfe, 0x80, [], 0xa}, 0x3, 0x200, 0xfff, 0x0, 0x80000001, 0x3000000, r7}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(0xffffffffffffffff, 0x40bc5311, &(0x7f0000000700)={0x4, 0x5, "636c69656e743000ebffffff00000000000000000a7200", 0x1, "2f581d07567560b4", "8e5444662121abe28b077c7056d0b76464f80d9bf6cd3252b5f27c85c993fa9a", 0x0, 0x82}) socket$packet(0x11, 0x3, 0x300) setsockopt$inet6_MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f00000007c0)={{0xa, 0x4e22, 0x4, @loopback={0x0, 0x1}, 0x3}, {0xa, 0x4e24, 0x16a8, @remote={0xfe, 0x80, [], 0xbb}, 0x200}, 0xfffffffffffffb49, [0xff, 0x4, 0x7, 0x400, 0x4, 0x7, 0x1]}, 0x5c) timer_create(0x7, &(0x7f0000000940)={0x0, 0x8, 0x0, @thr={&(0x7f0000000840)="6037b42ca0c78c0f63bb3ac2bc6de9192ca6e98e2017ee54713572957537b4f56a59706976c57a76c8e6e2a7cee5c4363ab9a8b3c22815502f672a38ea183ae7b4cdb83e3180251ab5ff38b9b6", &(0x7f00000008c0)="8ad713427ff56928acc04d8685a3f863a747121e985b1f7050af5982092fd26b94f5d06e6d8f3716750f33473997d1f12bc7b60f395dec1c99a0e61f134fd7d050e9a65dd8054c8b"}}, &(0x7f0000000980)) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000180), &(0x7f00000004c0)=0x4) ioctl$sock_inet_SIOCGIFNETMASK(r5, 0x891b, &(0x7f0000000a00)={'\x00', {0x2, 0x4e21, @loopback=0x7f000001}}) ioctl$KVM_SET_NR_MMU_PAGES(0xffffffffffffffff, 0xae44, 0x8) clock_gettime(0x0, &(0x7f0000000b00)) [ 175.943376] FAULT_INJECTION: forcing a failure. [ 175.943376] name failslab, interval 1, probability 0, space 0, times 0 [ 175.954666] CPU: 0 PID: 13249 Comm: syz-executor1 Not tainted 4.16.0-rc7+ #372 [ 175.962026] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 175.971383] Call Trace: [ 175.973978] dump_stack+0x194/0x24d [ 175.977611] ? arch_local_irq_restore+0x53/0x53 [ 175.982299] should_fail+0x8c0/0xa40 [ 175.986012] ? kstrdup+0x39/0x70 2018/03/31 07:26:06 executing program 5: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500)='/dev/vcs\x00', 0x14000, 0x0) ioctl$VT_OPENQRY(r0, 0x5600, &(0x7f0000000540)) perf_event_open(&(0x7f0000271000)={0x0, 0x70, 0x49, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600)='/dev/loop-control\x00', 0x0, 0x0) timer_create(0x0, &(0x7f0000000040)={0x0, 0xb, 0x1}, &(0x7f00000001c0)=0x0) timer_gettime(r2, &(0x7f0000000200)) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r3 = socket$inet(0x2, 0x5, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) r4 = syz_open_procfs(0x0, &(0x7f0000001f00)="2f657865000000000000d50fef7afaf807e3c2f98d0d02812e3ca05fc31e623a2a051fc20fa5a02d84267a0067ac78b8ed1ee48d8097f99d3188a59818771e21974fc3d02efdabd0512782c2474e0a8c17538091e53bdc54aa574b0615a98c9046beb56b8bb5744fcc54b400dec854d2da9efbbdf5e4c75fae864cc0fce7514c133f17a1b93b735d3d5b3e10b683128034ec6e19ed879a810a401f95b9860b41b3b8683ac1b6f21c21769cbd07a9b0f2ab9711ecaaf67a7a74beef377c60b435f3eee826d174ca7516e89abcebd589104d80402accdc8d7ae101c57bbc26c33df519152ef8daf388b20fbc8c55cdb7d471a822531e7d7b88bbb269d72051d9f92d569935ce2b387f9e30fabf336e53827a8bdd4f7c3fba515ade98e68d965b0a52ec80d74eebb4c2904be489d2d473dab9f302545f6fd2973979092a404bdee5aad5d3eb20cb69f2e8c01eab7fbf98463fcdeb034f041dbd1cd779e40828d9db22f3e839a3f58a0e6ac2312fb1f95ffb6e97c6cc55353b7301984f08f9ca247456b5628692d5e443455794a27c4b194226b60a3b19bf09a2595e1d5aa5eb62934533af467d7de9c30c5f7b4db1f048c64587b71b2be65c78") fgetxattr(r4, &(0x7f0000000240)=@known='user.syz\x00', &(0x7f00000002c0)=""/159, 0xffbb) fgetxattr(r4, &(0x7f0000000080)=@known='system.posix_acl_access\x00', &(0x7f00000000c0)=""/249, 0xf9) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) r5 = dup3(0xffffffffffffffff, r1, 0x0) setsockopt$inet_int(r5, 0x0, 0x31, &(0x7f0000000380)=0x7, 0x4) getsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000000240), &(0x7f00000004c0)=0x4) openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cuse\x00', 0x101000, 0x0) shmget(0x1, 0x3000, 0x208, &(0x7f0000ffd000/0x3000)=nil) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r6) mkdir(&(0x7f0000efa000)='./file0\x00', 0x0) rmdir(&(0x7f00000003c0)='./file0\x00') getsockopt$bt_BT_FLUSHABLE(r5, 0x112, 0x8, &(0x7f00000005c0)=0x9, &(0x7f0000000640)=0x4) r7 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) sendmsg$nl_route(r5, &(0x7f0000000580)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x28000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)=@getnetconf={0x14, 0x52, 0x20, 0x70bd25, 0x25dfdbfe, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, &(0x7f0000000000)=@pic={0x1, 0x0, 0x0, 0x256, 0x73, 0x3, 0xffffffff, 0x4, 0x8000, 0x0, 0x2, 0x0, 0x3, 0x77}) ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, &(0x7f0000002ff0)=@ioapic={0x2, 0x0, 0x0, 0x0, 0x0, [{0xfffffffffffffffb}]}) ioctl$KVM_IRQ_LINE(r7, 0x4008ae61, &(0x7f0000000280)={0x0, 0x3}) [ 175.989384] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 175.994490] ? cgroup_mkdir+0x553/0xfc0 [ 175.998459] ? vfs_mkdir+0x390/0x600 [ 176.002171] ? SyS_mkdir+0x220/0x2a0 [ 176.005881] ? do_syscall_64+0x281/0x940 [ 176.009942] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 176.015330] ? find_held_lock+0x35/0x1d0 [ 176.019396] ? find_held_lock+0x35/0x1d0 [ 176.023459] ? __lock_is_held+0xb6/0x140 [ 176.027526] ? check_same_owner+0x320/0x320 [ 176.031851] ? rcu_note_context_switch+0x710/0x710 [ 176.036778] ? rcu_read_lock_sched_held+0x108/0x120 2018/03/31 07:26:06 executing program 4: r0 = semget$private(0x0, 0x6, 0x0) unshare(0x40000) semtimedop(r0, &(0x7f00000a8000)=[{0x3, 0xfffffffffffffff9}], 0x1, &(0x7f0000efe000)={0x2000}) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x20) ioctl$EVIOCSABS0(r1, 0x401845c0, &(0x7f0000000040)={0xfffffffffffffffc, 0x0, 0x4, 0x4b9, 0x8, 0x9}) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000003000)=[0x0, 0x0, 0x0, 0x7fff]) ioctl$KVM_GET_XSAVE(r1, 0x9000aea4, &(0x7f0000000240)) semop(r0, &(0x7f0000000200)=[{0x4, 0x5, 0x1800}, {0x4, 0xffffffff}], 0x2) unshare(0x40600) 2018/03/31 07:26:06 executing program 3: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f000000aff8)='./file0\x00', &(0x7f0000cd3000)='ramfs\x00', 0x1, &(0x7f000056a0e2)) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='devtmpfs\x00', 0x85030, &(0x7f00000002c0)="e9ef57c80aaf") r0 = syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x10001, 0x202) clock_gettime(0x0, &(0x7f0000000600)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000640)={0x0, 0x0}) futimesat(r0, &(0x7f00000005c0)='./file0/file1\x00', &(0x7f0000000680)={{r1, r2/1000+10000}, {r3, r4/1000+30000}}) readlinkat(r0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)=""/165, 0xa5) getsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000400), &(0x7f0000000440)=0x4) syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x1, 0x200000) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000140)={0x0, 0x3, 0x20}, &(0x7f0000000300)=0xc) setsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f00000006c0)=ANY=[@ANYRES32=r5, @ANYBLOB="0100f7ffffff515a9d407b3864e76927b9f9111e3d8c893d111df6036112e78592ba7d025b8c24353e11ad06e34fe40e1d0f9d04739b1d13685d24707030d4c5e52e1f0e4697df8b8cf1b453ee6bb9d3a371f1884e67a5533ed4c1b27a726f46c510b005ba68858fdc78f8edceb26c0a54ab33d1bd52886e8aaf68d7401ae10bed6cbf8591dcb4c259bbf99126283af31310c30a08000000000000005720e3a6fefde4eee3813df036ed2b9e8af0d218348fef8ff270e2f209bce82400"], 0x2) syz_fuseblk_mount(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000040)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x8b7, 0x0) mount(&(0x7f00000003c0)='./file0/file0\x00', &(0x7f0000000540)='./file0/file1\x00', &(0x7f0000000580)='devpts\x00', 0x22001, 0x0) [ 176.042329] should_failslab+0xec/0x120 [ 176.046309] kmem_cache_alloc+0x47/0x760 [ 176.050368] ? memcpy+0x45/0x50 [ 176.053650] ? kstrdup+0x59/0x70 [ 176.057021] __kernfs_new_node+0xe2/0x570 [ 176.061166] ? kernfs_dop_revalidate+0x380/0x380 [ 176.065923] ? kasan_check_read+0x11/0x20 [ 176.070073] ? read_word_at_a_time+0x12/0x20 [ 176.074482] ? strscpy+0x186/0x500 [ 176.078035] kernfs_new_node+0x80/0xe0 [ 176.081930] __kernfs_create_file+0x4b/0x320 [ 176.086342] cgroup_addrm_files+0x3c5/0xa70 [ 176.090672] ? cgroup_file_write+0x710/0x710 [ 176.095080] ? __getnstimeofday64+0x317/0x470 [ 176.099575] ? getrawmonotonic64+0x460/0x460 [ 176.103992] ? kernfs_active+0x92/0x160 [ 176.107970] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 176.112903] ? cgroup_kn_set_ugid+0x2c7/0x370 [ 176.117405] ? cgroup_file_name+0x1d0/0x1d0 [ 176.121732] css_populate_dir+0x340/0x420 [ 176.125877] cgroup_mkdir+0x553/0xfc0 [ 176.129671] ? __lock_is_held+0xb6/0x140 [ 176.133734] ? cgroup_destroy_locked+0x750/0x750 [ 176.138497] ? rcu_read_lock_sched_held+0x108/0x120 2018/03/31 07:26:06 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000ff7)='/dev/sg#\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0x2201, &(0x7f0000000000)) ioctl$KVM_X86_SETUP_MCE(r0, 0x4008ae9c, &(0x7f0000000080)={0x6, 0x4}) getsockopt(r1, 0x2, 0x1, &(0x7f00000000c0)=""/43, &(0x7f0000000100)=0x2b) ioctl$TCGETA(r0, 0x5405, &(0x7f0000000040)) [ 176.143513] ? kmem_cache_free+0x258/0x2a0 [ 176.147764] ? set_nlink+0xc1/0x160 [ 176.151385] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 176.156310] ? generic_permission+0x105/0x3c0 [ 176.160808] ? cgroup_destroy_locked+0x750/0x750 [ 176.165562] kernfs_iop_mkdir+0x153/0x1e0 [ 176.169706] vfs_mkdir+0x390/0x600 [ 176.173245] SyS_mkdir+0x220/0x2a0 [ 176.176786] ? SyS_mkdirat+0x2b0/0x2b0 [ 176.180670] ? do_syscall_64+0xb7/0x940 [ 176.184641] ? SyS_mkdirat+0x2b0/0x2b0 [ 176.188526] do_syscall_64+0x281/0x940 [ 176.192411] ? vmalloc_sync_all+0x30/0x30 [ 176.196561] ? _raw_spin_unlock_irq+0x27/0x70 [ 176.201057] ? finish_task_switch+0x1c1/0x7e0 [ 176.205553] ? syscall_return_slowpath+0x550/0x550 [ 176.210481] ? syscall_return_slowpath+0x2ac/0x550 [ 176.215414] ? prepare_exit_to_usermode+0x350/0x350 [ 176.220428] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 176.225786] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 176.230636] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 176.235821] RIP: 0033:0x454e79 2018/03/31 07:26:06 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast2=0xe0000002, @loopback=0x7f000001}, 0xc) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000080), &(0x7f00000000c0)=0x4) ioctl$sock_inet_SIOCGIFDSTADDR(r1, 0x8917, &(0x7f0000000040)={'bcsh0\x00', {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1a}}}) setsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000380)=@int=0x3, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'bcsh0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r1, 0x890c, &(0x7f0000000180)={@dev={0xfe, 0x80, [], 0x13}, @loopback={0x0, 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x6, 0x0, 0x42e, 0x100, 0x9, 0x80000000, r2}) r3 = socket$inet(0x2, 0xa, 0x5) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000000600)=[@in={0x2, 0x4e21, @multicast1=0xe0000001}, @in6={0xa, 0x4e20, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x200}, @in={0x2, 0x4e22, @multicast2=0xe0000002}, @in6={0xa, 0x4e21, 0x1ff, @local={0xfe, 0x80, [], 0xaa}, 0x84}, @in6={0xa, 0x4e20, 0x4, @local={0xfe, 0x80, [], 0xaa}}], 0x74) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000200)={0x0, 0x8}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000300)={r4, 0x70, &(0x7f0000000280)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, @in={0x2, 0x4e24, @loopback=0x7f000001}, @in={0x2, 0x4e20, @remote={0xac, 0x14, 0x14, 0xbb}}, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1a}}, @in={0x2, 0x4e24, @remote={0xac, 0x14, 0x14, 0xbb}}, @in={0x2, 0x4e24, @rand_addr=0x3ff}, @in={0x2, 0x4e24, @multicast2=0xe0000002}]}, &(0x7f0000000340)=0x10) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, &(0x7f0000000800)={r5, @in={{0x2, 0x4e20, @rand_addr=0x8}}}, 0xd7) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) r7 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/hwrng\x00', 0x280181, 0x0) ioctl$sock_ipx_SIOCAIPXITFCRT(r7, 0x89e0, &(0x7f0000000700)) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f00000003c0)={'lo\x00', 0x4100}) ioctl$sock_inet_SIOCGIFNETMASK(r1, 0x891b, &(0x7f0000000100)={'nr0\x00', {0x2, 0x4e24, @loopback=0x7f000001}}) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f00000008c0)=ANY=[@ANYBLOB="e0e67d129bc66f91a7ca48449e9a71d55d5f8367ae0a19"], 0x1) pread64(r0, &(0x7f0000000340)=""/181, 0xb5, 0x62) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f00000007c0)=ANY=[@ANYBLOB="34fd916cc8554eb775c97caf97d6e00000027f1faa28680000000100000008000000"], 0x1) getsockopt$EBT_SO_GET_INIT_ENTRIES(r0, 0x0, 0x83, &(0x7f00000009c0)={"6e61740900000000000000000000000000000000040004000000000000000005", 0x0, 0x3, 0xc4, [], 0x19a, &(0x7f0000000040)=[{}, {}, {}, {}], &(0x7f0000000080)=""/196}, &(0x7f0000000980)=0xe) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r8, 0x0, 0x27, &(0x7f00003fdff5)={@multicast2=0xe0000002, @loopback=0x7f000001, @rand_addr}, 0xc) ioctl$sock_SIOCSIFBR(r6, 0x8941, &(0x7f0000000780)=@add_del={0x2, &(0x7f0000000740)='ip6_vti0\x00', 0x800}) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000400)=0x7, 0x4) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000480)={0x0, @in={{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xd}}}, 0xf80866d, 0x5}, &(0x7f0000000540)=0x90) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffff9c, 0x84, 0x18, &(0x7f0000000440)={r9, 0x400000000004}, &(0x7f00000005c0)=0xffffffffffffffc3) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f00000002c0)={r10, 0x10001, 0xc9e9}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000580)={r11, 0x1}, &(0x7f0000000680)=0x8) 2018/03/31 07:26:06 executing program 0: setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000002000)={{0xa, 0x4e20, 0x0, @empty, 0xfd4}, {0xa, 0x4e20, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, 0x5c) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rfkill\x00', 0x2000, 0x0) accept$packet(0xffffffffffffff9c, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000000180)=0x14) bpf$PROG_LOAD(0x5, &(0x7f0000f82fb8)={0x1, 0x5, &(0x7f0000000100)=@raw=[@alu={0x7, 0x2, 0xd, 0x6, 0xf, 0x38, 0xfffffffffffffffc}, @generic={0xf33f, 0x1f, 0x81, 0x64}, @alu={0x7, 0x302f, 0xf, 0x9, 0xa, 0xfffffff5, 0x10}, @map={0x18, 0x8, 0x1, 0x0, r0}], &(0x7f00000001c0)='syzkaller\x00', 0x3, 0xc3, &(0x7f0000f84000)=""/195, 0x4, 0x0, [], r1}, 0x46) r2 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x0, 0x0) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r2, 0x29, 0xd2, &(0x7f0000000040)={{0xa, 0x4e22, 0x3, @empty, 0x7fffffff}, {0xa, 0x4e24, 0x736973ac, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, 0x1}, 0xfffffffffffffffa, [0xeb37, 0x40, 0x8, 0x4, 0x1ff, 0x7fffffff, 0x9, 0x40]}, 0x5c) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@remote, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@rand_addr}}, &(0x7f0000000300)=0xe8) lstat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r0, r3, r4) 2018/03/31 07:26:07 executing program 3: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x100, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000040)={0x80000000, 0x5, 0x3, 'queue0\x00', 0x10000}) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000100)={@dev={0xac, 0x14, 0x14, 0xc}, @multicast2=0xe0000002, 0x1, 0x6, [@loopback=0x7f000001, @empty, @loopback=0x7f000001, @broadcast=0xffffffff, @dev={0xac, 0x14, 0x14, 0x13}, @remote={0xac, 0x14, 0x14, 0xbb}]}, 0x28) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000140)={0x1, 0x3e7c, 0x7, 'queue1\x00', 0xa33e}) sysinfo(&(0x7f0000000200)=""/27) fcntl$setpipe(r0, 0x407, 0x10000) flock(r0, 0x2) r1 = syz_open_pts(r0, 0x404040) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f0000000240)={{0xffffffffffff2a54, 0x80000000}, 'port0\x00', 0xa, 0x40, 0x2, 0x87b1, 0x9, 0x8, 0x2, 0x0, 0x2, 0x4dac1e15}) ioctl$void(r1, 0x5450) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000340)={&(0x7f0000000300)='./file0\x00', 0x0, 0x18}, 0x10) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x2800000) ioctl$KVM_GET_IRQCHIP(r0, 0xc208ae62, &(0x7f0000000380)=@ioapic) ioctl$LOOP_SET_FD(r0, 0x4c00, r0) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000480)=0x1, 0x4) r2 = syz_open_dev$vcsn(&(0x7f00000004c0)='/dev/vcs#\x00', 0x100000000, 0x200000) ioctl$KVM_IRQFD(r0, 0x4020ae76, &(0x7f0000000500)={r2, 0x101, 0x1000, r0}) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000540)={0x0, 0x6}, &(0x7f0000000580)=0x8) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f00000005c0)={r3, 0xca, 0x47, 0x100000000, 0x7, 0x3f}, 0x14) getsockopt$ax25_buf(r0, 0x101, 0x19, &(0x7f0000000600)=""/66, &(0x7f0000000680)=0x42) mknod(&(0x7f00000006c0)='./file0\x00', 0x2, 0x2) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$EBT_SO_GET_INIT_ENTRIES(r0, 0x0, 0x83, &(0x7f0000000780)={'filter\x00', 0x0, 0x3, 0x26, [], 0x2, &(0x7f0000000700)=[{}, {}], &(0x7f0000000740)=""/38}, &(0x7f0000000800)=0x78) syz_extract_tcp_res(&(0x7f0000000840), 0x4, 0x6) getsockopt$inet_udp_int(r2, 0x11, 0x65, &(0x7f0000000880), &(0x7f00000008c0)=0x4) ioctl$KVM_PPC_ALLOCATE_HTAB(r0, 0xc004aea7, &(0x7f0000000900)=0x3) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000940)) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000980)='./cgroup.net/syz1\x00', 0x200002, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f00000009c0)={0x763, 0x0, 0xec}) setsockopt$inet_msfilter(r4, 0x0, 0x29, &(0x7f0000000a40)={@multicast1=0xe0000001, @dev={0xac, 0x14, 0x14, 0x10}, 0x0, 0x1, [@local={0xac, 0x14, 0x14, 0xaa}]}, 0x14) [ 176.239004] RSP: 002b:00007f2d4ca09c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 176.246709] RAX: ffffffffffffffda RBX: 00007f2d4ca0a6d4 RCX: 0000000000454e79 [ 176.253973] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000020000340 [ 176.261237] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 176.268505] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000013 [ 176.275769] R13: 00000000000003ea R14: 00000000006f7e90 R15: 000000000000000c [ 176.283283] cgroup: cgroup_addrm_files: failed to add cgroup.threads, err=-12 [ 176.351150] FAULT_INJECTION: forcing a failure. [ 176.351150] name failslab, interval 1, probability 0, space 0, times 0 [ 176.362434] CPU: 1 PID: 13250 Comm: syz-executor7 Not tainted 4.16.0-rc7+ #372 [ 176.369794] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 176.379145] Call Trace: [ 176.381735] dump_stack+0x194/0x24d [ 176.385375] ? arch_local_irq_restore+0x53/0x53 [ 176.390052] should_fail+0x8c0/0xa40 [ 176.393779] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 176.394406] sctp: [Deprecated]: syz-executor5 (pid 13298) Use of int in max_burst socket option deprecated. [ 176.394406] Use struct sctp_assoc_value instead [ 176.398880] ? rb_first_postorder+0xa0/0xa0 [ 176.398890] ? __mutex_lock+0x16f/0x1a80 [ 176.398908] ? trace_event_raw_event_lock+0x340/0x340 [ 176.426926] ? find_held_lock+0x35/0x1d0 [ 176.430991] ? __lock_is_held+0xb6/0x140 [ 176.435061] ? check_same_owner+0x320/0x320 [ 176.439379] ? perf_trace_lock+0xd6/0x900 [ 176.443534] ? rcu_note_context_switch+0x710/0x710 [ 176.448469] should_failslab+0xec/0x120 [ 176.452441] __kmalloc_track_caller+0x5f/0x760 [ 176.457024] ? idr_alloc_cyclic+0x1d6/0x320 [ 176.461349] ? trace_hardirqs_off+0x10/0x10 [ 176.465663] ? kstrdup_const+0x39/0x50 [ 176.469547] ? __mutex_unlock_slowpath+0xe9/0xac0 [ 176.474389] kstrdup+0x39/0x70 [ 176.477579] kstrdup_const+0x39/0x50 [ 176.481291] __kernfs_new_node+0xa2/0x570 [ 176.485434] ? kernfs_dop_revalidate+0x380/0x380 [ 176.490191] ? kasan_check_read+0x11/0x20 [ 176.494335] ? read_word_at_a_time+0x12/0x20 2018/03/31 07:26:07 executing program 1 (fault-call:6 fault-nth:13): mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) open(&(0x7f00000000c0)='./file0\x00', 0xa0441, 0x80) syz_mount_image$msdos(&(0x7f0000000140)='msdos\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x1, &(0x7f0000000100)=[{&(0x7f0000000480)="9196b107dc9e5c731d56d84afae6a7bf24", 0x11, 0x1f}], 0x0, &(0x7f0000000000)=ANY=[]) rmdir(&(0x7f0000000080)='./file0//ile0\x00') mkdir(&(0x7f0000000340)='./file0//ile0\x00', 0x1) r0 = semget$private(0x0, 0x4, 0x21) semctl$GETPID(r0, 0x1, 0xb, &(0x7f0000000200)=""/154) [ 176.498741] ? strscpy+0x186/0x500 [ 176.502289] kernfs_new_node+0x80/0xe0 [ 176.506176] __kernfs_create_file+0x4b/0x320 [ 176.510582] cgroup_addrm_files+0x3c5/0xa70 [ 176.514915] ? cgroup_file_write+0x710/0x710 [ 176.519323] ? __getnstimeofday64+0x317/0x470 [ 176.520287] sctp: [Deprecated]: syz-executor5 (pid 13298) Use of int in max_burst socket option deprecated. [ 176.520287] Use struct sctp_assoc_value instead [ 176.523811] ? getrawmonotonic64+0x460/0x460 [ 176.523827] ? kernfs_active+0x92/0x160 [ 176.523842] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 176.523853] ? cgroup_kn_set_ugid+0x2c7/0x370 [ 176.523867] ? cgroup_file_name+0x1d0/0x1d0 [ 176.560281] css_populate_dir+0x340/0x420 [ 176.564428] cgroup_mkdir+0x553/0xfc0 [ 176.568224] ? __lock_is_held+0xb6/0x140 [ 176.572284] ? cgroup_destroy_locked+0x750/0x750 [ 176.577036] ? rcu_read_lock_sched_held+0x108/0x120 [ 176.582048] ? kmem_cache_free+0x258/0x2a0 [ 176.586261] ? set_nlink+0xc1/0x160 [ 176.589867] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 176.594771] ? generic_permission+0x105/0x3c0 [ 176.599243] ? cgroup_destroy_locked+0x750/0x750 [ 176.603975] kernfs_iop_mkdir+0x153/0x1e0 [ 176.608099] vfs_mkdir+0x390/0x600 [ 176.611624] SyS_mkdir+0x220/0x2a0 [ 176.615148] ? SyS_mkdirat+0x2b0/0x2b0 [ 176.619036] ? do_syscall_64+0xb7/0x940 [ 176.622987] ? SyS_mkdirat+0x2b0/0x2b0 [ 176.626859] do_syscall_64+0x281/0x940 [ 176.630731] ? vmalloc_sync_all+0x30/0x30 [ 176.634860] ? _raw_spin_unlock_irq+0x27/0x70 [ 176.639330] ? finish_task_switch+0x1c1/0x7e0 [ 176.643802] ? syscall_return_slowpath+0x550/0x550 [ 176.648705] ? syscall_return_slowpath+0x2ac/0x550 [ 176.653610] ? prepare_exit_to_usermode+0x350/0x350 [ 176.658610] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 176.663960] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 176.668782] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 176.673947] RIP: 0033:0x454e79 [ 176.677119] RSP: 002b:00007f49041e4c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 176.684820] RAX: ffffffffffffffda RBX: 00007f49041e56d4 RCX: 0000000000454e79 [ 176.692064] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000020000340 [ 176.699308] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 176.706556] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000013 [ 176.713813] R13: 00000000000003ea R14: 00000000006f7e90 R15: 000000000000000b [ 176.721241] cgroup: cgroup_addrm_files: failed to add cgroup.threads, err=-12 [ 176.743146] FAULT_INJECTION: forcing a failure. [ 176.743146] name failslab, interval 1, probability 0, space 0, times 0 [ 176.754418] CPU: 1 PID: 13310 Comm: syz-executor1 Not tainted 4.16.0-rc7+ #372 [ 176.761771] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 176.771120] Call Trace: [ 176.773701] dump_stack+0x194/0x24d [ 176.777312] ? arch_local_irq_restore+0x53/0x53 [ 176.781963] should_fail+0x8c0/0xa40 [ 176.785654] ? kstrdup+0x39/0x70 [ 176.789014] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 176.794099] ? cgroup_mkdir+0x553/0xfc0 [ 176.798055] ? vfs_mkdir+0x390/0x600 [ 176.801744] ? SyS_mkdir+0x220/0x2a0 [ 176.805433] ? do_syscall_64+0x281/0x940 [ 176.809482] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 176.814839] ? find_held_lock+0x35/0x1d0 [ 176.818881] ? find_held_lock+0x35/0x1d0 [ 176.822923] ? __lock_is_held+0xb6/0x140 [ 176.826976] ? check_same_owner+0x320/0x320 [ 176.831289] ? rcu_note_context_switch+0x710/0x710 [ 176.836209] ? rcu_read_lock_sched_held+0x108/0x120 [ 176.841210] should_failslab+0xec/0x120 [ 176.845161] kmem_cache_alloc+0x47/0x760 [ 176.849196] ? memcpy+0x45/0x50 [ 176.852451] ? kstrdup+0x59/0x70 [ 176.855794] __kernfs_new_node+0xe2/0x570 [ 176.859917] ? kernfs_dop_revalidate+0x380/0x380 [ 176.864660] ? kasan_check_read+0x11/0x20 [ 176.868792] ? read_word_at_a_time+0x12/0x20 [ 176.873591] ? strscpy+0x186/0x500 [ 176.877132] kernfs_new_node+0x80/0xe0 [ 176.881011] __kernfs_create_file+0x4b/0x320 [ 176.885407] cgroup_addrm_files+0x3c5/0xa70 [ 176.889723] ? cgroup_file_write+0x710/0x710 [ 176.894123] ? getrawmonotonic64+0x460/0x460 [ 176.898508] ? kernfs_active+0x92/0x160 [ 176.902471] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 176.907394] ? cgroup_kn_set_ugid+0x2c7/0x370 [ 176.911886] ? cgroup_file_name+0x1d0/0x1d0 [ 176.916204] css_populate_dir+0x340/0x420 [ 176.920349] cgroup_mkdir+0x553/0xfc0 [ 176.924141] ? __lock_is_held+0xb6/0x140 [ 176.928198] ? cgroup_destroy_locked+0x750/0x750 [ 176.932978] ? rcu_read_lock_sched_held+0x108/0x120 [ 176.938021] ? kmem_cache_free+0x258/0x2a0 [ 176.942236] ? set_nlink+0xc1/0x160 [ 176.945839] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 176.950757] ? generic_permission+0x105/0x3c0 [ 176.955228] ? cgroup_destroy_locked+0x750/0x750 [ 176.959959] kernfs_iop_mkdir+0x153/0x1e0 [ 176.964083] vfs_mkdir+0x390/0x600 [ 176.967598] SyS_mkdir+0x220/0x2a0 [ 176.971114] ? SyS_mkdirat+0x2b0/0x2b0 [ 176.974979] ? do_syscall_64+0xb7/0x940 [ 176.978942] ? SyS_mkdirat+0x2b0/0x2b0 [ 176.982810] do_syscall_64+0x281/0x940 [ 176.986677] ? vmalloc_sync_all+0x30/0x30 [ 176.990798] ? _raw_spin_unlock_irq+0x27/0x70 [ 176.995268] ? finish_task_switch+0x1c1/0x7e0 [ 176.999739] ? syscall_return_slowpath+0x550/0x550 [ 177.004642] ? syscall_return_slowpath+0x2ac/0x550 [ 177.009555] ? prepare_exit_to_usermode+0x350/0x350 [ 177.014552] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 177.019889] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 177.024710] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 177.029873] RIP: 0033:0x454e79 [ 177.033039] RSP: 002b:00007f2d4ca09c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 177.040721] RAX: ffffffffffffffda RBX: 00007f2d4ca0a6d4 RCX: 0000000000454e79 2018/03/31 07:26:07 executing program 7 (fault-call:7 fault-nth:12): mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) open(&(0x7f00000000c0)='./file0\x00', 0xa0441, 0x80) syz_mount_image$msdos(&(0x7f0000000140)='msdos\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x1, &(0x7f0000000100)=[{&(0x7f0000000480)="9196b107dc9e5c731d56d84afae6a7bf24", 0x11, 0x1f}], 0x0, &(0x7f0000000000)=ANY=[]) mkdir(&(0x7f0000000180)='./file0//ile0\x00', 0x112) rmdir(&(0x7f0000000080)='./file0//ile0\x00') mkdir(&(0x7f0000000340)='./file0//ile0\x00', 0x1) r0 = semget$private(0x0, 0x4, 0x21) semctl$GETPID(r0, 0x1, 0xb, &(0x7f0000000200)=""/154) 2018/03/31 07:26:07 executing program 4: r0 = accept4(0xffffffffffffffff, &(0x7f0000000000)=@vsock={0x0, 0x0, 0x0, @host}, &(0x7f0000000080)=0x80, 0x80800) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffff9c, 0x84, 0x14, &(0x7f00000000c0)=@assoc_value={0x0}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000140)={r1, 0x100}, &(0x7f0000000180)=0x8) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40006000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xe8, r3, 0x4, 0x70bd28, 0x25dfdbfc, {0xb}, [@IPVS_CMD_ATTR_SERVICE={0x40, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x20, 0x4}}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xfffffffffffffff8}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x33}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x68}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'dummy0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e21}]}, @IPVS_CMD_ATTR_DEST={0x58, 0x2, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@ipv4={[], [0xff, 0xff], @broadcast=0xffffffff}}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x7}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x8a}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xd7}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x7}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xfff}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x2}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x80000001}]}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9199}]}, 0xe8}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) setsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f00000003c0)={r2, 0x6eca, 0x8, 0x97b}, 0x10) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, &(0x7f0000000400)={'raw\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78) bind$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @rand_addr=0x8}, 0x10) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000540)=@nat={'nat\x00', 0x1b, 0x5, 0x5c0, 0x278, 0x140, 0xffffffff, 0x3b0, 0x3b0, 0x4f0, 0x4f0, 0xffffffff, 0x4f0, 0x4f0, 0x5, &(0x7f00000004c0), {[{{@ipv6={@local={0xfe, 0x80, [], 0xaa}, @ipv4={[], [0xff, 0xff]}, [0xffffff00, 0xffffffff, 0xffffff00, 0xff000000], [0xffffffff, 0x0, 0x0, 0xffffffff], 'eql\x00', 'vcan0\x00', {0xff}, {}, 0x87, 0xfffffffffffffffa, 0x2}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@eui64={0x28, 'eui64\x00'}, @common=@mh={0x28, 'mh\x00', 0x0, {0xdd04, 0x0, 0x1}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x1, 0x9000000000000, 0x200}, {0x101, 0xfffffffffffff801, 0x1}}}}, {{@uncond, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@hl={0x28, 'hl\x00', 0x0, {0x0, 0x727f7caa}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0xb, @ipv6=@local={0xfe, 0x80, [], 0xaa}, @ipv4=@dev={0xac, 0x14, 0x14, 0x19}, @icmp_id=0x64, @port=0x4e22}}}, {{@ipv6={@mcast1={0xff, 0x1, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, [0xffffffff, 0xffffff00, 0xffffffff, 0xffffff00], [0xffffff00, 0xff000000, 0xff000000, 0xffffffff], 'sit0\x00', 'vcan0\x00', {0xff}, {0xff}, 0x16, 0x1, 0x1, 0x46}, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@icmp6={0x28, 'icmp6\x00', 0x0, {0x1f, 0x5, 0x1, 0x1}}]}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0xa, @ipv6=@remote={0xfe, 0x80, [], 0xbb}, @ipv4=@multicast1=0xe0000001, @port=0x4e21, @port=0x4e20}}}, {{@uncond, 0x0, 0xf8, 0x140, 0x0, {}, [@common=@srh={0x30, 'srh\x00', 0x0, {0x33, 0xbcb5, 0x4, 0x0, 0xffffffffffffd64b, 0x106, 0x40}}]}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x18, @ipv6=@ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, @ipv4=@local={0xac, 0x14, 0x14, 0xaa}, @icmp_id=0x65, @gre_key=0x6f4}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x620) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000b80)={r0}) ioctl$sock_ipx_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000bc0)={'ip6gre0\x00', {0x4, 0xff, 0x6, "2a08169c9b03", 0x10001}}) getresuid(&(0x7f0000000c00), &(0x7f0000000c40), &(0x7f0000000c80)) setsockopt$bt_BT_SNDMTU(r4, 0x112, 0xc, &(0x7f0000000cc0)=0x2, 0x2) sendto$llc(r0, &(0x7f0000000d00)="20d64fd3f45b3beb5289cc4c933d450be835c1b615ac48255be09c64f921107fbb435a00ca5edff33cc6b696455a1e49e06e0a09c4ba6d7db16dbda8aeb48cea5746d17e11cae81d4d06709774b1488a460c684d2ddfed25f5b313ac601453d9ef2e1d00242e53a9f8db1edda0f3553f9313f6d693993269432725352e132dbeb2ceec4c2c9f0d3b97b0dcec5bb3f07cfb036926cae6c9aaad5f42fb7d7fa21822c80504360214fe", 0xa8, 0x0, &(0x7f0000000dc0)={0x1a, 0x30f, 0x3, 0x6, 0xaa74, 0x0, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}, 0x10) ioctl$sock_inet_sctp_SIOCINQ(r4, 0x541b, &(0x7f0000000e00)) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000e40)=0x200, 0x4) r5 = memfd_create(&(0x7f0000000e80)='sit0\x00', 0x1) ioctl$EVIOCGUNIQ(r5, 0x80404508, &(0x7f0000000ec0)=""/142) stat(&(0x7f0000000f80)='./file0\x00', &(0x7f0000000fc0)) ioctl$TIOCGSID(r5, 0x5429, &(0x7f0000001040)=0x0) waitid(0x3, r6, &(0x7f0000001080), 0x41000006, &(0x7f00000010c0)) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000001180), 0x4) ioctl$TIOCLINUX4(r5, 0x541c, &(0x7f00000011c0)=0x4) ioctl$KVM_SET_FPU(r5, 0x41a0ae8d, &(0x7f0000001200)={[], 0x9, 0x3, 0x3, 0x0, 0x80000000, 0xf001, 0x6001, [], 0x1}) ioctl$sock_ipx_SIOCIPXCFGDATA(r5, 0x89e2, &(0x7f00000013c0)) removexattr(&(0x7f0000001400)='./file0\x00', &(0x7f0000001440)=@random={'trusted.', '\x00'}) fallocate(r4, 0x2, 0xe443, 0x3) r7 = syz_open_dev$audion(&(0x7f0000001480)='/dev/audio#\x00', 0x1f, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r7, 0x84, 0x17, &(0x7f00000014c0)={r1, 0xfffffffffffffe3e, 0xd1, "fc1d4fe8a7ed509b583bf79cd86477e40ce7f4db6a8c4d3203f611b2fa6a5459d79d7969e6ee7903e071d438bcba0a3dbff4a61da7729a27171f70a290a98fec71c8a0994327d5bdd814c1c286366668cc0fa497d54b47d8ff8f4d7cc6aee5b73b63780314ff989446ad3da35b1d56b0e274233f2b61cac9e2064c877e2e105e39379471f7b066139c5e7f03cefe90ac6652515ccf5c6ea15367896aee7c891aa115dbeefc6e1cb16d9b2e02656b30560d91520e63d7ddf6856ad03a99f7dcf735d6d39e7f7eff12c4f55b194e3aa761c1"}, 0xd9) syz_open_dev$mice(&(0x7f00000015c0)='/dev/input/mice\x00', 0x0, 0x10002) 2018/03/31 07:26:07 executing program 2: r0 = socket(0x0, 0x802, 0x0) syz_open_dev$vcsa(&(0x7f0000000240)='/dev/vcsa#\x00', 0x77, 0x183000) write(r0, &(0x7f0000000080)="24000000210025f0071c0165ff0ffc0e02003c000000000000e1000c0800020000000005", 0x24) r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0xa0, 0x8002) ioctl$KVM_ASSIGN_PCI_DEVICE(r1, 0x8040ae69, &(0x7f00000000c0)={0x800, 0x80, 0x31, 0x6, 0x2}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000080)='io.max\x00', 0x2, 0x0) write$cgroup_int(r4, &(0x7f0000000140)=ANY=[@ANYBLOB="373a340dbb8195d33d11e6e62c6205c1f6fa5ab940d55184478254bf0a87253448ec51b7d9d640c7d34e0865ce89dcf2a7862f2f19f9315788cb8c80ff65a9605f8d0a1e55496a94bd4ff8563960ba7d9a2b3abc847e93e5a65c8439893e3518c602c3cd72a36d794e4a27525f37223a01063c7e0aa02c2412953c1e101e921e8ebcc09f3db92d1dd4ce862d9b89f91a8cf71853cc02b3e988d23d26ebb07c6c5f7c394590c63e41c77a323c3cdf906ebb9b74f4b2f16e24269303ff61c7461109ccb90dd7cb95de2d1316ba675e249b"], 0x5b) fcntl$getown(0xffffffffffffffff, 0x9) ioctl$EVIOCSABS0(r2, 0x401845c0, &(0x7f0000000100)={0x400, 0x1, 0x9, 0x20, 0x5, 0x40}) 2018/03/31 07:26:07 executing program 1 (fault-call:6 fault-nth:14): mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) open(&(0x7f00000000c0)='./file0\x00', 0xa0441, 0x80) syz_mount_image$msdos(&(0x7f0000000140)='msdos\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x1, &(0x7f0000000100)=[{&(0x7f0000000480)="9196b107dc9e5c731d56d84afae6a7bf24", 0x11, 0x1f}], 0x0, &(0x7f0000000000)=ANY=[]) rmdir(&(0x7f0000000080)='./file0//ile0\x00') mkdir(&(0x7f0000000340)='./file0//ile0\x00', 0x1) r0 = semget$private(0x0, 0x4, 0x21) semctl$GETPID(r0, 0x1, 0xb, &(0x7f0000000200)=""/154) 2018/03/31 07:26:07 executing program 6: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0xff) setsockopt(r1, 0x2000000000010d, 0x4000800000000b, &(0x7f0000000280)='\a\x00\x00\x00', 0x4) r2 = getpid() r3 = syz_open_procfs(r2, &(0x7f0000000040)='attr/current\x00') connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) sendmmsg$nfc_llcp(r3, &(0x7f00000002c0)=[{&(0x7f0000000080)={0x27, 0x1, 0x1, 0x6, 0x0, 0x0, "c4d9a75ba187d2fb2c00a5259497a5e426530aaf419db7caa77ea06bb9bd9d92d5df95959374129f36d8330426891a96cc4200b9e461ba73b77297ac0ae14f", 0xb}, 0x60, &(0x7f0000000140)=[{&(0x7f0000000100)="4a70ed28cb", 0x5}], 0x1, &(0x7f0000000180)={0xe8, 0x117, 0x8, "552b489cc15f8897ce8aea167ec7d94929b81474182f9d13c3458c58f38a82949883495ebd143688fb48cf241aa34f96e1e6fa144903ba057a0cab0c61673b143831face7259b423628035702c63f40a6cf4b5b34d6be1e55dd9d17770dfe07db7fbc7bef30d5de2d11207ed261ed5d9766975ba9040d447b87eb04637ea7e218cdbf011b94dd3e31c4365a1989ebba290afe83abe0810d424854b0eb2c1e0ed0c64420ba2b6d4ace8687a471de8f6727f7826d57ae52f3db29c5f8d132955e259032f64ec9b102eb90d2ac31ec2f71ecad0"}, 0xe8}], 0x1, 0x50) 2018/03/31 07:26:07 executing program 0: perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000f17000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$int_in(r0, 0x80000000000541a, &(0x7f0000000000)) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) 2018/03/31 07:26:07 executing program 3: getpid() socket(0x3, 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x7, 0x70, 0xbe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xaf2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x1e, 0x5, 0x0) sendmsg(r0, &(0x7f00003bbfc8)={&(0x7f0000fdbf80)=@generic={0x10000000001e, "02ff01000000010000000000000007e77f5bf86c48028001000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000026da36"}, 0x80, &(0x7f0000454000), 0x0, &(0x7f000012e000)}, 0x0) 2018/03/31 07:26:07 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(0xffffffffffffffff, 0x28, 0x2, &(0x7f00000001c0), 0x8) perf_event_open(&(0x7f000001d000)={0x0, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000001c00), 0x4) getegid() geteuid() getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000002f00)={{{@in, @in=@multicast1}}, {{@in=@remote}}}, &(0x7f0000003000)=0xe8) geteuid() r1 = syz_open_dev$tun(&(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000600)) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={"d202b999cf85000000000088f301e710", 0x102}) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000140)={'vhan0\x00', 0x400}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000200)={"0500000000e700"}) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000540)={0x0, 0x5, 0x1}, &(0x7f0000000580)=0x10) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000480)={r2, 0x745e779}, &(0x7f00000005c0)=0xffffff41) setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, &(0x7f00000003c0)={r3, 0x1000, 0x5f, "07f7e51ca68ce6d42979ee003fa3f949d0ee5e9eb79e1bc877a39696389a3b7c40b38c456eb0082a91985c57bde1a458a41c76f6c7dbad8b7b0e87d31290540af6a0aa7f8549bafdf4535df197d7774b64b45fae5d4252467a414c570996d5"}, 0x67) syz_genetlink_get_family_id$ipvs(&(0x7f0000000740)='IPVS\x00') perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x5, &(0x7f0000000240)={0x0, 0x1d, 0x0, @thr={&(0x7f00000006c0)="86cc2d98038513fbacf1b0f074c54746a921732f4fee980f387db130399f4f86df50ad110e2c1a3c0fe9728cb500a8c7681d836bce232f6a7adf528bd3c42593018e7331ea28f3e6629b04b70f2a7851728b6731b06beb0c325d56351cbaa7cb05644f3dfbfc2bb0535db1ee2441050f64", &(0x7f0000000740)}}, &(0x7f0000000280)) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_CHECK_EXTENSION_VM(r4, 0xae03, 0x800) r5 = syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0x2, 0x0) finit_module(r5, &(0x7f0000000180)='\\$GPLwlan1wlan0\'*:\x00', 0x0) [ 177.047964] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000020000340 [ 177.055208] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 177.062453] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000013 [ 177.069698] R13: 00000000000003ea R14: 00000000006f7e90 R15: 000000000000000d [ 177.077136] cgroup: cgroup_addrm_files: failed to add cgroup.controllers, err=-12 [ 177.177724] FAULT_INJECTION: forcing a failure. [ 177.177724] name failslab, interval 1, probability 0, space 0, times 0 [ 177.189198] CPU: 0 PID: 13335 Comm: syz-executor1 Not tainted 4.16.0-rc7+ #372 [ 177.196565] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 177.205922] Call Trace: [ 177.208517] dump_stack+0x194/0x24d [ 177.212148] ? arch_local_irq_restore+0x53/0x53 [ 177.216825] should_fail+0x8c0/0xa40 [ 177.220541] ? kstrdup+0x39/0x70 2018/03/31 07:26:07 executing program 0: perf_event_open(&(0x7f0000220000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) truncate(&(0x7f00000003c0)='./file0\x00', 0xff) r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0xbb7af0d445d2b60) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000a40)='/dev/rtc\x00', 0x101000, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x5, 0x3}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x6) r3 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(r3, 0x0) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r4, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c480347859f1c6e19600693dcf", 0x55, 0x0, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r4, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) seccomp(0x0, 0x1, &(0x7f0000000400)={0x0, &(0x7f00000003c0)}) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f00000006c0)={0x2, '\x00', 0x3}, 0x18) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r4, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000cc0)=ANY=[@ANYRES32=r1], 0x1) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040)={0x0, 0x0, 0x80000000}) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r5, 0xc058534b, &(0x7f00000005c0)={0x29, 0x3, 0x0, 0x0, 0x0, 0x3df}) getpgid(0x0) sendmsg$nl_generic(r0, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000740)=ANY=[@ANYBLOB="3cffffff3400200027bd7000fbdbdf250f00000008006600ff03000070fb1cc97ce673d611b986ffcd96ecaa19a6bf62281afa00cae694660d876ce699054885e4f0f0b635eb2110d1e99059d1e9f782279fa5ac2eb0fb3d579deb0696913ad9dfe47fd80c641771e93658afb2df666009e3edc6b328d282223f2cbd68125f5e8db8a3bbfa9c6ebd5e92a0128642c5dbe65f6b872b58fde9bf0f1ac548fccc848699330c71d196709c60bd8cd11dde2c95bc96fa4c4a6cbd956bcd37278e9d1e86ca6dc5c84a6b29c0dd751293114678e900000000000000000000000000000000"], 0x1}, 0x1, 0x0, 0x0, 0x24004084}, 0x4000000) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f000027f000)={0x26, 'hash\x00', 0x0, 0x0, 'rmd128-generic\x00'}, 0x58) r7 = accept$alg(r6, 0x0, 0x0) recvmmsg(r7, &(0x7f0000000080)=[{{&(0x7f000005fff7)=@rc, 0x80, &(0x7f00004c1f80)=[{&(0x7f0000581000)=""/17, 0x11}], 0x1, &(0x7f0000062000)=""/42, 0x2a}}], 0x35, 0x0, &(0x7f0000000000)={0x77359400}) [ 177.223911] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 177.229012] ? cgroup_mkdir+0x553/0xfc0 [ 177.232982] ? vfs_mkdir+0x390/0x600 [ 177.236693] ? SyS_mkdir+0x220/0x2a0 [ 177.240403] ? do_syscall_64+0x281/0x940 [ 177.244464] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 177.249832] ? find_held_lock+0x35/0x1d0 [ 177.253897] ? find_held_lock+0x35/0x1d0 [ 177.257959] ? __lock_is_held+0xb6/0x140 [ 177.262027] ? check_same_owner+0x320/0x320 [ 177.266348] ? rcu_note_context_switch+0x710/0x710 [ 177.271276] ? rcu_read_lock_sched_held+0x108/0x120 2018/03/31 07:26:07 executing program 3: r0 = getpid() r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000580)='/dev/vcs\x00', 0x101000, 0x0) sendto$ipx(r1, &(0x7f00000005c0)="92a71e4c60c06f5510223c7f57e6dd91efb5adbea2d751d63b94ced9268eb1082efe4bd10a93cacacd5c0838993b71beae63d6d6b0ff436ca12ed5ee3027f3ff2600a9aef50b44b2618d3ae5895fa91142a8c08532893c7d104e3d8506fb4a346c640a6b0c5af6336e9d522f593376055e7e93fcc4", 0x75, 0x4, 0x0, 0x0) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$EVIOCSABS2F(0xffffffffffffffff, 0x401845ef, &(0x7f0000000080)={0x6, 0x0, 0x5, 0x2, 0x1000000000000, 0x3ff}) kcmp(0x0, r0, 0x40000005, r2, 0xffffffffffffffff) perf_event_open(&(0x7f0000000300)={0x7, 0x70, 0x7, 0x7fffffff, 0x1, 0x3, 0x0, 0x80000000, 0x0, 0xd, 0x1ff, 0x100000000, 0x4, 0x0, 0x3, 0x8, 0x8f3, 0x2, 0x44, 0x40, 0x7fff, 0x53ff, 0x1cc1, 0x80000001, 0x14000000000000, 0x7f, 0x40, 0x0, 0x8, 0x7, 0x3, 0x5, 0x4, 0xe, 0x8, 0x1, 0x4, 0x1, 0x0, 0x3, 0x1, @perf_config_ext={0x5, 0x7}, 0x1, 0x4, 0x7, 0x3, 0x101, 0xfffffffffffff001, 0x7}, r0, 0x7, r1, 0x2) ioctl$KVM_TPR_ACCESS_REPORTING(0xffffffffffffffff, 0xc028ae92, &(0x7f0000000380)={0x3, 0x9}) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000400)='rdma.current\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000440)={0x0, @in6={{0xa, 0x4e20, 0x3ff, @dev={0xfe, 0x80, [], 0x17}, 0x5}}}, &(0x7f0000000500)=0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000540)={r4, 0x237e}, 0x8) r5 = syz_open_procfs(0x0, &(0x7f0000000180)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af1f0200f5ab26d7a071fb35331ce39c5a") r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') sendmsg$IPVS_CMD_GET_CONFIG(r5, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)={0xffffffffffffffce, r6, 0x400, 0x70bd27, 0x25dfdbfd, {0xd}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3f}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7fff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x40b3}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x8}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}]}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xfa}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x6}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e23}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}]}, @IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x91}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x3}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6gretap0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'syzkaller1\x00'}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x4085}, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r7 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000002, 0x52, r9, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) setsockopt$netrom_NETROM_IDLE(0xffffffffffffffff, 0x103, 0x7, &(0x7f0000000040)=0x80000000, 0x4) syz_open_dev$vcsn(&(0x7f0000000100)='/dev/vcs#\x00', 0x1, 0x20000) read$eventfd(r5, &(0x7f0000000200), 0xfffffe08) [ 177.276298] should_failslab+0xec/0x120 [ 177.280278] kmem_cache_alloc+0x47/0x760 [ 177.284344] ? memcpy+0x45/0x50 [ 177.287621] ? kstrdup+0x59/0x70 [ 177.290990] __kernfs_new_node+0xe2/0x570 [ 177.295141] ? kernfs_dop_revalidate+0x380/0x380 [ 177.299888] ? kasan_check_read+0x11/0x20 [ 177.304028] ? read_word_at_a_time+0x12/0x20 [ 177.308417] ? strscpy+0x186/0x500 [ 177.311946] kernfs_new_node+0x80/0xe0 [ 177.315817] __kernfs_create_file+0x4b/0x320 [ 177.320219] cgroup_addrm_files+0x3c5/0xa70 [ 177.324529] ? cgroup_file_write+0x710/0x710 [ 177.328925] ? getrawmonotonic64+0x460/0x460 [ 177.333316] ? kernfs_active+0x92/0x160 [ 177.337303] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 177.342217] ? cgroup_kn_set_ugid+0x2c7/0x370 [ 177.346696] ? cgroup_file_name+0x1d0/0x1d0 [ 177.351005] css_populate_dir+0x340/0x420 [ 177.355144] cgroup_mkdir+0x553/0xfc0 [ 177.358924] ? __lock_is_held+0xb6/0x140 [ 177.362968] ? cgroup_destroy_locked+0x750/0x750 [ 177.367704] ? rcu_read_lock_sched_held+0x108/0x120 [ 177.372705] ? kmem_cache_free+0x258/0x2a0 [ 177.376920] ? set_nlink+0xc1/0x160 [ 177.380526] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 177.385432] ? generic_permission+0x105/0x3c0 [ 177.389908] ? cgroup_destroy_locked+0x750/0x750 [ 177.394645] kernfs_iop_mkdir+0x153/0x1e0 [ 177.398773] vfs_mkdir+0x390/0x600 [ 177.402294] SyS_mkdir+0x220/0x2a0 [ 177.405817] ? SyS_mkdirat+0x2b0/0x2b0 [ 177.409689] ? do_syscall_64+0xb7/0x940 [ 177.413646] ? SyS_mkdirat+0x2b0/0x2b0 [ 177.417516] do_syscall_64+0x281/0x940 [ 177.421384] ? vmalloc_sync_all+0x30/0x30 [ 177.425514] ? finish_task_switch+0x1c1/0x7e0 [ 177.429990] ? syscall_return_slowpath+0x550/0x550 [ 177.434902] ? syscall_return_slowpath+0x2ac/0x550 [ 177.439810] ? prepare_exit_to_usermode+0x350/0x350 [ 177.444808] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 177.450154] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 177.454984] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 177.460153] RIP: 0033:0x454e79 [ 177.463323] RSP: 002b:00007f2d4ca09c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 177.471015] RAX: ffffffffffffffda RBX: 00007f2d4ca0a6d4 RCX: 0000000000454e79 [ 177.478266] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000020000340 [ 177.485515] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 177.492764] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000013 [ 177.500020] R13: 00000000000003ea R14: 00000000006f7e90 R15: 000000000000000e [ 177.507591] cgroup: cgroup_addrm_files: failed to add cgroup.controllers, err=-12 [ 177.574771] FAULT_INJECTION: forcing a failure. [ 177.574771] name failslab, interval 1, probability 0, space 0, times 0 [ 177.586140] CPU: 1 PID: 13334 Comm: syz-executor7 Not tainted 4.16.0-rc7+ #372 [ 177.593498] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 177.602850] Call Trace: [ 177.605425] dump_stack+0x194/0x24d [ 177.609038] ? arch_local_irq_restore+0x53/0x53 [ 177.613700] should_fail+0x8c0/0xa40 [ 177.617400] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 177.622503] ? rb_first_postorder+0xa0/0xa0 [ 177.626804] ? __mutex_lock+0x16f/0x1a80 [ 177.630846] ? trace_event_raw_event_lock+0x340/0x340 [ 177.636022] ? trace_hardirqs_off+0x10/0x10 [ 177.640331] ? find_held_lock+0x35/0x1d0 [ 177.644376] ? __lock_is_held+0xb6/0x140 [ 177.648429] ? check_same_owner+0x320/0x320 [ 177.652732] ? lock_downgrade+0x980/0x980 [ 177.656865] ? rcu_note_context_switch+0x710/0x710 [ 177.661825] should_failslab+0xec/0x120 [ 177.665798] __kmalloc_track_caller+0x5f/0x760 [ 177.670372] ? idr_alloc_cyclic+0x1d6/0x320 [ 177.674677] ? kstrdup_const+0x39/0x50 [ 177.678547] ? __mutex_unlock_slowpath+0xe9/0xac0 [ 177.683372] kstrdup+0x39/0x70 [ 177.686547] kstrdup_const+0x39/0x50 [ 177.690243] __kernfs_new_node+0xa2/0x570 [ 177.694373] ? kernfs_dop_revalidate+0x380/0x380 [ 177.699116] ? kasan_check_read+0x11/0x20 [ 177.703245] ? read_word_at_a_time+0x12/0x20 [ 177.707634] ? strscpy+0x186/0x500 [ 177.711166] kernfs_new_node+0x80/0xe0 [ 177.715043] __kernfs_create_file+0x4b/0x320 [ 177.719438] cgroup_addrm_files+0x3c5/0xa70 [ 177.723751] ? cgroup_file_write+0x710/0x710 [ 177.728151] ? getrawmonotonic64+0x460/0x460 [ 177.732546] ? kernfs_active+0x92/0x160 [ 177.736505] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 177.741414] ? cgroup_kn_set_ugid+0x2c7/0x370 [ 177.745891] ? cgroup_file_name+0x1d0/0x1d0 [ 177.750200] css_populate_dir+0x340/0x420 [ 177.754332] cgroup_mkdir+0x553/0xfc0 [ 177.758112] ? __lock_is_held+0xb6/0x140 [ 177.762162] ? cgroup_destroy_locked+0x750/0x750 [ 177.766901] ? rcu_read_lock_sched_held+0x108/0x120 [ 177.771899] ? kmem_cache_free+0x258/0x2a0 [ 177.776115] ? set_nlink+0xc1/0x160 [ 177.779723] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 177.784633] ? generic_permission+0x105/0x3c0 [ 177.789112] ? cgroup_destroy_locked+0x750/0x750 [ 177.793849] kernfs_iop_mkdir+0x153/0x1e0 [ 177.797979] vfs_mkdir+0x390/0x600 [ 177.801505] SyS_mkdir+0x220/0x2a0 [ 177.805034] ? SyS_mkdirat+0x2b0/0x2b0 [ 177.808906] ? do_syscall_64+0xb7/0x940 [ 177.812862] ? SyS_mkdirat+0x2b0/0x2b0 [ 177.816735] do_syscall_64+0x281/0x940 [ 177.820621] ? vmalloc_sync_all+0x30/0x30 [ 177.824756] ? trace_event_raw_event_sys_exit+0x260/0x260 [ 177.830286] ? syscall_return_slowpath+0x550/0x550 [ 177.835198] ? syscall_return_slowpath+0x2ac/0x550 [ 177.840115] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 177.845462] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 177.850481] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 177.855654] RIP: 0033:0x454e79 [ 177.858833] RSP: 002b:00007f49041e4c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 177.866525] RAX: ffffffffffffffda RBX: 00007f49041e56d4 RCX: 0000000000454e79 [ 177.873778] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000020000340 [ 177.881033] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 177.888283] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000013 [ 177.895533] R13: 00000000000003ea R14: 00000000006f7e90 R15: 000000000000000c [ 177.903396] cgroup: cgroup_addrm_files: failed to add cgroup.controllers, err=-12 2018/03/31 07:26:08 executing program 2: perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x10000, 0x0) ioctl$DRM_IOCTL_ADD_BUFS(r0, 0xc0206416, &(0x7f0000000100)={0x6524, 0x8001, 0x80000000, 0xff, 0x9, 0x5}) r1 = socket$inet(0x2, 0x3, 0x2) r2 = dup2(r1, r1) recvfrom$unix(r2, &(0x7f0000000040), 0x0, 0x141, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) setsockopt$inet_int(r2, 0x0, 0x1e, &(0x7f0000000200)=0x71, 0x4a01745f) 2018/03/31 07:26:08 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00003cefe4)={&(0x7f0000000000)={0x10, 0x34000}, 0xc, &(0x7f0000007ff0)={&(0x7f0000000040)={0x1c, 0x2c, 0x701, 0x0, 0x0, {0x3}, [@typed={0x8, 0x0, @str='\x00'}]}, 0x1c}, 0x1}, 0x0) 2018/03/31 07:26:08 executing program 1 (fault-call:6 fault-nth:15): mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) open(&(0x7f00000000c0)='./file0\x00', 0xa0441, 0x80) syz_mount_image$msdos(&(0x7f0000000140)='msdos\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x1, &(0x7f0000000100)=[{&(0x7f0000000480)="9196b107dc9e5c731d56d84afae6a7bf24", 0x11, 0x1f}], 0x0, &(0x7f0000000000)=ANY=[]) rmdir(&(0x7f0000000080)='./file0//ile0\x00') mkdir(&(0x7f0000000340)='./file0//ile0\x00', 0x1) r0 = semget$private(0x0, 0x4, 0x21) semctl$GETPID(r0, 0x1, 0xb, &(0x7f0000000200)=""/154) 2018/03/31 07:26:08 executing program 7 (fault-call:7 fault-nth:13): mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) open(&(0x7f00000000c0)='./file0\x00', 0xa0441, 0x80) syz_mount_image$msdos(&(0x7f0000000140)='msdos\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x1, &(0x7f0000000100)=[{&(0x7f0000000480)="9196b107dc9e5c731d56d84afae6a7bf24", 0x11, 0x1f}], 0x0, &(0x7f0000000000)=ANY=[]) mkdir(&(0x7f0000000180)='./file0//ile0\x00', 0x112) rmdir(&(0x7f0000000080)='./file0//ile0\x00') mkdir(&(0x7f0000000340)='./file0//ile0\x00', 0x1) r0 = semget$private(0x0, 0x4, 0x21) semctl$GETPID(r0, 0x1, 0xb, &(0x7f0000000200)=""/154) 2018/03/31 07:26:08 executing program 5: r0 = gettid() timer_create(0x0, &(0x7f00000004c0)={0x0, 0x12, 0x0, @thr={&(0x7f0000000300), &(0x7f00000003c0)}}, &(0x7f0000044000)) clock_getres(0x0, &(0x7f0000dd8ff0)={0x0, 0x0}) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x2400, 0xfffffffffffffffa) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, r1}, {0x0, 0x9}}, &(0x7f0000040000)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r4, 0x7, &(0x7f0000002000)={0x1, 0x0, 0x0, 0x0, r0}) unshare(0x400) fcntl$lock(r4, 0x7, &(0x7f0000010000)) tkill(r0, 0x1000000000016) dup3(r3, r4, 0x0) 2018/03/31 07:26:08 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x0, 0x0, 0x0) unlinkat(0xffffffffffffffff, &(0x7f0000000440)='./file0\x00', 0x0) bind(0xffffffffffffffff, &(0x7f00008a1f80)=@generic={0x42001e, "01030000000000b9000000004700000000a979f321b30c7bc8790405c7bad62e0a63a632ed4938d36d64fb8f8401a3ff59829a2b0afe7ce43a5b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31510000500000000000bdb9c8ea31000077aeb81c90001d6f7c980400000000f70dc136cb184a"}, 0x80) bind$netrom(r0, &(0x7f0000000040)=@ax25={0x3, {"6ce9ff4c41d8c7"}, 0x7}, 0x10) sendmsg(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f00000000c0)=@generic={0x10000000001e, "0100000000001e0000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48006be61ffe06d79f00000000000000076c3f010039d8f986ff03000000000000af50d5fe32c419d67bcbc7e3ad316a198356ed0008341c1fd45624280027800ece70b076cf979ac40000bd767e2e78a1dfd300981a1565b3b16d7436"}, 0x80, &(0x7f0000000740), 0x0, &(0x7f0000000040)}, 0x0) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffff9c, 0x84, 0x1, &(0x7f0000000080)={0x0, 0x0, 0x6946, 0x0, 0x0, 0x1}, &(0x7f00000000c0)=0x14) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet6_dccp_int(0xffffffffffffffff, 0x21, 0x9, &(0x7f0000000140), &(0x7f0000000180)=0x4) getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, &(0x7f0000000480)={'icmp6\x00'}, &(0x7f00000004c0)=0x1e) ioctl(r1, 0x800000000008982, &(0x7f0000000000)) socketpair$inet6(0xa, 0xf, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) dup2(r2, r2) 2018/03/31 07:26:08 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x40000000004e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x406200, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0x9) accept(r1, &(0x7f0000000080)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @mcast2}}}, &(0x7f0000000100)=0x80) listen(r0, 0x0) syz_emit_ethernet(0x230, &(0x7f0000007000)=ANY=[@ANYBLOB="aaaaaaaaaaaacf2bb43c40b80800450000280000000000069078ac14ffaae000000100004e20", @ANYRES32=0x42424242, @ANYRES32=0x42424242, @ANYBLOB="500004c5b0780000"], 0x0) 2018/03/31 07:26:08 executing program 0: getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f00000003c0)={0x0, 0x0, 0x0}, &(0x7f0000000400)=0xc) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000440)) tgkill(0x0, 0x0, 0x0) r2 = accept4$ax25(0xffffffffffffff9c, &(0x7f0000000380), &(0x7f0000000480)=0x10, 0x80000) fcntl$getown(r2, 0x9) r3 = syz_open_procfs(0x0, &(0x7f0000000040)="2f65786500000000000090d8b75e67e16b394342abb5158df87ea8984e79c93df7498b2b34796068700e29fbd789f9a031f23e16c96e30baed2961953b057f7a3222943acc4b8cfa4de553f8276731ddeb811efd44ea011e1a0db9074a28a826c88566b89c57cc3cca4aec41d37fa27c8daa19030d03139d0aea71d509d9a20ba7deceb656cc1308d9d1f111b6bd1595486f55e229923be4ed8cbfb78e86280b4cacf386bfa8840afb312a4c520a03b27f805d181bd09ea208931a36e888060a2d") fcntl$setlease(r2, 0x400, 0x0) getpeername(r2, &(0x7f0000002940)=@can={0x0, 0x0}, &(0x7f00000029c0)=0x80) connect$packet(r3, &(0x7f0000002a00)={0x11, 0x7, r4, 0x1, 0x4, 0x6, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}, 0x14) fstat(0xffffffffffffffff, &(0x7f0000000040)) perf_event_open(&(0x7f000025c000)={0x0, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$dspn(&(0x7f00001f4000)='/dev/dsp#\x00', 0x1, 0x2) r6 = openat(r3, &(0x7f0000000500)='./file0\x00', 0x10000, 0x0) ioctl$int_in(r5, 0x0, &(0x7f0000000640)) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(0xffffffffffffffff, 0x84, 0x15, &(0x7f0000000040), 0x1) close(r6) syncfs(0xffffffffffffffff) semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f0000000280)=""/198) fsetxattr(r3, &(0x7f0000000140)=@known='user.syz\x00', &(0x7f0000000180)="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", 0x137, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000600)={0x1f, 0x100000001, 0x5, 0x8, 0x4, 0x3da, 0x0, 0xffffffff, 0x0}, &(0x7f00000007c0)=0x20) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000800)={0x0, 0xa, 0xf33, 0xe51c, r7}, 0x10) fremovexattr(r3, &(0x7f0000000000)=@known='user.syz\x00') ioctl$DRM_IOCTL_GET_CAP(r3, 0xc010640c, &(0x7f0000000340)={0x9}) connect(r2, &(0x7f0000000740)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha512\x00'}, 0x80) syz_fuseblk_mount(&(0x7f00000004c0)='./file0\x00', &(0x7f00000005c0)='./file0\x00', 0xe000, r0, r1, 0x325e, 0x0, 0x2820080) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000640)={0x0, 0x200, 0x0, 0x2}, &(0x7f0000000680)=0x10) [ 178.175381] FAULT_INJECTION: forcing a failure. [ 178.175381] name failslab, interval 1, probability 0, space 0, times 0 [ 178.186686] CPU: 0 PID: 13380 Comm: syz-executor1 Not tainted 4.16.0-rc7+ #372 [ 178.194049] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 178.203395] Call Trace: [ 178.205971] dump_stack+0x194/0x24d [ 178.209590] ? arch_local_irq_restore+0x53/0x53 [ 178.214253] should_fail+0x8c0/0xa40 [ 178.217956] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 178.223046] ? rb_first_postorder+0xa0/0xa0 [ 178.227345] ? __mutex_lock+0x16f/0x1a80 [ 178.231387] ? save_stack+0x43/0xd0 [ 178.234993] ? kasan_kmalloc+0xad/0xe0 [ 178.238866] ? trace_hardirqs_off+0x10/0x10 [ 178.243176] ? find_held_lock+0x35/0x1d0 [ 178.247221] ? __lock_is_held+0xb6/0x140 [ 178.251271] ? check_same_owner+0x320/0x320 [ 178.255573] ? lock_downgrade+0x980/0x980 [ 178.259701] ? rcu_note_context_switch+0x710/0x710 [ 178.264620] should_failslab+0xec/0x120 [ 178.268578] __kmalloc_track_caller+0x5f/0x760 [ 178.273152] ? idr_alloc_cyclic+0x1d6/0x320 [ 178.277460] ? kstrdup_const+0x39/0x50 [ 178.281329] ? __mutex_unlock_slowpath+0xe9/0xac0 [ 178.286170] kstrdup+0x39/0x70 [ 178.289347] kstrdup_const+0x39/0x50 [ 178.293043] __kernfs_new_node+0xa2/0x570 [ 178.297183] ? kernfs_dop_revalidate+0x380/0x380 [ 178.301924] ? kasan_check_read+0x11/0x20 [ 178.306053] ? read_word_at_a_time+0x12/0x20 [ 178.310449] ? strscpy+0x186/0x500 [ 178.313982] kernfs_new_node+0x80/0xe0 [ 178.317856] __kernfs_create_file+0x4b/0x320 [ 178.322253] cgroup_addrm_files+0x3c5/0xa70 [ 178.326572] ? cgroup_file_write+0x710/0x710 [ 178.330978] ? getrawmonotonic64+0x460/0x460 [ 178.335371] ? kernfs_active+0x92/0x160 [ 178.339330] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 178.344239] ? cgroup_kn_set_ugid+0x2c7/0x370 [ 178.348712] ? cgroup_file_name+0x1d0/0x1d0 [ 178.353025] css_populate_dir+0x340/0x420 [ 178.357158] cgroup_mkdir+0x553/0xfc0 [ 178.360937] ? __lock_is_held+0xb6/0x140 [ 178.364980] ? cgroup_destroy_locked+0x750/0x750 [ 178.369903] ? rcu_read_lock_sched_held+0x108/0x120 [ 178.374899] ? kmem_cache_free+0x258/0x2a0 [ 178.379123] ? set_nlink+0xc1/0x160 [ 178.382738] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 178.387648] ? generic_permission+0x105/0x3c0 [ 178.392126] ? cgroup_destroy_locked+0x750/0x750 [ 178.396864] kernfs_iop_mkdir+0x153/0x1e0 [ 178.400993] vfs_mkdir+0x390/0x600 [ 178.404518] SyS_mkdir+0x220/0x2a0 [ 178.408045] ? SyS_mkdirat+0x2b0/0x2b0 [ 178.411916] ? do_syscall_64+0xb7/0x940 [ 178.415873] ? SyS_mkdirat+0x2b0/0x2b0 [ 178.419750] do_syscall_64+0x281/0x940 [ 178.423618] ? vmalloc_sync_all+0x30/0x30 [ 178.427746] ? _raw_spin_unlock_irq+0x27/0x70 [ 178.432223] ? finish_task_switch+0x1c1/0x7e0 [ 178.436702] ? syscall_return_slowpath+0x550/0x550 [ 178.441614] ? syscall_return_slowpath+0x2ac/0x550 [ 178.446523] ? prepare_exit_to_usermode+0x350/0x350 [ 178.451531] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 178.456878] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 178.461705] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 178.466873] RIP: 0033:0x454e79 2018/03/31 07:26:09 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x1000000000000005, 0xb, 0x401, 0x2}, 0x2c) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/autofs\x00', 0x480000, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000180)={0xffffffffffffff9c}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r0, &(0x7f0000000080), &(0x7f0000000200)}, 0x20) ioctl$sock_SIOCBRDELBR(r2, 0x89a1, &(0x7f0000000040)='irlan0\x00') ioctl$sock_bt_cmtp_CMTPGETCONNINFO(r2, 0x800443d3, &(0x7f0000000080)={{0x6, 0x1f, 0x2, 0x2, 0x2, 0xbc7b}, 0x0, 0xfffffffffffffffc}) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000dc3000)={r0, &(0x7f0000a5a000), &(0x7f0000107000)=""/78}, 0x18) ioctl$sock_inet_tcp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000100)) [ 178.470046] RSP: 002b:00007f2d4ca09c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 178.477736] RAX: ffffffffffffffda RBX: 00007f2d4ca0a6d4 RCX: 0000000000454e79 [ 178.485004] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000020000340 [ 178.492259] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 178.499509] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000013 [ 178.506766] R13: 00000000000003ea R14: 00000000006f7e90 R15: 000000000000000f [ 178.514412] cgroup: cgroup_addrm_files: failed to add cgroup.subtree_control, err=-12 2018/03/31 07:26:09 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@remote, @in6=@mcast1}}, {{}, 0x0, @in6=@dev}}, &(0x7f0000000180)=0xe8) stat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f00000012c0)='./file0\x00', &(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(r1, r0, r1) r2 = syz_open_procfs(0x0, &(0x7f0000001380)='sessionid\x00') ioctl$GIO_UNIMAP(r2, 0x4b66, &(0x7f0000001400)={0x1, &(0x7f00000013c0)=[{}]}) r3 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip6_mr_vif\x00') readv(r3, &(0x7f0000002240)=[{&(0x7f0000000240)=""/4096, 0x1000}], 0x1) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r4) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001880)) r6 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) recvfrom$inet(r2, &(0x7f0000001780)=""/140, 0x8c, 0x20, &(0x7f0000001840)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x10}}, 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000001680)={0x0, 0x98, &(0x7f00000015c0)=[@in={0x2, 0x4e23, @broadcast=0xffffffff}, @in={0x2, 0x4e21, @remote={0xac, 0x14, 0x14, 0xbb}}, @in={0x2, 0x4e21, @remote={0xac, 0x14, 0x14, 0xbb}}, @in={0x2, 0x4e20}, @in={0x2, 0x4e23, @local={0xac, 0x14, 0x14, 0xaa}}, @in6={0xa, 0x4e22, 0x3, @local={0xfe, 0x80, [], 0xaa}}, @in={0x2, 0x4e21, @remote={0xac, 0x14, 0x14, 0xbb}}, @in6={0xa, 0x4e23, 0x3, @dev={0xfe, 0x80, [], 0xc}, 0x100}]}, &(0x7f00000016c0)=0x10) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r5, 0x84, 0x10, &(0x7f0000001700)=@sack_info={r7, 0x8, 0x10001}, 0xc) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) ioctl$BINDER_SET_MAX_THREADS(r6, 0x40046205, 0x2) ioctl$BINDER_SET_CONTEXT_MGR(r6, 0x40046207, 0x0) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000001740)=@sack_info={r7, 0x4, 0xfffffffffffffffe}, 0xc) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f000000ffd0)={0x0, 0x0, &(0x7f000000f000), 0x1, 0x0, &(0x7f00000000c0)='b'}) ioctl$ASHMEM_SET_NAME(r2, 0x41007701, &(0x7f0000001580)='\x00') mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r6, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000040)={0xffffffffffffff38, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000340)={0x60, 0x0, &(0x7f0000000440)=[@free_buffer={0x40086303}, @reply_sg={0x40486312, {{0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000280)=[@fd={0x66642a85}], &(0x7f00000002c0)=[0x0]}, 0xfffffffffffffffb}}, @increfs={0x40046304}], 0x0, 0x0, &(0x7f0000000500)}) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(0xffffffffffffffff, 0x84, 0x74, &(0x7f0000000580)=""/4096, &(0x7f0000000200)=0x1000) sendfile(r3, r3, &(0x7f0000000040)=0x400000, 0x400000ff) 2018/03/31 07:26:09 executing program 3: clone(0x0, &(0x7f0000b6b000), &(0x7f0000744000), &(0x7f0000fef000), &(0x7f0000000080)="7886f18a719df2373d0a4004308aff21c6dfb97f23ffc07a2e59e0d1c6bbdf276527afda398f6870eb0db9ab41ed02e731b029d2bd747827d87bc96ff67d87f3ebf2ecf44a0000000000000000") mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x0, 0x0) ioctl$LOOP_SET_DIRECT_IO(r0, 0x4c08, 0xffffffff) eventfd2(0x0, 0x0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) r2 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_bt_cmtp_CMTPCONNADD(r2, 0x400443c8, &(0x7f0000000200)={r0, 0x8}) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x0, 0x0) ioctl$VHOST_SET_FEATURES(r3, 0x4008af00, &(0x7f0000000380)=0x5008000) open$dir(&(0x7f0000296ff8)='./file0\x00', 0x1ff, 0x0) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000000180)={0x6, &(0x7f0000000140)=[{}, {}, {0x0}, {}, {}, {}]}) ioctl$DRM_IOCTL_UNLOCK(r0, 0x4008642b, &(0x7f00000001c0)={r4, 0x10}) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000240), &(0x7f0000000280)=0x40) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f00000003c0)="3f7beac9650b5ab902e22b4f322c2ec22fec49ba943ff20e4f70738ab3348f7e68727b4c0f8d4ed443ba978bda3b725965af631cce1d4b0f645933d05610ddb75247097098b63b5ba612aea37101704768ff226f01a531d3d8c8983f72a9cfd7d6a884567622e6d48256f7c27fed06a5acf0", 0x3) clock_nanosleep(0x4, 0x0, &(0x7f00000002c0), 0x0) [ 178.628522] binder: 13391:13398 ioctl 40046205 2 returned -22 [ 178.635300] binder: 13398 RLIMIT_NICE not set [ 178.649727] FAULT_INJECTION: forcing a failure. [ 178.649727] name failslab, interval 1, probability 0, space 0, times 0 [ 178.661276] CPU: 0 PID: 13370 Comm: syz-executor7 Not tainted 4.16.0-rc7+ #372 [ 178.668648] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 178.677998] Call Trace: [ 178.680681] dump_stack+0x194/0x24d [ 178.684316] ? arch_local_irq_restore+0x53/0x53 [ 178.688999] should_fail+0x8c0/0xa40 [ 178.692712] ? kstrdup+0x39/0x70 [ 178.696085] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 178.701182] ? cgroup_mkdir+0x553/0xfc0 [ 178.705154] ? vfs_mkdir+0x390/0x600 [ 178.708867] ? SyS_mkdir+0x220/0x2a0 [ 178.712581] ? do_syscall_64+0x281/0x940 [ 178.716643] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 178.722015] ? find_held_lock+0x35/0x1d0 [ 178.726090] ? find_held_lock+0x35/0x1d0 [ 178.730136] ? __lock_is_held+0xb6/0x140 [ 178.734198] ? check_same_owner+0x320/0x320 [ 178.738525] ? rcu_note_context_switch+0x710/0x710 [ 178.743444] ? rcu_read_lock_sched_held+0x108/0x120 [ 178.748448] should_failslab+0xec/0x120 [ 178.752411] kmem_cache_alloc+0x47/0x760 [ 178.756458] ? memcpy+0x45/0x50 [ 178.759731] ? kstrdup+0x59/0x70 [ 178.763100] __kernfs_new_node+0xe2/0x570 [ 178.767247] ? kernfs_dop_revalidate+0x380/0x380 [ 178.772005] ? kasan_check_read+0x11/0x20 [ 178.776139] ? read_word_at_a_time+0x12/0x20 [ 178.780537] ? strscpy+0x186/0x500 [ 178.784085] kernfs_new_node+0x80/0xe0 [ 178.787963] __kernfs_create_file+0x4b/0x320 [ 178.792359] cgroup_addrm_files+0x3c5/0xa70 [ 178.796674] ? cgroup_file_write+0x710/0x710 [ 178.801071] ? getrawmonotonic64+0x460/0x460 [ 178.805470] ? kernfs_active+0x92/0x160 [ 178.809441] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 178.814366] ? cgroup_kn_set_ugid+0x2c7/0x370 [ 178.818848] ? cgroup_file_name+0x1d0/0x1d0 [ 178.823166] css_populate_dir+0x340/0x420 [ 178.827302] cgroup_mkdir+0x553/0xfc0 [ 178.831082] ? __lock_is_held+0xb6/0x140 [ 178.835124] ? cgroup_destroy_locked+0x750/0x750 [ 178.839857] ? rcu_read_lock_sched_held+0x108/0x120 [ 178.844861] ? kmem_cache_free+0x258/0x2a0 [ 178.849083] ? set_nlink+0xc1/0x160 [ 178.852691] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 178.857599] ? generic_permission+0x105/0x3c0 [ 178.862084] ? cgroup_destroy_locked+0x750/0x750 [ 178.866821] kernfs_iop_mkdir+0x153/0x1e0 [ 178.870951] vfs_mkdir+0x390/0x600 [ 178.874484] SyS_mkdir+0x220/0x2a0 [ 178.878023] ? SyS_mkdirat+0x2b0/0x2b0 [ 178.881902] ? do_syscall_64+0xb7/0x940 [ 178.885861] ? SyS_mkdirat+0x2b0/0x2b0 [ 178.889732] do_syscall_64+0x281/0x940 [ 178.893608] ? vmalloc_sync_all+0x30/0x30 [ 178.897746] ? _raw_spin_unlock_irq+0x27/0x70 [ 178.902226] ? finish_task_switch+0x1c1/0x7e0 [ 178.906717] ? syscall_return_slowpath+0x550/0x550 [ 178.911631] ? syscall_return_slowpath+0x2ac/0x550 [ 178.916549] ? prepare_exit_to_usermode+0x350/0x350 [ 178.921556] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 178.926909] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 178.931743] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 178.936920] RIP: 0033:0x454e79 [ 178.940090] RSP: 002b:00007f49041e4c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 178.947793] RAX: ffffffffffffffda RBX: 00007f49041e56d4 RCX: 0000000000454e79 [ 178.955044] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000020000340 [ 178.962310] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 178.969571] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000013 [ 178.976836] R13: 00000000000003ea R14: 00000000006f7e90 R15: 000000000000000d [ 178.984261] cgroup: cgroup_addrm_files: failed to add cgroup.controllers, err=-12 [ 179.423420] binder: 13391:13412 BC_FREE_BUFFER u0000000000000000 no match [ 179.430463] binder: 13391:13412 got reply transaction with no transaction stack [ 179.437950] binder: 13391:13412 transaction failed 29201/-71, size 24-8 line 2763 2018/03/31 07:26:10 executing program 2: clone(0x0, &(0x7f0000000380), &(0x7f0000b02000), &(0x7f00000aaffc), &(0x7f0000002886)) r0 = creat(&(0x7f0000000400)='./file0\x00', 0x0) ioctl$sock_ipx_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000440)={'ip_vti0\x00', {0x4, 0x8, 0x9, "5999a20bdc95"}}) perf_event_open(&(0x7f0000b5a000)={0x4000000002, 0x70, 0x1e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = getpid() r2 = syz_open_procfs(r1, &(0x7f00000000c0)='net/ip_vs_stats_percpu\x00') mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil) epoll_pwait(r2, &(0x7f00000003c0)=[{}, {}, {}, {}], 0x4, 0x9, &(0x7f0000000380)={0x9}, 0x8) sched_setaffinity(r1, 0x8, &(0x7f0000000340)=0x2) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_SET_SERVICE(r2, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0xe8, r3, 0x400, 0x70bd2a, 0x25dfdbff, {0x2}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x492f}, @IPVS_CMD_ATTR_DEST={0x44, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xde3}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xfffffffffffffff9}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x30c}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xc250000000000}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xe046}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xfffffffffa03adb1}]}, @IPVS_CMD_ATTR_DAEMON={0x60, 0x3, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x4}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'eql\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x4}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1=0xe0000001}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8001}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xe46}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6}]}, 0xe8}, 0x1}, 0x4000804) waitid(0x2, r1, &(0x7f0000000140), 0x204000000c, &(0x7f0000000000)) 2018/03/31 07:26:10 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) close(r0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000d36000)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000001f3a)="ad56b6c5820faeb995298992ea54c7be", 0x10) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000001180)='/dev/sequencer2\x00', 0x20840, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r2, 0x800448d2, &(0x7f00000011c0)={0x2, &(0x7f0000001740)=[{}, {}]}) r3 = accept$alg(r0, 0x0, 0x0) getsockopt$inet6_dccp_buf(r3, 0x21, 0xc, &(0x7f00000010c0)=""/117, &(0x7f0000001140)=0x75) sendmsg$alg(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00001c1ff0), 0x0, &(0x7f00002c6000)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) sendmsg$alg(r3, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000001280)=[{&(0x7f0000003080)="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", 0x210}], 0x1}, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000080)=0xc) recvmsg(r3, &(0x7f0000001700)={&(0x7f0000001440)=@in={0x0, 0x0, @remote}, 0x80, &(0x7f00000015c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, &(0x7f0000001600)=""/193, 0xc1}, 0x0) 2018/03/31 07:26:10 executing program 1 (fault-call:6 fault-nth:16): mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) open(&(0x7f00000000c0)='./file0\x00', 0xa0441, 0x80) syz_mount_image$msdos(&(0x7f0000000140)='msdos\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x1, &(0x7f0000000100)=[{&(0x7f0000000480)="9196b107dc9e5c731d56d84afae6a7bf24", 0x11, 0x1f}], 0x0, &(0x7f0000000000)=ANY=[]) rmdir(&(0x7f0000000080)='./file0//ile0\x00') mkdir(&(0x7f0000000340)='./file0//ile0\x00', 0x1) r0 = semget$private(0x0, 0x4, 0x21) semctl$GETPID(r0, 0x1, 0xb, &(0x7f0000000200)=""/154) 2018/03/31 07:26:10 executing program 6: r0 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0x44, 0x4000) ioctl$KVM_SET_MSRS(r0, 0x4008ae89, &(0x7f0000000040)={0x2, 0x0, [{0x286, 0x0, 0x3}, {0x0, 0x0, 0x2}]}) bind$netrom(r0, &(0x7f0000000080)=@ax25={0x3, {"454ae6e3d65c33"}, 0x81}, 0x10) setsockopt$inet6_tcp_buf(r0, 0x6, 0xf, &(0x7f00000000c0)="cdc430ce1d3c9fce80b4f0f94f80156f4e9964a4057b824051a9cee5c82dbcfb1c4aad16d59e49b8477fc946c65ef9f374cd9b56e90bef70f25aacd23a3cec584c16b63ae0da8d3730c127cc41ca1b416dc03614fadeff774e872ec7531c4fccbb69798020939d387cfc5bd036c0", 0x6e) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000140)=0x0) fcntl$setown(r0, 0x8, r1) r2 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x9, 0x0) fcntl$F_SET_FILE_RW_HINT(r2, 0x40e, &(0x7f00000001c0)=0x3) write(r2, &(0x7f0000000200)="7083ff944029cd4027cc2139c5bbbc029650561fe62dcee7e9ce1e02120759f26a4385b191ecb95c619f5ab30d54b80ade6b9c6756df2e52f086", 0x3a) getdents64(r0, &(0x7f0000000240)=""/4096, 0x1000) ioctl$KVM_SET_MSRS(r0, 0x4008ae89, &(0x7f0000001240)={0x1, 0x0, [{0x1db, 0x0, 0x1f}]}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000001280)={0x80, 0x8}) r3 = creat(&(0x7f00000012c0)='./file0\x00', 0x6a) connect$bt_l2cap(r3, &(0x7f0000001300)={0x1f, 0xfff, {0x4, 0xd21, 0x80, 0x5, 0x1}, 0x6, 0x9cb8}, 0xe) getresgid(&(0x7f0000001340), &(0x7f0000001380), &(0x7f00000013c0)) pivot_root(&(0x7f0000001400)='./file0\x00', &(0x7f0000001440)='./file0\x00') r4 = dup3(r2, r0, 0x80000) tee(r2, r4, 0x77, 0x3) bind(r3, &(0x7f0000001480)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80) clock_nanosleep(0x2, 0x0, &(0x7f0000001500), &(0x7f0000001540)) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001580)='/dev/hwrng\x00', 0x40000, 0x0) connect$netrom(r4, &(0x7f00000015c0)=@full={{0x3, {"eda7221b204cd1"}, 0x3000000}, [{"712ad8277ce841"}, {"a2ec10349b81e2"}, {"15c87cf56012fe"}, {"7d8f2531afd5c3"}, {"7e88ca8b1bad85"}, {"af28a83bafce95"}, {"9a728d98f20c3e"}, {"6cde70a1b43c38"}]}, 0x48) ioctl$DRM_IOCTL_INFO_BUFS(r5, 0xc0106418, &(0x7f0000001640)={0x401, 0x1, 0x3f, 0x80, 0x9, 0x6}) dup3(r4, r3, 0x80000) ioctl$KVM_XEN_HVM_CONFIG(r5, 0x4038ae7a, &(0x7f00000017c0)={0x7, 0xa55, &(0x7f0000001680)="913a907025e70b5f1b175bc43dcd704f3f79a8ab77946a503ed4384b7bbeb2e2d6c202bed4ea9b6a6305124f4c941ec65a2f1cfa9a04eb9628071a1126fd30171a775c967c4be54605f0f6aff6782b39745a6a09a6c47cceb2f3f84f198e15b7417663a779947caac7345a4be273", &(0x7f0000001700)="511d70e9c8aefa245870a127aeaab095bc31ac5d5689b4bc1480dc2f717198b3b5f183a659fd371b6ec3861661b717729bfd4ac8f066bc09d7aad4d283f57fd539c9d200f80631f6912c7cc2edd5df95abb0c8805d72927173845ed36505e947f14a349aa9833642702bfeb304f39fee2aa7014b434dbd66448b5763d8de535889e31c", 0x6e, 0x83}) ioctl$KVM_TRANSLATE(r5, 0xc018ae85, &(0x7f0000001800)={0x6000, 0x0, 0x6, 0x1, 0x5}) accept$packet(r0, &(0x7f0000001900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000001940)=0x14) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000001980)={r6, 0x1, 0x6, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0x10) syz_emit_ethernet(0x25c, &(0x7f00000019c0)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @empty, [{[{0x9100, 0xa2, 0xa08, 0x3}], {0x8100, 0x9, 0x9, 0x2}}], {@ipv6={0x86dd, {0x10001, 0x6, "74c6ba", 0x21e, 0x33, 0x1b8, @loopback={0x0, 0x1}, @mcast2={0xff, 0x2, [], 0x1}, {[@dstopts={0x2f, 0x5, [], [@pad1={0x0, 0x1}, @pad1={0x0, 0x1}, @calipso={0x7, 0x20, {0x16, 0x6, 0x2, 0x401, [0x3059, 0x7fff, 0x8000000000000]}}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}]}, @dstopts={0xaf, 0xa, [], [@calipso={0x7, 0x10, {0xffffffff, 0x2, 0x4c74, 0xfffffffffffffbf8, [0xfff]}}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x9}, @ra={0x5, 0x2, 0xa3}, @pad1={0x0, 0x1}, @pad1={0x0, 0x1}, @calipso={0x7, 0x28, {0x48c, 0x8, 0x2, 0x9, [0x80000001, 0x672d8c11, 0x0, 0xffffffff]}}, @jumbo={0xc2, 0x4, 0x6}, @enc_lim={0x4, 0x1, 0x3926}]}, @srh={0x2c, 0x4, 0x4, 0x2, 0x4, 0x9, 0x7, [@mcast2={0xff, 0x2, [], 0x1}, @remote={0xfe, 0x80, [], 0xbb}]}, @srh={0x3b, 0xc, 0x4, 0x6, 0x200, 0x3, 0x401, [@ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}, @loopback={0x0, 0x1}, @mcast1={0xff, 0x1, [], 0x1}, @remote={0xfe, 0x80, [], 0xbb}, @mcast2={0xff, 0x2, [], 0x1}, @dev={0xfe, 0x80, [], 0x11}]}, @hopopts={0x6c, 0x3, [], [@calipso={0x7, 0x18, {0x1, 0x4, 0x1, 0x6f, [0x5, 0x8001]}}]}, @hopopts={0x5e, 0x2, [], [@enc_lim={0x4, 0x1, 0x2}, @hao={0xc9, 0x10, @local={0xfe, 0x80, [], 0xaa}}]}, @routing={0x0, 0x6, 0x0, 0x6, 0x0, [@dev={0xfe, 0x80, [], 0x17}, @local={0xfe, 0x80, [], 0xaa}, @loopback={0x0, 0x1}]}, @hopopts={0x33, 0x0, [], [@jumbo={0xc2, 0x4, 0x800}]}], @dccp={{0x4e20, 0x4e23, 0x4, 0x1, 0x3, 0x0, 0x0, 0x1, 0x3, "13c290", 0x2cf8, "b508f5"}, "6be63595b03bdd95c8ce3d43811ff9366279112ba51bc1bc2383b5d29c9452c637f61e5de6b3aa2af5bdfecb1c7dc3887fe702654579b975de13c80a8ee8d68c4973c9bf20ba4dcb61c0a244fe2b6d94bf328e7bd14b"}}}}}}, &(0x7f0000001c40)={0x1, 0x2, [0x14b, 0x2a9, 0xd65, 0xd5b]}) setsockopt$RDS_GET_MR(r4, 0x114, 0x2, &(0x7f0000001d00)={{&(0x7f0000001c80)=""/42, 0x2a}, &(0x7f0000001cc0), 0x73}, 0x20) 2018/03/31 07:26:10 executing program 0: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500)='/dev/vcs\x00', 0x2, 0x0) ioctl$VT_OPENQRY(r0, 0x5600, &(0x7f0000000540)) r1 = perf_event_open(&(0x7f0000271000)={0x0, 0x70, 0x49, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) r3 = dup3(0xffffffffffffffff, r2, 0x0) getsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000240), &(0x7f00000004c0)=0x4) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cuse\x00', 0x101000, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r5) rmdir(&(0x7f0000000080)='./file0\x00') r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x200000, 0x0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000640)=ANY=[@ANYRES32=0x0, @ANYBLOB="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"], &(0x7f0000000180)=0x100) setsockopt$inet_sctp_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f00000003c0)=ANY=[@ANYRES32=r7, @ANYBLOB="00004a001996ed12c3cb86a1b0a8065173426b88d318250866239cbe421b70cd03eb44a0a7b73d9348b24a597f829ceee8cb4ae07b9f991c49bc8f8562cd4c9f098569fb2ea6e2030000002e47f2"], 0x2) r8 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) socket$inet(0x2, 0x80004, 0x200) ioctl$KVM_SET_IRQCHIP(r8, 0x8208ae63, &(0x7f0000000000)=@pic={0x1, 0x8001, 0x57, 0x256, 0x73, 0x3, 0x0, 0x4, 0x0, 0x0, 0x2, 0x0, 0x3, 0x77, 0x0, 0x6}) ioctl$KVM_SET_IRQCHIP(r8, 0x8208ae63, &(0x7f0000002ff0)=@ioapic={0x2, 0x0, 0x0, 0x0, 0x0, [{0xfffffffffffffffb}]}) ioctl$KVM_IRQ_LINE(r8, 0x4008ae61, &(0x7f0000000280)={0x0, 0x3}) ioctl$DRM_IOCTL_RM_MAP(r4, 0x4028641b, &(0x7f0000000140)={&(0x7f0000ffb000/0x3000)=nil, 0x46a9, 0x4, 0x4, &(0x7f0000ffc000/0x3000)=nil, 0x1000}) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0) fchdir(r9) ioctl$KVM_ASSIGN_DEV_IRQ(r3, 0x4040ae70, &(0x7f0000000100)={0xffffffff00000000, 0x0, 0x5, 0x200}) creat(&(0x7f0000000080)='./file0\x00', 0x0) syz_open_dev$admmidi(&(0x7f0000000080)='/dev/admmidi#\x00', 0x1, 0x0) pipe(&(0x7f0000000400)) 2018/03/31 07:26:10 executing program 3: perf_event_open(&(0x7f0000b5a000)={0x4000000002, 0x23c, 0x1e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_GET_NR_MMU_PAGES(r0, 0xae45, 0x80) r1 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x1, 0x20000) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r1, 0x81785501, &(0x7f00000003c0)=""/4096) 2018/03/31 07:26:10 executing program 7 (fault-call:7 fault-nth:14): mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) open(&(0x7f00000000c0)='./file0\x00', 0xa0441, 0x80) syz_mount_image$msdos(&(0x7f0000000140)='msdos\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x1, &(0x7f0000000100)=[{&(0x7f0000000480)="9196b107dc9e5c731d56d84afae6a7bf24", 0x11, 0x1f}], 0x0, &(0x7f0000000000)=ANY=[]) mkdir(&(0x7f0000000180)='./file0//ile0\x00', 0x112) rmdir(&(0x7f0000000080)='./file0//ile0\x00') mkdir(&(0x7f0000000340)='./file0//ile0\x00', 0x1) r0 = semget$private(0x0, 0x4, 0x21) semctl$GETPID(r0, 0x1, 0xb, &(0x7f0000000200)=""/154) 2018/03/31 07:26:10 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x100000001, 0x0, 0x0, 0x0, 0xffff800000000001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, &(0x7f0000560000), &(0x7f0000489000), &(0x7f0000000ffc), &(0x7f000067c000)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000140)={0x0, 0x2, 0x6, [0xd8d1, 0x627, 0xffffffff, 0x800, 0x3, 0x1]}, &(0x7f0000000200)=0x14) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000240)={r3, 0x8737, 0xfffffffffffffffe, 0x7f}, &(0x7f0000000280)=0x10) ioctl$DRM_IOCTL_GET_STATS(r2, 0x80f86406, &(0x7f00000002c0)=""/103) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x40044581, &(0x7f00000001c0)=0x1) rmdir(&(0x7f00000000c0)='./file0\x00') syz_fuseblk_mount(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 179.587008] binder: 13391:13416 ioctl 40046205 2 returned -22 [ 179.596406] binder: BINDER_SET_CONTEXT_MGR already set [ 179.601826] binder: 13391:13412 ioctl 40046207 0 returned -16 [ 179.605458] binder_alloc: binder_alloc_mmap_handler: 13391 2000c000-2000e000 already mapped failed -16 [ 179.625083] binder: undelivered TRANSACTION_ERROR: 29201 [ 179.673298] FAULT_INJECTION: forcing a failure. [ 179.673298] name failslab, interval 1, probability 0, space 0, times 0 [ 179.684616] CPU: 0 PID: 13433 Comm: syz-executor1 Not tainted 4.16.0-rc7+ #372 [ 179.691972] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 179.701330] Call Trace: [ 179.703920] dump_stack+0x194/0x24d [ 179.707549] ? arch_local_irq_restore+0x53/0x53 [ 179.712228] should_fail+0x8c0/0xa40 [ 179.715957] ? fault_create_debugfs_attr+0x1f0/0x1f0 2018/03/31 07:26:10 executing program 6: socket$netlink(0x10, 0x3, 0xd) mmap(&(0x7f0000000000/0xb000)=nil, 0xb000, 0x2, 0x100000004031, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1003, 0x1000000007ff) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x9, 0x3, 0x1e0, 0x0, 0xffffffff, 0xffffffff, 0x108, 0xffffffff, 0x198, 0xffffffff, 0xffffffff, 0x198, 0xffffffff, 0x3, &(0x7f00000002c0), {[{{@uncond, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0x90}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x240) 2018/03/31 07:26:10 executing program 2: r0 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0xfffffffffffffffe, 0x103001) accept4$unix(r0, 0x0, &(0x7f0000000040), 0x80800) r1 = socket(0xa, 0x5, 0x0) getsockopt$inet6_mreq(r1, 0x29, 0x19, &(0x7f00000000c0)={@loopback}, &(0x7f0000000080)=0x1bb) 2018/03/31 07:26:10 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x0) read(0xffffffffffffffff, &(0x7f0000000000)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000200)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ashmem\x00', 0x40000, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffff9c, 0x8933, &(0x7f00000035c0)={'nr0\x00'}) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x0, 0x0, 0xffefffffffffffff}}) ioctl$SNDRV_TIMER_IOCTL_STATUS(r1, 0x80605414, &(0x7f00000004c0)=""/252) finit_module(r1, &(0x7f0000000080)='/dev/snd/timer\x00', 0x3) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000600)={0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f00000005c0)) readv(r1, &(0x7f0000000480)=[{&(0x7f0000000180)=""/212}, {&(0x7f0000000280)=""/176}, {&(0x7f0000000340)=""/154}, {&(0x7f0000000400)=""/88}], 0x10000000000003e1) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000003600)={@empty, 0x2e}) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={@loopback=0x7f000001, @remote={0xac, 0x14, 0x14, 0xbb}, @broadcast=0xffffffff}, 0xc) r2 = memfd_create(&(0x7f0000000680)='@\x00', 0x4) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fchmod(r2, 0x0) r3 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f00004c1000)}) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) socket$unix(0x1, 0x1, 0x0) r4 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_int(r4, 0x29, 0xd1, &(0x7f00000000c0), 0x4) setsockopt$inet6_int(r4, 0x29, 0xc8, &(0x7f0000000000), 0x4) socket$vsock_dgram(0x28, 0x2, 0x0) setsockopt$inet6_MRT6_ADD_MIF(r4, 0x29, 0xca, &(0x7f0000000040)={0x1, 0x1, 0x100000001, 0x158, 0xfffffffffffffe01}, 0xc) accept4$llc(r2, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f00000006c0)=0x10, 0x800) [ 179.721069] ? rb_first_postorder+0xa0/0xa0 [ 179.725387] ? __mutex_lock+0x16f/0x1a80 [ 179.729447] ? trace_event_raw_event_lock+0x340/0x340 [ 179.734640] ? trace_hardirqs_off+0x10/0x10 [ 179.738959] ? find_held_lock+0x35/0x1d0 [ 179.743025] ? __lock_is_held+0xb6/0x140 [ 179.747101] ? check_same_owner+0x320/0x320 [ 179.751422] ? lock_downgrade+0x980/0x980 [ 179.755570] ? rcu_note_context_switch+0x710/0x710 [ 179.760507] should_failslab+0xec/0x120 [ 179.764478] __kmalloc_track_caller+0x5f/0x760 [ 179.769057] ? idr_alloc_cyclic+0x1d6/0x320 [ 179.773380] ? kstrdup_const+0x39/0x50 [ 179.777265] ? __mutex_unlock_slowpath+0xe9/0xac0 [ 179.782109] kstrdup+0x39/0x70 [ 179.785296] kstrdup_const+0x39/0x50 [ 179.789013] __kernfs_new_node+0xa2/0x570 [ 179.793155] ? kernfs_dop_revalidate+0x380/0x380 [ 179.797896] ? kasan_check_read+0x11/0x20 [ 179.802026] ? read_word_at_a_time+0x12/0x20 [ 179.806500] ? strscpy+0x186/0x500 [ 179.810088] kernfs_new_node+0x80/0xe0 [ 179.813967] __kernfs_create_file+0x4b/0x320 [ 179.818362] cgroup_addrm_files+0x3c5/0xa70 [ 179.822669] ? cgroup_file_write+0x710/0x710 [ 179.827064] ? getrawmonotonic64+0x460/0x460 [ 179.831456] ? kernfs_active+0x92/0x160 [ 179.835418] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 179.840326] ? cgroup_kn_set_ugid+0x2c7/0x370 [ 179.844798] ? cgroup_file_name+0x1d0/0x1d0 [ 179.849106] css_populate_dir+0x340/0x420 [ 179.853237] cgroup_mkdir+0x553/0xfc0 [ 179.857020] ? __lock_is_held+0xb6/0x140 [ 179.861068] ? cgroup_destroy_locked+0x750/0x750 [ 179.865892] ? rcu_read_lock_sched_held+0x108/0x120 [ 179.870885] ? kmem_cache_free+0x258/0x2a0 [ 179.875098] ? set_nlink+0xc1/0x160 [ 179.878705] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 179.883612] ? generic_permission+0x105/0x3c0 [ 179.888087] ? cgroup_destroy_locked+0x750/0x750 [ 179.892823] kernfs_iop_mkdir+0x153/0x1e0 [ 179.896951] vfs_mkdir+0x390/0x600 [ 179.900478] SyS_mkdir+0x220/0x2a0 [ 179.903998] ? SyS_mkdirat+0x2b0/0x2b0 [ 179.907870] ? do_syscall_64+0xb7/0x940 [ 179.911826] ? SyS_mkdirat+0x2b0/0x2b0 [ 179.915691] do_syscall_64+0x281/0x940 [ 179.919555] ? vmalloc_sync_all+0x30/0x30 [ 179.923680] ? _raw_spin_unlock_irq+0x27/0x70 [ 179.928156] ? finish_task_switch+0x1c1/0x7e0 [ 179.932629] ? syscall_return_slowpath+0x550/0x550 [ 179.937536] ? syscall_return_slowpath+0x2ac/0x550 [ 179.942446] ? prepare_exit_to_usermode+0x350/0x350 [ 179.947444] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 179.952793] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 179.957619] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 179.962786] RIP: 0033:0x454e79 [ 179.965954] RSP: 002b:00007f2d4ca09c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 2018/03/31 07:26:10 executing program 3: accept4$inet(0xffffffffffffff9c, 0x0, &(0x7f0000000080), 0x800) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f0000000400)={"677261f3cb7030c30c282a416158d200", 0x9}) syz_open_dev$midi(&(0x7f0000000100)='/dev/midi#\x00', 0x20, 0x4000) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000680)={'nat\x00', 0xc6, "ce6d810e80cdf21f4abb6553bf0a29ae24256216d94dd812139d5d425f3508e319937cce319ac527a9aba521f276c6fdc6b62ca8bf0d268ffa495a1e2f2c8037c8627ab75822745f0de305d2787fff1cc231100296e54231eec3536d21c751554952c12f78dd190d15a62f19014f8775355daed65bae11054ac71aafa0dad369c22b7b850efc1e8d5f3854ed9d481c97d8b292f29a931d783a2a5c20d5264e30315bcbf63c5eecbab1f0118afef3986a5f140882c07330e9deb2f708b8f15a7f65639e874961"}, &(0x7f0000000140)=0xea) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000fcbff7)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x178, 0x608200) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000240)={{{@in=@rand_addr, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@local}}, &(0x7f0000000440)=0xe8) ioctl$sock_inet6_SIOCDELRT(r2, 0x890c, &(0x7f00000004c0)={@loopback={0x0, 0x1}, @remote={0xfe, 0x80, [], 0xbb}, @mcast2={0xff, 0x2, [], 0x1}, 0x5, 0x2670, 0x1, 0x400, 0x7, 0x100003, r3}) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r1, 0x4008ae48, &(0x7f0000000000)=0x4000) fcntl$setpipe(r0, 0x407, 0x400000000003) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000540)={0x0, 0x20, 0xdbdf, 0x9, 0x1, 0x0, 0x3, 0x9, {0x0, @in={{0x2, 0x4e22, @local={0xac, 0x14, 0x14, 0xaa}}}, 0x10001, 0x9, 0x6, 0x20, 0x80}}, &(0x7f0000000600)=0xb0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000640)={r4}, 0x8) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x141241, 0x0) writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000000)="0bf5430f000319", 0x7}], 0x1) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r2, 0x84, 0x1e, &(0x7f00000001c0), &(0x7f0000000200)=0x4) syz_open_dev$admmidi(&(0x7f0000000340)='/dev/admmidi#\x00', 0xfffffffffffffff9, 0x8c00) 2018/03/31 07:26:10 executing program 1 (fault-call:6 fault-nth:17): mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) open(&(0x7f00000000c0)='./file0\x00', 0xa0441, 0x80) syz_mount_image$msdos(&(0x7f0000000140)='msdos\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x1, &(0x7f0000000100)=[{&(0x7f0000000480)="9196b107dc9e5c731d56d84afae6a7bf24", 0x11, 0x1f}], 0x0, &(0x7f0000000000)=ANY=[]) rmdir(&(0x7f0000000080)='./file0//ile0\x00') mkdir(&(0x7f0000000340)='./file0//ile0\x00', 0x1) r0 = semget$private(0x0, 0x4, 0x21) semctl$GETPID(r0, 0x1, 0xb, &(0x7f0000000200)=""/154) [ 179.973647] RAX: ffffffffffffffda RBX: 00007f2d4ca0a6d4 RCX: 0000000000454e79 [ 179.980893] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000020000340 [ 179.988140] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 179.995388] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000013 [ 180.002635] R13: 00000000000003ea R14: 00000000006f7e90 R15: 0000000000000010 [ 180.010200] cgroup: cgroup_addrm_files: failed to add cgroup.events, err=-12 [ 180.059685] FAULT_INJECTION: forcing a failure. [ 180.059685] name failslab, interval 1, probability 0, space 0, times 0 [ 180.070960] CPU: 1 PID: 13434 Comm: syz-executor7 Not tainted 4.16.0-rc7+ #372 2018/03/31 07:26:10 executing program 2: perf_event_open(&(0x7f000001d000)={0x200000002, 0x78, 0xc568, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000010, 0x2, 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x200000, 0x0) ioctl$TIOCOUTQ(r1, 0x5411, &(0x7f0000000080)) write(r0, &(0x7f0000000100)="2400000026007f8b15ae58baf63fd64c000000000000007701000000ff01001038c18c00", 0x24) ioctl$KVM_ASSIGN_SET_INTX_MASK(r0, 0x4040aea4, &(0x7f0000000340)={0x2}) [ 180.070968] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 2018/03/31 07:26:10 executing program 3: socketpair$inet(0x2, 0x3, 0x2, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000580)=0x5, 0x4) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/enforce\x00', 0x20202, 0x0) fallocate(r1, 0x0, 0x4219e1, 0x80009) init_module(&(0x7f0000002880)='ext2\x00', 0xfffffffffffffc7e, &(0x7f0000000500)='journal_path') syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') keyctl$session_to_parent(0x12) sendmsg$IPVS_CMD_GET_INFO(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="14000000fe4d38920aa906aea495cd71ce53128d334e0dfb4c89acfc3af9f610c4d16757df7bdfc7c7f994d8095ea20ae491057ba16e07b721999fe67920631c44e969caf19b2ed3cb55329e4f28dc0972ccd9af844fffa64cc108208e7e2b8ccfeb635579cd4953c511aa30e46e22bc11d513225b73969647c7fb54323e33a8d891ce607e2868d0b9433b331111ac403a11d667238c306114756ff3e78087cf2342779eea90bbfdf212129bc1c8b8c75181fed4d339d8f5992810a1ab676c6bfdc614618a1feed9f3b9e8180100a9d1fef3db592260db78f2fbfc744adfd207f1ac6fafe05151f2", @ANYBLOB="00042dbd7000fbdbdf250f1000006289683150ae59565d3d078f2ff472da3216"], 0x2}, 0x1, 0x0, 0x0, 0x80}, 0x801) pwritev(r1, &(0x7f0000000000)=[{&(0x7f00000000c0)='h', 0x1}], 0x1, 0x0) fallocate(r1, 0x3, 0x0, 0x4c02) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rfkill\x00', 0x111040, 0x0) r3 = dup(r1) ioctl$KVM_IRQ_LINE(r3, 0x4008ae61, &(0x7f0000000a80)={0xdd, 0x401}) syz_mount_image$hfsplus(&(0x7f0000000340)='hfsplus\x00', &(0x7f0000000380)='./file0/file0\x00', 0x5, 0x3, &(0x7f0000000880)=[{&(0x7f00000003c0)="69e9f0320ce7f73a5821eaf7ab2cca1518a374be3bb20a6d913c90a33aba5815f2d7a3394ce09ab17968b2161143bbd9e2b9f2a97c4aae5a176e614bc4c962474a320a2bd4ecc6a9e97a222343749217d22b520cc3bff29930285a7d695fdfe031c74f5873f75c2e344224b3ac3cebef9c3660b6f6085fd46f23f8fdb2bbc6821bee8d389ccf056444a299af6cbed1aaa0acf1c1a99b01253441e23964767fcd3dc73ab8de0b96983432e62959b9e88721ce2cff94353f374aa959baac7865312e851f96804f0d17596ca663640832", 0xcf, 0x8}, {&(0x7f0000000640)="d345008d6a954ff6123000430581f9508e470fb9d96f53070898fd0b8759a25a982efc2a8a40b8cfec695efdc97ea33899844e5d81b00f61510258d68e2150fd15734deea6bc7c5aceff4e1892aa03e4d8feab8259cc49005b052e4845599a01b6fb58", 0x63, 0x9}, {&(0x7f00000007c0)="940920858d2d3c973b27a508c03990e76f410d5150d1afeaf1788db374d6e0885ee0d15c2331c4cbc1563fac578a54c08b2d655bf927bf17420d949360b6ef11f47384123e1abc63f867b1ad50b7a02ac6c37562299736852dc64398808dab16b8edac7c08604c688e85b80633200d5b7e6e19217baec9be004d367cbdbb8e377934e78124396cc5a74a9e0ae95730663a8887d4db2102ceb31ac4e75592218e984c8615b258d4a06cadd9b6718255f057659bcfed07d3b8be", 0xb9, 0x401}], 0x10000, &(0x7f0000000900)=ANY=[]) syz_mount_image$ext4(&(0x7f0000000280)='ext2\x00', &(0x7f00000002c0)='./file0\x00', 0x1, 0x2, &(0x7f00000026c0)=[{&(0x7f0000000300)="175e24a507b37a9e00d081c0dc6b2b2c9838d2a2dbf88d1eb703afde9092c28710d085398e00b0", 0x27, 0x9}, {&(0x7f0000002640)="61f431ed1a840da0d6c8cf9fda084e676a48378da318e158742f13738eae8b84a6ad4a0020bf3ae351b4517a5c1a5063353d52ab1cf18a904cc96d54fa11e41b", 0x40, 0x4}], 0x1000000, &(0x7f0000002ac0)=ANY=[]) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f0000000080)={0x100000, 0xf000, 0x2, 0xffff, 0x9}) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0x5}, &(0x7f00000027c0)=0x8) ioctl$sock_bt_cmtp_CMTPCONNADD(r2, 0x400443c8, &(0x7f0000000ac0)={r1, 0x60a}) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f0000000940)={r4, @in={{0x2, 0x4e20, @remote={0xac, 0x14, 0x14, 0xbb}}}}, &(0x7f00000004c0)=0x84) getsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000a40)=@assoc_value={r4}, &(0x7f0000000a00)=0x354) 2018/03/31 07:26:10 executing program 6: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0xfffffffffffffffe, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000fe1fef)='/selinux/enforce\x00', 0x200001, 0x0) getsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0xc, 0x10061636}, &(0x7f00000000c0)=0x6) bpf$BPF_PROG_QUERY(0x10, &(0x7f00005a4000)={r2, 0x0, 0x1, 0x1, &(0x7f00003ed000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa}, 0x20) r4 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setlease(r4, 0x400, 0x3) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f0000f19000), &(0x7f0000074000)=0x4) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f000033a000)=@assoc_value={r3, 0x20}, 0x8) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r2, 0x84, 0x78, &(0x7f0000a1fffc)=r3, 0x4) ioctl$SNDRV_CTL_IOCTL_PVERSION(r2, 0x80045500, &(0x7f00000001c0)=""/202) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$DRM_IOCTL_RES_CTX(r2, 0xc0086426, &(0x7f00001f8000)={0x2378, &(0x7f00006b6000)=[{}, {}, {0x0}, {}, {}]}) getsockopt$bt_sco_SCO_CONNINFO(r2, 0x11, 0x2, &(0x7f0000245000)=""/21, &(0x7f0000c54ffc)=0x15) ioctl$DRM_IOCTL_LOCK(r2, 0x4008642a, &(0x7f0000516000)={r6, 0x19}) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000080)={r3, 0x3}, 0x8) r7 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000ee7000)='/dev/rfkill\x00', 0x200000, 0x0) sysinfo(&(0x7f0000ba8000)=""/218) setsockopt$netrom_NETROM_N2(r7, 0x103, 0x3, &(0x7f0000000040)=0x7, 0x4) getpeername$unix(r7, &(0x7f0000234ff8)=@abs, &(0x7f0000428ffc)=0x8) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r7, 0x84, 0x8, &(0x7f00002c5ffc)=0x80, 0x4) socket$can_bcm(0x1d, 0x2, 0x2) ioctl$DRM_IOCTL_MAP_BUFS(r1, 0xc0186419, &(0x7f00000014c0)={0x2, &(0x7f0000000300)=""/174, &(0x7f0000000100)=[{0x8001, 0xf0, 0x8, &(0x7f00000003c0)=""/240}, {0x3, 0x1000, 0x1f, &(0x7f00000004c0)=""/4096}]}) r8 = openat$vcs(0xffffffffffffff9c, &(0x7f00005d9ff7)='/dev/vcs\x00', 0x4000, 0x0) setsockopt$inet6_int(r5, 0x29, 0xc8, &(0x7f00008d6000), 0x4) setsockopt$inet6_MRT6_ADD_MIF(r5, 0x29, 0xca, &(0x7f0000300ff4)={0x0, 0x0, 0x0, 0x6}, 0xa84cb7351995539) setsockopt$inet6_int(r8, 0x29, 0xc9, &(0x7f0000001540)=0x4, 0x4) 2018/03/31 07:26:10 executing program 1 (fault-call:6 fault-nth:18): mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) open(&(0x7f00000000c0)='./file0\x00', 0xa0441, 0x80) syz_mount_image$msdos(&(0x7f0000000140)='msdos\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x1, &(0x7f0000000100)=[{&(0x7f0000000480)="9196b107dc9e5c731d56d84afae6a7bf24", 0x11, 0x1f}], 0x0, &(0x7f0000000000)=ANY=[]) rmdir(&(0x7f0000000080)='./file0//ile0\x00') mkdir(&(0x7f0000000340)='./file0//ile0\x00', 0x1) r0 = semget$private(0x0, 0x4, 0x21) semctl$GETPID(r0, 0x1, 0xb, &(0x7f0000000200)=""/154) [ 180.070972] Call Trace: [ 180.070988] dump_stack+0x194/0x24d 2018/03/31 07:26:10 executing program 7 (fault-call:7 fault-nth:15): mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) open(&(0x7f00000000c0)='./file0\x00', 0xa0441, 0x80) syz_mount_image$msdos(&(0x7f0000000140)='msdos\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x1, &(0x7f0000000100)=[{&(0x7f0000000480)="9196b107dc9e5c731d56d84afae6a7bf24", 0x11, 0x1f}], 0x0, &(0x7f0000000000)=ANY=[]) mkdir(&(0x7f0000000180)='./file0//ile0\x00', 0x112) rmdir(&(0x7f0000000080)='./file0//ile0\x00') mkdir(&(0x7f0000000340)='./file0//ile0\x00', 0x1) r0 = semget$private(0x0, 0x4, 0x21) semctl$GETPID(r0, 0x1, 0xb, &(0x7f0000000200)=""/154) [ 180.071006] ? arch_local_irq_restore+0x53/0x53 [ 180.071027] should_fail+0x8c0/0xa40 [ 180.071040] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 180.071053] ? rb_first_postorder+0xa0/0xa0 [ 180.071063] ? __mutex_lock+0x16f/0x1a80 [ 180.071073] ? save_stack+0x43/0xd0 [ 180.071080] ? kasan_kmalloc+0xad/0xe0 [ 180.071090] ? trace_hardirqs_off+0x10/0x10 [ 180.071103] ? find_held_lock+0x35/0x1d0 [ 180.071117] ? __lock_is_held+0xb6/0x140 [ 180.071136] ? check_same_owner+0x320/0x320 [ 180.071144] ? lock_downgrade+0x980/0x980 [ 180.071155] ? rcu_note_context_switch+0x710/0x710 [ 180.071170] should_failslab+0xec/0x120 [ 180.071181] __kmalloc_track_caller+0x5f/0x760 [ 180.071192] ? idr_alloc_cyclic+0x1d6/0x320 [ 180.071203] ? kstrdup_const+0x39/0x50 [ 180.071213] ? __mutex_unlock_slowpath+0xe9/0xac0 [ 180.071224] kstrdup+0x39/0x70 [ 180.071234] kstrdup_const+0x39/0x50 [ 180.071244] __kernfs_new_node+0xa2/0x570 [ 180.071255] ? kernfs_dop_revalidate+0x380/0x380 [ 180.071267] ? kasan_check_read+0x11/0x20 [ 180.071276] ? read_word_at_a_time+0x12/0x20 [ 180.071285] ? strscpy+0x186/0x500 [ 180.071302] kernfs_new_node+0x80/0xe0 [ 180.071314] __kernfs_create_file+0x4b/0x320 [ 180.071327] cgroup_addrm_files+0x3c5/0xa70 [ 180.071344] ? cgroup_file_write+0x710/0x710 [ 180.071359] ? getrawmonotonic64+0x460/0x460 [ 180.071371] ? kernfs_active+0x92/0x160 [ 180.071384] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 180.071393] ? cgroup_kn_set_ugid+0x2c7/0x370 [ 180.071402] ? cgroup_file_name+0x1d0/0x1d0 [ 180.071417] css_populate_dir+0x340/0x420 [ 180.071429] cgroup_mkdir+0x553/0xfc0 [ 180.071437] ? __lock_is_held+0xb6/0x140 [ 180.071451] ? cgroup_destroy_locked+0x750/0x750 [ 180.071469] ? rcu_read_lock_sched_held+0x108/0x120 [ 180.071478] ? kmem_cache_free+0x258/0x2a0 [ 180.071493] ? set_nlink+0xc1/0x160 [ 180.071508] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 180.071521] ? generic_permission+0x105/0x3c0 [ 180.071532] ? cgroup_destroy_locked+0x750/0x750 [ 180.071543] kernfs_iop_mkdir+0x153/0x1e0 [ 180.071555] vfs_mkdir+0x390/0x600 [ 180.071568] SyS_mkdir+0x220/0x2a0 [ 180.071580] ? SyS_mkdirat+0x2b0/0x2b0 [ 180.071592] ? do_syscall_64+0xb7/0x940 [ 180.071603] ? SyS_mkdirat+0x2b0/0x2b0 [ 180.071614] do_syscall_64+0x281/0x940 [ 180.071625] ? vmalloc_sync_all+0x30/0x30 [ 180.071636] ? _raw_spin_unlock_irq+0x27/0x70 [ 180.071647] ? finish_task_switch+0x1c1/0x7e0 [ 180.071657] ? syscall_return_slowpath+0x550/0x550 [ 180.071669] ? syscall_return_slowpath+0x2ac/0x550 [ 180.071680] ? prepare_exit_to_usermode+0x350/0x350 [ 180.071692] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 180.071706] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 180.071722] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 180.071730] RIP: 0033:0x454e79 [ 180.071736] RSP: 002b:00007f49041e4c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 180.071746] RAX: ffffffffffffffda RBX: 00007f49041e56d4 RCX: 0000000000454e79 [ 180.071753] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000020000340 [ 180.071758] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 180.071764] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000013 [ 180.071769] R13: 00000000000003ea R14: 00000000006f7e90 R15: 000000000000000e [ 180.071834] cgroup: cgroup_addrm_files: failed to add cgroup.subtree_control, err=-12 [ 180.188341] FAULT_INJECTION: forcing a failure. [ 180.188341] name failslab, interval 1, probability 0, space 0, times 0 [ 180.188356] CPU: 0 PID: 13450 Comm: syz-executor1 Not tainted 4.16.0-rc7+ #372 [ 180.188363] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 180.188367] Call Trace: [ 180.188382] dump_stack+0x194/0x24d [ 180.188395] ? arch_local_irq_restore+0x53/0x53 [ 180.188416] should_fail+0x8c0/0xa40 [ 180.188428] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 180.188440] ? rb_first_postorder+0xa0/0xa0 [ 180.188448] ? __mutex_lock+0x16f/0x1a80 [ 180.188460] ? trace_event_raw_event_lock+0x340/0x340 [ 180.188475] ? find_held_lock+0x35/0x1d0 [ 180.188490] ? __lock_is_held+0xb6/0x140 [ 180.188510] ? check_same_owner+0x320/0x320 [ 180.188519] ? perf_trace_lock+0xd6/0x900 [ 180.188530] ? rcu_note_context_switch+0x710/0x710 [ 180.188548] should_failslab+0xec/0x120 [ 180.188559] __kmalloc_track_caller+0x5f/0x760 [ 180.188569] ? idr_alloc_cyclic+0x1d6/0x320 [ 180.188579] ? trace_hardirqs_off+0x10/0x10 [ 180.188589] ? kstrdup_const+0x39/0x50 [ 180.188599] ? __mutex_unlock_slowpath+0xe9/0xac0 [ 180.188610] kstrdup+0x39/0x70 [ 180.188621] kstrdup_const+0x39/0x50 [ 180.188632] __kernfs_new_node+0xa2/0x570 [ 180.188644] ? kernfs_dop_revalidate+0x380/0x380 [ 180.188658] ? kasan_check_read+0x11/0x20 [ 180.188668] ? read_word_at_a_time+0x12/0x20 [ 180.188676] ? strscpy+0x186/0x500 [ 180.188694] kernfs_new_node+0x80/0xe0 [ 180.188706] __kernfs_create_file+0x4b/0x320 [ 180.188718] cgroup_addrm_files+0x3c5/0xa70 [ 180.188736] ? cgroup_file_write+0x710/0x710 [ 180.188751] ? getrawmonotonic64+0x460/0x460 [ 180.188764] ? kernfs_active+0x92/0x160 [ 180.188777] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 180.188786] ? cgroup_kn_set_ugid+0x2c7/0x370 [ 180.188795] ? cgroup_file_name+0x1d0/0x1d0 [ 180.188809] css_populate_dir+0x340/0x420 [ 180.188820] cgroup_mkdir+0x553/0xfc0 [ 180.188828] ? __lock_is_held+0xb6/0x140 [ 180.188843] ? cgroup_destroy_locked+0x750/0x750 [ 180.188853] ? rcu_read_lock_sched_held+0x108/0x120 [ 180.188863] ? kmem_cache_free+0x258/0x2a0 [ 180.188873] ? set_nlink+0xc1/0x160 [ 180.188883] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 180.188892] ? generic_permission+0x105/0x3c0 [ 180.188903] ? cgroup_destroy_locked+0x750/0x750 [ 180.188913] kernfs_iop_mkdir+0x153/0x1e0 [ 180.188925] vfs_mkdir+0x390/0x600 [ 180.188937] SyS_mkdir+0x220/0x2a0 [ 180.188959] ? SyS_mkdirat+0x2b0/0x2b0 [ 180.188973] ? do_syscall_64+0xb7/0x940 [ 180.188986] ? SyS_mkdirat+0x2b0/0x2b0 [ 180.188999] do_syscall_64+0x281/0x940 [ 180.189013] ? vmalloc_sync_all+0x30/0x30 [ 180.189023] ? _raw_spin_unlock_irq+0x27/0x70 [ 180.189033] ? finish_task_switch+0x1c1/0x7e0 [ 180.189044] ? syscall_return_slowpath+0x550/0x550 [ 180.189054] ? syscall_return_slowpath+0x2ac/0x550 [ 180.189065] ? prepare_exit_to_usermode+0x350/0x350 [ 180.189076] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 180.189090] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 180.189105] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 180.189113] RIP: 0033:0x454e79 [ 180.189118] RSP: 002b:00007f2d4ca09c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 180.189130] RAX: ffffffffffffffda RBX: 00007f2d4ca0a6d4 RCX: 0000000000454e79 [ 180.189137] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000020000340 [ 180.189143] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 180.189149] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000013 [ 180.189156] R13: 00000000000003ea R14: 00000000006f7e90 R15: 0000000000000011 [ 180.189212] cgroup: cgroup_addrm_files: failed to add cgroup.max.descendants, err=-12 [ 180.259168] binder: BINDER_SET_CONTEXT_MGR already set [ 180.259182] binder: 13446:13465 ioctl 40046207 0 returned -16 [ 180.266805] FAULT_INJECTION: forcing a failure. [ 180.266805] name failslab, interval 1, probability 0, space 0, times 0 [ 180.266817] CPU: 1 PID: 13485 Comm: syz-executor1 Not tainted 4.16.0-rc7+ #372 [ 180.266823] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 180.266828] Call Trace: [ 180.266843] dump_stack+0x194/0x24d [ 180.266858] ? arch_local_irq_restore+0x53/0x53 [ 180.266879] should_fail+0x8c0/0xa40 [ 180.266888] ? kstrdup+0x39/0x70 [ 180.266899] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 180.266908] ? cgroup_mkdir+0x553/0xfc0 [ 180.266921] ? vfs_mkdir+0x390/0x600 [ 180.266931] ? SyS_mkdir+0x220/0x2a0 [ 180.266941] ? do_syscall_64+0x281/0x940 [ 180.266953] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 180.266965] ? find_held_lock+0x35/0x1d0 [ 180.266978] ? find_held_lock+0x35/0x1d0 [ 180.266991] ? __lock_is_held+0xb6/0x140 [ 180.267015] ? check_same_owner+0x320/0x320 [ 180.267031] ? rcu_note_context_switch+0x710/0x710 [ 180.267042] ? rcu_read_lock_sched_held+0x108/0x120 [ 180.267057] should_failslab+0xec/0x120 [ 180.267067] kmem_cache_alloc+0x47/0x760 [ 180.267075] ? memcpy+0x45/0x50 [ 180.267085] ? kstrdup+0x59/0x70 [ 180.267098] __kernfs_new_node+0xe2/0x570 [ 180.267109] ? kernfs_dop_revalidate+0x380/0x380 [ 180.267122] ? kasan_check_read+0x11/0x20 [ 180.267131] ? read_word_at_a_time+0x12/0x20 [ 180.267140] ? strscpy+0x186/0x500 [ 180.267158] kernfs_new_node+0x80/0xe0 [ 180.267170] __kernfs_create_file+0x4b/0x320 [ 180.267182] cgroup_addrm_files+0x3c5/0xa70 [ 180.267200] ? cgroup_file_write+0x710/0x710 [ 180.267215] ? getrawmonotonic64+0x460/0x460 [ 180.267228] ? kernfs_active+0x92/0x160 [ 180.267241] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 180.267250] ? cgroup_kn_set_ugid+0x2c7/0x370 [ 180.267259] ? cgroup_file_name+0x1d0/0x1d0 [ 180.267275] css_populate_dir+0x340/0x420 [ 180.267288] cgroup_mkdir+0x553/0xfc0 [ 180.267296] ? __lock_is_held+0xb6/0x140 [ 180.267310] ? cgroup_destroy_locked+0x750/0x750 [ 180.267319] ? rcu_read_lock_sched_held+0x108/0x120 [ 180.267328] ? kmem_cache_free+0x258/0x2a0 [ 180.267338] ? set_nlink+0xc1/0x160 [ 180.267348] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 180.267356] ? generic_permission+0x105/0x3c0 [ 180.267367] ? cgroup_destroy_locked+0x750/0x750 [ 180.267377] kernfs_iop_mkdir+0x153/0x1e0 [ 180.267388] vfs_mkdir+0x390/0x600 [ 180.267401] SyS_mkdir+0x220/0x2a0 [ 180.267411] ? SyS_mkdirat+0x2b0/0x2b0 [ 180.267422] ? do_syscall_64+0xb7/0x940 [ 180.267432] ? SyS_mkdirat+0x2b0/0x2b0 [ 180.267450] do_syscall_64+0x281/0x940 [ 180.267461] ? vmalloc_sync_all+0x30/0x30 [ 180.267471] ? _raw_spin_unlock_irq+0x27/0x70 [ 180.267482] ? finish_task_switch+0x1c1/0x7e0 [ 180.267493] ? syscall_return_slowpath+0x550/0x550 [ 180.267503] ? syscall_return_slowpath+0x2ac/0x550 [ 180.267514] ? prepare_exit_to_usermode+0x350/0x350 [ 180.267525] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 180.267538] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 180.267553] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 180.267560] RIP: 0033:0x454e79 [ 180.267566] RSP: 002b:00007f2d4ca09c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 180.267575] RAX: ffffffffffffffda RBX: 00007f2d4ca0a6d4 RCX: 0000000000454e79 [ 180.267581] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000020000340 [ 180.267586] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 180.267592] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000013 [ 180.267598] R13: 00000000000003ea R14: 00000000006f7e90 R15: 0000000000000012 [ 180.267678] cgroup: cgroup_addrm_files: failed to add cgroup.events, err=-12 [ 180.351456] FAULT_INJECTION: forcing a failure. [ 180.351456] name failslab, interval 1, probability 0, space 0, times 0 [ 180.351470] CPU: 0 PID: 13498 Comm: syz-executor7 Not tainted 4.16.0-rc7+ #372 [ 180.351476] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 180.351480] Call Trace: [ 180.351494] dump_stack+0x194/0x24d [ 180.351508] ? arch_local_irq_restore+0x53/0x53 [ 180.351528] should_fail+0x8c0/0xa40 [ 180.351541] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 180.351552] ? rb_first_postorder+0xa0/0xa0 [ 180.351561] ? __mutex_lock+0x16f/0x1a80 [ 180.351573] ? trace_event_raw_event_lock+0x340/0x340 [ 180.351583] ? trace_hardirqs_off+0x10/0x10 [ 180.351597] ? find_held_lock+0x35/0x1d0 [ 180.351610] ? __lock_is_held+0xb6/0x140 [ 180.351629] ? check_same_owner+0x320/0x320 [ 180.351639] ? lock_downgrade+0x980/0x980 [ 180.351650] ? rcu_note_context_switch+0x710/0x710 [ 180.351667] should_failslab+0xec/0x120 [ 180.351678] __kmalloc_track_caller+0x5f/0x760 [ 180.351688] ? idr_alloc_cyclic+0x1d6/0x320 [ 180.351700] ? kstrdup_const+0x39/0x50 [ 180.351709] ? __mutex_unlock_slowpath+0xe9/0xac0 [ 180.351720] kstrdup+0x39/0x70 [ 180.351731] kstrdup_const+0x39/0x50 [ 180.351742] __kernfs_new_node+0xa2/0x570 [ 180.351754] ? kernfs_dop_revalidate+0x380/0x380 [ 180.351767] ? kasan_check_read+0x11/0x20 [ 180.351777] ? read_word_at_a_time+0x12/0x20 [ 180.351786] ? strscpy+0x186/0x500 [ 180.351805] kernfs_new_node+0x80/0xe0 [ 180.351818] __kernfs_create_file+0x4b/0x320 [ 180.351832] cgroup_addrm_files+0x3c5/0xa70 [ 180.351850] ? cgroup_file_write+0x710/0x710 [ 180.351867] ? getrawmonotonic64+0x460/0x460 [ 180.351880] ? kernfs_active+0x92/0x160 [ 180.351894] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 180.351903] ? cgroup_kn_set_ugid+0x2c7/0x370 [ 180.351913] ? cgroup_file_name+0x1d0/0x1d0 [ 180.351937] css_populate_dir+0x340/0x420 [ 180.351951] cgroup_mkdir+0x553/0xfc0 [ 180.351961] ? __lock_is_held+0xb6/0x140 [ 180.351978] ? cgroup_destroy_locked+0x750/0x750 [ 180.351988] ? rcu_read_lock_sched_held+0x108/0x120 [ 180.351997] ? kmem_cache_free+0x258/0x2a0 [ 180.352013] ? set_nlink+0xc1/0x160 [ 180.352023] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 180.352033] ? generic_permission+0x105/0x3c0 [ 180.352047] ? cgroup_destroy_locked+0x750/0x750 [ 180.352059] kernfs_iop_mkdir+0x153/0x1e0 [ 180.352072] vfs_mkdir+0x390/0x600 [ 180.352084] SyS_mkdir+0x220/0x2a0 [ 180.352096] ? SyS_mkdirat+0x2b0/0x2b0 [ 180.352108] ? do_syscall_64+0xb7/0x940 [ 180.352118] ? SyS_mkdirat+0x2b0/0x2b0 [ 180.352129] do_syscall_64+0x281/0x940 [ 180.352139] ? vmalloc_sync_all+0x30/0x30 [ 180.352149] ? finish_task_switch+0x1c1/0x7e0 [ 180.352160] ? syscall_return_slowpath+0x550/0x550 [ 180.352169] ? syscall_return_slowpath+0x2ac/0x550 [ 180.352179] ? prepare_exit_to_usermode+0x350/0x350 [ 180.352191] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 180.352205] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 180.352221] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 180.352228] RIP: 0033:0x454e79 [ 180.352234] RSP: 002b:00007f49041e4c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 180.352245] RAX: ffffffffffffffda RBX: 00007f49041e56d4 RCX: 0000000000454e79 [ 180.352251] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000020000340 2018/03/31 07:26:12 executing program 2: bind$inet(0xffffffffffffffff, &(0x7f0000000ff0)={0x2, 0x4e23, @loopback=0x7f000001}, 0xfffffffffffffe09) accept(0xffffffffffffffff, &(0x7f00000000c0)=@pppol2tp={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @dev}}}, &(0x7f0000000140)=0x80) getpeername$inet(r0, &(0x7f0000000180)={0x0, 0x0, @multicast2}, &(0x7f00000001c0)=0x10) setsockopt(r0, 0x114, 0x1, &(0x7f0000000000)="37cc85a02ca3aceefb73f5919f13aea65d8e25595a9dab4fcf9ea8f178d95adb25054cc4e54b181c11d1", 0x2a) 2018/03/31 07:26:12 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) fcntl$setlease(r0, 0x400, 0x1) r1 = socket$netlink(0x10, 0x3, 0x17) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f0000000000)=0x72, &(0x7f0000000080)=0x2) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f00000002c0)={0x0, &(0x7f0000000280), 0x9}) 2018/03/31 07:26:12 executing program 1 (fault-call:6 fault-nth:19): mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) open(&(0x7f00000000c0)='./file0\x00', 0xa0441, 0x80) syz_mount_image$msdos(&(0x7f0000000140)='msdos\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x1, &(0x7f0000000100)=[{&(0x7f0000000480)="9196b107dc9e5c731d56d84afae6a7bf24", 0x11, 0x1f}], 0x0, &(0x7f0000000000)=ANY=[]) rmdir(&(0x7f0000000080)='./file0//ile0\x00') mkdir(&(0x7f0000000340)='./file0//ile0\x00', 0x1) r0 = semget$private(0x0, 0x4, 0x21) semctl$GETPID(r0, 0x1, 0xb, &(0x7f0000000200)=""/154) 2018/03/31 07:26:12 executing program 3: r0 = perf_event_open(&(0x7f000002ef88)={0x1, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCNOTTY(r0, 0x5422) readv(r0, &(0x7f0000000180)=[{&(0x7f0000000040)=""/8, 0x8}, {&(0x7f0000000080)}, {&(0x7f00000000c0)=""/178, 0xb2}], 0x3) 2018/03/31 07:26:12 executing program 7 (fault-call:7 fault-nth:16): mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) open(&(0x7f00000000c0)='./file0\x00', 0xa0441, 0x80) syz_mount_image$msdos(&(0x7f0000000140)='msdos\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x1, &(0x7f0000000100)=[{&(0x7f0000000480)="9196b107dc9e5c731d56d84afae6a7bf24", 0x11, 0x1f}], 0x0, &(0x7f0000000000)=ANY=[]) mkdir(&(0x7f0000000180)='./file0//ile0\x00', 0x112) rmdir(&(0x7f0000000080)='./file0//ile0\x00') mkdir(&(0x7f0000000340)='./file0//ile0\x00', 0x1) r0 = semget$private(0x0, 0x4, 0x21) semctl$GETPID(r0, 0x1, 0xb, &(0x7f0000000200)=""/154) 2018/03/31 07:26:12 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/protocols\x00') perf_event_open(&(0x7f0000220000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6ff, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, r2, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$random(&(0x7f0000001000)='/dev/random\x00', 0x0, 0x0) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000003ff4)) pipe2(&(0x7f0000000700)={0x0, 0x0}, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r7 = dup3(r6, r5, 0x0) poll(&(0x7f0000000140), 0x20000000000001ad, 0x80000000) clock_gettime(0x0, &(0x7f0000000000)) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000000140)={0x0, 0x80000, r7}) ioctl$DRM_IOCTL_GEM_CLOSE(r5, 0x40086409, &(0x7f0000000180)={r8}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4040aea0, &(0x7f0000460fe4)={0x0, 0x7, 0x2, 0x0, 0x4, 0x8, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x805}) socket$kcm(0x29, 0x5, 0x0) syz_kvm_setup_cpu$x86(r1, r5, &(0x7f0000753000/0x18000)=nil, &(0x7f0000000300)=[@text32={0x20, &(0x7f00000000c0)="0fc7280f080f20030f01727166ba4200b834000000ef66bad10466edb81da1fb500f23d00f21f835300000050f23f8c4c3194bfc360f20030fc76d08", 0x3c}], 0xaaaaaaaaaaaac0c, 0x7, &(0x7f0000000380), 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) io_setup(0x9, &(0x7f0000000240)) 2018/03/31 07:26:12 executing program 6: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x7, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000040)={{0x3, 0x80}, {0x80000000, 0x1ff}, 0xfff, 0x3, 0x1}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_mreq(r1, 0x29, 0x21, &(0x7f0000832fec)={@remote}, &(0x7f0000caf000)=0x14) 2018/03/31 07:26:12 executing program 0: accept4$inet(0xffffffffffffff9c, &(0x7f0000000200)={0x0, 0x0, @multicast1}, &(0x7f00000006c0)=0x10, 0x802) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000680)) socketpair$inet_sctp(0x2, 0x1, 0x84, &(0x7f0000000a00)) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000940)={@dev, @multicast2}, &(0x7f0000000880)=0xfffffd80) socket$bt_cmtp(0x1f, 0x3, 0x5) r0 = socket$inet(0x2, 0x1, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000700)=0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000980)={r1}, &(0x7f0000000740)=0x8) getsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000800), &(0x7f0000000840)=0xfffffdba) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000780)=@broute={'broute\x00', 0x20, 0x2, 0x3e8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000280], 0x0, &(0x7f0000000240), &(0x7f0000000280)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff01000000110000000000000000006970366772657461703000000000000073797a5f74756e000000000000000000626f6e6430000000000000000000000073797a5f74756e0000000000000000000180c2000000000000000000aaaaaaaaaabb00000000000000007000000008010000580100005241544545535400000000000000000000000000000000000000000000000000200000000000000073797a30000000000000000000000000000000000000000000000000000000004c45440000000000000000000000000000000000000000000000000000000000280000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000010000049444c4554494d4552000000000000000000000000000000000000000000000028000000000000000000010073797a30000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000ffffffff010000000d0000000000000086dd73797a6b616c6c65723000000000000074756e6c3000000000000000000000007369743000000000000000000000000069666230000000000000000000000000000000000000000000000000ffffffffffff000000000000000030010000b001000000020000697036000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000ffffac1414aa0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006c696d6974000000000000000000000000000000000000000000000000000000200000000000000000000000ec00000000000000000000000000000000000000000000000000000049444c4554494d4552000000000000000000000000000000000000000000000028000000000000008100000073797a3100000000000000000000000000000000000000000000000000000000000000004e46515545554500000000000000000000000000000000000000000000000000080000000000000000000000000000004c45440000000000000000000000000000000000000000000000000000000000280000000000000073797a30000000000000000000000000000000000000000000000000000000000000000000000000"]}, 0x460) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000a40)=@broute={'broute\x00', 0x20, 0x0, 0xc0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000c0], 0x0, &(0x7f0000000080), &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffc}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}]}, 0x138) socket(0x3, 0xa, 0xffffffffffffff0b) [ 180.352257] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 180.352263] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000013 [ 180.352270] R13: 00000000000003ea R14: 00000000006f7e90 R15: 000000000000000f [ 180.352345] cgroup: cgroup_addrm_files: failed to add cgroup.subtree_control, err=-12 [ 181.824597] FAULT_INJECTION: forcing a failure. [ 181.824597] name failslab, interval 1, probability 0, space 0, times 0 [ 181.835933] CPU: 1 PID: 13532 Comm: syz-executor1 Not tainted 4.16.0-rc7+ #372 [ 181.843285] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 181.852623] Call Trace: [ 181.855197] dump_stack+0x194/0x24d [ 181.858805] ? arch_local_irq_restore+0x53/0x53 [ 181.863457] should_fail+0x8c0/0xa40 [ 181.867148] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 181.872228] ? rb_first_postorder+0xa0/0xa0 [ 181.876525] ? __mutex_lock+0x16f/0x1a80 [ 181.880563] ? save_stack+0x43/0xd0 [ 181.884164] ? kasan_kmalloc+0xad/0xe0 [ 181.888033] ? find_held_lock+0x35/0x1d0 [ 181.892072] ? __lock_is_held+0xb6/0x140 [ 181.896116] ? check_same_owner+0x320/0x320 [ 181.900415] ? lock_downgrade+0x980/0x980 [ 181.904539] ? rcu_note_context_switch+0x710/0x710 [ 181.909450] should_failslab+0xec/0x120 [ 181.913421] __kmalloc_track_caller+0x5f/0x760 [ 181.917982] ? idr_alloc_cyclic+0x1d6/0x320 [ 181.922281] ? trace_hardirqs_off+0x10/0x10 [ 181.926589] ? kstrdup_const+0x39/0x50 [ 181.930451] ? __mutex_unlock_slowpath+0xe9/0xac0 [ 181.935270] kstrdup+0x39/0x70 [ 181.938439] kstrdup_const+0x39/0x50 [ 181.942131] __kernfs_new_node+0xa2/0x570 [ 181.946271] ? kernfs_dop_revalidate+0x380/0x380 [ 181.951008] ? kasan_check_read+0x11/0x20 [ 181.955137] ? read_word_at_a_time+0x12/0x20 [ 181.959520] ? strscpy+0x186/0x500 [ 181.963044] kernfs_new_node+0x80/0xe0 [ 181.966908] __kernfs_create_file+0x4b/0x320 [ 181.971299] cgroup_addrm_files+0x3c5/0xa70 [ 181.975605] ? cgroup_file_write+0x710/0x710 [ 181.979995] ? getrawmonotonic64+0x460/0x460 [ 181.984384] ? kernfs_active+0x92/0x160 [ 181.988336] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 181.993240] ? cgroup_kn_set_ugid+0x2c7/0x370 [ 181.997709] ? cgroup_file_name+0x1d0/0x1d0 [ 182.002014] css_populate_dir+0x340/0x420 [ 182.006143] cgroup_mkdir+0x553/0xfc0 [ 182.009921] ? __lock_is_held+0xb6/0x140 [ 182.013961] ? cgroup_destroy_locked+0x750/0x750 [ 182.018693] ? rcu_read_lock_sched_held+0x108/0x120 [ 182.023684] ? kmem_cache_free+0x258/0x2a0 [ 182.027895] ? set_nlink+0xc1/0x160 [ 182.031506] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 182.036409] ? generic_permission+0x105/0x3c0 [ 182.040889] ? cgroup_destroy_locked+0x750/0x750 [ 182.045625] kernfs_iop_mkdir+0x153/0x1e0 [ 182.049750] vfs_mkdir+0x390/0x600 [ 182.053268] SyS_mkdir+0x220/0x2a0 [ 182.056788] ? SyS_mkdirat+0x2b0/0x2b0 [ 182.060656] ? do_syscall_64+0xb7/0x940 [ 182.064606] ? SyS_mkdirat+0x2b0/0x2b0 [ 182.068467] do_syscall_64+0x281/0x940 [ 182.072334] ? vmalloc_sync_all+0x30/0x30 [ 182.076461] ? _raw_spin_unlock_irq+0x27/0x70 [ 182.080930] ? finish_task_switch+0x1c1/0x7e0 [ 182.085399] ? syscall_return_slowpath+0x550/0x550 [ 182.090311] ? syscall_return_slowpath+0x2ac/0x550 [ 182.095215] ? prepare_exit_to_usermode+0x350/0x350 [ 182.100207] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 182.105547] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 182.110368] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 182.115532] RIP: 0033:0x454e79 2018/03/31 07:26:12 executing program 3: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000400)='/dev/usbmon#\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000001980)={{{@in6=@remote, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@multicast2}}, &(0x7f0000001a80)=0xe8) chown(&(0x7f00000004c0)='./file0\x00', r2, 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) syz_extract_tcp_res(&(0x7f0000000180), 0x2, 0x8) r3 = open$dir(&(0x7f000001bff4)='./file0\x00', 0x0, 0x0) sendto(r0, &(0x7f0000000040)="0338302e", 0x4, 0x4, &(0x7f0000000080)=@ipx={0x4, 0x3, 0xffff, "db6cf3d3f5fb", 0x3}, 0x80) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000000100)=""/41) fcntl$getownex(r0, 0x10, &(0x7f00000002c0)={0x0, 0x0}) fcntl$setown(r0, 0x8, r4) mkdirat(r3, &(0x7f0000000280)='./file0\x00', 0x20) getdents64(r3, &(0x7f00000007c0)=""/250, 0x1015a) dup3(r0, r1, 0x80000) r5 = open$dir(&(0x7f0000000480)='./file0\x00', 0x0, 0x0) renameat2(r5, &(0x7f0000000200)='./file1\x00', 0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0xfd1092750066ec78) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, &(0x7f0000000140)) ioctl$sock_SIOCADDDLCI(r0, 0x8980, &(0x7f0000000340)={'rose0\x00', 0x3}) [ 182.118697] RSP: 002b:00007f2d4ca09c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 182.126381] RAX: ffffffffffffffda RBX: 00007f2d4ca0a6d4 RCX: 0000000000454e79 [ 182.133625] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000020000340 [ 182.140868] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 182.148114] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000013 [ 182.155358] R13: 00000000000003ea R14: 00000000006f7e90 R15: 0000000000000013 [ 182.162773] cgroup: cgroup_addrm_files: failed to add cgroup.max.descendants, err=-12 [ 182.198678] FAULT_INJECTION: forcing a failure. [ 182.198678] name failslab, interval 1, probability 0, space 0, times 0 [ 182.209959] CPU: 1 PID: 13522 Comm: syz-executor7 Not tainted 4.16.0-rc7+ #372 [ 182.217313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 182.226656] Call Trace: [ 182.229230] dump_stack+0x194/0x24d [ 182.232878] ? arch_local_irq_restore+0x53/0x53 [ 182.237537] should_fail+0x8c0/0xa40 [ 182.241234] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 182.246314] ? rb_first_postorder+0xa0/0xa0 [ 182.250613] ? __mutex_lock+0x16f/0x1a80 [ 182.254787] ? save_stack+0x43/0xd0 [ 182.258390] ? kasan_kmalloc+0xad/0xe0 [ 182.262262] ? trace_hardirqs_off+0x10/0x10 [ 182.266571] ? find_held_lock+0x35/0x1d0 [ 182.270615] ? __lock_is_held+0xb6/0x140 [ 182.274665] ? check_same_owner+0x320/0x320 [ 182.278962] ? lock_downgrade+0x980/0x980 [ 182.283090] ? rcu_note_context_switch+0x710/0x710 [ 182.288003] should_failslab+0xec/0x120 [ 182.291959] __kmalloc_track_caller+0x5f/0x760 [ 182.296517] ? idr_alloc_cyclic+0x1d6/0x320 [ 182.300823] ? kstrdup_const+0x39/0x50 [ 182.304690] ? __mutex_unlock_slowpath+0xe9/0xac0 [ 182.309509] kstrdup+0x39/0x70 [ 182.312678] kstrdup_const+0x39/0x50 [ 182.316371] __kernfs_new_node+0xa2/0x570 [ 182.320496] ? kernfs_dop_revalidate+0x380/0x380 [ 182.325230] ? kasan_check_read+0x11/0x20 [ 182.329357] ? read_word_at_a_time+0x12/0x20 [ 182.333743] ? strscpy+0x186/0x500 [ 182.337269] kernfs_new_node+0x80/0xe0 [ 182.341221] __kernfs_create_file+0x4b/0x320 [ 182.345608] cgroup_addrm_files+0x3c5/0xa70 [ 182.349911] ? cgroup_file_write+0x710/0x710 [ 182.354303] ? getrawmonotonic64+0x460/0x460 [ 182.358688] ? kernfs_active+0x92/0x160 [ 182.362641] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 182.367554] ? cgroup_kn_set_ugid+0x2c7/0x370 [ 182.372029] ? cgroup_file_name+0x1d0/0x1d0 [ 182.376343] css_populate_dir+0x340/0x420 [ 182.380469] cgroup_mkdir+0x553/0xfc0 [ 182.384247] ? __lock_is_held+0xb6/0x140 [ 182.388288] ? cgroup_destroy_locked+0x750/0x750 [ 182.393027] ? rcu_read_lock_sched_held+0x108/0x120 [ 182.398025] ? kmem_cache_free+0x258/0x2a0 [ 182.402236] ? set_nlink+0xc1/0x160 [ 182.405843] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 182.410749] ? generic_permission+0x105/0x3c0 [ 182.415221] ? cgroup_destroy_locked+0x750/0x750 [ 182.419954] kernfs_iop_mkdir+0x153/0x1e0 [ 182.424080] vfs_mkdir+0x390/0x600 [ 182.427597] SyS_mkdir+0x220/0x2a0 [ 182.431112] ? SyS_mkdirat+0x2b0/0x2b0 [ 182.434976] ? do_syscall_64+0xb7/0x940 [ 182.438925] ? SyS_mkdirat+0x2b0/0x2b0 [ 182.442787] do_syscall_64+0x281/0x940 [ 182.446650] ? vmalloc_sync_all+0x30/0x30 [ 182.450772] ? finish_task_switch+0x1c1/0x7e0 [ 182.455243] ? syscall_return_slowpath+0x550/0x550 [ 182.460160] ? syscall_return_slowpath+0x2ac/0x550 [ 182.465063] ? prepare_exit_to_usermode+0x350/0x350 [ 182.470061] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 182.475403] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 182.480221] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 182.485388] RIP: 0033:0x454e79 [ 182.488553] RSP: 002b:00007f49041e4c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 2018/03/31 07:26:13 executing program 1 (fault-call:6 fault-nth:20): mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) open(&(0x7f00000000c0)='./file0\x00', 0xa0441, 0x80) syz_mount_image$msdos(&(0x7f0000000140)='msdos\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x1, &(0x7f0000000100)=[{&(0x7f0000000480)="9196b107dc9e5c731d56d84afae6a7bf24", 0x11, 0x1f}], 0x0, &(0x7f0000000000)=ANY=[]) rmdir(&(0x7f0000000080)='./file0//ile0\x00') mkdir(&(0x7f0000000340)='./file0//ile0\x00', 0x1) r0 = semget$private(0x0, 0x4, 0x21) semctl$GETPID(r0, 0x1, 0xb, &(0x7f0000000200)=""/154) 2018/03/31 07:26:13 executing program 2: socket$pptp(0x18, 0x1, 0x2) perf_event_open(&(0x7f0000000000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000058000)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000090000)=ANY=[@ANYBLOB="01000000000000000a00000000000000ff0100000000000000000000000000010000000000000000000000000000000000002a0a0f6e0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000a00000000000000ff020000000000000000000000000001000000000754f28f1b0cd6b212c86a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x110) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f000016c000)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}}, 0x108) [ 182.496235] RAX: ffffffffffffffda RBX: 00007f49041e56d4 RCX: 0000000000454e79 [ 182.503484] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000020000340 [ 182.510729] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 182.517972] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000013 [ 182.525215] R13: 00000000000003ea R14: 00000000006f7e90 R15: 0000000000000010 [ 182.532587] cgroup: cgroup_addrm_files: failed to add cgroup.events, err=-12 2018/03/31 07:26:13 executing program 0: r0 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r0, &(0x7f00000000c0)={0x1d}, 0x1b7) fstat(r0, &(0x7f0000000100)) fsetxattr(r0, &(0x7f0000000240)=@known='com.apple.FinderInfo\x00', &(0x7f0000000280)='^0x0, 0x5}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000140)={r2, @in6={{0xa, 0x4e21, 0x10001, @remote={0xfe, 0x80, [], 0xbb}, 0x2}}, 0x1, 0x5}, 0x90) r3 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0x4, 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f0000000080)={0xfff, 0xb369, 0x5, 0x40}, 0x8) r4 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0x18, &(0x7f0000000040), 0x8) 2018/03/31 07:26:13 executing program 5: recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x40000040, &(0x7f0000000340)=@can={0x1d}, 0x80) r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f000074ffc8)={&(0x7f000001a000)={0x10}, 0xc, &(0x7f000000e000)={&(0x7f00000000c0)={0x14, 0x4000000000020, 0x2ff, 0x0, 0x0, {0x1}}, 0xffffffffffffff80}, 0x1}, 0x0) r3 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x0) sync() ioctl$LOOP_CHANGE_FD(r3, 0x4c06, 0xffffffffffffffff) pwritev(r3, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000640)={0x0, @in={{0x2, 0x4e23, @local={0xac, 0x14, 0x14, 0xaa}}}}, &(0x7f0000000700)=0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x2, 0x2, r5}, &(0x7f0000000140)=0x51) ioctl$DRM_IOCTL_WAIT_VBLANK(r3, 0xc018643a, &(0x7f0000000500)={0x0, 0x3ff, 0x2c}) fcntl$F_SET_RW_HINT(r3, 0x40c, &(0x7f0000000600)) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r3) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x100, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dsp\x00', 0x303800, 0x0) r6 = socket(0xa, 0x80809, 0x3) ioctl(r6, 0x8916, &(0x7f0000000000)) ioctl(0xffffffffffffffff, 0x8936, &(0x7f0000000000)) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f00000000c0)={'bridge0\x00', 0x21fff}) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f0000000140)={'bridge0\x00\x00 \x00', 0x4}) sendfile(r0, r0, &(0x7f0000000080)=0x5f, 0x102000004) ioctl$LOOP_CLR_FD(r0, 0x4c01) sync() ftruncate(r1, 0x1) openat$cuse(0xffffffffffffff9c, &(0x7f0000000580)='/dev/cuse\x00', 0x82400, 0x0) dup2(r3, r0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) 2018/03/31 07:26:13 executing program 6: socket$inet(0x2, 0x0, 0x0) syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x0, 0x101000) syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0x0, 0x0) close(r0) 2018/03/31 07:26:13 executing program 7 (fault-call:7 fault-nth:17): mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) open(&(0x7f00000000c0)='./file0\x00', 0xa0441, 0x80) syz_mount_image$msdos(&(0x7f0000000140)='msdos\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x1, &(0x7f0000000100)=[{&(0x7f0000000480)="9196b107dc9e5c731d56d84afae6a7bf24", 0x11, 0x1f}], 0x0, &(0x7f0000000000)=ANY=[]) mkdir(&(0x7f0000000180)='./file0//ile0\x00', 0x112) rmdir(&(0x7f0000000080)='./file0//ile0\x00') mkdir(&(0x7f0000000340)='./file0//ile0\x00', 0x1) r0 = semget$private(0x0, 0x4, 0x21) semctl$GETPID(r0, 0x1, 0xb, &(0x7f0000000200)=""/154) 2018/03/31 07:26:13 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000002c0)=[@text32={0x20, &(0x7f0000000080)="0f20c035040000000f22c00f080f32c744240003000000c744240200900000c7442406000000000f011c24660fe27103b9990a00000f3266ba2100b8b9b90000efc4c1456db4304700000066b885000f00d80fc7985739647c", 0x59}], 0x212, 0x0, &(0x7f0000000140), 0x0) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) close(r1) openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, &(0x7f0000000240)={0xde, &(0x7f0000000140)="2cedb854ac19057d152b387b40ea803769459dadc81df8e70dbe0162198c6f2b606875759d585b338ec6a43e988bf1b4db23303367e7d46e54821789114b86dd9ca5245fedc5a4bd07e444e2bb8cda24157f64896e7a9ba2e3e67ffa2a0e1039dc145a2d3e6c9b503fd67dbe8032ddbb6adebb747ccece83aef042638418086503b6056f864bf0b3828b516ea579e8eeceff5444d2f70e2b781c07e9476a638085a5aac667eaebfc301e418530d1cb0e0a255005aaf9dfd14b6a3ba426e287c48294c22b2d001bc438bf13e0cf325390131aca1405a1b07578a0f46d6bf6"}) 2018/03/31 07:26:13 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000040)={0x3, 'nr0\x00', 0x1}, 0x18) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000080)=0x6, 0x4) sendto$inet(r0, &(0x7f0000000000), 0x0, 0x20000802, &(0x7f0000000000)={0x2, 0x4e23, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000280)='tunl0\x00', 0x10) sendto$inet(r0, &(0x7f0000000140)="25de58c4ef968c145ec77a6ef0cd797920929d588d89fb03f6e1d48b14ad5997a2f0708082520a24451dc87b5fac4c7475e6f542f71483fe84a7e30bd13ab4d5663c82664754b75647d997746d4de0b05312d96e6f2ebf61489b06300cfdab0d2eacc1ebfc580ec0458b03d23bf40fb098d0a21261b48a910df8696a36e4bff59c4f7818fca037141cfb14cc507c419b763fbbb5277bc25ac1459a47570d1294055829521729f0ed9bc97ed4c66fd4e0a37c256a643794c257153160ab5f7b5bbec37975b8941b110a9f", 0xca, 0x0, 0x0, 0xffffffffffffff63) sendto$inet(r0, &(0x7f00000002c0)="17846cb783cff3c3751b1773674da5b9c6c6e08b6e73d1a4053f984bb504b66e3dc02a03af826514d0b83a2b8bdd4367356d09d60e45d40c4dccd18804cceb86f2c028048bbf8096f7108b42d9eabbdd18e0344f0e79b65e9260095076975c8806cad261b8626451a1ee0cc4d4133f4d17f5ee611e5a7721c343b2f71cd5a3c382210a0f8a17ea1a4647a0e4bbab0f0a941d5a1ca04fd0ba286432b72e4e647113fbc13f7c75b6aa2355464d16ab4e65b1802828d90c2eef40a61012fc49d3252c665e49c9328b1ce0ae7bcddfc239f40895ec82aead49f884773fa3e73b8d390ebfc31e717c9d0eec8d781bbcb07e2dadaebac4cfe98e4418ca59e8a334b284788a836801d8534601a1677b50d2a4dd75968123bf5cd64a1debe47b3aff2c071518ee53ad4e91cf43859fe70785f4e595dfc13021390552cf6cfe914583c3f777529be1871a548c8b8e007001670b8fce9f7cd6827c6476a7dcd9278cc46a7cb7d326897156b3ae838d4ba85ffd071e31b591f5dc4e7e7eab41dd0fb606d75eff6b2e7193676b7ea2dccc9a867cff5c0bb2acd2d0938edce68bd8f79c19bbd3df78d4a0daa7c15b11b80971e37c5600bcdbca2fa408c5a104a25e57708d5e60cd4e5aa6b7b0db4407922655e8d9f96336b306e75396afb90c566e9aba8c3ed1a0721885fa2e753f805dee7d25c549a1803a1f7c538f443b0441fbf16ba203fb065117aaa31918722a98457345d5c51eae7f3e8293c67bb8dcb82080b6960509d8a3727a47aadd9e53cbcbf7aaca008cc995053d372c9c19bc3dfe94d1c6ce60cf7eaf18b26abe233d33f378a388fd67e6dd3226750ee70da90db9f2a0d3b422133b56ffa5763fda92be4f4175317e3143985e94fc42fbb9ee1bd801ad166c44de5cb8417842624f36e66c69ecfa6e0dcc09423db76874b94b7465d1667102f21d34b73891512a85ed72ceb2e257f6d4b313c8e319910654bb1b087f0940045cca8e3c8291095967901167336bafda7656bbb078012ed19f87b98a432b8c9c7c8441c290ff3eb0f501ad3a2946ca96d3effb8eb9d4cae89da4b3151dcc89375d9d417a9cf2093968914b8e129db908b57b2f79f1b6d10959193bab42bc18faf2840dc907b51ee35c6657860042f08a0e9fc425202891a26115926fb23338040e4b8cb476bad53a88a63559bb444ff47c0f8a427e0240aed6ed961c97ac560d76f1694634ffc855e9af10880ac445b129b9955e155c7cc05dc576398941a238944a31ec0ce38e113f3e8d02e087a1fc0224a08cda7a7d9431bb3577b2ecaff2e56067eaca570cf4ff474be566387201d191990b39b4f6c7d162c69a5a764cd4aea7d99d3a3acd4089e107c3687d105e36125c8419d10f8705a96d201e3a420edae1842c44df6dad747b545410bf2ae9a82e311392248d1a9781d9a4d643019d764bc49b69619626fa56ad25f99a228af43868701ea4b8ab3e0af0a3ffa0fc1ad504d5d531a1921610ec4090931bb67b31a58af41d9d64d8efb2d5f2408d81c12b80b7491f4e9dd123bf041094787cd984496b090706ff113fc9a227c45e484bfbcd2734e5971bb2d86f320a616c7274bcf62febd9fa7b8031a2cf913fa0c94f89cc2b0fa5c0391a1429916ee454422f022a4f6f24387fa7ce7d3d21d4a75501cb80d3b93e4538a0d164afad1a3aea16d8c3928e5fd83f199e0d013d853aed94140ce899b0b0f3d05990b108108cf57d1747066e9a7c35872ea4ba08717fea553d92cb9dfc5b335ebeeb16d70c18a850dae324c2e3ac5426f9e9e125bb82c11d06dce669a4e34f13070a4f8c862e3ad5508a14a7b5fa67eae1155e2d2e399e7f558374ea0227fe203c4f72240eae7a727090b44dd66073319eca7683bb20b8320072671bf35b4e5ada9cecfe380a2454b0260f701eea373b75d7d422dd1eb0d977c5c307fc113f67a38a58b5c57e66fdc62a4718ebb7a174cc131b74c67a6765f8c9c037a0f8ddd7e78928d0d32f2bd7ee4df24c3837629b30a79844a21c58517a8fdec629f973084e04d6f966249cd21056", 0x5b1, 0x0, 0x0, 0x0) fdatasync(r0) 2018/03/31 07:26:13 executing program 3: r0 = socket(0x2, 0x6, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000000)={0x0, 0x80000, 0xffffffffffffff9c}) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000040)={0x0, 0x0, 0x10000, 0xfffffffffffffff7}) ioctl$DRM_IOCTL_AGP_UNBIND(r1, 0x40106437, &(0x7f0000000080)={r2, 0x10001}) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000000c0)={0x0, 0x101, 0x2, [0x101, 0x3f]}, &(0x7f0000000100)=0xc) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x10d, 0x10, &(0x7f0000000140)=@sack_info={r3, 0x8000, 0x5}, 0x7) 2018/03/31 07:26:13 executing program 1 (fault-call:6 fault-nth:21): mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) open(&(0x7f00000000c0)='./file0\x00', 0xa0441, 0x80) syz_mount_image$msdos(&(0x7f0000000140)='msdos\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x1, &(0x7f0000000100)=[{&(0x7f0000000480)="9196b107dc9e5c731d56d84afae6a7bf24", 0x11, 0x1f}], 0x0, &(0x7f0000000000)=ANY=[]) rmdir(&(0x7f0000000080)='./file0//ile0\x00') mkdir(&(0x7f0000000340)='./file0//ile0\x00', 0x1) r0 = semget$private(0x0, 0x4, 0x21) semctl$GETPID(r0, 0x1, 0xb, &(0x7f0000000200)=""/154) [ 183.261149] FAULT_INJECTION: forcing a failure. [ 183.261149] name failslab, interval 1, probability 0, space 0, times 0 [ 183.272491] CPU: 1 PID: 13576 Comm: syz-executor1 Not tainted 4.16.0-rc7+ #372 [ 183.279846] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 183.289198] Call Trace: [ 183.291788] dump_stack+0x194/0x24d [ 183.295409] ? arch_local_irq_restore+0x53/0x53 [ 183.300071] should_fail+0x8c0/0xa40 [ 183.303787] ? kstrdup+0x39/0x70 [ 183.307139] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 183.312217] ? cgroup_mkdir+0x553/0xfc0 [ 183.316169] ? vfs_mkdir+0x390/0x600 [ 183.319857] ? SyS_mkdir+0x220/0x2a0 [ 183.323550] ? do_syscall_64+0x281/0x940 [ 183.327589] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 183.332934] ? find_held_lock+0x35/0x1d0 [ 183.336973] ? find_held_lock+0x35/0x1d0 [ 183.341018] ? __lock_is_held+0xb6/0x140 [ 183.345069] ? check_same_owner+0x320/0x320 [ 183.349367] ? rcu_note_context_switch+0x710/0x710 [ 183.354275] ? rcu_read_lock_sched_held+0x108/0x120 [ 183.359275] should_failslab+0xec/0x120 [ 183.363226] kmem_cache_alloc+0x47/0x760 [ 183.367264] ? memcpy+0x45/0x50 [ 183.370519] ? kstrdup+0x59/0x70 [ 183.373863] __kernfs_new_node+0xe2/0x570 [ 183.377989] ? kernfs_dop_revalidate+0x380/0x380 [ 183.382726] ? kasan_check_read+0x11/0x20 [ 183.386853] ? read_word_at_a_time+0x12/0x20 [ 183.391239] ? strscpy+0x186/0x500 [ 183.394761] kernfs_new_node+0x80/0xe0 [ 183.398626] __kernfs_create_file+0x4b/0x320 [ 183.403015] cgroup_addrm_files+0x3c5/0xa70 [ 183.407323] ? cgroup_file_write+0x710/0x710 [ 183.411723] ? getrawmonotonic64+0x460/0x460 [ 183.416109] ? kernfs_active+0x92/0x160 [ 183.420063] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 183.424967] ? cgroup_kn_set_ugid+0x2c7/0x370 [ 183.429439] ? cgroup_file_name+0x1d0/0x1d0 [ 183.433739] css_populate_dir+0x340/0x420 [ 183.437863] cgroup_mkdir+0x553/0xfc0 [ 183.441637] ? __lock_is_held+0xb6/0x140 [ 183.445677] ? cgroup_destroy_locked+0x750/0x750 [ 183.450408] ? rcu_read_lock_sched_held+0x108/0x120 [ 183.455402] ? kmem_cache_free+0x258/0x2a0 [ 183.459615] ? set_nlink+0xc1/0x160 [ 183.463217] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 183.468122] ? generic_permission+0x105/0x3c0 [ 183.472594] ? cgroup_destroy_locked+0x750/0x750 [ 183.477327] kernfs_iop_mkdir+0x153/0x1e0 [ 183.481452] vfs_mkdir+0x390/0x600 [ 183.484968] SyS_mkdir+0x220/0x2a0 [ 183.488484] ? SyS_mkdirat+0x2b0/0x2b0 [ 183.492349] ? do_syscall_64+0xb7/0x940 [ 183.496297] ? SyS_mkdirat+0x2b0/0x2b0 [ 183.500159] do_syscall_64+0x281/0x940 [ 183.504044] ? vmalloc_sync_all+0x30/0x30 [ 183.508172] ? _raw_spin_unlock_irq+0x27/0x70 [ 183.512641] ? finish_task_switch+0x1c1/0x7e0 [ 183.517113] ? syscall_return_slowpath+0x550/0x550 [ 183.522024] ? syscall_return_slowpath+0x2ac/0x550 [ 183.526930] ? prepare_exit_to_usermode+0x350/0x350 [ 183.531920] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 183.537259] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 183.542077] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 183.547242] RIP: 0033:0x454e79 [ 183.550406] RSP: 002b:00007f2d4ca09c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 2018/03/31 07:26:14 executing program 0: r0 = socket$inet(0x2, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000540), &(0x7f0000000580)=0x4) bind$inet(r0, &(0x7f0000000640)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000240)={{{@in6=@dev={0xfe, 0x80}, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {0x6}}, {{@in=@multicast1=0xe0000001, 0x0, 0x6c}, 0x0, @in6=@remote={0xfe, 0x80, [], 0xbb}, 0x0, 0x0, 0x0, 0x6}}, 0xe8) r1 = accept(r0, 0x0, &(0x7f00000000c0)) r2 = syz_open_dev$usbmon(&(0x7f0000000100)='/dev/usbmon#\x00', 0x9, 0x100) sendto$inet(r1, &(0x7f0000f81000), 0xfffffffffffffc32, 0x125beacb12a3545c, &(0x7f0000319ff0)={0x2, 0x4e22, @loopback=0x7f000001}, 0xfffffffffffffd0b) accept4$bt_l2cap(r2, &(0x7f0000000500), &(0x7f0000000480)=0xffffffffffffff7e, 0x803) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/conn_reuse_mode\x00', 0x2, 0x0) setsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f00000004c0)={0x1, 0x1000}, 0x8) accept(0xffffffffffffffff, &(0x7f0000000340)=@can={0x0, 0x0}, &(0x7f0000000200)=0x80) setsockopt$inet_dccp_int(0xffffffffffffffff, 0x21, 0x7, &(0x7f0000000400)=0x7c, 0x4) recvfrom$packet(0xffffffffffffffff, &(0x7f0000000140)=""/189, 0xbd, 0x1, &(0x7f00000003c0)={0x11, 0x1f, r4, 0x1, 0x1b, 0x6, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x16}}, 0x14) setsockopt$bt_l2cap_L2CAP_OPTIONS(r3, 0x6, 0x1, &(0x7f0000000080)={0x348d, 0x1, 0x8, 0x9449, 0xb7c, 0xff, 0x1000}, 0xc) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000700)="0018a5d51e56c0a1f486ac2a9528b690298a098c00") bind$netrom(r5, &(0x7f0000000000)=@full={{0x3, {"ca39d3a6aaf1ea"}, 0x7}, [{"9466da9f9b9c34"}, {"bf630ee589192b"}, {"a87c1ff7d40d3a"}, {"146ad28c233047"}, {"ccdf8179897ff9"}, {"d5e34e54557076"}, {"3f85aad50a1b3a"}, {"81e97fa888125b"}]}, 0x48) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffff9c, 0x84, 0xf, &(0x7f0000000140)={0x0, @in6={{0xa, 0x0, 0x5, @remote={0xfe, 0x80, [], 0xbb}, 0x8}}, 0x4, 0x4, 0x0, 0x0, 0x5}, &(0x7f0000000200)=0x98) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f00000003c0)={{{@in6=@local, @in6}}, {{@in6}, 0x0, @in6=@local}}, &(0x7f0000000600)=0xe8) sendmsg$nl_route(r5, &(0x7f00000005c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000580)={&(0x7f0000000600)=ANY=[]}, 0x1, 0x0, 0x0, 0x4000005}, 0x5) ioctl$sock_netrom_SIOCGSTAMPNS(r5, 0x8907, &(0x7f00000002c0)) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r5, 0x84, 0x18, &(0x7f0000000240)={r6, 0x100000001}, 0x8) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000bbfff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r7, 0x40045431, &(0x7f00003b9fdc)) setsockopt$inet6_tcp_buf(r5, 0x6, 0x1c, &(0x7f0000000280)="51a306f3f51c67789602d7a2b2b329f6b0c3419231426efcff62a4c3", 0x1c) r8 = syz_open_pts(r7, 0x11) ioctl$int_in(r8, 0x5452, &(0x7f0000f27ff8)=0x81) write(r8, &(0x7f0000fd6000)='z', 0x1) ioctl$TIOCSETD(r8, 0x5423, &(0x7f00000000c0)=0x3) dup2(r8, r7) sendto$inet(r0, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000df9ff0)={0x2, 0x0, @multicast2=0xe0000002}, 0x10) 2018/03/31 07:26:14 executing program 3: r0 = socket$inet_sctp(0x2, 0x0, 0x84) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000001880), 0x10) syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0x0, 0x200) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x0, 0x0) socketpair$packet(0x11, 0x3, 0x300, &(0x7f0000000040)) memfd_create(&(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x0) socketpair$packet(0x11, 0x0, 0x300, &(0x7f00000000c0)) write(r1, &(0x7f00000000c0), 0xfec9) signalfd(r1, &(0x7f0000000000)={0x3}, 0x8) memfd_create(&(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x3) [ 183.558090] RAX: ffffffffffffffda RBX: 00007f2d4ca0a6d4 RCX: 0000000000454e79 [ 183.565337] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000020000340 [ 183.572583] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 183.579829] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000013 [ 183.587073] R13: 00000000000003ea R14: 00000000006f7e90 R15: 0000000000000015 [ 183.594475] cgroup: cgroup_addrm_files: failed to add cgroup.max.descendants, err=-12 [ 183.662729] FAULT_INJECTION: forcing a failure. [ 183.662729] name failslab, interval 1, probability 0, space 0, times 0 [ 183.674056] CPU: 1 PID: 13580 Comm: syz-executor7 Not tainted 4.16.0-rc7+ #372 [ 183.681415] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 183.690762] Call Trace: [ 183.693330] dump_stack+0x194/0x24d [ 183.696937] ? arch_local_irq_restore+0x53/0x53 [ 183.701589] should_fail+0x8c0/0xa40 [ 183.705281] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 183.710364] ? rb_first_postorder+0xa0/0xa0 [ 183.714662] ? __mutex_lock+0x16f/0x1a80 [ 183.718702] ? save_stack+0x43/0xd0 [ 183.722306] ? kasan_kmalloc+0xad/0xe0 [ 183.726177] ? find_held_lock+0x35/0x1d0 [ 183.730217] ? __lock_is_held+0xb6/0x140 [ 183.734261] ? check_same_owner+0x320/0x320 [ 183.738561] ? lock_downgrade+0x980/0x980 [ 183.742685] ? rcu_note_context_switch+0x710/0x710 [ 183.747592] should_failslab+0xec/0x120 [ 183.751547] __kmalloc_track_caller+0x5f/0x760 [ 183.756107] ? idr_alloc_cyclic+0x1d6/0x320 [ 183.760404] ? trace_hardirqs_off+0x10/0x10 [ 183.764704] ? kstrdup_const+0x39/0x50 [ 183.768574] ? __mutex_unlock_slowpath+0xe9/0xac0 [ 183.773392] kstrdup+0x39/0x70 [ 183.776566] kstrdup_const+0x39/0x50 [ 183.780258] __kernfs_new_node+0xa2/0x570 [ 183.784384] ? kernfs_dop_revalidate+0x380/0x380 [ 183.789116] ? kasan_check_read+0x11/0x20 [ 183.793250] ? read_word_at_a_time+0x12/0x20 [ 183.797633] ? strscpy+0x186/0x500 [ 183.801159] kernfs_new_node+0x80/0xe0 [ 183.805027] __kernfs_create_file+0x4b/0x320 [ 183.809415] cgroup_addrm_files+0x3c5/0xa70 [ 183.813716] ? cgroup_file_write+0x710/0x710 [ 183.818107] ? getrawmonotonic64+0x460/0x460 [ 183.822493] ? kernfs_active+0x92/0x160 [ 183.826447] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 183.831352] ? cgroup_kn_set_ugid+0x2c7/0x370 [ 183.835822] ? cgroup_file_name+0x1d0/0x1d0 [ 183.840123] css_populate_dir+0x340/0x420 [ 183.844251] cgroup_mkdir+0x553/0xfc0 [ 183.848029] ? __lock_is_held+0xb6/0x140 [ 183.852068] ? cgroup_destroy_locked+0x750/0x750 [ 183.856802] ? rcu_read_lock_sched_held+0x108/0x120 [ 183.861795] ? kmem_cache_free+0x258/0x2a0 [ 183.866006] ? set_nlink+0xc1/0x160 [ 183.869616] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 183.874519] ? generic_permission+0x105/0x3c0 [ 183.878990] ? cgroup_destroy_locked+0x750/0x750 [ 183.883722] kernfs_iop_mkdir+0x153/0x1e0 [ 183.887848] vfs_mkdir+0x390/0x600 [ 183.891365] SyS_mkdir+0x220/0x2a0 [ 183.894894] ? SyS_mkdirat+0x2b0/0x2b0 [ 183.898759] ? do_syscall_64+0xb7/0x940 [ 183.902710] ? SyS_mkdirat+0x2b0/0x2b0 [ 183.906572] do_syscall_64+0x281/0x940 [ 183.910435] ? vmalloc_sync_all+0x30/0x30 [ 183.914561] ? _raw_spin_unlock_irq+0x27/0x70 [ 183.919035] ? finish_task_switch+0x1c1/0x7e0 [ 183.923505] ? syscall_return_slowpath+0x550/0x550 [ 183.928412] ? syscall_return_slowpath+0x2ac/0x550 [ 183.933317] ? prepare_exit_to_usermode+0x350/0x350 [ 183.938320] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 183.943663] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 183.948486] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 183.953651] RIP: 0033:0x454e79 [ 183.956818] RSP: 002b:00007f49041e4c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 183.964503] RAX: ffffffffffffffda RBX: 00007f49041e56d4 RCX: 0000000000454e79 [ 183.971747] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000020000340 [ 183.979002] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 183.986253] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000013 [ 183.993498] R13: 00000000000003ea R14: 00000000006f7e90 R15: 0000000000000011 [ 184.000825] cgroup: cgroup_addrm_files: failed to add cgroup.max.descendants, err=-12 2018/03/31 07:26:14 executing program 0: r0 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, &(0x7f0000000000)={0x0, 0x6, 0x4}) mq_unlink(&(0x7f0000fc4ffb)='eth0\x00') mq_timedsend(r0, &(0x7f00000e6000), 0x0, 0x0, &(0x7f0000e0b000)) r1 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x10001, 0x200) ioctl$DRM_IOCTL_AUTH_MAGIC(r1, 0x40046411, &(0x7f00000000c0)=0xffff) r2 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0xff, 0x40) ioctl$TCFLSH(r2, 0x540b, 0x1d) mq_timedsend(r0, &(0x7f0000307ffd), 0x0, 0x2, &(0x7f0000fbc000)) close(r0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0xffd, 0x0) ioctl$VT_WAITACTIVE(r3, 0x5607) [ 184.012307] IPVS: Unknown mcast interface: nr0 2018/03/31 07:26:14 executing program 6: clone(0x200, &(0x7f0000151000), &(0x7f0000000080), &(0x7f0000f8b000), &(0x7f0000000100)) mknod(&(0x7f0000b75ff8)='./file0\x00', 0x2001001, 0x0) execve(&(0x7f0000f8aff8)='./file0\x00', &(0x7f0000000240), &(0x7f0000000140)) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='syscall\x00') r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r0, 0xc0bc5310, &(0x7f0000000100)) ioctl$EVIOCGABS2F(r0, 0x8018456f, &(0x7f0000001cc0)=""/23) sched_setaffinity(0x0, 0x8, &(0x7f00009ad000)) preadv(r0, &(0x7f0000000040)=[{&(0x7f00006f0000)=""/154, 0x9a}], 0x1, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(r0, 0x641f) r2 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x7, 0x2) ioctl$sock_SIOCBRADDBR(r1, 0x89a0, &(0x7f0000001e40)='syzkaller0\x00') ioctl$EVIOCSABS3F(r0, 0x401845ff, &(0x7f0000000300)={0x7, 0x0, 0x2, 0xcf94, 0xe7b, 0x200000ef71}) finit_module(r0, &(0x7f0000000000)='*vmnet1nodevmd5sum#.\x00', 0x3) pread64(r0, &(0x7f00000000c0)=""/53, 0x1c1, 0x0) r3 = getpgrp(0x0) process_vm_readv(r3, &(0x7f0000001800)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/137, 0x89}, {&(0x7f0000001400)=""/142, 0x8e}, {&(0x7f00000014c0)=""/220, 0xdc}, {&(0x7f00000015c0)=""/176, 0xb0}, {&(0x7f0000000200)=""/66, 0x42}, {&(0x7f0000001680)=""/123, 0x7b}, {&(0x7f0000001700)=""/84, 0x54}, {&(0x7f0000001780)=""/105, 0x69}, {&(0x7f00000002c0)=""/11, 0xb}], 0xa, &(0x7f0000001c40)=[{&(0x7f00000018c0)=""/249, 0xf9}, {&(0x7f00000019c0)=""/53, 0x35}, {&(0x7f0000001a00)=""/244, 0xf4}, {&(0x7f0000001b00)=""/140, 0x8c}, {&(0x7f0000001bc0)=""/94, 0x5e}], 0x5, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000001d00)={0x0, @in6={{0xa, 0x4e20, 0xffffffffffffff80, @loopback={0x0, 0x1}, 0x2}}, 0x8, 0x3}, &(0x7f0000001dc0)=0x90) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000001e00)={r4, 0x6ecd, 0x10}, 0xc) creat(&(0x7f0000b7a000)='./file0\x00', 0x0) [ 184.040609] IPVS: Unknown mcast interface: nr0 2018/03/31 07:26:14 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000ff8000)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r1 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x8001, 0x4000) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r1, 0x40bc5311, &(0x7f0000001480)={0xf20, 0x2, 'client0\x00', 0x2, "48497a08fc4c26b6", "523248f622a0a644d2d94b1f90456d17cec0f59a2f6f0587920da123f94a861f", 0x0, 0x7}) r2 = accept$alg(r0, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) sendmmsg$alg(r2, &(0x7f0000000180)=[{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000002780)="a7118230eef5e420406dc6a099da077d64d054e0293b261fd23e223ac994e771d39076c63413ac4c3797871c905a3788788903cb54e0b814d561537a2e51405ff0b5bbcb5fe7f41a21b44db2d47be29e7e805a6d3d2a98cea5945db9b758fad872a60d0c8531afe1dbf4d5962f155c685eb8975a7feafedf838264a64caf9ed61617b79b77d069e76fd54e623a555cba8ba8ca09edd10a35df95900f9d33c0a1432915befb630f3817870dd103772719", 0xb0}], 0x1, &(0x7f0000000000)}], 0x1, 0x0) recvmsg(r2, &(0x7f0000001440)={&(0x7f0000000280)=@sco, 0x80, &(0x7f0000000000)=[{&(0x7f0000000300)=""/171, 0xab}, {&(0x7f00000003c0)=""/4096, 0x1000}], 0x2, &(0x7f0000001400)=""/6, 0x6}, 0x0) 2018/03/31 07:26:14 executing program 1 (fault-call:6 fault-nth:22): mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) open(&(0x7f00000000c0)='./file0\x00', 0xa0441, 0x80) syz_mount_image$msdos(&(0x7f0000000140)='msdos\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x1, &(0x7f0000000100)=[{&(0x7f0000000480)="9196b107dc9e5c731d56d84afae6a7bf24", 0x11, 0x1f}], 0x0, &(0x7f0000000000)=ANY=[]) rmdir(&(0x7f0000000080)='./file0//ile0\x00') mkdir(&(0x7f0000000340)='./file0//ile0\x00', 0x1) r0 = semget$private(0x0, 0x4, 0x21) semctl$GETPID(r0, 0x1, 0xb, &(0x7f0000000200)=""/154) [ 184.130462] FAULT_INJECTION: forcing a failure. [ 184.130462] name failslab, interval 1, probability 0, space 0, times 0 [ 184.141919] CPU: 1 PID: 13635 Comm: syz-executor1 Not tainted 4.16.0-rc7+ #372 [ 184.149279] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 184.158629] Call Trace: [ 184.161224] dump_stack+0x194/0x24d [ 184.164841] ? arch_local_irq_restore+0x53/0x53 [ 184.169497] should_fail+0x8c0/0xa40 [ 184.173192] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 184.178274] ? rb_first_postorder+0xa0/0xa0 [ 184.182573] ? __mutex_lock+0x16f/0x1a80 [ 184.186613] ? trace_event_raw_event_lock+0x340/0x340 [ 184.191780] ? trace_hardirqs_off+0x10/0x10 [ 184.196082] ? find_held_lock+0x35/0x1d0 [ 184.200125] ? __lock_is_held+0xb6/0x140 [ 184.204168] ? check_same_owner+0x320/0x320 [ 184.208467] ? lock_downgrade+0x980/0x980 [ 184.212592] ? rcu_note_context_switch+0x710/0x710 [ 184.217504] should_failslab+0xec/0x120 [ 184.221456] __kmalloc_track_caller+0x5f/0x760 [ 184.226024] ? idr_alloc_cyclic+0x1d6/0x320 [ 184.230328] ? kstrdup_const+0x39/0x50 [ 184.234192] ? __mutex_unlock_slowpath+0xe9/0xac0 [ 184.239021] kstrdup+0x39/0x70 [ 184.242197] kstrdup_const+0x39/0x50 [ 184.245888] __kernfs_new_node+0xa2/0x570 [ 184.250020] ? kernfs_dop_revalidate+0x380/0x380 [ 184.254760] ? kasan_check_read+0x11/0x20 [ 184.258885] ? read_word_at_a_time+0x12/0x20 [ 184.263270] ? strscpy+0x186/0x500 [ 184.266792] kernfs_new_node+0x80/0xe0 [ 184.270657] __kernfs_create_file+0x4b/0x320 [ 184.275046] cgroup_addrm_files+0x3c5/0xa70 [ 184.279349] ? cgroup_file_write+0x710/0x710 [ 184.283739] ? getrawmonotonic64+0x460/0x460 [ 184.288127] ? kernfs_active+0x92/0x160 [ 184.292081] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 184.296998] ? cgroup_kn_set_ugid+0x2c7/0x370 [ 184.301480] ? cgroup_file_name+0x1d0/0x1d0 [ 184.305782] css_populate_dir+0x340/0x420 [ 184.309911] cgroup_mkdir+0x553/0xfc0 [ 184.313692] ? __lock_is_held+0xb6/0x140 [ 184.317734] ? cgroup_destroy_locked+0x750/0x750 [ 184.322469] ? rcu_read_lock_sched_held+0x108/0x120 [ 184.327465] ? kmem_cache_free+0x258/0x2a0 [ 184.331679] ? set_nlink+0xc1/0x160 [ 184.335280] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 184.340186] ? generic_permission+0x105/0x3c0 [ 184.344660] ? cgroup_destroy_locked+0x750/0x750 [ 184.349395] kernfs_iop_mkdir+0x153/0x1e0 [ 184.353521] vfs_mkdir+0x390/0x600 [ 184.357044] SyS_mkdir+0x220/0x2a0 [ 184.360564] ? SyS_mkdirat+0x2b0/0x2b0 [ 184.364430] ? do_syscall_64+0xb7/0x940 [ 184.368383] ? SyS_mkdirat+0x2b0/0x2b0 [ 184.372247] do_syscall_64+0x281/0x940 [ 184.376113] ? trace_event_raw_event_sys_exit+0x260/0x260 [ 184.381628] ? syscall_return_slowpath+0x550/0x550 [ 184.386533] ? syscall_return_slowpath+0x2ac/0x550 [ 184.391442] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 184.396792] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 184.401615] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 184.406781] RIP: 0033:0x454e79 [ 184.409946] RSP: 002b:00007f2d4ca09c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 184.417631] RAX: ffffffffffffffda RBX: 00007f2d4ca0a6d4 RCX: 0000000000454e79 2018/03/31 07:26:14 executing program 7 (fault-call:7 fault-nth:18): mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) open(&(0x7f00000000c0)='./file0\x00', 0xa0441, 0x80) syz_mount_image$msdos(&(0x7f0000000140)='msdos\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x1, &(0x7f0000000100)=[{&(0x7f0000000480)="9196b107dc9e5c731d56d84afae6a7bf24", 0x11, 0x1f}], 0x0, &(0x7f0000000000)=ANY=[]) mkdir(&(0x7f0000000180)='./file0//ile0\x00', 0x112) rmdir(&(0x7f0000000080)='./file0//ile0\x00') mkdir(&(0x7f0000000340)='./file0//ile0\x00', 0x1) r0 = semget$private(0x0, 0x4, 0x21) semctl$GETPID(r0, 0x1, 0xb, &(0x7f0000000200)=""/154) 2018/03/31 07:26:15 executing program 4: prctl$intptr(0x18, 0x80000001) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) fcntl$getflags(r0, 0x40b) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x211}, 0xc, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="84000000", @ANYRES16=r1, @ANYBLOB="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"], 0x84}, 0x1}, 0x44010) 2018/03/31 07:26:15 executing program 3: r0 = creat(&(0x7f0000000e00)='./file0\x00', 0x20) r1 = syz_open_dev$sndctrl(&(0x7f0000000600)='/dev/snd/controlC#\x00', 0x0, 0x0) r2 = syz_open_dev$midi(&(0x7f00000011c0)='/dev/midi#\x00', 0x0, 0xa4100) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000e40)='/dev/vcs\x00', 0x0, 0x0) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000001240)={0x2, r3}) eventfd(0x7) pread64(r1, &(0x7f0000000900)=""/195, 0xc3, 0x0) ioctl$TUNGETSNDBUF(r3, 0x800454d3, &(0x7f0000000e80)) ioctl$DRM_IOCTL_IRQ_BUSID(r3, 0xc0106403, &(0x7f0000000100)={0xc7, 0x7fff, 0xffff, 0xffff}) r4 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000fc0)='/selinux/enforce\x00', 0x16907a, 0x0) ioctl$TIOCSTI(r3, 0x5412, 0xe11) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000f40)={0x0, 0x9}, &(0x7f0000001180)=0x8) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000001200)=ANY=[@ANYRES32=0x0, @ANYBLOB="2000040003008500011e9500"], &(0x7f0000001280)=0x10) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f00000012c0)={r5, 0xc0, 0x6, 0xd59, 0x9, 0x80000001, 0x785, 0x42, {r6, @in={{0x2, 0x4e24, @rand_addr=0x7ff}}, 0x1000, 0x80000000, 0xfffffffffffffc01, 0x58, 0x6}}, &(0x7f0000001380)=0xb0) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0x18, &(0x7f00000010c0)={0x0, 0x80}, &(0x7f0000001100)=0x8) ioctl$EVIOCGSW(r4, 0x8040451b, &(0x7f0000000e00)) r7 = dup(0xffffffffffffffff) fcntl$addseals(r1, 0x409, 0x1) ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f0000000140)={0x7, r7, 0x1}) writev(r4, &(0x7f0000000f80)=[{&(0x7f0000001000)="a68075e3676abab145685ca3610a6b85d3722bc547a060dc7e32587a718fcb8486a231ece2e22782cf2c95928d62fdeb443f1d0c3c99bee31b9877aa5c4a1be65e2af713c68a7a8b538149004faa47055624ed4b866835ab8444b7fe8d493b62ebaf3ac3ea323bea61fb8f551bc5a3425a2d59cf47c4b2abf2c3b96291d8058a42a80a59d249896ea51aa5bb22ef98591af9a44a891e7d5e7b7a3d7b656c10dfac", 0xa1}], 0x1) read(r7, &(0x7f0000000040)=""/172, 0xac) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000f00)='erspan0\x00', 0x10) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fchdir(0xffffffffffffffff) setns(r1, 0x44000000) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001140)={0x0, 0x9, 0x0, 0x2}, 0x10) ioctl$TCGETS(r2, 0x5401, &(0x7f0000000ec0)) ftruncate(r4, 0x0) pwritev(r4, &(0x7f0000001400)=[{&(0x7f0000000180)="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", 0xbd7}], 0x1, 0x4) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4068aea3, &(0x7f0000000d80)={0x7b, 0x0, [0x2, 0x100, 0x2, 0xb99]}) [ 184.424876] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000020000340 [ 184.432121] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 184.439365] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000013 [ 184.446612] R13: 00000000000003ea R14: 00000000006f7e90 R15: 0000000000000016 [ 184.453956] cgroup: cgroup_addrm_files: failed to add cgroup.stat, err=-12 [ 184.476214] device bridge0 entered promiscuous mode [ 184.501253] device bridge0 left promiscuous mode [ 184.576689] FAULT_INJECTION: forcing a failure. [ 184.576689] name failslab, interval 1, probability 0, space 0, times 0 [ 184.588113] CPU: 1 PID: 13647 Comm: syz-executor7 Not tainted 4.16.0-rc7+ #372 [ 184.595478] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 184.604914] Call Trace: [ 184.607503] dump_stack+0x194/0x24d [ 184.611135] ? arch_local_irq_restore+0x53/0x53 [ 184.615814] should_fail+0x8c0/0xa40 [ 184.619531] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 184.624638] ? rb_first_postorder+0xa0/0xa0 [ 184.628956] ? __mutex_lock+0x16f/0x1a80 [ 184.633018] ? trace_event_raw_event_lock+0x340/0x340 [ 184.638211] ? find_held_lock+0x35/0x1d0 [ 184.642274] ? __lock_is_held+0xb6/0x140 [ 184.646347] ? check_same_owner+0x320/0x320 [ 184.650664] ? perf_trace_lock+0xd6/0x900 [ 184.654798] ? rcu_note_context_switch+0x710/0x710 [ 184.659713] should_failslab+0xec/0x120 [ 184.663668] __kmalloc_track_caller+0x5f/0x760 [ 184.668233] ? idr_alloc_cyclic+0x1d6/0x320 [ 184.672536] ? trace_hardirqs_off+0x10/0x10 [ 184.676843] ? kstrdup_const+0x39/0x50 [ 184.680711] ? __mutex_unlock_slowpath+0xe9/0xac0 [ 184.685537] kstrdup+0x39/0x70 [ 184.688715] kstrdup_const+0x39/0x50 [ 184.692410] __kernfs_new_node+0xa2/0x570 [ 184.696541] ? kernfs_dop_revalidate+0x380/0x380 [ 184.701281] ? kasan_check_read+0x11/0x20 [ 184.705419] ? read_word_at_a_time+0x12/0x20 [ 184.709845] ? strscpy+0x186/0x500 [ 184.713375] kernfs_new_node+0x80/0xe0 [ 184.717265] __kernfs_create_file+0x4b/0x320 [ 184.721917] cgroup_addrm_files+0x3c5/0xa70 [ 184.726229] ? cgroup_file_write+0x710/0x710 [ 184.730624] ? getrawmonotonic64+0x460/0x460 [ 184.735021] ? kernfs_active+0x92/0x160 [ 184.738984] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 184.743896] ? cgroup_kn_set_ugid+0x2c7/0x370 [ 184.748369] ? cgroup_file_name+0x1d0/0x1d0 [ 184.752677] css_populate_dir+0x340/0x420 [ 184.756808] cgroup_mkdir+0x553/0xfc0 [ 184.760589] ? __lock_is_held+0xb6/0x140 [ 184.764637] ? cgroup_destroy_locked+0x750/0x750 [ 184.769376] ? rcu_read_lock_sched_held+0x108/0x120 [ 184.774372] ? kmem_cache_free+0x258/0x2a0 [ 184.778588] ? set_nlink+0xc1/0x160 [ 184.782196] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 184.787102] ? generic_permission+0x105/0x3c0 [ 184.791579] ? cgroup_destroy_locked+0x750/0x750 [ 184.796318] kernfs_iop_mkdir+0x153/0x1e0 [ 184.800448] vfs_mkdir+0x390/0x600 [ 184.803971] SyS_mkdir+0x220/0x2a0 [ 184.807494] ? SyS_mkdirat+0x2b0/0x2b0 [ 184.811362] ? do_syscall_64+0xb7/0x940 [ 184.815321] ? SyS_mkdirat+0x2b0/0x2b0 [ 184.819193] do_syscall_64+0x281/0x940 [ 184.823061] ? vmalloc_sync_all+0x30/0x30 [ 184.827190] ? _raw_spin_unlock_irq+0x27/0x70 [ 184.831665] ? finish_task_switch+0x1c1/0x7e0 [ 184.836138] ? syscall_return_slowpath+0x550/0x550 [ 184.841046] ? syscall_return_slowpath+0x2ac/0x550 [ 184.845956] ? prepare_exit_to_usermode+0x350/0x350 [ 184.850953] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 184.856298] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 184.861137] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 184.866305] RIP: 0033:0x454e79 [ 184.869472] RSP: 002b:00007f49041e4c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 184.877739] RAX: ffffffffffffffda RBX: 00007f49041e56d4 RCX: 0000000000454e79 [ 184.884991] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000020000340 [ 184.892243] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 184.899490] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000013 [ 184.906738] R13: 00000000000003ea R14: 00000000006f7e90 R15: 0000000000000012 [ 184.914192] cgroup: cgroup_addrm_files: failed to add cgroup.max.descendants, err=-12 [ 185.001930] device bridge0 entered promiscuous mode [ 185.007671] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 185.014581] device bridge0 left promiscuous mode 2018/03/31 07:26:15 executing program 7 (fault-call:7 fault-nth:19): mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) open(&(0x7f00000000c0)='./file0\x00', 0xa0441, 0x80) syz_mount_image$msdos(&(0x7f0000000140)='msdos\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x1, &(0x7f0000000100)=[{&(0x7f0000000480)="9196b107dc9e5c731d56d84afae6a7bf24", 0x11, 0x1f}], 0x0, &(0x7f0000000000)=ANY=[]) mkdir(&(0x7f0000000180)='./file0//ile0\x00', 0x112) rmdir(&(0x7f0000000080)='./file0//ile0\x00') mkdir(&(0x7f0000000340)='./file0//ile0\x00', 0x1) r0 = semget$private(0x0, 0x4, 0x21) semctl$GETPID(r0, 0x1, 0xb, &(0x7f0000000200)=""/154) 2018/03/31 07:26:15 executing program 5: ioctl$sock_SIOCBRADDBR(0xffffffffffffffff, 0x89a0, &(0x7f0000000000)="766c616e301000000000000000070002") r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$rdma_cm(r0, &(0x7f0000000840)=ANY=[@ANYBLOB="00000000180000fa04000000000000"], 0xf) write$rdma_cm(r0, &(0x7f0000002100)=ANY=[@ANYBLOB="01000000100000fa"], 0x8) r1 = request_key(&(0x7f0000000140)='ceph\x00', &(0x7f00000004c0)={0x73, 0x79, 0x7a, 0x1}, &(0x7f0000000500)='syzkaller0\x00', 0x0) getresgid(&(0x7f00000000c0), &(0x7f0000000100), &(0x7f00000001c0)) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) setresgid(0x0, 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/enforce\x00', 0x10000000020680, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vcs\x00', 0x400000, 0x0) accept$netrom(0xffffffffffffffff, &(0x7f0000000240), &(0x7f0000000200)=0xa) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f000051d000)='/dev/loop-control\x00', 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c81, r5) r6 = msgget(0x3, 0x101) msgctl$IPC_RMID(r6, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000480)={0x0, @in6={{0xa, 0x4e21, 0xaeab, @mcast2={0xff, 0x2, [], 0x1}, 0x25b8}}, 0x1, 0x66fd}, &(0x7f0000000540)=0x90) semget(0x2, 0x1, 0x2) keyctl$assume_authority(0x10, r1) write$rdma_cm(r3, &(0x7f0000000cc0)=ANY=[], 0xa) r7 = semget$private(0x0, 0x2, 0x1) r8 = open(&(0x7f0000000780)='./file0\x00', 0x80, 0xc) getsockopt$inet_sctp_SCTP_INITMSG(r8, 0x84, 0x2, &(0x7f00000007c0), &(0x7f0000000800)=0x8) pwritev(r0, &(0x7f0000000740)=[{&(0x7f0000000540)="73e9674708b49db98b575124cf36a77303d7493e880a55c3a5fe4cb390816c13e50135f29f90bb3cd4b97ea1faf6f143b4e7e446d4b537e5c1b92b1cf1d0292973b5dbc49a567f172edad5816959a5682aed1b61131777754829d9731b0e4d216e52f746dca697b53d33f498d05f5438e7a400046129d0b93681ed3c3704a34f77a26aed6d70ffee71829f95747a56021d4249129151ff4059bd224bf3f5adeb9c51602b6e84e3569f", 0xa9}], 0x1, 0x0) semctl$IPC_INFO(r7, 0x0, 0x3, &(0x7f0000000080)=""/82) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in6={{0xa}}, 0x0, 0x0, 0xe2}}, &(0x7f0000000300)=0xb0) r9 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x1, 0x20000) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_inet_SIOCSARP(r9, 0x8955, &(0x7f0000000440)={{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xe}}, {0x307, @random="1f11b76ccda9"}, 0x8, {0x2, 0x4e24, @multicast1=0xe0000001}, 'syzkaller0\x00'}) 2018/03/31 07:26:15 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f000000affc)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x9, 0x20000000) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000240)) dup2(r2, r1) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000040)) 2018/03/31 07:26:15 executing program 6: r0 = getpgid(0x0) sched_setaffinity(r0, 0x1cd, &(0x7f0000da3000)=0x2) pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) move_pages(r0, 0x1, &(0x7f0000000100)=[&(0x7f000000a000/0xd000)=nil], &(0x7f0000000140)=[0x1f], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r2, 0x84, 0x20, &(0x7f0000000200), 0x4) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x1c) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f00000018c0)={0x0, @in={{0x2, 0x4e24, @rand_addr=0x3a4}}, 0x2, 0x8, 0x8, 0x6889583c, 0x4}, &(0x7f0000001980)=0x98) getsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f00000019c0)={0x0, 0xffffffffffffffff}, &(0x7f0000001a00)=0x8) sendmmsg$inet_sctp(r1, &(0x7f0000001cc0)=[{&(0x7f0000000240)=@in6={0xa, 0x4e20, 0x8000, @local={0xfe, 0x80, [], 0xaa}, 0x1}, 0x1c, &(0x7f0000001840)=[{&(0x7f0000000400)="2ad9411b532c2d5e06aca5fc8eac1e6346f16e8dfa848c682a3f5b19221d47b5f9adb61195322c24bc36daa88bf32fc52e05dc283f1bcfbef94957c7b466688949f81fba93a5160a7a16eca5c10bfc5c0c144155a206b34318d79b542ff4106916c548593e95208f779b9f8d8219558208f95e88b2a2c013e4cdde524c7c439e4a7e80e53bb43592fbbede290b48eac486eefc68838ff1e114c792a8c54ce47bfc1ab5a6c5279c9f0a4a45d8ec9e5dd1bb8899ddb50457ec6967d6253e", 0xbd}, {&(0x7f00000004c0)="e5ed72dacd0e05e19c7e5ce3ba25ad94a18a10b57560d93bf1591f471fca1670e26ed9516a62d5b3656a96838c43c03a529b8cbfe2011793e9cfb35cf4c4ba60ce95c6b9982028325693098a3a3343c6423f10c5dd800e13259d6301d04cf3eac28d22d45d9a4f6d6270baf3109db43bc797c817a4687cd358051453c9d956b7ada3020567adc3b1685ab0a637aee38862916bcab50fe53e9523b83e788488cd73f5f9f81a3d0021c6a6bdee88fd3d26476cff8d916ae047f90f23060910d869cb7fb30d2931340cfe6ae2a1141cd6b49a4699bf7396c181439ba8051f67e2840ab17b4c121d33a6c741a33a2061c28aef7091a7c5dad733e9d1680c6428e3444fbdc955eefb675ae595080bb7ecf204c88eb9ae01a32c96a30707068f1ef5216b6152a8bf9484bb53273e0900edb3e8b28fd77fc425b7b6d23c2f6911c0f7aa39187989a50dbff2828449fe199c8590681f2109f4f0483b41749c0aededd3040a091310467f2186aef868febcdd94c329302507543c9dbff078829895abea140fa07a78e807e960b7c89e2055c21db98901b96ee54efe1507afc58e24b28ba1b33cd3861ee23d434442c8b5cc24a2eb13656386f39fc9694c0601d611a644f320f5231123c397050430eacc91fd3f9d97d15bdb4c4400f30647c2aa567a855ffe9266545218adccfb59874dc72b633f911ef3d0ef19d176bf9edcf86914712ba1b4b9ebe65afa66aa8570f68e7e7d654c491c520790bc7a3eb2745a58332f914e460e9eeab6d9bf9261e53012d709b9a85a5ebb2c4e8665d01abae7cf4dd22ee4cc447d44ecc257c01c820756af1ec866c2b2563ea964ac5bea5a6e3c9cc36b7edaf9ee18f9d1e5b99e5757309a82758f1abe887020bb13e0cd3f88c9d34e76310381906a29f0022a87fb0fdb56e53daf9c605c7aff9ad2306a2593e51023ec4e50ba518f0d8054a91139ffc16878cee1c301b1062cf663e0a7439801c00f65793639c121430c2cd906fa1273c5e10c8ae90dc779a097ef0b1983b4a6e8b4ed409ad6c38810f6694db6eefa593a03e8f1695d1b64385642efb398ffd14ff8d7348a170e0ef03b971c7c8c65f5a73bb998a0424a55c7a2f476ce8c7a0667e749e5ff5645833c9dbbe5215488772ee8c9d7e8068134ac371d5a3a670598f45c136b23a770d85ff54da77355da4891d8c19f75740a581b1fab282929e62f3af36d852f17a052a5034a4164f5115b2ea08bf93789fb92449074ecc1a4e67625bceed6e2c37d1df5db0f3a1fd740767cbb0106088246b521dfc23f59f10dd0d2011f562825056a39f11c5679683e306ba08b0b6f59ae41d749c2c8461c26ed956c82d7f4d4483028b3a45b49a6ff75968339959e3d8dfebe02fda55c9e90bd5edaf1ad0461f5ce62004eb7aa3ad876c3a13eeef909bb118626fe18124413ace5dcb624c4f07bfea17c9b85b7686424743b0c3c98100badd859879e1e539e0b3a9b5baebbb1650eeccda724609a1d7746047f1a41daa38a832fa303a7ccab02fc8ee65c3d3c599ae2783377e2872e30fb34ed325ff4978aa9d5b4eb836bbfefbabd797558605b655381ca319920b765ada03fb6a2811f310e2042fcb5bf4d448bc0efd107d674b16c0422d6d2f2b7be7fdf6548349eefcca35bac2af506a68d48ab9fce4b86c6327778a0dfc16147bcee9b67e2087e64afcfe64d06b0e8a4daf3d61e66055e71a813bc0261209d4dc16f0afc9d967d4468ec3b94729bd16fd3c40db53d172fa8b6eec02d85a16b7ae6a39b898e0d61dcf4693530b8dc3e1fe899b0f08ea84b98c992dbcf0f5111067b24b3bd7a2676f6a8f4045c42c8506a2534d9b442755a324fba04338e9830c663ed462544bb832b05a5dbd8c1a81440062c34451af00463b380ed7c5af1a126e505e58050b959a091f12568e710e2587e28d269784a6d0287c541f23178e861662a735519b8a3b5220848f798bd13271e4df6853f0de7055bceca0664513e367c2c5498d7d8890b20e98a5e5c3ed78aac1b924b88f0a5774ec2f0021f7fd04f37650a4b154255dee25223a1ca08a89182b05c2097faa8d009b31928b1fcc243d37b7ed056f000f1b63888a9c4060613727d5de0de60149a3943fb76b349dc47ec8fc513bdbf5de5c996b1008676ae3b4de8c2f1b1b313cc16e6858baa211b6e8a8925bb60e8578c6f1255a4152c78ff9be8a68bb24e6ea71f5c9960a6e8c8c600a86e6e53800358f051b7aa8f2d28ee253ddff32aa6b0528e06f49383fb808b04a76a223f23ac15eada7e068f9e044e0bc2bb0945403558420e8caa204f7407ccb9340e0189551adbe14ce0118416f39b01862111cb1db1a1efaf6c5733db8b6d23cc10c61ab071898b72cdae31fc40330b13b0d5133124ed991c0241e36c0786e009c5ab7d872f202477dc868b3ebf09f5de80a4759dbb32631d543aebbf0d3e22ef13c21919d9df2af616de704a06ce946a50d82c64b25dba5a5e7cb6bdc59252e2a6157c4fe13d95ef256cbaef6a90982f935f4486905d423790c1e7be6a2ae84fa5f93017c39cfc348c3c92c6f66261a88bc0be59ff9f2c15b6c4b379396ea5e444222f93d6935af10bfc77589b8a0d5eab858328ba47b17f3c4bfba70f91c0c76d018c82a5bbc337ac70c11a6925b597f9cb8abc76a8c5aa8e58a1a58072bf80352fbb37de4d466bcf7270ba9a3ba56e77845cbba4d4e014db78414b7ae1e127cbdc94f723577dc870156c74e1b8a168e701ca7d64f27607ccbf4f57e246188b636a2fb4c31512020312233cea305849810f18800ff46216a8546eeca5ea7c4bf838472bc0c37a5bb6124e12de5a34a72f20aa1e75a8a9305b671ca7c733232c42296137859be719b79c544169e0259e6b96baf39da32e970fa43d0927cf9ae344d6b52368e381e401986978401a8609e79fa1012177b624e589fed59972e031fe7cc1af103727d5d9bccac6ecb6cc86c2a436cacd1a8ed1a454d8be442b4f211c6be368f250f8b105b3f937f5f754b279201559988c414fe1ce8c30a5f34a70f7e122172c89fd69bfbbd0a04168194a32849d62563ae6a711b73a36bb43a914c2f888b4acf68c8aa408a13070b8c0d552718de685294b104b6c95f7798923c4a70baee0673e717c976bc39d63a40221d1a39f88f6d2a2bc2253872a09a465674b0a65335bf04142272c6b6288a6709d5cc456f8cdaf73e7b3e9edd9800127456d49d01ca7001a77de8c645ddbd346d402565a85241fb8e95a9a095cc749eaeb49e81ee914c11a0a1d9be3fd121dae1b87b9737055cc00d61eed5877b7620a99cc00b97be14c6ecd0356d405a42edd31092be0740dcb918652907990593f99729b3ff31808620ab33d5e44424fdc5ae28160f274c635878873ed716461de47faaba938d8f595c0ce8c73948292069bd631b63b21b6589eb42e73340a0fe64c5d6c621773f5b12cf2a38810d6c1c9a1559a452042fb5d75c9d59fb0b1c2317f2dd6def433a24861f7810d86ff1c2e211c8f32c724882de800d438104410222437508cda7ed53d3d712f930d2165af13ddeca7c50a073b051cbb6978e54369ce3b7af1bc794f4a78e3fc1f5ece91226a0e4738c6340e1e08e6362ee446a3f35fa93e310b1e9b3721bbfb7dd7f48c20936bfa61692dde77d8c35f8c8888e78e68a754cfe53333cf27b7e86cff36d1ec0a39b9771f2f238b7cc9351ffe9b39c75a1f5a6b62660ff5e44823a6d2e3717fdd0409553391bb36f919577b676c12eac09eb936835b5747198920dc66b27ee7e72f9a4dab5a50acbaa6578b492ef472379a52f3664b59de2e7870f93a21c1dc6d0f01a32ce48e8382d0477c47540110eabdc07dad1393f30f7b7ccfd6a5a817e3f84eec378cbfe39742c60d3d2bf2679f19fdb249f3ae8697a8bba5d951ac296d57bbeeee31b9bce54e2969cac9640fc3d5d5745c720094c5a9245d9ae89d033f20ad07d841a39b5bc3509217d757b5e61219f5182e73809a9f51facc47eba515304ddeba01f03df3440f83a8e099f287de766094c41e20ba00f0caee102f582cc56caac8b2e3a6b7daa1d5468038f93177838a93c7303d025b56997cd96e809b5c75b5f18785c8de3fe32d02992d5b6a27ed273f4753d64117b53b787a89c10548582ca6d827581d387679541e158980b43054c88ca6be79bdfc2c90ee5cd1a441c533677316eb648009ea8993605a4e084ff5bb34469836c02f8bbf97305cf36c1db2f273481b7c8369ee333783f0118ea287c42d227fb123b65a90d0328e3ed0cf38d4004c4c3ac51bf0afe838f987dab9d362e4e2e5ae89d639408b9206645d1af6b757cf765d9b49d50e5c191d3116ffa13a7a8a0493dcd1d791340678d17644e11aa15c5b806fd8613edc6a10dd66bc285c8f3f2eae22d71da40e90accf73863c6a9c00243d756a68b03279fd93a6b6282418fc5b8ab3faffa3d8a2a30878b04abfa2e53823398a3adf20cdcd2ada8d80d48cbea784dabdbb218fb9c0c7658956551ebf2c9aa0a33dc35f08f1695a173d60daa84f0f05a476b0250a20c33a2b4f83ec172387aeddfac7cab5b6f1feac28997768fb348827dbcdfa133e5f585e8287776b40b28e3b97f7d281f1faaca2a10d49bb62a49d60d0a1b21f6b20acdc4de115dadc2609af00898442692891c435842dde7bc5abbe551171c4a508887de6b7f06765b6f5051e8d429c7dc325dbc8094a4bdff2da6b1f7ab674fd157f02372efa5e224759ea0f03849ba591cf298ed5c827f4033c14b1b3eb06d7679954ab59154c257cd88ca2e6091d5381a4e8e2ae6b31c6cd62d204514d36b91d40ae8e6ac8b3581fda4511d7fb8d89b6226ec87832227fd875345682cbc5e2fe77b94882c5c9b2eb935d659cba81419e3dc61e1b733f792c8a6a924df2b735b6d504dfef44815f2ab0daeaf6e91f3b9846c4be16b329197fde4759d4364a511267b39db01f3f473a18b52a74fa557e654c809ecadb4eac5767c9b4128193873953d9497a35a2d89a1b16b4eeb73b9f1f5000a5d987d3539a22353feee556e6abeec52ba89b1943fcce9648e972cb13ae587e391afe889e26e681c5b5be9e90e9e1d7cd3c5265c8625bc89e57fea7858bb806c764507a1046fdb47adf3512da766108fd8e211562ba1f2dc499ece48db1216cb68f3bfbfaae5311cd2e780f82b19c9a9f3a7ee28e611737e0606b6a67cf1de2e909f4cc4635f1b2d745dd735ffffb03896ad58da3efb0d77333ecdba249ba9f15d7c2f378d5c3b102732c6750b4257931ba1b977cef96f31ac5c7f04bdb6dfe29f7ec9f0c1225b07ec2998c27b448908361fcec4d530919277aa104742ca0e7872a6fc6c322f7d3d7b92ebb1ce4eea2d5bd8907e84cfba48d131a73fce150903a242285b1dd3f92c7daf8d7ffda4b9f8391f1ab5b02771dfd0aa49c47e558175fa211964dcb23a96342fcb02a6b0cda06b1853e3a2d627d799737af993c8b83e517f7b40a65c22b69507669c7316705e8dc3f2da01af5fe3dff229f3b6c3a968d2b6c9dda0d79753f355e91ed162f0723a7f7a0b1efb4729f0fcaf5d3a88d64a4e9865dd468cc36b197d46880e7d15411e36716149f1f00b55ce183052e2889d85291c991df04618a5e39c4423b9e66f82b23e76f506266970b9180e8f59d07279cece165dec19a4468fb800e8c8afc68f1aa44bfe75836877950224249231009b6837bc4c387609cf23f8402ebe5e86a4cf321b2577f5d70923b6f5a5aaa0cbe48fc023373b78ef280cb502ad2e630", 0x1000}, {&(0x7f00000014c0)="a582af62b82989b0f9336f469f0ab637bb0b2a394ad1f13454f5afaf98f5c77ee158d165814d1e5e987b1577ecaba4e1ff3296a1f7168ffa2abee9ec16d5fd1bbacf4f267c7719208c168917310cdf6faf92c7c34f35ec2355094a2931653f2845b099a8a3c15eb101714045956922222f96c6977079275ead5adfb5805b", 0x7e}, {&(0x7f0000001540)="4f4ec030316b8eb03f5af438ee98b8625e775d115399dfea6ebcf966372617fa67f484b10dc8fb7743c77663a855f634271e96c3622f94101b143284903c42a57f7a437c15a2fbb0d3634f2b6f74055dbef179b099307c64edaf213d4dac7adf43276b749afa9389cee2cdbd8bfbc02d3f6cf7750882d19cf98c247fd3dbc7d9e079f1c966d253b970172b97d00f286d1eb295d41236ec223d21e8b7d7236bb223095e3453714b9338c9214f961f203645a57ac93958074d1ab55f041ac1682de8e87e9246842aaa6d279f397d50f91fa06bad8eb8435111f78cf1d5b7b59ed01b0b943ee04d3f90bf9deea240900850bf927cbc520704", 0xf7}, {&(0x7f0000001640)="2cdd4d209b1aa8606ac32915ea115e0e47976a38657398ab59b4835b9bbc051a078c5c3ed674f78ffe91521090990289a92833fdc45284974102fd264cfe590831dda66bcbfcedd5d80e4a35023e5e06efbcbfe93426c80353e310b3c73ad018544a", 0x62}, {&(0x7f00000016c0)="80586c74d29099b04e8c5ee7f3de4ac726fe0ca9d5076fd62559cd4d101d6c238427e415afbd59dba08e621de281c187fb78b3bb4557b364ab3b4e3a7ea3b6933901d3b1dd99ed0b9aaf3d44806b0bc7e1d9ef2ee7cce594ef648a173bb50738016c1458f7fcfa26a9eb42bc740f0910d80a65301c5b35203804f5fa98f985", 0x7f}, {&(0x7f0000001740)="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", 0xfd}], 0x7, &(0x7f0000001a40)=[@sndinfo={0x20, 0x84, 0x2, {0x9, 0x200, 0x80000001, 0xf4d, r4}}, @sndrcv={0x30, 0x84, 0x1, {0x5, 0x0, 0x0, 0x4a4, 0x5, 0x401, 0x9, 0x6000000000000, r5}}], 0x60, 0x40001}, {&(0x7f0000001ac0)=@in6={0xa, 0x4e21, 0x5, @mcast2={0xff, 0x2, [], 0x1}, 0x6}, 0x1c, &(0x7f0000001c80)=[{&(0x7f0000001b00)="72b47523f474cc92c2a4431557d9c463b9a7032aad60362ba5ce726adf91be078e2710f6a822c7ceb699330e50462492", 0x30}, {&(0x7f0000001b40)="110f753490307363fdaa299283060a9254c53f81aae6e690cab085dfb74f69f21e09338b39f6c6438a511cc529dd445b3ea948a50a5a63c750a27bde5d8b6d3036d54a6d43c22cf4b0ddc3", 0x4b}, {&(0x7f0000001bc0)="651dcbea25307b4be2a7b1d73ae68b8d3b4ff82e1f0e87b6e57df612aff6e512cc964b8c1d80db42547bf5623f8d9695c623815e8eaa8a445f4aea5d429caeced9f871677a41796a96cd1ba89e59456060cba774fea674b15a13e1d9800f1bfa8b363c22aff8ae1560b6d7cf738e5c8b451046a202042a4d11d86766fe901323bb8ad24ffe43556c816435a176d1ea5451bbc97657aaf1", 0x97}], 0x3, 0x0, 0x0, 0x40004}], 0x2, 0x80) write$selinux_validatetrans(r2, &(0x7f00000002c0)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a7574656d707465725f657865635f743a7330a90840ed74656d5f753a6f626a6563745f723a6370755f6f6e6c696e655f743a7330200000202f7362696e2f6468636c69656e7400183d288bdfc7c17799ece4d9e85d1a1262a417eda80e323702e9c84810a2b2d980ac6b6a82554f76fdab13caa882693e57fed435ca893856a74f41f3b185cc0d09ac47413ed73c20edf45e15b4af16d55f8e738db8fc3e0af5948d1033110b4d315ec11e4ff7a5f2ec0ecc541eb2558ea89fa3e0c6b482a1a8cc3c26d61e91c16b89a9ac64cf74d7bfc7970a1f24e11836e4eab9cee8d142ad68a572ba54e11e48cf3f6d98e47fdf026f8315d7c4d38e34b3eaffc5ddfce52bbedbef9a794bbda7c1d608508b423b5728130f1d090063b3"], 0xffe2) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f00000001c0)) read(r1, &(0x7f000022e000)=""/74, 0x4a) r6 = dup2(r1, r3) waitid(0x0, r0, &(0x7f0000000000), 0x2, &(0x7f0000000040)) setsockopt$inet6_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000001d40)='cdg\x00', 0x4) 2018/03/31 07:26:15 executing program 1 (fault-call:6 fault-nth:23): mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) open(&(0x7f00000000c0)='./file0\x00', 0xa0441, 0x80) syz_mount_image$msdos(&(0x7f0000000140)='msdos\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x1, &(0x7f0000000100)=[{&(0x7f0000000480)="9196b107dc9e5c731d56d84afae6a7bf24", 0x11, 0x1f}], 0x0, &(0x7f0000000000)=ANY=[]) rmdir(&(0x7f0000000080)='./file0//ile0\x00') mkdir(&(0x7f0000000340)='./file0//ile0\x00', 0x1) r0 = semget$private(0x0, 0x4, 0x21) semctl$GETPID(r0, 0x1, 0xb, &(0x7f0000000200)=""/154) 2018/03/31 07:26:15 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x95, 0x80040) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x7fff, 0x8770, 0x5, 0x7}]}) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000100)=0x80000000) mq_open(&(0x7f00009e8ff6)='encrypted\x00', 0x840, 0x0, &(0x7f0000641fc0)={0x0, 0x5, 0x10000}) syz_extract_tcp_res(&(0x7f0000000000), 0x27, 0x0) 2018/03/31 07:26:15 executing program 4: fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000400)={0x0, 0x0}) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000040)={0x0, r0}) r1 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f00000f1000)={0x10, 0x0, 0x0, 0x8003f9}, 0xc) getsockopt$netlink(r1, 0x10e, 0x9, &(0x7f0000fb3fff)=""/4, &(0x7f0000bea000)=0x4) signalfd(r1, &(0x7f0000000000)={0x100}, 0x8) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000001480)='/dev/cuse\x00', 0x400, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r2, 0x28, 0x1, &(0x7f00000014c0)=0xfffffffffffffffc, 0x8) sendmsg$nl_crypto(r2, &(0x7f00000007c0)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000780)={&(0x7f0000000680)=@get={0x100, 0x13, 0x811, 0x70bd2a, 0x25dfdbfb, {{'rmd256\x00'}, [], [], 0x2400, 0x2000}, [{0x8, 0x1, 0x2}, {0x8, 0x1, 0x3}, {0x8, 0x1, 0x7f}, {0x8, 0x1, 0xfff}]}, 0x100}, 0x1}, 0x4) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000080), &(0x7f0000000100)=0x4) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000540)={0x6, 0x0, [{0x1000, 0x89, &(0x7f0000000140)=""/137}, {0x4, 0xc, &(0x7f00000000c0)=""/12}, {0x100001, 0xea, &(0x7f0000000200)=""/234}, {0x2000, 0xa0, &(0x7f0000000300)=""/160}, {0x7002, 0x9, &(0x7f00000003c0)=""/9}, {0x100000, 0xd2, &(0x7f0000000440)=""/210}]}) 2018/03/31 07:26:15 executing program 3: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x40, 0x0) ioctl$EVIOCGABS20(r0, 0x80184560, &(0x7f0000000080)=""/115) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) r1 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x22, &(0x7f000002dcd8)=@raw={"05000000020002000000000000000000180000000303000000ff3f00", 0x9, 0x3, 0x1, 0x0, 0xffffffff, 0xffffffff, 0x120, 0xffffffff, 0x258, 0xffffffff, 0xffffffff, 0x258, 0xffffffff, 0x3, &(0x7f000002bfd0), {[{{@uncond, 0x0, 0xa8, 0xe8}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "c14000e57af108cc6c74028119fb719d84b855ae79c03bcd889e253bc457"}}, {{@uncond, 0x0, 0xa8, 0x349}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x328) [ 185.262818] FAULT_INJECTION: forcing a failure. [ 185.262818] name failslab, interval 1, probability 0, space 0, times 0 [ 185.274126] CPU: 1 PID: 13682 Comm: syz-executor1 Not tainted 4.16.0-rc7+ #372 [ 185.281485] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 185.290836] Call Trace: [ 185.293429] dump_stack+0x194/0x24d [ 185.297060] ? arch_local_irq_restore+0x53/0x53 [ 185.301736] should_fail+0x8c0/0xa40 [ 185.305450] ? fault_create_debugfs_attr+0x1f0/0x1f0 2018/03/31 07:26:16 executing program 4: r0 = syz_open_dev$amidi(&(0x7f00000000c0)='/dev/amidi#\x00', 0x2, 0x0) r1 = socket(0x0, 0x7, 0x3) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/sequencer\x00', 0x268040, 0x0) syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rt_sigaction(0x400000000000007, &(0x7f0000000080)={0x42a42f, {0xffffffbfffbff270}}, &(0x7f0000000180), 0x8, &(0x7f0000000140)) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x4, 0x44031, 0xffffffffffffffff, 0x0) syz_open_dev$sndctrl(&(0x7f0000843000)='/dev/snd/controlC#\x00', 0x0, 0x0) readv(r0, &(0x7f0000000000)=[{&(0x7f0000000240)=""/200, 0xc8}], 0x1) close(r0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x101082, 0x0) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, &(0x7f0000000080)) ioctl$TIOCMGET(r3, 0x5415, &(0x7f0000000100)) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x101000, 0x0) ioctl$GIO_CMAP(r2, 0x4b70, &(0x7f0000000200)) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000380)='/dev/sequencer\x00', 0x0, 0x0) read(r4, &(0x7f00000003c0)=""/66, 0x42) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000440)={@empty, 0x5, 0x1, 0x0, 0x0, 0x6, 0x7fffffff, 0x8}, &(0x7f0000000480)=0x20) r5 = syz_open_dev$adsp(&(0x7f0000000180)='/dev/adsp#\x00', 0xa85, 0x8000) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000540)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DAEMON(r1, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000600)={&(0x7f0000000680)=ANY=[@ANYBLOB="ca7cc77d004847a4b043fb7ea814a5394498084141d0370852b93221ae97dca7a48868c9406923b3639b6678151151dbc0ed11136e3886a4eb7f0125e43164f4b5e7b875661e4c2e186d0c3f7eac6c5bd4c3c47f2925a11e0a082e001ec4b5118317d0b127bafb50ce9947ad0691737aea83de2a3e9af10abca022e04c78ba14b882332ba56acae422a62800c68d125d143270465261e2da14cfb91d2957f49f45cfe8279559ffff8ff41ca71c476ebd51a22f7f727b6d5263b643e6ab92bc3f1c9f9b615f57d0abf4b7314018a710d090f73924", @ANYRES16=r6, @ANYBLOB="100325bd7000fedbdf250a00000008000600040000000c0003000800010002000000080004007f0000002c00030008000500ac14140d080004000000000008000300040000000800080000000000080007004e21000008000500f7ffffff1c00020008000900060000000800080008000000080002004e210000"], 0x80}, 0x1, 0x0, 0x0, 0x4008000}, 0x24000000) ioctl$KVM_TRANSLATE(r5, 0xc018ae85, &(0x7f0000000340)={0x4000, 0xb87a914947fa7ad1, 0x8, 0x8, 0x33}) [ 185.310555] ? rb_first_postorder+0xa0/0xa0 [ 185.314877] ? __mutex_lock+0x16f/0x1a80 [ 185.318941] ? trace_hardirqs_off+0x10/0x10 [ 185.323268] ? find_held_lock+0x35/0x1d0 [ 185.327336] ? __lock_is_held+0xb6/0x140 [ 185.331409] ? check_same_owner+0x320/0x320 [ 185.335731] ? lock_downgrade+0x980/0x980 [ 185.339880] ? rcu_note_context_switch+0x710/0x710 [ 185.344813] should_failslab+0xec/0x120 [ 185.348789] __kmalloc_track_caller+0x5f/0x760 [ 185.353375] ? idr_alloc_cyclic+0x1d6/0x320 [ 185.357694] ? kstrdup_const+0x39/0x50 [ 185.361578] ? __mutex_unlock_slowpath+0xe9/0xac0 [ 185.366404] kstrdup+0x39/0x70 [ 185.369577] kstrdup_const+0x39/0x50 [ 185.373270] __kernfs_new_node+0xa2/0x570 [ 185.377398] ? kernfs_dop_revalidate+0x380/0x380 [ 185.382138] ? kasan_check_read+0x11/0x20 [ 185.386267] ? read_word_at_a_time+0x12/0x20 [ 185.390656] ? strscpy+0x186/0x500 [ 185.394184] kernfs_new_node+0x80/0xe0 [ 185.398056] __kernfs_create_file+0x4b/0x320 [ 185.402448] cgroup_addrm_files+0x3c5/0xa70 [ 185.406754] ? cgroup_file_write+0x710/0x710 [ 185.411146] ? getrawmonotonic64+0x460/0x460 [ 185.415539] ? kernfs_active+0x92/0x160 [ 185.419499] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 185.424405] ? cgroup_kn_set_ugid+0x2c7/0x370 [ 185.428881] ? cgroup_file_name+0x1d0/0x1d0 [ 185.433188] css_populate_dir+0x340/0x420 [ 185.437317] cgroup_mkdir+0x553/0xfc0 [ 185.441094] ? __lock_is_held+0xb6/0x140 [ 185.445140] ? cgroup_destroy_locked+0x750/0x750 [ 185.449876] ? rcu_read_lock_sched_held+0x108/0x120 [ 185.454872] ? kmem_cache_free+0x258/0x2a0 [ 185.459090] ? set_nlink+0xc1/0x160 [ 185.462696] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 185.467604] ? generic_permission+0x105/0x3c0 [ 185.472080] ? cgroup_destroy_locked+0x750/0x750 [ 185.476817] kernfs_iop_mkdir+0x153/0x1e0 [ 185.480955] vfs_mkdir+0x390/0x600 [ 185.484476] SyS_mkdir+0x220/0x2a0 [ 185.488002] ? SyS_mkdirat+0x2b0/0x2b0 [ 185.491875] ? do_syscall_64+0xb7/0x940 [ 185.495828] ? SyS_mkdirat+0x2b0/0x2b0 [ 185.499694] do_syscall_64+0x281/0x940 [ 185.503558] ? vmalloc_sync_all+0x30/0x30 [ 185.507862] ? _raw_spin_unlock_irq+0x27/0x70 [ 185.512339] ? finish_task_switch+0x1c1/0x7e0 [ 185.516816] ? syscall_return_slowpath+0x550/0x550 [ 185.521724] ? syscall_return_slowpath+0x2ac/0x550 [ 185.526641] ? prepare_exit_to_usermode+0x350/0x350 [ 185.531638] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 185.536987] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 185.541817] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 185.546982] RIP: 0033:0x454e79 [ 185.550153] RSP: 002b:00007f2d4ca09c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 2018/03/31 07:26:16 executing program 2: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) ioctl$TIOCGPTPEER(r0, 0x5441, 0x3) r1 = perf_event_open(&(0x7f0000220000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_int(r2, 0x1, 0x28, &(0x7f0000000040)=0x8001, 0x4) socket$rds(0x15, 0x5, 0x0) syz_emit_ethernet(0x2a, &(0x7f00000002c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa0008004500001c0000000000000678e0000001e00000024e204e2000089078667aecde1cd17c0d128d91108deb46e9efa4ae2de9d5eba3943e4654a77fd0c14cc66d306baec02e130006f3181110452268b112616bcf65aa29376781a440fcdb26e99a13328c8d92d7ee29ff530000"], &(0x7f0000000180)) ioctl$sock_inet_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f00000000c0)) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f0000000100)={r2}) getsockname$ipx(r3, &(0x7f0000000280), &(0x7f00000001c0)=0x10) 2018/03/31 07:26:16 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_GET_XCRS(r2, 0x8188aea6, &(0x7f00000001c0)=ANY=[@ANYBLOB="26a3046f380f841ee16519337bb51e8e5a7b6f5ecc97761f4bbe1d09117d2c54971e171acba7d8353114341cd4164d6321a408312f91d5a72828ce53fbfa4b45b38a83cdb74d4c19b6b583d7f3e7eee4e09d6c6bb505428fadb828d74afd2a214447493cebf8d151f9a6e75e6946a9a6ea11eb81817b429e7a6fc8c3922d79b48613252846f3766569d54a60e547e8cb"]) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x200000, 0x0) [ 185.557849] RAX: ffffffffffffffda RBX: 00007f2d4ca0a6d4 RCX: 0000000000454e79 [ 185.565098] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000020000340 [ 185.572346] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 185.579594] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000013 [ 185.586841] R13: 00000000000003ea R14: 00000000006f7e90 R15: 0000000000000017 [ 185.595183] cgroup: cgroup_addrm_files: failed to add cgroup.stat, err=-12 2018/03/31 07:26:16 executing program 1 (fault-call:6 fault-nth:24): mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) open(&(0x7f00000000c0)='./file0\x00', 0xa0441, 0x80) syz_mount_image$msdos(&(0x7f0000000140)='msdos\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x1, &(0x7f0000000100)=[{&(0x7f0000000480)="9196b107dc9e5c731d56d84afae6a7bf24", 0x11, 0x1f}], 0x0, &(0x7f0000000000)=ANY=[]) rmdir(&(0x7f0000000080)='./file0//ile0\x00') mkdir(&(0x7f0000000340)='./file0//ile0\x00', 0x1) r0 = semget$private(0x0, 0x4, 0x21) semctl$GETPID(r0, 0x1, 0xb, &(0x7f0000000200)=""/154) [ 185.627116] FAULT_INJECTION: forcing a failure. [ 185.627116] name failslab, interval 1, probability 0, space 0, times 0 [ 185.638505] CPU: 1 PID: 13686 Comm: syz-executor7 Not tainted 4.16.0-rc7+ #372 [ 185.645860] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 185.655201] Call Trace: [ 185.657775] dump_stack+0x194/0x24d [ 185.661384] ? arch_local_irq_restore+0x53/0x53 [ 185.666041] should_fail+0x8c0/0xa40 [ 185.669736] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 185.674816] ? rb_first_postorder+0xa0/0xa0 [ 185.679115] ? __mutex_lock+0x16f/0x1a80 [ 185.683152] ? save_stack+0x43/0xd0 [ 185.686752] ? kasan_kmalloc+0xad/0xe0 [ 185.690617] ? find_held_lock+0x35/0x1d0 [ 185.694658] ? __lock_is_held+0xb6/0x140 [ 185.698701] ? check_same_owner+0x320/0x320 [ 185.703003] ? lock_downgrade+0x980/0x980 [ 185.707137] ? rcu_note_context_switch+0x710/0x710 [ 185.712047] should_failslab+0xec/0x120 [ 185.716002] __kmalloc_track_caller+0x5f/0x760 [ 185.720566] ? idr_alloc_cyclic+0x1d6/0x320 [ 185.724888] ? trace_hardirqs_off+0x10/0x10 [ 185.729184] ? kstrdup_const+0x39/0x50 [ 185.733049] ? __mutex_unlock_slowpath+0xe9/0xac0 [ 185.737870] kstrdup+0x39/0x70 [ 185.741040] kstrdup_const+0x39/0x50 [ 185.744734] __kernfs_new_node+0xa2/0x570 [ 185.748859] ? kernfs_dop_revalidate+0x380/0x380 [ 185.753592] ? kasan_check_read+0x11/0x20 [ 185.757717] ? read_word_at_a_time+0x12/0x20 [ 185.762100] ? strscpy+0x186/0x500 [ 185.765622] kernfs_new_node+0x80/0xe0 [ 185.769489] __kernfs_create_file+0x4b/0x320 [ 185.773878] cgroup_addrm_files+0x3c5/0xa70 [ 185.778181] ? cgroup_file_write+0x710/0x710 [ 185.782570] ? getrawmonotonic64+0x460/0x460 [ 185.786956] ? kernfs_active+0x92/0x160 [ 185.790910] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 185.795815] ? cgroup_kn_set_ugid+0x2c7/0x370 [ 185.800285] ? cgroup_file_name+0x1d0/0x1d0 [ 185.804584] css_populate_dir+0x340/0x420 [ 185.808732] cgroup_mkdir+0x553/0xfc0 [ 185.812517] ? __lock_is_held+0xb6/0x140 [ 185.816556] ? cgroup_destroy_locked+0x750/0x750 [ 185.821288] ? rcu_read_lock_sched_held+0x108/0x120 [ 185.826285] ? kmem_cache_free+0x258/0x2a0 [ 185.830496] ? set_nlink+0xc1/0x160 [ 185.834098] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 185.839002] ? generic_permission+0x105/0x3c0 [ 185.843478] ? cgroup_destroy_locked+0x750/0x750 [ 185.848208] kernfs_iop_mkdir+0x153/0x1e0 [ 185.852333] vfs_mkdir+0x390/0x600 [ 185.855850] SyS_mkdir+0x220/0x2a0 [ 185.859366] ? SyS_mkdirat+0x2b0/0x2b0 [ 185.863232] ? do_syscall_64+0xb7/0x940 [ 185.867181] ? SyS_mkdirat+0x2b0/0x2b0 [ 185.871044] do_syscall_64+0x281/0x940 [ 185.874909] ? vmalloc_sync_all+0x30/0x30 [ 185.879033] ? _raw_spin_unlock_irq+0x27/0x70 [ 185.883504] ? finish_task_switch+0x1c1/0x7e0 [ 185.887977] ? syscall_return_slowpath+0x550/0x550 [ 185.892881] ? syscall_return_slowpath+0x2ac/0x550 [ 185.897787] ? prepare_exit_to_usermode+0x350/0x350 [ 185.902782] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 185.908121] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 185.912943] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 185.918109] RIP: 0033:0x454e79 2018/03/31 07:26:16 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r1, 0x4008ae48, &(0x7f0000000000)=0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socketpair$inet_icmp(0x2, 0x2, 0x1, &(0x7f00000000c0)) ioctl$KVM_GET_ONE_REG(r2, 0x4010aeab, &(0x7f0000000180)={0x0, 0x2}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000040)={0x17000, 0x10000}) r3 = syz_open_dev$adsp(&(0x7f0000000100)='/dev/adsp#\x00', 0x10000, 0x1) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) 2018/03/31 07:26:16 executing program 7 (fault-call:7 fault-nth:20): mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) open(&(0x7f00000000c0)='./file0\x00', 0xa0441, 0x80) syz_mount_image$msdos(&(0x7f0000000140)='msdos\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x1, &(0x7f0000000100)=[{&(0x7f0000000480)="9196b107dc9e5c731d56d84afae6a7bf24", 0x11, 0x1f}], 0x0, &(0x7f0000000000)=ANY=[]) mkdir(&(0x7f0000000180)='./file0//ile0\x00', 0x112) rmdir(&(0x7f0000000080)='./file0//ile0\x00') mkdir(&(0x7f0000000340)='./file0//ile0\x00', 0x1) r0 = semget$private(0x0, 0x4, 0x21) semctl$GETPID(r0, 0x1, 0xb, &(0x7f0000000200)=""/154) [ 185.921275] RSP: 002b:00007f49041e4c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 185.928960] RAX: ffffffffffffffda RBX: 00007f49041e56d4 RCX: 0000000000454e79 [ 185.936210] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000020000340 [ 185.943455] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 185.950700] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000013 [ 185.957947] R13: 00000000000003ea R14: 00000000006f7e90 R15: 0000000000000013 [ 185.965542] cgroup: cgroup_addrm_files: failed to add cgroup.max.descendants, err=-12 [ 186.019738] FAULT_INJECTION: forcing a failure. [ 186.019738] name failslab, interval 1, probability 0, space 0, times 0 [ 186.031076] CPU: 0 PID: 13719 Comm: syz-executor1 Not tainted 4.16.0-rc7+ #372 [ 186.038436] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 186.048323] Call Trace: [ 186.050910] dump_stack+0x194/0x24d [ 186.054542] ? arch_local_irq_restore+0x53/0x53 [ 186.059219] should_fail+0x8c0/0xa40 [ 186.062933] ? kstrdup+0x39/0x70 [ 186.066298] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 186.071398] ? cgroup_mkdir+0x553/0xfc0 [ 186.075370] ? vfs_mkdir+0x390/0x600 [ 186.079079] ? SyS_mkdir+0x220/0x2a0 [ 186.082787] ? do_syscall_64+0x281/0x940 [ 186.086848] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 186.092208] ? find_held_lock+0x35/0x1d0 [ 186.096251] ? find_held_lock+0x35/0x1d0 [ 186.100295] ? __lock_is_held+0xb6/0x140 [ 186.104340] ? check_same_owner+0x320/0x320 [ 186.108645] ? rcu_note_context_switch+0x710/0x710 [ 186.113556] ? rcu_read_lock_sched_held+0x108/0x120 [ 186.118554] should_failslab+0xec/0x120 [ 186.122510] kmem_cache_alloc+0x47/0x760 [ 186.126547] ? memcpy+0x45/0x50 [ 186.129806] ? kstrdup+0x59/0x70 [ 186.133165] __kernfs_new_node+0xe2/0x570 [ 186.137294] ? kernfs_dop_revalidate+0x380/0x380 [ 186.142034] ? kasan_check_read+0x11/0x20 [ 186.146159] ? read_word_at_a_time+0x12/0x20 [ 186.150545] ? strscpy+0x186/0x500 [ 186.154068] kernfs_new_node+0x80/0xe0 [ 186.157932] __kernfs_create_file+0x4b/0x320 [ 186.162345] cgroup_addrm_files+0x3c5/0xa70 [ 186.166652] ? cgroup_file_write+0x710/0x710 [ 186.171045] ? getrawmonotonic64+0x460/0x460 [ 186.175433] ? kernfs_active+0x92/0x160 [ 186.179405] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 186.184324] ? cgroup_kn_set_ugid+0x2c7/0x370 [ 186.188796] ? cgroup_file_name+0x1d0/0x1d0 [ 186.193097] css_populate_dir+0x340/0x420 [ 186.197222] cgroup_mkdir+0x553/0xfc0 [ 186.201000] ? __lock_is_held+0xb6/0x140 [ 186.205049] ? cgroup_destroy_locked+0x750/0x750 [ 186.209781] ? rcu_read_lock_sched_held+0x108/0x120 [ 186.214774] ? kmem_cache_free+0x258/0x2a0 [ 186.218987] ? set_nlink+0xc1/0x160 [ 186.222592] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 186.227496] ? generic_permission+0x105/0x3c0 [ 186.231969] ? cgroup_destroy_locked+0x750/0x750 [ 186.236703] kernfs_iop_mkdir+0x153/0x1e0 [ 186.240829] vfs_mkdir+0x390/0x600 [ 186.244349] SyS_mkdir+0x220/0x2a0 [ 186.247866] ? SyS_mkdirat+0x2b0/0x2b0 [ 186.251731] ? do_syscall_64+0xb7/0x940 [ 186.255681] ? SyS_mkdirat+0x2b0/0x2b0 [ 186.259544] do_syscall_64+0x281/0x940 [ 186.263409] ? vmalloc_sync_all+0x30/0x30 [ 186.267537] ? _raw_spin_unlock_irq+0x27/0x70 [ 186.272010] ? finish_task_switch+0x1c1/0x7e0 [ 186.276489] ? syscall_return_slowpath+0x550/0x550 [ 186.281393] ? syscall_return_slowpath+0x2ac/0x550 [ 186.286297] ? prepare_exit_to_usermode+0x350/0x350 [ 186.291289] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 186.296630] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 186.301462] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 186.306625] RIP: 0033:0x454e79 [ 186.309791] RSP: 002b:00007f2d4ca09c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 2018/03/31 07:26:17 executing program 3: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/enforce\x00', 0x20202, 0x0) fallocate(r0, 0x0, 0x4219e1, 0x80009) init_module(&(0x7f0000002880)='ext2\x00', 0xfffffffffffffc7e, &(0x7f0000000500)='journal_path') r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') keyctl$session_to_parent(0x12) sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000a70ea43abe3d9502f9f515669a62c7d2e2d1221feec5d1995324a9", @ANYRES16=r1, @ANYBLOB="02042dbd7000fbdbdf250f000000"], 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x801) pwritev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)='h', 0x1}], 0x1, 0x0) fallocate(r0, 0x3, 0x0, 0x4c02) dup(r0) syz_mount_image$ext4(&(0x7f0000000280)='ext2\x00', &(0x7f00000002c0)='./file0\x00', 0x1, 0x5, &(0x7f00000026c0)=[{&(0x7f0000000300)="175e24a507b37a9e00d081c0dc6b2b2c9838d2a2dbf88d1eb703afde9092c28710d085398e00b0", 0x27, 0x9}, {&(0x7f00000003c0)="0458e3d6246cd248c40ad017a587302414a8df09c23aeb2e718ed645b68f34e363741697c66ad9397a88753a159f81d5f0229db47f747b8a11e9b906f5ede5b43dc7d26d84034939e42e282aae9b206692c13fdde20c0d5a1b25fd504908538345911500c46547a4c231057800f9e075f40ef2a58dd31b584079b8d14b5497091accccffe0ab470f1690d4816f537e6b9d2615922ae4a65291cd89b387dd92402ca024ea234ce35353f370e9860ee1ccc25008caf1c040deebb7cbed7be04a8661a27b954bd8916e399354278b6e2d274f10218b230768194c80b277b158bc8aacfd1b0d2b333aefb0b5564d4d", 0xed, 0x400}, {&(0x7f0000000500), 0x0, 0x2}, {&(0x7f0000001540)="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", 0x1000, 0x82}, {&(0x7f0000002640)="61f431ed1a840da0d6c8cf9fda084e676a48378da318e158742f13738eae8b84a6ad4a0020bf3ae351b4517a5c1a5063353d52ab1cf18a904cc96d54fa11e41b0be09e2b12a72e2424a72a40d3425030892a4b410b", 0x55, 0x4}], 0x1000000, &(0x7f0000002ac0)=ANY=[]) ioctl$KVM_SIGNAL_MSI(r0, 0x4020aea5, &(0x7f0000000080)={0x100000, 0xf000, 0x2, 0xffff, 0x9}) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0x5}, &(0x7f00000027c0)=0x8) getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000002800)=@assoc_value={r2, 0xdb}, &(0x7f0000002840)=0x8) 2018/03/31 07:26:17 executing program 0: socket$inet6_sctp(0xa, 0x1, 0x84) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-vsock\x00', 0x2, 0x0) r1 = syz_open_pts(0xffffffffffffffff, 0x40040) ioctl$TIOCCBRK(r1, 0x5428) ioctl$TIOCSCTTY(r1, 0x540e, 0x839) ioctl$VHOST_SET_LOG_BASE(r0, 0xaf01, &(0x7f0000307000)=&(0x7f0000000080)) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000280)='/dev/rtc\x00', 0x80, 0x0) connect$vsock_stream(r2, &(0x7f0000000240)={0x28, 0x0, 0x0, @host=0x2}, 0x10) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x0, 0x0) bind$alg(r3, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha1\x00'}, 0x58) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4008af24, &(0x7f00003b6000)={0x0, 0x0, &(0x7f0000000140)=""/9, &(0x7f0000fb0f80)=""/128, &(0x7f0000f8b000)=""/4}) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000000)={0x8, 0x0, 0x6, 0x0, 0x2, 0x4, 0x7, 0xca, 0x3, 0x7fff, 0x3, 0x0, 0x0, 0x0, 0xfffffffffffffffa, 0x5, 0x3, 0x8, 0x8000}) setsockopt$inet_udp_encap(r2, 0x11, 0x64, &(0x7f00000002c0)=0x2, 0x4) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000200)={&(0x7f0000000100)='./file0\x00', r2}, 0x10) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000f3dfef)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSARP(r4, 0x40096101, &(0x7f00008da000)={{0x2, 0x0, @multicast2=0xe0000002, [0xfe]}, {}, 0x0, {0x2, 0x0, @dev={0xac, 0x14, 0x14}}, 'ip6tnl0\x00'}) [ 186.317477] RAX: ffffffffffffffda RBX: 00007f2d4ca0a6d4 RCX: 0000000000454e79 [ 186.324723] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000020000340 [ 186.331968] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 186.339214] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000013 [ 186.346460] R13: 00000000000003ea R14: 00000000006f7e90 R15: 0000000000000018 [ 186.354279] cgroup: cgroup_addrm_files: failed to add cgroup.stat, err=-12 2018/03/31 07:26:17 executing program 5: socketpair$inet_dccp(0x2, 0x6, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = epoll_create1(0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f0000000040)={r0}) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e21, 0x5, @mcast1={0xff, 0x1, [], 0x1}, 0x3}}, [0x7, 0x4, 0xe34b, 0x7e3e, 0xffffffff, 0x4, 0x80, 0x7f, 0x9c1d, 0xfffffffffffffff9, 0x80000001, 0x100000001, 0x100000000000, 0x4e, 0x3]}, &(0x7f0000000140)=0x100) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f00000002c0)={r3, 0x4, 0x1, [0x4]}, &(0x7f0000000300)=0xa) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r1, &(0x7f0000dc0000)) perf_event_open(&(0x7f0000223000)={0x3, 0x70, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000000000, 0x0, 0x0, 0x0, 0x581e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xebb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0xa4fe, 0x208000) ioctl$PIO_UNIMAP(r5, 0x4b67, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x0, 0x401}]}) dup3(r4, r1, 0x0) 2018/03/31 07:26:17 executing program 1 (fault-call:6 fault-nth:25): mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) open(&(0x7f00000000c0)='./file0\x00', 0xa0441, 0x80) syz_mount_image$msdos(&(0x7f0000000140)='msdos\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x1, &(0x7f0000000100)=[{&(0x7f0000000480)="9196b107dc9e5c731d56d84afae6a7bf24", 0x11, 0x1f}], 0x0, &(0x7f0000000000)=ANY=[]) rmdir(&(0x7f0000000080)='./file0//ile0\x00') mkdir(&(0x7f0000000340)='./file0//ile0\x00', 0x1) r0 = semget$private(0x0, 0x4, 0x21) semctl$GETPID(r0, 0x1, 0xb, &(0x7f0000000200)=""/154) 2018/03/31 07:26:17 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000040)={0x0, @rand_addr, @remote}, &(0x7f00000000c0)=0x2) write$rdma_cm(r0, &(0x7f0000000080)=@create_id={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x106}}, 0x20) write(r0, &(0x7f00000000c0), 0xfec9) r1 = socket(0x1f, 0x5, 0x0) setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000100)={0x2, 0xffffffff}, 0x2) [ 186.433698] QAT: Stopping all acceleration devices. [ 186.437103] FAULT_INJECTION: forcing a failure. [ 186.437103] name failslab, interval 1, probability 0, space 0, times 0 [ 186.450065] CPU: 1 PID: 13728 Comm: syz-executor7 Not tainted 4.16.0-rc7+ #372 [ 186.457428] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 186.466776] Call Trace: [ 186.469371] dump_stack+0x194/0x24d [ 186.472999] ? arch_local_irq_restore+0x53/0x53 [ 186.477681] should_fail+0x8c0/0xa40 [ 186.481397] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 186.486503] ? rb_first_postorder+0xa0/0xa0 [ 186.490823] ? __mutex_lock+0x16f/0x1a80 [ 186.494894] ? trace_hardirqs_off+0x10/0x10 [ 186.499233] ? find_held_lock+0x35/0x1d0 [ 186.503296] ? __lock_is_held+0xb6/0x140 [ 186.507414] ? check_same_owner+0x320/0x320 [ 186.511736] ? lock_downgrade+0x980/0x980 [ 186.515890] ? rcu_note_context_switch+0x710/0x710 [ 186.520830] should_failslab+0xec/0x120 [ 186.524609] QAT: Stopping all acceleration devices. [ 186.524799] __kmalloc_track_caller+0x5f/0x760 [ 186.534381] ? idr_alloc_cyclic+0x1d6/0x320 [ 186.538703] ? kstrdup_const+0x39/0x50 [ 186.542590] ? __mutex_unlock_slowpath+0xe9/0xac0 [ 186.547436] kstrdup+0x39/0x70 [ 186.550632] kstrdup_const+0x39/0x50 [ 186.554345] __kernfs_new_node+0xa2/0x570 [ 186.558491] ? kernfs_dop_revalidate+0x380/0x380 [ 186.563245] ? kasan_check_read+0x11/0x20 [ 186.567392] ? read_word_at_a_time+0x12/0x20 [ 186.571794] ? strscpy+0x186/0x500 [ 186.575340] kernfs_new_node+0x80/0xe0 [ 186.579234] __kernfs_create_file+0x4b/0x320 [ 186.583642] cgroup_addrm_files+0x3c5/0xa70 [ 186.587970] ? cgroup_file_write+0x710/0x710 [ 186.592378] ? getrawmonotonic64+0x460/0x460 [ 186.596783] ? kernfs_active+0x92/0x160 [ 186.600758] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 186.605682] ? cgroup_kn_set_ugid+0x2c7/0x370 [ 186.610176] ? cgroup_file_name+0x1d0/0x1d0 [ 186.614502] css_populate_dir+0x340/0x420 [ 186.618650] cgroup_mkdir+0x553/0xfc0 [ 186.622445] ? __lock_is_held+0xb6/0x140 [ 186.626502] ? cgroup_destroy_locked+0x750/0x750 [ 186.631244] ? rcu_read_lock_sched_held+0x108/0x120 [ 186.636239] ? kmem_cache_free+0x258/0x2a0 [ 186.640457] ? set_nlink+0xc1/0x160 [ 186.644068] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 186.648970] ? generic_permission+0x105/0x3c0 [ 186.653444] ? cgroup_destroy_locked+0x750/0x750 [ 186.658178] kernfs_iop_mkdir+0x153/0x1e0 [ 186.662314] vfs_mkdir+0x390/0x600 [ 186.665835] SyS_mkdir+0x220/0x2a0 [ 186.669356] ? SyS_mkdirat+0x2b0/0x2b0 [ 186.673225] ? do_syscall_64+0xb7/0x940 [ 186.677175] ? SyS_mkdirat+0x2b0/0x2b0 [ 186.681039] do_syscall_64+0x281/0x940 [ 186.684906] ? vmalloc_sync_all+0x30/0x30 [ 186.689035] ? _raw_spin_unlock_irq+0x27/0x70 [ 186.693511] ? finish_task_switch+0x1c1/0x7e0 [ 186.697981] ? syscall_return_slowpath+0x550/0x550 [ 186.702895] ? syscall_return_slowpath+0x2ac/0x550 [ 186.707824] ? prepare_exit_to_usermode+0x350/0x350 [ 186.712819] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 186.718159] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 186.722980] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 186.728155] RIP: 0033:0x454e79 [ 186.731319] RSP: 002b:00007f49041e4c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 186.739001] RAX: ffffffffffffffda RBX: 00007f49041e56d4 RCX: 0000000000454e79 [ 186.746259] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000020000340 [ 186.753507] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 186.760751] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000013 [ 186.768001] R13: 00000000000003ea R14: 00000000006f7e90 R15: 0000000000000014 [ 186.775354] cgroup: cgroup_addrm_files: failed to add cgroup.max.depth, err=-12 [ 186.808604] FAULT_INJECTION: forcing a failure. [ 186.808604] name failslab, interval 1, probability 0, space 0, times 0 [ 186.819950] CPU: 0 PID: 13762 Comm: syz-executor1 Not tainted 4.16.0-rc7+ #372 [ 186.827301] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 186.836633] Call Trace: [ 186.839213] dump_stack+0x194/0x24d [ 186.842837] ? arch_local_irq_restore+0x53/0x53 [ 186.847511] should_fail+0x8c0/0xa40 [ 186.851219] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 186.856322] ? rb_first_postorder+0xa0/0xa0 [ 186.860642] ? __mutex_lock+0x16f/0x1a80 [ 186.864701] ? save_stack+0x43/0xd0 [ 186.868315] ? kasan_kmalloc+0xad/0xe0 [ 186.872183] ? trace_hardirqs_off+0x10/0x10 [ 186.876480] ? find_held_lock+0x35/0x1d0 [ 186.880517] ? __lock_is_held+0xb6/0x140 [ 186.884556] ? check_same_owner+0x320/0x320 [ 186.888854] ? lock_downgrade+0x980/0x980 [ 186.892980] ? rcu_note_context_switch+0x710/0x710 [ 186.897889] should_failslab+0xec/0x120 [ 186.901838] __kmalloc_track_caller+0x5f/0x760 [ 186.906408] ? idr_alloc_cyclic+0x1d6/0x320 [ 186.910711] ? kstrdup_const+0x39/0x50 [ 186.914578] ? __mutex_unlock_slowpath+0xe9/0xac0 [ 186.919398] kstrdup+0x39/0x70 [ 186.922564] kstrdup_const+0x39/0x50 [ 186.926252] __kernfs_new_node+0xa2/0x570 [ 186.930373] ? kernfs_dop_revalidate+0x380/0x380 [ 186.935107] ? kasan_check_read+0x11/0x20 [ 186.939228] ? read_word_at_a_time+0x12/0x20 [ 186.943607] ? strscpy+0x186/0x500 [ 186.947125] kernfs_new_node+0x80/0xe0 [ 186.950988] __kernfs_create_file+0x4b/0x320 [ 186.955374] cgroup_addrm_files+0x3c5/0xa70 [ 186.959681] ? cgroup_file_write+0x710/0x710 [ 186.964065] ? getrawmonotonic64+0x460/0x460 [ 186.968449] ? kernfs_active+0x92/0x160 [ 186.972402] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 186.977305] ? cgroup_kn_set_ugid+0x2c7/0x370 [ 186.981774] ? cgroup_file_name+0x1d0/0x1d0 [ 186.986073] css_populate_dir+0x340/0x420 [ 186.990197] cgroup_mkdir+0x553/0xfc0 [ 186.993969] ? __lock_is_held+0xb6/0x140 [ 186.998009] ? cgroup_destroy_locked+0x750/0x750 [ 187.002744] ? rcu_read_lock_sched_held+0x108/0x120 [ 187.007733] ? kmem_cache_free+0x258/0x2a0 [ 187.011942] ? set_nlink+0xc1/0x160 [ 187.015554] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 187.020455] ? generic_permission+0x105/0x3c0 [ 187.024926] ? cgroup_destroy_locked+0x750/0x750 [ 187.029658] kernfs_iop_mkdir+0x153/0x1e0 [ 187.033794] vfs_mkdir+0x390/0x600 [ 187.037311] SyS_mkdir+0x220/0x2a0 [ 187.040827] ? SyS_mkdirat+0x2b0/0x2b0 [ 187.044691] ? do_syscall_64+0xb7/0x940 [ 187.048639] ? SyS_mkdirat+0x2b0/0x2b0 [ 187.052499] do_syscall_64+0x281/0x940 [ 187.056361] ? vmalloc_sync_all+0x30/0x30 [ 187.060502] ? syscall_return_slowpath+0x550/0x550 [ 187.065405] ? syscall_return_slowpath+0x2ac/0x550 [ 187.070308] ? prepare_exit_to_usermode+0x350/0x350 [ 187.075315] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 187.080659] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 187.085484] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 187.090646] RIP: 0033:0x454e79 [ 187.093813] RSP: 002b:00007f2d4ca09c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 187.101506] RAX: ffffffffffffffda RBX: 00007f2d4ca0a6d4 RCX: 0000000000454e79 2018/03/31 07:26:17 executing program 7 (fault-call:7 fault-nth:21): mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) open(&(0x7f00000000c0)='./file0\x00', 0xa0441, 0x80) syz_mount_image$msdos(&(0x7f0000000140)='msdos\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x1, &(0x7f0000000100)=[{&(0x7f0000000480)="9196b107dc9e5c731d56d84afae6a7bf24", 0x11, 0x1f}], 0x0, &(0x7f0000000000)=ANY=[]) mkdir(&(0x7f0000000180)='./file0//ile0\x00', 0x112) rmdir(&(0x7f0000000080)='./file0//ile0\x00') mkdir(&(0x7f0000000340)='./file0//ile0\x00', 0x1) r0 = semget$private(0x0, 0x4, 0x21) semctl$GETPID(r0, 0x1, 0xb, &(0x7f0000000200)=""/154) 2018/03/31 07:26:17 executing program 1 (fault-call:6 fault-nth:26): mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) open(&(0x7f00000000c0)='./file0\x00', 0xa0441, 0x80) syz_mount_image$msdos(&(0x7f0000000140)='msdos\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x1, &(0x7f0000000100)=[{&(0x7f0000000480)="9196b107dc9e5c731d56d84afae6a7bf24", 0x11, 0x1f}], 0x0, &(0x7f0000000000)=ANY=[]) rmdir(&(0x7f0000000080)='./file0//ile0\x00') mkdir(&(0x7f0000000340)='./file0//ile0\x00', 0x1) r0 = semget$private(0x0, 0x4, 0x21) semctl$GETPID(r0, 0x1, 0xb, &(0x7f0000000200)=""/154) 2018/03/31 07:26:17 executing program 6: r0 = socket$inet6(0xa, 0x80000000000002, 0x10000000) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f000089b000)=0xffffffffffffffff, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e23}, 0x1c) r1 = dup2(r0, r0) socket$inet6(0xa, 0x6, 0xffffffff8699d16a) getpeername$netrom(r1, &(0x7f0000001640), &(0x7f0000001680)=0x10) 2018/03/31 07:26:17 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = accept4(r0, &(0x7f0000001100)=@pppoe={0x0, 0x0, {0x0, @link_local}}, &(0x7f0000000700)=0x80, 0x800) bind$nfc_llcp(r1, &(0x7f00000011c0)={0x27, 0x1, 0x2, 0x7, 0x0, 0xc1, "4eeda24019275aa01c9e09403cfac9896edc271139fe8aeedb1e6b4eba8f248f8f8fa615fef6b2dc242a1f95f7db54870ad4c8353770bb2a574eb2d5faa83c", 0x15}, 0x60) read(r0, &(0x7f0000000000)=""/146, 0xc3ed9ab1f543712a) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffff9c, 0x84, 0x10, &(0x7f0000000240)=@sack_info={0x0, 0x0, 0x401}, &(0x7f0000000280)=0xc) setsockopt$inet_sctp_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, &(0x7f0000000a40)=r2, 0xffffffffffffff5c) r3 = gettid() sendmsg$nl_route(r1, &(0x7f00000006c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20020000}, 0xc, &(0x7f0000000200)={&(0x7f0000000740)=@bridge_getlink={0x288, 0x12, 0x400, 0x70bd26, 0x25dfdbff, {0x7, 0x0, 0x0, 0x0, 0x1000, 0x28000}, [@IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x80000000}, @IFLA_PORT_SELF={0x258, 0x19, [@typed={0xb0, 0x47, @binary="39db8fab8063c296f739511ebbb5d1d3f9f95dc664b1207213bd7e216053d7e8bc0983f0aa485156362c5430dc9cc8fb4e8a3e76e2d9868470c65d9f38c6ebdce1e500f08335349faf314b37c07af50c45ce59e583e06b837cb252c96c94ee2a5a421966405ac21ba89f883db902f1ac59949d17d2ffe644e5e6beb7720656dba53d34189a2f2e1d63e506223ac04f6bff466fd9cd3caec74d0bd9fde58a3e117a58378d550899b8cc89fb2e"}, @nested={0x194, 0x15, [@generic="98545eb3ada4f7cdc3362fb4f48c1c4717cd7a0e7d4025b4fe9173c75ec5af09f7af4346eba3b4074ec1acc4f4a67eaae0", @generic="b239aec81aef415566266bf6826c6b953a60e66fb4457125e0ef943feef397847c01aaef831d65b9dc52d070dbafc4de78957362f659a9626dec981134519b84fd4836d4c022c0baed312dceb59a50f930771db7c560aaef0945a790507aa954fdf1a3d2319d3e99dd5a5236eedfc62167", @typed={0x8, 0x20, @pid=r3}, @generic="ea459d8f0a193e13ca14eeddd81f29b1e539bdb67d27f9d79ec03f74024c69c6a56a7982100ca892ed4f3934eb4d6605968f3b45d2f58eacd16cba1c011daac3249dbda1bfbf127526ee74a13ce5cce77a7e6593d3e64b48d94b64c96ce2e7956afc4b64f10d75b171e1406b9e466fff32e96299ea403e401d886cb28565c6e1cccee3e87286f4dddd53e79789527636bfff384f6d01a5a93ef681847de4d70fe5989a51477190578aa9975b85caf49c4ab49e805b1936d668247e61516e1b28c2e9d4517dd3d853f8226a9e210f41de45c7a102b5f7ebab70", @typed={0xc, 0x90, @str='IPVS\x00'}]}, @typed={0x4, 0x4a}, @typed={0xc, 0xe, @str='IPVS\x00'}]}, @IFLA_OPERSTATE={0x8, 0x10, 0x1}]}, 0x288}, 0x1, 0x0, 0x0, 0x8004}, 0x90) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB="180000001d00ffff0000000000000000050000004000000014759de36d3648d85c7075401f44cb79a11b51eaee13a0fc8dab699dfb"], 0x18}, 0x1}, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000080)={0x0, 0x80000}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffff9c, 0xc0086420, &(0x7f0000000100)) recvmsg(r4, &(0x7f0000000680)={&(0x7f00000003c0)=@un=@abs, 0x80, &(0x7f0000000580)=[{&(0x7f0000000440)=""/148, 0x94}, {&(0x7f0000000500)=""/104, 0x68}], 0x2, &(0x7f00000005c0)=""/142, 0x8e, 0x2}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') getsockopt$IP_VS_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x481, &(0x7f0000001540), &(0x7f0000001580)=0xc) setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f0000001400)={0x9, {{0xa, 0x4e22, 0x7f, @local={0xfe, 0x80, [], 0xaa}, 0x9}}, {{0xa, 0x4e24, 0x0, @loopback={0x0, 0x1}, 0x5}}}, 0x108) r5 = getpgrp(0xffffffffffffffff) wait4(r5, &(0x7f0000000140), 0x1, &(0x7f0000000300)) 2018/03/31 07:26:17 executing program 4: pipe(&(0x7f0000eb0ff8)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00006dc000)={0xffffffffffffffff, 0xffffffffffffffff}) tee(r0, r3, 0x8000, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(r3, 0xc008640a, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, &(0x7f0000000040)={r4, 0x80000, r2}) r5 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f000087fff8)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r6, 0x5452, &(0x7f0000008ff8)=0x3f) fcntl$setsig(r1, 0xa, 0x12) fcntl$setownex(r6, 0xf, &(0x7f0000704000)={0x0, r5}) recvmsg(r7, &(0x7f000095cfc8)={&(0x7f0000000680)=ANY=[], 0x0, &(0x7f0000000b80), 0x0, &(0x7f0000b30000)}, 0x0) dup2(r6, r7) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e21, 0x6, @mcast2={0xff, 0x2, [], 0x1}, 0xffffffffffffffff}}, 0x8001, 0x4b4, 0x6, 0xfffffffffffffffd, 0x13}, &(0x7f00000001c0)=0x98) syz_open_dev$sndctrl(&(0x7f0000000240)='/dev/snd/controlC#\x00', 0x1, 0x40001) setsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000200)={r8, 0x3, 0x7}, 0x10) r9 = gettid() ioctl$KVM_ASSIGN_DEV_IRQ(r3, 0x4040ae70, &(0x7f00000000c0)={0x85f, 0x5, 0x2, 0x1}) tkill(r9, 0x16) write(r1, &(0x7f0000838000)="9f", 0x1) write(r3, &(0x7f0000000080)="94edee1cb10c4ba3d10f4d6aeddd64e7e0eb0d8692bf01", 0x17) 2018/03/31 07:26:17 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000a80)=""/246) ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000000000)={0x0, 0xffffffffffffffff}) ioctl$EVIOCGREP(r0, 0x40047451, &(0x7f00000008c0)=""/174) close(r0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000002a40)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r1) ioctl$KVM_SET_FPU(0xffffffffffffffff, 0x41a0ae8d, &(0x7f0000002a80)={[], 0x4b9, 0x7f910fbf, 0x6640, 0x0, 0x0, 0x0, 0xd000, [], 0x7}) r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_NAME(r2, 0x41007701, &(0x7f0000000040)='/dev/ashmem\x00') perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000e84000)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000000200)=0x6, 0x4) ioctl$sock_bt_hidp_HIDPCONNDEL(0xffffffffffffffff, 0x400448c9, &(0x7f0000000080)={{0x1, 0x7fffffff, 0x8001, 0x3, 0x0, 0x1}}) ioctl$KVM_CREATE_PIT2(r4, 0x4040ae77, &(0x7f0000516000)) ioctl$KVM_SET_PIT(r4, 0x8048ae66, &(0x7f000074af90)={[{0x7}]}) sysfs$3(0x3) ioctl$KVM_SET_PIT(r4, 0x8048ae66, &(0x7f0000001000)) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000240)={{{@in=@dev, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@rand_addr}}, &(0x7f0000000340)=0xe8) r6 = getegid() lchown(&(0x7f00000001c0)='./file0\x00', r5, r6) getsockopt$nfc_llcp(0xffffffffffffffff, 0x118, 0x1, &(0x7f00000000c0)=""/128, 0x80) getsockopt$nfc_llcp(0xffffffffffffffff, 0x118, 0x7, &(0x7f0000000140)=""/109, 0x6d) syz_open_dev$vcsn(&(0x7f0000000140)='/dev/vcs#\x00', 0x3, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x2000) writev(0xffffffffffffffff, &(0x7f00000027c0)=[{&(0x7f00000026c0)="fdaa2c240921abb301600a760a62335a2a293713c887be1c0c360b7061392ab770890427781a3a32138ff6ed4757f0d09af511f9ba3d37f7f6481b76726059c40f32f823cb15c69220839b70ae3f54b5d0ff3756014c7c016d51f6163a6d036bd160418c5a2933212866268950fc834b1ea8ec9fb6e09426769010734c2b10d86ea770ffee34b8ba6d5ae1d836c0f3aeb03f20aa02aa1fb32eb1356f3e445d9434a8227f9914fc6b", 0xa8}], 0x1) unlink(&(0x7f0000000080)='./file0/file0\x00') 2018/03/31 07:26:17 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000040)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af1f0200f5ab26d7a071fb35331ce39c5a") ioctl$DRM_IOCTL_RES_CTX(r0, 0x401c5820, &(0x7f0000000000)={0x200001df, &(0x7f0000000040)}) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000100)={0x0}) ioctl$DRM_IOCTL_RM_CTX(r0, 0xc0086421, &(0x7f0000000140)={r1, 0x1}) 2018/03/31 07:26:17 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'ip_vti0\x00', &(0x7f0000000200)=ANY=[@ANYBLOB]}) [ 187.108751] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000020000340 [ 187.115995] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 187.123245] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000013 [ 187.130486] R13: 00000000000003ea R14: 00000000006f7e90 R15: 0000000000000019 [ 187.137970] cgroup: cgroup_addrm_files: failed to add cpu.stat, err=-12 [ 187.172190] netlink: 4 bytes leftover after parsing attributes in process `syz-executor5'. [ 187.211961] FAULT_INJECTION: forcing a failure. [ 187.211961] name failslab, interval 1, probability 0, space 0, times 0 [ 187.223284] CPU: 0 PID: 13780 Comm: syz-executor7 Not tainted 4.16.0-rc7+ #372 [ 187.230639] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 187.239982] Call Trace: [ 187.242566] dump_stack+0x194/0x24d [ 187.246197] ? arch_local_irq_restore+0x53/0x53 [ 187.250868] should_fail+0x8c0/0xa40 [ 187.254577] ? kstrdup+0x39/0x70 [ 187.257942] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 187.263038] ? cgroup_mkdir+0x553/0xfc0 [ 187.267008] ? vfs_mkdir+0x390/0x600 [ 187.270713] ? SyS_mkdir+0x220/0x2a0 [ 187.274422] ? do_syscall_64+0x281/0x940 [ 187.278480] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 187.283846] ? find_held_lock+0x35/0x1d0 [ 187.287911] ? find_held_lock+0x35/0x1d0 [ 187.288229] netlink: 4 bytes leftover after parsing attributes in process `syz-executor6'. [ 187.291966] ? __lock_is_held+0xb6/0x140 [ 187.291987] ? check_same_owner+0x320/0x320 [ 187.292001] ? rcu_note_context_switch+0x710/0x710 [ 187.292011] ? rcu_read_lock_sched_held+0x108/0x120 [ 187.292025] should_failslab+0xec/0x120 [ 187.292035] kmem_cache_alloc+0x47/0x760 [ 187.292044] ? memcpy+0x45/0x50 [ 187.292057] ? kstrdup+0x59/0x70 [ 187.292071] __kernfs_new_node+0xe2/0x570 [ 187.292082] ? kernfs_dop_revalidate+0x380/0x380 [ 187.342182] ? kasan_check_read+0x11/0x20 [ 187.346325] ? read_word_at_a_time+0x12/0x20 [ 187.350734] ? strscpy+0x186/0x500 [ 187.354276] kernfs_new_node+0x80/0xe0 [ 187.358157] __kernfs_create_file+0x4b/0x320 [ 187.362566] cgroup_addrm_files+0x3c5/0xa70 [ 187.366890] ? cgroup_file_write+0x710/0x710 [ 187.371299] ? getrawmonotonic64+0x460/0x460 [ 187.375703] ? kernfs_active+0x92/0x160 [ 187.379676] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 187.384595] ? cgroup_kn_set_ugid+0x2c7/0x370 [ 187.389071] ? cgroup_file_name+0x1d0/0x1d0 [ 187.393374] css_populate_dir+0x340/0x420 [ 187.397500] cgroup_mkdir+0x553/0xfc0 [ 187.401277] ? __lock_is_held+0xb6/0x140 [ 187.405315] ? cgroup_destroy_locked+0x750/0x750 [ 187.410049] ? rcu_read_lock_sched_held+0x108/0x120 [ 187.415043] ? kmem_cache_free+0x258/0x2a0 [ 187.419256] ? set_nlink+0xc1/0x160 [ 187.422857] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 187.427759] ? generic_permission+0x105/0x3c0 [ 187.432231] ? cgroup_destroy_locked+0x750/0x750 [ 187.436966] kernfs_iop_mkdir+0x153/0x1e0 [ 187.441091] vfs_mkdir+0x390/0x600 [ 187.444607] SyS_mkdir+0x220/0x2a0 [ 187.448125] ? SyS_mkdirat+0x2b0/0x2b0 [ 187.451987] ? do_syscall_64+0xb7/0x940 [ 187.455939] ? SyS_mkdirat+0x2b0/0x2b0 [ 187.459801] do_syscall_64+0x281/0x940 [ 187.463662] ? vmalloc_sync_all+0x30/0x30 [ 187.467787] ? _raw_spin_unlock_irq+0x27/0x70 [ 187.472257] ? finish_task_switch+0x1c1/0x7e0 [ 187.476726] ? syscall_return_slowpath+0x550/0x550 [ 187.481632] ? syscall_return_slowpath+0x2ac/0x550 [ 187.486535] ? prepare_exit_to_usermode+0x350/0x350 [ 187.491528] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 187.496868] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 187.501689] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 187.506854] RIP: 0033:0x454e79 [ 187.510020] RSP: 002b:00007f49041e4c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 2018/03/31 07:26:17 executing program 6: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x1, 0xb, &(0x7f0000003fad)=ANY=[@ANYBLOB="1800000000000000000000000000000005000000000000000000000000000000000000000000000000000000000000000500007900000000000000000000000000181000", @ANYRES32, @ANYBLOB="00000000000000009500000000000000"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f0000006f3d)=""/195}, 0x48) ioctl$KVM_CREATE_DEVICE(0xffffffffffffff9c, 0xc00caee0, &(0x7f0000000000)={0x2, r0, 0x1}) ioctl$KVM_GET_XCRS(r1, 0x8188aea6, &(0x7f0000000040)={0x5, 0x7, [{0x4, 0x0, 0x9}, {0x2, 0x0, 0x4000000000}, {0x2, 0x0, 0x7}, {0x10001, 0x0, 0xc75}, {0x1000, 0x0, 0x8001}]}) 2018/03/31 07:26:17 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6(0xa, 0x80000, 0x0) setsockopt$inet6_dccp_buf(r1, 0x21, 0xc2, &(0x7f0000000000)="d662268fb03b06e2840eb28ea56f1fdc6bd3126d", 0x14) bind$inet(r0, &(0x7f0000fcfff0)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) connect$inet(r0, &(0x7f0000606ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) connect$unix(r0, &(0x7f00006da000)=@file={0x0, './file0\x00'}, 0xa) connect$inet(r0, &(0x7f0000484000)={0x2, 0x4e20}, 0x10) sendto$inet(r0, &(0x7f00000000c0), 0x0, 0x45, &(0x7f0000000180)={0x2, 0x0, @multicast2=0xe0000002}, 0x10) times(&(0x7f0000000040)) 2018/03/31 07:26:17 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000000000)={{{@in=@rand_addr, @in6=@mcast2}}, {{@in=@rand_addr}, 0x0, @in6=@ipv4={[], [], @multicast2}}}, &(0x7f0000000100)=0xe8) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000180)=ANY=[@ANYRES32=0x0, @ANYBLOB="34000000b27d8508066a2eee2dc2eb55ea7f25294a302b7748b339f91b16e0c929333e48eb9743c634b17d910719e5c77f83dd0000000000452465487fa5456720971e7cba6c711a27"], &(0x7f0000000240)=0x3c) ioctl$DRM_IOCTL_AGP_RELEASE(r1, 0x6431) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0xf, &(0x7f00000004c0)=0xfff, 0x4) r2 = accept4(0xffffffffffffffff, &(0x7f0000000540)=@pptp={0x0, 0x0, {0x0, @broadcast}}, &(0x7f0000000400)=0xffffffffffffffc9, 0x800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r2, 0x29, 0xd3, &(0x7f0000000380)={{0xa, 0x4e24, 0x100000000, @loopback={0x0, 0x1}, 0x2}, {0xa, 0x4e22, 0x7, @local={0xfe, 0x80, [], 0xaa}}, 0x7ff, [0x80000001, 0xffffffff80000000, 0x6, 0x1, 0x10001, 0x2, 0x2, 0x10001]}, 0x5c) setsockopt$ipx_IPX_TYPE(r2, 0x100, 0x1, &(0x7f0000000600)=0x66d9, 0x4) sendmsg$nl_generic(r0, &(0x7f0000b3dfc8)={&(0x7f0000001580)={0x10}, 0xc, &(0x7f00000015c0)={&(0x7f0000000140)={0x20, 0x22, 0x105, 0x0, 0x0, {0x4}, [@typed={0x8, 0x0, @u32}, @generic="a3"]}, 0x20}, 0x1}, 0x0) r3 = getpgid(0x0) capget(&(0x7f0000000280)={0x200f1526, r3}, &(0x7f00000002c0)={0x57a, 0x4, 0x0, 0x5, 0x9, 0x8}) 2018/03/31 07:26:18 executing program 2: clock_gettime(0x7, &(0x7f0000000080)) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffff9c, 0xc00c642d, &(0x7f0000000040)={0x0, 0x80000, 0xffffffffffffff9c}) ftruncate(r0, 0x0) setitimer(0xfffffffffffffffd, &(0x7f00000000c0)={{0x0, 0x2710}, {0x77359400}}, &(0x7f0000000000)) 2018/03/31 07:26:18 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000040)=ANY=[@ANYBLOB="0800000000000000e352"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, &(0x7f0000000100), 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_TSS_ADDR(r1, 0xae47, 0xd000) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x2, 0x10000) ioctl$EVIOCSCLOCKID(r3, 0x400445a0, &(0x7f0000000140)=0x7fff) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x10000, 0x1, 0xf000, 0x2000, &(0x7f0000008000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 187.517705] RAX: ffffffffffffffda RBX: 00007f49041e56d4 RCX: 0000000000454e79 [ 187.524949] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000020000340 [ 187.532194] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 187.539438] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000013 [ 187.546684] R13: 00000000000003ea R14: 00000000006f7e90 R15: 0000000000000015 [ 187.554182] cgroup: cgroup_addrm_files: failed to add cgroup.max.depth, err=-12 [ 187.575515] FAULT_INJECTION: forcing a failure. [ 187.575515] name failslab, interval 1, probability 0, space 0, times 0 [ 187.586897] CPU: 0 PID: 13786 Comm: syz-executor1 Not tainted 4.16.0-rc7+ #372 [ 187.594246] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 187.603579] Call Trace: [ 187.606145] dump_stack+0x194/0x24d [ 187.609751] ? arch_local_irq_restore+0x53/0x53 [ 187.614404] should_fail+0x8c0/0xa40 [ 187.618098] ? __mutex_unlock_slowpath+0xe9/0xac0 [ 187.622918] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 187.627996] ? _raw_spin_unlock+0x22/0x30 [ 187.632127] ? kernfs_dop_revalidate+0x380/0x380 [ 187.636861] ? find_held_lock+0x35/0x1d0 [ 187.640897] ? __lock_is_held+0xb6/0x140 [ 187.644939] ? check_same_owner+0x320/0x320 [ 187.649237] ? __kernfs_create_file+0x27f/0x320 [ 187.654229] ? rcu_note_context_switch+0x710/0x710 [ 187.659138] should_failslab+0xec/0x120 [ 187.663089] kmem_cache_alloc+0x47/0x760 [ 187.667129] ? __lock_is_held+0xb6/0x140 [ 187.671171] sched_create_group+0x22/0x70 [ 187.675295] cpu_cgroup_css_alloc+0xe/0x30 [ 187.679529] cgroup_apply_control_enable+0x44d/0xbc0 [ 187.684614] ? cgroup_propagate_control+0x570/0x570 [ 187.689610] ? css_populate_dir+0x289/0x420 [ 187.693908] cgroup_mkdir+0x56f/0xfc0 [ 187.697687] ? __lock_is_held+0xb6/0x140 [ 187.701725] ? cgroup_destroy_locked+0x750/0x750 [ 187.706456] ? rcu_read_lock_sched_held+0x108/0x120 [ 187.711449] ? kmem_cache_free+0x258/0x2a0 [ 187.715661] ? set_nlink+0xc1/0x160 [ 187.719263] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 187.724169] ? generic_permission+0x105/0x3c0 [ 187.728641] ? cgroup_destroy_locked+0x750/0x750 [ 187.733387] kernfs_iop_mkdir+0x153/0x1e0 [ 187.737510] vfs_mkdir+0x390/0x600 [ 187.741033] SyS_mkdir+0x220/0x2a0 [ 187.744551] ? SyS_mkdirat+0x2b0/0x2b0 [ 187.748416] ? do_syscall_64+0xb7/0x940 [ 187.752368] ? SyS_mkdirat+0x2b0/0x2b0 [ 187.756233] do_syscall_64+0x281/0x940 [ 187.760098] ? vmalloc_sync_all+0x30/0x30 [ 187.764222] ? _raw_spin_unlock_irq+0x27/0x70 [ 187.768707] ? finish_task_switch+0x1c1/0x7e0 [ 187.773179] ? syscall_return_slowpath+0x550/0x550 [ 187.778085] ? syscall_return_slowpath+0x2ac/0x550 [ 187.782989] ? prepare_exit_to_usermode+0x350/0x350 [ 187.787983] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 187.793329] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 187.798149] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 187.803318] RIP: 0033:0x454e79 [ 187.806481] RSP: 002b:00007f2d4ca09c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 187.814163] RAX: ffffffffffffffda RBX: 00007f2d4ca0a6d4 RCX: 0000000000454e79 2018/03/31 07:26:18 executing program 7 (fault-call:7 fault-nth:22): mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) open(&(0x7f00000000c0)='./file0\x00', 0xa0441, 0x80) syz_mount_image$msdos(&(0x7f0000000140)='msdos\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x1, &(0x7f0000000100)=[{&(0x7f0000000480)="9196b107dc9e5c731d56d84afae6a7bf24", 0x11, 0x1f}], 0x0, &(0x7f0000000000)=ANY=[]) mkdir(&(0x7f0000000180)='./file0//ile0\x00', 0x112) rmdir(&(0x7f0000000080)='./file0//ile0\x00') mkdir(&(0x7f0000000340)='./file0//ile0\x00', 0x1) r0 = semget$private(0x0, 0x4, 0x21) semctl$GETPID(r0, 0x1, 0xb, &(0x7f0000000200)=""/154) [ 187.821408] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000020000340 [ 187.828653] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 187.835908] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000013 [ 187.843152] R13: 00000000000003ea R14: 00000000006f7e90 R15: 000000000000001a [ 187.857689] netlink: 4 bytes leftover after parsing attributes in process `syz-executor5'. [ 187.868838] netlink: 4 bytes leftover after parsing attributes in process `syz-executor6'. 2018/03/31 07:26:18 executing program 1 (fault-call:6 fault-nth:27): mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) open(&(0x7f00000000c0)='./file0\x00', 0xa0441, 0x80) syz_mount_image$msdos(&(0x7f0000000140)='msdos\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x1, &(0x7f0000000100)=[{&(0x7f0000000480)="9196b107dc9e5c731d56d84afae6a7bf24", 0x11, 0x1f}], 0x0, &(0x7f0000000000)=ANY=[]) rmdir(&(0x7f0000000080)='./file0//ile0\x00') mkdir(&(0x7f0000000340)='./file0//ile0\x00', 0x1) r0 = semget$private(0x0, 0x4, 0x21) semctl$GETPID(r0, 0x1, 0xb, &(0x7f0000000200)=""/154) [ 187.911321] FAULT_INJECTION: forcing a failure. [ 187.911321] name failslab, interval 1, probability 0, space 0, times 0 [ 187.922684] CPU: 0 PID: 13810 Comm: syz-executor7 Not tainted 4.16.0-rc7+ #372 [ 187.930037] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 187.939387] Call Trace: [ 187.941980] dump_stack+0x194/0x24d [ 187.945611] ? arch_local_irq_restore+0x53/0x53 [ 187.950284] should_fail+0x8c0/0xa40 [ 187.954004] ? kstrdup+0x39/0x70 [ 187.957374] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 187.962470] ? cgroup_mkdir+0x553/0xfc0 [ 187.966438] ? vfs_mkdir+0x390/0x600 [ 187.970154] ? SyS_mkdir+0x220/0x2a0 [ 187.973869] ? do_syscall_64+0x281/0x940 [ 187.977923] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 187.983287] ? find_held_lock+0x35/0x1d0 [ 187.987367] ? find_held_lock+0x35/0x1d0 [ 187.987383] ? __lock_is_held+0xb6/0x140 [ 187.987402] ? check_same_owner+0x320/0x320 [ 187.987417] ? rcu_note_context_switch+0x710/0x710 [ 187.987426] ? rcu_read_lock_sched_held+0x108/0x120 [ 187.987440] should_failslab+0xec/0x120 [ 187.987450] kmem_cache_alloc+0x47/0x760 [ 187.987458] ? memcpy+0x45/0x50 [ 187.987469] ? kstrdup+0x59/0x70 [ 187.987481] __kernfs_new_node+0xe2/0x570 [ 187.987492] ? kernfs_dop_revalidate+0x380/0x380 [ 187.987503] ? kasan_check_read+0x11/0x20 [ 187.987513] ? read_word_at_a_time+0x12/0x20 [ 187.987522] ? strscpy+0x186/0x500 [ 187.987538] kernfs_new_node+0x80/0xe0 [ 187.987550] __kernfs_create_file+0x4b/0x320 [ 187.987562] cgroup_addrm_files+0x3c5/0xa70 [ 187.987578] ? cgroup_file_write+0x710/0x710 [ 187.987592] ? getrawmonotonic64+0x460/0x460 [ 187.987603] ? kernfs_active+0x92/0x160 [ 187.987614] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 187.987622] ? cgroup_kn_set_ugid+0x2c7/0x370 [ 187.987631] ? cgroup_file_name+0x1d0/0x1d0 [ 187.987644] css_populate_dir+0x340/0x420 [ 187.987656] cgroup_mkdir+0x553/0xfc0 [ 187.987664] ? __lock_is_held+0xb6/0x140 [ 187.987676] ? cgroup_destroy_locked+0x750/0x750 [ 187.987685] ? rcu_read_lock_sched_held+0x108/0x120 [ 187.987693] ? kmem_cache_free+0x258/0x2a0 [ 187.987703] ? set_nlink+0xc1/0x160 [ 187.987712] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 187.987720] ? generic_permission+0x105/0x3c0 [ 187.987731] ? cgroup_destroy_locked+0x750/0x750 [ 187.987741] kernfs_iop_mkdir+0x153/0x1e0 [ 187.987751] vfs_mkdir+0x390/0x600 [ 187.987763] SyS_mkdir+0x220/0x2a0 [ 187.987774] ? SyS_mkdirat+0x2b0/0x2b0 [ 187.987784] ? do_syscall_64+0xb7/0x940 [ 187.987794] ? SyS_mkdirat+0x2b0/0x2b0 [ 187.987803] do_syscall_64+0x281/0x940 [ 187.987812] ? vmalloc_sync_all+0x30/0x30 [ 187.987820] ? _raw_spin_unlock_irq+0x27/0x70 [ 187.987829] ? finish_task_switch+0x1c1/0x7e0 [ 187.987838] ? syscall_return_slowpath+0x550/0x550 [ 187.987847] ? syscall_return_slowpath+0x2ac/0x550 [ 187.987856] ? prepare_exit_to_usermode+0x350/0x350 [ 187.987867] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 187.987879] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 187.987893] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 187.987901] RIP: 0033:0x454e79 [ 187.987906] RSP: 002b:00007f49041e4c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 2018/03/31 07:26:18 executing program 5: r0 = syz_open_dev$vcsa(&(0x7f0000000200)='/dev/vcsa#\x00', 0x100000000, 0x100) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x7) r1 = socket(0x80000e, 0x80000, 0x4001) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000240)='/dev/rtc\x00', 0x40040, 0x0) getxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="73797374656daafc0871f0fc53666300"], &(0x7f0000000100)=""/229, 0xe5) dup2(r2, r1) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000040)={r1, r2}) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000040)='./control\x00', 0x0) r3 = open(&(0x7f0000022ff6)='./control\x00', 0x0, 0x0) mkdirat(r3, &(0x7f0000000300)='./control\x00', 0x0) openat(r3, &(0x7f0000000200)='./control\x00', 0x450402, 0x0) unlinkat(r3, &(0x7f0000448000)='./control\x00', 0x200) syz_mount_image$reiserfs(&(0x7f0000000280)='reiserfs\x00', &(0x7f00000002c0)='./file0\x00', 0x2, 0x9, &(0x7f0000000940)=[{&(0x7f0000000340)="120ac53a4fbce831677b222c2ef54720542512f2f9521b0d1fc6894583b64fee348a1fe59fb5c834cf2f563ede95ae02537b480a7573b391c9324aa4cd0e173a95a5cf028b054dcddf776038ce135f8c91c9f16e0d0422398963f74c2125f13cb21828d0acefc892f348fe80e895256445d9f90713866fe7889bddf7a51bf9038164afdb7abe8844eb0dcad8d37a7d61e773456bbb100863e0110a8afe7e34e240fb3f1203c4", 0xa6, 0x7ff}, {&(0x7f0000000400)="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", 0xfc, 0x7}, {&(0x7f0000000500)="bbd773448e2fb2d05e7d9e33a38196adfbf126f3d89e5aff1c748d06f35f5d40856d6920be7962880f9427d7ef0039620d5baaf2bd0603f8dcbf4c9f024c0b082dc427b786d8f088ac1880337576c96607a110cd947d53a5477d3fc3796b46", 0x5f, 0xffffffff}, {&(0x7f0000000580)="e0b579b58cc70dbbd9b86788453d41c1a1973f5e064f15230f24b5c90df9aae316d88bf1feae4875cbd00f63647f123aa966dd01022275304bc57c7e7c505b935bc18c4bfbe9624c7c92751014d1b6370ee46848c905207e6c300821bfa5025512110d7b8c0998c89e28b45cf0659390a05295051708ec10261ab7af72a2e2543fea3732a7f00cdc32798d", 0x8b}, {&(0x7f0000000640)="91ca9ff4746ff2c5728284194d64c45c29e7ffd24462cf5077e4a71f3457c2a5185cfe86c8c9e6dc87f4f9397a4886e29bf96b3321ec62dea53448e3de47bd4e96da6dfa516d6120d652c76502c56ae40ae64a4b1d362e4c036dd62b7ca4c828841c8b2c301ae46e95752871631c598e2ff237af137a304c742a56d8088d06acc8e6d2a02791200f9107ff12fd8d0f4253aa193d82cee4159db56321c4b8d0ec84f99c38630369fd2c8d81cb5f687ee2624bda9c2052b535b89b72751d07dfec75208ceb0c48c29dff9c46", 0xcb, 0x42f7}, {&(0x7f0000000740)="115c1e390b0d9a36976d6f3e0580d951dcd0e5fbe3b91fac1afe4457b45c1295dffd024d1760c78c290b83ed8ab81f4d5a948c093da266a487bf32e62dda78528c79e7f538d46b6140af4992333b49acafff", 0x52, 0x7b3}, {&(0x7f00000007c0)='l', 0x1, 0x5}, {&(0x7f0000000800)="5581842427fcf100737175da60d5bebf2074b8105102ca6128b4bc3b7d608516f336e29a09f0d58c5a97ba05badebb96ea2377b1655a2e7527a5224f2eadc6c7e060bb69000fbd1c7502bcf92a0f71bbb5b9de4a14516a161541f0bec2a160f42d6b3bf9bd1801", 0x67, 0xffffffffffffffff}, {&(0x7f0000000880)="8ed712dac56ce9f9b4417c05042d11ae2d6a709e3c5a1549b20ec660a20e53086736416f8f460ab8a9e895652aad54f8c7217b0587e1839c27466b763cbbf834762080d30219064419ad45fa30032e22c7a8a0f45f483832e7c4642158b67f87c62ac27fcc93b0222085cd0f3886a18199d727011952731ddb95a49b2ff7e099d0f9a9ef16f7796db7", 0x89, 0xfff}], 0x40000, &(0x7f0000000a40)={[{@notail='notail', 0x2c}, {@nouser_xattr='nouser_xattr', 0x2c}, {@balloc_border='block-allocator=border', 0x2c}]}) sendmsg$nl_route(r1, &(0x7f000070d000)={&(0x7f0000775000)={0x10}, 0xc, &(0x7f00002c9ff0)={&(0x7f0000207fdc)=@ipv4_newroute={0x1c, 0x18, 0x303, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x5}}, 0x1c}, 0x1}, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x14ad, 0x101081) [ 188.211968] RAX: ffffffffffffffda RBX: 00007f49041e56d4 RCX: 0000000000454e79 [ 188.219231] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000020000340 [ 188.226479] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 188.233737] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000013 [ 188.240986] R13: 00000000000003ea R14: 00000000006f7e90 R15: 0000000000000016 [ 188.248496] cgroup: cgroup_addrm_files: failed to add cgroup.max.depth, err=-12 [ 188.293545] FAULT_INJECTION: forcing a failure. [ 188.293545] name failslab, interval 1, probability 0, space 0, times 0 [ 188.304839] CPU: 0 PID: 13818 Comm: syz-executor1 Not tainted 4.16.0-rc7+ #372 [ 188.312197] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 188.321547] Call Trace: [ 188.324136] dump_stack+0x194/0x24d [ 188.327767] ? arch_local_irq_restore+0x53/0x53 [ 188.332437] ? __save_stack_trace+0x7e/0xd0 [ 188.336768] should_fail+0x8c0/0xa40 [ 188.340488] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 188.345581] ? kasan_kmalloc+0xad/0xe0 [ 188.349446] ? __kmalloc+0x162/0x760 [ 188.353135] ? kzalloc+0xf/0x20 [ 188.356396] ? alloc_fair_sched_group+0x5e/0x530 [ 188.361130] ? sched_create_group+0x35/0x70 [ 188.365433] ? kernfs_iop_mkdir+0x153/0x1e0 [ 188.369732] ? vfs_mkdir+0x390/0x600 [ 188.373421] ? SyS_mkdir+0x220/0x2a0 [ 188.377142] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 188.382486] ? save_stack+0x43/0xd0 [ 188.386092] ? find_held_lock+0x35/0x1d0 [ 188.390134] ? __lock_is_held+0xb6/0x140 [ 188.394203] ? check_same_owner+0x320/0x320 [ 188.398507] ? rcu_note_context_switch+0x710/0x710 [ 188.403427] should_failslab+0xec/0x120 [ 188.407380] __kmalloc+0x63/0x760 [ 188.410814] ? sched_create_group+0x22/0x70 [ 188.415113] ? kzalloc+0xf/0x20 [ 188.418371] kzalloc+0xf/0x20 [ 188.421458] alloc_fair_sched_group+0xd6/0x530 [ 188.426043] ? __lock_is_held+0xb6/0x140 [ 188.430086] sched_create_group+0x35/0x70 [ 188.434212] cpu_cgroup_css_alloc+0xe/0x30 [ 188.438432] cgroup_apply_control_enable+0x44d/0xbc0 [ 188.443517] ? cgroup_propagate_control+0x570/0x570 [ 188.448517] ? css_populate_dir+0x289/0x420 [ 188.452819] cgroup_mkdir+0x56f/0xfc0 [ 188.456596] ? __lock_is_held+0xb6/0x140 [ 188.460638] ? cgroup_destroy_locked+0x750/0x750 [ 188.465370] ? rcu_read_lock_sched_held+0x108/0x120 [ 188.470364] ? kmem_cache_free+0x258/0x2a0 [ 188.474575] ? set_nlink+0xc1/0x160 [ 188.478181] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 188.483084] ? generic_permission+0x105/0x3c0 [ 188.487571] ? cgroup_destroy_locked+0x750/0x750 [ 188.492307] kernfs_iop_mkdir+0x153/0x1e0 [ 188.496432] vfs_mkdir+0x390/0x600 [ 188.499949] SyS_mkdir+0x220/0x2a0 [ 188.503468] ? SyS_mkdirat+0x2b0/0x2b0 [ 188.507332] ? do_syscall_64+0xb7/0x940 [ 188.511282] ? SyS_mkdirat+0x2b0/0x2b0 [ 188.515144] do_syscall_64+0x281/0x940 [ 188.519029] ? vmalloc_sync_all+0x30/0x30 [ 188.523157] ? trace_event_raw_event_sys_exit+0x260/0x260 [ 188.528669] ? syscall_return_slowpath+0x550/0x550 [ 188.533575] ? syscall_return_slowpath+0x2ac/0x550 [ 188.538486] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 188.543828] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 188.548652] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 188.553817] RIP: 0033:0x454e79 [ 188.556981] RSP: 002b:00007f2d4ca09c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 188.564668] RAX: ffffffffffffffda RBX: 00007f2d4ca0a6d4 RCX: 0000000000454e79 [ 188.571913] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000020000340 [ 188.579170] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 188.586416] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000013 [ 188.593664] R13: 00000000000003ea R14: 00000000006f7e90 R15: 000000000000001b 2018/03/31 07:26:19 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_void(r0, 0x29, 0x23, 0x0, 0x0) 2018/03/31 07:26:19 executing program 3: syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x127, 0x10000}, {&(0x7f0000012700)="000001000000000000000000000000000000030000000000000000100000000000000000000000000000010000000000000000000000ed410000000000000000", 0x40, 0x402840}, {&(0x7f0000014800)="000000000000000000000001000000000000000000000000000000030000000000000000100000000000000000000000000000010000000000000000000000ed4100000000000000000000000000000000000000000000000000000000000000", 0x60, 0x406680}, {&(0x7f0000015100)="00000000000000000001000000000000000000000000000000030000000000000000100000000000000000000000000000010000000000000000000000ed4100", 0x40, 0x406e40}, {&(0x7f0000015b00)="000000000000000000000300000000000000000100000000000000404000000000000000000000000000001000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000003000000000000", 0x60, 0x7}], 0x0, &(0x7f0000016000)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000080)={r2, 0x0, 0xfffffffffffffffd}) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x10000, 0x0) ioctl$TCSBRKP(r3, 0x5425, 0xfffffffffffffffa) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) openat$vcs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vcs\x00', 0x81, 0x0) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000001440)='/dev/vga_arbiter\x00', 0x800, 0x0) ioctl$KVM_GET_IRQCHIP(r3, 0xc208ae62, &(0x7f0000001340)=@ioapic) ioctl$VHOST_SET_VRING_CALL(r4, 0x4008af21, &(0x7f0000000040)) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000358fe0)={r2, 0x0, 0x2, r2}) mkdirat$cgroup(r4, &(0x7f00000000c0)='syz1\x00', 0x1ff) 2018/03/31 07:26:19 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_nanosleep(0x2, 0x1, &(0x7f0000000000), &(0x7f0000443000)) r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x1000004, 0x32, 0xffffffffffffffff, 0x0) tkill(r0, 0x1000000000016) 2018/03/31 07:26:19 executing program 4: socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000000)) r0 = socket(0x1e, 0x1, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000540ff0)=@req={0x3fc, 0x0, 0x1}, 0x10) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000080)={0x0, 0x6f, "a85eb1da7674565b4419b79ffe6813d9ac1f5cb937c15e53a114f3cae4674d3bf2e6eb6270f3780056ab3bbbb2821a575a141013d6c86b4ffd08e51d73182c67183f2a2c07a68baa71126efc24027d90b4d0802abcf969bb762f51a8c0fe1b82f3479635e894356978bfe8f8cf04f9"}, &(0x7f0000000100)=0x77) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000140)={r1, @in={{0x2, 0x4e23, @multicast2=0xe0000002}}, 0x101, 0x6}, 0x90) r2 = socket(0x1e, 0x4, 0x0) dup2(r0, r2) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc}, 0x10) 2018/03/31 07:26:19 executing program 0: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x8000000803, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = semget$private(0x0, 0x4, 0x400) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rfkill\x00', 0x4040, 0x0) ioctl$TCGETA(r4, 0x5405, &(0x7f0000000100)) semctl$SEM_INFO(r3, 0x0, 0x13, &(0x7f0000000180)=""/115) sendmsg$IPVS_CMD_GET_DAEMON(r4, &(0x7f0000000400)={&(0x7f0000000240)={0x10}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="bc000000", @ANYRES16=0x0, @ANYBLOB="000028bd7000ffdbdf250b00000024000300080003000200000008000500ffffffff08000500e00000010800080000000000580001000800050002000400080001000a00000008000800000000000c000700010000000000000014000300fe80000000000b007369700014000300ac141418000000000000000000000000080005000000000008000500090000000c000200080004000100000008000500000000000800040009000000000000000000000000000000"], 0xbc}, 0x1, 0x0, 0x0, 0x810}, 0x8010) sendmmsg$unix(r2, &(0x7f00000bd000), 0x80, 0x0) dup2(r0, r1) seccomp(0x0, 0x0, &(0x7f0000000140)={0x2, &(0x7f0000000080)=[{0xd3, 0x3, 0x20, 0x1}, {0xca, 0x7f, 0xe539}]}) 2018/03/31 07:26:19 executing program 1 (fault-call:6 fault-nth:28): mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) open(&(0x7f00000000c0)='./file0\x00', 0xa0441, 0x80) syz_mount_image$msdos(&(0x7f0000000140)='msdos\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x1, &(0x7f0000000100)=[{&(0x7f0000000480)="9196b107dc9e5c731d56d84afae6a7bf24", 0x11, 0x1f}], 0x0, &(0x7f0000000000)=ANY=[]) rmdir(&(0x7f0000000080)='./file0//ile0\x00') mkdir(&(0x7f0000000340)='./file0//ile0\x00', 0x1) r0 = semget$private(0x0, 0x4, 0x21) semctl$GETPID(r0, 0x1, 0xb, &(0x7f0000000200)=""/154) 2018/03/31 07:26:19 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000fcbff7)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='ns/uts\x00') syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000000)="66baf80cb850c47f80ef66bafc0cb80000c0feefc4a19f51f2440f019fc62c248566f247ac4ede5600c4e3791d7ee004c40151e299992c0000b805000000b9336600000f01c1420f5bddb99f0a0000b88eabb2c9ba000000000f30", 0x5b}], 0x1, 0x0, &(0x7f00000000c0), 0x2b9) getsockopt$IP_VS_SO_GET_DESTS(r2, 0x0, 0x484, &(0x7f0000000140)=""/117, &(0x7f00000000c0)=0x75) 2018/03/31 07:26:19 executing program 7 (fault-call:7 fault-nth:23): mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) open(&(0x7f00000000c0)='./file0\x00', 0xa0441, 0x80) syz_mount_image$msdos(&(0x7f0000000140)='msdos\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x1, &(0x7f0000000100)=[{&(0x7f0000000480)="9196b107dc9e5c731d56d84afae6a7bf24", 0x11, 0x1f}], 0x0, &(0x7f0000000000)=ANY=[]) mkdir(&(0x7f0000000180)='./file0//ile0\x00', 0x112) rmdir(&(0x7f0000000080)='./file0//ile0\x00') mkdir(&(0x7f0000000340)='./file0//ile0\x00', 0x1) r0 = semget$private(0x0, 0x4, 0x21) semctl$GETPID(r0, 0x1, 0xb, &(0x7f0000000200)=""/154) [ 188.717744] FAULT_INJECTION: forcing a failure. [ 188.717744] name failslab, interval 1, probability 0, space 0, times 0 [ 188.729071] CPU: 0 PID: 13856 Comm: syz-executor1 Not tainted 4.16.0-rc7+ #372 [ 188.736436] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 188.745790] Call Trace: [ 188.748386] dump_stack+0x194/0x24d [ 188.752016] ? arch_local_irq_restore+0x53/0x53 [ 188.756694] ? __save_stack_trace+0x7e/0xd0 [ 188.761025] should_fail+0x8c0/0xa40 2018/03/31 07:26:19 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000abe000), 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) read(r0, &(0x7f00000000c0)=""/91, 0x10256) 2018/03/31 07:26:19 executing program 6: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'wp256\x00'}, 0x469a64dd2b019b08) truncate(&(0x7f0000000000)='./file0\x00', 0x50) r1 = accept$alg(r0, 0x0, 0x0) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0xd9) syz_mount_image$gfs2(&(0x7f0000000280)='gfs2\x00', &(0x7f00000002c0)='./file0\x00', 0x10000, 0x7, &(0x7f00000016c0)=[{&(0x7f0000000300)="0b17dbcd58198b8f0136a4d285ed73fe642381f1b5b0db1ab18ddae0a8ae1c4ede2a6f9336871655c6c461c8844dd9351fdddfdfb569f225309405e75862c96c96a23994f09aa676162f485fe88b152be12393b67272a6f87a7f87cdc48bd2d835c6cba562b6bc1a9d01de25aa3bff1008bd4b3aa65df5d9058d38cc927d21171da684dc58afaafad17f6d0dc995301313397ee9b31522d5f34747a3995a4ed67d2f3573881cba74f405434564732e89baa799e3", 0xb4, 0x3}, {&(0x7f00000003c0)="d6800013c2e38cd5804361a457feab59f1ad27bbe9e26e0562bcc9363581a27a04ac0ea88b75ec5a1a60818c6ff3072083c735bba5a8c429cbc44d8060b706695894a0296378e05970c6c94c17a3348c4810b850e52ec7429553ad49e7", 0x5d, 0x9}, {&(0x7f0000000440)="381cd59fa9a2d6ab21a37e455b552d565e4cdf563cc4c6bd7fe133987e3e4a9692bc6a28482989329ebe87256794ef3abb521c1e86b7f7e2d75338108e516f8344755b4f476b135cb7d9c68f98fc413935a5fab063df88d0914c053084df7928a5745162ac23bcfdab7f01290667a4834e1ddf3ee500d3f7b145fe00dcec03c1b5eabd1103896f311ce5171861c1e7182ff365d448997ac8287842e883e2639cd622a6", 0xa3, 0x40}, {&(0x7f0000000500)="3e1bdb72c898214e6cddf7f3caab7d2756586baf0fc73fc6d612a8313c9c25527a343bf793e694a787a45863cbf83d1fcacb20c15448a462ed56bbb2b2ad80cc65cbccd5dfe507a432c7212a8b1d0e3d37acbd15b4b6457d11997fa1f19e305c6aba4198a7a8fa9b7e6581c676779d0c56023591e2c8bf1335e19f69", 0x7c, 0x4a4}, {&(0x7f0000000580)="2f50b1d9d1c0df26a39146a75f945b1c176f5e34f95410116e67556eb560d75df743da7fd03921c337d28a536a79a5ef5584842520f7160fe7e613c9924c64c602db942f428cd926efd1af952feec0074dbab4827879f16e9e285b2e483cd48fd7e0cce1a4bafce1d8145f979f2e8672eb08292ba0edfb3084421644c7a98c9e9be72a64bece27ad5901150a76e76eefeab03ef5f1b94fa274a54fa7c466344540db520054fc5b465f71199ac1d7d552e1bd12d6bd18e180856d31240d10843482d15f0a", 0xc4, 0x100000000}, {&(0x7f0000000680)="3b4ccce9a2c8937ab20a82cfe31bba97295ae4d09e98b382735548d7271fd2d76e665040321de6f698", 0x29, 0x4}, {&(0x7f00000006c0)="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", 0x1000, 0x8}], 0x4000, &(0x7f0000001780)={[{@ignore_local_fs='ignore_local_fs', 0x2c}]}) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') sendmsg$IPVS_CMD_FLUSH(r2, &(0x7f0000000240)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x78, r3, 0x100, 0x70bd2a, 0x25dfdbfc, {0x11}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x85}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7fffffff}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_SERVICE={0x44, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x5b}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x4}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x26}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e21}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x19}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x800) sendmsg$alg(r1, &(0x7f0000c09fc8)={0x0, 0x0, &(0x7f0000f6d000)=[{&(0x7f0000087000)="bb9bb81d3bbfd81ded997a2e26c1292cc2966ed7f1c3512c8222fed992afc0", 0x1f}], 0x1, &(0x7f0000bb0000)}, 0x0) [ 188.764740] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 188.769841] ? kasan_kmalloc+0xad/0xe0 [ 188.773725] ? __kmalloc+0x162/0x760 [ 188.777436] ? kzalloc+0xf/0x20 [ 188.780711] ? alloc_fair_sched_group+0x5e/0x530 [ 188.785468] ? sched_create_group+0x35/0x70 [ 188.789787] ? kernfs_iop_mkdir+0x153/0x1e0 [ 188.794107] ? vfs_mkdir+0x390/0x600 [ 188.797820] ? SyS_mkdir+0x220/0x2a0 [ 188.801621] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 188.806982] ? save_stack+0x43/0xd0 [ 188.810611] ? find_held_lock+0x35/0x1d0 2018/03/31 07:26:19 executing program 4: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cuse\x00', 0x8001, 0x0) getsockname$llc(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000000140)=0x10) futex(&(0x7f0000004ffc), 0x20000000082, 0x4, &(0x7f00003f4ff0)={0x0, 0x989680}, &(0x7f0000210000)=0x1, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000080)='memory.current\x00', 0x0, 0x0) ioctl$sock_netrom_TIOCINQ(r1, 0x541b, &(0x7f0000000040)) ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffd000/0x1000)=nil, 0x1000}) [ 188.814678] ? __lock_is_held+0xb6/0x140 [ 188.818749] ? check_same_owner+0x320/0x320 [ 188.823073] ? rcu_note_context_switch+0x710/0x710 [ 188.828009] should_failslab+0xec/0x120 [ 188.831988] __kmalloc+0x63/0x760 [ 188.835442] ? sched_create_group+0x22/0x70 [ 188.839757] ? kzalloc+0xf/0x20 [ 188.843037] kzalloc+0xf/0x20 [ 188.846143] alloc_fair_sched_group+0xd6/0x530 [ 188.850724] ? __lock_is_held+0xb6/0x140 [ 188.854788] sched_create_group+0x35/0x70 [ 188.858935] cpu_cgroup_css_alloc+0xe/0x30 [ 188.863170] cgroup_apply_control_enable+0x44d/0xbc0 [ 188.868279] ? cgroup_propagate_control+0x570/0x570 [ 188.873301] ? css_populate_dir+0x289/0x420 [ 188.877624] cgroup_mkdir+0x56f/0xfc0 [ 188.881426] ? __lock_is_held+0xb6/0x140 [ 188.885491] ? cgroup_destroy_locked+0x750/0x750 [ 188.890248] ? rcu_read_lock_sched_held+0x108/0x120 [ 188.895259] ? kmem_cache_free+0x258/0x2a0 [ 188.899488] ? set_nlink+0xc1/0x160 [ 188.903114] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 188.908042] ? generic_permission+0x105/0x3c0 [ 188.912535] ? cgroup_destroy_locked+0x750/0x750 2018/03/31 07:26:19 executing program 0: r0 = accept$nfc_llcp(0xffffffffffffff9c, &(0x7f0000000040), &(0x7f00000000c0)=0x60) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x5, 0x3f, r0, 0x400000000000) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000f6bfe8)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r1, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x800000}, 0x8000}) [ 188.917296] kernfs_iop_mkdir+0x153/0x1e0 [ 188.921445] vfs_mkdir+0x390/0x600 [ 188.925428] SyS_mkdir+0x220/0x2a0 [ 188.925441] ? SyS_mkdirat+0x2b0/0x2b0 [ 188.925454] ? do_syscall_64+0xb7/0x940 [ 188.925465] ? SyS_mkdirat+0x2b0/0x2b0 [ 188.925475] do_syscall_64+0x281/0x940 [ 188.925486] ? vmalloc_sync_all+0x30/0x30 [ 188.925497] ? _raw_spin_unlock_irq+0x27/0x70 [ 188.925507] ? finish_task_switch+0x1c1/0x7e0 [ 188.925517] ? syscall_return_slowpath+0x550/0x550 [ 188.925527] ? syscall_return_slowpath+0x2ac/0x550 [ 188.925537] ? prepare_exit_to_usermode+0x350/0x350 [ 188.925549] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 188.925563] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 188.925578] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 188.925586] RIP: 0033:0x454e79 [ 188.925592] RSP: 002b:00007f2d4ca09c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 188.925602] RAX: ffffffffffffffda RBX: 00007f2d4ca0a6d4 RCX: 0000000000454e79 [ 188.925608] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000020000340 [ 188.925613] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 188.925619] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000013 [ 188.925624] R13: 00000000000003ea R14: 00000000006f7e90 R15: 000000000000001c [ 189.108725] FAULT_INJECTION: forcing a failure. [ 189.108725] name failslab, interval 1, probability 0, space 0, times 0 [ 189.108737] CPU: 1 PID: 13857 Comm: syz-executor7 Not tainted 4.16.0-rc7+ #372 [ 189.108742] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 189.108746] Call Trace: [ 189.108761] dump_stack+0x194/0x24d [ 189.108773] ? arch_local_irq_restore+0x53/0x53 [ 189.108791] should_fail+0x8c0/0xa40 [ 189.172810] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 189.177892] ? rb_first_postorder+0xa0/0xa0 [ 189.182188] ? __mutex_lock+0x16f/0x1a80 [ 189.186235] ? trace_hardirqs_off+0x10/0x10 [ 189.190534] ? find_held_lock+0x35/0x1d0 [ 189.194570] ? __lock_is_held+0xb6/0x140 [ 189.198613] ? check_same_owner+0x320/0x320 [ 189.202910] ? lock_downgrade+0x980/0x980 [ 189.207036] ? rcu_note_context_switch+0x710/0x710 [ 189.211944] should_failslab+0xec/0x120 [ 189.215891] __kmalloc_track_caller+0x5f/0x760 [ 189.220447] ? idr_alloc_cyclic+0x1d6/0x320 [ 189.224745] ? kstrdup_const+0x39/0x50 [ 189.228608] ? __mutex_unlock_slowpath+0xe9/0xac0 [ 189.233427] kstrdup+0x39/0x70 [ 189.236595] kstrdup_const+0x39/0x50 [ 189.240283] __kernfs_new_node+0xa2/0x570 [ 189.244403] ? kernfs_dop_revalidate+0x380/0x380 [ 189.249133] ? kasan_check_read+0x11/0x20 [ 189.253257] ? read_word_at_a_time+0x12/0x20 [ 189.257637] ? strscpy+0x186/0x500 [ 189.261154] kernfs_new_node+0x80/0xe0 [ 189.265028] __kernfs_create_file+0x4b/0x320 [ 189.269417] cgroup_addrm_files+0x3c5/0xa70 [ 189.273718] ? cgroup_file_write+0x710/0x710 [ 189.278102] ? getrawmonotonic64+0x460/0x460 [ 189.282487] ? kernfs_active+0x92/0x160 [ 189.286435] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 189.291337] ? cgroup_kn_set_ugid+0x2c7/0x370 [ 189.295805] ? cgroup_file_name+0x1d0/0x1d0 [ 189.300101] css_populate_dir+0x340/0x420 [ 189.304226] cgroup_mkdir+0x553/0xfc0 [ 189.308012] ? __lock_is_held+0xb6/0x140 [ 189.312056] ? cgroup_destroy_locked+0x750/0x750 [ 189.316794] ? rcu_read_lock_sched_held+0x108/0x120 [ 189.321785] ? kmem_cache_free+0x258/0x2a0 [ 189.325993] ? set_nlink+0xc1/0x160 [ 189.329599] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 189.334500] ? generic_permission+0x105/0x3c0 [ 189.338968] ? cgroup_destroy_locked+0x750/0x750 [ 189.343697] kernfs_iop_mkdir+0x153/0x1e0 [ 189.347819] vfs_mkdir+0x390/0x600 [ 189.351334] SyS_mkdir+0x220/0x2a0 [ 189.354846] ? SyS_mkdirat+0x2b0/0x2b0 [ 189.358714] ? do_syscall_64+0xb7/0x940 [ 189.362663] ? SyS_mkdirat+0x2b0/0x2b0 [ 189.366529] do_syscall_64+0x281/0x940 [ 189.370391] ? vmalloc_sync_all+0x30/0x30 [ 189.374512] ? _raw_spin_unlock_irq+0x27/0x70 [ 189.378982] ? finish_task_switch+0x1c1/0x7e0 [ 189.383450] ? syscall_return_slowpath+0x550/0x550 [ 189.388351] ? syscall_return_slowpath+0x2ac/0x550 [ 189.393252] ? prepare_exit_to_usermode+0x350/0x350 [ 189.398244] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 189.403582] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 189.408400] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 189.413562] RIP: 0033:0x454e79 [ 189.416725] RSP: 002b:00007f49041e4c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 189.424407] RAX: ffffffffffffffda RBX: 00007f49041e56d4 RCX: 0000000000454e79 [ 189.431651] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000020000340 [ 189.438896] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 189.446139] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000013 [ 189.453382] R13: 00000000000003ea R14: 00000000006f7e90 R15: 0000000000000017 [ 189.461957] cgroup: cgroup_addrm_files: failed to add cgroup.stat, err=-12 2018/03/31 07:26:20 executing program 4: r0 = syz_open_dev$mice(&(0x7f0000f87000)='/dev/input/mice\x00', 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x46c00) r1 = fcntl$getown(r0, 0x9) r2 = getuid() sendmsg$nl_route(r0, &(0x7f0000002800)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000027c0)={&(0x7f0000000040)=@bridge_getlink={0x2770, 0x12, 0x20, 0x70bd26, 0x25dfdbff, {0x7, 0x0, 0x0, 0x0, 0x8, 0x808}, [@IFLA_XDP={0x4, 0x2b}, @IFLA_LINK_NETNSID={0x8, 0x25, 0x7}, @IFLA_LINKINFO={0x118, 0x12, [@IFLA_INFO_KIND={0x14, 0x1, '/dev/input/mice\x00'}, @IFLA_INFO_SLAVE_DATA={0x100, 0x5, "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"}]}, @IFLA_VF_PORTS={0x25f4, 0x18, [{0x25f0, 0x1, [@typed={0x8, 0x75, @u32=0xfffffffffffff000}, @generic="2215c41d450f8a8875b90c1f649be02d742756a60fe88aead16aa432bfa460b78316b91e2b011ea7c010932bbb4bfb7d23a9f66e69e928cfa057faff884b79ffd7805bcee2d8180dfb38f43c6efd2aff0832270495f8e4bc8c6723fc51935ae06beada6f3f837d28405205ba8db300c92b3c22ba6d11ae825ff13f212295735cb9814fae3406a0cd2993075377b383439c39aaa5ec69b32f26e432323befd2afceddd6895ca2f372de4c6a9dab30c0c5e36282e46aae2606d07abdac3bcf7fb6", @nested={0x90, 0x1b, [@typed={0x8, 0x23, @pid=r1}, @typed={0x8, 0x5, @uid=r2}, @generic="6bb8311746dc498058274cac84149a8346bf98571f524254d71c301d6fc2af124cdabbb23140a6ffd48049aade9c97d96548c6183fbccde602d9f223bdf80e8609dfd8179ec8df732a872ba13b5dc23dc0da66291b10764de2704061675317fa9693184f9e69273eb3aed3b108c3e2fe3fb81b944fee6e7a8c006a"]}, @generic="d5761eb3ffa6101585e3ab89db3951b6f7a1fac3d2f72e560eda579493653211725bf73fec12fdb9b6b4d306b4bfe9714fadf691f97138142c5a574d5a5307b4d2458525d3f408b3e2469bea7574a089bed792fcb50bcb50fe8b6e22d7ffc54e3b67e320301581ac374ccb4e904a0c26e12dc2fae71e7f758543d483d818a574cd5f126f50d06c68fe9f9c43470c100fe70f324d2bcb3646d19ae1ab36eae267dded9ca860fbe44d33f507c851729935eb0d756ac1b5d4f3f282df4b40a56998e9499953a1582e7e4c98b986678b2251e750fc0aef560417d3aa2a600068e3d1df3ef55beb8d1a2e6df054", @nested={0x44, 0xd, [@generic="13bbae37c93c238cbe28287dde6d2c43ebf6fd570477d2d49da3aa79d6d536165f2e408601534aeccd7c72429d", @typed={0x10, 0x86, @str='^trusted\x00'}]}, @nested={0x48, 0x3d, [@typed={0x44, 0x1b, @binary="14dac2770305669f6691bdcf77f266c3c32ac77a5a1772d85c28f22d85be103af181c83ee670d0db40dab1652fe13eec99782352609d94b1059721c92562ee"}]}, @nested={0x231c, 0x44, [@generic="2da6f5c4a0920f229376adbb17d0f7318e4d1bb080c1e87bb0a88ea2ad6c52edb1432674ded9e64b412436f0cd9426ea10a42666ba4cd9526bed325ff1c3", @generic="14dd823a6d63823ee8a5cd52082d2136334d972cd2760d857c", @generic="fd8eb20bdf5c83440d85cadd0dbb910ab60f09e76dbaba83b712e7022955028ec5a4856c00b8", @generic="f79a90cdac2ab458afecd5de3fa16a0e2df5864a90ba321d04a1028c64eaa16743899b3d762c3151ed47b4d6960b4f3c9f", @typed={0xf0, 0x0, @binary="1b08b83625a90d4bad4c7a24199f0da1d2545b9eef9efd7b7e71fc1235aa5356483b6016a4cd56b3dab1426810c752d76b1ce3b545a1596195a20d9326aa77cf35f67fb93b5257b1711e1e35e205b646e0883c608a0884c21d34854e148602fcde4ca71fa299e741ffe3f686cd9c686e5d7b73402c693157680564b2c77c446a86296a3a3e25f2f8e0bb927261145d1981127d1f7db56f924ed0b4ffa034f9577d04e879d70861efec5a6bf1ce5d89975813518b0d5ef76413f9c9067577c5ddda603c99cef7b8509a129f9be167fdb4ea4c5096879982bde2b5fc27be4805f0ecb2e9cccb0e95d85729"}, @generic="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", @generic="9fe74bf4223eec3cbebfcf82bd8e7071f2fd10cecbe8a649bb1c97f7daaf178740a9b1dfd1b9e22b43c49682c0110b48140883336c2ac77cf92340f82e09a9289d18a5824eec446a2089cbc394fcf24599e86fb7dd354977a4ffc7456df10a560c7a30c3e37cb807d18efcac371d850006121392deaad25554dd136a261f7abfb9ac347322fcdf7dbc888cdeaeadcbe687c27e8ccc98f6e49a5a316686007e1c9773e79cbf91a882fd2d4078c284bb2993cb3aac699d9b4813163a12efeeec1dd2a3c2edd898164b8ae6cbfc6b7e546a795e1b0f9fe4050fb7f97530ecaf3d8cac1b424513762afa96a3e5c1872c28700ed45dc014dabfe00caa123ddd5ad382111a13719e7c8b92335a216489f32694f9960f7e57423b1833ea454aba1db196e334817672296f6556ef62f2f65d730a836680ecd2f127bda34d78b5d1c512d9116c7164a1d478a4bf8b1079b72cb0afbe880c9b2aea8b4d432a458a0e03d7eedfe07a596aed956579efe618e87eec30b323c6b38141914743b77f108b5628ba50d92d00a8129a9756362d070d9bb2df90bf0f396d223f661807d2daad16e4fc64ed0f4597ea3bf9072564369af3046d34b7f19f52633bd270a06dd4899097c0ecb4b5c6c8b65b45fba95e72f6a32fd55400071713ef307a99e47bcf47713a55b8ad8bc69be8d9e296e385a2a594688a061784d6363ff39de969ae57fa1c6ddeaebcd8be318a5ed3cf421b75c8e4a4135fac008e8cb4181ae332bb95da05f8cbbdda82ce37cc4c195e17a34601a4e8f3e16b43725576a8e9c0a89a448eb245fc7655f14e725733c665d8925c5d18d53370b117a7bc7dcb5a8c19902661fe5f4f970a7c2eda16264a0c13ac02187f75caecf0af46411037518211e6c1c700052dd96403986d646dd50cd9394021969f3cc2d40d9a2b708e94bb972f5b11b6c350f836415e25b28d60f0e4cb67d7a05b7de4d3a4ec7be061dff8cf6bd227a54910e7647bd51b0b6b0c606c4da4f20f909dd2004693709b0cb0220e1385927162e88189742a13f26dec0226c2297c1258c218373a585f91cd733cc84a0ba323b1fffeeeb34468dfc1f1cb29e171dbb64600a9e969415bccd372e909540b64b40177b6229ad826a300a200af2f26142e707129d8e921b23cdb0413d4488ff53e31950f23b057e980713e8ca66a2270b72354d0d416062932384071781670b6309ae64e8423b6244810ffb4ae7d1a19889359e6a689d471162f5a34515e6620c91558ff6d66226fb1768d40e403dd1e3b0a89945951d68994211023848f0a06346fb0a93438af6fa4144d1fcb10e688c26682d805d16c48b100d18a356eda6baf8f3a5e5f2d0eda1046dbcfdfe7535014d5fd34ae18fd17ad52aec3e07dd8fb1acae1770000efa50b3363e7501521204551f3a790c2e24d535985f4d401703f600ebcaf277cd1429a8bd499a1fee5ffa791e5b7f08e06a8a3b1319138fd6b01737633b55faf32f8b712ce1b487c4bae938a5678be3aadc7571d9a867c7e76984e84281fb49f84098b1f72e89977ed245dc938ac94fae796dd1d5ba73afe653fde95d111a8924791870507828ceede545b44f9934e13b06a3c62f3327044581f115350336874c0a0bd308e72d8975f0b09bcf6c443e0bc99179a3636da299290643781df85a8c32ebd5b87e9b5e0ec22db67e062c0dcf52c3afea067b0f172e5e811fd8c5433ab836ffb0de537378659e0797b2b0da56f1e1162c9edb6a0af535642ae613746856185825e88fd209e6f9a578cb5849a2c5f349feefa16ac27d8e4954a29e9efe895dbb3496ac03bd9119bdef2905314f7b2a47983a40473268a49b8794933c5aa1113b0129edfddef7b92104933fbf220cd056835dc2fcd0ebc117c0bdfede84ea0344420c149a6fb88f0109c5f590dfe16d6ff5b3a32a51a11d55dc7275fd862c758cee98489abd91b85df3fbb7aeaee1464faef11d798539356d3fa1c2d273a536bdf63a36196588790837d291d8926fc7cc24462ba688d9d3d9ecc1a759ac93c0b5626dda0fd9a4ab3b80855f58cd2f566feccffff25971cbcc2b6658577003d3c3ab34fe4ca0bfb7841f8a31528a4c2b3c9305e439e58506e3879e891301520949fa2adf093bfea5edfd608b20ed01a8395a5e3180727d3de4b00c0ee3409d07382bfba0bfc34e93e666d4ffb55379995ac3e7ed89aa688a0d63c51bd61ef08f88049628b58c33a5f46ec276230dd5764c274f21bb7d80a4573884934eb982c01684f85f251ed530d04249ca1d036a1f9ba39f5c2bae55c96adbfc4dc2a5098a2ab98fd3918a5c2a2ba15b7b5668006798a602281f5ad4c92b9949e6aace3a6263315388d2247e61dac4cb956dbee92710566df21d82ea60bb9a232c8a293b21cefaaddd9a78ceb66754a60145d30a65a66fe61db063c79e085cab1e73c1d5afb6e8059eede7af360b655047836e13da0306c23933dea1d4ec8756018d5c962f2413c08f6a2aa610d65fdbcc84dc92dbacbd67dd783242321dfbf5cb1763c8e760a7f5bc4042a023bbfadc19ce36044ce14e96fac7ee11dfb3cf2c282a6d8a695a29275b65ff387021b014af72c80016ac16dff033aab1a7c0ea8246ee89262dac34b7113ba277361d2290de4604bcdccf06265311a29d1e9572e0d8b8a6511544324f9309bcb813a893e12d9d3dcf512254f9c705fa2ef7a1b04487d5f7794b78b283f0071713f5ddbec90918b7ae90e5b1045059cdf5863298b39a2a57b23d691c6b0851d611fb6a819fb3fc7b96ab17829dc83f4b861482e9caa387724887543ea870db521c1591f40449cd6508154eb7f58f24172d0c65bd3832bb3894d1d03d3ceb9ebc47ba0cbf293ea3fd2452436a4f6718340e700d9807256928ad483e1a9777b71cdd7dc2934b4e8836ca38c420a7f805b21e7c4f12433389d219d7e8163ce3ab7795a5ef3e007ea27698c70c501d6140fb062bf7b03937a0c4d15a10d6f5e92c22409fa53165a333e0215f880a663793a8e05be62921741ed30bf4f8baa6e626603683756a72963c223fbbe92c1fd94d7246b5776dbfb74c9dcd5755b88dbf534990236674267785ab7db572b7d44f7d97bb6b3e625217c2ab87b515ee00396f2f0ec5d87c52d09d84675de1086896a6b79f8cd766df5268f605b16497563f528b65a1c5ee65210b97d9d12d5656c7cba02b37bedbeabf07f7c77b56a230d7a3928907c13152a5e1a45fa5283e3f5a7e891cf3442fdbb367df1ee34cf147e9efd6fa75d4b3995cf8639e43a8143847db7ebae5da6da1cf106dd67110d9cf85efb4f829e1af69d6a1adbc1cdeba5f60b25d4c723d453f8ddb48a5bcdaccef878be71bdc8bd37cce1433908e1778b46e1b7e546e9b9afc8d06fcc792077db6a68a43cc9c46c232ffba132ffd338fb57ec4483ffa42a1829d03c68b99e5008785d885e268658c0d228f5ca4696e25a8b15a04e1610de8cb14f0bbd919ea29d91ff1e4cdd88dcf30981c7f7846bb4c4121dc0c4d9448b9551b76fea9bb8030ab72435ecb3810b8946c90284728165e6e6c29717317620a663b2884e34283b1565deeef95f8f677e4f376b688bd2c5af29a959928bb9084cb8cfda3d1b8b19346812080848784d3e3d82efe8a3665eac9772565fb8d6faf6720cf40fae28250850399e7944ce9dea76f24287325391658e39d0cb16de719e2150f367f8c5a1ba5fe1cfa0759315683e37b0f9af9172a23f7cb9a67197482f8d5e6b18bce98aee06b8af8ec2701e6d984b3d1259bb2af75cc6898b01bbe9a05ccd1d3fb1803706360f659ee2f28532035139c8d87ea0261d880eeb1ea18aeb3bdf750a6b540641ed4d3aaa49692739bfef5220b511450617cb8d240b3f1bf434f7b2864610162326782128fc2febb4f913db6aa82e7a009e8e49a1432a5d06fe10a5d8face0940dc1b5b9a4e98b9871fbe6964a560a6800c3e5aa4ad45b489fa79efe6baeab3c8461b9946ef127e355690164f1c2c12a29ed48c00d5bfe54264cde24bfeeddcc1a1bf28b17c16bc4d062c899121848d91850a3b52f4318c49dbf66fb93d9c779edfc761604829f39bfd3c95eeba7ca8976147739fd4b891d09ebc299e2e7ea5f0413deb6104bcd1deff149750533e2d0e6bbea35eec684a3a5f9e29a4246658235557150c2a1cb1860a77a8de0d9c262e125be32dc1b6467d0fb8db9496854d989fdbf9ccb3dbd956cc7f187dece3e04d22a43381940219f00a2fbccb402dedb06fbb0857e977634bf0d629b1597e0c6d0f6afc20cd27481584357c9509f937f35e26ed6f279ceb302ff3daec6fdd2994567c6a72ab2c256ad72a7cfb0348fd387f2b8b372d8939bd0ac17074516faec5e507e0728b7ba7cfedc57bb2071f36c9c7d3c04082e0482c0b675255cc64d4c28338d75a289dbc20ff8f7abeba5d99f37073049be25cb0dc80465ffa8c024ca048395aed195075ab6ad77ab17ad3b010a9694fbc1721f7ce528da4cc058d2a3c62989da337feb244eaf323457878477d480a37e72c8953c12da1265bf8b5cbe65d25222cea9bbad3d6fedfa1a3ae578510e1fb59c0d61e84b5bfb18b2608288d1459826a63fc0b67b53797d56776d1e606d233f5f1b26fb13b474115876b244976f8470a13d218c0180d15da329185427c7508de1353594c67befe5514a920547b6d110c11b288260fa4fe4640751e17e29127b3dcd365e55a294b320d484f14040d4f9677497e6db4bd47b7846792d53e062fdda27630a0e3c93024e08120d4581075046adfe7463cb13f4c24d5a5b0dddfd326f3e124dcde69f3201e61dda632ca18b1e196e5aa566f2d1ae43fca93bce27f49ff9885cc3c802796dd8c754fe4366a247bfd645c9b35d8a3bae14fcbfc8b4a19b9f34bb970748545ca060acc88835d2c19b9d32fb89c5b63f76f54aaaebf866a55dd36b70f6cec991d4b45b8cc8380cf1152a6bd41de5ee009cbf869cb00ba862735da0b7b4c88ea1394853da5a9301f5e3bedce5065ec667bdf8e79a08c057127c4592238c0ec227758bf979d60a2ca9559d06804435295da6141c0307439c5e8ea0954a52822ea2920c341bb1512bbb5f6c3701416f48b5ffaf9bed00c65390edb946e44de6ea13691d5a1403a27fd04eb8cb5d6605e391d18747efb457f9ca1560f163a179daf294d6afc2d48527e52184cfc065a64f6691c995dd2bd02463b1a54f06cc7e47f899205b09a9c540ac5a7687392b7322eb514563d22a576ec05c32970c3ed8ba4078ea4d304d4e572b676134b49eb3240a263fa7b408c1e3f89ca9653761796e765440f9ce308ac9fbbcb89a18f891d676dce5cef221c4098f10920f94ae5ab646e34085b0168a3f284da79c4ff9f9200635a12cd48dd915da9b2fd1a7076c0e41b46c6eb9fc3b9ef0de1982f21176190d1ceddcf7999b963a0b3de8628b6ce799d02ef561ab2df9dc1f452be8c3dfd8961fb07c913ef0b036e25a7ffb7562c7bf7844470b71817780b269bac7c59b9a033bbd3511749183a505d37f373d5b572e23e6df0eb0c52914f297d1ebb385ede2447644c8d54fb2f51b8fda625518d723fb9319e6b2154798fba8809adb47e69e61b6843b7ca7af781f5484c3cc2db13b0d5e8ae4d97aae1cbec0a66210339af7aac3e82b3d7fad854db52f2b43c0c50a17f0a2c45593e00d66f74ecc3a3317b2630d7cb7f6352ac384197c522b61ffbf3e31d41268c41bb955565bb2f23886545bd0005e74b825de6d094e93884e45c066e279a50a509ab167ce1b5", @generic="b85470f174aa252e0ecd4399a89c0db17fdb1787aa53fa69cbb546711f648797d845966cba56d53807d29cffcd0b1428111ee639ac72440f693f5bf4f764a3bca85b85fee4fcbc8a3e3d6448d46d687c30f8f25371b1b913ad9421c63c37c66a90d424fe9d6425d23a7b587d2347dd2388fee7882061a010b025142812bd1added6c387702aad05a62542329cce71c56b5fabcbda87edec77ee20daa1eac9bfcf92c2554e4f4cd344b37db03447dbeb263fde4a96cca05564df1a0d7594d1833766d3bdddcea479f7a1a2b60e1b4a722bb0e2be07168d36d17", @typed={0x4, 0x32}, @generic="78467fbec529a9bac890f3ea9005daccbd39d4fa1bddd56bc486c000e968276fe59375acd058cd4db23ffc640dd57d57c5e9d956e42831ba741f4e3806a9c693925ad4d540bb0510eb050c4df26d23fac7bde14b61fe6d9d148c6c31b4818904a2b81b3d75646e2588d8ee21719da8b5ac9720d59469ebcff84dfed6c2cd0a6b1db36172a7eff2053f0893c37a195044c2942ecd160a604467848306"]}]}]}, @IFLA_LINKINFO={0x4, 0x12}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x40}, @IFLA_AF_SPEC={0x18, 0x1a, [{0x4, 0x7}, {0x4, 0x7}, {0x4, 0x1f}, {0x4, 0x2}, {0x4, 0xf}]}, @IFLA_IFALIAS={0x14, 0x14, 'teql0\x00'}]}, 0x2770}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) r3 = syz_open_dev$evdev(&(0x7f0000057fee)='/dev/input/event#\x00', 0xafd, 0x8000040000001) write$evdev(r3, &(0x7f000004d000)=[{{}, 0x2, 0x8, 0x401}, {}], 0x30) setsockopt$netrom_NETROM_T4(r0, 0x103, 0x6, &(0x7f0000002840)=0xff, 0x4) 2018/03/31 07:26:20 executing program 6: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00009c8000)="636c6561725f72656673007edb") r2 = socket(0xa, 0x2, 0x88) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, r2) connect$unix(r1, &(0x7f0000fa8000)=@abs, 0xffffffffffffff6c) r4 = socket$netlink(0x10, 0x3, 0x4) sendmsg$netrom(r2, &(0x7f0000000300)={&(0x7f0000000140)=@ax25={0x3, {"babcc3a81b7f94"}, 0x1}, 0x10, &(0x7f00000004c0)}, 0x10) writev(r4, &(0x7f00001a5ff0), 0x0) ioctl$DRM_IOCTL_ADD_CTX(r3, 0xc0086420, &(0x7f0000000540)={0x0}) ioctl$DRM_IOCTL_UNLOCK(r3, 0x4008642b, &(0x7f0000000580)={r5, 0x5}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) eventfd2(0x0, 0x80001) modify_ldt$write2(0x11, &(0x7f0000000000)={0x0, 0xffffffff, 0x0, 0x10, 0x0, 0x0, 0x6, 0x3}, 0x10) r6 = syz_open_dev$evdev(&(0x7f0000000600)='/dev/input/event#\x00', 0x3, 0x20101) write$evdev(r6, &(0x7f0000057fa0)=[{}, {}], 0x30) sysfs$2(0x2, 0x7ed4, &(0x7f00000003c0)=""/14) read(r6, &(0x7f0000000000)=""/45, 0x2d) sendto$ax25(r3, &(0x7f0000000180)="1da80f7c3985b7d5377e78eabdd5d9a5f01423f8fb71b215f3a0f9e9db62732032edf0f2325725af0765ebaf2e39966400581249b23c6873f20909619ec5f74d547660c4d1d5fde4ede5ffae95e6627b0b9c604449bcb36ee5aae546317b344a55a5a67d3c6d04f607487e7f6123d2b6cdc42153c99bd9f0cc3696bee47dbf9274ee592de8c76688a2342bbcaa9fb3569d8bdff37c1fee6ab6e104232f02f52ed29279a67884f3cf8b2430104182778abc27cff129060180ee3d1cc694598259ff693a6b4056f463754a97156e34950ff33f41d12b811626b922", 0xda, 0x0, &(0x7f0000000280)={0x3, {"ae4d3e45954621"}, 0x9}, 0x10) writev(r1, &(0x7f0000000340)=[{&(0x7f00000002c0)='4', 0x1}], 0x1) getsockopt$inet_tcp_int(r0, 0x6, 0xb, &(0x7f0000000040), &(0x7f0000000ffc)=0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r1, 0x0, 0x4a, 0xfb, &(0x7f0000000080)="4c90115c2204a56127690318a754c9af456a827dca07738140dc24583fca17876eabacb946836e82fd8255cf5525f0ec396d732eec016f58043e10c73336876f57e785b747528ee9f157", &(0x7f0000000400)=""/251, 0x3, 0x1c3}, 0x28) finit_module(r4, &(0x7f0000000380)='nat\x00', 0x1) 2018/03/31 07:26:20 executing program 5: getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f00000003c0)={0x0, 0x0, 0x0}, &(0x7f0000000400)=0xc) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000440)) tgkill(0x0, 0x0, 0x0) r3 = accept4$ax25(0xffffffffffffff9c, &(0x7f0000000380), &(0x7f0000000480)=0x10, 0x80000) fcntl$getown(0xffffffffffffffff, 0x9) r4 = syz_open_procfs(0x0, &(0x7f0000000040)="2f65786500000000000090d8b75e67e16b394342abb5158df87ea8984e79c93df7498b2b34796068700e29fbd789f9a031f23e16c96e30baed2961953b057f7a3222943acc4b8cfa4de553f8276731ddeb811efd44ea011e1a0db9074a28a826c88566b89c57cc3cca4aec41d37fa27c8daa19030d03139d0aea71d509d9a20ba7deceb656cc1308d9d1f111b6bd1595486f55e229923be4ed8cbfb78e86280b4cacf386bfa8840afb312a4c520a03b27f805d181bd09ea208931a36e888060a2d") ioctl$DRM_IOCTL_WAIT_VBLANK(r4, 0xc018643a, &(0x7f0000000500)={0x10000000, 0x363, 0x3}) ioctl$TCSETAF(r4, 0x5408, &(0x7f0000000640)={0xaa, 0x7, 0x8, 0x87, 0x5, 0xfffffffffffffffc, 0x8001, 0x480000000000000, 0xfffffffffffffff8, 0x4}) getpeername(r3, &(0x7f0000002940)=@can={0x0, 0x0}, &(0x7f00000029c0)=0x80) connect$packet(r4, &(0x7f0000002a00)={0x11, 0x7, r5, 0x1, 0x4, 0x6, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x15}}, 0x14) r6 = syz_open_procfs(r0, &(0x7f0000000300)='sched\x00') fsetxattr(r4, &(0x7f0000000140)=@known='user.syz\x00', &(0x7f0000000180)="363c51940180ebe7753205aff0fa0447a66dafe9356a7523588002a93724a0e1fe2d1192f3e19aec4d078b2ab1bb0365360f1339aa1b80de79356570d0a6b7a6025c471e7b8514989fa1e6746581add1157d812fd9ef438b5cd74178ad1fa3bb6cff15a3ede5d306b4f8d977fd65146e99d0c2b2c1d5f2c62577c3c094b374cc50eafec5b0a349c4b04ad425b5dd4d51856e426f359338dbcbe939c9da32b8ffb1f84e3df8dca651656e7818d949b14b5560d71c92335881a988a06f5c2b798dad13916946e32139ede4df933f525428b81464aea9a3c66c410bc4718ba27dab77cee9c682d9dcba6fdd36e36057a6bda603998e69e4aa516c825653071d26d991b749e7b19c2f076a0dc8f0240aabfae82984f0ee5172a6d18e0de0c1f674e57e4a71c0093db907000000000000000000000000000000", 0x137, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r6, 0x84, 0xa, &(0x7f0000000600)={0x1f, 0x100000001, 0x5, 0x8, 0x4, 0x3da, 0x0, 0xffffffff, 0x0}, &(0x7f00000007c0)=0x20) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000800)={0x7fff, 0xa, 0xf33, 0xe51c, r7}, 0x10) fremovexattr(r4, &(0x7f0000000000)=@known='user.syz\x00') ioctl$DRM_IOCTL_GET_CAP(r4, 0xc010640c, &(0x7f0000000340)={0x9}) socket$vsock_stream(0x28, 0x1, 0x0) ioctl$TCSBRKP(r6, 0x5425, 0x8) connect(r3, &(0x7f0000000740)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha512\x00'}, 0x80) syz_genetlink_get_family_id$ipvs(&(0x7f0000000580)='IPVS\x00') syz_fuseblk_mount(&(0x7f00000004c0)='./file0\x00', &(0x7f00000005c0)='./file0\x00', 0xe000, r1, r2, 0x325e, 0x0, 0x2820080) sendmsg$IPVS_CMD_GET_INFO(r3, &(0x7f0000000700)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000006c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="9300000091d39b297d008fc03e408ee000310e16e8ff44b195358ad6b69030cb40e7f8649b5e69f24b3a6daf07bd04d9aed524eca5a532ee46cf99dc869f498fbe73187d366c51a4d622a561c7cd644999473f1081c0482a431b85ef56dbbda38230200ebe9e61a1ab9f75b8328b877f7756e8b5fc43edad3f0192340dffe8d7fad134e60000"], 0x1}, 0x1, 0x0, 0x0, 0x80}, 0x0) fcntl$getown(r3, 0x9) r8 = socket$packet(0x11, 0x3, 0x300) ioctl$LOOP_SET_FD(r4, 0x4c00, r8) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, 0xffffffffffffffff, &(0x7f00000002c0)) 2018/03/31 07:26:20 executing program 0: r0 = socket(0x11, 0x100000802, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000240)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'ifb0\x00', 0x4012}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x30a) sendmsg$netrom(r0, &(0x7f0000000c40)={&(0x7f0000000200)=@ax25={0x3, {"2474f9c524d00a"}}, 0x10, &(0x7f0000000740)=[{&(0x7f0000000280)}, {&(0x7f00000003c0)}, {&(0x7f0000000540)="5774ca7b75f5b9458d9ecbbb45a0ffb41bedae2cd0edcb1903bf0518f0423da50301f4e2e42bfa6f8e83b0ee631b6701aa96312b3a454f6e8792ffaa936422af83698e2c9980a3162b130312a454c9cd7b669e018ebdea5040a29bd02b58ead88266ed6d35c1cd3363df5c61fa0728936982516e0ca4f4bf0a4c7bc83d9b5e68166f25b69744ba4c344e1a8b98a2d03bc9d62ada6f1996c80dffe8254c037bd45c96510efced59b368d9db6457f6d58d428bbaf56dab23e0adb8faf2d4d962a50aaddfda16153d86a29b4c7b1bb526e285f4b2ec2f6d68b62d94c51c464e1b419bf3efc649768075669707094123404853e968d8fc", 0xf5}], 0x3, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x450}, 0x40000) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'ifb0\x00', 0x102}) dup3(r0, r1, 0x0) 2018/03/31 07:26:20 executing program 7 (fault-call:7 fault-nth:24): mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) open(&(0x7f00000000c0)='./file0\x00', 0xa0441, 0x80) syz_mount_image$msdos(&(0x7f0000000140)='msdos\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x1, &(0x7f0000000100)=[{&(0x7f0000000480)="9196b107dc9e5c731d56d84afae6a7bf24", 0x11, 0x1f}], 0x0, &(0x7f0000000000)=ANY=[]) mkdir(&(0x7f0000000180)='./file0//ile0\x00', 0x112) rmdir(&(0x7f0000000080)='./file0//ile0\x00') mkdir(&(0x7f0000000340)='./file0//ile0\x00', 0x1) r0 = semget$private(0x0, 0x4, 0x21) semctl$GETPID(r0, 0x1, 0xb, &(0x7f0000000200)=""/154) 2018/03/31 07:26:20 executing program 1 (fault-call:6 fault-nth:29): mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) open(&(0x7f00000000c0)='./file0\x00', 0xa0441, 0x80) syz_mount_image$msdos(&(0x7f0000000140)='msdos\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x1, &(0x7f0000000100)=[{&(0x7f0000000480)="9196b107dc9e5c731d56d84afae6a7bf24", 0x11, 0x1f}], 0x0, &(0x7f0000000000)=ANY=[]) rmdir(&(0x7f0000000080)='./file0//ile0\x00') mkdir(&(0x7f0000000340)='./file0//ile0\x00', 0x1) r0 = semget$private(0x0, 0x4, 0x21) semctl$GETPID(r0, 0x1, 0xb, &(0x7f0000000200)=""/154) 2018/03/31 07:26:20 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00003de000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x0, 0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000380)={r1, 0x1}) fcntl$notify(r0, 0x402, 0x28) syz_open_dev$tun(&(0x7f0000000340)='/dev/net/tun\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x0, &(0x7f0000000040)=""/254, &(0x7f0000000140)=""/119, &(0x7f00000001c0)=""/150}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000300)={'dummy0\x00', 0x1}) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x1, r1}) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) r2 = memfd_create(&(0x7f0000000080)='dev ', 0x4) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fallocate(r2, 0x0, 0x0, 0x1) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0x4008af12, &(0x7f0000000580)={0xfffffffffffffffc, 0x8000000000001}) perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x4a, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$TIOCGSID(r2, 0x5429, &(0x7f00000005c0)) fcntl$setown(r0, 0x8, 0x0) setpriority(0x0, 0x0, 0x5) getsockopt$inet_sctp_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f0000000180), &(0x7f00000001c0)=0x8) io_setup(0x1f, &(0x7f0000000400)) r4 = add_key(&(0x7f0000000480)='user\x00', &(0x7f00000004c0)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000500)="2b0f18594c4a33e5bf5f9f", 0xb, 0xfffffffffffffffb) keyctl$reject(0x13, r4, 0x0, 0x0, 0x0) ioctl$sock_inet_SIOCDARP(r3, 0x8953, &(0x7f0000000200)={{0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, {0x0, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}, 0x0, {0x2, 0x0, @broadcast=0xffffffff}, 'syz_tun\x00'}) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xd, &(0x7f0000000440)=0x5, 0x4) accept$inet(r3, &(0x7f0000000100)={0x0, 0x0, @rand_addr}, &(0x7f00000003c0)=0xffffffffffffff54) 2018/03/31 07:26:20 executing program 3: r0 = memfd_create(&(0x7f0000000540)='\x00', 0x1) perf_event_open(&(0x7f00000005c0)={0x7, 0x70, 0x8, 0x9, 0x81f6, 0x8, 0x0, 0xfffffffffffffe01, 0x142, 0x1, 0xff, 0x3, 0x6, 0x9, 0x4, 0x5, 0x100000000, 0x8, 0x6, 0x9, 0x0, 0x8, 0x1, 0x800, 0x7, 0xfff, 0x0, 0xf4ca, 0x7, 0x4, 0x7, 0x800, 0x3ff, 0x0, 0x2, 0x7ff, 0x80000000, 0xffffffff00000001, 0x0, 0x3, 0x2, @perf_bp={&(0x7f0000000580), 0x1}, 0x10000, 0x0, 0xb6, 0x7, 0x6, 0xf21, 0x976}, 0x0, 0x5, 0xffffffffffffffff, 0x0) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/enforce\x00', 0x24201, 0x0) setsockopt$inet_dccp_int(r1, 0x21, 0x3, &(0x7f00000001c0)=0x4, 0x4) getresuid(&(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)=0x0) setfsuid(r2) tee(0xffffffffffffffff, r0, 0x40, 0x0) ioctl$fiemap(r1, 0xc020660b, &(0x7f0000000640)=ANY=[@ANYBLOB="ff01000000000000030000000000000004000000010400000100000000000000030000000000000060000000000000000700000000000000000000000000000000000000000000000010000000000000000000000800000018f5c0cec6509284962aaa67d604000000000000eccc46dba4d9f31c3792b0afd71a5b12bc405cf3a540876c7a867b243d2a941f9b5d7db9916d3974f77349a6034ea990a8ad6fbc4f76e0229d7c361285efe687f4fb9964e9ce848b4aaef38b2f20f01ce3899f5bcffd4049ce680bc1b30a8a088cf228060204087cafea5d7a8295529ea52ae08443603cd00cbc"]) fallocate(r1, 0x11, 0x0, 0x8000000) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f0000000000)={0x4, 0x8}) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xcc, &(0x7f00000002c0), 0x4) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) clone(0x0, &(0x7f0000000000), &(0x7f0000000000), &(0x7f0000000240), &(0x7f0000000080)) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup/syz0\x00', 0x200002, 0x0) socket$vsock_dgram(0x28, 0x2, 0x0) bind$netlink(r3, &(0x7f0000000500)={0x10, 0x0, 0x40025dfdbfe}, 0xc) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(0xffffffffffffffff, 0x40bc5311, &(0x7f0000000300)={0x784b, 0x3, 'client1\x00', 0x1, "6dea700b8d591e55", "08f1496fa810039fdc1fc424a6c5849c7ec6764d0f37c177947bcb618e55c868", 0x7}) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_open_dev$dspn(&(0x7f0000000280)='/dev/dsp#\x00', 0x10000400000fff, 0x301000) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x40, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000200)={0x1, r3}) perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x39, &(0x7f0000000000)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [{[], {0x8100, 0x20, 0x7, 0x1}}], {@llc_tr={0x11, {@llc={0xfe, 0x0, "b0", "8862db69a6430da707b930fc31c8f44c01a09250392e4d4214418dc6ce14ccce8cff139c"}}}}}, 0x0) [ 189.736511] device ifb0 entered promiscuous mode 2018/03/31 07:26:20 executing program 0: r0 = perf_event_open(&(0x7f0000b5a000)={0x4000000002, 0x78, 0x1e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$rdma_cm(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="001afeb99df30078816a8afa7a87d6000032077d9ee68700180000fa030000000000000056a50e57210889f551312f64db37344048cd1250f78ff305d6800050b03a756139dadb1ad410b1aa5d9330607c258d1b7ff88d6d2dcaa1", @ANYBLOB="020000000000000073c73e39a59f7655e25769d8d23e1faa38719eacee3496cc44b74a38179f2c281dec59604a8e01a7fdf1b77f5d17a60a3290daa5d6fcf9b03fff8aed4a326bd44092dded3b37cd076f47ec3649059324e4f49a26222d43c626e88d2f56ab26bb535150fd57ddfdeb2de0c2ac9b57"], 0x86) write$rdma_cm(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="03000000400000fa0a0000000000000000000000000000000000000000000001000000000a00000000000000fe80000000000000000000000000000000000000", @ANYBLOB="3e8eb775"], 0x44) r2 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x800000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = getpgid(0x0) fcntl$setown(r2, 0x8, r3) dup2(r2, r0) [ 189.848829] FAULT_INJECTION: forcing a failure. [ 189.848829] name failslab, interval 1, probability 0, space 0, times 0 [ 189.860175] CPU: 0 PID: 13905 Comm: syz-executor1 Not tainted 4.16.0-rc7+ #372 [ 189.867535] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 189.876889] Call Trace: [ 189.879475] dump_stack+0x194/0x24d [ 189.883102] ? arch_local_irq_restore+0x53/0x53 [ 189.887773] ? __save_stack_trace+0x7e/0xd0 [ 189.892105] should_fail+0x8c0/0xa40 2018/03/31 07:26:20 executing program 3: write(0xffffffffffffffff, &(0x7f000033e000), 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x20003e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000639000)='./file0\x00', 0x0) r0 = creat(&(0x7f0000df1000)='./file0/bus\x00', 0x0) fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000040)=[@in={0x2, 0x4e22, @multicast2=0xe0000002}, @in6={0xa, 0x4e20, 0x7fff, @remote={0xfe, 0x80, [], 0xbb}, 0x200}, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xf}}, @in6={0xa, 0x4e21, 0x6, @empty, 0x3}, @in={0x2, 0x4e21, @broadcast=0xffffffff}, @in6={0xa, 0x4e22, 0x81, @mcast2={0xff, 0x2, [], 0x1}}], 0x84) fcntl$lock(r0, 0x7, &(0x7f0000000000)={0x2, 0x0, 0x20, 0x1f}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, &(0x7f000019ffe9)={0x0, @time}) [ 189.895834] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 189.900940] ? kasan_kmalloc+0xad/0xe0 [ 189.904825] ? __kmalloc+0x162/0x760 [ 189.908536] ? kzalloc+0xf/0x20 [ 189.911813] ? alloc_fair_sched_group+0x5e/0x530 [ 189.916568] ? sched_create_group+0x35/0x70 [ 189.920889] ? kernfs_iop_mkdir+0x153/0x1e0 [ 189.925205] ? vfs_mkdir+0x390/0x600 [ 189.928916] ? SyS_mkdir+0x220/0x2a0 [ 189.932629] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 189.937989] ? save_stack+0x43/0xd0 [ 189.941613] ? find_held_lock+0x35/0x1d0 [ 189.945679] ? __lock_is_held+0xb6/0x140 [ 189.949744] ? check_same_owner+0x320/0x320 [ 189.954065] ? rcu_note_context_switch+0x710/0x710 [ 189.958998] should_failslab+0xec/0x120 [ 189.962971] __kmalloc+0x63/0x760 [ 189.966424] ? sched_create_group+0x22/0x70 [ 189.970740] ? kzalloc+0xf/0x20 [ 189.974017] kzalloc+0xf/0x20 [ 189.977119] alloc_fair_sched_group+0xd6/0x530 [ 189.981702] ? __lock_is_held+0xb6/0x140 [ 189.985763] sched_create_group+0x35/0x70 [ 189.989905] cpu_cgroup_css_alloc+0xe/0x30 [ 189.994142] cgroup_apply_control_enable+0x44d/0xbc0 [ 189.999252] ? cgroup_propagate_control+0x570/0x570 [ 190.004273] ? css_populate_dir+0x289/0x420 [ 190.008591] cgroup_mkdir+0x56f/0xfc0 [ 190.012387] ? __lock_is_held+0xb6/0x140 [ 190.016451] ? cgroup_destroy_locked+0x750/0x750 [ 190.021209] ? rcu_read_lock_sched_held+0x108/0x120 [ 190.026223] ? kmem_cache_free+0x258/0x2a0 [ 190.030456] ? set_nlink+0xc1/0x160 [ 190.034079] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 190.039470] ? generic_permission+0x105/0x3c0 [ 190.044039] ? cgroup_destroy_locked+0x750/0x750 [ 190.048794] kernfs_iop_mkdir+0x153/0x1e0 [ 190.052942] vfs_mkdir+0x390/0x600 [ 190.056477] SyS_mkdir+0x220/0x2a0 [ 190.060012] ? SyS_mkdirat+0x2b0/0x2b0 [ 190.063898] ? do_syscall_64+0xb7/0x940 [ 190.067873] ? SyS_mkdirat+0x2b0/0x2b0 [ 190.071745] do_syscall_64+0x281/0x940 [ 190.075609] ? vmalloc_sync_all+0x30/0x30 [ 190.079739] ? _raw_spin_unlock_irq+0x27/0x70 [ 190.084227] ? finish_task_switch+0x1c1/0x7e0 [ 190.088716] ? syscall_return_slowpath+0x550/0x550 [ 190.093631] ? syscall_return_slowpath+0x2ac/0x550 [ 190.098539] ? prepare_exit_to_usermode+0x350/0x350 [ 190.103537] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 190.108898] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 190.113729] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 190.118893] RIP: 0033:0x454e79 [ 190.122062] RSP: 002b:00007f2d4ca09c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 190.129755] RAX: ffffffffffffffda RBX: 00007f2d4ca0a6d4 RCX: 0000000000454e79 [ 190.137010] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000020000340 2018/03/31 07:26:20 executing program 2: r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000d81ff8)=0x101) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) ioctl$sock_bt_cmtp_CMTPCONNDEL(r2, 0x400443c9, &(0x7f0000000180)={{0x0, 0x0, 0x9, 0x1, 0x92}, 0x6}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r3, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000f86000)='./control/file0\x00') rmdir(&(0x7f000015dff6)='./control\x00') getsockopt$inet_tcp_int(r3, 0x6, 0x19, &(0x7f0000000040), &(0x7f0000000080)=0x4) unlink(&(0x7f0000000100)='./control\x00') close(r1) connect$ipx(r3, &(0x7f00000000c0)={0x4, 0x5, 0xff, "735c38852486", 0x5}, 0x10) 2018/03/31 07:26:20 executing program 5: perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6(0xa, 0x2, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(0xffffffffffffffff, 0xc028ae92, &(0x7f0000000e40)={0x4, 0x7}) unshare(0x20000000) clone(0x0, &(0x7f0000000240), &(0x7f0000000000), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) wait4(0x0, 0x0, 0x80000000, &(0x7f0000000080)) io_setup(0x8, &(0x7f00000003c0)) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000480)='fdinfo\x00') eventfd2(0x81, 0x80000) setsockopt$ax25_int(r2, 0x101, 0x6, &(0x7f0000000dc0), 0x4) syz_genetlink_get_family_id$ipvs(&(0x7f0000000340)='IPVS\x00') sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000380)={&(0x7f00000006c0)=ANY=[@ANYBLOB='<\x00'], 0x1}, 0x1}, 0x40000) dup3(r2, r1, 0x80000) r3 = syz_open_dev$sndmidi(&(0x7f0000000cc0)='/dev/snd/midiC#D#\x00', 0x2, 0x0) recvfrom$unix(0xffffffffffffffff, &(0x7f00000005c0)=""/80, 0x50, 0x0, &(0x7f0000000740)=@abs={0x0, 0x0, 0x4e23}, 0x6e) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000180)={{{@in=@multicast2, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@mcast1}}, &(0x7f0000000280)=0xe8) syz_fuse_mount(&(0x7f0000000140)='./file0\x00', 0xa001, r4, 0x0, 0x0, 0x200800) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001c00)={'bridge0\x00', 0x0}) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='sched\x00') getsockopt$IPT_SO_GET_ENTRIES(r6, 0x0, 0x41, &(0x7f0000000240)=ANY=[@ANYBLOB="6e61740000000000000000000000000000000000000000000000000000000000b4000000a7744bee0fa426c86b896158b537d8f5bcc4684660454418cdf96a94d5b0c00b3d4a6f13fa71a592e8f2ddbb47764a28a64d0722b2ec07b655d53451e429b11091ccb68dc5a36b3904cb8bd5487a74186f2a6b380aa443cbbe363724ddbf1506313f53d6eba300ab0bc4a08fe10832272ffe89a4ed079fa03b59f70a76d1b82e04c8cf9dc7628e34732fb4eb6cf5ca2787da9057cd5c760d823528744326b1eeee7428eecc500a5c93abae9cf7646e8199748fd7"], &(0x7f0000000340)=0xd8) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@dellink={0x20, 0x11, 0x21, 0x0, 0x0, {0x0, 0x0, 0x0, r5}}, 0x1a1}, 0x1}, 0x24044014) r7 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x9, 0x80) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r7, 0x84, 0x18, &(0x7f0000000540)={0x0, 0x20}, &(0x7f0000000700)=0x8) getsockopt$inet_sctp6_SCTP_CONTEXT(r6, 0x84, 0x11, &(0x7f0000000500)={r8, 0x4}, &(0x7f0000000440)=0x8) getsockopt$inet_sctp_SCTP_ASSOCINFO(r6, 0x84, 0x1, &(0x7f0000000480)={r9, 0xf78e, 0x7, 0x4, 0xffff, 0x4}, &(0x7f00000004c0)=0x14) r10 = getegid() lchown(&(0x7f0000000400)='./file0\x00', r4, r10) accept4$inet6(r7, &(0x7f0000000380), &(0x7f00000003c0)=0x1c, 0x800) getsockopt$inet_mreqsrc(r7, 0x0, 0x2f, &(0x7f00000000c0)={@multicast1, @multicast2, @multicast2}, &(0x7f00000001c0)=0xc) 2018/03/31 07:26:20 executing program 4: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/cuse\x00', 0x0, 0x0) getpeername$netrom(r0, &(0x7f00000002c0)=@full, &(0x7f0000000340)=0x48) perf_event_open(&(0x7f0000348f88)={0x2, 0xfffffffffffffde1, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x3, 0x400, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f0000000080)='logon\x00', 0x3) r1 = socket$nl_generic(0x10, 0x3, 0x10) getpid() sendmsg$nl_generic(r1, &(0x7f0000000400)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="ffc8de51b568026c792c35074e27b03a916fdf8e7631c20d53d9b8a658ad8e76359a8351fa1bfb94cb052793b0b935fdf22c3047dddc48e0951cc3d7c479dbb97d31779d4ed464858015c77337d3fad2920c7689de849fff7ed1ee3b4b94302d9b211f8956866bbdb223e11fd6e4dacac578842591f15a7095a5eca40086cbd1c43d0da2d1b67cc43fbf8e0544ad3aa25639e35ff2e20336377a65c381dadcf2d8419ca0649bbf338292d7d1765abc2f01041788c7f7aba7a0841859a116525e6f1c2aece80bc5941fed760361adfcb7ba998de85395"], 0x1}, 0x1}, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000000c0)={0x0, @rand_addr, @loopback}, &(0x7f0000000100)=0xc) mmap(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x0, 0x1b071, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000008000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000001000/0x4000)=nil) remap_file_pages(&(0x7f0000003000/0x9000)=nil, 0x9000, 0x0, 0x0, 0x0) socket(0x10, 0x1000000802, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0xbe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000040)={0x336e}, 0x8) setsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000100)=ANY=[@ANYRES32], 0x1) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000080)={0x0, &(0x7f0000000040)}) r2 = accept4$inet6(0xffffffffffffff9c, &(0x7f0000000180)={0x0, 0x0, 0x0, @remote}, &(0x7f00000001c0)=0x1c, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000600)={0x0, @in6={{0xa, 0x4e22, 0xfa5f, @ipv4={[], [0xff, 0xff]}}}, [0x40, 0xb27, 0x11a, 0x9, 0x5, 0x40c, 0x5, 0xffff, 0x0, 0x7, 0xfff, 0x4, 0x5b, 0x0, 0x4]}, &(0x7f0000000240)=0x100) tee(r2, 0xffffffffffffffff, 0x0, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xa, 0x0, 0x91f, 0xe134, 0x0, 0xffffffffffffffff, 0x8}, 0x2c) socket$vsock_dgram(0x28, 0x2, 0x0) mmap(&(0x7f0000000000/0xf12000)=nil, 0xf12000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) [ 190.144266] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 190.151515] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000013 [ 190.158770] R13: 00000000000003ea R14: 00000000006f7e90 R15: 000000000000001d 2018/03/31 07:26:20 executing program 1 (fault-call:6 fault-nth:30): mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) open(&(0x7f00000000c0)='./file0\x00', 0xa0441, 0x80) syz_mount_image$msdos(&(0x7f0000000140)='msdos\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x1, &(0x7f0000000100)=[{&(0x7f0000000480)="9196b107dc9e5c731d56d84afae6a7bf24", 0x11, 0x1f}], 0x0, &(0x7f0000000000)=ANY=[]) rmdir(&(0x7f0000000080)='./file0//ile0\x00') mkdir(&(0x7f0000000340)='./file0//ile0\x00', 0x1) r0 = semget$private(0x0, 0x4, 0x21) semctl$GETPID(r0, 0x1, 0xb, &(0x7f0000000200)=""/154) [ 190.233246] FAULT_INJECTION: forcing a failure. [ 190.233246] name failslab, interval 1, probability 0, space 0, times 0 [ 190.244600] CPU: 0 PID: 13910 Comm: syz-executor7 Not tainted 4.16.0-rc7+ #372 [ 190.251960] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 190.261316] Call Trace: [ 190.263905] dump_stack+0x194/0x24d [ 190.267539] ? arch_local_irq_restore+0x53/0x53 [ 190.272221] should_fail+0x8c0/0xa40 [ 190.275933] ? kstrdup+0x39/0x70 [ 190.279307] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 190.284405] ? cgroup_mkdir+0x553/0xfc0 [ 190.288381] ? vfs_mkdir+0x390/0x600 [ 190.292094] ? SyS_mkdir+0x220/0x2a0 [ 190.295831] ? do_syscall_64+0x281/0x940 [ 190.299891] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 190.305248] ? find_held_lock+0x35/0x1d0 [ 190.309296] ? find_held_lock+0x35/0x1d0 [ 190.313343] ? __lock_is_held+0xb6/0x140 [ 190.317395] ? check_same_owner+0x320/0x320 [ 190.321700] ? rcu_note_context_switch+0x710/0x710 [ 190.326611] ? rcu_read_lock_sched_held+0x108/0x120 [ 190.331616] should_failslab+0xec/0x120 [ 190.335571] kmem_cache_alloc+0x47/0x760 [ 190.339613] ? memcpy+0x45/0x50 [ 190.342877] ? kstrdup+0x59/0x70 [ 190.346228] __kernfs_new_node+0xe2/0x570 [ 190.350361] ? kernfs_dop_revalidate+0x380/0x380 [ 190.355107] ? kasan_check_read+0x11/0x20 [ 190.359237] ? read_word_at_a_time+0x12/0x20 [ 190.363625] ? strscpy+0x186/0x500 [ 190.367157] kernfs_new_node+0x80/0xe0 [ 190.371034] __kernfs_create_file+0x4b/0x320 [ 190.375430] cgroup_addrm_files+0x3c5/0xa70 [ 190.379754] ? cgroup_file_write+0x710/0x710 [ 190.384154] ? getrawmonotonic64+0x460/0x460 [ 190.388547] ? kernfs_active+0x92/0x160 [ 190.392506] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 190.397413] ? cgroup_kn_set_ugid+0x2c7/0x370 [ 190.401889] ? cgroup_file_name+0x1d0/0x1d0 [ 190.406198] css_populate_dir+0x340/0x420 [ 190.410328] cgroup_mkdir+0x553/0xfc0 [ 190.414110] ? __lock_is_held+0xb6/0x140 [ 190.418159] ? cgroup_destroy_locked+0x750/0x750 [ 190.422899] ? rcu_read_lock_sched_held+0x108/0x120 [ 190.427895] ? kmem_cache_free+0x258/0x2a0 [ 190.432111] ? set_nlink+0xc1/0x160 [ 190.435720] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 190.440646] ? generic_permission+0x105/0x3c0 [ 190.445134] ? cgroup_destroy_locked+0x750/0x750 [ 190.449869] kernfs_iop_mkdir+0x153/0x1e0 [ 190.453999] vfs_mkdir+0x390/0x600 [ 190.457527] SyS_mkdir+0x220/0x2a0 [ 190.461049] ? SyS_mkdirat+0x2b0/0x2b0 [ 190.464917] ? do_syscall_64+0xb7/0x940 [ 190.468873] ? SyS_mkdirat+0x2b0/0x2b0 [ 190.472741] do_syscall_64+0x281/0x940 [ 190.476611] ? vmalloc_sync_all+0x30/0x30 [ 190.480738] ? _raw_spin_unlock_irq+0x27/0x70 [ 190.485212] ? finish_task_switch+0x1c1/0x7e0 [ 190.489689] ? syscall_return_slowpath+0x550/0x550 [ 190.494609] ? syscall_return_slowpath+0x2ac/0x550 [ 190.499522] ? prepare_exit_to_usermode+0x350/0x350 [ 190.504519] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 190.509867] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 190.514697] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 190.519866] RIP: 0033:0x454e79 [ 190.523034] RSP: 002b:00007f49041e4c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 2018/03/31 07:26:21 executing program 6: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000000080)=0x9, 0x4) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/dsp\x00', 0x480100, 0x0) ioctl$TIOCSSOFTCAR(r1, 0x541a, &(0x7f00000001c0)=0x3) ioctl$KVM_GET_CLOCK(r1, 0x8030ae7c, &(0x7f0000000280)) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) connect$inet(r0, &(0x7f0000000200)={0x2, 0x4e20}, 0x7f) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000000180), &(0x7f00000002c0)=0xc) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000000780)) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x4000) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000340)='/proc/self/net/pfkey\x00', 0x8000, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vhost-net\x00', 0x2, 0x0) syz_open_dev$sndtimer(&(0x7f0000000380)='/dev/snd/timer\x00', 0x0, 0x1) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(&(0x7f00000d4000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f00006dcf3c)) r3 = accept4$bt_l2cap(0xffffffffffffff9c, &(0x7f00000000c0), &(0x7f0000000100)=0xe, 0x800) setsockopt$packet_buf(r1, 0x107, 0xd, &(0x7f0000000240)="79751c10e7", 0x5) vmsplice(r3, &(0x7f0000000180)=[{&(0x7f0000000140)="3662e3455863b61f", 0x8}], 0x1, 0xe) ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc008240a, &(0x7f0000000400)={0x2, 0x0, [0x0, 0x0]}) r4 = creat(&(0x7f0000000440)='./file0/file0\x00', 0x0) pwrite64(r4, &(0x7f00001fefff), 0xffffff79, 0x0) ftruncate(r4, 0x800) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0) ioctl$TUNSETSNDBUF(r4, 0x400454d4, &(0x7f00000004c0)=0x8) setsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f0000000480)=0x18, 0x4) 2018/03/31 07:26:21 executing program 4: r0 = socket(0x40000000015, 0x5, 0x0) bind$inet(r0, &(0x7f0000fc4000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) sendmmsg(r0, &(0x7f0000573000)=[{{&(0x7f0000bab000)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10, &(0x7f0000926fb0), 0x0, &(0x7f00003f0fa8)=[{0x10, 0x114, 0x6}], 0x10}}], 0x1, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000000)={'ipddp0\x00', {0x2, 0x4e24, @broadcast=0xffffffff}}) [ 190.530726] RAX: ffffffffffffffda RBX: 00007f49041e56d4 RCX: 0000000000454e79 [ 190.537976] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000020000340 [ 190.545226] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 190.552477] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000013 [ 190.559727] R13: 00000000000003ea R14: 00000000006f7e90 R15: 0000000000000018 [ 190.567340] cgroup: cgroup_addrm_files: failed to add cgroup.stat, err=-12 [ 190.614273] FAULT_INJECTION: forcing a failure. [ 190.614273] name failslab, interval 1, probability 0, space 0, times 0 [ 190.625693] CPU: 1 PID: 13956 Comm: syz-executor1 Not tainted 4.16.0-rc7+ #372 [ 190.633054] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 190.642390] Call Trace: [ 190.644964] dump_stack+0x194/0x24d [ 190.648577] ? arch_local_irq_restore+0x53/0x53 [ 190.653228] ? __save_stack_trace+0x7e/0xd0 [ 190.657540] should_fail+0x8c0/0xa40 [ 190.661236] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 190.666318] ? kasan_kmalloc+0xad/0xe0 [ 190.670186] ? kmem_cache_alloc_node_trace+0x150/0x760 [ 190.675442] ? alloc_fair_sched_group+0x1f0/0x530 [ 190.680263] ? sched_create_group+0x35/0x70 [ 190.684563] ? cpu_cgroup_css_alloc+0xe/0x30 [ 190.688953] ? vfs_mkdir+0x390/0x600 [ 190.692646] ? SyS_mkdir+0x220/0x2a0 [ 190.696339] ? do_syscall_64+0x281/0x940 [ 190.700380] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 190.705733] ? find_held_lock+0x35/0x1d0 [ 190.709781] ? __lock_is_held+0xb6/0x140 [ 190.713832] ? check_same_owner+0x320/0x320 [ 190.718135] ? rcu_note_context_switch+0x710/0x710 [ 190.723056] should_failslab+0xec/0x120 [ 190.727016] kmem_cache_alloc_node_trace+0x5a/0x760 [ 190.732019] ? __refill_cfs_bandwidth_runtime+0x120/0x120 [ 190.737540] ? sched_create_group+0x22/0x70 [ 190.741847] ? find_next_bit+0xcc/0x100 [ 190.745807] alloc_fair_sched_group+0x267/0x530 [ 190.750462] sched_create_group+0x35/0x70 [ 190.754592] cpu_cgroup_css_alloc+0xe/0x30 [ 190.758808] cgroup_apply_control_enable+0x44d/0xbc0 [ 190.763900] ? cgroup_propagate_control+0x570/0x570 [ 190.768905] ? css_populate_dir+0x289/0x420 [ 190.773209] cgroup_mkdir+0x56f/0xfc0 [ 190.776991] ? __lock_is_held+0xb6/0x140 [ 190.781043] ? cgroup_destroy_locked+0x750/0x750 [ 190.785779] ? rcu_read_lock_sched_held+0x108/0x120 [ 190.790774] ? kmem_cache_free+0x258/0x2a0 [ 190.794992] ? set_nlink+0xc1/0x160 [ 190.798601] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 190.803510] ? generic_permission+0x105/0x3c0 [ 190.807985] ? cgroup_destroy_locked+0x750/0x750 [ 190.812722] kernfs_iop_mkdir+0x153/0x1e0 [ 190.816852] vfs_mkdir+0x390/0x600 [ 190.820378] SyS_mkdir+0x220/0x2a0 [ 190.823901] ? SyS_mkdirat+0x2b0/0x2b0 [ 190.827768] ? do_syscall_64+0xb7/0x940 [ 190.831721] ? SyS_mkdirat+0x2b0/0x2b0 [ 190.835587] do_syscall_64+0x281/0x940 [ 190.839454] ? vmalloc_sync_all+0x30/0x30 [ 190.843583] ? _raw_spin_unlock_irq+0x27/0x70 [ 190.848056] ? finish_task_switch+0x1c1/0x7e0 [ 190.852530] ? syscall_return_slowpath+0x550/0x550 [ 190.857441] ? syscall_return_slowpath+0x2ac/0x550 [ 190.862349] ? prepare_exit_to_usermode+0x350/0x350 [ 190.867343] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 190.873291] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 190.878122] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 190.883290] RIP: 0033:0x454e79 [ 190.886457] RSP: 002b:00007f2d4ca09c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 190.894147] RAX: ffffffffffffffda RBX: 00007f2d4ca0a6d4 RCX: 0000000000454e79 [ 190.901396] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000020000340 [ 190.908645] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 2018/03/31 07:26:21 executing program 0: timer_create(0xfffffffffffffff1, &(0x7f0000005fb0)={0x4, 0x0, 0x1}, &(0x7f0000002ffc)) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x3, &(0x7f0000000040)={{0x77359400}, {0x0, 0x6}}, &(0x7f0000000080)) r0 = syz_open_dev$sndpcmp(&(0x7f0000000200)='/dev/snd/pcmC#D#p\x00', 0x9, 0x480001) getsockopt$inet_buf(r0, 0x0, 0x29, &(0x7f0000000240)=""/144, &(0x7f0000000300)=0x90) timer_gettime(0x0, &(0x7f0000000fe0)) r1 = gettid() r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000001c0)={'gretap0\x00', &(0x7f0000000140)=@ethtool_coalesce={0xf, 0x20, 0xfff, 0xfff, 0xffffffffffffff89, 0x3ff, 0x89eb, 0x1f, 0x5, 0x4, 0x800, 0x1, 0xffffffff80000001, 0x1, 0x3, 0x40, 0xfff, 0x7, 0x400, 0x0, 0xfffffffffffffffa, 0x5b, 0xe7}}) timer_create(0x3, &(0x7f00000000c0)={0x0, 0x22, 0x7, @tid=r1}, &(0x7f0000000100)) ptrace$setopts(0x4200, r1, 0x0, 0x20) 2018/03/31 07:26:21 executing program 7 (fault-call:7 fault-nth:25): mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) open(&(0x7f00000000c0)='./file0\x00', 0xa0441, 0x80) syz_mount_image$msdos(&(0x7f0000000140)='msdos\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x1, &(0x7f0000000100)=[{&(0x7f0000000480)="9196b107dc9e5c731d56d84afae6a7bf24", 0x11, 0x1f}], 0x0, &(0x7f0000000000)=ANY=[]) mkdir(&(0x7f0000000180)='./file0//ile0\x00', 0x112) rmdir(&(0x7f0000000080)='./file0//ile0\x00') mkdir(&(0x7f0000000340)='./file0//ile0\x00', 0x1) r0 = semget$private(0x0, 0x4, 0x21) semctl$GETPID(r0, 0x1, 0xb, &(0x7f0000000200)=""/154) 2018/03/31 07:26:21 executing program 3: ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(0xffffffffffffffff, 0xc10c5541, &(0x7f00000000c0)={0x80}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0xfffffffffffffffe, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000380)=[@textreal={0x8, &(0x7f0000000300)="f30f6fbe01a9653e0f0766b9690a00000f3226f326260f0f3e5084ae66b9800000c00f326635000800000f30f30f218eb800068ed00f01df640f38f16cffb810058ed0", 0x43}], 0x1, 0x0, &(0x7f00000003c0), 0x0) pipe2(&(0x7f0000e3eff8)={0x0, 0x0}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SMI(r3, 0xaeb7) add_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a}, &(0x7f0000000400), 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000080)=@ethernet={0x0, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000240)='h', 0x1}], 0x1, &(0x7f0000000300)}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000500)="0f005c0666b8ef0000000f23d00f21f86635300000010f23f866b9770b000066b80000008066ba000000000f30f20f35f30f1bcff4650f01cabaf80c66b8c261a58266efbafc0cb874daef0f236d0f32", 0x50}], 0x0, 0x0, &(0x7f0000000040), 0xffffe1e) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_FPU(r2, 0x41a0ae8d, &(0x7f0000000580)={[], 0x0, 0x101}) ioctl$KVM_RUN(r3, 0xae80, 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x1, 0x70, 0x9, 0x0, 0x7f, 0x8, 0x0, 0xbbd, 0x100, 0xc, 0xffffffff, 0x8, 0x100, 0x400, 0x81, 0x9, 0x5, 0x2, 0x10000, 0x6, 0x0, 0x1, 0x3, 0x4, 0x80000001, 0x81, 0xffff, 0xff, 0x1, 0x8, 0x7f67, 0x1, 0x1, 0x3, 0x100000001, 0x0, 0x6, 0x2, 0x0, 0x9, 0x5, @perf_bp={&(0x7f0000000200), 0x5}, 0x8, 0x1ff, 0xfffffffffffffffb, 0x2, 0x8, 0x4, 0x9}, r4, 0xb, r2, 0xb) 2018/03/31 07:26:21 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000000)="650f2282bad104b0f5ee360f08f2f30f009319000f073636a566b8490000000f23d00f21f866352000000a0f23f8650f013a0f3067643e660f38143b", 0x3c}], 0x1, 0x0, &(0x7f0000000200), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_TSS_ADDR(r1, 0xae47, 0xd000) [ 190.915892] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000013 [ 190.923139] R13: 00000000000003ea R14: 00000000006f7e90 R15: 000000000000001e 2018/03/31 07:26:21 executing program 1 (fault-call:6 fault-nth:31): mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) open(&(0x7f00000000c0)='./file0\x00', 0xa0441, 0x80) syz_mount_image$msdos(&(0x7f0000000140)='msdos\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x1, &(0x7f0000000100)=[{&(0x7f0000000480)="9196b107dc9e5c731d56d84afae6a7bf24", 0x11, 0x1f}], 0x0, &(0x7f0000000000)=ANY=[]) rmdir(&(0x7f0000000080)='./file0//ile0\x00') mkdir(&(0x7f0000000340)='./file0//ile0\x00', 0x1) r0 = semget$private(0x0, 0x4, 0x21) semctl$GETPID(r0, 0x1, 0xb, &(0x7f0000000200)=""/154) [ 190.999475] FAULT_INJECTION: forcing a failure. [ 190.999475] name failslab, interval 1, probability 0, space 0, times 0 [ 191.010901] CPU: 1 PID: 13966 Comm: syz-executor7 Not tainted 4.16.0-rc7+ #372 [ 191.018262] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 191.027606] Call Trace: [ 191.030180] dump_stack+0x194/0x24d [ 191.033797] ? arch_local_irq_restore+0x53/0x53 [ 191.038455] should_fail+0x8c0/0xa40 [ 191.042151] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 191.047235] ? rb_first_postorder+0xa0/0xa0 [ 191.051538] ? __mutex_lock+0x16f/0x1a80 [ 191.055582] ? trace_event_raw_event_lock+0x340/0x340 [ 191.060749] ? trace_hardirqs_off+0x10/0x10 [ 191.065049] ? find_held_lock+0x35/0x1d0 [ 191.069088] ? __lock_is_held+0xb6/0x140 [ 191.073133] ? check_same_owner+0x320/0x320 [ 191.077433] ? lock_downgrade+0x980/0x980 [ 191.081561] ? rcu_note_context_switch+0x710/0x710 [ 191.086478] should_failslab+0xec/0x120 [ 191.090430] __kmalloc_track_caller+0x5f/0x760 [ 191.094989] ? idr_alloc_cyclic+0x1d6/0x320 [ 191.099290] ? kstrdup_const+0x39/0x50 [ 191.103153] ? __mutex_unlock_slowpath+0xe9/0xac0 [ 191.107976] kstrdup+0x39/0x70 [ 191.111165] kstrdup_const+0x39/0x50 [ 191.114885] __kernfs_new_node+0xa2/0x570 [ 191.119015] ? kernfs_dop_revalidate+0x380/0x380 [ 191.123753] ? kasan_check_read+0x11/0x20 [ 191.127879] ? read_word_at_a_time+0x12/0x20 [ 191.132264] ? strscpy+0x186/0x500 [ 191.135789] kernfs_new_node+0x80/0xe0 [ 191.139658] __kernfs_create_file+0x4b/0x320 [ 191.144050] cgroup_addrm_files+0x3c5/0xa70 [ 191.148356] ? cgroup_file_write+0x710/0x710 [ 191.152749] ? getrawmonotonic64+0x460/0x460 [ 191.157138] ? kernfs_active+0x92/0x160 [ 191.161093] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 191.165997] ? cgroup_kn_set_ugid+0x2c7/0x370 [ 191.170483] ? cgroup_file_name+0x1d0/0x1d0 [ 191.174787] css_populate_dir+0x340/0x420 [ 191.178913] cgroup_mkdir+0x553/0xfc0 [ 191.182690] ? __lock_is_held+0xb6/0x140 [ 191.186731] ? cgroup_destroy_locked+0x750/0x750 [ 191.191464] ? rcu_read_lock_sched_held+0x108/0x120 [ 191.196458] ? kmem_cache_free+0x258/0x2a0 [ 191.200668] ? set_nlink+0xc1/0x160 [ 191.204270] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 191.209174] ? generic_permission+0x105/0x3c0 [ 191.213647] ? cgroup_destroy_locked+0x750/0x750 [ 191.218378] kernfs_iop_mkdir+0x153/0x1e0 [ 191.222502] vfs_mkdir+0x390/0x600 [ 191.226032] SyS_mkdir+0x220/0x2a0 [ 191.229549] ? SyS_mkdirat+0x2b0/0x2b0 [ 191.233412] ? do_syscall_64+0xb7/0x940 [ 191.237362] ? SyS_mkdirat+0x2b0/0x2b0 [ 191.241227] do_syscall_64+0x281/0x940 [ 191.245092] ? vmalloc_sync_all+0x30/0x30 [ 191.249216] ? _raw_spin_unlock_irq+0x27/0x70 [ 191.253689] ? finish_task_switch+0x1c1/0x7e0 [ 191.258162] ? syscall_return_slowpath+0x550/0x550 [ 191.263068] ? syscall_return_slowpath+0x2ac/0x550 [ 191.267974] ? prepare_exit_to_usermode+0x350/0x350 [ 191.272970] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 191.278313] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 191.283138] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 191.288304] RIP: 0033:0x454e79 [ 191.291490] RSP: 002b:00007f49041e4c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 2018/03/31 07:26:22 executing program 2: mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x5, 0x0) readv(r0, &(0x7f0000001640)=[{&(0x7f0000000000)=""/194, 0xc2}, {&(0x7f0000001140)=""/10, 0xa}, {&(0x7f0000001180)=""/230, 0xe6}, {&(0x7f0000001280)=""/199, 0xc7}, {&(0x7f0000001380)=""/61, 0x3d}, {&(0x7f00000013c0)=""/201, 0xc9}, {&(0x7f00000014c0)=""/216, 0xd8}, {&(0x7f00000015c0)=""/55, 0x37}, {&(0x7f0000001600)=""/4, 0x4}], 0x9) pread64(r0, &(0x7f0000000140)=""/4096, 0x1000, 0x0) [ 191.299179] RAX: ffffffffffffffda RBX: 00007f49041e56d4 RCX: 0000000000454e79 [ 191.306427] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000020000340 [ 191.313671] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 191.320916] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000013 [ 191.328161] R13: 00000000000003ea R14: 00000000006f7e90 R15: 0000000000000019 [ 191.335649] cgroup: cgroup_addrm_files: failed to add cpu.stat, err=-12 2018/03/31 07:26:22 executing program 7 (fault-call:7 fault-nth:26): mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) open(&(0x7f00000000c0)='./file0\x00', 0xa0441, 0x80) syz_mount_image$msdos(&(0x7f0000000140)='msdos\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x1, &(0x7f0000000100)=[{&(0x7f0000000480)="9196b107dc9e5c731d56d84afae6a7bf24", 0x11, 0x1f}], 0x0, &(0x7f0000000000)=ANY=[]) mkdir(&(0x7f0000000180)='./file0//ile0\x00', 0x112) rmdir(&(0x7f0000000080)='./file0//ile0\x00') mkdir(&(0x7f0000000340)='./file0//ile0\x00', 0x1) r0 = semget$private(0x0, 0x4, 0x21) semctl$GETPID(r0, 0x1, 0xb, &(0x7f0000000200)=""/154) 2018/03/31 07:26:22 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000237fee)='/dev/input/event#\x00', 0x8000002, 0x28004) write$evdev(r0, &(0x7f0000037fe8)=[{{}, 0x1, 0x48, 0x2}, {}], 0x30) r1 = creat(&(0x7f0000beaff8)='./file0\x00', 0xd) r2 = syz_open_procfs(0x0, &(0x7f0000000000)="6e65742f69705f754bc158cc58ed38ab4600000000000000000000e3b1") sendfile(r1, r2, &(0x7f0000023000)=0x800, 0x26a950b) [ 191.374974] FAULT_INJECTION: forcing a failure. [ 191.374974] name failslab, interval 1, probability 0, space 0, times 0 [ 191.386350] CPU: 0 PID: 13977 Comm: syz-executor1 Not tainted 4.16.0-rc7+ #372 [ 191.393715] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 191.403064] Call Trace: [ 191.405657] dump_stack+0x194/0x24d [ 191.409292] ? arch_local_irq_restore+0x53/0x53 [ 191.413959] ? __save_stack_trace+0x7e/0xd0 [ 191.418293] should_fail+0x8c0/0xa40 [ 191.422018] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 191.427116] ? kasan_kmalloc+0xad/0xe0 [ 191.430985] ? kmem_cache_alloc_node_trace+0x150/0x760 [ 191.436249] ? alloc_fair_sched_group+0x1f0/0x530 [ 191.441075] ? sched_create_group+0x35/0x70 [ 191.445377] ? cpu_cgroup_css_alloc+0xe/0x30 [ 191.449761] ? vfs_mkdir+0x390/0x600 [ 191.453449] ? SyS_mkdir+0x220/0x2a0 [ 191.457138] ? do_syscall_64+0x281/0x940 [ 191.461177] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 191.466520] ? find_held_lock+0x35/0x1d0 [ 191.470559] ? __lock_is_held+0xb6/0x140 [ 191.474604] ? check_same_owner+0x320/0x320 [ 191.478906] ? rcu_note_context_switch+0x710/0x710 [ 191.483819] should_failslab+0xec/0x120 [ 191.487771] kmem_cache_alloc_node_trace+0x5a/0x760 [ 191.492763] ? __refill_cfs_bandwidth_runtime+0x120/0x120 [ 191.498275] ? sched_create_group+0x22/0x70 [ 191.502573] ? find_next_bit+0xcc/0x100 [ 191.506528] alloc_fair_sched_group+0x267/0x530 [ 191.511177] sched_create_group+0x35/0x70 [ 191.515301] cpu_cgroup_css_alloc+0xe/0x30 [ 191.519517] cgroup_apply_control_enable+0x44d/0xbc0 [ 191.524601] ? cgroup_propagate_control+0x570/0x570 [ 191.529598] ? css_populate_dir+0x289/0x420 [ 191.533904] cgroup_mkdir+0x56f/0xfc0 [ 191.537682] ? __lock_is_held+0xb6/0x140 [ 191.541724] ? cgroup_destroy_locked+0x750/0x750 [ 191.546458] ? rcu_read_lock_sched_held+0x108/0x120 [ 191.551452] ? kmem_cache_free+0x258/0x2a0 [ 191.555667] ? set_nlink+0xc1/0x160 [ 191.559273] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 191.564180] ? generic_permission+0x105/0x3c0 [ 191.568651] ? cgroup_destroy_locked+0x750/0x750 [ 191.573385] kernfs_iop_mkdir+0x153/0x1e0 [ 191.577512] vfs_mkdir+0x390/0x600 [ 191.581030] SyS_mkdir+0x220/0x2a0 [ 191.584550] ? SyS_mkdirat+0x2b0/0x2b0 [ 191.588414] ? do_syscall_64+0xb7/0x940 [ 191.592366] ? SyS_mkdirat+0x2b0/0x2b0 [ 191.596231] do_syscall_64+0x281/0x940 [ 191.600099] ? vmalloc_sync_all+0x30/0x30 [ 191.604222] ? trace_event_raw_event_sys_exit+0x260/0x260 [ 191.609735] ? syscall_return_slowpath+0x550/0x550 [ 191.614641] ? syscall_return_slowpath+0x2ac/0x550 [ 191.619549] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 191.624892] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 191.629714] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 191.634878] RIP: 0033:0x454e79 [ 191.638047] RSP: 002b:00007f2d4ca09c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 191.645734] RAX: ffffffffffffffda RBX: 00007f2d4ca0a6d4 RCX: 0000000000454e79 [ 191.652980] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000020000340 [ 191.660231] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 191.667478] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000013 2018/03/31 07:26:22 executing program 3: listxattr(&(0x7f0000005b40)='./file0\x00', &(0x7f0000005b80)=""/72, 0x48) memfd_create(&(0x7f0000000100)=']\x00', 0x0) clone(0x0, &(0x7f0000000200)="17dd6280de3693223b6fdbc70650db5722605e7d4cfec7dee9e7ca3a83bd750a10fca3bdd2c2fde305012a95b619af30af684bba6e9e2031b1eec7e667e9c22c674d6eb942b78258369909dc14f2f5bd60202d6a38d497b47baf3e89fbca89a91e4706f3efdb55b9e9857fa2e05fdd62de157a7f60228f2c807e86ce264193d1206f5402c6f095c94a510e0c705386635a3f1a5970fd087434c0bf52f98bc0c951a8c18f7b8221c007a7f1c8d5", &(0x7f0000000140), &(0x7f0000000180), &(0x7f0000000300)) getpid() gettid() clock_gettime(0x0, &(0x7f00000004c0)={0x0, 0x0}) utimes(&(0x7f0000000000)='./file0\x00', &(0x7f0000000580)={{r0, r1/1000+10000}, {0x0, 0x7530}}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) recvfrom(r2, &(0x7f0000000280)=""/191, 0xbf, 0x40000040, &(0x7f0000000340)=@can={0x1d}, 0x80) r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) r4 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r3) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000000640)={0x0, @in={{0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}}}, &(0x7f0000000700)=0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r5, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x2, 0x2, r6}, &(0x7f0000000140)=0x51) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000000180)={r7, 0x0, 0x0, 0x101, 0x4}, &(0x7f00000001c0)=0x18) ioctl$DRM_IOCTL_WAIT_VBLANK(r4, 0xc018643a, &(0x7f0000000500)={0xc000000, 0x3ff, 0x2c}) fcntl$F_SET_RW_HINT(r4, 0x40c, &(0x7f0000000600)) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x100, 0x0) sendfile(r3, r3, &(0x7f0000000080)=0x5f, 0x102000004) ioctl$LOOP_CLR_FD(r3, 0x4c01) sync() ftruncate(r3, 0x2) dup2(r4, r3) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000480)=0x8, 0xfffffffffffffd9e) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r4, 0x28, 0x0, &(0x7f00000005c0)=0x3, 0x8) setsockopt$IP_VS_SO_SET_EDIT(0xffffffffffffffff, 0x0, 0x483, &(0x7f0000000540)={0x84, @multicast2=0xe0000002, 0x4e20, 0x0, 'dh\x00', 0x28, 0xfff, 0x13}, 0x2c) ioctl$sock_netdev_private(r4, 0x89fe, &(0x7f00000003c0)="0aab95906cbf78d0113b9b11c035ec1b838e455485a0ae0c1dc7ead287ca35d95f330970a765dba3809e348d3d739c34fcbb996a276d6eae518354b310b63d5e6d4f02c584c900b9eed1ccd8c2d601c345a16a9770811f407c4232bb44f3f941d8cfe9138c1c2a09b466a541396572c076d8f96f042779cc2bdc8794dff7d80969b0a082393a735bb99d9c59fd538646854b79ccff7fdd4025a5c58b1e2acca8fd4f9a") [ 191.674725] R13: 00000000000003ea R14: 00000000006f7e90 R15: 000000000000001f 2018/03/31 07:26:22 executing program 2: r0 = accept4$inet(0xffffffffffffff9c, 0x0, &(0x7f0000000080), 0x800) r1 = accept4$inet(r0, &(0x7f0000000100)={0x0, 0x0, @broadcast}, &(0x7f0000000140)=0x10, 0x800) ioctl$sock_inet_SIOCGIFPFLAGS(r1, 0x8935, &(0x7f0000000300)={"677261f3cb7030c30c282a416158d200", 0x9}) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x141241, 0x0) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000000)="0bf5430f000319", 0x7}], 0x1) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f00000001c0)={r2}) setsockopt$inet_MCAST_LEAVE_GROUP(r1, 0x0, 0x2d, &(0x7f0000000440)={0x4, {{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x12}}}}, 0x88) write$sndseq(r2, &(0x7f0000000380)=[{0x370c, 0x401, 0x8, 0x9, @tick=0x9, {0x2, 0x4}, {0x0, 0x7}, @addr={0x7f}}, {0x3ff, 0x2, 0x0, 0x200, @tick=0x80000001, {0x77, 0x3}, {0x8, 0x2}, @ext={0x0, &(0x7f0000000240)}}], 0x60) getrlimit(0x0, &(0x7f0000000200)) r3 = getpgrp(0x0) sysfs$2(0x2, 0x2, &(0x7f0000000680)=""/166) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r2, 0xc05c5340, &(0x7f0000000600)={0x9, 0xffff, 0x6, {}, 0x6, 0xfc}) perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0x2, 0x6, 0x1000000, 0x8a, 0x0, 0x7fffffff, 0x40000, 0x2, 0x7, 0x7e4dd3ac, 0x63a, 0x0, 0x2, 0x2, 0x9, 0x80, 0x8, 0x5, 0x4, 0x3f, 0x8001, 0x8, 0xffffffffffffffff, 0x3, 0x1, 0xfffffffffffffffa, 0x3, 0x401, 0x9a4c, 0xa29b, 0x6, 0x6, 0x7, 0x9, 0x0, 0x0, 0x0, 0x61f9, 0x5, @perf_bp={&(0x7f0000000180), 0x9}, 0x0, 0x3f, 0x7, 0x0, 0x1, 0x200, 0x4}, r3, 0x6, r2, 0x2) setsockopt$RDS_GET_MR_FOR_DEST(r2, 0x114, 0x7, &(0x7f0000000540)={@generic={0x3, "fde54a05014976e0d5fba17b0b7b738502e7a57c3ec85cddc277909c95d4dfbce882cf64504e765524f22274386894c6bcc46baa000a43d65f2170e4f5e699f9cf13fbc41cf23606579641da0a7923322ac70e87019469b71056ab459e849f2c1c22d9beab9da33ea465d0d049ee3b2096dc7681309371f2cfd94428fde0"}, {&(0x7f00000002c0)=""/30, 0x1e}, &(0x7f0000000500), 0x20}, 0xa0) 2018/03/31 07:26:22 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000002000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0x0, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r1, 0x0, 0x48c, &(0x7f0000000480)={0x2, 'teql0\x00', 0x1}, 0x18) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000000240)}) r2 = semget(0x0, 0x4, 0x0) semctl$GETNCNT(r2, 0x0, 0xe, &(0x7f00000002c0)=""/84) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000012fc7)}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000100)={0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000440)=[@increfs_done={0x40106308, r3}], 0x0, 0x0, &(0x7f0000000040)}) poll(&(0x7f0000000000)=[{r1}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x10, 0x0, &(0x7f000000cf68)=[@request_death={0x400c630f}], 0x0, 0x0, &(0x7f0000008f37)}) ioctl(r0, 0x1, &(0x7f00000000c0)) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0xfffffffffffff866) sendto$inet6(0xffffffffffffffff, &(0x7f0000f6f000), 0x0, 0x0, &(0x7f0000b63fe4)={0xa}, 0x1c) r6 = dup2(r5, r4) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000f40)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DAEMON(r6, &(0x7f0000000ec0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x14, r7, 0x4, 0x70bd25, 0x25dfdbfe, {0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x20004041) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r5, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x5, 0x3ff, 0x7}, 0x14) ioctl$SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0f85403, &(0x7f0000000200)={{0x3, 0x0, 0x0, 0x0, 0xffffffffffff8001}, 0x6, 0x0, 'id1\x00', 'timer1\x00', 0x0, 0x40, 0x0, 0x9}) r8 = socket$inet(0x10, 0x3, 0x0) sendmsg(r8, &(0x7f0000014000)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000008000)="4c0000001200ff09fffefd956fa2830007a6008000000000000000683540150024001d0004c41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b079881", 0x4c}], 0x1}, 0x0) r9 = add_key(&(0x7f00000001c0)='asymmetric\x00', &(0x7f00000003c0)={0x73, 0x79, 0x7a}, &(0x7f0000000480)="5957756a122543e1a13be9d0f608a5f56988853e2f17bcc6ab8f8fc655dbbd0e0cbce70b1c1a95b497b02687386ecb4deaffdbc8c92c158a05af6b91e9fa0d90bf95cc062c7f903a7762c3fe2f78f210c0dffd8813f42e09232aec6a1f5162e67ce9de0e681bd1eb48c00f583880c9b3137815b33efa34258515", 0x7a, 0xfffffffffffffffe) r10 = add_key(&(0x7f0000000e00)="6173796d6d657472696300f47b0bf9d16211ffc3fd3247125ac4fc0e1daba89f73c48b5fb1c6dc41ac841df449ef9dbd72b57c244a04449ae78ab4f8b091ddf1ca849e98a0239bb90d5a615cdf54365ce821c94810b29a19841a4cac93563d59595416b81e2d7eb0f24666d5fb449c2ef5905003c801a33c2bb0d31ae012349d588d3bedfb16e434c802466a0d77cd002295ce1be5c823fdfeeb42e0b1", &(0x7f0000000d00)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000d40)="68f8bf294101262bbadf86098cf05994f6b74328853396fe9ec13a643abc3747c9280385e65d0e3b58deca34610e83a593068f8b39f3e63234571a25feb40a1f3eeab62387cb5e239ce43506e20512f79d128213d1f2e70f3c30c64694e0998012ec02d2d541215f6c27000d839ad653f663def9640c4504be425069c3554fdc5a992d731bc3d1575911c1739b30c5151facb65244aed995d960234fa18b4215fcf3c91586abff6265cf245ffc4ad673255abd30cef0ac1b715137", 0xbb, 0xffffffffffffffff) keyctl$search(0xa, r9, &(0x7f0000000600)='dns_resolver\x00', &(0x7f0000000640)={0x73, 0x79, 0x7a, 0x1}, r10) socket$nl_crypto(0x10, 0x3, 0x15) madvise(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0xc) request_key(&(0x7f0000000040)='logon\x00', &(0x7f0000000400)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000300)="9414d46e5bb4eb97bebe5c8c4aab4f9e123ec5eaee666eebe12d87f7971a4684a42ff508c133b719c793283cf059eab43f4577be4ce54a7d7a910219d518fcfc93c0f9b8ead1a3ac089311cc9766dc52859a270fe122d7e68677357a5026e31bbab3219c54ae92bafb1856bb4d94dc53b78b1bdb083b7455b51c4778adad2097d2a0a6b31c48e4ee441818", 0xfffffffffffffffb) [ 191.833421] FAULT_INJECTION: forcing a failure. [ 191.833421] name failslab, interval 1, probability 0, space 0, times 0 [ 191.844705] CPU: 0 PID: 13986 Comm: syz-executor7 Not tainted 4.16.0-rc7+ #372 [ 191.852063] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 191.861425] Call Trace: [ 191.864022] dump_stack+0x194/0x24d [ 191.867653] ? arch_local_irq_restore+0x53/0x53 [ 191.872331] should_fail+0x8c0/0xa40 [ 191.876051] ? __mutex_unlock_slowpath+0xe9/0xac0 [ 191.880897] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 191.886009] ? _raw_spin_unlock+0x22/0x30 [ 191.890164] ? kernfs_dop_revalidate+0x380/0x380 [ 191.894918] ? find_held_lock+0x35/0x1d0 [ 191.898961] ? __lock_is_held+0xb6/0x140 [ 191.903031] ? check_same_owner+0x320/0x320 [ 191.907333] ? __kernfs_create_file+0x27f/0x320 [ 191.911989] ? rcu_note_context_switch+0x710/0x710 [ 191.916906] should_failslab+0xec/0x120 [ 191.920857] kmem_cache_alloc+0x47/0x760 [ 191.924897] ? __lock_is_held+0xb6/0x140 [ 191.928953] sched_create_group+0x22/0x70 [ 191.933088] cpu_cgroup_css_alloc+0xe/0x30 [ 191.937298] cgroup_apply_control_enable+0x44d/0xbc0 [ 191.942386] ? cgroup_propagate_control+0x570/0x570 [ 191.947386] ? css_populate_dir+0x289/0x420 [ 191.951685] cgroup_mkdir+0x56f/0xfc0 [ 191.955466] ? __lock_is_held+0xb6/0x140 [ 191.959508] ? cgroup_destroy_locked+0x750/0x750 [ 191.964241] ? rcu_read_lock_sched_held+0x108/0x120 [ 191.969234] ? kmem_cache_free+0x258/0x2a0 [ 191.973447] ? set_nlink+0xc1/0x160 [ 191.977055] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 191.981966] ? generic_permission+0x105/0x3c0 [ 191.986441] ? cgroup_destroy_locked+0x750/0x750 [ 191.991177] kernfs_iop_mkdir+0x153/0x1e0 [ 191.995306] vfs_mkdir+0x390/0x600 [ 191.998825] SyS_mkdir+0x220/0x2a0 [ 192.002342] ? SyS_mkdirat+0x2b0/0x2b0 [ 192.006209] ? do_syscall_64+0xb7/0x940 [ 192.010158] ? SyS_mkdirat+0x2b0/0x2b0 [ 192.014029] do_syscall_64+0x281/0x940 [ 192.017892] ? vmalloc_sync_all+0x30/0x30 [ 192.022022] ? _raw_spin_unlock_irq+0x27/0x70 [ 192.026495] ? finish_task_switch+0x1c1/0x7e0 [ 192.030971] ? syscall_return_slowpath+0x550/0x550 [ 192.035875] ? syscall_return_slowpath+0x2ac/0x550 [ 192.041343] ? prepare_exit_to_usermode+0x350/0x350 [ 192.046340] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 192.051697] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 192.056522] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 192.061687] RIP: 0033:0x454e79 [ 192.064855] RSP: 002b:00007f49041e4c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 192.072541] RAX: ffffffffffffffda RBX: 00007f49041e56d4 RCX: 0000000000454e79 [ 192.079803] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000020000340 [ 192.087052] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 192.094298] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000013 [ 192.101543] R13: 00000000000003ea R14: 00000000006f7e90 R15: 000000000000001a 2018/03/31 07:26:22 executing program 5: r0 = add_key$keyring(&(0x7f0000000300)='keyring\x00', &(0x7f0000000180)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$setperm(0x5, r0, 0x0) keyctl$describe(0x6, r0, &(0x7f00000001c0)=""/56, 0x38) r1 = socket(0x1, 0x0, 0x7e6b) accept$ax25(r1, &(0x7f0000000000), &(0x7f0000000040)=0x10) 2018/03/31 07:26:22 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x0, 0x0, &(0x7f0000001fe8)=ANY=[@ANYBLOB="b04bca5ef963fb95cf"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0xc3, &(0x7f0000009f3d)=""/195}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x25}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195}, 0x48) r1 = socket(0x10, 0x3, 0x0) r2 = dup2(r0, r0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000080)={&(0x7f0000000040)=[0x0], 0x1}) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000000c0)=r0, 0x4) write(r1, &(0x7f00000005c0)="260000005e0009000000eaf83a0000000000000001000000ffffff000008db1ee9ff4435eade", 0x26) 2018/03/31 07:26:22 executing program 1 (fault-call:6 fault-nth:32): mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) open(&(0x7f00000000c0)='./file0\x00', 0xa0441, 0x80) syz_mount_image$msdos(&(0x7f0000000140)='msdos\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x1, &(0x7f0000000100)=[{&(0x7f0000000480)="9196b107dc9e5c731d56d84afae6a7bf24", 0x11, 0x1f}], 0x0, &(0x7f0000000000)=ANY=[]) rmdir(&(0x7f0000000080)='./file0//ile0\x00') mkdir(&(0x7f0000000340)='./file0//ile0\x00', 0x1) r0 = semget$private(0x0, 0x4, 0x21) semctl$GETPID(r0, 0x1, 0xb, &(0x7f0000000200)=""/154) [ 192.140084] binder: 14008:14011 BC_INCREFS_DONE u0000000000000000 no match [ 192.193449] FAULT_INJECTION: forcing a failure. [ 192.193449] name failslab, interval 1, probability 0, space 0, times 0 [ 192.204773] CPU: 0 PID: 14015 Comm: syz-executor1 Not tainted 4.16.0-rc7+ #372 [ 192.212136] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 192.221486] Call Trace: [ 192.224087] dump_stack+0x194/0x24d [ 192.227717] ? arch_local_irq_restore+0x53/0x53 [ 192.232395] ? __save_stack_trace+0x7e/0xd0 [ 192.236723] should_fail+0x8c0/0xa40 [ 192.240435] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 192.245531] ? kasan_kmalloc+0xad/0xe0 [ 192.249413] ? kmem_cache_alloc_node_trace+0x150/0x760 [ 192.254681] ? alloc_fair_sched_group+0x1f0/0x530 [ 192.259506] ? sched_create_group+0x35/0x70 [ 192.263803] ? cpu_cgroup_css_alloc+0xe/0x30 [ 192.268186] ? vfs_mkdir+0x390/0x600 [ 192.271874] ? SyS_mkdir+0x220/0x2a0 [ 192.275563] ? do_syscall_64+0x281/0x940 [ 192.279602] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 192.284951] ? find_held_lock+0x35/0x1d0 [ 192.288993] ? __lock_is_held+0xb6/0x140 [ 192.293043] ? check_same_owner+0x320/0x320 [ 192.297343] ? rcu_note_context_switch+0x710/0x710 [ 192.302253] should_failslab+0xec/0x120 [ 192.306205] kmem_cache_alloc_node_trace+0x5a/0x760 [ 192.311200] ? __refill_cfs_bandwidth_runtime+0x120/0x120 [ 192.316715] ? sched_create_group+0x22/0x70 [ 192.321019] ? find_next_bit+0xcc/0x100 [ 192.324974] alloc_fair_sched_group+0x267/0x530 [ 192.329624] sched_create_group+0x35/0x70 [ 192.333755] cpu_cgroup_css_alloc+0xe/0x30 [ 192.337968] cgroup_apply_control_enable+0x44d/0xbc0 [ 192.343051] ? cgroup_propagate_control+0x570/0x570 [ 192.348045] ? css_populate_dir+0x289/0x420 [ 192.352343] cgroup_mkdir+0x56f/0xfc0 [ 192.356119] ? __lock_is_held+0xb6/0x140 [ 192.360159] ? cgroup_destroy_locked+0x750/0x750 [ 192.364889] ? rcu_read_lock_sched_held+0x108/0x120 [ 192.369880] ? kmem_cache_free+0x258/0x2a0 [ 192.374096] ? set_nlink+0xc1/0x160 [ 192.377701] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 192.382606] ? generic_permission+0x105/0x3c0 [ 192.387077] ? cgroup_destroy_locked+0x750/0x750 [ 192.391809] kernfs_iop_mkdir+0x153/0x1e0 [ 192.395938] vfs_mkdir+0x390/0x600 [ 192.399455] SyS_mkdir+0x220/0x2a0 [ 192.402972] ? SyS_mkdirat+0x2b0/0x2b0 [ 192.406835] ? do_syscall_64+0xb7/0x940 [ 192.410785] ? SyS_mkdirat+0x2b0/0x2b0 [ 192.414652] do_syscall_64+0x281/0x940 [ 192.418517] ? vmalloc_sync_all+0x30/0x30 [ 192.422639] ? _raw_spin_unlock_irq+0x27/0x70 [ 192.427111] ? finish_task_switch+0x1c1/0x7e0 [ 192.431584] ? syscall_return_slowpath+0x550/0x550 [ 192.436489] ? syscall_return_slowpath+0x2ac/0x550 [ 192.441396] ? prepare_exit_to_usermode+0x350/0x350 [ 192.446389] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 192.451750] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 192.456658] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 192.461822] RIP: 0033:0x454e79 [ 192.464986] RSP: 002b:00007f2d4ca09c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 192.472671] RAX: ffffffffffffffda RBX: 00007f2d4ca0a6d4 RCX: 0000000000454e79 [ 192.479917] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000020000340 [ 192.487161] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 192.494407] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000013 [ 192.501654] R13: 00000000000003ea R14: 00000000006f7e90 R15: 0000000000000020 [ 192.512342] binder: 14008:14011 BC_CLEAR_DEATH_NOTIFICATION death notification not active [ 192.544182] binder: 14008:14011 ioctl 1 200000c0 returned -22 [ 192.565564] netlink: 'syz-executor0': attribute type 29 has an invalid length. [ 192.573124] netlink: 8 bytes leftover after parsing attributes in process `syz-executor0'. [ 192.589666] binder: BINDER_SET_CONTEXT_MGR already set [ 192.597625] binder: 14008:14011 ioctl 40046207 0 returned -16 [ 192.617692] binder: 14008:14011 BC_INCREFS_DONE u0000000000000000 no match [ 192.629519] binder: 14008:14024 BC_CLEAR_DEATH_NOTIFICATION death notification not active [ 192.638290] binder: 14008:14026 ioctl 1 200000c0 returned -22 2018/03/31 07:26:23 executing program 4: r0 = add_key(&(0x7f00000003c0)='big_key\x00', &(0x7f0000001280)={0x73, 0x79, 0x7a}, &(0x7f00000032c0)="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", 0x7f9, 0xfffffffffffffffc) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VT_OPENQRY(r1, 0x5600, &(0x7f00000000c0)) r3 = syz_open_dev$sg(&(0x7f0000000380)='/dev/sg#\x00', 0x800, 0x430000) ioctl$TIOCMBIS(r2, 0x5416, &(0x7f0000000100)=0x6) keyctl$read(0xb, r0, &(0x7f0000004ac0)=""/4096, 0xffffffffffffffb7) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000240)={0x0, 0x40, &(0x7f0000000200)=[@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, @in={0x2, 0x4e21, @loopback=0x7f000001}, @in={0x2, 0x4e22, @multicast2=0xe0000002}, @in={0x2, 0x0, @loopback=0x7f000001}]}, &(0x7f0000000280)=0x10) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000540)=0x0) r6 = fcntl$getown(r1, 0x9) kcmp$KCMP_EPOLL_TFD(r5, r6, 0x7, r3, &(0x7f0000000580)={r1, r3, 0x9}) getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000002c0)=@assoc_id=r4, &(0x7f0000000300)=0x4) r8 = openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x80040, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r1, 0x0, 0x61, &(0x7f0000000c40)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)=0x1) socket$vsock_stream(0x28, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_RTOINFO(r8, 0x84, 0x0, &(0x7f0000000140)={r7, 0x2, 0x1, 0x1}, &(0x7f0000000340)=0x10) fchmod(r3, 0x110) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r9, 0xc004743e, &(0x7f0000000a80)=""/246) ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000000000)={0x0, 0xffffffffffffffff}) ioctl$EVIOCGREP(r9, 0x40047451, &(0x7f0000000000)=""/174) close(r9) r10 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x0, 0x0) r11 = ioctl$LOOP_CTL_GET_FREE(r10, 0x4c82) socketpair$inet_dccp(0x2, 0x6, 0x0, &(0x7f0000000640)) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11) ioctl$KVM_ASSIGN_SET_INTX_MASK(r9, 0x4040aea4, &(0x7f0000000100)={0x3, 0x3, 0x5, 0x2}) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r9, 0xc008551c, &(0x7f0000000400)=ANY=[@ANYBLOB="09000000040010000004494d4d166b4a6f166d5226f90b8baab8ef752adb7f0494df82d6826bc08bfbae7602ac713b1806000000000000003ca4de93222873927f207805763033c69e98ca6c534f2fc4c14723592fd64f72f70048f56514bffc6dbd24f3ad1cd871d9c37f78cfc2244c46bbe170286e20d2665ee53265fb39da12cb0e3e5b983c215c5f3bb00c06ebcdccfc4c04601fdf071283307e69bbe35b3df97acfe0afd2601559e2a6811d3b745f0a5f0f759870f69fdedbdfb17470879bf768e21194a471c2cbd35694e2181c1aa9eb58b2d4492f9a0534c3f797f8edd9fc1adf6853071a19bad0bdc2ce95483365af9dba68073e"]) socketpair$inet_dccp(0x2, 0x6, 0x0, &(0x7f0000000880)) openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cuse\x00', 0x101000, 0x0) creat(&(0x7f0000000500)='./file0\x00', 0x0) 2018/03/31 07:26:23 executing program 6: r0 = socket$inet6(0xa, 0x80002, 0x8000000000088) recvmsg(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000480), 0x0, &(0x7f0000000500)=""/180, 0xb4}, 0x0) setsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f0000000000)=0x2, 0x4) bind$inet6(r0, &(0x7f0000726fe4)={0xa, 0x4e23}, 0x1c) r1 = socket$inet6(0xa, 0x802, 0x88) sendto$inet6(r1, &(0x7f0000000000), 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, 0x1c) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x2000, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000080)=0x7) 2018/03/31 07:26:23 executing program 1 (fault-call:6 fault-nth:33): mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) open(&(0x7f00000000c0)='./file0\x00', 0xa0441, 0x80) syz_mount_image$msdos(&(0x7f0000000140)='msdos\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x1, &(0x7f0000000100)=[{&(0x7f0000000480)="9196b107dc9e5c731d56d84afae6a7bf24", 0x11, 0x1f}], 0x0, &(0x7f0000000000)=ANY=[]) rmdir(&(0x7f0000000080)='./file0//ile0\x00') mkdir(&(0x7f0000000340)='./file0//ile0\x00', 0x1) r0 = semget$private(0x0, 0x4, 0x21) semctl$GETPID(r0, 0x1, 0xb, &(0x7f0000000200)=""/154) 2018/03/31 07:26:23 executing program 3: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$PPPOEIOCDFWD(r0, 0xb101, 0x0) 2018/03/31 07:26:23 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndtimer(&(0x7f0000ea5000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000b01ffc)=0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001000)={{0x100000001}}) r1 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x4, 0x100) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f00000000c0)={0x80000000, {{0xa, 0x4e22, 0x6, @mcast1={0xff, 0x1, [], 0x1}}}, {{0xa, 0x4e20, 0x1, @local={0xfe, 0x80, [], 0xaa}, 0x200}}}, 0x108) ioctl$KVM_GET_ONE_REG(r1, 0x4010aeab, &(0x7f0000000080)={0x6, 0x9}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) syncfs(r0) 2018/03/31 07:26:23 executing program 2: r0 = syz_open_dev$tun(&(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x4000) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'ifb0\x00', 0x400f}) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f00000000c0)) ioctl$TUNSETNOCSUM(r0, 0x400454c8, 0x1) 2018/03/31 07:26:23 executing program 0: r0 = dup(0xffffffffffffff9c) ioctl$DRM_IOCTL_IRQ_BUSID(r0, 0xc0106403, &(0x7f0000000180)={0x100000000, 0x11e, 0x2, 0x6645}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1=0xe0000001, @loopback=0x7f000001}, 0xb6) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f000043e000)={0x1, {{0x2, 0x0, @multicast1=0xe0000001}}}, 0x90) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000380)={0x2, {{0x2, 0x0, @multicast1=0xe0000001}}}, 0x88) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f00000001c0)={0x0, 0x1, 0x30, 0x0, 0x2}, &(0x7f0000000200)=0x18) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000240), &(0x7f0000000280)=0x8) syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x1000, 0x410000) getsockopt$inet_buf(r1, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000695ffc)=0x314) 2018/03/31 07:26:23 executing program 7 (fault-call:7 fault-nth:27): mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) open(&(0x7f00000000c0)='./file0\x00', 0xa0441, 0x80) syz_mount_image$msdos(&(0x7f0000000140)='msdos\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x1, &(0x7f0000000100)=[{&(0x7f0000000480)="9196b107dc9e5c731d56d84afae6a7bf24", 0x11, 0x1f}], 0x0, &(0x7f0000000000)=ANY=[]) mkdir(&(0x7f0000000180)='./file0//ile0\x00', 0x112) rmdir(&(0x7f0000000080)='./file0//ile0\x00') mkdir(&(0x7f0000000340)='./file0//ile0\x00', 0x1) r0 = semget$private(0x0, 0x4, 0x21) semctl$GETPID(r0, 0x1, 0xb, &(0x7f0000000200)=""/154) [ 192.663923] netlink: 'syz-executor0': attribute type 29 has an invalid length. [ 192.671382] netlink: 8 bytes leftover after parsing attributes in process `syz-executor0'. 2018/03/31 07:26:23 executing program 3: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000389000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000280)=0x0) r2 = syz_open_procfs(r1, &(0x7f00000001c0)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af1f0200f5ab26d7a071fb35331ce39c5a") ioctl$DRM_IOCTL_RES_CTX(r2, 0x6612, &(0x7f0000000100)={0x0, &(0x7f0000000180)}) setuid(0x0) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f00000000c0)=0x0) perf_event_open(&(0x7f0000000000)={0x3, 0x70, 0xe1, 0x6, 0x81, 0x200000000ff, 0x0, 0x9, 0x1051, 0x9, 0x6, 0x80000000, 0x401, 0xffffffffffff7fff, 0x18320000000000, 0x0, 0x200, 0xdf, 0x5, 0xffffffff, 0xbd0, 0x61, 0x9, 0x8, 0x8000, 0x643, 0x5, 0x1, 0x4, 0x6a0, 0x1000, 0x6, 0x2, 0x3, 0x6, 0x9, 0x3fffc000000, 0xfffffffffffffffc, 0x0, 0xfffffffffffffc01, 0x1, @perf_config_ext={0x1, 0x2c1}, 0x8204, 0x13354590, 0x529c, 0x1, 0x9, 0x1, 0x1}, r3, 0xc, r0, 0xb) accept4$ipx(0xffffffffffffffff, &(0x7f0000000200), &(0x7f0000000240)=0x10, 0x0) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r2, 0x800442d4, &(0x7f0000000080)) [ 192.714623] FAULT_INJECTION: forcing a failure. [ 192.714623] name failslab, interval 1, probability 0, space 0, times 0 [ 192.725984] CPU: 0 PID: 14034 Comm: syz-executor1 Not tainted 4.16.0-rc7+ #372 [ 192.733350] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 192.742694] Call Trace: [ 192.745281] dump_stack+0x194/0x24d [ 192.748918] ? arch_local_irq_restore+0x53/0x53 [ 192.753588] ? __save_stack_trace+0x7e/0xd0 [ 192.757919] should_fail+0x8c0/0xa40 [ 192.761635] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 192.766740] ? kasan_kmalloc+0xad/0xe0 [ 192.770620] ? kmem_cache_alloc_node_trace+0x150/0x760 [ 192.775883] ? alloc_fair_sched_group+0x1f0/0x530 [ 192.780713] ? sched_create_group+0x35/0x70 [ 192.785023] ? cpu_cgroup_css_alloc+0xe/0x30 [ 192.789417] ? vfs_mkdir+0x390/0x600 [ 192.793108] ? SyS_mkdir+0x220/0x2a0 [ 192.796800] ? do_syscall_64+0x281/0x940 [ 192.800840] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 192.806189] ? find_held_lock+0x35/0x1d0 [ 192.810233] ? __lock_is_held+0xb6/0x140 [ 192.814283] ? check_same_owner+0x320/0x320 [ 192.818588] ? rcu_note_context_switch+0x710/0x710 [ 192.823516] should_failslab+0xec/0x120 [ 192.827472] kmem_cache_alloc_node_trace+0x5a/0x760 [ 192.832467] ? unregister_fair_sched_group+0x5e0/0x5e0 [ 192.837726] ? find_next_bit+0xcc/0x100 [ 192.841683] alloc_fair_sched_group+0x267/0x530 [ 192.846339] sched_create_group+0x35/0x70 [ 192.850468] cpu_cgroup_css_alloc+0xe/0x30 [ 192.854683] cgroup_apply_control_enable+0x44d/0xbc0 [ 192.859773] ? cgroup_propagate_control+0x570/0x570 [ 192.864773] ? css_populate_dir+0x289/0x420 [ 192.869076] cgroup_mkdir+0x56f/0xfc0 [ 192.872860] ? __lock_is_held+0xb6/0x140 [ 192.876909] ? cgroup_destroy_locked+0x750/0x750 [ 192.881646] ? rcu_read_lock_sched_held+0x108/0x120 [ 192.886642] ? kmem_cache_free+0x258/0x2a0 [ 192.890859] ? set_nlink+0xc1/0x160 [ 192.894469] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 192.899377] ? generic_permission+0x105/0x3c0 [ 192.903851] ? cgroup_destroy_locked+0x750/0x750 [ 192.908624] kernfs_iop_mkdir+0x153/0x1e0 [ 192.912768] vfs_mkdir+0x390/0x600 [ 192.916292] SyS_mkdir+0x220/0x2a0 [ 192.919813] ? SyS_mkdirat+0x2b0/0x2b0 [ 192.923681] ? do_syscall_64+0xb7/0x940 [ 192.927633] ? SyS_mkdirat+0x2b0/0x2b0 [ 192.931501] do_syscall_64+0x281/0x940 [ 192.935368] ? vmalloc_sync_all+0x30/0x30 [ 192.939497] ? _raw_spin_unlock_irq+0x27/0x70 [ 192.943973] ? finish_task_switch+0x1c1/0x7e0 [ 192.948450] ? syscall_return_slowpath+0x550/0x550 [ 192.953359] ? syscall_return_slowpath+0x2ac/0x550 [ 192.958281] ? prepare_exit_to_usermode+0x350/0x350 [ 192.963280] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 192.968627] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 192.973456] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 192.978623] RIP: 0033:0x454e79 [ 192.981788] RSP: 002b:00007f2d4ca09c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 192.989735] RAX: ffffffffffffffda RBX: 00007f2d4ca0a6d4 RCX: 0000000000454e79 [ 192.996984] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000020000340 [ 193.004236] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 2018/03/31 07:26:23 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha512\x00'}, 0x58) open(&(0x7f0000000200)='./file0\x00', 0x3, 0x100) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080), 0xfdea) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x8) pipe(&(0x7f0000000180)={0xffffffffffffffff}) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r1, 0x28, 0x1, &(0x7f00000001c0)=0x9, 0x8) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) ioctl$DRM_IOCTL_MODE_SETCRTC(r2, 0xc06864a2, &(0x7f0000000100)={&(0x7f00000000c0)=[0xaa, 0x8000], 0x2, 0xf735, 0x100000001, 0x2, 0x800, 0x6, {0x9, 0x6, 0x9, 0xfffffffffffff801, 0x20, 0x3, 0x5, 0xb7, 0x0, 0x6, 0x5, 0x50, 0x1, 0x4, "42f9a6acc989a637526b295f7fb8b7a44900a8cf3ab844fcd04bddcfac17154b"}}) 2018/03/31 07:26:23 executing program 0: r0 = dup(0xffffffffffffff9c) ioctl$DRM_IOCTL_IRQ_BUSID(r0, 0xc0106403, &(0x7f0000000180)={0x100000000, 0x11e, 0x2, 0x6645}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1=0xe0000001, @loopback=0x7f000001}, 0xb6) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f000043e000)={0x1, {{0x2, 0x0, @multicast1=0xe0000001}}}, 0x90) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000380)={0x2, {{0x2, 0x0, @multicast1=0xe0000001}}}, 0x88) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f00000001c0)={0x0, 0x1, 0x30, 0x0, 0x2}, &(0x7f0000000200)=0x18) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000240), &(0x7f0000000280)=0x8) syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x1000, 0x410000) getsockopt$inet_buf(r1, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000695ffc)=0x314) [ 193.011493] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000013 [ 193.018742] R13: 00000000000003ea R14: 00000000006f7e90 R15: 0000000000000021 [ 193.059907] FAULT_INJECTION: forcing a failure. [ 193.059907] name failslab, interval 1, probability 0, space 0, times 0 [ 193.071396] CPU: 0 PID: 14041 Comm: syz-executor7 Not tainted 4.16.0-rc7+ #372 [ 193.078768] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 193.088126] Call Trace: [ 193.090719] dump_stack+0x194/0x24d [ 193.094353] ? arch_local_irq_restore+0x53/0x53 [ 193.099034] should_fail+0x8c0/0xa40 [ 193.102749] ? __save_stack_trace+0x7e/0xd0 [ 193.107075] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 193.112198] ? save_stack+0xa3/0xd0 [ 193.112210] ? save_stack+0x43/0xd0 [ 193.112228] ? find_held_lock+0x35/0x1d0 [ 193.112245] ? __lock_is_held+0xb6/0x140 [ 193.112270] ? check_same_owner+0x320/0x320 [ 193.112286] ? rcu_note_context_switch+0x710/0x710 [ 193.112303] should_failslab+0xec/0x120 [ 193.112313] __kmalloc+0x63/0x760 [ 193.112327] ? sched_create_group+0x22/0x70 [ 193.112337] ? kzalloc+0xf/0x20 [ 193.112351] kzalloc+0xf/0x20 [ 193.112362] alloc_fair_sched_group+0x5e/0x530 [ 193.112372] ? __lock_is_held+0xb6/0x140 [ 193.112389] sched_create_group+0x35/0x70 [ 193.112400] cpu_cgroup_css_alloc+0xe/0x30 [ 193.112412] cgroup_apply_control_enable+0x44d/0xbc0 [ 193.112432] ? cgroup_propagate_control+0x570/0x570 [ 193.112450] ? css_populate_dir+0x289/0x420 [ 193.112465] cgroup_mkdir+0x56f/0xfc0 [ 193.112474] ? __lock_is_held+0xb6/0x140 [ 193.112489] ? cgroup_destroy_locked+0x750/0x750 [ 193.112500] ? rcu_read_lock_sched_held+0x108/0x120 [ 193.112510] ? kmem_cache_free+0x258/0x2a0 2018/03/31 07:26:23 executing program 1 (fault-call:6 fault-nth:34): mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) open(&(0x7f00000000c0)='./file0\x00', 0xa0441, 0x80) syz_mount_image$msdos(&(0x7f0000000140)='msdos\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x1, &(0x7f0000000100)=[{&(0x7f0000000480)="9196b107dc9e5c731d56d84afae6a7bf24", 0x11, 0x1f}], 0x0, &(0x7f0000000000)=ANY=[]) rmdir(&(0x7f0000000080)='./file0//ile0\x00') mkdir(&(0x7f0000000340)='./file0//ile0\x00', 0x1) r0 = semget$private(0x0, 0x4, 0x21) semctl$GETPID(r0, 0x1, 0xb, &(0x7f0000000200)=""/154) 2018/03/31 07:26:23 executing program 0: r0 = dup(0xffffffffffffff9c) ioctl$DRM_IOCTL_IRQ_BUSID(r0, 0xc0106403, &(0x7f0000000180)={0x100000000, 0x11e, 0x2, 0x6645}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1=0xe0000001, @loopback=0x7f000001}, 0xb6) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f000043e000)={0x1, {{0x2, 0x0, @multicast1=0xe0000001}}}, 0x90) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000380)={0x2, {{0x2, 0x0, @multicast1=0xe0000001}}}, 0x88) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f00000001c0)={0x0, 0x1, 0x30, 0x0, 0x2}, &(0x7f0000000200)=0x18) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000240), &(0x7f0000000280)=0x8) syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x1000, 0x410000) getsockopt$inet_buf(r1, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000695ffc)=0x314) 2018/03/31 07:26:23 executing program 0: r0 = dup(0xffffffffffffff9c) ioctl$DRM_IOCTL_IRQ_BUSID(r0, 0xc0106403, &(0x7f0000000180)={0x100000000, 0x11e, 0x2, 0x6645}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1=0xe0000001, @loopback=0x7f000001}, 0xb6) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f000043e000)={0x1, {{0x2, 0x0, @multicast1=0xe0000001}}}, 0x90) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000380)={0x2, {{0x2, 0x0, @multicast1=0xe0000001}}}, 0x88) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f00000001c0)={0x0, 0x1, 0x30, 0x0, 0x2}, &(0x7f0000000200)=0x18) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000240), &(0x7f0000000280)=0x8) syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x1000, 0x410000) getsockopt$inet_buf(r1, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000695ffc)=0x314) [ 193.208026] ? set_nlink+0xc1/0x160 2018/03/31 07:26:23 executing program 2: recvfrom$ipx(0xffffffffffffffff, &(0x7f00000008c0)=""/100, 0x64, 0x0, &(0x7f0000000040)={0x4, 0x0, 0x0, "f036b430156a"}, 0x10) getsockopt$inet_mreqn(0xffffffffffffff9c, 0x0, 0x0, &(0x7f0000000700)={@dev, @multicast2}, &(0x7f0000000740)=0xc) r0 = socket$inet(0x2, 0x1, 0x0) ioctl$KVM_CREATE_DEVICE(r0, 0xc00caee0, &(0x7f0000000000)={0x7, r0, 0x1}) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f00000006c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000680)={&(0x7f0000000100)={0x108, r2, 0x500, 0x70bd28, 0x25dfdbff, {0xd}, [@IPVS_CMD_ATTR_DAEMON={0x84, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'erspan0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x1000}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback=0x7f000001}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0xff}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'teql0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0xffffffffffffffc1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1={0xff, 0x1, [], 0x1}}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'tunl0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e23}]}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vcan0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local={0xac, 0x14, 0x14, 0xaa}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xff}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}]}, 0x108}, 0x1}, 0x8000) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000780)=@broute={'broute\x00', 0x20, 0x2, 0x3e8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000280], 0x0, &(0x7f0000000240), &(0x7f0000000280)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x0, 'ip6gretap0\x00', 'syz_tun\x00', 'bond0\x00', 'syz_tun\x00', @link_local={0x1, 0x80, 0xc2}, [], @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], 0x70, 0x108, 0x158}, [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz0\x00'}}}, @common=@LED={'LED\x00', 0x28, {{'syz0\x00'}}}]}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x10000, 'syz0\x00'}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff, 0x1, [{{{0xd, 0x0, 0x86dd, 'syzkaller0\x00', 'tunl0\x00', 'sit0\x00', 'ifb0\x00', @empty, [], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], 0x130, 0x1b0, 0x200, [@ip6={'ip6\x00', 0x50, {{@empty, @ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0x14, 0xaa}}}}}, @limit={'limit\x00', 0x20}]}, [@common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x81, 'syz1\x00'}}}, @common=@NFQUEUE0={'NFQUEUE\x00', 0x8}]}, @common=@LED={'LED\x00', 0x28, {{'syz0\x00'}}}}]}]}, 0x460) [ 193.208039] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 193.208047] ? generic_permission+0x105/0x3c0 [ 193.208058] ? cgroup_destroy_locked+0x750/0x750 2018/03/31 07:26:23 executing program 7 (fault-call:7 fault-nth:28): mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) open(&(0x7f00000000c0)='./file0\x00', 0xa0441, 0x80) syz_mount_image$msdos(&(0x7f0000000140)='msdos\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x1, &(0x7f0000000100)=[{&(0x7f0000000480)="9196b107dc9e5c731d56d84afae6a7bf24", 0x11, 0x1f}], 0x0, &(0x7f0000000000)=ANY=[]) mkdir(&(0x7f0000000180)='./file0//ile0\x00', 0x112) rmdir(&(0x7f0000000080)='./file0//ile0\x00') mkdir(&(0x7f0000000340)='./file0//ile0\x00', 0x1) r0 = semget$private(0x0, 0x4, 0x21) semctl$GETPID(r0, 0x1, 0xb, &(0x7f0000000200)=""/154) [ 193.208069] kernfs_iop_mkdir+0x153/0x1e0 [ 193.208080] vfs_mkdir+0x390/0x600 [ 193.208091] SyS_mkdir+0x220/0x2a0 [ 193.208102] ? SyS_mkdirat+0x2b0/0x2b0 [ 193.208112] ? do_syscall_64+0xb7/0x940 [ 193.208122] ? SyS_mkdirat+0x2b0/0x2b0 [ 193.208130] do_syscall_64+0x281/0x940 [ 193.208140] ? trace_event_raw_event_sys_exit+0x260/0x260 [ 193.208148] ? syscall_return_slowpath+0x550/0x550 [ 193.208157] ? syscall_return_slowpath+0x2ac/0x550 [ 193.208171] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 193.208183] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 193.208196] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 193.208204] RIP: 0033:0x454e79 [ 193.208208] RSP: 002b:00007f49041e4c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 193.208218] RAX: ffffffffffffffda RBX: 00007f49041e56d4 RCX: 0000000000454e79 [ 193.208223] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000020000340 [ 193.208227] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 193.208232] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000013 [ 193.208236] R13: 00000000000003ea R14: 00000000006f7e90 R15: 000000000000001b [ 193.251951] FAULT_INJECTION: forcing a failure. [ 193.251951] name failslab, interval 1, probability 0, space 0, times 0 [ 193.251964] CPU: 0 PID: 14066 Comm: syz-executor1 Not tainted 4.16.0-rc7+ #372 [ 193.251971] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 193.251976] Call Trace: [ 193.251993] dump_stack+0x194/0x24d [ 193.252013] ? arch_local_irq_restore+0x53/0x53 [ 193.252024] ? finish_task_switch+0x1c1/0x7e0 [ 193.252033] ? finish_task_switch+0x182/0x7e0 [ 193.252051] should_fail+0x8c0/0xa40 [ 193.252064] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 193.252080] ? __lock_acquire+0x664/0x3e00 [ 193.252095] ? __sched_text_start+0x8/0x8 [ 193.252104] ? find_held_lock+0x35/0x1d0 [ 193.252118] ? __lock_is_held+0xb6/0x140 [ 193.252136] ? check_same_owner+0x320/0x320 [ 193.252146] ? perf_trace_lock+0xd6/0x900 [ 193.252165] should_failslab+0xec/0x120 [ 193.252175] __kmalloc_track_caller+0x5f/0x760 [ 193.252188] ? string+0x180/0x200 [ 193.252197] ? kstrdup_const+0x39/0x50 [ 193.252210] kstrdup+0x39/0x70 [ 193.252221] kstrdup_const+0x39/0x50 [ 193.252232] __kernfs_new_node+0xa2/0x570 [ 193.252244] ? kernfs_dop_revalidate+0x380/0x380 [ 193.252261] ? snprintf+0xc0/0xf0 [ 193.252271] ? vsprintf+0x40/0x40 [ 193.252287] kernfs_new_node+0x80/0xe0 [ 193.252300] __kernfs_create_file+0x4b/0x320 [ 193.252314] cgroup_addrm_files+0x3c5/0xa70 [ 193.252332] ? cgroup_file_write+0x710/0x710 [ 193.252343] ? cpu_cgroup_css_alloc+0x30/0x30 [ 193.252362] ? __lock_is_held+0xb6/0x140 [ 193.252377] ? sched_online_group+0x4e0/0x4e0 [ 193.252387] ? cpu_cgroup_css_online+0x3a/0x50 [ 193.252397] ? online_css+0x224/0x2e0 [ 193.252410] css_populate_dir+0x198/0x420 [ 193.252425] cgroup_apply_control_enable+0x390/0xbc0 [ 193.252443] ? cgroup_propagate_control+0x570/0x570 [ 193.252459] ? css_populate_dir+0x289/0x420 [ 193.252471] cgroup_mkdir+0x56f/0xfc0 [ 193.252479] ? __lock_is_held+0xb6/0x140 [ 193.252493] ? cgroup_destroy_locked+0x750/0x750 [ 193.252504] ? rcu_read_lock_sched_held+0x108/0x120 [ 193.252513] ? kmem_cache_free+0x258/0x2a0 [ 193.252524] ? set_nlink+0xc1/0x160 [ 193.252535] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 193.252543] ? generic_permission+0x105/0x3c0 [ 193.252554] ? cgroup_destroy_locked+0x750/0x750 [ 193.252566] kernfs_iop_mkdir+0x153/0x1e0 [ 193.252577] vfs_mkdir+0x390/0x600 [ 193.252589] SyS_mkdir+0x220/0x2a0 [ 193.252602] ? SyS_mkdirat+0x2b0/0x2b0 [ 193.252613] ? do_syscall_64+0xb7/0x940 [ 193.252624] ? SyS_mkdirat+0x2b0/0x2b0 [ 193.252634] do_syscall_64+0x281/0x940 [ 193.252643] ? vmalloc_sync_all+0x30/0x30 [ 193.252653] ? _raw_spin_unlock_irq+0x27/0x70 [ 193.252662] ? finish_task_switch+0x1c1/0x7e0 [ 193.252673] ? syscall_return_slowpath+0x550/0x550 [ 193.252683] ? syscall_return_slowpath+0x2ac/0x550 [ 193.252694] ? prepare_exit_to_usermode+0x350/0x350 [ 193.252706] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 193.252720] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 193.252735] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 193.252743] RIP: 0033:0x454e79 [ 193.252748] RSP: 002b:00007f2d4ca09c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 193.252758] RAX: ffffffffffffffda RBX: 00007f2d4ca0a6d4 RCX: 0000000000454e79 [ 193.252764] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000020000340 [ 193.252770] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 193.252775] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000013 [ 193.252781] R13: 00000000000003ea R14: 00000000006f7e90 R15: 0000000000000022 [ 193.252877] cgroup: cgroup_addrm_files: failed to add weight, err=-12 [ 193.314377] ebt_limit: overflow, try lower: 0/0 [ 193.795493] ebt_limit: overflow, try lower: 0/0 [ 193.803376] FAULT_INJECTION: forcing a failure. [ 193.803376] name failslab, interval 1, probability 0, space 0, times 0 [ 193.814672] CPU: 1 PID: 14081 Comm: syz-executor7 Not tainted 4.16.0-rc7+ #372 [ 193.822029] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 193.831377] Call Trace: [ 193.833971] dump_stack+0x194/0x24d [ 193.837604] ? arch_local_irq_restore+0x53/0x53 [ 193.842269] ? __save_stack_trace+0x7e/0xd0 [ 193.846594] should_fail+0x8c0/0xa40 [ 193.850317] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 193.855417] ? kasan_kmalloc+0xad/0xe0 [ 193.859305] ? __kmalloc+0x162/0x760 [ 193.863017] ? kzalloc+0xf/0x20 [ 193.866296] ? alloc_fair_sched_group+0x5e/0x530 [ 193.871053] ? sched_create_group+0x35/0x70 [ 193.875365] ? kernfs_iop_mkdir+0x153/0x1e0 [ 193.879663] ? vfs_mkdir+0x390/0x600 [ 193.883349] ? SyS_mkdir+0x220/0x2a0 [ 193.887043] ? do_syscall_64+0x281/0x940 [ 193.891085] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 193.896422] ? save_stack+0x43/0xd0 [ 193.900033] ? find_held_lock+0x35/0x1d0 [ 193.904087] ? __lock_is_held+0xb6/0x140 [ 193.908130] ? check_same_owner+0x320/0x320 [ 193.912430] ? rcu_note_context_switch+0x710/0x710 [ 193.917343] should_failslab+0xec/0x120 [ 193.921299] __kmalloc+0x63/0x760 [ 193.924731] ? sched_create_group+0x22/0x70 [ 193.929033] ? kzalloc+0xf/0x20 [ 193.932291] kzalloc+0xf/0x20 [ 193.935375] alloc_fair_sched_group+0xd6/0x530 [ 193.939933] ? __lock_is_held+0xb6/0x140 [ 193.943975] sched_create_group+0x35/0x70 [ 193.948099] cpu_cgroup_css_alloc+0xe/0x30 [ 193.952314] cgroup_apply_control_enable+0x44d/0xbc0 [ 193.957409] ? cgroup_propagate_control+0x570/0x570 [ 193.962413] ? css_populate_dir+0x289/0x420 [ 193.966722] cgroup_mkdir+0x56f/0xfc0 [ 193.970496] ? __lock_is_held+0xb6/0x140 [ 193.974534] ? cgroup_destroy_locked+0x750/0x750 [ 193.979275] ? rcu_read_lock_sched_held+0x108/0x120 [ 193.984276] ? kmem_cache_free+0x258/0x2a0 [ 193.988489] ? set_nlink+0xc1/0x160 [ 193.992101] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 193.997004] ? generic_permission+0x105/0x3c0 [ 194.001498] ? cgroup_destroy_locked+0x750/0x750 [ 194.006230] kernfs_iop_mkdir+0x153/0x1e0 [ 194.010354] vfs_mkdir+0x390/0x600 [ 194.013869] SyS_mkdir+0x220/0x2a0 [ 194.017390] ? SyS_mkdirat+0x2b0/0x2b0 [ 194.021253] ? do_syscall_64+0xb7/0x940 [ 194.025213] ? SyS_mkdirat+0x2b0/0x2b0 [ 194.029077] do_syscall_64+0x281/0x940 [ 194.032941] ? vmalloc_sync_all+0x30/0x30 [ 194.037064] ? _raw_spin_unlock_irq+0x27/0x70 [ 194.041535] ? finish_task_switch+0x1c1/0x7e0 [ 194.046011] ? syscall_return_slowpath+0x550/0x550 [ 194.050936] ? syscall_return_slowpath+0x2ac/0x550 [ 194.055841] ? prepare_exit_to_usermode+0x350/0x350 [ 194.060836] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 194.066175] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 194.070995] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 194.076162] RIP: 0033:0x454e79 [ 194.079324] RSP: 002b:00007f49041e4c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 194.087011] RAX: ffffffffffffffda RBX: 00007f49041e56d4 RCX: 0000000000454e79 2018/03/31 07:26:24 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) io_setup(0x10001, &(0x7f00000000c0)=0x0) io_destroy(r0) r1 = syz_open_dev$admmidi(&(0x7f0000000300)='/dev/admmidi#\x00', 0x800, 0x200) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r1, 0x81785501, &(0x7f0000000380)=""/10) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000001fe8)={0xaa}) r3 = socket$bt_cmtp(0x1f, 0x3, 0x5) getsockopt$IP_VS_SO_GET_TIMEOUT(r3, 0x0, 0x486, &(0x7f0000000280), &(0x7f00000002c0)=0xc) r4 = syz_open_dev$sndpcmc(&(0x7f0000000180)='/dev/snd/pcmC#D#c\x00', 0xee94000, 0xa00) ioctl$KVM_SET_PIT2(r4, 0x4070aea0, &(0x7f0000000200)={[{0x6, 0x74ef, 0x6, 0x3ff, 0x7f, 0x8, 0x1ff, 0x100, 0x401, 0x8df, 0xfffffffffffffffd, 0x100000001, 0x7ff}, {0x7ff, 0x5, 0x3, 0x1, 0xffffffffffffff7f, 0x80000000800, 0x4, 0x6a, 0x8001, 0x4, 0xffffffff, 0x100000001, 0x7d}, {0x3, 0x6, 0x9, 0x26c, 0x100000000, 0x7fffffff, 0x3, 0xf07f, 0x3, 0x7, 0x7fff, 0x1, 0x2}], 0xa0000000}) bind$ax25(r4, &(0x7f00000001c0)={0x3, {"9a52be42bbf6af"}, 0x5}, 0x10) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000340)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r5 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r5, 0x8040450a, &(0x7f0000013000)) socket$bt_rfcomm(0x1f, 0x3, 0x3) syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r4, 0x84, 0x6d, &(0x7f00000003c0)={0x0, 0x21, "32f933746bf553769973f7fea31446d3f74102562a9c16bb5a5ad7bce3d7bd897c"}, &(0x7f0000000400)=0x29) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000440)={r6, @in={{0x2, 0x4e22, @multicast1=0xe0000001}}, 0x7e, 0x9}, &(0x7f0000000500)=0x90) execve(&(0x7f0000000040)='./file0\x00', &(0x7f0000000240), &(0x7f00000002c0)) close(r2) r7 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x800, 0x0) ioctl$TUNGETVNETHDRSZ(r7, 0x800454d7, &(0x7f0000000140)) 2018/03/31 07:26:24 executing program 1 (fault-call:6 fault-nth:35): mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) open(&(0x7f00000000c0)='./file0\x00', 0xa0441, 0x80) syz_mount_image$msdos(&(0x7f0000000140)='msdos\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x1, &(0x7f0000000100)=[{&(0x7f0000000480)="9196b107dc9e5c731d56d84afae6a7bf24", 0x11, 0x1f}], 0x0, &(0x7f0000000000)=ANY=[]) rmdir(&(0x7f0000000080)='./file0//ile0\x00') mkdir(&(0x7f0000000340)='./file0//ile0\x00', 0x1) r0 = semget$private(0x0, 0x4, 0x21) semctl$GETPID(r0, 0x1, 0xb, &(0x7f0000000200)=""/154) 2018/03/31 07:26:24 executing program 0: r0 = dup(0xffffffffffffff9c) ioctl$DRM_IOCTL_IRQ_BUSID(r0, 0xc0106403, &(0x7f0000000180)={0x100000000, 0x11e, 0x2, 0x6645}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1=0xe0000001, @loopback=0x7f000001}, 0xb6) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f000043e000)={0x1, {{0x2, 0x0, @multicast1=0xe0000001}}}, 0x90) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000380)={0x2, {{0x2, 0x0, @multicast1=0xe0000001}}}, 0x88) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f00000001c0)={0x0, 0x1, 0x30, 0x0, 0x2}, &(0x7f0000000200)=0x18) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000240), &(0x7f0000000280)=0x8) getsockopt$inet_buf(r1, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000695ffc)=0x314) 2018/03/31 07:26:24 executing program 5: r0 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x3, 0x200141) ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc008ae05, &(0x7f0000000040)=""/217) getsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f0000000140)=0x8, &(0x7f0000000180)=0x2) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f00000001c0)={&(0x7f0000fff000/0x1000)=nil, 0x1000}) connect$inet(r0, &(0x7f0000000200)={0x2, 0x4e23, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) getsockopt$netrom_NETROM_T4(r0, 0x103, 0x6, &(0x7f0000000240), &(0x7f0000000280)=0x4) io_setup(0x455f, &(0x7f00000002c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000400)=[&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x63a5, r0, &(0x7f0000000300)="afd397a13afa6b36d94643ee7cc1b2e096986b3b60ab03cc9f2b6684a3211e9201920c366ca817949cfc6311898b745aae762ac8be4ffe3f087e6b71a5fcf95aa09772249bf01b5a0bbf3c5da5ca11df605d88b0153d81c11277c236ce04f546be2020c2ca050ad8ca524fa9530b764dd969715637720bc3e2ea26da2c1e1ba476e2e455fb054404fc293f14c8c392d70f0bbbab19ad66d336102a56b8c394157ade55d3a8c2c2ae48432df78f5e451d9102b5b1462d0ae374e1", 0xba, 0x7, 0x0, 0x1, r0}]) setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000440)={0x100000001, 0x81, 0x9, 0x7f, 0x4, 0x400, 0x2, 0x1, 0x5, 0x7ff}, 0xb) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000480)=@assoc_value={0x0}, &(0x7f00000004c0)=0x8) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000500)={r2, 0x8}, &(0x7f0000000540)=0x8) setsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000580)={r2, 0x3}, 0x8) getsockname$unix(r0, &(0x7f00000005c0)=@abs, &(0x7f0000000640)=0x6e) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000680)={0x6, 0x1, 0x3, 0x800000000, 0xe4}, 0x14) utime(&(0x7f00000006c0)='./file0\x00', &(0x7f0000000700)={0x8, 0x800}) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000740), 0x4) getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000780)=@assoc_id=r3, &(0x7f00000007c0)=0x4) socketpair$ipx(0x4, 0x2, 0x0, &(0x7f0000000800)={0xffffffffffffffff}) writev(r4, &(0x7f0000000d80)=[{&(0x7f0000000840)="2b3137969d9f81c5d4fbab2617ff196d4c0e4449bfc549181cded61db171d081798dee883bd3ed878980dd83e9836500f8639f5dc26ac62707e5d46f3b0ca52cbbbae37409934f003bf5744a6c8e83a93544e5328b827b634d4db1a01823aa1677b33a3fb5c68691476d6662d305d2f8901d177fd92290b699082ac745caae9df6111c408b01ced507fc0309862c71c108cdb4185aec1441d7a2085b5b2b32d181b0a7af65a705d5c30ed3f500e1c7ee72d9e16f656e51", 0xb7}, {&(0x7f0000000900)="214c5313437042bff1eae75fa4cddd2ec0a4b4caf2ae155e44efc61e2d5832f17cc20c2fdee6e1837a74a826613b9f0c92af448c48f44fa45ba7af7a74acbe03aa657156b435d4c42e1fa4c6b455501c783fc59d5a26cc5f43c6d39300b00a504955599d41c8d8bc4a4e4cc72b37ee14163877b524956c7194e7fa47783093529b603de072337a3e7a25b2d485a0952bfd2c93905cce6f31c593aec7583da20bb1424db3dde5ba1c4108c81cb15da88268", 0xb1}, {&(0x7f00000009c0)="83fd79a51bbbb73768f5da4f55d944756d8eb0eba6f6f04d90047948792e1da5a69a9e575fb8c065", 0x28}, {&(0x7f0000000a00)="f95e344d19940c3cddb8ee12b128fa5141de0262e60e900ee07be6be2772bea67a76c2bec05ca62ca4e1c88b78c33ed1e1fbe35b68511933594865e36a18dfd06eb7f501289046371a3e1617b6b7086784086603cfdd11b790d0ae5c4d5794ffd1857f445b23a14f8e819aceca5e5340ea3c3748e02b97c16d5c9cc2eac61f72cccaddcc59af8bc9f88d9633eef76f762b6f520e60f045cc03e2b8db8141ffb15d10e3a9cfe9c9c9cf85dd47c819b889ba28182e59a93754", 0xb8}, {&(0x7f0000000ac0)="cd43167283817ffb41ef087a84f013faa1685b304d481d129db6d85a4dcd4a31c9618ac88e65ca7a865885a499547ef2320a44f20a567c64d0325c2ef9d38fa94f4554b2b7562c812e4e9e58b14bc65911432cc9f8d3b83453a89786238f", 0x5e}, {&(0x7f0000000b40)="fdd4453caa75b58f2cb403ff323a25582e20", 0x12}, {&(0x7f0000000b80)="384538c1e429209361792434fee00b51e6cf887b030d23ad1cc7d14f5a8124f61aada676b4f90aaebcb8f9220cca3011a41da95bab6f5e2a0943881180550bb2ff99d5949452395c04683e015a7c3d30cda5219c5d849cf46f07042c4e86a9496bec50fa8a818124a23ade57d286f90d25c7a91cec141a8fcf2cae865d2c83a8a23a516aa293ed5b32bd1874e184f6438e6547bed27e9fb05e6d284e8cece7dc27d9d29c7381b4a6d4abbd733d683bef31fd536e5bf310759b15a5077b17ad51f4c554de91bfcf3bc92fc0f0871a058b6b3be9cfff306f3ca02d4dcd24", 0xdd}, {&(0x7f0000000c80)="283858eb587e5be22fb480baf71ea4f1f4213676c4e696f64b6308490253059c61ee081d37f81fdc86fcabdf4114e55866d313948e9a299f8e221164ca2bef2e9b565f1701aa21b3c947ba1e30071ae7a8ae130bdbc3cd8d16ea9a70e835bdf22a62e5fcabbd927def38eabe6ecfa8c8ca597910975255aedf88a84a068dd2407c02afa004f8c6d6b527c9506910b99f881ad9a446fbb212c85cbc78f46f883d0274a9d00f20bbf22c475ffc5de3ab8417a773c0d0aefdb68fabc03eb343abe34a8379a17f07b2aa3771cbcac41176b3064ff3a3af69cd30406fcd3853a62c60ab655c6da57cbbe456429ff85ee2fd58ad0352d5378760a8", 0xf8}], 0x8) ioctl$KVM_DEASSIGN_DEV_IRQ(r0, 0x4040ae75, &(0x7f0000000e00)={0x100000001, 0x8001, 0x80}) pivot_root(&(0x7f0000000e40)='./file0\x00', &(0x7f0000000e80)='./file0\x00') ioctl$TIOCMGET(r0, 0x5415, &(0x7f0000000ec0)) ioctl$fiemap(r4, 0xc020660b, &(0x7f0000000f00)={0x3, 0x7, 0x7, 0x2, 0x3, [{0x6, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x2000}, {0x7fa, 0x9, 0x0, 0x0, 0x0, 0x2102}, {0x80, 0x100000000, 0x2, 0x0, 0x0, 0x100}]}) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000001040)={0x3, &(0x7f0000001000)=[{}, {}, {}]}) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000001080)=0x7) bind$ax25(r0, &(0x7f00000010c0)={0x3, {"7cf818aaeb34af"}, 0x3}, 0x10) ioctl$EVIOCSABS20(r0, 0x401845e0, &(0x7f0000001100)={0x1, 0x7b1d, 0x4, 0x1ff, 0x9, 0x10000}) ioctl$VT_RELDISP(r0, 0x5605) ioctl$TIOCSCTTY(r0, 0x540e, 0x21c58000000) fadvise64(r4, 0x0, 0xe2a, 0x0) 2018/03/31 07:26:24 executing program 6: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x40, 0x0) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) utimensat(r0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{r1, r2/1000+30000}, {0x77359400}}, 0x100) r3 = dup(0xffffffffffffff9c) setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, &(0x7f0000000280)=0xffffffffffffffff, 0x4) socket$packet(0x11, 0x3, 0x300) capset(&(0x7f00002d0ff8)={0x19980330}, &(0x7f0000cc0000)) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'bcsh0\x00', 0x800}) setsockopt$netrom_NETROM_IDLE(r3, 0x103, 0x7, &(0x7f0000000040)=0x9e80, 0x4) r4 = socket$netlink(0x10, 0x3, 0x4) openat$mixer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/mixer\x00', 0x0, 0x0) write(r4, &(0x7f0000000080)="2700000014000707030e0000120f0a0011000100f5fe0012ff00a51b82d77a4b6db0068dd304f9", 0x27) 2018/03/31 07:26:24 executing program 3: perf_event_open(&(0x7f000000a000)={0x1, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mknod$loop(&(0x7f0000dceff8)='./file0\x00', 0x8000000001, 0xffffffffffffffff) mount(&(0x7f0000144000)='./file0\x00', &(0x7f0000343ff8)='./file0\x00', &(0x7f00007fc000)='nfs\x00', 0x0, &(0x7f000000a000)) 2018/03/31 07:26:24 executing program 2: perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12}, &(0x7f0000044000)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0xc) tkill(0x0, 0x10) timer_settime(0x0, 0x0, &(0x7f00004b1fe0)={{0x0, 0x1c9c380}, {0x0, 0x9}}, &(0x7f0000040000)) r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ioctl$TIOCMSET(r0, 0x5418, &(0x7f0000000100)=0x4a7f) ftruncate(r0, 0x7fff) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000f40000)='/dev/ptmx\x00', 0x200000000101002, 0x0) sendfile(r1, r0, &(0x7f0000b4bff8), 0x100000002) getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, &(0x7f0000000080), &(0x7f00000000c0)=0x8) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)) r2 = getpgid(0x0) tkill(r2, 0x1000000000016) 2018/03/31 07:26:24 executing program 7 (fault-call:7 fault-nth:29): mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) open(&(0x7f00000000c0)='./file0\x00', 0xa0441, 0x80) syz_mount_image$msdos(&(0x7f0000000140)='msdos\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x1, &(0x7f0000000100)=[{&(0x7f0000000480)="9196b107dc9e5c731d56d84afae6a7bf24", 0x11, 0x1f}], 0x0, &(0x7f0000000000)=ANY=[]) mkdir(&(0x7f0000000180)='./file0//ile0\x00', 0x112) rmdir(&(0x7f0000000080)='./file0//ile0\x00') mkdir(&(0x7f0000000340)='./file0//ile0\x00', 0x1) r0 = semget$private(0x0, 0x4, 0x21) semctl$GETPID(r0, 0x1, 0xb, &(0x7f0000000200)=""/154) [ 194.094265] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000020000340 [ 194.101513] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 194.108757] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000013 [ 194.116002] R13: 00000000000003ea R14: 00000000006f7e90 R15: 000000000000001c [ 194.160557] FAULT_INJECTION: forcing a failure. [ 194.160557] name failslab, interval 1, probability 0, space 0, times 0 [ 194.171870] CPU: 1 PID: 14098 Comm: syz-executor1 Not tainted 4.16.0-rc7+ #372 [ 194.179233] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 194.188584] Call Trace: [ 194.191167] dump_stack+0x194/0x24d [ 194.194803] ? arch_local_irq_restore+0x53/0x53 [ 194.199485] should_fail+0x8c0/0xa40 [ 194.203196] ? kstrdup+0x39/0x70 2018/03/31 07:26:24 executing program 0: r0 = dup(0xffffffffffffff9c) ioctl$DRM_IOCTL_IRQ_BUSID(r0, 0xc0106403, &(0x7f0000000180)={0x100000000, 0x11e, 0x2, 0x6645}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1=0xe0000001, @loopback=0x7f000001}, 0xb6) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f000043e000)={0x1, {{0x2, 0x0, @multicast1=0xe0000001}}}, 0x90) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000380)={0x2, {{0x2, 0x0, @multicast1=0xe0000001}}}, 0x88) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f00000001c0)={0x0, 0x1, 0x30, 0x0, 0x2}, &(0x7f0000000200)=0x18) getsockopt$inet_buf(r1, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000695ffc)=0x314) 2018/03/31 07:26:24 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000200)=ANY=[@ANYBLOB], &(0x7f0000000080)=0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x5, 0x103000) ioctl$TIOCLINUX3(r3, 0x541c, &(0x7f0000000040)=0x3) ioctl$KVM_SET_TSS_ADDR(r1, 0xae47, 0xd000) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) munmap(&(0x7f0000001000/0x600000)=nil, 0x600000) [ 194.206562] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 194.211666] ? cgroup_apply_control_enable+0x390/0xbc0 [ 194.216944] ? kernfs_iop_mkdir+0x153/0x1e0 [ 194.221261] ? vfs_mkdir+0x390/0x600 [ 194.224976] ? SyS_mkdir+0x220/0x2a0 [ 194.228694] ? do_syscall_64+0x281/0x940 [ 194.232759] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 194.238122] ? find_held_lock+0x35/0x1d0 [ 194.242190] ? find_held_lock+0x35/0x1d0 [ 194.246254] ? __lock_is_held+0xb6/0x140 [ 194.250331] ? check_same_owner+0x320/0x320 [ 194.254659] ? rcu_note_context_switch+0x710/0x710 [ 194.259587] ? rcu_read_lock_sched_held+0x108/0x120 [ 194.264607] should_failslab+0xec/0x120 [ 194.268584] kmem_cache_alloc+0x47/0x760 [ 194.272639] ? memcpy+0x45/0x50 [ 194.275915] ? kstrdup+0x59/0x70 [ 194.279288] __kernfs_new_node+0xe2/0x570 [ 194.283439] ? kernfs_dop_revalidate+0x380/0x380 [ 194.288202] ? snprintf+0xc0/0xf0 [ 194.291657] ? vsprintf+0x40/0x40 [ 194.295113] kernfs_new_node+0x80/0xe0 [ 194.298998] __kernfs_create_file+0x4b/0x320 [ 194.303408] cgroup_addrm_files+0x3c5/0xa70 2018/03/31 07:26:25 executing program 0: r0 = dup(0xffffffffffffff9c) ioctl$DRM_IOCTL_IRQ_BUSID(r0, 0xc0106403, &(0x7f0000000180)={0x100000000, 0x11e, 0x2, 0x6645}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1=0xe0000001, @loopback=0x7f000001}, 0xb6) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f000043e000)={0x1, {{0x2, 0x0, @multicast1=0xe0000001}}}, 0x90) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000380)={0x2, {{0x2, 0x0, @multicast1=0xe0000001}}}, 0x88) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x0, 0x0) getsockopt$inet_buf(r1, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000695ffc)=0x314) [ 194.307747] ? cgroup_file_write+0x710/0x710 [ 194.312158] ? cpu_cgroup_css_alloc+0x30/0x30 [ 194.316663] ? __lock_is_held+0xb6/0x140 [ 194.320730] ? sched_online_group+0x4e0/0x4e0 [ 194.325222] ? cpu_cgroup_css_online+0x3a/0x50 [ 194.329797] ? online_css+0x224/0x2e0 [ 194.333584] css_populate_dir+0x198/0x420 [ 194.337715] cgroup_apply_control_enable+0x390/0xbc0 [ 194.342804] ? cgroup_propagate_control+0x570/0x570 [ 194.347804] ? css_populate_dir+0x289/0x420 [ 194.352104] cgroup_mkdir+0x56f/0xfc0 [ 194.355882] ? __lock_is_held+0xb6/0x140 [ 194.359924] ? cgroup_destroy_locked+0x750/0x750 [ 194.364656] ? rcu_read_lock_sched_held+0x108/0x120 [ 194.369654] ? kmem_cache_free+0x258/0x2a0 [ 194.373866] ? set_nlink+0xc1/0x160 [ 194.377469] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 194.382376] ? generic_permission+0x105/0x3c0 [ 194.386861] ? cgroup_destroy_locked+0x750/0x750 [ 194.391595] kernfs_iop_mkdir+0x153/0x1e0 [ 194.395720] vfs_mkdir+0x390/0x600 [ 194.399237] SyS_mkdir+0x220/0x2a0 [ 194.402762] ? SyS_mkdirat+0x2b0/0x2b0 [ 194.406628] ? do_syscall_64+0xb7/0x940 [ 194.410579] ? SyS_mkdirat+0x2b0/0x2b0 [ 194.414443] do_syscall_64+0x281/0x940 [ 194.418309] ? vmalloc_sync_all+0x30/0x30 [ 194.422433] ? _raw_spin_unlock_irq+0x27/0x70 [ 194.426906] ? finish_task_switch+0x1c1/0x7e0 [ 194.431375] ? syscall_return_slowpath+0x550/0x550 [ 194.436283] ? syscall_return_slowpath+0x2ac/0x550 [ 194.441190] ? prepare_exit_to_usermode+0x350/0x350 [ 194.446230] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 194.451585] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 194.456407] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 194.461574] RIP: 0033:0x454e79 [ 194.464741] RSP: 002b:00007f2d4ca09c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 194.472427] RAX: ffffffffffffffda RBX: 00007f2d4ca0a6d4 RCX: 0000000000454e79 [ 194.479894] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000020000340 [ 194.487138] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 194.494386] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000013 [ 194.501633] R13: 00000000000003ea R14: 00000000006f7e90 R15: 0000000000000023 [ 194.509135] cgroup: cgroup_addrm_files: failed to add weight, err=-12 2018/03/31 07:26:25 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0xda6000)=nil, 0xda6000, 0x0, 0x64031, 0xffffffffffffffff, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) recvfrom$inet(r3, &(0x7f0000000100)=""/241, 0xf1, 0x12001, 0x0, 0x0) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f0000000000)) 2018/03/31 07:26:25 executing program 0: r0 = dup(0xffffffffffffff9c) ioctl$DRM_IOCTL_IRQ_BUSID(r0, 0xc0106403, &(0x7f0000000180)={0x100000000, 0x11e, 0x2, 0x6645}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1=0xe0000001, @loopback=0x7f000001}, 0xb6) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f000043e000)={0x1, {{0x2, 0x0, @multicast1=0xe0000001}}}, 0x90) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000380)={0x2, {{0x2, 0x0, @multicast1=0xe0000001}}}, 0x88) getsockopt$inet_buf(r1, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000695ffc)=0x314) 2018/03/31 07:26:25 executing program 5: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/enforce\x00', 0x0, 0x0) perf_event_open(&(0x7f0000b5a000)={0x4000000002, 0x78, 0x1e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x80a, 0x400000000000) perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x6, 0x200000) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffff9c, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x74, &(0x7f0000000080)=[@in6={0xa, 0x4e22, 0x6, @remote={0xfe, 0x80, [], 0xbb}, 0x26}, @in6={0xa, 0x4e23, 0x10000, @empty, 0xfffffffffffff131}, @in6={0xa, 0x4e22, 0x8, @local={0xfe, 0x80, [], 0xaa}, 0x8}, @in={0x2, 0x4e20, @loopback=0x7f000001}, @in={0x2, 0x4e23, @multicast1=0xe0000001}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000240)={r1, 0x79, "1ac0c57feafa701dffc605a99a0ff6aae01a998ff3630cffdbaecf3adb5813c1ec1435cadb8421bdfb2d584f7595157b797d985e27020ebfca87e28286801243f0ffcebc9aad725742a74bdf6b2c26755d050b8e350a6d4da5fd1df9a050cc3bf386fd5050891bcde12f3f2d61573a23e81a554e18eaa9e517"}, &(0x7f0000000180)=0x81) r2 = socket$inet(0x2, 0x6, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f00000008c0)=@broute={'broute\x00', 0x20, 0x2, 0x398, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000280], 0x0, &(0x7f0000000240), &(0x7f0000000280)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x0, 'ip6gretap0\x00', 'syz_tun\x00', 'ip6tnl0\x00', 'syz_tun\x00', @link_local={0x1, 0x80, 0xc2}, [0x0, 0x1000, 0x0, 0x0, 0xff], @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], 0x70, 0xb8, 0x108}, [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz0\x00'}}}]}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x10000, 'syz0\x00'}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff, 0x1, [{{{0xd, 0x0, 0x86dd, 'syzkaller0\x00', 'tunl0\x00', 'sit0\x00', 'ifb0\x00', @empty, [], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], 0x130, 0x1b0, 0x200, [@ip6={'ip6\x00', 0x50, {{@empty, @ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0x14, 0xaa}}}}}, @limit={'limit\x00', 0x20, {{0x0, 0xec}}}]}, [@common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x81, 'syz1\x00'}}}, @common=@NFQUEUE0={'NFQUEUE\x00', 0x8}]}, @common=@LED={'LED\x00', 0x28, {{'syz0\x00'}}}}]}]}, 0x410) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000140)={0x0, 0xa2b, 0x4, 0x7, 0x2, 0x20, 0x10000, 0x8a82}, &(0x7f0000000180)=0x20) r3 = socket(0x1d, 0xb, 0x0) setsockopt$inet_group_source_req(r3, 0x0, 0x0, &(0x7f0000000680)={0x1000, {{0x2, 0x4e23, @multicast1=0xe0000001}}, {{0x2, 0x4e22, @broadcast=0xffffffff}}}, 0x108) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0) r4 = syz_open_dev$loop(&(0x7f0000000b80)='/dev/loop#\x00', 0x0, 0x4006) r5 = memfd_create(&(0x7f0000000000)="74086e750000000000000000008c00", 0x0) pwritev(r5, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000400)={0x0, 0x0, 0x3, 0xffffffff}, &(0x7f0000000440)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000480)={0x0, @in={{0x2, 0x4e24, @remote={0xac, 0x14, 0x14, 0xbb}}}, [0x7fff, 0x2, 0x3, 0x0, 0x5, 0x5, 0x6, 0x10001, 0x9, 0x200, 0x4, 0x3304, 0x6, 0x8, 0x3]}, &(0x7f0000000580)=0x100) getsockopt$inet_sctp_SCTP_RTOINFO(r5, 0x84, 0x0, &(0x7f00000005c0)={0x0, 0x10001, 0x81, 0x9}, &(0x7f0000000600)=0x10) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000640)={0x0, @in6={{0xa, 0x4e23, 0x81, @mcast2={0xff, 0x2, [], 0x1}, 0x7fff}}, 0x2, 0x4, 0xf8, 0x1, 0x6}, &(0x7f0000000700)=0x98) getsockopt$inet_sctp6_SCTP_CONTEXT(r5, 0x84, 0x11, &(0x7f0000000740)={0x0, 0x200}, &(0x7f0000000340)=0x8) pselect6(0x40, &(0x7f0000000a80)={0x28b, 0x3, 0x9, 0x8001, 0xff, 0x1ff, 0x40, 0x10000}, &(0x7f0000000b00)={0x92a, 0x7, 0x7fff, 0x9, 0x0, 0x5, 0x8, 0x1f}, &(0x7f0000000b40)={0x80000001, 0x81, 0x2, 0x4, 0x3, 0x7, 0xb3f5, 0x37ef}, &(0x7f0000000bc0), &(0x7f0000000c40)={&(0x7f0000000c00)={0x6}, 0x8}) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r5, 0x84, 0x6, &(0x7f00000007c0)={0x0, @in6={{0xa, 0x4e23, 0x7, @dev={0xfe, 0x80, [], 0xe}, 0x3}}}, &(0x7f0000000880)=0x84) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f00000008c0)={0x0, 0x1b5}, &(0x7f0000000900)=0x8) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f0000000280)=@in={0x2, 0x4e20}, 0x10, &(0x7f00000003c0)=[{&(0x7f00000002c0)="b25b2002e7d8bc055c7d9ed742f2ca865f150419606e27d187b4ce0f2f81d8a0ab0d18a71f265b68c86f9c82600911dcc4698a4baebfb56adf90bec3", 0x3c}], 0x1, &(0x7f0000000940), 0x0, 0x24000001}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'ipddp0\x00', @ifru_mtu=0x1}) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) sendfile(r4, r4, &(0x7f0000000080), 0x102000004) ioctl$LOOP_CLR_FD(r4, 0x4c01) fdatasync(r4) 2018/03/31 07:26:25 executing program 0: r0 = dup(0xffffffffffffff9c) ioctl$DRM_IOCTL_IRQ_BUSID(r0, 0xc0106403, &(0x7f0000000180)={0x100000000, 0x11e, 0x2, 0x6645}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1=0xe0000001, @loopback=0x7f000001}, 0xb6) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f000043e000)={0x1, {{0x2, 0x0, @multicast1=0xe0000001}}}, 0x90) getsockopt$inet_buf(r1, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000695ffc)=0x314) 2018/03/31 07:26:25 executing program 3: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x40) io_setup(0x3, &(0x7f0000000080)=0x0) io_cancel(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x8, r0, &(0x7f00000000c0)="de11dcd5b144694fa5e1ed0b3bdb91d04249dc2bbd04723779c84fda671d5ec306262eb147cf6c72a5e6a1600af08379e966b0b2707df5cce60b0cc2e083b71255e5bae7ad916ead8fe0b1b5791219d64e185ddbdfe9e925268eea766b1c72", 0x5f, 0x2, 0x0, 0x1, r0}, &(0x7f0000000180)) ioctl$RNDZAPENTCNT(r0, 0x5204, &(0x7f0000000040)) r2 = socket$inet(0xa, 0x803, 0x4) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f00000007c0)={0x0, {0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, {0x2, 0x0, @rand_addr}, {0x2, 0x0, @rand_addr}, 0x0, 0x0, 0x0, 0x200000cbe}) [ 194.719828] FAULT_INJECTION: forcing a failure. [ 194.719828] name failslab, interval 1, probability 0, space 0, times 0 [ 194.731236] CPU: 0 PID: 14107 Comm: syz-executor7 Not tainted 4.16.0-rc7+ #372 [ 194.738621] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 194.747979] Call Trace: [ 194.750570] dump_stack+0x194/0x24d [ 194.754204] ? arch_local_irq_restore+0x53/0x53 [ 194.758887] should_fail+0x8c0/0xa40 [ 194.762604] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 194.767708] ? trace_hardirqs_off+0x10/0x10 [ 194.772031] ? alloc_fair_sched_group+0xd6/0x530 [ 194.776790] ? sched_create_group+0x35/0x70 [ 194.781111] ? cgroup_apply_control_enable+0x44d/0xbc0 [ 194.786387] ? SyS_mkdir+0x220/0x2a0 [ 194.790104] ? print_irqtrace_events+0x270/0x270 [ 194.794863] ? find_held_lock+0x35/0x1d0 [ 194.798916] ? __lock_is_held+0xb6/0x140 [ 194.802961] ? check_same_owner+0x320/0x320 [ 194.807268] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 194.812274] ? rcu_note_context_switch+0x710/0x710 [ 194.817194] should_failslab+0xec/0x120 [ 194.821156] kmem_cache_alloc_node_trace+0x5a/0x760 [ 194.826163] ? __refill_cfs_bandwidth_runtime+0x120/0x120 [ 194.831698] ? sched_create_group+0x22/0x70 [ 194.836031] ? find_next_bit+0xcc/0x100 [ 194.839991] alloc_fair_sched_group+0x1f0/0x530 [ 194.844645] sched_create_group+0x35/0x70 [ 194.848772] cpu_cgroup_css_alloc+0xe/0x30 [ 194.853004] cgroup_apply_control_enable+0x44d/0xbc0 [ 194.858098] ? cgroup_propagate_control+0x570/0x570 [ 194.863094] ? css_populate_dir+0x289/0x420 [ 194.867391] cgroup_mkdir+0x56f/0xfc0 [ 194.871171] ? __lock_is_held+0xb6/0x140 [ 194.875213] ? cgroup_destroy_locked+0x750/0x750 [ 194.879958] ? rcu_read_lock_sched_held+0x108/0x120 [ 194.884960] ? kmem_cache_free+0x258/0x2a0 [ 194.889171] ? set_nlink+0xc1/0x160 [ 194.892774] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 194.897679] ? generic_permission+0x105/0x3c0 [ 194.902165] ? cgroup_destroy_locked+0x750/0x750 [ 194.906899] kernfs_iop_mkdir+0x153/0x1e0 [ 194.911032] vfs_mkdir+0x390/0x600 [ 194.914555] SyS_mkdir+0x220/0x2a0 [ 194.918071] ? SyS_mkdirat+0x2b0/0x2b0 [ 194.921935] ? do_syscall_64+0xb7/0x940 [ 194.925892] ? SyS_mkdirat+0x2b0/0x2b0 [ 194.929768] do_syscall_64+0x281/0x940 [ 194.933638] ? vmalloc_sync_all+0x30/0x30 [ 194.937768] ? _raw_spin_unlock_irq+0x27/0x70 [ 194.942237] ? finish_task_switch+0x1c1/0x7e0 [ 194.946722] ? syscall_return_slowpath+0x550/0x550 [ 194.951648] ? syscall_return_slowpath+0x2ac/0x550 [ 194.956560] ? prepare_exit_to_usermode+0x350/0x350 [ 194.961561] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 194.966913] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 194.971755] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 194.976933] RIP: 0033:0x454e79 [ 194.980105] RSP: 002b:00007f49041e4c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 194.987800] RAX: ffffffffffffffda RBX: 00007f49041e56d4 RCX: 0000000000454e79 [ 194.995048] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000020000340 [ 195.002298] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 195.009571] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000013 [ 195.016826] R13: 00000000000003ea R14: 00000000006f7e90 R15: 000000000000001d 2018/03/31 07:26:25 executing program 0: r0 = dup(0xffffffffffffff9c) ioctl$DRM_IOCTL_IRQ_BUSID(r0, 0xc0106403, &(0x7f0000000180)={0x100000000, 0x11e, 0x2, 0x6645}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1=0xe0000001, @loopback=0x7f000001}, 0xb6) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f000043e000)={0x1, {{0x2, 0x0, @multicast1=0xe0000001}}}, 0x90) getsockopt$inet_buf(r1, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000695ffc)=0x314) 2018/03/31 07:26:25 executing program 6: bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes-generic)\x00'}, 0x58) syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0xe982, 0x2400) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000240)="0a0775b0d5e383e5b3b60ced5c54db7dbab47f8cad245cd0", 0x18) 2018/03/31 07:26:25 executing program 4: madvise(&(0x7f0000c0f000/0x3000)=nil, 0x3000, 0x2000000000003) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$VT_RESIZE(r0, 0x5609, &(0x7f0000000080)={0x4, 0x5a, 0x7}) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x1c) write$selinux_validatetrans(0xffffffffffffffff, &(0x7f0000000500)=ANY=[@ANYBLOB='system_u:object_r:utempter_exec_t:s0 system_u'], 0x2d) read(r0, &(0x7f000022e000)=""/74, 0x4a) write$selinux_context(r1, &(0x7f0000000000)='system_u:object_r:tty_device_t:s0\x00', 0x22) r3 = dup2(r0, r2) ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x4c09, 0x0) syz_open_dev$urandom(&(0x7f00000001c0)='/dev/urandom\x00', 0x0, 0x0) io_setup(0x8000, &(0x7f0000000240)=0x0) io_cancel(r4, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x7, 0x6, 0xffffffffffffffff, &(0x7f0000000940), 0x0, 0x8, 0x0, 0x1, r3}, &(0x7f00000009c0)) clone(0x0, &(0x7f0000001f37), &(0x7f0000000040), &(0x7f0000001000), &(0x7f0000007000)) 2018/03/31 07:26:25 executing program 1 (fault-call:6 fault-nth:36): mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) open(&(0x7f00000000c0)='./file0\x00', 0xa0441, 0x80) syz_mount_image$msdos(&(0x7f0000000140)='msdos\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x1, &(0x7f0000000100)=[{&(0x7f0000000480)="9196b107dc9e5c731d56d84afae6a7bf24", 0x11, 0x1f}], 0x0, &(0x7f0000000000)=ANY=[]) rmdir(&(0x7f0000000080)='./file0//ile0\x00') mkdir(&(0x7f0000000340)='./file0//ile0\x00', 0x1) r0 = semget$private(0x0, 0x4, 0x21) semctl$GETPID(r0, 0x1, 0xb, &(0x7f0000000200)=""/154) 2018/03/31 07:26:25 executing program 2: r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_FREE_MR(r0, 0x114, 0x3, &(0x7f0000000040)={{0x2, 0x9}}, 0x10) sync_file_range(r0, 0x8, 0x0, 0x2) r1 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x101, 0x101000) ioctl$KVM_GET_CPUID2(r1, 0xc008ae91, &(0x7f0000000080)={0x3, 0x0, [{}, {}, {}]}) fcntl$getown(r0, 0x9) 2018/03/31 07:26:25 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000fcbff7)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000000c0)={[], 0x0, 0x1600}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/03/31 07:26:25 executing program 3: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000880)='/dev/sequencer\x00', 0x8000, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x1c, &(0x7f00000008c0), &(0x7f0000000900)=0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000dcdf24)=[@in={0x2, 0x4e21, @loopback=0x7f000001}], 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000c3e000)={0x2, 0x4e21, @loopback=0x7f000001}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000040)=@nat={'nat\x00', 0x19, 0x4, 0x590, [0x20000240, 0x0, 0x0, 0x20000418, 0x20000570], 0x0, &(0x7f0000000000), &(0x7f0000000240)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x5, 0x1c, 0x6005, 'syzkaller0\x00', 'ipddp0\x00', 'gretap0\x00', 'gretap0\x00', @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [0x0, 0xff, 0xff, 0x0, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0x0, 0xff, 0x0, 0xff, 0xff], 0xd0, 0x158, 0x1a8, [@cpu={'cpu\x00', 0x8, {{0xb4bf, 0x1}}}, @state={'state\x00', 0x8, {{0x5}}}]}, [@arpreply={'arpreply\x00', 0x10, {{@dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x16}, 0xffffffffffffffff}}}, @common=@log={'log\x00', 0x28, {{0x3, "ca407c38c9c19700bfe2703fab3efb339c8cbd4ba7b1c276cfd8aa660286", 0x4}}}]}, @common=@LED={'LED\x00', 0x28, {{'syz1\x00', 0x0, 0x1, 0x5}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffc, 0x1, [{{{0xb, 0x2f, 0xe6df, 'ip6_vti0\x00', 'bcsf0\x00', 'bond0\x00', 'bcsf0\x00', @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [0xff, 0xff, 0xff, 0xff, 0x0, 0xff], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [0x0, 0x0, 0xff, 0xff, 0x0, 0xff], 0xa0, 0xf0, 0x128, [@pkttype={'pkttype\x00', 0x8, {{0x3}}}]}, [@common=@LED={'LED\x00', 0x28, {{'syz0\x00', 0x3, 0x8, 0x6}}}]}, @arpreply={'arpreply\x00', 0x10, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, 0xffffffffffffffff}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x1, [{{{0x19, 0x4a, 0x0, 'syzkaller0\x00', 'teql0\x00', 'dummy0\x00', 'gretap0\x00', @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [0xff, 0xff, 0x0, 0x0, 0xff, 0xff], @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [0x0, 0x0, 0x0, 0xff, 0x0, 0xff], 0xb0, 0xe8, 0x120, [@statistic={'statistic\x00', 0x18, {{0x1, 0x0, 0x8, 0x401, 0x4, 0xffffffffffff4276}}}]}, [@arpreply={'arpreply\x00', 0x10, {{@remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, 0xffffffffffffffff}}}]}, @snat={'snat\x00', 0x10, {{@dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x13}, 0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x3, 0xfffffffffffffffe, 0x1, [{{{0x9, 0x9, 0x89f7, 'gretap0\x00', 'gretap0\x00', 'gretap0\x00', 'dummy0\x00', @random="0e69460269ea", [0xff, 0x0, 0xf5f69524bd6e0648, 0xff, 0x0, 0xff], @empty, [0xff, 0xff], 0x70, 0xa8, 0xe0}, [@arpreply={'arpreply\x00', 0x10, {{@empty, 0xffffffffffffffff}}}]}, @common=@dnat={'dnat\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, 0xffffffffffffffff}}}}]}]}, 0x608) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rfkill\x00', 0x1, 0x0) ioctl$KVM_SIGNAL_MSI(r2, 0x4020aea5, &(0x7f0000000180)={0xf000, 0x1000, 0x3, 0x9, 0x100000001}) socketpair$inet_sctp(0x2, 0x5, 0x84, &(0x7f00000000c0)) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000100), &(0x7f0000000200)=0x8) 2018/03/31 07:26:25 executing program 7 (fault-call:7 fault-nth:30): mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) open(&(0x7f00000000c0)='./file0\x00', 0xa0441, 0x80) syz_mount_image$msdos(&(0x7f0000000140)='msdos\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x1, &(0x7f0000000100)=[{&(0x7f0000000480)="9196b107dc9e5c731d56d84afae6a7bf24", 0x11, 0x1f}], 0x0, &(0x7f0000000000)=ANY=[]) mkdir(&(0x7f0000000180)='./file0//ile0\x00', 0x112) rmdir(&(0x7f0000000080)='./file0//ile0\x00') mkdir(&(0x7f0000000340)='./file0//ile0\x00', 0x1) r0 = semget$private(0x0, 0x4, 0x21) semctl$GETPID(r0, 0x1, 0xb, &(0x7f0000000200)=""/154) [ 195.155834] kernel msg: ebtables bug: please report to author: bad policy [ 195.173597] FAULT_INJECTION: forcing a failure. [ 195.173597] name failslab, interval 1, probability 0, space 0, times 0 [ 195.184910] CPU: 0 PID: 14168 Comm: syz-executor1 Not tainted 4.16.0-rc7+ #372 [ 195.192269] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 195.201610] Call Trace: [ 195.204184] dump_stack+0x194/0x24d [ 195.207796] ? arch_local_irq_restore+0x53/0x53 [ 195.212441] ? lock_release+0xa40/0xa40 [ 195.216394] should_fail+0x8c0/0xa40 [ 195.220085] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 195.225163] ? kernfs_add_one+0x50/0x450 [ 195.229200] ? rb_first_postorder+0xa0/0xa0 [ 195.233496] ? kernfs_add_one+0x50/0x450 [ 195.237535] ? save_stack+0x43/0xd0 [ 195.241137] ? kasan_kmalloc+0xad/0xe0 [ 195.245007] ? trace_hardirqs_off+0x10/0x10 [ 195.249322] ? find_held_lock+0x35/0x1d0 [ 195.253360] ? __lock_is_held+0xb6/0x140 [ 195.257400] ? check_same_owner+0x320/0x320 [ 195.261699] ? lock_downgrade+0x980/0x980 [ 195.265826] ? rcu_note_context_switch+0x710/0x710 [ 195.270739] should_failslab+0xec/0x120 [ 195.274693] __kmalloc_track_caller+0x5f/0x760 [ 195.279254] ? string+0x180/0x200 [ 195.282709] ? kstrdup_const+0x39/0x50 [ 195.286578] kstrdup+0x39/0x70 [ 195.289748] kstrdup_const+0x39/0x50 [ 195.293452] __kernfs_new_node+0xa2/0x570 [ 195.297587] ? kernfs_dop_revalidate+0x380/0x380 [ 195.302324] ? snprintf+0xc0/0xf0 [ 195.305751] ? vsprintf+0x40/0x40 [ 195.309182] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 195.314089] ? cgroup_file_name+0x1d0/0x1d0 [ 195.318390] kernfs_new_node+0x80/0xe0 [ 195.322255] __kernfs_create_file+0x4b/0x320 [ 195.326641] cgroup_addrm_files+0x3c5/0xa70 [ 195.330944] ? cgroup_file_write+0x710/0x710 [ 195.335327] ? cpu_cgroup_css_alloc+0x30/0x30 [ 195.339804] ? __lock_is_held+0xb6/0x140 [ 195.343844] ? sched_online_group+0x4e0/0x4e0 [ 195.348316] ? cpu_cgroup_css_online+0x3a/0x50 [ 195.352871] ? online_css+0x224/0x2e0 [ 195.356651] css_populate_dir+0x198/0x420 [ 195.360780] cgroup_apply_control_enable+0x390/0xbc0 [ 195.365861] ? cgroup_propagate_control+0x570/0x570 [ 195.370864] ? css_populate_dir+0x289/0x420 [ 195.375164] cgroup_mkdir+0x56f/0xfc0 [ 195.378938] ? __lock_is_held+0xb6/0x140 [ 195.382976] ? cgroup_destroy_locked+0x750/0x750 [ 195.387708] ? rcu_read_lock_sched_held+0x108/0x120 [ 195.392700] ? kmem_cache_free+0x258/0x2a0 [ 195.396910] ? set_nlink+0xc1/0x160 [ 195.400515] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 195.405418] ? generic_permission+0x105/0x3c0 [ 195.409888] ? cgroup_destroy_locked+0x750/0x750 [ 195.414619] kernfs_iop_mkdir+0x153/0x1e0 [ 195.418745] vfs_mkdir+0x390/0x600 [ 195.422261] SyS_mkdir+0x220/0x2a0 [ 195.425778] ? SyS_mkdirat+0x2b0/0x2b0 [ 195.429640] ? do_syscall_64+0xb7/0x940 [ 195.433587] ? SyS_mkdirat+0x2b0/0x2b0 [ 195.437449] do_syscall_64+0x281/0x940 [ 195.441314] ? vmalloc_sync_all+0x30/0x30 [ 195.445450] ? _raw_spin_unlock_irq+0x27/0x70 [ 195.449919] ? finish_task_switch+0x1c1/0x7e0 [ 195.454387] ? syscall_return_slowpath+0x550/0x550 [ 195.459292] ? syscall_return_slowpath+0x2ac/0x550 [ 195.464198] ? prepare_exit_to_usermode+0x350/0x350 [ 195.469190] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 195.474531] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 195.479353] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 195.484521] RIP: 0033:0x454e79 [ 195.487684] RSP: 002b:00007f2d4ca09c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 195.495367] RAX: ffffffffffffffda RBX: 00007f2d4ca0a6d4 RCX: 0000000000454e79 2018/03/31 07:26:26 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = inotify_init() perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(r0, 0xae78, &(0x7f00000000c0)=0x2) ioctl$int_in(r0, 0x8000000000541b, &(0x7f0000000000)) r1 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x6, 0x10000) ioctl$DRM_IOCTL_GET_MAGIC(r1, 0x80046402, &(0x7f0000000080)=0x9) [ 195.502613] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000020000340 [ 195.509856] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 195.517101] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000013 [ 195.524345] R13: 00000000000003ea R14: 00000000006f7e90 R15: 0000000000000024 [ 195.531792] cgroup: cgroup_addrm_files: failed to add weight.nice, err=-12 [ 195.567973] kernel msg: ebtables bug: please report to author: bad policy [ 195.591813] FAULT_INJECTION: forcing a failure. [ 195.591813] name failslab, interval 1, probability 0, space 0, times 0 [ 195.603093] CPU: 0 PID: 14157 Comm: syz-executor7 Not tainted 4.16.0-rc7+ #372 [ 195.610450] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 195.619792] Call Trace: [ 195.622367] dump_stack+0x194/0x24d [ 195.625979] ? arch_local_irq_restore+0x53/0x53 [ 195.630636] should_fail+0x8c0/0xa40 [ 195.634331] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 195.639415] ? trace_hardirqs_off+0x10/0x10 [ 195.643712] ? alloc_fair_sched_group+0xd6/0x530 [ 195.648447] ? sched_create_group+0x35/0x70 [ 195.652746] ? cgroup_apply_control_enable+0x44d/0xbc0 [ 195.657999] ? SyS_mkdir+0x220/0x2a0 [ 195.661694] ? print_irqtrace_events+0x270/0x270 [ 195.666426] ? find_held_lock+0x35/0x1d0 [ 195.670466] ? __lock_is_held+0xb6/0x140 [ 195.674509] ? check_same_owner+0x320/0x320 [ 195.678806] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 195.683825] ? rcu_note_context_switch+0x710/0x710 [ 195.688741] should_failslab+0xec/0x120 [ 195.692692] kmem_cache_alloc_node_trace+0x5a/0x760 [ 195.697698] ? __refill_cfs_bandwidth_runtime+0x120/0x120 [ 195.703213] ? sched_create_group+0x22/0x70 [ 195.707515] ? find_next_bit+0xcc/0x100 [ 195.711472] alloc_fair_sched_group+0x1f0/0x530 [ 195.716123] sched_create_group+0x35/0x70 [ 195.720251] cpu_cgroup_css_alloc+0xe/0x30 [ 195.724463] cgroup_apply_control_enable+0x44d/0xbc0 [ 195.729548] ? cgroup_propagate_control+0x570/0x570 [ 195.734544] ? css_populate_dir+0x289/0x420 [ 195.738843] cgroup_mkdir+0x56f/0xfc0 [ 195.742621] ? __lock_is_held+0xb6/0x140 [ 195.746666] ? cgroup_destroy_locked+0x750/0x750 [ 195.751398] ? rcu_read_lock_sched_held+0x108/0x120 [ 195.756390] ? kmem_cache_free+0x258/0x2a0 [ 195.760601] ? set_nlink+0xc1/0x160 [ 195.764204] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 195.769107] ? generic_permission+0x105/0x3c0 [ 195.773579] ? cgroup_destroy_locked+0x750/0x750 [ 195.778312] kernfs_iop_mkdir+0x153/0x1e0 [ 195.782437] vfs_mkdir+0x390/0x600 [ 195.785953] SyS_mkdir+0x220/0x2a0 [ 195.789473] ? SyS_mkdirat+0x2b0/0x2b0 [ 195.793336] ? do_syscall_64+0xb7/0x940 [ 195.797286] ? SyS_mkdirat+0x2b0/0x2b0 [ 195.801175] do_syscall_64+0x281/0x940 [ 195.805038] ? vmalloc_sync_all+0x30/0x30 [ 195.809163] ? _raw_spin_unlock_irq+0x27/0x70 [ 195.813633] ? finish_task_switch+0x1c1/0x7e0 [ 195.818106] ? syscall_return_slowpath+0x550/0x550 [ 195.823017] ? syscall_return_slowpath+0x2ac/0x550 [ 195.827925] ? prepare_exit_to_usermode+0x350/0x350 [ 195.832918] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 195.838259] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 195.843081] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 195.848244] RIP: 0033:0x454e79 [ 195.851412] RSP: 002b:00007f49041e4c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 195.859095] RAX: ffffffffffffffda RBX: 00007f49041e56d4 RCX: 0000000000454e79 [ 195.866340] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000020000340 [ 195.873586] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 195.880832] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000013 [ 195.888079] R13: 00000000000003ea R14: 00000000006f7e90 R15: 000000000000001e 2018/03/31 07:26:27 executing program 0: r0 = dup(0xffffffffffffff9c) ioctl$DRM_IOCTL_IRQ_BUSID(r0, 0xc0106403, &(0x7f0000000180)={0x100000000, 0x11e, 0x2, 0x6645}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1=0xe0000001, @loopback=0x7f000001}, 0xb6) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f000043e000)={0x1, {{0x2, 0x0, @multicast1=0xe0000001}}}, 0x90) getsockopt$inet_buf(r1, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000695ffc)=0x314) 2018/03/31 07:26:27 executing program 2: r0 = socket$netlink(0x10, 0x3, 0xc) r1 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x7c7, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r1, 0xc1105511, &(0x7f0000000100)={{0x2, 0x0, 0x0, 0x0, "386aea20273dc03c3d18dd0dbd4a0ca15f9f580393cc4ec3b8ee256b9aa630224ba64c6ff43ee01d2996c914"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "eda422cd37591b3a5a7a683380f7e0b9e790c6b72cd0a4f3342f7431c1699a305ca3091bb2320e8df4e298a2cca26637866a68c1426ffbd8a6c7da1d8ea77d9d", &(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x13}) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240)='/proc/self/net/pfkey\x00', 0x10000, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r1, 0x4010ae68, &(0x7f00000003c0)={0x7000, 0x1000}) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r4, 0x4010ae68, &(0x7f0000000000)={0x0, 0x5000}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r6 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x40, 0x0) connect$vsock_stream(r6, &(0x7f0000000080)={0x28, 0x0, 0xffffffff, @my}, 0x10) setsockopt$kcm_KCM_RECV_DISABLE(r2, 0x119, 0x1, &(0x7f0000000280)=0x20, 0x4) dup2(r3, r5) r7 = getpgrp(0xffffffffffffffff) sched_getscheduler(r7) dup3(r3, r4, 0x0) r8 = syz_open_procfs(0x0, &(0x7f00000000c0)='loginuid\x00') getsockopt$inet6_mtu(r8, 0x29, 0x17, &(0x7f0000000140), &(0x7f0000000180)=0xfffffffffffffec6) ioctl$sock_inet_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000100)) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000040)}], 0x1) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="1f0000000203193b000007000000068100023b050900020000000000feff58", 0x1f}], 0x1) flistxattr(r2, &(0x7f00000002c0)=""/209, 0xd1) 2018/03/31 07:26:27 executing program 3: r0 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) r1 = dup2(0xffffffffffffffff, 0xffffffffffffff9c) ioctl$TUNSETSTEERINGEBPF(r0, 0x800454e0, &(0x7f0000000040)=r1) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x20000000) clone(0x0, &(0x7f0000000240), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) clone(0x818c2500, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000000000)) wait4(0x0, 0x0, 0x80000000, &(0x7f0000000080)) 2018/03/31 07:26:27 executing program 1 (fault-call:6 fault-nth:37): mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) open(&(0x7f00000000c0)='./file0\x00', 0xa0441, 0x80) syz_mount_image$msdos(&(0x7f0000000140)='msdos\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x1, &(0x7f0000000100)=[{&(0x7f0000000480)="9196b107dc9e5c731d56d84afae6a7bf24", 0x11, 0x1f}], 0x0, &(0x7f0000000000)=ANY=[]) rmdir(&(0x7f0000000080)='./file0//ile0\x00') mkdir(&(0x7f0000000340)='./file0//ile0\x00', 0x1) r0 = semget$private(0x0, 0x4, 0x21) semctl$GETPID(r0, 0x1, 0xb, &(0x7f0000000200)=""/154) 2018/03/31 07:26:27 executing program 6: r0 = socket$inet6(0xa, 0x2, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x5}, &(0x7f00000003c0)=0x10) setsockopt$inet6_buf(r0, 0x29, 0x14, &(0x7f0000000000)="ff55d36cffb9ffffef00000000070c0401000000", 0x14) socketpair$ipx(0x4, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) bind$ipx(r2, &(0x7f0000000040)={0x4, 0x800, 0x78a5, "f879c0100b60", 0x1}, 0x10) close(r1) 2018/03/31 07:26:27 executing program 7 (fault-call:7 fault-nth:31): mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) open(&(0x7f00000000c0)='./file0\x00', 0xa0441, 0x80) syz_mount_image$msdos(&(0x7f0000000140)='msdos\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x1, &(0x7f0000000100)=[{&(0x7f0000000480)="9196b107dc9e5c731d56d84afae6a7bf24", 0x11, 0x1f}], 0x0, &(0x7f0000000000)=ANY=[]) mkdir(&(0x7f0000000180)='./file0//ile0\x00', 0x112) rmdir(&(0x7f0000000080)='./file0//ile0\x00') mkdir(&(0x7f0000000340)='./file0//ile0\x00', 0x1) r0 = semget$private(0x0, 0x4, 0x21) semctl$GETPID(r0, 0x1, 0xb, &(0x7f0000000200)=""/154) 2018/03/31 07:26:27 executing program 4: ioctl$sock_SIOCBRADDBR(0xffffffffffffffff, 0x89a0, &(0x7f0000000000)="766c616e301000000000000000070002") r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$rdma_cm(r0, &(0x7f0000002100)=ANY=[@ANYBLOB="01000000100000fa"], 0x8) r1 = request_key(&(0x7f0000000140)='ceph\x00', &(0x7f00000004c0)={0x73, 0x79, 0x7a, 0x1}, &(0x7f0000000500)='syzkaller0\x00', 0x0) getresgid(&(0x7f00000000c0), &(0x7f0000000100), &(0x7f00000001c0)) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) setresgid(0x0, 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/enforce\x00', 0x10000000020680, 0x0) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vcs\x00', 0x400000, 0x0) accept$netrom(0xffffffffffffffff, &(0x7f0000000240), &(0x7f0000000200)=0xa) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f000051d000)='/dev/loop-control\x00', 0x0, 0x0) r6 = ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) ioctl$LOOP_CTL_ADD(r5, 0x4c81, r6) r7 = msgget(0x3, 0x101) msgctl$IPC_RMID(r7, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000480)={0x0, @in6={{0xa, 0x4e21, 0xaeab, @mcast2={0xff, 0x2, [], 0x1}, 0x25b8}}, 0x1, 0x66fd}, &(0x7f0000000540)=0x90) ioctl$KVM_XEN_HVM_CONFIG(r3, 0x4038ae7a, &(0x7f00000003c0)={0x6, 0x932, &(0x7f0000000340)="5d38726876db7573234a12ed0bcae8641b60417de29711cb80e6f5dfe86f81bd006867f3edb0101613c0042348a6bd2256077832f682c5c331c2907de5eea11aa18f7f5b1ff937d289e60d67cc652321682daf702d462654c4695f9ab960fd4e6a36ccffe3d67dcab3ceefd1b8c4b3", &(0x7f00000005c0)="cefb3ecf249b0b67342e76856e28bebeb09c2f7ce8def824b4733bdaa9061e1d745239936700a099363cf9565e251da4a0f8660df4a812fab40a13d17e3d1f0ea3ae99923afdf8059c7f049ed0e0c3cad19e7e8a1df5ca016e59eaa2f63509b5639976709efeb3009e05170e40572bdcb347bba78da0e8f6c5d54a61947397b694f8a39b628bd3625a698992746eb3431e7beacbc6f17eb636870a1e", 0x6f, 0x9c}) semget(0x2, 0x0, 0x2) keyctl$assume_authority(0x10, r1) write$rdma_cm(r4, &(0x7f0000000cc0)=ANY=[], 0xa) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r4, 0x800442d3, &(0x7f0000000400)={0x2, 0x9aa, 0x8, @random="836d50c7bf52", 'eql\x00'}) r8 = semget$private(0x0, 0x2, 0x1) r9 = open(&(0x7f0000000780)='./file0\x00', 0x80, 0xc) getsockopt$inet_sctp_SCTP_INITMSG(r9, 0x84, 0x2, &(0x7f00000007c0), &(0x7f0000000800)=0x8) pwritev(r0, &(0x7f0000000740)=[{&(0x7f0000000540)="73e9674708b49db98b575124cf36a77303d7493e880a55c3a5fe4cb390816c13e50135f29f90bb3cd4b97ea1faf6f143b4e7e446d4b537e5c1b92b1cf1d0292973b5dbc49a567f172edad5816959a5682aed1b61131777754829d9731b0e4d216e52f746dca697b53d33f498d05f5438e7a400046129d0b93681ed3c3704a3", 0x7f}], 0x1, 0x0) semctl$IPC_INFO(r8, 0x0, 0x3, &(0x7f0000000080)=""/82) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in6={{0xa}}, 0x0, 0x0, 0xe2}}, &(0x7f0000000300)=0xb0) r10 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x1, 0x20000) ioctl$sock_inet_SIOCSARP(r10, 0x8955, &(0x7f0000000440)={{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xe}}, {0x307, @random="1f11b76ccda9"}, 0x8, {0x2, 0x4e24, @multicast1=0xe0000001}, 'syzkaller0\x00'}) 2018/03/31 07:26:27 executing program 5: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer\x00', 0x42, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)="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") getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000680)={0x0, @in={{0x2, 0x0, @loopback=0x7f000001}}, 0x904e, 0x8}, &(0x7f0000000740)=0x90) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f00000004c0)={r2}, 0x8) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000040), 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r3) r4 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) splice(r4, &(0x7f0000000300), 0xffffffffffffffff, &(0x7f00000003c0), 0x0, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000600)={{0xa, 0x7, 0x9d, @empty, 0x4}, {0xa, 0x4e23, 0x5, @ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}, 0x8}, 0x3, [0x0, 0x101, 0x5, 0x8, 0x1, 0x1f, 0x531, 0x1ff]}, 0x5c) rmdir(&(0x7f0000000080)='./file0\x00') setsockopt$inet_mreqn(r5, 0x0, 0x27, &(0x7f0000000140)={@multicast2=0xe0000002, @loopback=0x7f000001}, 0xc) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000940)={'lo\x00'}) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000340)={0x0, @multicast1=0xe0000001, 0x0, 0x0, 'dh\x00'}, 0x2c) socket$inet_sctp(0x2, 0x810000000005, 0x84) recvfrom(r4, &(0x7f0000000880)=""/18, 0x12, 0xa02e11c48c97de8b, &(0x7f0000000980)=@pptp={0x18, 0x2, {0x2, @rand_addr=0x8}}, 0x80) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'irlan0\x00', 0x0}) fcntl$setlease(r0, 0x400, 0x43) stat(&(0x7f0000000400)='./file0/file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000500)={{{@in, @in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x4e20, 0x0, 0x4e23, 0xb17, 0xa, 0xa0, 0xa0, 0x29, r6, r7}, {0x9, 0x43d, 0x3f, 0xacbb, 0x85e3, 0x0, 0x5, 0x7}, {0x0, 0x100, 0x1f, 0x5}, 0x1f, 0x0, 0x1, 0x0, 0x2, 0x3}, {{@in=@broadcast=0xffffffff, 0x4d2}, 0xa, @in6=@local={0xfe, 0x80, [], 0xaa}, 0x3501, 0x2, 0x0, 0xfff, 0x7, 0x1}}, 0xe8) pread64(0xffffffffffffffff, &(0x7f0000000080)=""/156, 0x9c, 0x0) sendto$inet(r0, &(0x7f0000000a40)="fcc1145aaad0c7e16342f04f6b6ffdde6190a90ec5da59cee38fdf08d2ea44daf897e6e8e044b24e8ef342949217a2ae2f431f9915acc492137febe2772c521c99b382be4e09010f7e679b96d051410679163bc4dcebe82ad47a02de7d8b8fbbff6601f82bbd95df3d9d774a31e1", 0xfffffffffffffedd, 0x0, &(0x7f0000000040)={0x2, 0x4e22, @loopback=0x7f000001}, 0xc) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000cecffc), 0x4) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000800)={{0xa, 0x4e24, 0x18e, @local={0xfe, 0x80, [], 0xaa}, 0xa6c2}, {0xa, 0x4e24, 0xf40, @local={0xfe, 0x80, [], 0xaa}, 0x1f}, 0x1, [0x0, 0x100000000, 0x0, 0x3, 0x256, 0x6, 0x1f6, 0x100000000]}, 0x5c) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f00000007c0)=0x5, 0x4) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000780)='tls\x00', 0x4) write(r3, &(0x7f0000000a00)="2400000015007f000000873fd51be1550189d7fe6dff0f0000000000007050c0bb7db2e560a4b5f7a4a1723a0400f090967e7177", 0x34) open(&(0x7f0000ac3000)='./file0\x00', 0xffffffffffffffff, 0xd2) openat(0xffffffffffffffff, &(0x7f0000563000)='./file0\x00', 0x0, 0x0) [ 196.518980] FAULT_INJECTION: forcing a failure. [ 196.518980] name failslab, interval 1, probability 0, space 0, times 0 [ 196.530292] CPU: 0 PID: 14204 Comm: syz-executor1 Not tainted 4.16.0-rc7+ #372 [ 196.537652] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 196.547001] Call Trace: [ 196.549598] dump_stack+0x194/0x24d [ 196.553232] ? arch_local_irq_restore+0x53/0x53 [ 196.557909] should_fail+0x8c0/0xa40 [ 196.561623] ? kstrdup+0x39/0x70 [ 196.564990] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 196.570090] ? cgroup_apply_control_enable+0x390/0xbc0 [ 196.575365] ? kernfs_iop_mkdir+0x153/0x1e0 [ 196.579683] ? vfs_mkdir+0x390/0x600 [ 196.583389] ? SyS_mkdir+0x220/0x2a0 [ 196.587104] ? do_syscall_64+0x281/0x940 [ 196.591165] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 196.596529] ? find_held_lock+0x35/0x1d0 [ 196.600596] ? find_held_lock+0x35/0x1d0 [ 196.604662] ? __lock_is_held+0xb6/0x140 [ 196.608730] ? check_same_owner+0x320/0x320 [ 196.613053] ? rcu_note_context_switch+0x710/0x710 [ 196.617987] ? rcu_read_lock_sched_held+0x108/0x120 [ 196.623007] should_failslab+0xec/0x120 [ 196.626981] kmem_cache_alloc+0x47/0x760 [ 196.631036] ? memcpy+0x45/0x50 [ 196.634311] ? kstrdup+0x59/0x70 [ 196.637674] __kernfs_new_node+0xe2/0x570 [ 196.641822] ? kernfs_dop_revalidate+0x380/0x380 [ 196.646590] ? snprintf+0xc0/0xf0 [ 196.650034] ? vsprintf+0x40/0x40 [ 196.653468] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 196.658381] ? cgroup_file_name+0x1d0/0x1d0 [ 196.662686] kernfs_new_node+0x80/0xe0 [ 196.666558] __kernfs_create_file+0x4b/0x320 [ 196.670951] cgroup_addrm_files+0x3c5/0xa70 [ 196.675256] ? cgroup_file_write+0x710/0x710 [ 196.679642] ? cpu_cgroup_css_alloc+0x30/0x30 [ 196.684122] ? __lock_is_held+0xb6/0x140 [ 196.688166] ? sched_online_group+0x4e0/0x4e0 [ 196.692642] ? cpu_cgroup_css_online+0x3a/0x50 [ 196.697205] ? online_css+0x224/0x2e0 [ 196.700986] css_populate_dir+0x198/0x420 [ 196.705115] cgroup_apply_control_enable+0x390/0xbc0 [ 196.710199] ? cgroup_propagate_control+0x570/0x570 [ 196.715195] ? css_populate_dir+0x289/0x420 [ 196.719496] cgroup_mkdir+0x56f/0xfc0 [ 196.723272] ? __lock_is_held+0xb6/0x140 [ 196.727310] ? cgroup_destroy_locked+0x750/0x750 [ 196.732044] ? rcu_read_lock_sched_held+0x108/0x120 [ 196.737039] ? kmem_cache_free+0x258/0x2a0 [ 196.741251] ? set_nlink+0xc1/0x160 [ 196.744855] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 196.749758] ? generic_permission+0x105/0x3c0 [ 196.754230] ? cgroup_destroy_locked+0x750/0x750 [ 196.758963] kernfs_iop_mkdir+0x153/0x1e0 [ 196.763089] vfs_mkdir+0x390/0x600 [ 196.766607] SyS_mkdir+0x220/0x2a0 [ 196.770124] ? SyS_mkdirat+0x2b0/0x2b0 [ 196.773991] ? do_syscall_64+0xb7/0x940 [ 196.777946] ? SyS_mkdirat+0x2b0/0x2b0 [ 196.781810] do_syscall_64+0x281/0x940 [ 196.785675] ? vmalloc_sync_all+0x30/0x30 [ 196.790094] ? _raw_spin_unlock_irq+0x27/0x70 [ 196.794568] ? finish_task_switch+0x1c1/0x7e0 [ 196.799043] ? syscall_return_slowpath+0x550/0x550 [ 196.803949] ? syscall_return_slowpath+0x2ac/0x550 [ 196.808858] ? prepare_exit_to_usermode+0x350/0x350 [ 196.813850] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 196.819191] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 196.824019] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 196.829187] RIP: 0033:0x454e79 [ 196.832355] RSP: 002b:00007f2d4ca09c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 196.840040] RAX: ffffffffffffffda RBX: 00007f2d4ca0a6d4 RCX: 0000000000454e79 [ 196.847289] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000020000340 [ 196.854533] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 196.861782] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000013 2018/03/31 07:26:27 executing program 0: r0 = dup(0xffffffffffffff9c) ioctl$DRM_IOCTL_IRQ_BUSID(r0, 0xc0106403, &(0x7f0000000180)={0x100000000, 0x11e, 0x2, 0x6645}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1=0xe0000001, @loopback=0x7f000001}, 0xb6) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000380)={0x2, {{0x2, 0x0, @multicast1=0xe0000001}}}, 0x88) getsockopt$inet_buf(r1, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000695ffc)=0x314) 2018/03/31 07:26:27 executing program 6: pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) r2 = accept4(0xffffffffffffff9c, &(0x7f0000000000)=@l2, &(0x7f0000000080)=0x80, 0x80800) getsockname$inet6(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, @ipv4={[], [], @remote}}, &(0x7f0000000100)=0x1c) r3 = socket(0x1e, 0x2000000000000005, 0x0) connect$ax25(r3, &(0x7f00001c1ff0)={0x1e, {"03491f0800"}}, 0x10) symlink(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00') r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r0, &(0x7f000000a000)) close(r1) setsockopt$inet_int(r3, 0x0, 0x1f, &(0x7f0000000140)=0x5, 0x4) setsockopt$inet6_group_source_req(r2, 0x29, 0x0, &(0x7f0000000180)={0x2, {{0xa, 0x4e22, 0x5, @mcast2={0xff, 0x2, [], 0x1}, 0x61d}}, {{0xa, 0x4e23, 0x3ab, @empty, 0x1}}}, 0x108) [ 196.869029] R13: 00000000000003ea R14: 00000000006f7e90 R15: 0000000000000025 [ 196.876623] cgroup: cgroup_addrm_files: failed to add weight.nice, err=-12 [ 196.960789] FAULT_INJECTION: forcing a failure. [ 196.960789] name failslab, interval 1, probability 0, space 0, times 0 [ 196.972143] CPU: 1 PID: 14194 Comm: syz-executor7 Not tainted 4.16.0-rc7+ #372 [ 196.979498] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 196.988833] Call Trace: [ 196.991403] dump_stack+0x194/0x24d [ 196.995011] ? arch_local_irq_restore+0x53/0x53 [ 196.999667] ? __save_stack_trace+0x7e/0xd0 [ 197.003972] should_fail+0x8c0/0xa40 [ 197.007665] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 197.012750] ? kasan_kmalloc+0xad/0xe0 [ 197.016614] ? kmem_cache_alloc_node_trace+0x150/0x760 [ 197.021869] ? alloc_fair_sched_group+0x1f0/0x530 [ 197.026688] ? sched_create_group+0x35/0x70 [ 197.030985] ? cpu_cgroup_css_alloc+0xe/0x30 [ 197.035371] ? vfs_mkdir+0x390/0x600 [ 197.039062] ? SyS_mkdir+0x220/0x2a0 [ 197.042751] ? do_syscall_64+0x281/0x940 [ 197.046790] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 197.052136] ? find_held_lock+0x35/0x1d0 [ 197.056177] ? __lock_is_held+0xb6/0x140 [ 197.060222] ? check_same_owner+0x320/0x320 [ 197.064524] ? rcu_note_context_switch+0x710/0x710 [ 197.069440] should_failslab+0xec/0x120 [ 197.073391] kmem_cache_alloc_node_trace+0x5a/0x760 [ 197.078384] ? __refill_cfs_bandwidth_runtime+0x120/0x120 [ 197.083897] ? sched_create_group+0x22/0x70 [ 197.088197] ? find_next_bit+0xcc/0x100 [ 197.092153] alloc_fair_sched_group+0x267/0x530 [ 197.096802] sched_create_group+0x35/0x70 [ 197.100927] cpu_cgroup_css_alloc+0xe/0x30 [ 197.105140] cgroup_apply_control_enable+0x44d/0xbc0 [ 197.110225] ? cgroup_propagate_control+0x570/0x570 [ 197.115223] ? css_populate_dir+0x289/0x420 [ 197.119525] cgroup_mkdir+0x56f/0xfc0 [ 197.123304] ? __lock_is_held+0xb6/0x140 [ 197.127344] ? cgroup_destroy_locked+0x750/0x750 [ 197.132077] ? rcu_read_lock_sched_held+0x108/0x120 [ 197.137069] ? kmem_cache_free+0x258/0x2a0 [ 197.141280] ? set_nlink+0xc1/0x160 [ 197.144885] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 197.149791] ? generic_permission+0x105/0x3c0 [ 197.154263] ? cgroup_destroy_locked+0x750/0x750 [ 197.158994] kernfs_iop_mkdir+0x153/0x1e0 [ 197.163122] vfs_mkdir+0x390/0x600 [ 197.166639] SyS_mkdir+0x220/0x2a0 [ 197.170163] ? SyS_mkdirat+0x2b0/0x2b0 [ 197.174034] ? do_syscall_64+0xb7/0x940 [ 197.177983] ? SyS_mkdirat+0x2b0/0x2b0 [ 197.181850] do_syscall_64+0x281/0x940 [ 197.185714] ? vmalloc_sync_all+0x30/0x30 [ 197.189841] ? trace_event_raw_event_sys_exit+0x260/0x260 [ 197.195355] ? syscall_return_slowpath+0x550/0x550 [ 197.200262] ? syscall_return_slowpath+0x2ac/0x550 [ 197.205172] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 197.210514] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 197.215338] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 197.220501] RIP: 0033:0x454e79 [ 197.223667] RSP: 002b:00007f49041e4c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 197.231351] RAX: ffffffffffffffda RBX: 00007f49041e56d4 RCX: 0000000000454e79 [ 197.238598] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000020000340 [ 197.245845] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 197.253090] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000013 [ 197.260336] R13: 00000000000003ea R14: 00000000006f7e90 R15: 000000000000001f 2018/03/31 07:26:28 executing program 5: r0 = dup(0xffffffffffffff9c) ioctl$SIOCGIFHWADDR(r0, 0x8927, &(0x7f0000000000)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000240)={&(0x7f0000000040)={0x10}, 0x5f, &(0x7f0000000200)={&(0x7f0000000280)={0x18, 0x25, 0x129, 0x0, 0x0, {0xb}, [@nested={0x4, 0x5}]}, 0x18}, 0x1}, 0x0) 2018/03/31 07:26:28 executing program 1 (fault-call:6 fault-nth:38): mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) open(&(0x7f00000000c0)='./file0\x00', 0xa0441, 0x80) syz_mount_image$msdos(&(0x7f0000000140)='msdos\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x1, &(0x7f0000000100)=[{&(0x7f0000000480)="9196b107dc9e5c731d56d84afae6a7bf24", 0x11, 0x1f}], 0x0, &(0x7f0000000000)=ANY=[]) rmdir(&(0x7f0000000080)='./file0//ile0\x00') mkdir(&(0x7f0000000340)='./file0//ile0\x00', 0x1) r0 = semget$private(0x0, 0x4, 0x21) semctl$GETPID(r0, 0x1, 0xb, &(0x7f0000000200)=""/154) 2018/03/31 07:26:28 executing program 0: r0 = dup(0xffffffffffffff9c) ioctl$DRM_IOCTL_IRQ_BUSID(r0, 0xc0106403, &(0x7f0000000180)={0x100000000, 0x11e, 0x2, 0x6645}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f000043e000)={0x1, {{0x2, 0x0, @multicast1=0xe0000001}}}, 0x90) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000380)={0x2, {{0x2, 0x0, @multicast1=0xe0000001}}}, 0x88) getsockopt$inet_buf(r1, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000695ffc)=0x314) 2018/03/31 07:26:28 executing program 6: r0 = syz_open_dev$midi(&(0x7f00000011c0)='/dev/midi#\x00', 0x0, 0xa4100) pipe(&(0x7f0000000040)={0xffffffffffffffff}) eventfd(0x0) pread64(0xffffffffffffffff, &(0x7f0000000900)=""/195, 0xc3, 0x0) ioctl$KVM_SET_GSI_ROUTING(r0, 0x4008ae6a, &(0x7f00000003c0)=ANY=[@ANYBLOB="8556e2d7d51b95ed16db9e026b029e7005c1434e7459eabbff04024d818cba0ea28570b95309ffa9e49093a4ff42abcc006899a9b086606a3b2a56cf2f4a6fb6a31e85c66bf0deee67289c2c47b030412fd44fa9dd1df610ee40c5e3be2de050c4ab0df0be9a821e11816534a7555e6342b84dcbf787d8f95c37573c74f373a1c62a67", @ANYPTR, @ANYPTR=&(0x7f0000000380)=ANY=[@ANYRES64=r0, @ANYRES64=r1, @ANYRES16, @ANYRES64, @ANYPTR64=&(0x7f0000000300)=ANY=[@ANYPTR64]], @ANYRES64=r1]) ftruncate(0xffffffffffffffff, 0xfffffffeffffffff) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000080)) r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000fc0)='/selinux/enforce\x00', 0x16907a, 0x0) ioctl$KVM_GET_MSRS(r1, 0xc008ae88, &(0x7f0000000180)=ANY=[@ANYBLOB="0600000000a86800000000000000070000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001001000000000000000000000000000000000000000000000000000000000"]) rmdir(&(0x7f0000000340)='./file0\x00') r3 = dup(0xffffffffffffffff) setsockopt$inet_sctp_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000001140)={0x0, 0x6, 0x0, 0x2}, 0x10) ftruncate(r2, 0x0) syz_open_dev$adsp(&(0x7f00000000c0)='/dev/adsp#\x00', 0x1, 0x4000) unlink(&(0x7f0000000140)='./file0\x00') getsockopt$inet_tcp_buf(r3, 0x6, 0x1c, &(0x7f0000000200)=""/239, &(0x7f0000000000)=0xef) pwritev(r2, &(0x7f0000001400)=[{&(0x7f0000001440)="39c90c1158e1ab5b77c4f0229ed23cc22ff000db1614e319ff204ece57c167f012e2d15721c01471db853677fb7d712a423e12e784514bebcad00afb8bd093577a09e2767c39c91d04fa1e851984d465e5dd70c4c597210bb8a3b207613cc81106057f3dd7adb88cc2d4b5e6ff1051e548bcc006f1bd078caacb4f6d8848e605aef192a496e3d6782f6dfe7def701de53a41f332d9a77e5bbe161009760e013620148169afcd6bfc62dcac806afc80773e099d8ef0c2623ea3c3316b1fa09abcdcef4a030a755fb2cdb1ddd0a0b724408fe30180f931148b1eaaf28415fab39aaad2f332aa5143bc89279323a2b2a6697b8e1d202c99aabe8c2b7be24c1362c7992179132dbfd398510f513d4e7a497a0195c9f3271091dc8067d96874edb829e64261a83863dacfb746ffc7c02c518def2fa2a160d2fe8a07dffc91bbeaf3463ad48159437ff83134d74b6ea257ad6783ec69351f5987a8f2f973d8fc2ea16d4b18b2a17db18fde0033e7687fa102b1b02038605997c9c1f5307612ac0d4795f8a56b58c9d247f41a2d57c7e533bf86feb80a6b4f83d45c7d60ee8b528a740e0fba37c36d5ad282b16a8fedddf7f158d1c4a368d807bca431a80f9fef197f8120e8695e847b06b9558a924622822d2608ab62f878e4413265152ad900c3accd0e60a060ed2f7384d4232b88432a0cdd81e736564e8300968877c0398fb816ef8a0d5c20839329f8d6e05f290abc0ee3f199d8618b58d093cb5d5d0d4bf0d5e5843c817826bf33151111d2f282cd48721c752fc0c62268473fb060c760cada06192b470b3204e7f4c968f5749def7ab4ee95e552c800b3808159075fc9b8a9e63090fdc216cbb4fe6ce31c12aa39f1d15e4cf3c8b560ca8fff4e023e2ae6921493827759216e08a5472ba772901d388ad30b8cf0aa15bd12c52529e298798b3a90e02f86a519a0d9569be5080f26ef59eb7f7efc5b8e658b256372f129a508f75e50027a1691937e78e68f0eb041fec73de0ef5b1c8c08b085a4f71b8f0988dc179a4ff9dc4f5c709f6392194a1da8e60e02937a076b8b319be52da19645602df10250e624ba80637234f72a36102f55f9289b4ce2e5d2cdbb084b7ecaa478ead33b9ce3d7ea0a9d45a92dfdc56f3164c986bc7ba93a4b51c00496e8ec3668f34410a7da110adef16fd2d4027a06345595374c74a5dcc27320454b418700b614d667a913129b98058fd29755da1332ab7bfa8325d3a7a83566454b90ff6362d713bff42c2b903082d6ff16c36b7b7481443523d82c1ff8108443bc635c8364725e5464d06fa346f1e91093cb3945e00f26f9154fe02cc193d2ca74e137b1943a729e21fbadeb6d65be0cccf1922c56b81896b15b12df5288aeeef93b1cf8d7f76da939b82d638122dedc6cdc4f4e90869421069e7cb0abdad08eeee5a4be2bb8a146c500d4daed3c9c2ad20a98879e31f2956b29ede05eb10b82d4e743b591503d628720c8e99f27574e4e6e01f8cb8195353415c7191c6fb26f822ec1713d3fc469e6aaab1cbf2075eb8cd912f913e9da7b66f65d11a16769300b63bb91f6bf63f158cf07ced499537f6f55fe95e3a8adaec9346ce22f6363ece0e246aff8b6e7fc72a9e406bdb9463937ce5e48d57f4d4280bb4e94d76f3336c7778d45828dad8c4155dc1314c27979b75a53d738520844a72dd02323c84bf16f5d83e32b119f24bc2b1a952b2d77efdc1f1a2882f2866566d75c787a6db4c14bf6d82441ea3a8fefd2ca1b8499b456608a595582aa03f99ae3ceea75464707be0456da882066c4a8abb71d890276b697fe0c931817382042218f3a6513a00e1cfcb0a17ffc82f41081ba815ed7989b918429427dcf302dbda3acd19924cc4f69dd7789d4e31be52f1064238abcd34589cd4b6a584c4158e4ee16364e5a05a28d221f732605ec2a618ab0de74139b615a4174ebe6efe7fe3e3bb5d99c90a19ffe39fa777fb6e44a91a01f767f740d91eaa5527713c23da4781be430577ebedc212404c63b1a8ff51c91c62d8647410738417ec19b17c5f901e6329f873508c4bb3f5b0aec0ebab258b9c96829b29be2464970b68fa60b23498fd3c3ca9173c37fdb827dff96b27b9292678dfa506ccb84b6724ca685205e681cf2c22c08dc71babd0dbec8e1fe68ca098614db5f56dbd2f84a36eaaf1a7b1488d879b15cccea98ceafa0ce8ab6591cf00cfda024206c00ae28075a9792335022610c0a0dc592d7ad7c003aeb7869e5eb072df47801392cb82c070f69052183acc010fe5b4ac22b2d8b7722f9920658b8c90473eb85d8ad26aabda5199a57544f6b0f90809670499ef7053b24526f1f07245401f3dff00dff31c5f815ec185f58ba3be632e390bfab1790b6d82c234e2338a350cd6a4ab6341d18b01596f6eb7aa36794f0774d6bf3d27480fe081dc809b50738dbb47719bad43fb299bc83e6c49bf8cc8c9f7bc58cf9696c77a37dcd2e95907d11caaa92de2358fc4dd83336e1273ffc2e86344311fcf4da531261b444300785a58294cc0e954510d026a5969a2daadc2650c63856dc754889d3d6a72e1d04a6294ba809b2f6329355f01c307868876a55e56b63d8d369f1952782061a3ee5a6bf64261c3003ffab3ee4124cb3d57d733b80bf3d8293b427762eadcd3bc94a127411e1c137c1a48f5a19d528e8f22e1713f9a1d45dc82ab9270eaad80ed0cae6291c27f573e175d56b510f12cbd8be79cd4248cd848906a814fa1c28c47c44f7ba776c5d0a156fddf7301011645986fe5570f76dd5a8441d9c40f7809c59187b3052d28fdfdeb96368fd47587ee35197da7ab3b1133254f696e44e24053b1b6cda1d8a2117040c2ba91b1b99b15eed0f3beeeccf96a55f738b42f5c4fc0ead873e35bf76c1d3970c9f4d1448e6e3b73c8d693ed328188154cb827e5f5f03575c77099710a80c6b1c53ad1c657bf1e89519eccb848b30f6c946d082af980563d7d7206a22d62479ef11f38f9ef9dd6aee83301fe42aeecbe0aaa7af1cd3c8b1ddca1752b887b97d6442f24236a6b57ba6de5ea9b071d78f2e45b436c535e592533780fa50fd6522c14b5b5ecd391bdbd7acbcf3d571731c604ed437fa1af9cd367a066e01f98c996fad367ec8e9d47b9f427ca299e982386970fe89c9da68cc72832d1d1e18934d5db7f49446ecacea9812a09b7186e51addb5d71c4e7cd2e44576ca87b3e2d92b69e3ae44a6df41214d4f6add3538a8bbe457cd6a3fd255afba7986a521ecae557409812e706764a29efe8ba1b34935549614bc151dfeed1c93f10483f9a867ca1b104f6942fa57cfe4fcf3ce24091279e3c0d17a4bfa0b6efa60c47ea9a7e42c43a2790663d6d702915e0c637b1fcaffcc0273a7d4cf00620f7117fd2d7a70ff9b06503d494a7da5d82d904fa995fd01073718997054aa5ba4f187685ca6a36be41f62e5af2dbc4fe739a3e4d2236756b8e9cd61790b1fc19a3cd3d924d8711e5b456121ebd0976d08b63a44f095aeb40f9d5b04ba9233e6efb0243dd95a8d119283452771bb0980e06c25027be6424c746b61cca317b69313b439950e52fcba852fc5eae8273a4bb288bf970b3ce9823f63ffd708232339dbc4bcc8e84ba885b21568decf985953042a70f37bc931ccf2b50102cac97fe0d2f0d11b80920299bc935c1494005085f60da5b5972bfc5e61ff5e736f7d15c4a9018614e628153d23fedc6b2ba9e71baae94c94154e0757b785973e0372845f40c61d82254fb6d79e1916bb8eb7873def79afeb2545fbc4cb1e84af9d4ca1da1de1c5a0f8b5001a54b4547d14623d407590bc0bf48c9d6cb1b5a2117db491942708a3c6baf79c5668ac786c5a57760e44cb5bb80412a352c803f47df5b38274381f09f2ccaa1212f601df91aa6f0dd9c54e5ad4aeb1eabc5746b90b5c574e5db8606675ffe0090497d0ca2e06bef28e40cfa70e07826f5c095a66c004e2f471c5b9f6c09197d6582f75e1c8c1dd9ec37c586756b26a8311f5b19e31b93865cbd632478f0c0e168f83e64947ee77b318f2738c42a266ace04f94afaa9166e595fcc09458987056664110430553b19f621414debc4d8ee3fa95f0681b3d8158a294308e6d81c4a47b6038b308a56814225dcc67d0cb5ba34deb5b2f33ba7bd41a2ff4fca9948c1016d51a87c7a9f41c85d711b0e9a90a2fe3da262e9f7820d137a03a0f66b3d8b8e00e2bbc06e755b722f2336c1fe585f66958db544d3b5bb9867f5cc8893274123f5818413ec873595aa2c86fb387caab1a4a0e9b50e555cab2cb4cb6b67b521dcfdcb92b683918a636965b4538986637c1ed6531443a26808dca", 0xc07}], 0x1, 0x0) 2018/03/31 07:26:28 executing program 7 (fault-call:7 fault-nth:32): mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) open(&(0x7f00000000c0)='./file0\x00', 0xa0441, 0x80) syz_mount_image$msdos(&(0x7f0000000140)='msdos\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x1, &(0x7f0000000100)=[{&(0x7f0000000480)="9196b107dc9e5c731d56d84afae6a7bf24", 0x11, 0x1f}], 0x0, &(0x7f0000000000)=ANY=[]) mkdir(&(0x7f0000000180)='./file0//ile0\x00', 0x112) rmdir(&(0x7f0000000080)='./file0//ile0\x00') mkdir(&(0x7f0000000340)='./file0//ile0\x00', 0x1) r0 = semget$private(0x0, 0x4, 0x21) semctl$GETPID(r0, 0x1, 0xb, &(0x7f0000000200)=""/154) 2018/03/31 07:26:28 executing program 3: mmap(&(0x7f0000000000/0xfe6000)=nil, 0xfe6000, 0x3000004, 0x32, 0xffffffffffffffff, 0x0) socketpair$inet6_sctp(0xa, 0x5, 0x84, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000080)={'bond0\x00', {0x2, 0x4e22, @multicast2=0xe0000002}}) set_robust_list(&(0x7f00000001c0)={&(0x7f0000000100)={&(0x7f00000000c0)}, 0xdc6, &(0x7f0000000180)={&(0x7f0000000140)}}, 0x18) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000002f40)={0x0}, &(0x7f0000003f80)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000000)={0xad1, 0x8, 0x8000, 0x8, r2}, 0x10) 2018/03/31 07:26:28 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x40, 0x0) utimensat(r0, &(0x7f00000000c0)='./control\x00', &(0x7f0000000100)={{0x77359400}, {0x0, 0x2710}}, 0x100) mkdir(&(0x7f000082f000)='./control\x00', 0x0) r1 = open(&(0x7f0000028000)='./control\x00', 0x0, 0x0) symlinkat(&(0x7f0000443ff6)='./control\x00', r1, &(0x7f000034aff8)='./file0\x00') mount(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='fuse\x00', 0x900c00, &(0x7f0000000200)="d221cd49b01f169ea53b6f6d4eaed5b771957d19fa174661ac11eeaefbba81731e0ea1e9583f2a0dd3396f64f2b6e7d299b630e2") name_to_handle_at(r1, &(0x7f0000d54ff8)='./file0\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="0c000000200000006efd18aa0bb62c7fe70731c0914bfb6fc138783f40f6f3c7e00568e29f3b6573326ba40823fc97d15732ee52fed04caf60ba6dee2fef14c39b785957f7c295fcb7757829cebea8c8b9485f6aefb7a01b45ea371ee7488014740211906a9dfe9aae5a82a55d2a8908c70ba464ee"], &(0x7f0000000040), 0x0) creat(&(0x7f000028f000)='./control/file0\x00', 0x0) unlink(&(0x7f0000e92ff0)='./control/file0\x00') 2018/03/31 07:26:28 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000003640)='/dev/ptmx\x00', 0x4000, 0x0) ioctl$TCGETA(r0, 0x5405, &(0x7f0000003680)) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000003700)='/dev/dsp\x00', 0x400002, 0x0) ioctl$TUNSETVNETBE(r1, 0x400454de, &(0x7f0000003740)=0x1) r2 = socket$inet6(0xa, 0x903, 0x3f) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) sendmmsg(r2, &(0x7f00000036c0)=[{{0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000440)}}], 0x1, 0x0) recvmmsg(r2, &(0x7f00000034c0)=[{{&(0x7f0000000000)=@ipx, 0x80, &(0x7f0000001300)=[{&(0x7f0000000140)=""/216, 0xd8}, {&(0x7f0000000080)=""/101, 0x65}, {&(0x7f0000000240)=""/4096, 0x1000}, {&(0x7f0000001240)=""/92, 0x5c}, {&(0x7f00000012c0)=""/36, 0x24}], 0x5, &(0x7f0000001380)=""/16, 0x10, 0x40}, 0x6}, {{&(0x7f00000013c0)=@llc={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, 0x80, &(0x7f0000001540)=[{&(0x7f0000001440)=""/207, 0xcf}], 0x1, &(0x7f0000001580)=""/176, 0xb0, 0x9}, 0x8}, {{0x0, 0x0, &(0x7f0000001940)=[{&(0x7f0000001640)=""/211, 0xd3}, {&(0x7f0000001740)=""/141, 0x8d}, {&(0x7f0000001800)=""/98, 0x62}, {&(0x7f0000001880)=""/185, 0xb9}], 0x4, 0x0, 0x0, 0x8}, 0x35}, {{&(0x7f0000001980)=@in6={0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000002f00)=[{&(0x7f0000001a00)=""/85, 0x55}, {&(0x7f0000001a80)=""/247, 0xf7}, {&(0x7f0000001b80)=""/18, 0x12}, {&(0x7f0000001bc0)=""/213, 0xd5}, {&(0x7f0000001cc0)=""/30, 0x1e}, {&(0x7f0000001d00)=""/123, 0x7b}, {&(0x7f0000001d80)=""/4096, 0x1000}, {&(0x7f0000002d80)=""/120, 0x78}, {&(0x7f0000002e00)=""/91, 0x5b}, {&(0x7f0000002e80)=""/81, 0x51}], 0xa, &(0x7f0000002fc0)=""/214, 0xd6, 0xffffffff}, 0x30}, {{&(0x7f00000030c0)=@generic, 0x80, &(0x7f0000003380)=[{&(0x7f0000003140)=""/152, 0x98}, {&(0x7f0000003200)=""/157, 0x9d}, {&(0x7f00000032c0)=""/142, 0x8e}], 0x3, &(0x7f00000033c0)=""/193, 0xc1, 0x1}}], 0x5, 0x0, &(0x7f0000003600)={0x77359400}) [ 197.424754] FAULT_INJECTION: forcing a failure. [ 197.424754] name failslab, interval 1, probability 0, space 0, times 0 [ 197.436184] CPU: 1 PID: 14244 Comm: syz-executor1 Not tainted 4.16.0-rc7+ #372 [ 197.443550] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 197.452902] Call Trace: [ 197.455495] dump_stack+0x194/0x24d [ 197.459128] ? arch_local_irq_restore+0x53/0x53 [ 197.463813] should_fail+0x8c0/0xa40 [ 197.467538] ? fault_create_debugfs_attr+0x1f0/0x1f0 2018/03/31 07:26:28 executing program 3: r0 = memfd_create(&(0x7f00000000c0)="2f7b06003170707031253a656d30f9", 0x0) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB='.'], 0x1) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0x9, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r2, 0x0) fcntl$addseals(r2, 0x409, 0x2) mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000000000/0x1000)=nil) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00006a4ff7)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) pipe2(&(0x7f0000e3eff8)={0x0, 0x0}, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r7 = dup3(r6, r5, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SMI(r6, 0xaeb7) ioctl$KVM_RUN(r7, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000100)="b9870300000f329a1a00c0fee400c4c31120660d4ab981030000b806000000ba000000000f30c4e2392db636fb66ed0f3266b817018ed0c4e161f1c70f01cf66b8dc008ec8", 0x45}], 0x1, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) [ 197.472644] ? kernfs_add_one+0x50/0x450 [ 197.476702] ? rb_first_postorder+0xa0/0xa0 [ 197.481023] ? kernfs_add_one+0x50/0x450 [ 197.485087] ? trace_event_raw_event_lock+0x340/0x340 [ 197.490278] ? trace_hardirqs_off+0x10/0x10 [ 197.494604] ? find_held_lock+0x35/0x1d0 [ 197.498665] ? __lock_is_held+0xb6/0x140 [ 197.502737] ? check_same_owner+0x320/0x320 [ 197.507054] ? lock_downgrade+0x980/0x980 [ 197.511202] ? rcu_note_context_switch+0x710/0x710 [ 197.516134] should_failslab+0xec/0x120 [ 197.520094] __kmalloc_track_caller+0x5f/0x760 [ 197.524662] ? string+0x180/0x200 [ 197.528100] ? kstrdup_const+0x39/0x50 [ 197.531976] kstrdup+0x39/0x70 [ 197.535153] kstrdup_const+0x39/0x50 [ 197.538848] __kernfs_new_node+0xa2/0x570 [ 197.542976] ? kernfs_dop_revalidate+0x380/0x380 [ 197.547728] ? snprintf+0xc0/0xf0 [ 197.551164] ? vsprintf+0x40/0x40 [ 197.554602] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 197.559515] ? cgroup_file_name+0x1d0/0x1d0 [ 197.563824] kernfs_new_node+0x80/0xe0 [ 197.567696] __kernfs_create_file+0x4b/0x320 [ 197.572089] cgroup_addrm_files+0x3c5/0xa70 [ 197.576398] ? cgroup_file_write+0x710/0x710 [ 197.580788] ? cpu_cgroup_css_alloc+0x30/0x30 [ 197.585278] ? __lock_is_held+0xb6/0x140 [ 197.589328] ? sched_online_group+0x4e0/0x4e0 [ 197.593801] ? cpu_cgroup_css_online+0x3a/0x50 [ 197.598372] ? online_css+0x224/0x2e0 [ 197.602159] css_populate_dir+0x198/0x420 [ 197.606294] cgroup_apply_control_enable+0x390/0xbc0 [ 197.611387] ? cgroup_propagate_control+0x570/0x570 [ 197.616391] ? css_populate_dir+0x289/0x420 [ 197.620698] cgroup_mkdir+0x56f/0xfc0 [ 197.624481] ? __lock_is_held+0xb6/0x140 [ 197.628531] ? cgroup_destroy_locked+0x750/0x750 [ 197.633271] ? rcu_read_lock_sched_held+0x108/0x120 [ 197.638280] ? kmem_cache_free+0x258/0x2a0 [ 197.642500] ? set_nlink+0xc1/0x160 [ 197.646109] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 197.651020] ? generic_permission+0x105/0x3c0 [ 197.655499] ? cgroup_destroy_locked+0x750/0x750 [ 197.660238] kernfs_iop_mkdir+0x153/0x1e0 [ 197.664370] vfs_mkdir+0x390/0x600 [ 197.667892] SyS_mkdir+0x220/0x2a0 [ 197.671417] ? SyS_mkdirat+0x2b0/0x2b0 [ 197.675289] ? do_syscall_64+0xb7/0x940 [ 197.679246] ? SyS_mkdirat+0x2b0/0x2b0 [ 197.683116] do_syscall_64+0x281/0x940 [ 197.686988] ? vmalloc_sync_all+0x30/0x30 [ 197.691118] ? _raw_spin_unlock_irq+0x27/0x70 [ 197.695591] ? finish_task_switch+0x1c1/0x7e0 [ 197.700065] ? syscall_return_slowpath+0x550/0x550 [ 197.704980] ? syscall_return_slowpath+0x2ac/0x550 [ 197.709892] ? prepare_exit_to_usermode+0x350/0x350 [ 197.714889] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 197.720238] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 197.725066] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 197.730238] RIP: 0033:0x454e79 [ 197.733410] RSP: 002b:00007f2d4ca09c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 197.741100] RAX: ffffffffffffffda RBX: 00007f2d4ca0a6d4 RCX: 0000000000454e79 [ 197.748351] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000020000340 [ 197.755599] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 197.762846] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000013 2018/03/31 07:26:28 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000180)='memory.swap.max\x00', 0x2, 0x0) sendfile(r1, r1, &(0x7f0000000080), 0x1) r2 = openat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x101000, 0x40) bind$vsock_dgram(r2, &(0x7f0000000140)={0x28, 0x0, 0x2711, @hyper}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000000c0)={r0, 0x3, 0x0, 0x7, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6}, 0x20) r3 = shmget$private(0x0, 0x2000, 0x2, &(0x7f0000ffb000/0x2000)=nil) shmctl$SHM_UNLOCK(r3, 0xc) [ 197.770094] R13: 00000000000003ea R14: 00000000006f7e90 R15: 0000000000000026 [ 197.778638] cgroup: cgroup_addrm_files: failed to add max, err=-12 2018/03/31 07:26:28 executing program 0: r0 = dup(0xffffffffffffff9c) ioctl$DRM_IOCTL_IRQ_BUSID(r0, 0xc0106403, &(0x7f0000000180)={0x100000000, 0x11e, 0x2, 0x6645}) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1=0xe0000001, @loopback=0x7f000001}, 0xb6) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f000043e000)={0x1, {{0x2, 0x0, @multicast1=0xe0000001}}}, 0x90) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000380)={0x2, {{0x2, 0x0, @multicast1=0xe0000001}}}, 0x88) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000695ffc)=0x314) [ 197.848005] x86/PAT: syz-executor3:14269 map pfn RAM range req write-combining for [mem 0x1780c0000-0x1780c3fff], got write-back [ 197.865735] FAULT_INJECTION: forcing a failure. [ 197.865735] name failslab, interval 1, probability 0, space 0, times 0 [ 197.876992] CPU: 0 PID: 14248 Comm: syz-executor7 Not tainted 4.16.0-rc7+ #372 [ 197.884353] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 197.893784] Call Trace: [ 197.896358] dump_stack+0x194/0x24d [ 197.899971] ? arch_local_irq_restore+0x53/0x53 [ 197.904618] ? __save_stack_trace+0x7e/0xd0 [ 197.908924] should_fail+0x8c0/0xa40 [ 197.912620] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 197.917700] ? kasan_kmalloc+0xad/0xe0 [ 197.921572] ? kmem_cache_alloc_node_trace+0x150/0x760 [ 197.926825] ? alloc_fair_sched_group+0x267/0x530 [ 197.931647] ? sched_create_group+0x35/0x70 [ 197.935946] ? cpu_cgroup_css_alloc+0xe/0x30 [ 197.940332] ? vfs_mkdir+0x390/0x600 [ 197.944026] ? SyS_mkdir+0x220/0x2a0 [ 197.947718] ? do_syscall_64+0x281/0x940 [ 197.951756] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 197.957101] ? find_held_lock+0x35/0x1d0 [ 197.961144] ? __lock_is_held+0xb6/0x140 [ 197.965191] ? check_same_owner+0x320/0x320 [ 197.969494] ? rcu_note_context_switch+0x710/0x710 [ 197.974404] should_failslab+0xec/0x120 [ 197.978356] kmem_cache_alloc_node_trace+0x5a/0x760 [ 197.983350] ? unregister_fair_sched_group+0x5e0/0x5e0 [ 197.988604] ? find_next_bit+0xcc/0x100 [ 197.992559] alloc_fair_sched_group+0x1f0/0x530 [ 197.997209] sched_create_group+0x35/0x70 [ 198.001336] cpu_cgroup_css_alloc+0xe/0x30 [ 198.005548] cgroup_apply_control_enable+0x44d/0xbc0 [ 198.010637] ? cgroup_propagate_control+0x570/0x570 [ 198.015639] ? css_populate_dir+0x289/0x420 [ 198.019938] cgroup_mkdir+0x56f/0xfc0 [ 198.023714] ? __lock_is_held+0xb6/0x140 [ 198.027755] ? cgroup_destroy_locked+0x750/0x750 [ 198.032487] ? rcu_read_lock_sched_held+0x108/0x120 [ 198.037977] ? kmem_cache_free+0x258/0x2a0 [ 198.042194] ? set_nlink+0xc1/0x160 [ 198.045797] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 198.050702] ? generic_permission+0x105/0x3c0 [ 198.055178] ? cgroup_destroy_locked+0x750/0x750 [ 198.059910] kernfs_iop_mkdir+0x153/0x1e0 [ 198.064037] vfs_mkdir+0x390/0x600 [ 198.067556] SyS_mkdir+0x220/0x2a0 [ 198.071076] ? SyS_mkdirat+0x2b0/0x2b0 [ 198.074940] ? do_syscall_64+0xb7/0x940 [ 198.078892] ? SyS_mkdirat+0x2b0/0x2b0 [ 198.082759] do_syscall_64+0x281/0x940 [ 198.086625] ? vmalloc_sync_all+0x30/0x30 [ 198.090750] ? _raw_spin_unlock_irq+0x27/0x70 [ 198.095224] ? finish_task_switch+0x1c1/0x7e0 [ 198.099694] ? syscall_return_slowpath+0x550/0x550 [ 198.104599] ? syscall_return_slowpath+0x2ac/0x550 [ 198.109504] ? prepare_exit_to_usermode+0x350/0x350 [ 198.114496] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 198.119839] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 198.124660] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 198.129824] RIP: 0033:0x454e79 [ 198.132989] RSP: 002b:00007f49041e4c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 198.140678] RAX: ffffffffffffffda RBX: 00007f49041e56d4 RCX: 0000000000454e79 2018/03/31 07:26:28 executing program 1 (fault-call:6 fault-nth:39): mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) open(&(0x7f00000000c0)='./file0\x00', 0xa0441, 0x80) syz_mount_image$msdos(&(0x7f0000000140)='msdos\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x1, &(0x7f0000000100)=[{&(0x7f0000000480)="9196b107dc9e5c731d56d84afae6a7bf24", 0x11, 0x1f}], 0x0, &(0x7f0000000000)=ANY=[]) rmdir(&(0x7f0000000080)='./file0//ile0\x00') mkdir(&(0x7f0000000340)='./file0//ile0\x00', 0x1) r0 = semget$private(0x0, 0x4, 0x21) semctl$GETPID(r0, 0x1, 0xb, &(0x7f0000000200)=""/154) 2018/03/31 07:26:28 executing program 5: perf_event_open(&(0x7f0000220000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x2000) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffff9c, 0x84, 0x6c, &(0x7f0000000080)={0x0, 0xc6, "14a1206e797ec31c165ffa8f3d4e6a143c4429849fad987c281cce0eac7cc84837b6d5ce93e01f8e408cd7e7909649688c34bb2a39cdd6c7fb39ca3d81a37a9b48f026ee411333a36d7901332cf9c1cc34c09e18fba8346284fd01f75f922fca76fe4753cf3dfc505e2f00d21db868bb51c4e08f8e4414f0faf8c8464fd9f207ef255da887b1b8ea9c550b811faabbdedc03f0c1aa9e646952a8a8ff597da788d13e1e9330e750db34ef5dd2092431564e3628bad8a6ed7e9d69d189311ed9cde759ba1f1520"}, &(0x7f0000000180)=0xce) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000001c0)={r1, @in={{0x2, 0x4e21, @local={0xac, 0x14, 0x14, 0xaa}}}, 0x0, 0x4, 0x1000, 0x8e, 0x41}, &(0x7f0000000280)=0x98) r2 = socket$inet(0x2, 0x5, 0x0) setsockopt$inet_int(r2, 0x0, 0xce, &(0x7f0000912ffc), 0x4) 2018/03/31 07:26:28 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000003000)=[{{0x0, 0x0, &(0x7f0000002000)=[{&(0x7f000000a000)=""/193, 0x41}, {&(0x7f0000006fc3)=""/61, 0x47}], 0x5b, &(0x7f0000004f99)=""/103, 0x67}}], 0x1, 0x0, &(0x7f0000002ff0)={0x77359400}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x5, &(0x7f0000002000)=@framed={{0x18}, [@call={0x85, 0x0, 0x0, 0x3}], {0x95}}, &(0x7f0000b80ff6)='syzkaller\x00', 0x3, 0xc3, &(0x7f0000386000)=""/195}, 0x48) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/backup_only\x00', 0x2, 0x0) getsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f00000000c0), &(0x7f0000000100)=0x4) 2018/03/31 07:26:28 executing program 6: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000000)=0x2, 0x4) sendto$inet(r0, &(0x7f0000865000), 0x6d, 0x0, &(0x7f0000fd9ff0)={0x2, 0x4e20, @rand_addr}, 0x10) getresuid(&(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)) [ 198.147925] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000020000340 [ 198.155170] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 198.162415] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000013 [ 198.169661] R13: 00000000000003ea R14: 00000000006f7e90 R15: 0000000000000020 2018/03/31 07:26:28 executing program 0: dup(0xffffffffffffff9c) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1=0xe0000001, @loopback=0x7f000001}, 0xb6) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f000043e000)={0x1, {{0x2, 0x0, @multicast1=0xe0000001}}}, 0x90) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000380)={0x2, {{0x2, 0x0, @multicast1=0xe0000001}}}, 0x88) getsockopt$inet_buf(r0, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000695ffc)=0x314) 2018/03/31 07:26:28 executing program 4: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind(0xffffffffffffffff, &(0x7f00005a2000)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket$can_raw(0x1d, 0x3, 0x1) close(r1) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000004000)) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f0000000000)={0x0, 0x0, 0x6}) ioctl$sock_SIOCINQ(r1, 0xc0189436, &(0x7f0000000000)) socket$netlink(0x10, 0x3, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x48, &(0x7f0000000040)=[@in6={0xa, 0x4e20, 0x8, @loopback={0x0, 0x1}, 0x100}, @in={0x2, 0x4e23, @local={0xac, 0x14, 0x14, 0xaa}}, @in6={0xa, 0x4e24, 0x7f, @mcast1={0xff, 0x1, [], 0x1}, 0xffff}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000140)={r3, 0x1ff}, 0x8) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f00004f0000), 0x4) 2018/03/31 07:26:28 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1=0xe0000001, @loopback=0x7f000001}, 0xb6) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f000043e000)={0x1, {{0x2, 0x0, @multicast1=0xe0000001}}}, 0x90) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000380)={0x2, {{0x2, 0x0, @multicast1=0xe0000001}}}, 0x88) getsockopt$inet_buf(r0, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000695ffc)=0x314) 2018/03/31 07:26:28 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/packet\x00') getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000080)={0x0, 0x9, 0x1f, 0x5, 0x825a, 0x1}, &(0x7f00000000c0)=0x14) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000000100)={r3, 0xffffffffffff95f3}, &(0x7f0000000140)=0x8) ioctl$KVM_SET_NR_MMU_PAGES(r1, 0xae44, 0x5347fd36) [ 198.261873] x86/PAT: syz-executor3:14269 map pfn RAM range req write-combining for [mem 0x1780c0000-0x1780c3fff], got write-back 2018/03/31 07:26:29 executing program 6: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000140)={0x0, 0x1}, &(0x7f0000000180)=0x8) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x480, 0x0) unshare(0x0) r1 = accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x800) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x7, &(0x7f0000000080), &(0x7f00000000c0)=0x4) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000564000)=@abs, 0x6e, &(0x7f0000451ff0)=[{&(0x7f0000007000)="002a932f01000000cf960802e02348f800000000001c0003f2a576", 0x1b}], 0x1, &(0x7f00001f9fe0)}, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000007000)={0x0, 0x0, 0x8}) ppoll(&(0x7f0000000500)=[{r2, 0x1}, {r0, 0x60}, {r0, 0x531}, {r0, 0x2000}, {0xffffffffffffffff, 0x100}, {r2, 0x408}, {r0, 0x200}, {r1, 0x8000}], 0x8, &(0x7f0000000580), &(0x7f00000005c0)={0x7ff}, 0x8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000380)='IPVS\x00') sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40005a00}, 0xc, &(0x7f0000000480)={&(0x7f00000002c0)=ANY=[@ANYBLOB="ff000099613800"], 0x1}, 0x1, 0x0, 0x0, 0x20008800}, 0xc0c0) accept4$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, @remote}, &(0x7f0000000200)=0x1c, 0x0) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000240), &(0x7f0000000280)=0x4) socket(0x10, 0x802, 0x0) ioctl$VT_WAITACTIVE(0xffffffffffffffff, 0x5607) write(0xffffffffffffffff, &(0x7f0000000640)="24070000000000000000d3b720f0ce83a80075060000ffa89d2c37d9ed3bea9d596bf3e2ffb4d17a02", 0x29) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000140)={0x6, 0x0, 0x8002, 0x8000, 0x0, 0x9, 0x8, 0xbb2d}, 0x20) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000eacfd0), 0x0, 0x0) mount(&(0x7f0000001600)='./file0/file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000000)='9p\x00', 0x0, &(0x7f0000000100)) [ 198.390222] 9pnet_virtio: no channels available for device ./file0/file0 [ 198.420497] FAULT_INJECTION: forcing a failure. [ 198.420497] name failslab, interval 1, probability 0, space 0, times 0 [ 198.431771] CPU: 0 PID: 14274 Comm: syz-executor1 Not tainted 4.16.0-rc7+ #372 [ 198.439128] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 198.448468] Call Trace: [ 198.451039] dump_stack+0x194/0x24d [ 198.454645] ? arch_local_irq_restore+0x53/0x53 [ 198.459301] should_fail+0x8c0/0xa40 [ 198.462992] ? kstrdup+0x39/0x70 [ 198.466340] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 198.471428] ? cgroup_apply_control_enable+0x390/0xbc0 [ 198.476684] ? kernfs_iop_mkdir+0x153/0x1e0 [ 198.480983] ? vfs_mkdir+0x390/0x600 [ 198.484677] ? SyS_mkdir+0x220/0x2a0 [ 198.488367] ? do_syscall_64+0x281/0x940 [ 198.492406] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 198.497751] ? find_held_lock+0x35/0x1d0 [ 198.501792] ? find_held_lock+0x35/0x1d0 [ 198.505835] ? __lock_is_held+0xb6/0x140 [ 198.509883] ? check_same_owner+0x320/0x320 [ 198.514186] ? rcu_note_context_switch+0x710/0x710 [ 198.519094] ? rcu_read_lock_sched_held+0x108/0x120 [ 198.524096] should_failslab+0xec/0x120 [ 198.528048] kmem_cache_alloc+0x47/0x760 [ 198.532086] ? memcpy+0x45/0x50 [ 198.535343] ? kstrdup+0x59/0x70 [ 198.538690] __kernfs_new_node+0xe2/0x570 [ 198.542819] ? kernfs_dop_revalidate+0x380/0x380 [ 198.547558] ? snprintf+0xc0/0xf0 [ 198.550991] ? vsprintf+0x40/0x40 [ 198.554426] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 198.559334] ? cgroup_file_name+0x1d0/0x1d0 [ 198.563637] kernfs_new_node+0x80/0xe0 [ 198.567505] __kernfs_create_file+0x4b/0x320 [ 198.571894] cgroup_addrm_files+0x3c5/0xa70 [ 198.576201] ? cgroup_file_write+0x710/0x710 [ 198.580591] ? cpu_cgroup_css_alloc+0x30/0x30 [ 198.585070] ? __lock_is_held+0xb6/0x140 [ 198.589113] ? sched_online_group+0x4e0/0x4e0 [ 198.593584] ? cpu_cgroup_css_online+0x3a/0x50 [ 198.598142] ? online_css+0x224/0x2e0 [ 198.601926] css_populate_dir+0x198/0x420 [ 198.606055] cgroup_apply_control_enable+0x390/0xbc0 [ 198.611142] ? cgroup_propagate_control+0x570/0x570 [ 198.616140] ? css_populate_dir+0x289/0x420 [ 198.620441] cgroup_mkdir+0x56f/0xfc0 [ 198.624218] ? __lock_is_held+0xb6/0x140 [ 198.628261] ? cgroup_destroy_locked+0x750/0x750 [ 198.632994] ? rcu_read_lock_sched_held+0x108/0x120 [ 198.637992] ? kmem_cache_free+0x258/0x2a0 [ 198.642209] ? set_nlink+0xc1/0x160 [ 198.645814] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 198.650720] ? generic_permission+0x105/0x3c0 [ 198.655193] ? cgroup_destroy_locked+0x750/0x750 [ 198.659926] kernfs_iop_mkdir+0x153/0x1e0 [ 198.664055] vfs_mkdir+0x390/0x600 [ 198.667574] SyS_mkdir+0x220/0x2a0 [ 198.671092] ? SyS_mkdirat+0x2b0/0x2b0 [ 198.674959] ? do_syscall_64+0xb7/0x940 [ 198.678912] ? SyS_mkdirat+0x2b0/0x2b0 [ 198.682776] do_syscall_64+0x281/0x940 [ 198.686640] ? vmalloc_sync_all+0x30/0x30 [ 198.690766] ? _raw_spin_unlock_irq+0x27/0x70 [ 198.695237] ? finish_task_switch+0x1c1/0x7e0 [ 198.699710] ? syscall_return_slowpath+0x550/0x550 [ 198.704618] ? syscall_return_slowpath+0x2ac/0x550 [ 198.709524] ? prepare_exit_to_usermode+0x350/0x350 [ 198.714522] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 198.719869] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 198.724697] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 198.729864] RIP: 0033:0x454e79 [ 198.733036] RSP: 002b:00007f2d4ca09c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 198.740722] RAX: ffffffffffffffda RBX: 00007f2d4ca0a6d4 RCX: 0000000000454e79 [ 198.747971] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000020000340 [ 198.755218] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 198.762464] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000013 [ 198.769711] R13: 00000000000003ea R14: 00000000006f7e90 R15: 0000000000000027 [ 198.778325] cgroup: cgroup_addrm_files: failed to add max, err=-12 2018/03/31 07:26:29 executing program 7: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) open(&(0x7f00000000c0)='./file0\x00', 0xa0441, 0x80) syz_mount_image$msdos(&(0x7f0000000140)='msdos\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x1, &(0x7f0000000100)=[{&(0x7f0000000480)="9196b107dc9e5c731d56d84afae6a7bf24", 0x11, 0x1f}], 0x0, &(0x7f0000000000)=ANY=[]) mkdir(&(0x7f0000000180)='./file0//ile0\x00', 0x112) rmdir(&(0x7f0000000080)='./file0//ile0\x00') mkdir(&(0x7f0000000340)='./file0//ile0\x00', 0x1) r0 = semget$private(0x0, 0x4, 0x21) semctl$GETPID(r0, 0x1, 0xb, &(0x7f0000000200)=""/154) 2018/03/31 07:26:29 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1=0xe0000001, @loopback=0x7f000001}, 0xb6) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f000043e000)={0x1, {{0x2, 0x0, @multicast1=0xe0000001}}}, 0x90) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000380)={0x2, {{0x2, 0x0, @multicast1=0xe0000001}}}, 0x88) getsockopt$inet_buf(r0, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000695ffc)=0x314) 2018/03/31 07:26:29 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x100000000106, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) writev(r0, &(0x7f000036bfd0)=[{&(0x7f0000b51000)="ebb29c2aa804af648d63b2908439b40213", 0x11}], 0x1) ioctl$TCSETAW(r1, 0x5402, &(0x7f00000002c0)={0x7ff, 0x80000001}) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000040)=0x4000000058) read(r0, &(0x7f0000000080)=""/1, 0x1) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000000)={0x7, 0x200, 0x8, 0x5, 0x0}, &(0x7f00000000c0)=0x10) getsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000140)={r2, 0x1}, &(0x7f0000000180)=0x8) ioctl$TCSETA(r1, 0x5402, &(0x7f0000a26fec)) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, &(0x7f00000001c0)={r3, @in={{0x2, 0x1, @loopback=0x7f000001}}}, 0x84) 2018/03/31 07:26:29 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000b6dfc8)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00000011c0)=ANY=[@ANYBLOB="020100020c000000000000000000000005000600000000000a00000000000000ff0100000000000000000000000000010000000000000000050005000000fe80000000000000000000000000a7020000000000000000d696cbd9d42619a5f1ca0e4787b3519ccf4c277c4270ae7e1ac9ac97cc775331a01c93c9c5f7ce5be75e8abda629c1aaa717baf26e702c30c1265cb62ba2d5a9e1aaa8b220f23065045dd81350986cd58c5635e395034876d9533402a23ae26e5deefcc0e85e0deefb78a1bb5a96fb29e296be51ef7eb495c42cfc23297e32157fa0c0479a262c7bf4b243af0be3509b9a1c011bf701000000000000000000"], 0x60}, 0x1}, 0x0) fcntl$getownex(r0, 0x10, &(0x7f00000013c0)={0x0, 0x0}) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000040)={0xffffffffffffffff}) setsockopt$inet6_MCAST_LEAVE_GROUP(r2, 0x29, 0x2d, &(0x7f0000001400)={0x8, {{0xa, 0x4e20, 0x9, @ipv4={[], [0xff, 0xff], @broadcast=0xffffffff}, 0xde}}}, 0x88) r3 = syz_open_procfs(r1, &(0x7f00000000c0)='net/nfsfs\x00') ioctl$DRM_IOCTL_MODE_SETCRTC(r3, 0xc06864a2, &(0x7f00000012c0)={&(0x7f0000000000)=[0x10000, 0x7f, 0x15], 0x3, 0x773, 0x7fffffff, 0x81, 0xce, 0x20, {0x3, 0x4, 0xfffffffffffffffe, 0x7fff, 0x0, 0x3, 0x8, 0x4, 0x20, 0x81, 0x0, 0x1, 0x47cf5e1a, 0xc9, "1062c16cc538d0963cdab7b06f9fcd9b2b13738a14af98f8c67f6f7f25c4c43d"}}) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/pfkey\x00', 0x2404, 0x0) recvfrom$inet(r4, &(0x7f0000000180)=""/4096, 0x1000, 0x100, &(0x7f0000001180)={0x2, 0x4e23, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) 2018/03/31 07:26:29 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/wireless\x00') readv(r0, &(0x7f0000000580)=[{&(0x7f0000000400)=""/250, 0xfa}], 0x1000000000000181) r1 = syz_open_dev$tun(&(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) ioctl$EVIOCGSND(r0, 0x8040451a, &(0x7f0000000180)=""/16) ioctl(r1, 0x5, &(0x7f00000001c0)="fdc28d61dbf708ccb541e7ccf9f425b585ef4ff89769921bb73339c62dcbb419b0ed598b4390c6d070c2d007e30dafc7184a2171423868401f4fdb5e6a171d1f242d3dceaf23358a50760a12b4244c3d4e588163b175be09034f5784fa43d4fe57c9a98738e9cfa18e0b935031bc833296af1b8b2576f4fb7cae1c1fb033c621a32584dbcff4a094e8502cd79813bde5a8e8d7a3b7145149683e19203c4b634046ee17b0") ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x4001}) fcntl$getownex(r0, 0x10, &(0x7f0000000140)) read(r0, &(0x7f0000000040)=""/241, 0x6c360e15) 2018/03/31 07:26:29 executing program 1 (fault-call:6 fault-nth:40): mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) open(&(0x7f00000000c0)='./file0\x00', 0xa0441, 0x80) syz_mount_image$msdos(&(0x7f0000000140)='msdos\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x1, &(0x7f0000000100)=[{&(0x7f0000000480)="9196b107dc9e5c731d56d84afae6a7bf24", 0x11, 0x1f}], 0x0, &(0x7f0000000000)=ANY=[]) rmdir(&(0x7f0000000080)='./file0//ile0\x00') mkdir(&(0x7f0000000340)='./file0//ile0\x00', 0x1) r0 = semget$private(0x0, 0x4, 0x21) semctl$GETPID(r0, 0x1, 0xb, &(0x7f0000000200)=""/154) 2018/03/31 07:26:29 executing program 3: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$rdma_cm(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="05000000100000fa", @ANYPTR=&(0x7f0000000400)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003ed0492a5500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], @ANYRES32=0xffffffff, @ANYBLOB='\x00\x00\x00\x00'], 0x18) [ 198.874427] FAULT_INJECTION: forcing a failure. [ 198.874427] name failslab, interval 1, probability 0, space 0, times 0 [ 198.886133] CPU: 0 PID: 14320 Comm: syz-executor1 Not tainted 4.16.0-rc7+ #372 [ 198.893504] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 198.902856] Call Trace: [ 198.905444] dump_stack+0x194/0x24d [ 198.909080] ? arch_local_irq_restore+0x53/0x53 [ 198.913759] should_fail+0x8c0/0xa40 [ 198.917481] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 198.922586] ? trace_hardirqs_off+0x10/0x10 [ 198.926913] ? find_held_lock+0x35/0x1d0 [ 198.930976] ? __lock_is_held+0xb6/0x140 [ 198.935050] ? check_same_owner+0x320/0x320 [ 198.939385] ? rcu_note_context_switch+0x710/0x710 [ 198.944322] should_failslab+0xec/0x120 [ 198.948293] kmem_cache_alloc_trace+0x4b/0x740 [ 198.952884] blkcg_css_alloc+0xc8/0x6b0 [ 198.956860] ? blkcg_deactivate_policy+0x430/0x430 [ 198.961791] ? __lock_is_held+0xb6/0x140 [ 198.965856] cgroup_apply_control_enable+0x44d/0xbc0 [ 198.970949] ? cgroup_propagate_control+0x570/0x570 [ 198.975955] ? css_populate_dir+0x289/0x420 [ 198.980348] cgroup_mkdir+0x56f/0xfc0 [ 198.984131] ? __lock_is_held+0xb6/0x140 [ 198.988175] ? cgroup_destroy_locked+0x750/0x750 [ 198.992913] ? rcu_read_lock_sched_held+0x108/0x120 [ 198.997907] ? kmem_cache_free+0x258/0x2a0 [ 199.002121] ? set_nlink+0xc1/0x160 [ 199.005727] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 199.010635] ? generic_permission+0x105/0x3c0 [ 199.015110] ? cgroup_destroy_locked+0x750/0x750 [ 199.019847] kernfs_iop_mkdir+0x153/0x1e0 [ 199.023977] vfs_mkdir+0x390/0x600 [ 199.027497] SyS_mkdir+0x220/0x2a0 [ 199.031023] ? SyS_mkdirat+0x2b0/0x2b0 [ 199.034892] ? do_syscall_64+0xb7/0x940 [ 199.038849] ? SyS_mkdirat+0x2b0/0x2b0 [ 199.042716] do_syscall_64+0x281/0x940 [ 199.046581] ? vmalloc_sync_all+0x30/0x30 [ 199.050706] ? _raw_spin_unlock_irq+0x27/0x70 [ 199.055179] ? finish_task_switch+0x1c1/0x7e0 [ 199.059653] ? syscall_return_slowpath+0x550/0x550 [ 199.064559] ? syscall_return_slowpath+0x2ac/0x550 [ 199.069468] ? prepare_exit_to_usermode+0x350/0x350 [ 199.074464] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 199.079809] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 199.084635] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 199.089803] RIP: 0033:0x454e79 [ 199.092969] RSP: 002b:00007f2d4ca09c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 199.100656] RAX: ffffffffffffffda RBX: 00007f2d4ca0a6d4 RCX: 0000000000454e79 [ 199.107904] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000020000340 [ 199.115152] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 199.122398] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000013 [ 199.129644] R13: 00000000000003ea R14: 00000000006f7e90 R15: 0000000000000028 2018/03/31 07:26:30 executing program 5: r0 = socket(0x0, 0x0, 0x0) bind(r0, &(0x7f0000000580)=@generic={0x1e, "0103000000000500ffffffffffffffe409a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f84b9a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f131668ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c801f70dc136cb184a"}, 0xffffffffffffff3e) unshare(0x60000000) getuid() getgid() r1 = getpid() getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@local, @in6=@ipv4={[], [], @loopback}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@remote}}, &(0x7f0000000200)=0x515) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f00000004c0)={0x0, @in={{0x2, 0x4e24}}, 0x200, 0x2}, &(0x7f00000002c0)=0x90) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000740)={r3, 0x7}, &(0x7f0000000780)=0x8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000e00), &(0x7f0000000e40)=0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000000)=0xffffffffffffff25) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001100)={{{@in6=@local, @in=@multicast2}}, {{@in6}, 0x0, @in=@loopback}}, &(0x7f0000001200)=0xe8) r4 = accept4$llc(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000000240)=0x10, 0x800) gettid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001400)={0x0}, &(0x7f0000001440)=0xc) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000180)) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000180)={'\x00', &(0x7f0000000600)=ANY=[@ANYBLOB="8d3980c4257c7646c65bde1da1a5c9069bcfe5b621c64c383eaa32c1789f62e4b9c28493c0789320cb09ebf4db3b4165824dc780b97b071feede67bed04f0928d1bf187b1116f43ef39bbaa91fed794e157e3f6643366c0c1f7961da57f344b624aa6d55069a73617767393c055b8338744516f6618c5015817625dff7fa773dc84273783f60f7f471c4cfd2b16b34c44148cd4cee525eb2d5714ace884ae652e46fdf2bd31937eb06659fa5cc38bf64cd09264e6c9fb877bc6a98c0cb927109dfb8cddaf6b423befd56da17cd01e0b5b796d5c97454421629c6e7e295ea13baa6459aad052961a87b15fb4bb34a29a19d86070d6aea", @ANYRES64=r2, @ANYRES32=r5, @ANYRES64, @ANYRES64, @ANYRES16, @ANYRES32=r1]}) ioctl$sock_inet_SIOCGARP(0xffffffffffffffff, 0x8954, &(0x7f0000000400)={{0x2, 0x0, @rand_addr=0x8000}, {0x307, @random="04d8d2a5efdf"}, 0x0, {0x2, 0x4e24, @multicast2=0xe0000002}, 'bridge0\x00'}) connect$inet(r4, &(0x7f00000007c0)={0x2, 0x4e21, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) accept4$ax25(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000480)=0xffffff16, 0x0) getsockopt$IPT_SO_GET_INFO(r6, 0x0, 0x40, &(0x7f0000000380)={'security\x00'}, &(0x7f0000000280)=0x54) recvfrom$ax25(0xffffffffffffffff, &(0x7f0000000080)=""/133, 0x85, 0x10100, &(0x7f00000001c0)={0x3, {"ddf6d4b4097ce5"}}, 0x10) 2018/03/31 07:26:30 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00002ac000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x2, 0x300) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000000)=0x200000000) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000001580)={0x8, {{0x2, 0x4e21, @broadcast=0xffffffff}}, 0x0, 0x3, [{{0x2, 0x4e23, @loopback=0x7f000001}}, {{0x2, 0x4e21}}, {{0x2, 0x4e23, @rand_addr=0xfffffffffffffffe}}]}, 0x210) sendmsg$nl_generic(r1, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x1418, 0x1d, 0x2, 0x70bd27, 0x25dfdbfe, {0x19}, [@nested={0x124c, 0x87, [@typed={0x10, 0x1e, @str='/dev/audio\x00'}, @generic="14ebe01423bdf5c462a5ce3ae7ede1edeba447c3541a40746faf8d1c934abfb41d6d545406dd8c8211008411f764642bcae5bcc41cc39d3754d984dd517666928b7c4c6d0f95492a079f94be92daa18527a77ec4798e41ffba8fcd7a8ec68b34da572f6592a659c667744fbf6b3638222edc6754ba283635e2e2145420268b8f13f5efdb4c6e844176a7fb0a783b5032d3a9a645c31099c2e913f1cbaa29b530b4f08a18798a4ba5ca692ea42f7f15092485", @generic='Z', @generic="31cb714ce7fdb6d8516336530f5558a0ef227821ea0fcda19e89f4a047914f3ce5c6075cbd7d1898cb75ad4137eceff29df1007957b70ab90b8bdeedb00f4891030cf006227260522631fc9b41f876e0d0f54d1a662b3415c733e4030daf9bf087974dc95d0ae9bc0d8394cc8d31cbb0e999f32f115625dfd61777ff11dd0e0a1090b191dee722216f96bdafbf15408c2cf6098387c3d22fef2ee29c803d3536b7ab575bba1169c82a087ff94cb00e496aafe4183401fba22905051c033bd7e0628c9520184727d12997e8c8d937d71f3a213e61f45f", @typed={0x4, 0x77}, @generic="5ce900288d4cf4d12a0ee483b2032368f527a8b86a1de16ceae02fdc610fd4873806", @generic="72efadfc7022e12b2bbad52da5ed15ffafad664d1a35ecdaee9914dd8b4966423cffb28006dd000bf194dc656018e0e9af52c7578df1379f5afbfc1534421453e99215fea70e8b7a16ca00804ea8e26fe3d3bb256dfc199ee87b043d5d1cc37a91c2325886187bd3aa287f3e07d5374b2fa071", @typed={0x14, 0x1c, @ipv6=@ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, @generic="31260800a1c251950fdd7f2712d4bcf1f868443ddc463ad8be0f0351a09244a0db05f193453da7fc0e10ed5c9939c120bdd787432ed7e81f68f77d0ce2a9864dd8647383f98443110c8deeb3ac65108bb1a31872b5c887ea774173bb6df70f2c54b8f9670b24df4a0367c5a21c8ef48bbadc5e12788f57424d560d4b1177a8d45f2fef489748f6b6146e11119ca9258fde84760151b64ae92395c8616d33efdcf4153f64153ecce786328e2953d5c19c93f7a8ab34a6c59155eb315974faf892c0bc95671f6f05219b508315ade731eb307380d8611480d8d2b1de357f392b5b1590753a89f749a6dbe61163c223116f3e4d1fd891284017097c8379821c9064e682ee55fa285464521e63d43fbef037203e170f231422a4bc41d91b680a4b9cc2edb65ea4077a509ff1f4065f4f2e35277253bbf04f26640a91a5b9eacb04720957cab65485fcc8f57f6f7d1dc0b7915d68150561e1a76481a24b9d73c1a69db8a7ad9bfa799ab6d9a624103caa2d46e3000f55211c8ea8740be6beeecc9d3ef669c07646798afa6c535c2a4f4c4e8837ecc51060df6fc7dfac57d9ead38144ca00c3d8f6b0b13eefcf6c764792e81318c846c2be379ab5e8afbfdb1e2400d08017aaacce9d9cec390e554f3be1e5d8c29d1da53ba6a80cdef1c3f6055ae4a10d119eab92374126c5e7b08de3e5874691016a64d39dd5d4ef41294d6275a3184d3e59116c6d8da130e96633cc4a731d551e224951f73e88a766714c6655bc9846acb82ed92394714c9eb1bdee232fb999db8b9fdaa945d76d626b85c992a8b54da346fde4708d2e3a42ddd4595c149660e5f93b0000cb8f4ddc0e1d25c4dce8b76669b6c7b376b74100c95d722fb29e05fce589e1355158c5ddf7c4a2814b084cd4945492c9199cb8616780f7b0ec5b157dacef4e2f98f2f1ea5f3ed3d59a27edab6fbe94a4f17b55ce60033ffb5f32e8e27379a07d9b297f628ad96e57be3dcb113051e79d829e1dad51db6a13afbaaddf29223b26e0e943475966c6e4b54508b1e6b5ed325cbd7aef0360a02ae9c3268413f062dc2064bb8d491ec1d2c27b5bd1657fa39f855c067e6b7c222412370ff5ea8db832ffe38c6143da2ec4dd34d9ea8641b95719d9d92a7b1e349840ec0bc6841a425afb66222bd430f71a7f444a0f151597234f20be7ec62ea8da02e6026d7cd825248796abbdbc60f0eac0fb184f3af46454641dadb1b04edb16fbfd27ce758ccbea5732f81b1c3267bdcc758cbb5a89915c86f049b9e45714d0b6737b9f9085a4b92d242e5d1a524cfc22f5b2e03401744af88e7261677cfe8b66f78f02b0d19f3c09721ea06bd3c5e69917da957e6df23a3375cfa472c7849b9da13edb67526e7645f6a9046b40a80752a6246d55709cc5204c3c9f71a9b3156ced31cdc146945dfa3c69d1c9ee33216eb3c3ea5c09a1141b0f34280490b0aae6da44a29423b73e556d0cc65a8aa023f5924ebaa2b82a541e38f1e2b07fbb139d9fd2f790c2e86163f7ca9d20807819394efeaa7216528480c04ed3b9b7167e601045b473e8b26cf83f62e7cc29a44cf24f255b7fe946b3c6b78011f088aa6408151a3a988ceca2dd0c831efe16a497af42a9dffc4faf5f5ba4d0aad90a5697776550175b3533d633f353b53fadeabd850416c29c74f531e767670b3274ae609283dbac1c34013fd9466a817e8d40db741d5ef8b9788516f34b73e8fedd0377849e13c01e60a34492f953c7681448cfa4e976d230fa1c8812fe58118563f194626724d05ca49f35b812369cde457e4e3c5998a18c56eb85d8500ac9d408e9935457963663fc873d3e9b72bf0272e86ee7b1ec74f37cc139dc721b5da2c49d50dda27178ddddde0a3e62804b4976637159a551b8ac7df4441edee7cdfdc0ab62dc60d2119ad5f372e93c4e97f17a8ad8fabce2ab34168838c9febdcd63ef4db68302450fe9371b45965319c4eb1f4d8799e200a07b51e3057bb736ff3d33aee484ba092df93faaabc67ecfa4dbd125d5dcc174652df25982f6f2721ae4e888eda48771929ac2997dc89225236b235f6e5caad316a08089665d87f71bd059a43cd99becd3858463dc48ec668f1a659bcfed105a6e4ab0bc2935dcb3371f7de5fe421f890658d4b349ac405c7363d15f138a154758d2d1ee97c42b739e18dcd0e445cc5c48722c92f4f8f7f1769d99ee82aa2fec14a45636bab20e3fe486860e850f258c53c661f207308677869e4accf0f60110c7e87aa2ff577b01f1f4fd8ccf5e8a7312ff41daef8187afb0bc31e21a16a04a2f1b3be90e821d645328a12470b23e5e76ceec54dda5d5c4185803124349d2bce7c8148c397d8835c943a732ea276cd9906264b346fc46545780b64ce83382647b444bc32b6c1452885cf25086e62176e84ee05f51c158d93e4388347a3cc9e3f17be075603448a316ac1588678376e56ca28c226773e1a6f53174f1537e827ae82335e4be801996409a70fd13343d28b5a47d86f01d8891f3e5093a6a0259e2267b4d069ab1134b8ee71231f29765c1648dd411c8dd2fadf22c59b84402a4c515c1f742863f6cdfef54a0117321beef0b74479ac9b406d5a8f8ce56b26f85f8bd4de2ea04058897fcea8fde2e571ad26c6b87b05b118e17df37734bc929f62c0069eac7b33f8c5184b9a5c43771acd7ae2ba27828a9f5dc66c610100b229eb351f390253050c13367dcf653efe5bb4a9ac4a61fca9bfdd47f40a6188c907824860e56a9d125e31452182b1929490694ff5137beac67baac4402e7ca4a42c8cdabfed618284f7f263c2d903fb87d82d9cc2896250cb34d0c8f35fa9d2149841661bd85919e1ea9e0e428e059750e87af7428cde1aa3d4fbe7212c046d9d5a9a256a8fd007de28fa275db6df7dff274ec7ce815cace2dd737b6b247808e9d6a7b62e4173b6e50d54a7d4bd19691e0ef774a9924d48b72a6fbfa55f06ffe847c2d3abb3071cfa5683df525decc99d2f88c5091002c964562fbfbcd49a369449f73a53e5a1f7486852d30bc07589195853f9f2cfcdfbfab3002ee1ea8286f665ec07b04625d2b36e8d962edd4961f31aff27ab3e59756b6c747d2b1a8e64af1f582331467a576469defc87ccc767717048b24c7e8462a59d494d083fa452fc99335b03b3a4641cacc0ed4e627587d89a03f9c9752b3befe14977e403fd3888a3a6aa1e0b5d0a395e8174f3668e4c48d231479c571cc8ee47301609a75c98df87203f4c0ebf84dbe8fd81b6462462cfb4b91f036074ec1d6bbcee6fe10e834a8d666685c5e75ff17d1ede4cc3aaf040482d61def077eae50f6ca7cf23d2515145bd89a807ee255a508e6966a5203a43bad31d1b742208e58375b23ff6048cff2b41e089e979bdeaa90f0e30dff3c3ace050301794f23fda334775a8a754c5a355a9b00976e821e2b8a1f578e2f1c4a2e566a35c39f2c12320b90d231438705a52a6c405d9de99dde4ec4326290d73d65c462eebbc4c3b7045d7d263cc7969f6e4304f40f8e9c85b7ab594d764831b7dca0426152b462f036a732d4e5f6337b1c3df2322cbd83047f327c7474942fb943d5d42f48ff806ca1696758f64ff4753db2a922d06e42f171f9c6198cb39e12938d72542b7f985f086ad4db032fac88f5c8f68fc64e309e41fcf8fc763dc865b682a28eff826b284d246023de6a5bf9881be494a381a59d5830dbf35c4cb3339dc3cf0068612820a5637af856b12bd84dde03dacfb7bf031efbac3690f63f3b44df30071d6866c9b6e247a22a8e8dd9a54a67e718b5be73d2eeb2c32b20072d4aada535256bfaf4c427857447fe2ea0c65b902566356fd17a6f00b6b0fedc59fe327bfd418a342fffd949917c05f91bddd969a149da394a3d328e3a2e94582b25ade230f1ee4d47b6ba9977f59fb798159c1c47c4b0df99d9100a20a87b16652a0fb7a618c3133accc7042d1c5ade21afc608e997ee76c60a9032e4246cc60b7ac8d6700b16999cc605c94a14d2e367a6c93dad8f72c0632b163fba025cac362934648ee27a0c2eb3d97b383c4ac5539f20248344cf2500116474978cc32fe91c9d94a905700f8a115991756825d9aca6a0b88fec60aee7b07d7fdf5b9cdd2724dfce39e11d7995beece1ab47782ae811aa478d6693687d9aa3c614dcda93925c7c6756ef97630e6a9c6aa40150351b88224726b308c09ffdabbef0c74aa26a4ef82d476886c3c808d5920016f9cdcf0e1d3a1995dc69dfc0f0bd5790b840c820e0dae3f06cd7dc7eb58c18b07bef8d86c0ae799f740c79d2d51128a711e9e6ee7fd2e0e6f0c211a46ae23b632f81bb8f964f15440161f18890f966bdf49844e612b4c3ad5aa67b2487b76eabbb0b344f7ebce5fea89b50471f533f92458abf08e82a9061f262f70a5eea24b035d7c9731c67904b667f8c612f4defcd6b04092874506c83c43cc66a79bc6ae680386c9bc5bf641848618183d7721e2907386d3918f5e30f85c0b6518458820e0825d2ef1b6f958811bcbb92b6e858e80fdee06ab439460fd2bbb5a1fac7a47f38d31cad40100bd79434bb3f4590c7f0b483d2df5722b087db28650378a414a1f323f04852d2fcff278ae1c4b50c23f6563412af3e255881fba61fc10792e7e61e91e51288c8f398afe0aacb3079b738b7a8393b2cf5d3e49968d1a1574a5827d5b2b0427ea5381556c23c81a5209239408980ee0a94909f793160cbd221756cb60f751d4fb3fd9de6a5e3adb2c2e60204e631e231afaed44cef510ae19648df4adea05c242fef41418b3b07147e929fc69a01d82bc37f545ea04b53655c6a4aab8db3cf305de75af98b46579c5de1d6ac8cb3347235cb7ab1e428874c2186f00d6ede3677c58456d0e8eccd913e5adebb3e4f0753a9521095406f940def24a3ae627e018f377d1635d2cc1a15915367ae22efb942ea167be71e4515d0bbf8edca612a7297e70f1036c2d8e38257ffb17e1a48cf178cb41a79bd48cea660539b203e45bcf6cc8bebe97840c3881c6fc17ab0ee617adfb78afcbe4b4635d57a086dd2305b8352a8dca539667d5f4712a3c93f01a970c60ebfd81fcb1214a5378b0710979d2923296d0958f150882ab22eac7e3056f733a46a75c3239939cb7262f1926df191ab4e22e1c6c2271c093d5ac930cc202e0416df035330a6ea50e2c22182299727400881b55028db4dcc1a5ee2ef73c684f30b410074afce0f0b099ce2e1dc31f158347316022b47da8cb4cc7acc76c661072777b8c7f34bb7b5ef90b584b26c6ee4f5b89021a19ee1fcbd90a8b78bf251fbba4252fc3d46d68078d4a01bbdb479a6035edd68a11d87eee5ff25379a42687bf694d0ed145d3b056608d75009643fad14c6d6344fffb7ff49637901a9f9f53ddc5da79f1a3b8a2c9ba895965e2e7285b74cbfb8fd90d7fcc62f8c40b2887e33d984040b3cdf2273e805c7ba88537b6dc63649bae3801e389c8ec019c0d6c381a52513281af8e37010d1bf9291b91eeacc534a1f8e5412f1032a0a2bcd99e76590e88bb26719717531130d79734bc567196da140d5d6c67c89234ba170342bb8e081b2161bfafdc239d16d580dc3798291f1e6e4226290f60e0d8313c30de09f2c8163680d0cde236bffab1a299bf650496802f4cf08ca4a55b62ab75ddd2fee395358db7407fb4b47681e5c87bb503856b4cd9854d9a3b8562561535030ea4421b44305efee3f0edff26e036d1208ecd1c67cbdbaa69b96e4214627575d0e91beaa0646c95cefdba2f7c6f8023931"]}, @nested={0x78, 0x1c, [@generic="ca844fa01988009e6a05cdce4cd0e99090b6b3496f8d431047ddeebf362225661f108aa0e030873ff3918889e171d4bccc06d5b6a24f6d8f9e54eba21552328b82aef40b98d675c91195", @generic="8df971fd3b8750eb8f413521f130c6608418fb530f22e311d426f28c6c52ea7cfe089034e23e9a585526"]}, @nested={0x140, 0x3a, [@generic="04f71dec06b50a7d5b2e0358009ff00555b82fc10e47258f29161c7e3430773a589f0c2f4cbb329ab958ac0c7638544e851e3870efa480b7c1d415a92a5891220cae5b7a57287d6663e5ac5539063d8541891fb737b76e4cca7af4db5abfe5cace1a2f638a8e6f08715b8b269aa6f993c64203494ecba8e4aa59ac6c4baf51ea5434ebb5a50d6dba8fb045b235658839c8471ce7dd070c2255bd32d00fc72bf81bc4662114fd5c3a2ac49d2afcb7", @typed={0x14, 0x30, @str=':cpuset\\#(^\']\x00'}, @typed={0x8, 0x6e, @u32=0x3}, @generic="d0523a4989e0b5dc629e50d80a6fad70ed7022188cc9aaf4b9021cfd7a3912f49c49143681b078e157cdefc4713626435f8f4d322d622b6c8aecba49174dc0af3e019e482f8baea3c200bfb97ad18d91096136e2d05817a9897a3dffb922", @typed={0x8, 0x54, @u32=0xe40}, @typed={0xc, 0x91, @u64=0xfffffffffffffff8}]}]}, 0x1418}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) 2018/03/31 07:26:30 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1=0xe0000001, @loopback=0x7f000001}, 0xb6) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f000043e000)={0x0, {{0x2, 0x0, @multicast1=0xe0000001}}}, 0x90) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000380)={0x2, {{0x2, 0x0, @multicast1=0xe0000001}}}, 0x88) getsockopt$inet_buf(r0, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000695ffc)=0x314) 2018/03/31 07:26:30 executing program 6: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000000)={0x9, {{0xa, 0x4e20, 0x5334, @loopback={0x0, 0x1}, 0x6}}, {{0xa, 0x4e22, 0x9000000, @loopback={0x0, 0x1}, 0x4}}}, 0x108) r1 = syz_open_dev$sndseq(&(0x7f0000cc5000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000b0bf74)={0x0, 0x0, 0x0, 'queue0\x00'}) r2 = accept4$inet6(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, @local}, &(0x7f0000000180)=0x1c, 0x80000) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffff9c, 0x84, 0x1d, &(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000000200)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000240)={r3, @in6={{0xa, 0x4e22, 0x7, @remote={0xfe, 0x80, [], 0xbb}, 0x6}}, 0x1}, 0x90) r4 = memfd_create(&(0x7f000003e000)='\'', 0x0) r5 = syz_open_dev$sndseq(&(0x7f0000d82000)='/dev/snd/seq\x00', 0x0, 0x8000000040102) dup2(r5, r4) r6 = memfd_create(&(0x7f000003e000)='\t', 0x0) r7 = syz_open_dev$sndseq(&(0x7f000011c000)='/dev/snd/seq\x00', 0x0, 0x8000000000102) dup2(r7, r6) write$sndseq(r6, &(0x7f0000e6ffd0)=[{0x1e, 0x0, 0x0, 0x3fd, @time}], 0x30) write$sndseq(r4, &(0x7f0000e6ffd0)=[{0x1f, 0x0, 0x0, 0x3fd}], 0x30) 2018/03/31 07:26:30 executing program 3: r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = dup3(r0, r1, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x0, @loopback=0x7f000001}], 0x10) setsockopt$inet_sctp6_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000180), 0x4) sendto$inet(0xffffffffffffffff, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x0, @loopback=0x7f000001}, 0x10) getpeername$netlink(r2, &(0x7f0000000080), &(0x7f00000000c0)=0xc) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000000), &(0x7f0000000040)=0x8) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) 2018/03/31 07:26:30 executing program 1 (fault-call:6 fault-nth:41): mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) open(&(0x7f00000000c0)='./file0\x00', 0xa0441, 0x80) syz_mount_image$msdos(&(0x7f0000000140)='msdos\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x1, &(0x7f0000000100)=[{&(0x7f0000000480)="9196b107dc9e5c731d56d84afae6a7bf24", 0x11, 0x1f}], 0x0, &(0x7f0000000000)=ANY=[]) rmdir(&(0x7f0000000080)='./file0//ile0\x00') mkdir(&(0x7f0000000340)='./file0//ile0\x00', 0x1) r0 = semget$private(0x0, 0x4, 0x21) semctl$GETPID(r0, 0x1, 0xb, &(0x7f0000000200)=""/154) 2018/03/31 07:26:30 executing program 7: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc\x00', 0x40002, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2f, &(0x7f0000000700)={0x7d99, {{0x2, 0x4e22, @local={0xac, 0x14, 0x14, 0xaa}}}, {{0x2, 0x4e23, @remote={0xac, 0x14, 0x14, 0xbb}}}}, 0x108) mkdir(&(0x7f0000000600)='./file0//ile0\x00', 0x40) r1 = open(&(0x7f00000000c0)='./file0\x00', 0xa0441, 0x80) syz_mount_image$msdos(&(0x7f0000000140)='msdos\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x1, &(0x7f0000000100)=[{&(0x7f0000000480)="9196b107dc9e5c731d56d84afae6a7bf24", 0x11, 0x1f}], 0x0, &(0x7f0000000000)=ANY=[]) mkdir(&(0x7f00000006c0)='./file0\x00', 0xa4) rmdir(&(0x7f0000000080)='./file0//ile0\x00') fstat(r1, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000400), &(0x7f0000000540), &(0x7f0000000580)=0x0) syz_fuseblk_mount(&(0x7f0000000000)='./file0//ile0\x00', &(0x7f00000002c0)='./file0//ile0\x00', 0x4001, r2, r3, 0x0, 0x4, 0x100002) mkdir(&(0x7f0000000340)='./file0//ile0\x00', 0x1) mincore(&(0x7f0000ffd000/0x3000)=nil, 0x3000, &(0x7f0000000180)=""/4) ioctl$sock_bt_cmtp_CMTPGETCONNINFO(r0, 0x800443d3, &(0x7f00000005c0)={{0x0, 0x100000000, 0x9, 0x1, 0x3ff000000, 0x7}, 0x7fffffff, 0x7fff, 0x8}) r4 = semget$private(0x0, 0x4, 0x21) semctl$GETPID(r4, 0x1, 0xb, &(0x7f0000000200)=""/154) r5 = shmget(0x0, 0x1000, 0x80, &(0x7f0000fff000/0x1000)=nil) shmctl$IPC_RMID(r5, 0x0) 2018/03/31 07:26:30 executing program 4: write$tun(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x10, 0xffffffffffffffff, 0x0) openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00006a4ff7)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe2(&(0x7f0000e3eff8)={0x0, 0x0}, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f00000003c0)=0x0) ioctl$TIOCSPGRP(r3, 0x5410, &(0x7f0000000400)=r5) ioctl$KVM_SMI(r4, 0xaeb7) r6 = msgget(0x3, 0xc) r7 = getuid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f00000000c0)=0xc) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000180)={{{@in=@multicast2, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @dev}}}}, &(0x7f0000000280)=0xe8) getgroups(0x5, &(0x7f00000002c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0]) r12 = getpid() r13 = getpgid(0x0) ioctl$TCGETA(r3, 0x5405, &(0x7f0000000380)) msgctl$IPC_SET(r6, 0x1, &(0x7f0000000300)={{0x2, r7, r9, r10, r11, 0x40, 0x7f}, 0x1, 0x1365a58, 0x80000000, 0x6, 0x8, 0xfff, r12, r13}) r14 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x101001, 0x0) syz_kvm_setup_cpu$x86(r14, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000100)="b9870300000f329a1a00c0fee400c4c31120660d4ab981030000b806000000ba000000000f30c4e2392db636fb66ed0f3266b817018ed0c4e161f1c70f01cf66b8dc008ec8", 0x45}], 0x1, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ptrace$cont(0x18, r8, 0x0, 0x5) [ 199.811648] FAULT_INJECTION: forcing a failure. [ 199.811648] name failslab, interval 1, probability 0, space 0, times 0 [ 199.822921] CPU: 1 PID: 14350 Comm: syz-executor1 Not tainted 4.16.0-rc7+ #372 [ 199.830277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 199.839627] Call Trace: [ 199.842210] dump_stack+0x194/0x24d [ 199.845821] ? arch_local_irq_restore+0x53/0x53 [ 199.850475] ? __save_stack_trace+0x7e/0xd0 [ 199.854781] should_fail+0x8c0/0xa40 [ 199.858482] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 199.863562] ? kasan_kmalloc+0xad/0xe0 [ 199.867424] ? kmem_cache_alloc_trace+0x136/0x740 [ 199.872241] ? cfq_cpd_alloc+0x54/0x90 [ 199.876107] ? blkcg_css_alloc+0x165/0x6b0 [ 199.880322] ? cgroup_apply_control_enable+0x44d/0xbc0 [ 199.885575] ? SyS_mkdir+0x220/0x2a0 [ 199.889264] ? do_syscall_64+0x281/0x940 [ 199.893308] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 199.898646] ? do_syscall_64+0x281/0x940 [ 199.902683] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 199.908027] ? find_held_lock+0x35/0x1d0 [ 199.912084] ? __lock_is_held+0xb6/0x140 [ 199.916131] ? check_same_owner+0x320/0x320 [ 199.920431] ? rcu_note_context_switch+0x710/0x710 [ 199.925343] should_failslab+0xec/0x120 [ 199.929295] kmem_cache_alloc_trace+0x4b/0x740 [ 199.933852] ? rcu_read_lock_sched_held+0x108/0x120 [ 199.938842] ? kmem_cache_alloc_trace+0x459/0x740 [ 199.943662] bfq_cpd_alloc+0x54/0x90 [ 199.947355] blkcg_css_alloc+0x165/0x6b0 [ 199.951391] ? bfq_pd_alloc+0xe0/0xe0 [ 199.955168] ? blkcg_deactivate_policy+0x430/0x430 [ 199.960075] ? __lock_is_held+0xb6/0x140 [ 199.964123] cgroup_apply_control_enable+0x44d/0xbc0 [ 199.969209] ? cgroup_propagate_control+0x570/0x570 [ 199.974205] ? css_populate_dir+0x289/0x420 [ 199.978504] cgroup_mkdir+0x56f/0xfc0 [ 199.982281] ? __lock_is_held+0xb6/0x140 [ 199.986320] ? cgroup_destroy_locked+0x750/0x750 [ 199.991051] ? rcu_read_lock_sched_held+0x108/0x120 [ 199.996042] ? kmem_cache_free+0x258/0x2a0 [ 200.000255] ? set_nlink+0xc1/0x160 [ 200.003862] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 200.008779] ? generic_permission+0x105/0x3c0 [ 200.013258] ? cgroup_destroy_locked+0x750/0x750 [ 200.017991] kernfs_iop_mkdir+0x153/0x1e0 [ 200.022122] vfs_mkdir+0x390/0x600 [ 200.025641] SyS_mkdir+0x220/0x2a0 [ 200.029159] ? SyS_mkdirat+0x2b0/0x2b0 [ 200.033026] ? do_syscall_64+0xb7/0x940 [ 200.036975] ? SyS_mkdirat+0x2b0/0x2b0 [ 200.040850] do_syscall_64+0x281/0x940 [ 200.044715] ? vmalloc_sync_all+0x30/0x30 [ 200.048840] ? _raw_spin_unlock_irq+0x27/0x70 [ 200.053310] ? finish_task_switch+0x1c1/0x7e0 [ 200.057785] ? syscall_return_slowpath+0x550/0x550 [ 200.062691] ? syscall_return_slowpath+0x2ac/0x550 [ 200.067597] ? prepare_exit_to_usermode+0x350/0x350 [ 200.072591] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 200.077934] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 200.082756] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 200.087922] RIP: 0033:0x454e79 [ 200.091091] RSP: 002b:00007f2d4ca09c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 200.098780] RAX: ffffffffffffffda RBX: 00007f2d4ca0a6d4 RCX: 0000000000454e79 2018/03/31 07:26:30 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1=0xe0000001, @loopback=0x7f000001}, 0xb6) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f000043e000)={0x1, {{0x2, 0x0, @multicast1=0xe0000001}}}, 0x90) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000380)={0x2, {{0x2, 0x0, @multicast1=0xe0000001}}}, 0x88) getsockopt$inet_buf(r0, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000695ffc)=0x314) [ 200.106033] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000020000340 [ 200.113279] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 200.120523] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000013 [ 200.127765] R13: 00000000000003ea R14: 00000000006f7e90 R15: 0000000000000029 [ 200.135277] sctp: [Deprecated]: syz-executor3 (pid 14351) Use of int in maxseg socket option. [ 200.135277] Use struct sctp_assoc_value instead [ 200.166316] IPVS: ftp: loaded support on port[0] = 21 [ 200.206597] sctp: [Deprecated]: syz-executor3 (pid 14362) Use of int in maxseg socket option. [ 200.206597] Use struct sctp_assoc_value instead [ 200.262521] IPVS: ftp: loaded support on port[0] = 21 2018/03/31 07:26:31 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x15, 0x80005, 0x0) getsockopt(r0, 0x114, 0x2713, &(0x7f0000000000)=""/13, &(0x7f000033bffc)=0xd) 2018/03/31 07:26:31 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000001080)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00009ecff0)={&(0x7f00007d2a70)={0x24, 0x21, 0x2ff, 0x0, 0x0, {0xa}, [@typed={0xc, 0x0, @u32=0x4}, @nested={0x4, 0x14}]}, 0x24}, 0x1}, 0x0) r1 = dup(r0) ioctl$TIOCLINUX6(r1, 0x541c, &(0x7f0000000040)={0x6, 0x9}) 2018/03/31 07:26:31 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x200000, 0x0) getsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@loopback, @rand_addr, @multicast1}, &(0x7f0000000080)=0xc) accept4$netrom(r0, &(0x7f00000000c0), &(0x7f0000000100)=0x10, 0x80800) 2018/03/31 07:26:31 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1=0xe0000001, @loopback=0x7f000001}, 0xb6) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f000043e000)={0x1, {{0x2, 0x0, @multicast1=0xe0000001}}}, 0x90) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000380)={0x2, {{0x2, 0x0, @multicast1=0xe0000001}}}, 0x88) getsockopt$inet_buf(r0, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000695ffc)=0x314) 2018/03/31 07:26:31 executing program 1 (fault-call:6 fault-nth:42): mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) open(&(0x7f00000000c0)='./file0\x00', 0xa0441, 0x80) syz_mount_image$msdos(&(0x7f0000000140)='msdos\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x1, &(0x7f0000000100)=[{&(0x7f0000000480)="9196b107dc9e5c731d56d84afae6a7bf24", 0x11, 0x1f}], 0x0, &(0x7f0000000000)=ANY=[]) rmdir(&(0x7f0000000080)='./file0//ile0\x00') mkdir(&(0x7f0000000340)='./file0//ile0\x00', 0x1) r0 = semget$private(0x0, 0x4, 0x21) semctl$GETPID(r0, 0x1, 0xb, &(0x7f0000000200)=""/154) 2018/03/31 07:26:31 executing program 7: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) open(&(0x7f00000002c0)='./file0\x00', 0xa0441, 0x80) syz_mount_image$msdos(&(0x7f0000000140)='msdos\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x1, &(0x7f0000000100)=[{&(0x7f0000000480)="9196b107dc9e5c731d56d84afae6a7bf24", 0x11, 0x1f}], 0x0, &(0x7f0000000000)=ANY=[]) mkdir(&(0x7f0000000180)='./file0//ile0\x00', 0x112) rmdir(&(0x7f0000000080)='./file0//ile0\x00') mkdir(&(0x7f0000000340)='./file0//ile0\x00', 0x1) r0 = semget$private(0x0, 0x4, 0x21) semctl$GETPID(r0, 0x1, 0xb, &(0x7f0000000200)=""/154) 2018/03/31 07:26:31 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'wp512\x00'}, 0x58) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) r2 = open(&(0x7f00004b8ff8)='./file0\x00', 0x28042, 0x0) fallocate(r2, 0x0, 0x0, 0x1) ioctl$sock_SIOCBRADDBR(r1, 0x89a0, &(0x7f0000000080)='sit0\x00') sendfile(r1, r2, &(0x7f0000e64ff8), 0x8) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) 2018/03/31 07:26:31 executing program 5: r0 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}], 0x1c) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000107ff8)={0x0, 0x10040000}, 0x8) connect$inet6(r0, &(0x7f00008c0000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) fcntl$getown(r0, 0x9) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x40, 0x0) ioctl$RNDADDENTROPY(r1, 0x40085203, &(0x7f0000000100)={0xf8, 0x42, "959717ef3604bf062e9a0133af1e7648d8492e345cdf4e8dcfa0e742088357d17f3aab0abc3d3c8f71a85075a6855e58ca9071ceaa9384db11f901673cfd21c07c6d"}) writev(r0, &(0x7f00000007c0)=[{&(0x7f0000000680)=':', 0x1}], 0x1) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f00000000c0)={0x2}, 0x10) r2 = getpid() r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000008c0)='pids.current\x00', 0x0, 0x0) accept4$bt_l2cap(r3, &(0x7f0000000900), &(0x7f0000000940)=0xe, 0x80800) ptrace$setopts(0x4200, r2, 0x8, 0x0) sendmmsg(r0, &(0x7f000060d000)=[{{0x0, 0x0, &(0x7f0000c38ff0)=[{&(0x7f0000000080)='\x00', 0x1}], 0x1, &(0x7f0000299000)}}], 0x1, 0x8000) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f000081e000)=ANY=[@ANYRES32=0x0, @ANYBLOB="020007000000"], 0x2de) [ 200.390810] FAULT_INJECTION: forcing a failure. [ 200.390810] name failslab, interval 1, probability 0, space 0, times 0 [ 200.402132] CPU: 0 PID: 14383 Comm: syz-executor1 Not tainted 4.16.0-rc7+ #372 [ 200.409493] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 200.418929] Call Trace: [ 200.421517] dump_stack+0x194/0x24d [ 200.425152] ? arch_local_irq_restore+0x53/0x53 [ 200.429821] ? __save_stack_trace+0x7e/0xd0 [ 200.434149] should_fail+0x8c0/0xa40 [ 200.437869] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 200.442973] ? kasan_kmalloc+0xad/0xe0 [ 200.446863] ? kmem_cache_alloc_trace+0x136/0x740 [ 200.451708] ? cfq_cpd_alloc+0x54/0x90 [ 200.455593] ? blkcg_css_alloc+0x165/0x6b0 [ 200.459831] ? cgroup_apply_control_enable+0x44d/0xbc0 [ 200.465105] ? SyS_mkdir+0x220/0x2a0 [ 200.468818] ? do_syscall_64+0x281/0x940 [ 200.472880] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 200.478240] ? do_syscall_64+0x281/0x940 [ 200.482291] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 200.487642] ? find_held_lock+0x35/0x1d0 [ 200.491691] ? __lock_is_held+0xb6/0x140 [ 200.495738] ? check_same_owner+0x320/0x320 [ 200.500044] ? rcu_note_context_switch+0x710/0x710 [ 200.504955] should_failslab+0xec/0x120 [ 200.508909] kmem_cache_alloc_trace+0x4b/0x740 [ 200.513471] ? rcu_read_lock_sched_held+0x108/0x120 [ 200.518463] ? kmem_cache_alloc_trace+0x459/0x740 [ 200.523290] bfq_cpd_alloc+0x54/0x90 [ 200.526982] blkcg_css_alloc+0x165/0x6b0 [ 200.531024] ? bfq_pd_alloc+0xe0/0xe0 [ 200.534805] ? blkcg_deactivate_policy+0x430/0x430 [ 200.539714] ? __lock_is_held+0xb6/0x140 [ 200.543758] cgroup_apply_control_enable+0x44d/0xbc0 [ 200.548843] ? cgroup_propagate_control+0x570/0x570 [ 200.553843] ? css_populate_dir+0x289/0x420 [ 200.558144] cgroup_mkdir+0x56f/0xfc0 [ 200.561923] ? __lock_is_held+0xb6/0x140 [ 200.565964] ? cgroup_destroy_locked+0x750/0x750 [ 200.570698] ? rcu_read_lock_sched_held+0x108/0x120 [ 200.575690] ? kmem_cache_free+0x258/0x2a0 [ 200.579902] ? set_nlink+0xc1/0x160 [ 200.583522] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 200.588429] ? generic_permission+0x105/0x3c0 [ 200.592900] ? cgroup_destroy_locked+0x750/0x750 [ 200.597633] kernfs_iop_mkdir+0x153/0x1e0 [ 200.601758] vfs_mkdir+0x390/0x600 [ 200.605276] SyS_mkdir+0x220/0x2a0 [ 200.608794] ? SyS_mkdirat+0x2b0/0x2b0 [ 200.612663] ? do_syscall_64+0xb7/0x940 [ 200.616613] ? SyS_mkdirat+0x2b0/0x2b0 [ 200.620479] do_syscall_64+0x281/0x940 [ 200.624343] ? vmalloc_sync_all+0x30/0x30 [ 200.628469] ? finish_task_switch+0x1c1/0x7e0 [ 200.632941] ? syscall_return_slowpath+0x550/0x550 [ 200.637847] ? syscall_return_slowpath+0x2ac/0x550 [ 200.642751] ? prepare_exit_to_usermode+0x350/0x350 [ 200.647748] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 200.653092] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 200.657917] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 200.663083] RIP: 0033:0x454e79 [ 200.666249] RSP: 002b:00007f2d4ca09c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 200.673935] RAX: ffffffffffffffda RBX: 00007f2d4ca0a6d4 RCX: 0000000000454e79 [ 200.681181] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000020000340 2018/03/31 07:26:31 executing program 6: syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x129, 0x10000}], 0x0, &(0x7f0000016000)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000080)={r2}) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x10000, 0x0) ioctl$TCSBRKP(r3, 0x5425, 0xfffffffffffffffa) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) rt_sigpending(&(0x7f0000001340), 0x8) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vcs\x00', 0x81, 0x0) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000001440)='/dev/vga_arbiter\x00', 0x800, 0x0) ioctl$VHOST_SET_VRING_CALL(r5, 0x4008af21, &(0x7f0000000040)) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000358fe0)={r2, 0x0, 0x2, r2}) mkdirat$cgroup(r5, &(0x7f00000000c0)='syz1\x00', 0x1ff) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r4, 0x84, 0x1a, &(0x7f0000000240)=ANY=[@ANYRES32=0x0, @ANYBLOB="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"], &(0x7f0000001280)=0x2) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f00000012c0)={0x3, 0x337e, 0x0, 0x9, 0x3, 0x2, 0x4, 0x7fff, r6}, &(0x7f0000001300)=0x20) ppoll(&(0x7f0000000100)=[{r0, 0x2}, {r2, 0x20}, {r0, 0x1}, {r0, 0x8002}], 0x4, &(0x7f0000000140)={0x0, 0x1c9c380}, &(0x7f0000000180), 0x8) 2018/03/31 07:26:31 executing program 3: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/cache_bypass\x00', 0x2, 0x0) getpeername$ax25(r0, &(0x7f0000000180), &(0x7f00000001c0)=0x10) r1 = perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2661, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f00000000c0)=0x0) ioctl$VT_ACTIVATE(r0, 0x5606, 0xd2d) r3 = getpgrp(r2) perf_event_open(&(0x7f0000000040)={0x5, 0x70, 0x3, 0xffffffff, 0x8, 0x10000, 0x0, 0x10000, 0x800, 0x4, 0x9, 0xfff, 0x2, 0x3, 0x2860, 0x81, 0x4, 0x5, 0xc81, 0x100000000, 0x7, 0x9, 0x6, 0x7, 0x4, 0x8, 0x4, 0x2, 0x1, 0x200, 0x8, 0x100000000000000, 0x0, 0x8, 0x800, 0x1, 0xc1, 0x1, 0x0, 0x5, 0x2, @perf_config_ext={0x7, 0xaaa}, 0x10000, 0x8b, 0x6, 0x1, 0x5, 0xfff, 0x8}, r3, 0x7, r1, 0x3) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x12013, r1, 0x0) prctl$setname(0xf, &(0x7f0000000240)="2a1a6d6435735b6d65746831707070316264657663672fb12b726f757000") 2018/03/31 07:26:31 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1=0xe0000001, @loopback=0x7f000001}, 0xb6) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f000043e000)={0x1, {{0x2, 0x0, @multicast1=0xe0000001}}}, 0x90) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000380)={0x2, {{0x2, 0x0, @multicast1=0xe0000001}}}, 0x88) getsockopt$inet_buf(r0, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000695ffc)=0x314) [ 200.688427] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 200.695675] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000013 [ 200.702921] R13: 00000000000003ea R14: 00000000006f7e90 R15: 000000000000002a 2018/03/31 07:26:31 executing program 7: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) r0 = open(&(0x7f00000000c0)='./file0\x00', 0xa0441, 0x80) syz_mount_image$msdos(&(0x7f0000000140)='msdos\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x1, &(0x7f0000000100)=[{&(0x7f0000000480)="9196b107dc9e5c731d56d84afae6a7bf24", 0x11, 0x1f}], 0x0, &(0x7f0000000000)=ANY=[]) mkdir(&(0x7f0000000180)='./file0//ile0\x00', 0x112) rmdir(&(0x7f0000000080)='./file0//ile0\x00') getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0xb0, &(0x7f00000004c0)=[@in6={0xa, 0x4e21, 0x5, @remote={0xfe, 0x80, [], 0xbb}, 0x2}, @in={0x2, 0x4e23, @broadcast=0xffffffff}, @in6={0xa, 0x4e22, 0x101, @local={0xfe, 0x80, [], 0xaa}, 0x8}, @in6={0xa, 0x4e23, 0xfffffffffffffff7, @mcast1={0xff, 0x1, [], 0x1}, 0x200}, @in={0x2, 0x4e22, @rand_addr=0x8}, @in6={0xa, 0x4e22, 0x1, @loopback={0x0, 0x1}, 0x7}, @in={0x2, 0x4e21}, @in={0x2, 0x4e20, @loopback=0x7f000001}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000400)={r1}, &(0x7f0000000580)=0x8) mkdir(&(0x7f0000000340)='./file0//ile0\x00', 0x1) r2 = semget$private(0x0, 0x4, 0x21) semctl$GETPID(r2, 0x1, 0xb, &(0x7f0000000200)=""/154) 2018/03/31 07:26:31 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1=0xe0000001, @loopback=0x7f000001}, 0xb6) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f000043e000)={0x1, {{0x2, 0x0, @multicast1=0xe0000001}}}, 0x90) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000380)={0x0, {{0x2, 0x0, @multicast1=0xe0000001}}}, 0x88) getsockopt$inet_buf(r0, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000695ffc)=0x314) 2018/03/31 07:26:31 executing program 2: r0 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x4a0000) ioctl$sock_ipx_SIOCIPXNCPCONN(r0, 0x89e3, &(0x7f0000000040)=0x8) madvise(&(0x7f000066c000/0x2000)=nil, 0x2000, 0x9) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x483, &(0x7f0000000080)={0x6e, @multicast2=0xe0000002, 0x4e20, 0x2, 'dh\x00', 0x2e, 0x80, 0x5a}, 0x2c) r1 = fcntl$getown(r0, 0x9) r2 = syz_open_procfs(r1, &(0x7f0000000100)='net/stat\x00') mlock2(&(0x7f00001ec000/0x3000)=nil, 0x3000, 0x4) ioctl$KVM_PPC_ALLOCATE_HTAB(r2, 0xc004aea7, &(0x7f0000000280)=0x6e7) recvmmsg(r0, &(0x7f0000000ac0)=[{{&(0x7f0000000400)=@can, 0x80, &(0x7f0000000840)=[{&(0x7f0000000480)=""/63, 0x3f}, {&(0x7f00000004c0)=""/4, 0x4}, {&(0x7f0000000500)=""/86, 0x56}, {&(0x7f0000000580)=""/225, 0xe1}, {&(0x7f0000000680)=""/100, 0x64}, {&(0x7f0000000700)=""/148, 0x94}, {&(0x7f00000007c0)=""/107, 0x6b}], 0x7, &(0x7f00000008c0)=""/100, 0x64, 0xe3f}, 0x1}, {{&(0x7f0000000940)=@pppol2tpv3={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @remote}}}, 0x80, &(0x7f0000000a40)=[{&(0x7f00000009c0)=""/89, 0x59}], 0x1, &(0x7f0000000a80)=""/31, 0x1f, 0xffffffff}, 0x400}], 0x2, 0x140, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000140)={0x0}) r5 = mmap$binder(&(0x7f000066c000/0x2000)=nil, 0x2000, 0x2, 0xa010, r0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000cc0)={0xe0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="10630840000000000000000007630440040000000f630c4003000000040000000000000000634040020000000000000003000000000000000000000011000000000000000000000058000000000000000800000000000000", @ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB="852a6a7700010000", @ANYRES64=r4, @ANYBLOB="0000000000000000852a747001000000", @ANYPTR=&(0x7f0000000180)=ANY=[@ANYBLOB='\x00'], @ANYBLOB="010000000000000001000000000000002300000000000000852a646600000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='8\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="10630840010000000000000011634840030000000000000004000000000000000000000001000000000000000000000000000000000000004000000000000000", @ANYPTR=&(0x7f0000000280)=ANY=[], @ANYPTR=&(0x7f00000002c0)=ANY=[@ANYBLOB="00000000000000000000000000000000700000000000000000000000000000003000000000000000300000000000000018000000000000000000000000000000"], @ANYBLOB="05000000000000000d630000056304400100000009631040", @ANYRES64=r5, @ANYBLOB="35053877b0b0d967"], 0x89, 0x0, &(0x7f0000000c00)="38db403faec4dd588e70f932947346d79ca34faae96b622bfa1f1451bf97e984d704fea2be9dac7efb4d55643be451b3d183cabbd6cbe62f760e1eb5451dfa929a4c9585e7854e5d1c6128db8c25535c966811ea2bdf490edc1f3dfafc85146e7f3ebe1e4c42e5d6d5bbed97d1131e40e05b9f097dbdcc206e3ca7a31b776cc41c0fc56b726b1e6cb9"}) setsockopt$inet_buf(r3, 0x0, 0x3f, &(0x7f0000000b40)="a089f6fb256bfb21e10284f6a0cb6e1cc943bb9608e2c9ffa5c52d0b9d4071500ef74243c49f889930c175553ff7e424dd0457316c20bb0200000061e743656ab7d6c986a45b6aa589e8fa2d8877d2ec3015e41d02000000000000000798604e8438c812d76ff6995ba49ba5deb949783481bd99b5dcd3b75e59e2a49f5d67d26509cb38c5358c41937582f9b74493d0ce4b9fdafe9ebbd11d746562970ee2e43bd37d40c698", 0xa6) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f00000000c0)=0x7) 2018/03/31 07:26:31 executing program 1 (fault-call:6 fault-nth:43): mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) open(&(0x7f00000000c0)='./file0\x00', 0xa0441, 0x80) syz_mount_image$msdos(&(0x7f0000000140)='msdos\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x1, &(0x7f0000000100)=[{&(0x7f0000000480)="9196b107dc9e5c731d56d84afae6a7bf24", 0x11, 0x1f}], 0x0, &(0x7f0000000000)=ANY=[]) rmdir(&(0x7f0000000080)='./file0//ile0\x00') mkdir(&(0x7f0000000340)='./file0//ile0\x00', 0x1) r0 = semget$private(0x0, 0x4, 0x21) semctl$GETPID(r0, 0x1, 0xb, &(0x7f0000000200)=""/154) 2018/03/31 07:26:31 executing program 4: r0 = openat$cgroup_type(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.type\x00', 0x2, 0x0) dup(r0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffa000/0x4000)=nil, 0x4000}, 0x2}) [ 200.913845] FAULT_INJECTION: forcing a failure. [ 200.913845] name failslab, interval 1, probability 0, space 0, times 0 [ 200.925172] CPU: 1 PID: 14435 Comm: syz-executor1 Not tainted 4.16.0-rc7+ #372 [ 200.932528] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 200.941877] Call Trace: [ 200.944466] dump_stack+0x194/0x24d [ 200.948094] ? arch_local_irq_restore+0x53/0x53 [ 200.952773] should_fail+0x8c0/0xa40 [ 200.956490] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 200.961595] ? __lock_acquire+0x664/0x3e00 [ 200.965838] ? find_held_lock+0x35/0x1d0 [ 200.969893] ? __lock_is_held+0xb6/0x140 [ 200.973956] ? check_same_owner+0x320/0x320 [ 200.978277] ? rcu_note_context_switch+0x710/0x710 [ 200.983212] should_failslab+0xec/0x120 [ 200.987184] __kmalloc_track_caller+0x5f/0x760 [ 200.991770] ? string+0x180/0x200 [ 200.995220] ? kstrdup_const+0x39/0x50 [ 200.999107] kstrdup+0x39/0x70 [ 201.002289] kstrdup_const+0x39/0x50 [ 201.006035] __kernfs_new_node+0xa2/0x570 [ 201.010169] ? kernfs_dop_revalidate+0x380/0x380 [ 201.014909] ? delete_node+0x2db/0xbc0 [ 201.018777] ? snprintf+0xc0/0xf0 [ 201.022220] ? vsprintf+0x40/0x40 [ 201.025665] kernfs_new_node+0x80/0xe0 [ 201.029540] __kernfs_create_file+0x4b/0x320 [ 201.033935] cgroup_addrm_files+0x3c5/0xa70 [ 201.038238] ? cgroup_file_write+0x710/0x710 [ 201.042626] ? cgroup_idr_replace+0x3f/0x50 [ 201.046933] ? __lock_is_held+0xb6/0x140 [ 201.050979] ? __local_bh_enable_ip+0x121/0x230 [ 201.055628] ? online_css+0x224/0x2e0 [ 201.059408] css_populate_dir+0x198/0x420 [ 201.063556] cgroup_apply_control_enable+0x390/0xbc0 [ 201.068650] ? cgroup_propagate_control+0x570/0x570 [ 201.073656] ? css_populate_dir+0x289/0x420 [ 201.077961] cgroup_mkdir+0x56f/0xfc0 [ 201.081757] ? __lock_is_held+0xb6/0x140 [ 201.085804] ? cgroup_destroy_locked+0x750/0x750 [ 201.090535] ? rcu_read_lock_sched_held+0x108/0x120 [ 201.095542] ? kmem_cache_free+0x258/0x2a0 [ 201.099754] ? set_nlink+0xc1/0x160 [ 201.103365] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 201.108270] ? generic_permission+0x105/0x3c0 [ 201.112742] ? cgroup_destroy_locked+0x750/0x750 [ 201.117480] kernfs_iop_mkdir+0x153/0x1e0 [ 201.121609] vfs_mkdir+0x390/0x600 [ 201.125126] SyS_mkdir+0x220/0x2a0 [ 201.128648] ? SyS_mkdirat+0x2b0/0x2b0 [ 201.132519] ? do_syscall_64+0xb7/0x940 [ 201.136466] ? SyS_mkdirat+0x2b0/0x2b0 [ 201.140328] do_syscall_64+0x281/0x940 [ 201.144192] ? vmalloc_sync_all+0x30/0x30 [ 201.148317] ? _raw_spin_unlock_irq+0x27/0x70 [ 201.152791] ? finish_task_switch+0x1c1/0x7e0 [ 201.157282] ? syscall_return_slowpath+0x550/0x550 [ 201.162194] ? syscall_return_slowpath+0x2ac/0x550 [ 201.167097] ? prepare_exit_to_usermode+0x350/0x350 [ 201.172096] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 201.177436] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 201.182258] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 201.187421] RIP: 0033:0x454e79 [ 201.190584] RSP: 002b:00007f2d4ca09c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 201.198268] RAX: ffffffffffffffda RBX: 00007f2d4ca0a6d4 RCX: 0000000000454e79 [ 201.205512] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000020000340 [ 201.212758] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 201.220013] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000013 [ 201.227278] R13: 00000000000003ea R14: 00000000006f7e90 R15: 000000000000002b [ 201.234970] cgroup: cgroup_addrm_files: failed to add stat, err=-12 2018/03/31 07:26:32 executing program 3: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x4, &(0x7f0000000200)=[{0xc6, 0x8, 0x40, 0xffffffffffffff80}, {0x3c, 0x1, 0x9}, {0x3, 0x7fff, 0x100000000, 0x100}, {0x0, 0x100, 0x0, 0x401}]}, 0xfffffffffffffe53) perf_event_open(&(0x7f0000220000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000000)=0x6, 0x4) r0 = socket(0x1e, 0x2000000000000005, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000040)={0x0, 0xd5, "f6e4ee88c2d68937497d786cd877e2f7362c4919e8d40bac985c0aa7102bf5718e127f146da55df3fa1af8ee5ee84ab595238befe3daac81e132a5d59f391540f29016182764da7a2648c208b797b0e591d63065368f285a09457e5232856e92bc172b7af0bf28d1496bea29002deee074b0372f47c79fa1befc67a985bd76108e172dfdf6eca42fd2253806b10ea07be3a776b01534b97b01effaa7b307acbc33dc9a7f66e852eb87446fb60fe818b6b1cc06a298f92e75d63a5b8a6736c9f40d1620053c8c5de14602c420d97bb8d5a7d0cc60a5"}, &(0x7f0000000140)=0xdd) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000180)={r1, 0x13, "978b61d563db2694a99ab7562eb5d4cbbd9c73"}, &(0x7f00000001c0)=0x1b) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000240)={0x6}, 0x4) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000380)={'bridge0\x00', &(0x7f0000000000)=ANY=[]}) 2018/03/31 07:26:32 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r0, &(0x7f0000012000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}}}}, &(0x7f0000000100)=0xb0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = syz_open_dev$vcsa(&(0x7f0000000500)='/dev/vcsa#\x00', 0x7, 0x523800) ioctl$LOOP_SET_FD(r4, 0x4c00, r3) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, r2}, &(0x7f00000001c0)=0x10) r6 = syz_open_dev$sndpcmc(&(0x7f0000000140)='/dev/snd/pcmC#D#c\x00', 0x0, 0x400440) sendmsg$inet_sctp(r6, &(0x7f00000004c0)={&(0x7f0000000200)=@in={0x2, 0x4e24}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000240)="ee3ebc69641d7fd407276c1b531bd061beacde8b2e43997e27ed2d020b0bb72c449f3e3d902d", 0x26}, {&(0x7f0000000280)="e5a4c34897bb576e008aee42a67804e4501eeb04f3f3ead90617a6e84229a8882733496f8477e9ce79cdc0ab813e6857ac3f71c615d03d083a2b1489c4064c198b7e3ebabf07c4dd1659900b2341643edec4886cffc5c895424c50efc8ef34c9dbd271919813e022f12d7c7e98ce48feaf2ba21daf2ebfe732e5942035ecb66d42659f9eca821a13403386cc119eb391a8030e357e097acf77410f4fb92d2cf8219404fc336d3e38b585a24e1fafe5156f9a576fe3e072d46fb906a4e843cfe910b9b0de60665c0e9c7ce547a6c930c8149be8359a28393a6433bcb4d8684b4fb8ecbdcd", 0xe4}], 0x2, &(0x7f00000003c0)=[@sndinfo={0x20, 0x84, 0x2, {0x7, 0x1, 0x7ff, 0x80000000, r1}}, @sndinfo={0x20, 0x84, 0x2, {0x400, 0x200, 0x4, 0x81, r5}}, @init={0x18, 0x84, 0x0, {0x52c01232, 0x3, 0x4, 0x3}}, @sndinfo={0x20, 0x84, 0x2, {0x3, 0x3, 0xfa5, 0x8000, r1}}, @sndrcv={0x30, 0x84, 0x1, {0x2, 0x7, 0x3, 0xffffffff00000001, 0x3, 0x8, 0x8, 0x4, r5}}], 0xf0, 0x800}, 0x4000084) 2018/03/31 07:26:32 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1=0xe0000001, @loopback=0x7f000001}, 0xb6) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f000043e000)={0x1, {{0x2, 0x0, @multicast1=0xe0000001}}}, 0x90) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000380)={0x0, {{0x2, 0x0, @multicast1=0xe0000001}}}, 0x88) getsockopt$inet_buf(r0, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000695ffc)=0x314) 2018/03/31 07:26:32 executing program 7: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) r0 = open(&(0x7f00000000c0)='./file0\x00', 0xa0441, 0x80) syz_mount_image$msdos(&(0x7f0000000140)='msdos\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x1, &(0x7f0000000100)=[{&(0x7f0000000480)="9196b107dc9e5c731d56d84afae6a7bf24", 0x11, 0x1f}], 0x0, &(0x7f0000000000)=ANY=[]) mkdir(&(0x7f0000000180)='./file0//ile0\x00', 0x112) rmdir(&(0x7f0000000080)='./file0//ile0\x00') mkdir(&(0x7f0000000340)='./file0//ile0\x00', 0x1) r1 = semget$private(0x0, 0x4, 0x21) semctl$GETPID(r1, 0x1, 0xb, &(0x7f0000000200)=""/154) getsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f0000002bc0)={@remote, 0x0}, &(0x7f0000002c00)=0x14) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000002c40)={r2, 0x1, 0x6, @random="77bc0fc51b89"}, 0x10) 2018/03/31 07:26:32 executing program 5: r0 = socket$bt_hidp(0x1f, 0x3, 0x6) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000280)=0x2, &(0x7f00000002c0)=0x4) socket$vsock_dgram(0x28, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00009f2000)={&(0x7f000007cff4)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000110010042bbd70000008000007000000"], 0x14}, 0x1}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x40000, 0x0) 2018/03/31 07:26:32 executing program 4: perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f000031f000)}, 0x4000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x4) write(r0, &(0x7f0000994fd9)="2700000014001707030e0000120f0a0028171000f5fe0012ff000300078a151f75080039000500", 0x27) 2018/03/31 07:26:32 executing program 6: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000140)={0x0, 0x1}, &(0x7f0000000180)=0x8) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x480, 0x0) unshare(0x0) r1 = accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x800) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x7, &(0x7f0000000080), &(0x7f00000000c0)=0x4) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000564000)=@abs, 0x6e, &(0x7f0000451ff0)=[{&(0x7f0000007000)="002a932f01000000cf960802e02348f800000000001c0003f2a576", 0x1b}], 0x1, &(0x7f00001f9fe0)}, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000007000)={0x0, 0x0, 0x8}) ioctl(r2, 0x2285, &(0x7f0000007000)='S') ppoll(&(0x7f0000000500)=[{r2, 0x1}, {r0, 0x60}, {r0, 0x531}, {r0, 0x2000}, {0xffffffffffffffff, 0x100}, {r2, 0x408}, {r0, 0x200}, {r1, 0x8000}], 0x8, &(0x7f0000000580), &(0x7f00000005c0)={0x7ff}, 0x8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000380)='IPVS\x00') sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40005a00}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)=ANY=[@ANYBLOB='H\x00\x00\x00'], 0x1}, 0x1, 0x0, 0x0, 0x20008800}, 0xc0c0) accept4$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, @remote}, &(0x7f0000000200)=0x1c, 0x0) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000240), &(0x7f0000000280)=0x4) r3 = socket(0x10, 0x802, 0x0) ioctl$VT_WAITACTIVE(0xffffffffffffffff, 0x5607) write(0xffffffffffffffff, &(0x7f0000000640)="24070000000000000000d3b720f0ce83a80075060000ffa89d2c37d9ed3bea9d596bf3e2ffb4d17a02", 0x29) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f00000002c0)) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000140)={0x6, 0x0, 0x8002, 0x8000, 0x0, 0x9, 0x8, 0xbb2d}, 0x20) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000eacfd0), 0x0, 0x0) mount(&(0x7f0000001600)='./file0/file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000000)='9p\x00', 0x0, &(0x7f0000000100)) 2018/03/31 07:26:32 executing program 1 (fault-call:6 fault-nth:44): mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) open(&(0x7f00000000c0)='./file0\x00', 0xa0441, 0x80) syz_mount_image$msdos(&(0x7f0000000140)='msdos\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x1, &(0x7f0000000100)=[{&(0x7f0000000480)="9196b107dc9e5c731d56d84afae6a7bf24", 0x11, 0x1f}], 0x0, &(0x7f0000000000)=ANY=[]) rmdir(&(0x7f0000000080)='./file0//ile0\x00') mkdir(&(0x7f0000000340)='./file0//ile0\x00', 0x1) r0 = semget$private(0x0, 0x4, 0x21) semctl$GETPID(r0, 0x1, 0xb, &(0x7f0000000200)=""/154) [ 201.291966] irq bypass consumer (token 000000006051b936) registration fails: -16 [ 201.359932] FAULT_INJECTION: forcing a failure. [ 201.359932] name failslab, interval 1, probability 0, space 0, times 0 [ 201.371268] CPU: 0 PID: 14466 Comm: syz-executor1 Not tainted 4.16.0-rc7+ #372 [ 201.378632] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 201.387990] Call Trace: [ 201.390585] dump_stack+0x194/0x24d [ 201.394222] ? arch_local_irq_restore+0x53/0x53 [ 201.398904] should_fail+0x8c0/0xa40 [ 201.402616] ? kstrdup+0x39/0x70 [ 201.405980] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 201.411079] ? cgroup_apply_control_enable+0x390/0xbc0 [ 201.416349] ? kernfs_iop_mkdir+0x153/0x1e0 [ 201.420662] ? vfs_mkdir+0x390/0x600 [ 201.424369] ? SyS_mkdir+0x220/0x2a0 [ 201.428072] ? do_syscall_64+0x281/0x940 [ 201.432126] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 201.437485] ? find_held_lock+0x35/0x1d0 [ 201.441543] ? find_held_lock+0x35/0x1d0 [ 201.445600] ? __lock_is_held+0xb6/0x140 [ 201.449665] ? check_same_owner+0x320/0x320 [ 201.453983] ? rcu_note_context_switch+0x710/0x710 [ 201.458904] ? rcu_read_lock_sched_held+0x108/0x120 [ 201.463921] should_failslab+0xec/0x120 [ 201.467927] kmem_cache_alloc+0x47/0x760 [ 201.472007] ? memcpy+0x45/0x50 [ 201.475283] ? kstrdup+0x59/0x70 [ 201.478648] __kernfs_new_node+0xe2/0x570 [ 201.482789] ? kernfs_dop_revalidate+0x380/0x380 [ 201.487535] ? delete_node+0x2db/0xbc0 [ 201.491423] ? snprintf+0xc0/0xf0 [ 201.494869] ? vsprintf+0x40/0x40 [ 201.498322] kernfs_new_node+0x80/0xe0 [ 201.502207] __kernfs_create_file+0x4b/0x320 [ 201.506610] cgroup_addrm_files+0x3c5/0xa70 [ 201.510933] ? cgroup_file_write+0x710/0x710 [ 201.515343] ? cgroup_idr_replace+0x3f/0x50 [ 201.519659] ? __lock_is_held+0xb6/0x140 [ 201.523720] ? __local_bh_enable_ip+0x121/0x230 [ 201.528381] ? online_css+0x224/0x2e0 [ 201.532181] css_populate_dir+0x198/0x420 [ 201.536326] cgroup_apply_control_enable+0x390/0xbc0 [ 201.541425] ? cgroup_propagate_control+0x570/0x570 [ 201.546438] ? css_populate_dir+0x289/0x420 [ 201.550772] cgroup_mkdir+0x56f/0xfc0 [ 201.554564] ? __lock_is_held+0xb6/0x140 [ 201.558620] ? cgroup_destroy_locked+0x750/0x750 [ 201.563367] ? rcu_read_lock_sched_held+0x108/0x120 [ 201.568372] ? kmem_cache_free+0x258/0x2a0 [ 201.572597] ? set_nlink+0xc1/0x160 [ 201.576215] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 201.581132] ? generic_permission+0x105/0x3c0 [ 201.585625] ? cgroup_destroy_locked+0x750/0x750 [ 201.590376] kernfs_iop_mkdir+0x153/0x1e0 [ 201.594518] vfs_mkdir+0x390/0x600 [ 201.598054] SyS_mkdir+0x220/0x2a0 [ 201.601589] ? SyS_mkdirat+0x2b0/0x2b0 [ 201.605470] ? do_syscall_64+0xb7/0x940 [ 201.609436] ? SyS_mkdirat+0x2b0/0x2b0 [ 201.613314] do_syscall_64+0x281/0x940 [ 201.617193] ? vmalloc_sync_all+0x30/0x30 [ 201.621334] ? _raw_spin_unlock_irq+0x27/0x70 [ 201.625818] ? finish_task_switch+0x1c1/0x7e0 [ 201.630304] ? syscall_return_slowpath+0x550/0x550 [ 201.635223] ? syscall_return_slowpath+0x2ac/0x550 [ 201.640143] ? prepare_exit_to_usermode+0x350/0x350 [ 201.645157] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 201.650517] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 201.655355] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 201.660530] RIP: 0033:0x454e79 [ 201.663709] RSP: 002b:00007f2d4ca09c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 201.671409] RAX: ffffffffffffffda RBX: 00007f2d4ca0a6d4 RCX: 0000000000454e79 [ 201.678669] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000020000340 [ 201.685926] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 201.693187] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000013 [ 201.700447] R13: 00000000000003ea R14: 00000000006f7e90 R15: 000000000000002c 2018/03/31 07:26:32 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1=0xe0000001, @loopback=0x7f000001}, 0xb6) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f000043e000)={0x1, {{0x2, 0x0, @multicast1=0xe0000001}}}, 0x90) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000380)={0x0, {{0x2, 0x0, @multicast1=0xe0000001}}}, 0x88) getsockopt$inet_buf(r0, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000695ffc)=0x314) [ 201.708501] cgroup: cgroup_addrm_files: failed to add stat, err=-12 [ 201.726240] 9pnet_virtio: no channels available for device ./file0/file0 2018/03/31 07:26:32 executing program 3: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000640)='/dev/sequencer\x00', 0x10000002040, 0x0) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000380)=0x1) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000140)={0x0, 0x1}, &(0x7f0000000180)=0x8) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x480, 0x0) unshare(0x40000000) r2 = accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x800) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x7, &(0x7f0000000080), &(0x7f00000000c0)=0x4) ioctl$TIOCGLCKTRMIOS(r0, 0x5456, &(0x7f0000001780)={0xfffffffffffffffb, 0x0, 0x101, 0xffffffffffffffff, 0x9c74, 0x0, 0x9, 0x3cc90149, 0x8, 0x0, 0x503, 0x1}) r3 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) ioctl(r3, 0x2285, &(0x7f0000007000)='S') setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000001740)=0x4, 0x4) ioctl$ASHMEM_SET_SIZE(r3, 0x40087703, 0xfd2) ppoll(&(0x7f0000000500)=[{r3, 0x1}, {r1, 0x60}, {r1}, {r1}, {0xffffffffffffffff, 0x100}, {r3, 0x408}, {r1, 0x200}, {r2, 0x8000}], 0x8, &(0x7f0000000580), &(0x7f00000005c0)={0x7ff}, 0x8) sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000340)={0x10}, 0xc, &(0x7f0000000480)={&(0x7f0000001940)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x20008800}, 0xc0c0) accept4$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, @remote}, &(0x7f0000000200)=0x1c, 0x0) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000240), &(0x7f0000000280)=0x4) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, &(0x7f0000000600)=0x3) r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f000033e000)="170000001a001bed0000132100f404fffffffffffffff7", 0x17) lgetxattr(&(0x7f0000000300)='./file0\x00', &(0x7f0000001800)=@known='security.evm\x00', &(0x7f0000000680)=""/72, 0x48) pwrite64(r2, &(0x7f0000001c40)="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", 0xfffffffffffffced, 0x40000001f) clock_gettime(0x6, &(0x7f00000002c0)={0x0, 0x0}) recvmmsg(r4, &(0x7f0000f7bfc0), 0xd948aa, 0x40010000, &(0x7f0000000000)={0x0, r5+10000000}) times(&(0x7f0000000700)) io_setup(0x0, &(0x7f0000000440)) r6 = request_key(&(0x7f0000000540)='id_legacy\x00', &(0x7f0000001840)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000001880)='vboxnet1GPLcgroupwlan1\x00', 0xfffffffffffffffc) r7 = add_key$keyring(&(0x7f00000018c0)='keyring\x00', &(0x7f0000001900)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0x0) keyctl$unlink(0x9, r6, r7) 2018/03/31 07:26:32 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) setsockopt(0xffffffffffffffff, 0x2000000010d, 0x800000000d, &(0x7f0000f85000)="03", 0x1) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x4c) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x2) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000004, 0x10, r1, 0x0) 2018/03/31 07:26:32 executing program 7: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) r0 = open(&(0x7f0000000880)='./file0//ile0\x00', 0xa0449, 0x80) accept4(r0, &(0x7f0000000780)=@hci, &(0x7f0000000800)=0x80, 0x80000) syz_mount_image$msdos(&(0x7f0000000140)='msdos\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x1, &(0x7f0000000100)=[{&(0x7f0000000480)="9196b107dc9e5c731d56d84afae6a7bf24", 0x11, 0x1f}], 0x0, &(0x7f0000000000)=ANY=[]) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000580)) mkdir(&(0x7f0000000180)='./file0//ile0\x00', 0x112) syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000002c0)='./file0\x00', 0x7ff, 0x4, &(0x7f00000006c0)=[{&(0x7f00000004c0)="1ee1d3744a582f89542b1c9bd0f7be56627c8eb583c9ac790bb07b4a7e4a1ea2691404da503f8732842dffb78a31386993d3d4b5e1b4243807540a60535d96ac168dc3142e33a3463996f3c8c3a080ab8d5f4cc1ba81fb01a9af20526e5774e1ea9c014900059918e27f3c826a3aa426ec9a71308d507c98a1ce83bb7b5fb6fab6982dbd2c2db689913d7d51f6d556bbc202a24ec301c19730d9689e87cc7d362e", 0xa1, 0x7}, {&(0x7f0000000400)="6cd104f239e47d5b6a980a29db6053b0a5befb4d0a75b9650f", 0x19, 0xffffffffffff7351}, {&(0x7f0000000580), 0x0, 0x54}, {&(0x7f00000005c0)="214000b0246eb197eb579a1bb305f166d3bfb3adb0397c6c9f7f5ab3ed476dc0543b9f3b7b891b90ddd689aba5c7091ac9e1e061e60cbad29c692e0eb32fad3ec4cf9c0e7c9f73a0c0d6c2101c6c837507cffb467cce9b0dd453967b3af7fba878bda60f615249f1bbac4b460a754df1fe9b3d279851ecc289238ef202141ebf1e17e0e2374a47fc3f74017fa66ca32ae47526c1e33f09d8c930300fddd7a524aee281c736fb267b648edcfc9c14c2bb74377930279e2a9e15321fddb6b81f33d812767b9811af781ddabfe6a0acad46c400a3ae78111eeadcfff47bee2c8c6d", 0xe0, 0x400}], 0x800, &(0x7f0000000740)={[{@errors_continue='errors=continue', 0x2c}, {@gid={'gid', 0x3d, [0x31, 0x35, 0x31, 0x31, 0x34]}, 0x2c}, {@flush='flush', 0x2c}]}) rmdir(&(0x7f0000000080)='./file0//ile0\x00') mkdir(&(0x7f0000000340)='./file0//ile0\x00', 0x1) r1 = semget$private(0x0, 0x4, 0x21) semctl$GETPID(r1, 0x1, 0xb, &(0x7f0000000200)=""/154) 2018/03/31 07:26:32 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='/exe\x00\x00\x00\x00\x00\x00') accept4$packet(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000000040)=0x14, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6gretap0\x00', r1}) ioctl$fiemap(r0, 0x40086602, &(0x7f00000001c0)={0x10002}) 2018/03/31 07:26:32 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) set_mempolicy(0x8000, &(0x7f0000000040)=0x9, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000000340)='/dev/vcsa#\x00', 0x5, 0x0) r1 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffffc) add_key$user(&(0x7f0000000100)='user\x00', &(0x7f0000000140)={0x73, 0x79, 0x7a}, &(0x7f0000000180), 0x0, r1) ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rfkill\x00', 0x141241, 0x0) syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0xffffffff, 0x1) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000000)="0bf5430f000319", 0x7}], 0x1) write$sndseq(0xffffffffffffffff, &(0x7f0000000380)=[{0x3ff, 0x2, 0x0, 0x0, @tick=0x80000001, {0x0, 0x3}, {0x8}, @ext={0x0, &(0x7f0000000240)}}], 0x30) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) ioctl$KVM_SET_TSS_ADDR(r2, 0xae47, 0xd000) 2018/03/31 07:26:32 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1=0xe0000001, @loopback=0x7f000001}, 0xb6) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f000043e000)={0x1, {{0x2, 0x0, @multicast1=0xe0000001}}}, 0x90) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000380)={0x2, {{0x2, 0x0, @multicast1=0xe0000001}}}, 0x88) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000695ffc)=0x314) 2018/03/31 07:26:32 executing program 1 (fault-call:6 fault-nth:45): mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) open(&(0x7f00000000c0)='./file0\x00', 0xa0441, 0x80) syz_mount_image$msdos(&(0x7f0000000140)='msdos\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x1, &(0x7f0000000100)=[{&(0x7f0000000480)="9196b107dc9e5c731d56d84afae6a7bf24", 0x11, 0x1f}], 0x0, &(0x7f0000000000)=ANY=[]) rmdir(&(0x7f0000000080)='./file0//ile0\x00') mkdir(&(0x7f0000000340)='./file0//ile0\x00', 0x1) r0 = semget$private(0x0, 0x4, 0x21) semctl$GETPID(r0, 0x1, 0xb, &(0x7f0000000200)=""/154) 2018/03/31 07:26:32 executing program 6: r0 = userfaultfd(0x8000000000000003) r1 = memfd_create(&(0x7f00000004c0)="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", 0x4000000002) getpeername$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000200)=0x14) tee(r0, r1, 0x1ff, 0x1) ioctl$sock_inet6_SIOCDELRT(r1, 0x890c, &(0x7f0000000240)={@mcast1={0xff, 0x1, [], 0x1}, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, @mcast1={0xff, 0x1, [], 0x1}, 0x6, 0x101, 0x90, 0x500, 0x7ff, 0x80080000, r2}) r3 = perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000e15000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(blowfish)\x00'}, 0xffffffffffffffdd) setsockopt$inet_MCAST_LEAVE_GROUP(r3, 0x0, 0x2d, &(0x7f0000000080)={0x2, {{0x2, 0x4e24, @loopback=0x7f000001}}}, 0x88) ioctl$TCSETAF(r1, 0x5408, &(0x7f0000000300)={0x1, 0x7, 0x6, 0x4, 0xfff, 0x2, 0x9, 0x80000001, 0x9, 0x7}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) bind$can_raw(r1, &(0x7f00000002c0)={0x1d, r2}, 0x10) r4 = getpid() ptrace$setregset(0x4205, r4, 0x3, &(0x7f00000003c0)={&(0x7f0000000340)="79a346ca7fdfbf90ccef36d03f9c21b9022d834fb4fec1de36ad47a8d9e250868d0242ae3ae8da8dfd3179b11ecb97020f171d81c234146f4f5b7bec9e0e9af3573871dd4f17e4ce077ed3165c40941861db58702e82d8be63300a086c", 0x5d}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000040)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}) ioctl$sock_inet6_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000140)) 2018/03/31 07:26:32 executing program 4: stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = getgid() getgroups(0x4, &(0x7f0000000180)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff]) getresgid(&(0x7f0000000440), &(0x7f0000000200), &(0x7f0000000480)=0x0) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x5, &(0x7f0000000340)=[r0, r1, r2, r3, r4]) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_netfilter(r5, &(0x7f0000498000)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000d52000)={0x14, 0x2, 0x9, 0x800000001}, 0x14}, 0x1}, 0x0) [ 201.945647] FAULT_INJECTION: forcing a failure. [ 201.945647] name failslab, interval 1, probability 0, space 0, times 0 [ 201.957167] CPU: 1 PID: 14504 Comm: syz-executor1 Not tainted 4.16.0-rc7+ #372 [ 201.964524] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 201.973882] Call Trace: [ 201.976470] dump_stack+0x194/0x24d [ 201.980103] ? arch_local_irq_restore+0x53/0x53 [ 201.984772] should_fail+0x8c0/0xa40 [ 201.988486] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 201.993588] ? kernfs_add_one+0x50/0x450 [ 201.997655] ? rb_first_postorder+0xa0/0xa0 [ 202.001973] ? kernfs_add_one+0x50/0x450 [ 202.006033] ? trace_hardirqs_off+0x10/0x10 [ 202.010341] ? find_held_lock+0x35/0x1d0 [ 202.014385] ? __lock_is_held+0xb6/0x140 [ 202.018439] ? check_same_owner+0x320/0x320 [ 202.022740] ? lock_downgrade+0x980/0x980 [ 202.026869] ? rcu_note_context_switch+0x710/0x710 [ 202.031786] should_failslab+0xec/0x120 [ 202.035743] __kmalloc_track_caller+0x5f/0x760 [ 202.040315] ? string+0x180/0x200 [ 202.043749] ? kstrdup_const+0x39/0x50 [ 202.047625] kstrdup+0x39/0x70 [ 202.050912] kstrdup_const+0x39/0x50 [ 202.054608] __kernfs_new_node+0xa2/0x570 [ 202.058741] ? kernfs_dop_revalidate+0x380/0x380 [ 202.063485] ? snprintf+0xc0/0xf0 [ 202.066916] ? vsprintf+0x40/0x40 [ 202.070350] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 202.075261] ? cgroup_file_name+0x1d0/0x1d0 [ 202.079575] kernfs_new_node+0x80/0xe0 [ 202.083447] __kernfs_create_file+0x4b/0x320 [ 202.087841] cgroup_addrm_files+0x3c5/0xa70 [ 202.092151] ? cgroup_file_write+0x710/0x710 [ 202.096546] ? cgroup_idr_replace+0x3f/0x50 [ 202.100851] ? __lock_is_held+0xb6/0x140 [ 202.104896] ? __local_bh_enable_ip+0x121/0x230 [ 202.109548] ? online_css+0x224/0x2e0 [ 202.113333] css_populate_dir+0x198/0x420 [ 202.117464] cgroup_apply_control_enable+0x390/0xbc0 [ 202.122551] ? cgroup_propagate_control+0x570/0x570 [ 202.127552] ? css_populate_dir+0x289/0x420 [ 202.131854] cgroup_mkdir+0x56f/0xfc0 [ 202.135632] ? __lock_is_held+0xb6/0x140 [ 202.139679] ? cgroup_destroy_locked+0x750/0x750 [ 202.144416] ? rcu_read_lock_sched_held+0x108/0x120 [ 202.149414] ? kmem_cache_free+0x258/0x2a0 [ 202.153631] ? set_nlink+0xc1/0x160 [ 202.157237] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 202.162144] ? generic_permission+0x105/0x3c0 [ 202.166625] ? cgroup_destroy_locked+0x750/0x750 [ 202.171362] kernfs_iop_mkdir+0x153/0x1e0 [ 202.175491] vfs_mkdir+0x390/0x600 [ 202.179017] SyS_mkdir+0x220/0x2a0 [ 202.182543] ? SyS_mkdirat+0x2b0/0x2b0 [ 202.186412] ? do_syscall_64+0xb7/0x940 [ 202.190367] ? SyS_mkdirat+0x2b0/0x2b0 [ 202.194232] do_syscall_64+0x281/0x940 [ 202.198098] ? vmalloc_sync_all+0x30/0x30 [ 202.202228] ? _raw_spin_unlock_irq+0x27/0x70 [ 202.206702] ? finish_task_switch+0x1c1/0x7e0 [ 202.211190] ? syscall_return_slowpath+0x550/0x550 [ 202.216101] ? syscall_return_slowpath+0x2ac/0x550 [ 202.221017] ? prepare_exit_to_usermode+0x350/0x350 [ 202.226023] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 202.231372] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 202.236198] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 202.241364] RIP: 0033:0x454e79 2018/03/31 07:26:32 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1=0xe0000001, @loopback=0x7f000001}, 0xb6) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f000043e000)={0x1, {{0x2, 0x0, @multicast1=0xe0000001}}}, 0x90) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000380)={0x2, {{0x2, 0x0, @multicast1=0xe0000001}}}, 0x88) getsockopt$inet_buf(r0, 0x0, 0x0, &(0x7f0000000000)=""/145, &(0x7f0000695ffc)=0x314) [ 202.244531] RSP: 002b:00007f2d4ca09c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 202.252219] RAX: ffffffffffffffda RBX: 00007f2d4ca0a6d4 RCX: 0000000000454e79 [ 202.259466] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000020000340 [ 202.266713] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 202.273962] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000013 [ 202.281209] R13: 00000000000003ea R14: 00000000006f7e90 R15: 000000000000002d [ 202.288683] cgroup: cgroup_addrm_files: failed to add max, err=-12 2018/03/31 07:26:33 executing program 6: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000540)="2e2f6367726fc5653db1ff75006f87fc9e2a9f8943d7e763de0e7b26e057617c7f972439d13b0d79fdfe84bffc9b39a607573a553379c42a06a2805e68a09e9885db14f1061792942e67668421d9bc11f14680a2cc7c3b5bc28d004b5ed45d804d4cbbd7936798ce5241f57521d386cd96d36e76d9644e67adb851ff1f69cf458672bedc42843cd15aeb5cc7994e0369836aca3c9daac86882a98380b698357535d42e", 0x200002, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/qat_adf_ctl\x00', 0x101000, 0x0) setsockopt$ALG_SET_AEAD_AUTHSIZE(r1, 0x117, 0x5, 0x0, 0x5) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000340)={{{@in6=@dev, @in6=@local}}, {{@in6=@mcast2}}}, &(0x7f00000001c0)=0xe8) setsockopt$IPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x41, &(0x7f00000002c0)=ANY=[@ANYBLOB="66696c746572000000000000000000000000000000000000000000000000000004002b3ff82a9a390000000000000000000000000000000000000017a1ef3c6bf025f400000000000000000000000092160000000000000000000000000000000000000000000000000000"], 0x68) openat$cgroup_int(r0, &(0x7f0000000180)='hugetlb.2MB.limit_in_bytes\x00', 0x2, 0x0) r3 = fcntl$dupfd(r1, 0x0, r0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000080)={r0, 0x3, 0x0, 0x8001, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x1e6) write$cgroup_type(r3, &(0x7f0000000280)='threaded\x00', 0x11d) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, &(0x7f0000000200)) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r3, 0x84, 0x7, &(0x7f00000000c0)={0x1f}, 0x4) 2018/03/31 07:26:33 executing program 0 (fault-call:4 fault-nth:0): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1=0xe0000001, @loopback=0x7f000001}, 0xb6) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f000043e000)={0x1, {{0x2, 0x0, @multicast1=0xe0000001}}}, 0x90) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000380)={0x2, {{0x2, 0x0, @multicast1=0xe0000001}}}, 0x88) getsockopt$inet_buf(r0, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000695ffc)=0x314) 2018/03/31 07:26:33 executing program 7: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) r0 = open(&(0x7f00000000c0)='./file0\x00', 0xa0441, 0x80) syz_mount_image$msdos(&(0x7f0000000140)='msdos\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x1, &(0x7f0000000100)=[{&(0x7f0000000480)="9196b107dc9e5c731d56d84afae6a7bf24", 0x11, 0x1f}], 0x0, &(0x7f0000000000)=ANY=[]) mkdir(&(0x7f0000000180)='./file0//ile0\x00', 0x112) rmdir(&(0x7f0000000080)='./file0//ile0\x00') mkdir(&(0x7f0000000340)='./file0//ile0\x00', 0x1) getsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f0000000000), 0x4) r1 = semget$private(0x0, 0x4, 0x21) semctl$GETPID(r1, 0x1, 0xb, &(0x7f0000000200)=""/154) 2018/03/31 07:26:33 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000002000)=@ethernet, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000006000)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000000)={&(0x7f0000004000)={0x1d, r1}, 0x10, &(0x7f0000002ff0)={&(0x7f0000008f80)={0x4, 0xfffffffffffffffc, 0x0, {}, {0x0, 0x7530}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "5925f75a699fa9c8f7bbf2a7123d72ba0ea206d213937de62d977e6fc768a581c7d0578023e55746b849844fc207b0865a0f028bd6f2ce30cd18966bb5a40c2e"}}, 0x80}, 0x1}, 0x0) r2 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x5, 0x800) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x8, 0x2, 0x1, 0x81}, 0x14) 2018/03/31 07:26:33 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x2000000000000}, 0x0, 0x6, 0xffffffffffffffff, 0x0) r0 = socket(0x1e, 0x802, 0x0) sendmsg(r0, &(0x7f0000db5fc8)={&(0x7f00004aeb5c)=@generic={0x10000001001e, "030000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48007be61ffe06d79f00000000000000076c3f010039d8f986ff01000000000000af06d5fe32c419d67bcbc7e3ad316a198356edb9b7341c1fd45624281e27800ece70b076c3979ac40000bd767e2e78a1dfd300881a1565b3b16d7436"}, 0x80, &(0x7f000045d000), 0x0, &(0x7f000016cf61)}, 0x0) setsockopt$inet_int(r0, 0x0, 0x1f, &(0x7f0000000240), 0x4) socketpair$inet_dccp(0x2, 0x6, 0x0, &(0x7f0000000200)) pselect6(0x40, &(0x7f0000000040), &(0x7f0000000080)={0x1e, 0x401}, &(0x7f00000000c0), &(0x7f0000000100)={0x77359400}, &(0x7f0000000180)={&(0x7f0000000140), 0x8}) [ 202.386623] QAT: Invalid ioctl 2018/03/31 07:26:33 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x10010, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x80000) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000001fe8)={0xaa, 0x1}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000019000)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r2 = gettid() syz_open_dev$evdev(&(0x7f0000012fee)='/dev/input/event#\x00', 0x0, 0x0) tkill(r2, 0x7) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000040)={0x5, {{0xa, 0x4e20, 0x19, @remote={0xfe, 0x80, [], 0xbb}, 0x3}}}, 0x88) prctl$setptracer(0x59616d61, r2) [ 202.426370] QAT: Invalid ioctl 2018/03/31 07:26:33 executing program 3: r0 = gettid() r1 = getpid() accept4$netrom(0xffffffffffffff9c, &(0x7f0000000000)=@full, &(0x7f0000000080)=0x48, 0x80000) r2 = openat$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.max.depth\x00', 0x2, 0x0) r3 = dup(r2) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) kcmp(r0, r1, 0x5, r3, r4) r5 = syz_open_procfs(0x0, &(0x7f0000000180)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af1f0200f5ab26d7a071fb35331ce39c5a") fcntl$setstatus(r5, 0x4, 0x0) r6 = syz_open_dev$vcsn(&(0x7f0000000100)='/dev/vcs#\x00', 0x1, 0x20000) read$eventfd(r5, &(0x7f0000000200), 0xfffffe08) syz_open_pts(r3, 0x204000) ftruncate(r6, 0x200000000000000) 2018/03/31 07:26:33 executing program 1 (fault-call:6 fault-nth:46): mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) open(&(0x7f00000000c0)='./file0\x00', 0xa0441, 0x80) syz_mount_image$msdos(&(0x7f0000000140)='msdos\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x1, &(0x7f0000000100)=[{&(0x7f0000000480)="9196b107dc9e5c731d56d84afae6a7bf24", 0x11, 0x1f}], 0x0, &(0x7f0000000000)=ANY=[]) rmdir(&(0x7f0000000080)='./file0//ile0\x00') mkdir(&(0x7f0000000340)='./file0//ile0\x00', 0x1) r0 = semget$private(0x0, 0x4, 0x21) semctl$GETPID(r0, 0x1, 0xb, &(0x7f0000000200)=""/154) 2018/03/31 07:26:33 executing program 6: clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) clock_nanosleep(0x7, 0x1, &(0x7f0000000180)={r0, r1+30000000}, &(0x7f00000001c0)) r2 = syz_open_dev$sndseq(&(0x7f0000b39000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000b0bf74)={0x0, 0x0, 0x0, 'queue0\x00'}) r3 = memfd_create(&(0x7f0000000140)='\'', 0x0) r4 = syz_open_dev$sndseq(&(0x7f0000d82000)='/dev/snd/seq\x00', 0x0, 0x8000000040102) r5 = dup2(r4, r3) socket$alg(0x26, 0x5, 0x0) r6 = getpid() setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f00000000c0)=[@in6={0xa, 0x4e22, 0x1, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}, 0xffff}, @in6={0xa, 0x4e21, 0x39, @loopback={0x0, 0x1}, 0x9}, @in={0x2, 0x4e21, @remote={0xac, 0x14, 0x14, 0xbb}}], 0x48) ptrace$getenv(0x4201, r6, 0x6b, &(0x7f0000000080)) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r5, 0x40605346, &(0x7f000013e000)={0x0, 0x0, {0x2}}) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f00008f0000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCGSID(r7, 0x5429, &(0x7f0000000000)) 2018/03/31 07:26:33 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1=0xe0000001, @loopback=0x7f000001}, 0xb6) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f000043e000)={0x1, {{0x2, 0x0, @multicast1=0xe0000001}}}, 0x90) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000380)={0x2, {{0x2, 0x0, @multicast1=0xe0000001}}}, 0x88) getsockopt$inet_buf(r0, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000695ffc)=0x314) 2018/03/31 07:26:33 executing program 7: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) open(&(0x7f0000000400)='./file0\x00', 0x20400, 0x80) syz_mount_image$msdos(&(0x7f0000000140)='msdos\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x1, &(0x7f0000000100)=[{&(0x7f0000000480)="9196b107dc9e5c731d56d84afae6a7bf24", 0x11, 0x1f}], 0x0, &(0x7f0000000000)=ANY=[]) mkdir(&(0x7f0000000180)='./file0//ile0\x00', 0x112) rmdir(&(0x7f0000000080)='./file0//ile0\x00') mkdir(&(0x7f0000000340)='./file0//ile0\x00', 0x1) r0 = semget$private(0x0, 0x4, 0x21) semctl$GETPID(r0, 0x1, 0xb, &(0x7f0000000200)=""/154) 2018/03/31 07:26:33 executing program 4: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = gettid() rt_sigtimedwait(&(0x7f0000009ff8)={0xffffffffffff880a}, &(0x7f0000002000), &(0x7f0000010ff0)={0x1}, 0x8) r2 = memfd_create(&(0x7f0000000080)="769cfb85ba903a48d4161b3000", 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x2012, r2, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000040)={0x0, 0x8}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000100)={r3, 0x3, 0x1, 0x2, 0x9, 0x1}, 0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000140)={{{@in6, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@mcast2}}, &(0x7f0000000240)=0xe8) ioctl$sock_inet6_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f0000000280)={@empty, 0x71, r4}) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1, 0x2011, r2, 0x0) prctl$setname(0xf, &(0x7f0000001fff)='\x00') rt_sigqueueinfo(r1, 0x4, &(0x7f000000f000)={0x0, 0x0, 0x80000001}) 2018/03/31 07:26:33 executing program 5: pipe2(&(0x7f000041eff8)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) vmsplice(r0, &(0x7f0000a44000)=[{&(0x7f0000938f68)}], 0x1, 0x0) madvise(&(0x7f0000b5e000/0x3000)=nil, 0x3000, 0x10) recvfrom(r0, &(0x7f0000000000)=""/220, 0xdc, 0x40, 0x0, 0x0) madvise(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x10200000008) 2018/03/31 07:26:33 executing program 2: socketpair$inet(0x2, 0x3, 0x9, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000000c0)={r1, 0x9, 0x3, [0x11, 0x101, 0xfffffffffffffeff]}, &(0x7f0000000100)=0xe) r2 = syz_open_dev$sndmidi(&(0x7f0000000140)='/dev/snd/midiC#D#\x00', 0x7fffffff, 0x3ffff) r3 = syz_open_dev$sndpcmp(&(0x7f0000000180)='/dev/snd/pcmC#D#p\x00', 0x6, 0xbc6eac81559a206e) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r2, 0x800442d4, &(0x7f0000000200)=0x8e7d) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f00000001c0)={0x2, r3}) r4 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x80000000003, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000240)=@assoc_value={r1, 0xfff}, 0x8) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r4, 0xc4c85512, &(0x7f0000009b38)={{0x0, 0x3, 0x0, 0x0, "5a21f3ca450c8421dfd3fbbfb00476d45cd8877b80371e62f62b0caa222be0dba57009859949effc25b7558d"}, 0x0, [], {0x77359400}}) 2018/03/31 07:26:33 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1=0xe0000001, @loopback=0x7f000001}, 0xb6) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f000043e000)={0x1, {{0x2, 0x0, @multicast1=0xe0000001}}}, 0x90) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x61, &(0x7f00000000c0)={'filter\x00', 0x4}, 0x68) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000380)={0x2, {{0x2, 0x0, @multicast1=0xe0000001}}}, 0x88) r1 = syz_open_dev$vcsa(&(0x7f0000000140)='/dev/vcsa#\x00', 0x9, 0x800) ioctl$TIOCGSID(r1, 0x5429, &(0x7f00000005c0)=0x0) getpgid(r2) execveat(r1, &(0x7f0000000180)='./file0\x00', &(0x7f0000000340)=[&(0x7f00000001c0)='filter\x00', &(0x7f0000000200)='filter\x00', &(0x7f0000000240)='&#\x00', &(0x7f0000000280)='filter\x00', &(0x7f00000002c0)='trustedself\\(em1\x00', &(0x7f0000000300)='filter\x00'], &(0x7f0000000580)=[&(0x7f0000000440)='filter\x00', &(0x7f0000000480)='filter\x00', &(0x7f00000004c0)='GPL\x00', &(0x7f0000000500)='@%\x00', &(0x7f0000000540)='filter\x00'], 0x1100) getsockopt$inet_buf(r1, 0x0, 0x28, &(0x7f0000000000)=""/145, &(0x7f0000000640)=0x91) 2018/03/31 07:26:33 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/raw\x00') socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_icmp_raw(0x2, 0x3, 0x1) preadv(r0, &(0x7f0000331000)=[{&(0x7f0000723f20)=""/127, 0x7f}], 0x1, 0x103) 2018/03/31 07:26:33 executing program 7: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) r0 = open(&(0x7f00000000c0)='./file0\x00', 0xa0441, 0x80) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000000), 0x4) syz_mount_image$msdos(&(0x7f0000000140)='msdos\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x1, &(0x7f0000000100)=[{&(0x7f0000000480)="9196b107dc9e5c731d56d84afae6a7bf24", 0x11, 0x1f}], 0x0, &(0x7f0000000000)=ANY=[]) mkdir(&(0x7f0000000180)='./file0//ile0\x00', 0x112) rmdir(&(0x7f0000000080)='./file0//ile0\x00') mkdir(&(0x7f0000000340)='./file0//ile0\x00', 0x1) r1 = semget$private(0x0, 0x4, 0x21) mount(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000400)='./file0//ile0\x00', &(0x7f00000004c0)='btrfs\x00', 0x80000, &(0x7f0000000500)="cc373357e122fa58adad229fcd93bb5456134ed379f1dc8075ee69b34b64fade0696c7469070e9779c285cb2387ca88af272c8cbf3447c34620cb6bcb52e05773bbe5a6a73fff96e0045fba458273170583474d5658a2dd56db1f46334c82b92d9c10ac472402541480be436cd4550672ab7a15fb8400fade5fc76686542d004225e76de8b5bf37bcb0784372504b2bc6a42e2ef2b92f9acc9cdb07998fd110c875f4b61d1fd7fbc0fad7df56f869b0d32286fe85a3fc49634a638268d383929d855285d3cc4ac6fcd350d814fe18157afc9b448e3cef62a864c7609dc525f2b2a2ea3") fcntl$getflags(r0, 0x40a) semctl$GETPID(r1, 0x1, 0xb, &(0x7f0000000200)=""/154) [ 203.057533] FAULT_INJECTION: forcing a failure. [ 203.057533] name failslab, interval 1, probability 0, space 0, times 0 [ 203.069135] CPU: 0 PID: 14584 Comm: syz-executor1 Not tainted 4.16.0-rc7+ #372 [ 203.076496] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 203.085841] Call Trace: [ 203.088420] dump_stack+0x194/0x24d [ 203.092043] ? arch_local_irq_restore+0x53/0x53 [ 203.096702] ? finish_task_switch+0x1c1/0x7e0 [ 203.101185] ? finish_task_switch+0x182/0x7e0 [ 203.105683] should_fail+0x8c0/0xa40 [ 203.109393] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 203.114498] ? __sched_text_start+0x8/0x8 [ 203.118632] ? find_held_lock+0x35/0x1d0 [ 203.122689] ? __lock_is_held+0xb6/0x140 [ 203.126751] ? check_same_owner+0x320/0x320 [ 203.131066] ? rcu_read_lock_sched_held+0x108/0x120 [ 203.136084] should_failslab+0xec/0x120 [ 203.140054] kmem_cache_alloc+0x47/0x760 [ 203.144109] ? memcpy+0x45/0x50 [ 203.147384] ? kstrdup+0x59/0x70 [ 203.150747] __kernfs_new_node+0xe2/0x570 [ 203.154887] ? kernfs_dop_revalidate+0x380/0x380 [ 203.159644] ? snprintf+0xc0/0xf0 [ 203.163086] ? vsprintf+0x40/0x40 [ 203.166525] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 203.171445] ? cgroup_file_name+0x1d0/0x1d0 [ 203.175760] kernfs_new_node+0x80/0xe0 [ 203.179643] __kernfs_create_file+0x4b/0x320 [ 203.184051] cgroup_addrm_files+0x3c5/0xa70 [ 203.188369] ? cgroup_file_write+0x710/0x710 [ 203.192776] ? cgroup_idr_replace+0x3f/0x50 [ 203.197089] ? __lock_is_held+0xb6/0x140 [ 203.201153] ? __local_bh_enable_ip+0x121/0x230 [ 203.205815] ? online_css+0x224/0x2e0 [ 203.209617] css_populate_dir+0x198/0x420 [ 203.213771] cgroup_apply_control_enable+0x390/0xbc0 [ 203.218882] ? cgroup_propagate_control+0x570/0x570 [ 203.223906] ? css_populate_dir+0x289/0x420 [ 203.228225] cgroup_mkdir+0x56f/0xfc0 [ 203.232027] ? __lock_is_held+0xb6/0x140 [ 203.236086] ? cgroup_destroy_locked+0x750/0x750 [ 203.240837] ? rcu_read_lock_sched_held+0x108/0x120 [ 203.245851] ? kmem_cache_free+0x258/0x2a0 [ 203.250084] ? set_nlink+0xc1/0x160 [ 203.253706] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 203.258629] ? generic_permission+0x105/0x3c0 [ 203.263121] ? cgroup_destroy_locked+0x750/0x750 [ 203.267878] kernfs_iop_mkdir+0x153/0x1e0 [ 203.272028] vfs_mkdir+0x390/0x600 [ 203.275571] SyS_mkdir+0x220/0x2a0 [ 203.279109] ? SyS_mkdirat+0x2b0/0x2b0 [ 203.282994] ? do_syscall_64+0xb7/0x940 [ 203.286972] ? SyS_mkdirat+0x2b0/0x2b0 [ 203.290845] do_syscall_64+0x281/0x940 [ 203.294711] ? vmalloc_sync_all+0x30/0x30 [ 203.298843] ? syscall_return_slowpath+0x550/0x550 [ 203.303746] ? syscall_return_slowpath+0x2ac/0x550 [ 203.308650] ? prepare_exit_to_usermode+0x350/0x350 [ 203.313656] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 203.319012] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 203.324363] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 203.329534] RIP: 0033:0x454e79 [ 203.332705] RSP: 002b:00007f2d4ca09c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 203.340392] RAX: ffffffffffffffda RBX: 00007f2d4ca0a6d4 RCX: 0000000000454e79 [ 203.347643] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000020000340 [ 203.354897] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 203.362156] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000013 [ 203.369400] R13: 00000000000003ea R14: 00000000006f7e90 R15: 000000000000002e [ 203.376727] cgroup: cgroup_addrm_files: failed to add max, err=-12 2018/03/31 07:26:34 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1=0xe0000001, @loopback=0x7f000001}, 0xb6) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f000043e000)={0x1, {{0x2, 0x0, @multicast1=0xe0000001}}}, 0x90) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000380)={0x2, {{0x2, 0x0, @multicast1=0xe0000001}}}, 0x88) r1 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x9, 0x10180) setsockopt$RDS_FREE_MR(r1, 0x114, 0x3, &(0x7f0000000100)={{0x6, 0x6de}, 0x10}, 0x10) getsockopt$inet_buf(r0, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000695ffc)=0x314) 2018/03/31 07:26:34 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000000)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000200)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a, 0x2, 0x0, 0x0, 0x4}) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffff9c, 0x8933, &(0x7f0000000580)={'nr0\x00'}) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000003600)={@remote={0xfe, 0x80, [], 0xbb}}) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x1) fchmod(0xffffffffffffffff, 0x80) getsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x2f, &(0x7f0000000240)={@empty, @multicast1, @remote}, &(0x7f0000000280)=0xc) sched_setaffinity(0x0, 0x8, &(0x7f00009ad000)) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f00000002c0)=0x8, 0x4) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) read(r2, &(0x7f0000fb6000)=""/28, 0x1c) openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/ppp\x00', 0x800, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f000019ffe9)={0x3, @tick, 0x0, {}, 0x0, 0x1, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000140)) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x77359400}}) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x0, 0x0) vmsplice(r3, &(0x7f0000000380)=[{&(0x7f0000000440)="def6ac5fa6b8ab74d399685b2459bb0e87f0dc559e770731acbe37c9de2950a480a84d0e92a09910bf3db0de0dbb6961604c2b33d3f0d7c0ab0fc95f6e21b1b3d34788d51cb7f8fec1c453a9e3eb60a2f0caec8afa9f0b4bf3c91b9823e1fcf1e94ebe08e60eaa538e7d1675ef9f80bd8efc8e5bf062a9869e8580e03e1ee3438768e8b942978d9ae1da2be6e841daf500b9b189f3ce7360df90d79bda2c1c2dd959b035a651745fcd35bb5d0cdb54f614569b2264f01cfea572abd4e3a4144b3f1b3583f4b01a803f3515e8b74de218efab90e7d9f21841e4a4906800cb4fc442caaecefdf49ecbb3be8bf4ef06959d0b7ecf51341b882ef6", 0xf9}, {&(0x7f0000000780)="9fc2ef70495924c320e239d66907c767a3559b20374dae0c5a07b204722e1f6649618f7d5e9aa9aa7996b371bc28dd24240d3bfa025f7ec18f7c47cbc2009d07c3d14c7bac2efe66db46130fb835583b3ad0b90bce693ae460ab71a30bdcca44d63bf7296e09845966b51be36878b48671480b34f954e49858241f4ab7a54611d38389c2e97c2d8d8139f0e4c994ea8dbdd1b5901d3c068133e9a80d0c995b5b60cdce56b2567205e5a3916b63dbef68e1519912c700ff2b013836f6830939", 0xbf}], 0x2, 0xa) 2018/03/31 07:26:34 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(0xffffffffffffffff, 0x4004ae99, &(0x7f0000000180)=0x7) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_flowlabel\x00') r4 = eventfd2(0x0, 0x80801) ioctl$EVIOCGABS3F(r3, 0x8018457f, &(0x7f00000001c0)=""/215) connect(r3, &(0x7f00000000c0)=@pptp={0x18, 0x2, {0x2}}, 0x80) sendfile(r4, r3, &(0x7f0000000080), 0x10ed5b) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000340)=@ioapic={0x2, 0x0, 0x0, 0x0, 0x0, [{0x489}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x4}]}) ioctl$KVM_ASSIGN_DEV_IRQ(r1, 0x4040ae70, &(0x7f0000000000)={0x5, 0x6, 0x789c, 0x1}) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000440)={0x79, 0x0, [0x16, 0x7fffffff, 0x6, 0x6]}) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000140)={0x5}, 0x4) epoll_pwait(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0xfffffffffffffffa, &(0x7f00000000c0)={0x6f}, 0x8) write$rdma_cm(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYBLOB="c151740eb2330b3281d8dad3d1be2f02818001920948e66e31bde0e878e06702c2a5ac0d4ec934245aefbfc10ba7"], 0x2e) r5 = getpgid(0x0) ioprio_get$pid(0x3, r5) tkill(r5, 0x5) 2018/03/31 07:26:34 executing program 7: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) open(&(0x7f00000000c0)='./file0\x00', 0xa0441, 0x80) syz_mount_image$msdos(&(0x7f0000000140)='msdos\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x1, &(0x7f0000000100)=[{&(0x7f0000000480)="9196b107dc9e5c731d56d84afae6a7bf24", 0x11, 0x1f}], 0x0, &(0x7f0000000000)=ANY=[]) mkdir(&(0x7f0000000180)='./file0//ile0\x00', 0x112) rmdir(&(0x7f0000000080)='./file0//ile0\x00') mkdir(&(0x7f0000000340)='./file0//ile0\x00', 0x1) r0 = semget$private(0x0, 0x0, 0x20) semctl$GETPID(r0, 0x1, 0xb, &(0x7f0000000200)=""/154) 2018/03/31 07:26:34 executing program 1 (fault-call:6 fault-nth:47): mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) open(&(0x7f00000000c0)='./file0\x00', 0xa0441, 0x80) syz_mount_image$msdos(&(0x7f0000000140)='msdos\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x1, &(0x7f0000000100)=[{&(0x7f0000000480)="9196b107dc9e5c731d56d84afae6a7bf24", 0x11, 0x1f}], 0x0, &(0x7f0000000000)=ANY=[]) rmdir(&(0x7f0000000080)='./file0//ile0\x00') mkdir(&(0x7f0000000340)='./file0//ile0\x00', 0x1) r0 = semget$private(0x0, 0x4, 0x21) semctl$GETPID(r0, 0x1, 0xb, &(0x7f0000000200)=""/154) 2018/03/31 07:26:34 executing program 6: r0 = socket$inet(0x2, 0xffffffffffffffff, 0x0) sendto$inet(r0, &(0x7f0000e78a42), 0xffae, 0x8084, &(0x7f00004d4000)={0x2, 0x4e20}, 0x4) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300)='/dev/sequencer\x00', 0x220000, 0x0) getegid() ioctl$int_in(r0, 0x4000005452, &(0x7f0000f75000)=0x4) poll(&(0x7f0000d06ff8)=[{r0}], 0x1, 0x0) socketpair(0x5, 0x0, 0x5, &(0x7f0000000000)) writev(r0, &(0x7f0000000240)=[{&(0x7f0000001400)="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"}, {&(0x7f0000001340)="d8c49a17ea4e05a2fe72b29ccf9dadd0d919b32858d90ebde20f7f2c2b1a0fef9131d4bea09d95db7f9664ae86ed11ce1689f7f629311e75d2d2862660e96a4efe57fc074285fbd7adf829f57706b037aa3de59804f0fae105d55d91ad8d548fc7c054d29d96356416ee1c00e396d57a064639b59ad364d8468ab48f6d67eef1863daa77c4"}], 0x89948c5) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000080)=0xc) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r1, 0xc1105511, &(0x7f0000000100)={{0x401, 0x7, 0x3, 0x1, "78324d63e367a978fd6ee5573835fda50aa75cfa3cabbd3380f1305666409d6ac5195fc30a804616c9e56478", 0xc07d}, 0x0, 0x0, 0x1, r2, 0xe50, 0x8, "e620ee9d63594f22e1cb889f546f24470cab9de762c9104b3963bc2988bdb50c504ec0b4ce2dc63a72c3c23725589e03efe2d1515d77757a53852e7a97e35434", &(0x7f00000000c0)='bdevmime_typevmnet1security\x00', 0x1c, [], [0x4, 0x40, 0x100, 0x1dd4]}) setsockopt$ax25_buf(r1, 0x101, 0x19, &(0x7f0000000340)="8ec6b92a41afaa004ef46b50da676d231cb2508a3841fa7bb09f9a4b1e95d6e0f7fce4c2f2265cae48fdff8119f09a2356be6d546fa96714761d60e125a25413793a783977481c736334b4abbfd405ed10973318a71bd0f30d5b9a31140b04a5f429f391b662bc71488790dec59f7429f2ffd03c0397758726abf793a7621de2f913708cf59f1075c07df42297d31689f0ce7039265541c1f25e6ad971a337221ffc93aa9e426b13af65e830ffe498e4908c5e0a29e27bcf86a50d3e4d85eb97df26a2874fa5bad54a6ceaeae097a0b78865461f5e8efc018f3ba6e05301958144fd01e49249b6f1b1247f830fcb8da94e8c", 0xf2) 2018/03/31 07:26:34 executing program 4: perf_event_open(&(0x7f000025c000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000ff7)='/dev/ppp\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000ffd0)={0x0, 0x0, &(0x7f000000f000), 0x1, 0x0, &(0x7f000000ef31)='b'}) ioctl$ASHMEM_GET_PIN_STATUS(0xffffffffffffffff, 0x7709, 0x0) mmap$binder(&(0x7f000000c000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f00000001c0)=ANY=[@ANYBLOB], &(0x7f00000000c0)=0x1) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000180)={0x4, 0x6, 0x5}) ioctl$KVM_KVMCLOCK_CTRL(r0, 0xaead) [ 203.918287] FAULT_INJECTION: forcing a failure. [ 203.918287] name failslab, interval 1, probability 0, space 0, times 0 [ 203.929551] CPU: 0 PID: 14630 Comm: syz-executor1 Not tainted 4.16.0-rc7+ #372 [ 203.936906] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 203.946253] Call Trace: [ 203.948829] dump_stack+0x194/0x24d [ 203.952439] ? arch_local_irq_restore+0x53/0x53 [ 203.957090] ? lock_release+0xa40/0xa40 [ 203.961050] should_fail+0x8c0/0xa40 [ 203.964742] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 203.969823] ? kernfs_add_one+0x50/0x450 [ 203.973859] ? rb_first_postorder+0xa0/0xa0 [ 203.978153] ? kernfs_add_one+0x50/0x450 [ 203.982192] ? save_stack+0x43/0xd0 [ 203.985793] ? kasan_kmalloc+0xad/0xe0 [ 203.989676] ? trace_hardirqs_off+0x10/0x10 [ 203.993978] ? find_held_lock+0x35/0x1d0 [ 203.998021] ? __lock_is_held+0xb6/0x140 [ 204.002063] ? check_same_owner+0x320/0x320 [ 204.006359] ? lock_downgrade+0x980/0x980 [ 204.010488] ? rcu_note_context_switch+0x710/0x710 [ 204.015398] should_failslab+0xec/0x120 [ 204.019349] __kmalloc_track_caller+0x5f/0x760 [ 204.023911] ? string+0x180/0x200 [ 204.027338] ? kstrdup_const+0x39/0x50 [ 204.031203] kstrdup+0x39/0x70 [ 204.034373] kstrdup_const+0x39/0x50 [ 204.038521] __kernfs_new_node+0xa2/0x570 [ 204.042649] ? kernfs_dop_revalidate+0x380/0x380 [ 204.047384] ? snprintf+0xc0/0xf0 [ 204.050816] ? vsprintf+0x40/0x40 [ 204.054249] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 204.059157] ? cgroup_file_name+0x1d0/0x1d0 [ 204.063456] kernfs_new_node+0x80/0xe0 [ 204.067324] __kernfs_create_file+0x4b/0x320 [ 204.071711] cgroup_addrm_files+0x3c5/0xa70 [ 204.076021] ? cgroup_file_write+0x710/0x710 [ 204.080407] ? cgroup_idr_replace+0x3f/0x50 [ 204.084708] ? __lock_is_held+0xb6/0x140 [ 204.088752] ? __local_bh_enable_ip+0x121/0x230 [ 204.093394] ? online_css+0x224/0x2e0 [ 204.097171] css_populate_dir+0x198/0x420 [ 204.101297] cgroup_apply_control_enable+0x390/0xbc0 [ 204.106379] ? cgroup_propagate_control+0x570/0x570 [ 204.111374] ? css_populate_dir+0x289/0x420 [ 204.115673] cgroup_mkdir+0x56f/0xfc0 [ 204.119449] ? __lock_is_held+0xb6/0x140 [ 204.123485] ? cgroup_destroy_locked+0x750/0x750 [ 204.128215] ? rcu_read_lock_sched_held+0x108/0x120 [ 204.133204] ? kmem_cache_free+0x258/0x2a0 [ 204.137417] ? set_nlink+0xc1/0x160 [ 204.141025] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 204.145926] ? generic_permission+0x105/0x3c0 [ 204.150401] ? cgroup_destroy_locked+0x750/0x750 [ 204.155133] kernfs_iop_mkdir+0x153/0x1e0 [ 204.159258] vfs_mkdir+0x390/0x600 [ 204.162777] SyS_mkdir+0x220/0x2a0 [ 204.166295] ? SyS_mkdirat+0x2b0/0x2b0 [ 204.170159] ? do_syscall_64+0xb7/0x940 [ 204.174109] ? SyS_mkdirat+0x2b0/0x2b0 [ 204.177969] do_syscall_64+0x281/0x940 [ 204.181832] ? vmalloc_sync_all+0x30/0x30 [ 204.185955] ? _raw_spin_unlock_irq+0x27/0x70 [ 204.190425] ? finish_task_switch+0x1c1/0x7e0 [ 204.194895] ? syscall_return_slowpath+0x550/0x550 [ 204.199799] ? syscall_return_slowpath+0x2ac/0x550 [ 204.204703] ? prepare_exit_to_usermode+0x350/0x350 [ 204.209699] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 204.215042] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 204.219862] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 204.225029] RIP: 0033:0x454e79 [ 204.228195] RSP: 002b:00007f2d4ca09c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 204.235875] RAX: ffffffffffffffda RBX: 00007f2d4ca0a6d4 RCX: 0000000000454e79 [ 204.243119] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000020000340 [ 204.250363] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 204.257605] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000013 2018/03/31 07:26:34 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f00000002c0)=0x1, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x40200, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$bt_l2cap_L2CAP_LM(r2, 0x6, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4) openat$cgroup_type(r2, &(0x7f0000000100)='cgroup.type\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r2, 0xc10c5541, &(0x7f0000000440)={0x14c, 0x4, 0x23, 0x0, 0x0, [], [], [], 0x82, 0x9}) mq_open(&(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x4, &(0x7f0000000240)={0x6, 0x8629, 0x4, 0x3f, 0xcb, 0x47, 0x4, 0xcced}) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000280)={r2, r1}) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f0000000080)={r0}) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xaa}, 0x3}, 0x1c) 2018/03/31 07:26:35 executing program 3: mkdir(&(0x7f0000a13000)='./file0\x00', 0x0) mount(&(0x7f0000212ff8)='./file0\x00', &(0x7f000001c000)='./file0\x00', &(0x7f0000982ff9)='mqueue\x00', 0x0, &(0x7f0000ebcffe)) r0 = creat(&(0x7f00004c1ff4)='./file0/bus\x00', 0x0) lseek(r0, 0x8000000000000000, 0x0) stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000140)=0xc) sendmsg$nl_generic(r0, &(0x7f0000002900)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000028c0)={&(0x7f0000002a00)=ANY=[@ANYBLOB="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", @ANYRES32=r1, @ANYBLOB="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", @ANYRES32=r2, @ANYBLOB="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"], 0x2708}, 0x1, 0x0, 0x0, 0x8040}, 0x4008010) setxattr(&(0x7f0000002940)='./file0\x00', &(0x7f0000002980)=@known='trusted.syz\x00', &(0x7f00000029c0)='mqueue\x00', 0x7, 0x3) [ 204.264849] R13: 00000000000003ea R14: 00000000006f7e90 R15: 000000000000002f [ 204.272256] cgroup: cgroup_addrm_files: failed to add weight, err=-12 2018/03/31 07:26:35 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1=0xe0000001, @loopback=0x7f000001}, 0xb6) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cuse\x00', 0x90200, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0xc0bc5351, &(0x7f0000000100)={0x1, 0x0, 'client0\x00', 0x2, "df31a5124695814d", "ad32fdd934d401a327420d453ac7fd8efad564318babb7bc919c18b3276787e4", 0x4993, 0x5}) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f000043e000)={0x1, {{0x2, 0x0, @multicast1=0xe0000001}}}, 0x90) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000380)={0x2, {{0x2, 0x0, @multicast1=0xe0000001}}}, 0x88) getsockopt$inet_buf(r0, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000695ffc)=0x314) [ 204.329983] binder: 14638 RLIMIT_NICE not set [ 204.723448] binder: 14638 RLIMIT_NICE not set [ 204.728287] binder: send failed reply for transaction 75 to 14624:14663 [ 204.737592] binder: 14624:14638 ioctl c0306201 2000ffd0 returned -14 [ 204.747333] binder: 14624:14663 ioctl c0306201 20004000 returned -14 [ 204.755795] binder: BINDER_SET_CONTEXT_MGR already set [ 204.761312] binder: 14624:14663 ioctl c0306201 2000ffd0 returned -14 [ 204.768403] binder: 14624:14638 ioctl 40046207 0 returned -16 [ 204.779714] binder_alloc: 14624: binder_alloc_buf, no vma [ 204.785347] binder: 14624:14663 transaction failed 29189/-3, size 0-0 line 2963 [ 204.810831] binder: undelivered TRANSACTION_ERROR: 29189 [ 204.816768] binder: undelivered TRANSACTION_COMPLETE [ 204.821950] binder: undelivered TRANSACTION_ERROR: 29201 2018/03/31 07:26:35 executing program 6: r0 = syz_open_dev$sg(&(0x7f000028fff7)='/dev/sg#\x00', 0x0, 0x0) ioctl(r0, 0x4000000000001276, &(0x7f0000000040)) msgget(0x2, 0x0) getsockopt$nfc_llcp(0xffffffffffffffff, 0x118, 0x4, &(0x7f0000000740)=""/223, 0xdf) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f00000002c0)={@empty, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x8) r1 = accept4$nfc_llcp(r0, &(0x7f0000000fc0), &(0x7f0000000080)=0x60, 0x800) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(0xffffffffffffffff, 0xc1105511, &(0x7f0000000100)={{0x0, 0x0, 0x0, 0x0, "386aea20273dc03c3d18dd0dbd4a0ca15f9f580393cc4ec3b8ee256b9aa630224ba64c6ff43ee01d2996c914"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "eda422cd37591b3a5a7a683380f7e0b9e790c6b72cd0a4f3342f7431c1699a305ca3091bb2320e8df4e298a2cca26637866a68c1426ffbd8a6c7da1d8ea77d9d", &(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x13}) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/self/net/pfkey\x00', 0x800, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) add_key$user(&(0x7f0000000480)='user\x00', &(0x7f00000004c0)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000500)="d3238eea76b0470531092a0a77b0b49789a0fc97b8f8b9e23a2a5a5a0c169ed6e83480b4801dbf79db3527904ee3128c05ce2806e210237c36b88ceabe99d8784860e5d0e91fe33d38d0133e056cdd1e2910d57fc5eb1b23db3b60a7077ff33bb6c7445cd258ee25f9187269c22d1ed05acb2b9b599bd285b692257a631754ab9befebd3fdb3167361c24c5c5dcf90e476e052b9d22362c57878cb7205fe361346d6beb77b7844fe94", 0xa9, 0xfffffffffffffffe) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000300)={'gretap0\x00', {0x2, 0x4e24, @loopback=0x7f000001}}) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000780)=[{&(0x7f0000000840)="edb4a01f68d76905035a4ebdd427d31585a5a650581902b1c077f74ca8f1ce7d3e2f6e1c6760433af9664b3f3bebab3a1a1c4ef86f42c39b758accc1e7637bb18d28248dc7a1719b73388830b162613b17fd02220bd1fe2ad86adb96efcfc672d126ae58f745fba0e7534cdbae947449df767bd76a0c38b5752dcd13f7065edea86dc156c0708e76c2c99a94a95f1e93ff73cb3eb94e06d399cf48aaac7963d13e4b3a6b32bc2b19d5461545dcf3f71bb24442d286421f8d891d77a3c4c1c9435bbdf187682c22ded22b669b7790d05b4894166a2d5f33098cf908a23a2e0671d824e88942fbe0bd1416c98d9b", 0xed}], 0x1, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r4, 0x4010ae68, &(0x7f0000000000)={0x1, 0x5000}) ioctl$KVM_CREATE_PIT2(r4, 0x4040ae77, &(0x7f0000000440)={0xfffffffffffffff7}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000280)='tls\x00', 0xfffffcbe) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000005fd8)={'vcan0\x00'}) socket$can_raw(0x1d, 0x3, 0x1) socket$inet6(0xa, 0x0, 0x0) r6 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x0, 0x0) connect$vsock_stream(r6, &(0x7f0000000080)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) ioctl$LOOP_SET_CAPACITY(r1, 0x4c07) dup2(r3, r5) dup3(r3, 0xffffffffffffffff, 0x0) getsockopt$netrom_NETROM_T1(0xffffffffffffffff, 0x103, 0x1, &(0x7f0000000240), &(0x7f0000000280)=0x4) execveat(r0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000580)=[&(0x7f0000000500)='proc-\x00', &(0x7f0000000540)='/dev/sg#\x00'], &(0x7f0000000680)=[&(0x7f00000005c0)='/dev/sg#\x00', &(0x7f0000000600)='/dev/sg#\x00'], 0x1d00) ioctl$KVM_CREATE_DEVICE(r0, 0xc00caee0, &(0x7f0000000180)={0x0, r1, 0x1}) ftruncate(0xffffffffffffffff, 0x45) 2018/03/31 07:26:35 executing program 2: unshare(0x8000000) r0 = mq_open(&(0x7f00000deffd)='-$\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000664fc0)={0x0, 0x5, 0x2}) mq_timedsend(r0, &(0x7f0000118fff), 0x0, 0x0, &(0x7f000076bff0)={0x77359400}) mq_timedsend(r0, &(0x7f0000000000), 0x0, 0x100000001, &(0x7f0000000040)) mq_timedreceive(r0, &(0x7f0000d56f7d)=""/131, 0x83, 0x0, 0x0) sysfs$1(0x1, &(0x7f0000000100)='/dev/mixer\x00') r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x400000, 0x0) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)) ioctl$DRM_IOCTL_MARK_BUFS(r1, 0x40206417, &(0x7f0000000080)={0x3, 0x174dabd2, 0x4, 0x6, 0x4, 0x2}) 2018/03/31 07:26:35 executing program 1 (fault-call:6 fault-nth:48): mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) open(&(0x7f00000000c0)='./file0\x00', 0xa0441, 0x80) syz_mount_image$msdos(&(0x7f0000000140)='msdos\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x1, &(0x7f0000000100)=[{&(0x7f0000000480)="9196b107dc9e5c731d56d84afae6a7bf24", 0x11, 0x1f}], 0x0, &(0x7f0000000000)=ANY=[]) rmdir(&(0x7f0000000080)='./file0//ile0\x00') mkdir(&(0x7f0000000340)='./file0//ile0\x00', 0x1) r0 = semget$private(0x0, 0x4, 0x21) semctl$GETPID(r0, 0x1, 0xb, &(0x7f0000000200)=""/154) 2018/03/31 07:26:35 executing program 7: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) r0 = open(&(0x7f00000000c0)='./file0\x00', 0xa0441, 0x80) syz_mount_image$msdos(&(0x7f0000000140)='msdos\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x1, &(0x7f0000000100)=[{&(0x7f0000000480)="9196b107dc9e5c731d56d84afae6a7bf24", 0x11, 0x1f}], 0x0, &(0x7f0000000000)=ANY=[]) mkdir(&(0x7f0000000180)='./file0//ile0\x00', 0x112) rmdir(&(0x7f0000000080)='./file0//ile0\x00') mkdir(&(0x7f0000000340)='./file0//ile0\x00', 0x1) close(r0) r1 = semget$private(0x0, 0x4, 0x21) semctl$GETPID(r1, 0x1, 0xb, &(0x7f0000000200)=""/154) getsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000000)={0x0, 0x8000}, &(0x7f00000002c0)=0x8) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000400)={r2, 0x0, 0x1, [0x8]}, 0xa) 2018/03/31 07:26:35 executing program 3: r0 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x6, 0x200000) eventfd2(0x2d8a, 0x1) unshare(0x400) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f00000d3f0a)=""/246) ioctl$EVIOCGREP(r1, 0x4004743c, &(0x7f00005c8f52)=""/174) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffff9c, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e22, 0x6, @remote={0xfe, 0x80, [], 0xbb}, 0x26}, @in6={0xa, 0x4e23, 0x10000, @empty, 0xfffffffffffff131}, @in6={0xa, 0x0, 0x8, @local={0xfe, 0x80, [], 0xaa}, 0x8}, @in={0x2, 0x4e20, @loopback=0x7f000001}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f00000009c0)=ANY=[@ANYRES32=r2, @ANYBLOB="6a0400001ac0c57fea11377692d0ddd65270e9c97a6efa701dffc6059a9a0ff6aae01a998ff3630cffdbaecf3adb5813c1ec1435cadb8421985e27020ebfca87e28286801243f0ffcebc9a3efbaa4ca74bdf6b2c26755d050b8e350a48244f281df9a050cc3bf386fd5050891bcde12f48412863bed3d78e065f6a00000000000000000000000000000000000000000000000000"], &(0x7f0000000180)=0x2) r3 = request_key(&(0x7f0000000940)='keyring\x00', &(0x7f0000000980)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000c80)='ip6tnl0\x00', 0xfffffffffffffff8) r4 = add_key$keyring(&(0x7f0000000d40)='keyring\x00', &(0x7f0000000d80)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$search(0xa, r3, &(0x7f0000000cc0)='rxrpc_s\x00', &(0x7f0000000d00)={0x73, 0x79, 0x7a, 0x1}, r4) r5 = socket$inet(0x2, 0x6, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r5, 0x0, 0x80, &(0x7f00000008c0)=@broute={'broute\x00', 0x20, 0x2, 0x3e8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000280], 0x0, &(0x7f0000000240), &(0x7f0000000dc0)=ANY=[@ANYBLOB="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"]}, 0x491) r6 = socket(0x1d, 0xb, 0x0) setsockopt$inet_group_source_req(r6, 0x0, 0xfe0d64ad1c6cb9f1, &(0x7f0000000680)={0x1000, {{0x2, 0x4e23, @multicast1=0xe0000001}}, {{0x2, 0x4e22, @broadcast=0xffffffff}}}, 0x108) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000000), &(0x7f0000000200)=0x4) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0) r7 = syz_open_dev$loop(&(0x7f0000000b80)='/dev/loop#\x00', 0x0, 0x4006) r8 = memfd_create(&(0x7f00000001c0)='syz_tun\x00', 0x3) pwritev(r8, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000400)={0x0, 0x0, 0x3, 0xffffffff}, &(0x7f0000000440)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000480)={0x0, @in={{0x2, 0x4e24, @remote={0xac, 0x14, 0x14, 0xbb}}}, [0x7fff, 0x2, 0x3, 0x0, 0x5, 0x5, 0x6, 0x10001, 0x9, 0x200, 0x4, 0x3304, 0x6, 0x8, 0x3]}, &(0x7f0000000580)=0x100) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000640)={0x0, @in6={{0xa, 0x4e23, 0x81, @mcast2={0xff, 0x2, [], 0x1}, 0x7fff}}, 0x2, 0x4, 0xf8, 0x1, 0x6}, &(0x7f0000000700)=0x98) getsockopt$inet_sctp6_SCTP_CONTEXT(r8, 0x84, 0x11, &(0x7f0000000740)={0x0, 0x200}, &(0x7f0000000340)=0x8) pselect6(0x40, &(0x7f0000000a80)={0x28b, 0x3, 0x9, 0x8001, 0xff, 0x1ff, 0x40, 0x10000}, &(0x7f0000000b00)={0x92a, 0x7, 0x7fff, 0x9, 0x0, 0x5, 0x8, 0x1f}, &(0x7f0000000b40)={0x80000001, 0x81, 0x2, 0x4, 0x3, 0x7, 0xb3f5, 0x37ef}, &(0x7f0000000bc0), &(0x7f0000000c40)={&(0x7f0000000c00)={0x6}, 0x8}) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r8, 0x84, 0x6, &(0x7f00000007c0)={0x0, @in6={{0xa, 0x4e23, 0x7, @dev={0xfe, 0x80, [], 0xe}, 0x3}}}, &(0x7f0000000880)=0x84) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r8, 0x84, 0x7b, &(0x7f00000008c0)={0x0, 0x1b5}, &(0x7f0000000900)=0x8) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f0000000280)=@in={0x2, 0x4e20}, 0x10, &(0x7f00000003c0)=[{&(0x7f00000002c0)="b25b2002e7d8bc055c7d9ed742f2ca865f150419606e27d187b4ce0f2f81d8a0ab0d18a71f265b68c86f9c82600911dcc4698a4baebfb56adf90bec3", 0x3c}], 0x1, &(0x7f0000000940), 0x0, 0x24000001}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'ipddp0\x00', @ifru_mtu=0x1}) ioctl$LOOP_CHANGE_FD(r7, 0x4c00, r8) sendfile(r7, r7, &(0x7f0000000080), 0x102000004) 2018/03/31 07:26:35 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1=0xe0000001, @loopback=0x7f000001}, 0xb6) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f000043e000)={0x1, {{0x2, 0x0, @multicast1=0xe0000001}}}, 0x90) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000240)={0x2, {{0x2, 0x4e1e, @multicast1=0xe0000001}}}, 0x88) r1 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x6, 0x800) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x4) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r1) fsetxattr(r1, &(0x7f0000000100)=@random={'security.', 'bdev\x00'}, &(0x7f0000000140)='/dev/dmmidi#\x00', 0xd, 0x3) getsockopt$inet_buf(r0, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000695ffc)=0x314) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000180)=0x0) ptrace$setregset(0x4205, r2, 0x203, &(0x7f00000001c0)={&(0x7f0000000300)="9b08cc8675ffca11a24dfc24da1eca0375f40eb474f5a1a59418dd73d90bd8132726f9df8f6f4ed1ef62c5b30021122176e904bf86f8e40783cd9b79b355819bbcbf289db59af181d42fab77d51ecbf0ed74847197946ada5fe058c73f16a4214215e361265befa7875002f65b03de277b601a42aff794a41f1c4f0a3b09307005394eb3996f41e11f9abbdae77c7697b79b039f6dfc5d5602be82e0e3eb6c3bbae5761d061aebcbd02f5f62018db40f7808b759d15295b9e10c0675c76db8b7706bd285c2e5afafe09da7d56b", 0xcd}) 2018/03/31 07:26:35 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2, 0x4) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, &(0x7f0000000080)={'nat\x00', 0x4, [{}, {}, {}, {}]}, 0x68) r1 = memfd_create(&(0x7f00002c1000)="75736572aa736563757269747900", 0x2000000005) lseek(r1, 0x8000000000, 0x1) sendfile(r1, r1, 0x0, 0x400) ioctl$GIO_FONT(r1, 0x4b60, &(0x7f0000000040)=""/57) 2018/03/31 07:26:35 executing program 4: r0 = userfaultfd(0x3) r1 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x401, 0x2c4082) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000005540)={{{@in=@broadcast, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@remote}}, &(0x7f0000005640)=0xe8) r3 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/autofs\x00', 0x121000, 0x0) socketpair(0xa, 0x6, 0xfffffffffffffffc, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f000000ffd0)={0x0, 0x0, &(0x7f000000f000), 0x1, 0x0, &(0x7f000000ef31)='b'}) open_by_handle_at(r5, &(0x7f00000000c0)={0x8, 0x8}, 0x200000) r6 = mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r3, 0x0) ioctl$TCSETAW(r1, 0x5407, &(0x7f00000001c0)={0x3, 0xe393, 0xa5, 0x5c6, 0x0, 0x0, 0x4, 0x6, 0x7, 0x7fff}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$EVIOCGLED(r4, 0x80404519, &(0x7f0000000480)=""/52) socketpair(0x0, 0x0, 0x0, &(0x7f00000002c0)) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(0xffffffffffffffff, 0x84, 0x74, &(0x7f0000000380)=""/176, &(0x7f0000000300)=0xb0) ioctl$BINDER_THREAD_EXIT(r3, 0x40046208, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x20, 0x0, &(0x7f0000000080)=[@acquire_done={0x40106309}, @free_buffer={0x40086303, r6}], 0x0, 0x0, &(0x7f00000000c0)}) setsockopt$packet_drop_memb(r1, 0x107, 0x2, &(0x7f0000005680)={r2, 0x1, 0x6, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0x10) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000280)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000340)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x3}) r7 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) close(r7) mkdir(&(0x7f000082f000)='./control\x00', 0x0) r8 = creat(&(0x7f0000000200)='./control/file0\x00', 0x0) syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0xf6ca, 0x0) mmap(&(0x7f0000011000/0x4000)=nil, 0x4000, 0x8, 0x10, r1, 0x1000000) r9 = socket$inet(0x2, 0x3, 0xff) sendmsg(r9, &(0x7f00000014c0)={&(0x7f0000000080)=@in={0x2}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000100)="a75fdcf8382d87057501070000000000dc72564f955555cc153a58ac698d105a5f205c91", 0x24}], 0x1, &(0x7f0000000040)}, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r8, 0x4058534c, &(0x7f0000005140)={0x5, 0x800, 0x8, 0x3, 0x400, 0x3}) [ 205.119267] FAULT_INJECTION: forcing a failure. [ 205.119267] name failslab, interval 1, probability 0, space 0, times 0 [ 205.130631] CPU: 1 PID: 14679 Comm: syz-executor1 Not tainted 4.16.0-rc7+ #372 [ 205.134085] binder: 14673 RLIMIT_NICE not set [ 205.137984] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 205.137989] Call Trace: [ 205.138005] dump_stack+0x194/0x24d [ 205.138019] ? arch_local_irq_restore+0x53/0x53 [ 205.138037] should_fail+0x8c0/0xa40 2018/03/31 07:26:35 executing program 5: r0 = syz_open_pts(0xffffffffffffff9c, 0x440) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f0000000040)={0x6, &(0x7f0000000000)=[{0x86, 0x4}, {0x4, 0x5}, {0x3, 0x3}, {0xff, 0xfffffffffffffff7}, {0xf80000000000000, 0x1}, {0x1, 0x6}]}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'ccm_base(ctr-aes-aesni,poly1305-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080), 0x0) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000080)={0x0}) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x12000, 0x0) ioctl$DRM_IOCTL_RM_CTX(r3, 0xc0086421, &(0x7f0000000100)={r2, 0x1}) [ 205.138046] ? kstrdup+0x39/0x70 [ 205.138059] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 205.174833] ? cgroup_apply_control_enable+0x390/0xbc0 [ 205.180110] ? kernfs_iop_mkdir+0x153/0x1e0 [ 205.184427] ? vfs_mkdir+0x390/0x600 [ 205.188140] ? SyS_mkdir+0x220/0x2a0 [ 205.191850] ? do_syscall_64+0x281/0x940 [ 205.195912] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 205.201273] ? find_held_lock+0x35/0x1d0 [ 205.205333] ? find_held_lock+0x35/0x1d0 [ 205.209399] ? __lock_is_held+0xb6/0x140 [ 205.213465] ? check_same_owner+0x320/0x320 2018/03/31 07:26:35 executing program 5: syz_emit_ethernet(0x3a, &(0x7f0000000300)=ANY=[@ANYBLOB="0180c2000000ffffffffffff08004700002c000000000000907800000000e000000194060000000000e7422000f7000000000000000000000000baeb99f1c465a6bb6348495dbc4dbcf9325d18fd77262dce80793c6ee977d2bb38c02f7115e23fba2efe5ca43e59713be2a1e9c048d4136478777b4d48ac83fb80a20a120a058a59deef91dbe969308f73473086db530e21b99ced1fa8c4bbb58c4de2d422459c49fc246a7293337e9fec56dcf9658c420e29cbbfd5233ad54d421530fa744cb158d436c0a16b068ae51419e23d453d38d15782b7630b274984ab5d0dacc419a438da65d2f931edf340a61e2a88634da674416ba5b18589d1d24b2056422278a180c6373542dbe1c77adbe4f182fb8135c38aa0afcfd4317d7ca04406d43407e4745f9e4225dc2241b0dedb609d0958702fe225afe8dbcc00385381a0afc33be8f8c949f19f86a8c361f3ba001de77f3f75a1c443dfcf7b4c6db6b1ab14621d8495cf22d8ed9ce12c29abec52d242006902c9baa25e41f9b79f2288b08f14b099f942a0bb8568f9a028e295f157f383ed2b1ee6bc20111aff093cf0da42dae0c0ffb15c8508308af571fda1d61ddf7975d2c37b5d22cccf1120f7be48e2e5a6afb1f6901ac3b2356c76fb4e66be000ca9172ea6835355e27068647774ace67d7c8cf924951213fccd7268847c06ebd3764ff0f7870e3a21f1c138a1dd09000000164921e322231a718e65befad8561a839217cb96d3f874c011d5e6a9be644173bff1440f03fbb9882e48d714460809e6030239c05ca0452102e8450793c336cb13a7821ae1e91d6ccad92a86ce62b7af509909e8d43b277b44ada5e31d7d20b0447b60e629e78bad35b1f66d109adc"], 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) [ 205.217796] ? rcu_note_context_switch+0x710/0x710 [ 205.222720] ? rcu_read_lock_sched_held+0x108/0x120 [ 205.227735] should_failslab+0xec/0x120 [ 205.231704] kmem_cache_alloc+0x47/0x760 [ 205.235758] ? memcpy+0x45/0x50 [ 205.239038] ? kstrdup+0x59/0x70 [ 205.242406] __kernfs_new_node+0xe2/0x570 [ 205.246559] ? kernfs_dop_revalidate+0x380/0x380 [ 205.251308] ? snprintf+0xc0/0xf0 [ 205.254751] ? vsprintf+0x40/0x40 [ 205.258195] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 205.263119] ? cgroup_file_name+0x1d0/0x1d0 2018/03/31 07:26:35 executing program 5: time(&(0x7f0000001240)) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, &(0x7f00000000c0)={0x28, 0x0, 0x2710, @host=0x2}, 0x10) r3 = syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0xffffffffffffff01, 0x109041) syncfs(r1) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000001140)={0x0, 0x80000001}, &(0x7f0000001180)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f00000011c0)={r4}, &(0x7f0000001200)=0x8) times(&(0x7f0000000040)) r5 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x69, 0x80000) ioctl$KDSKBSENT(r3, 0x4b49, &(0x7f0000000140)="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") ioctl$sock_ipx_SIOCAIPXITFCRT(r5, 0x89e0, &(0x7f0000001280)=0x9) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'lo\x00'}) [ 205.267437] kernfs_new_node+0x80/0xe0 [ 205.271325] __kernfs_create_file+0x4b/0x320 [ 205.275733] cgroup_addrm_files+0x3c5/0xa70 [ 205.280056] ? cgroup_file_write+0x710/0x710 [ 205.284466] ? cgroup_idr_replace+0x3f/0x50 [ 205.288787] ? __lock_is_held+0xb6/0x140 [ 205.292847] ? __local_bh_enable_ip+0x121/0x230 [ 205.297509] ? online_css+0x224/0x2e0 [ 205.301305] css_populate_dir+0x198/0x420 [ 205.305448] cgroup_apply_control_enable+0x390/0xbc0 [ 205.310552] ? cgroup_propagate_control+0x570/0x570 [ 205.315570] ? css_populate_dir+0x289/0x420 [ 205.319888] cgroup_mkdir+0x56f/0xfc0 [ 205.323680] ? __lock_is_held+0xb6/0x140 [ 205.327745] ? cgroup_destroy_locked+0x750/0x750 [ 205.332503] ? rcu_read_lock_sched_held+0x108/0x120 [ 205.337512] ? kmem_cache_free+0x258/0x2a0 [ 205.341737] ? set_nlink+0xc1/0x160 [ 205.345355] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 205.350266] ? generic_permission+0x105/0x3c0 [ 205.354744] ? cgroup_destroy_locked+0x750/0x750 [ 205.359483] kernfs_iop_mkdir+0x153/0x1e0 [ 205.363613] vfs_mkdir+0x390/0x600 [ 205.367136] SyS_mkdir+0x220/0x2a0 [ 205.370657] ? SyS_mkdirat+0x2b0/0x2b0 [ 205.374525] ? do_syscall_64+0xb7/0x940 [ 205.378481] ? SyS_mkdirat+0x2b0/0x2b0 [ 205.382348] do_syscall_64+0x281/0x940 [ 205.386213] ? vmalloc_sync_all+0x30/0x30 [ 205.390342] ? _raw_spin_unlock_irq+0x27/0x70 [ 205.394816] ? finish_task_switch+0x1c1/0x7e0 [ 205.399293] ? syscall_return_slowpath+0x550/0x550 [ 205.404202] ? syscall_return_slowpath+0x2ac/0x550 [ 205.409111] ? prepare_exit_to_usermode+0x350/0x350 [ 205.414106] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 205.419451] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 205.424276] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 205.429446] RIP: 0033:0x454e79 [ 205.432616] RSP: 002b:00007f2d4ca09c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 205.440307] RAX: ffffffffffffffda RBX: 00007f2d4ca0a6d4 RCX: 0000000000454e79 [ 205.447554] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000020000340 [ 205.454805] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 205.462052] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000013 2018/03/31 07:26:36 executing program 2: r0 = socket(0x10, 0x7fe, 0xffffffffffffffff) write(r0, &(0x7f00003fe000)="24000000280007003200000800367700fbffffff0100000000000000ffffffff0100ff10", 0x24) 2018/03/31 07:26:36 executing program 1 (fault-call:6 fault-nth:49): mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) open(&(0x7f00000000c0)='./file0\x00', 0xa0441, 0x80) syz_mount_image$msdos(&(0x7f0000000140)='msdos\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x1, &(0x7f0000000100)=[{&(0x7f0000000480)="9196b107dc9e5c731d56d84afae6a7bf24", 0x11, 0x1f}], 0x0, &(0x7f0000000000)=ANY=[]) rmdir(&(0x7f0000000080)='./file0//ile0\x00') mkdir(&(0x7f0000000340)='./file0//ile0\x00', 0x1) r0 = semget$private(0x0, 0x4, 0x21) semctl$GETPID(r0, 0x1, 0xb, &(0x7f0000000200)=""/154) [ 205.469313] R13: 00000000000003ea R14: 00000000006f7e90 R15: 0000000000000030 [ 205.476827] cgroup: cgroup_addrm_files: failed to add weight, err=-12 [ 205.530212] kernel msg: ebtables bug: please report to author: Wrong len argument [ 205.548461] FAULT_INJECTION: forcing a failure. [ 205.548461] name failslab, interval 1, probability 0, space 0, times 0 [ 205.559816] CPU: 1 PID: 14722 Comm: syz-executor1 Not tainted 4.16.0-rc7+ #372 [ 205.567170] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 205.576519] Call Trace: [ 205.579109] dump_stack+0x194/0x24d [ 205.582736] ? arch_local_irq_restore+0x53/0x53 [ 205.587412] should_fail+0x8c0/0xa40 [ 205.591125] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 205.596229] ? kernfs_add_one+0x50/0x450 [ 205.600285] ? rb_first_postorder+0xa0/0xa0 [ 205.604587] ? kernfs_add_one+0x50/0x450 [ 205.608632] ? trace_hardirqs_off+0x10/0x10 [ 205.612936] ? find_held_lock+0x35/0x1d0 [ 205.616978] ? __lock_is_held+0xb6/0x140 [ 205.621034] ? check_same_owner+0x320/0x320 [ 205.625347] ? lock_downgrade+0x980/0x980 [ 205.629476] ? rcu_note_context_switch+0x710/0x710 [ 205.634391] should_failslab+0xec/0x120 [ 205.638350] __kmalloc_track_caller+0x5f/0x760 [ 205.642918] ? string+0x180/0x200 [ 205.646352] ? kstrdup_const+0x39/0x50 [ 205.650222] kstrdup+0x39/0x70 [ 205.653398] kstrdup_const+0x39/0x50 [ 205.657092] __kernfs_new_node+0xa2/0x570 [ 205.661222] ? kernfs_dop_revalidate+0x380/0x380 [ 205.665964] ? snprintf+0xc0/0xf0 [ 205.669397] ? vsprintf+0x40/0x40 [ 205.672833] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 205.677742] ? cgroup_file_name+0x1d0/0x1d0 [ 205.682049] kernfs_new_node+0x80/0xe0 [ 205.685919] __kernfs_create_file+0x4b/0x320 [ 205.690312] cgroup_addrm_files+0x3c5/0xa70 [ 205.694621] ? cgroup_file_write+0x710/0x710 [ 205.699017] ? cgroup_idr_replace+0x3f/0x50 [ 205.703331] ? __lock_is_held+0xb6/0x140 [ 205.707381] ? __local_bh_enable_ip+0x121/0x230 [ 205.712034] ? online_css+0x224/0x2e0 [ 205.715819] css_populate_dir+0x198/0x420 [ 205.719951] cgroup_apply_control_enable+0x390/0xbc0 [ 205.725044] ? cgroup_propagate_control+0x570/0x570 [ 205.730070] ? css_populate_dir+0x289/0x420 [ 205.734374] cgroup_mkdir+0x56f/0xfc0 [ 205.738153] ? __lock_is_held+0xb6/0x140 [ 205.742199] ? cgroup_destroy_locked+0x750/0x750 [ 205.746935] ? rcu_read_lock_sched_held+0x108/0x120 [ 205.751929] ? kmem_cache_free+0x258/0x2a0 [ 205.756148] ? set_nlink+0xc1/0x160 [ 205.759756] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 205.764661] ? generic_permission+0x105/0x3c0 [ 205.769139] ? cgroup_destroy_locked+0x750/0x750 [ 205.773884] kernfs_iop_mkdir+0x153/0x1e0 [ 205.778017] vfs_mkdir+0x390/0x600 [ 205.781546] SyS_mkdir+0x220/0x2a0 [ 205.785067] ? SyS_mkdirat+0x2b0/0x2b0 [ 205.788935] ? do_syscall_64+0xb7/0x940 [ 205.792890] ? SyS_mkdirat+0x2b0/0x2b0 [ 205.796759] do_syscall_64+0x281/0x940 [ 205.800635] ? vmalloc_sync_all+0x30/0x30 [ 205.804762] ? _raw_spin_unlock_irq+0x27/0x70 [ 205.809238] ? finish_task_switch+0x1c1/0x7e0 [ 205.813712] ? syscall_return_slowpath+0x550/0x550 [ 205.818622] ? syscall_return_slowpath+0x2ac/0x550 [ 205.823530] ? prepare_exit_to_usermode+0x350/0x350 [ 205.828527] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 205.833874] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 205.838700] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 205.843866] RIP: 0033:0x454e79 [ 205.847037] RSP: 002b:00007f2d4ca09c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 205.854724] RAX: ffffffffffffffda RBX: 00007f2d4ca0a6d4 RCX: 0000000000454e79 [ 205.861971] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000020000340 [ 205.869220] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 205.876471] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000013 [ 205.883720] R13: 00000000000003ea R14: 00000000006f7e90 R15: 0000000000000031 [ 205.891229] cgroup: cgroup_addrm_files: failed to add bfq.weight, err=-12 [ 205.912530] binder: 14673 RLIMIT_NICE not set [ 205.943772] binder: release 14672:14673 transaction 78 in, still active [ 205.950634] binder: send failed reply for transaction 78 to 14672:14727 [ 205.959922] binder: 14672:14673 BC_ACQUIRE_DONE node 77 has no pending acquire request [ 205.985777] binder: 14672:14727 ioctl c0306201 20004000 returned -14 2018/03/31 07:26:36 executing program 2: r0 = socket$inet(0x2b, 0x1, 0x0) listen(r0, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast2=0xe0000002}, 0x10) 2018/03/31 07:26:36 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0xfffffffffffffffe, &(0x7f0000000000)={@multicast1=0xe0000001, @loopback=0x7f000001}, 0xffffffffffffff45) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f000043e000)={0x1, {{0x2, 0x0, @multicast1=0xe0000001}}}, 0x90) listen(r0, 0xffff) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000380)={0x2, {{0x2, 0x0, @multicast1=0xe0000001}}}, 0x88) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$rdma_cm(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="00000000180000fa0000000000000000", @ANYBLOB="0200000000000072261bab99153c4000"], 0x20) write$rdma_cm(r1, &(0x7f0000000180)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}}, 0x48) write$rdma_cm(r1, &(0x7f0000000000)=@listen={0x7, 0x8, 0xfa00}, 0x10) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000100)='tls\x00', 0x4) accept4$inet(r0, 0x0, &(0x7f00000000c0), 0x800) getsockopt$inet_buf(r0, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000695ffc)=0x314) 2018/03/31 07:26:36 executing program 3: syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x6400000, 0x38, &(0x7f0000000200)=[{&(0x7f0000010000)}, {&(0x7f0000010200)="0000000000000000000000ffffffffffffffff00000000000000000000000000", 0x20, 0x10220}, {&(0x7f0000010400)="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", 0x1c0, 0x20000}, {&(0x7f0000010800)="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", 0x120, 0x27fa0}, {&(0x7f0000010c00)="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", 0x160, 0x2fea0}, {&(0x7f0000000140)="0000000001000000000000000000000000000000030000000000000000400000000000000000000080010000010000000000000000000000ed4100000000000054fba6005eb073d4842d49b93e77543065a7b513e8dfd8d433ac58df0a691cf77389aa4b72733fb42e", 0x69, 0x117920}, {&(0x7f0000011100)="00000000000000000000000000000000000000000000000000000001000000000000000000000000000000030000000000000000400000000000000000000000000000010000000000000000000000ed41000000000000000000000000000000", 0x60, 0x117ac0}, {&(0x7f0000011300)="00000000000000000000000000000000000001000000000000000000000000000000030000000000000000400000000000000000000000000000010000000000000000000000ed41000000000000000000000000000000000000000000000000", 0x60, 0x117c80}, {&(0x7f0000011500)="00000000000000000001000000000000000000000000000000030000000000000000400000000000000000000000000000010000000000000000000000ed4100", 0x40, 0x117e40}, {&(0x7f0000011700)="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", 0x1a0, 0x118000}, {&(0x7f0000011b00)="00000000000000000000000000000000400000000000020000000000000000000100000000000200000000000000001000000010000000100000010000000100000000000000000000000000000080d3cdd31108456e91d7373bbc732ae301000000000000000000400600000000000040000000000000100000001000000010000000000000000000000000000000000000000000000000000000000000000080d3cdd31108456e91d7373bbc732ae3ce2c9a379e86491285a63d8b33ccda1ad8ccefb300000000000000000000000000000000000000000000000000000000ce2c9a379e86491285a63d8b33ccda1a0000120000000000000000000000000192e862cb22524a7196ef57b9958dfed50100000000000000040000000000000001000000000100000000000000cc00000000000000006b3f0000300000000000", 0x140, 0x11ff40}, {&(0x7f0000011e00)="51666dc300000000000000000000000000000000000000000000000000000000ce2c9a379e86491285a63d8b33ccda1a0080120000000000000000000000000192e862cb22524a7196ef57b9958dfed501000000000000000700000000000000", 0x60, 0x128000}, {&(0x7f0000012000)="0000000001000000000000000000000000000000030000000000000000400000000000000000000000000000010000000000000000000000ed41000000000000", 0x40, 0x403920}, {&(0x7f0000012200)="00000000000000000000000000000000000000000000000000000001000000000000000000000000000000030000000000000000400000000000000000000000000000010000000000000000000000ed41000000000000000000000000000000", 0x60, 0x403ac0}, {&(0x7f0000012400)="00000000000000000000000000000000000001000000000000000000000000000000030000000000000000400000000000000000000000000000010000000000000000000000ed41000000000000000000000000000000000000000000000000", 0x60, 0x403c80}, {&(0x7f0000012600)="00000000000000000001000000000000000000000000000000030000000000000000400000000000000000000000000000010000000000000000000000ed4100", 0x40, 0x403e40}, {&(0x7f0000012800)="e24cf69a00000000000000000000000000000000000000000000000000000000ce2c9a379e86491285a63d8b33ccda1a0040400000000000010000000000000192e862cb22524a7196ef57b9958dfed50300000000000000040000000000000003000000000100000000000000cc00000000000000006b3f0000300000000100000000000000cc00004000000000003b3f0000300000000100000000000000cc0000c000000000000b3f00003000000000000000000000000000000000000000", 0xc0, 0x404000}, {&(0x7f0000012c00)="0000000000000000000000000000000000000000000000000000010000000000000003000000000000000000010000000000000100000000000000000000000000000000010000000000000100000000000000010000000000000003000000000000000200000000000000b00500000000000000010000000000000003000000000000000200000000000000b00100000000000000010000000000000003000000000000000200000000000000b00200000000000000010000000000000003000000000000000200000000000000b00400000000000000000001000000000000010000000000000400000000000000010000000000000001000000000000000200000000000000010000000000000003000000000000000200000000000000b00300000000000000008000000000000000010000000000000200000000000000b4b3dcad00000000000000000000000000000000000000000000000000000000ce2c9a379e86491285a63d8b33ccda1a00c0400000000000010000000000000192e862cb22524a7196ef57b9958dfed50300000000000000010000000000000008000000000200000000000000840000000000000000e43d0000b701000004000000000000008400000000000000002d3c0000b701000005000000000000000c06000000000000001c3c0000110000000500000000000000840000000000000000653a0000b70100000600000000000000010000000000000000c5390000a000000006000000000000000c0600000000000000b93900000c000000060000000000000054d2c2bf8d0000000094390000250000000700000000000000840000000000000000dd370000b701000000000000000000000000000000000000000000", 0x280, 0x40bec0}, {&(0x7f0000013000)="00000100000000000000000000000000000000801200000000000000000000000000004000000000000000000000000000000000000000000000010000000000", 0x40, 0x40f8e0}, {&(0x7f0000013300)="000000000000000000000300000000000000000100000000000000004100000000000000000000000000004000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000003000000000000", 0x60, 0x40fb60}, {&(0x7f0000013500)="0000000000000000000000000000000000000300000000000000000000000000000000404000000000000000000000000000004000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000000000000000", 0x80, 0x40fd20}, {&(0x7f0000013700)="000000000000000000030000000000000000000000000000000080400000000000000000000000000000400000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000300000000000000", 0x60, 0x40fee0}, {&(0x7f0000013900)="0000000000000000000000000000000000000000000000000000000002002e2e03000000000000000000000000000000000000000000000000400000000000000000000000000000010000000000000000000000ed41000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008043be5a00000000000000008043be5a00000000000000008043be5a00000000000000008043be5a0000000000000000", 0xc0, 0x413f40}, {&(0x7f0000013b00)="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", 0x340, 0x1403dc0}, {&(0x7f0000014200)="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", 0x100, 0x1c00000}, {&(0x7f0000014700)="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", 0x240, 0x1c07dc0}, {&(0x7f0000014b00)="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", 0x220, 0x2403f40}, {&(0x7f0000014f00)="0000000000000000000000040000000000000000010000000000000040c1010000000000000000000000000040000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000040000000000", 0x60, 0x2407720}, {&(0x7f0000015100)="0000040000000000000000000000000000000000c1010000000000000000000000000040000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000040000000000000000000000000000", 0x60, 0x24078e0}, {&(0x7f0000015400)="00000000000000000000040000000000000000010000000000000000c001000000000000000000000000004000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000004000000000000", 0x60, 0x2407b60}, {&(0x7f0000015600)="0000000000000000000000000000000000000400000000000000000000000000000000c0c001000000000000000000000000004000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000", 0x80, 0x2407d20}, {&(0x7f0000015800)="000000000000000000040000000000000000000000000000000080c00100000000000000000000000000400000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000400000000000000", 0x60, 0x2407ee0}, {&(0x7f0000015b00)="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", 0x2a0, 0x240be7c}, {&(0x7f0000016000)="bb43ce2300000000000000000000000000000000000000000000000000000000ce2c9a379e86491285a63d8b33ccda1a0040c10100000000010000000000000192e862cb22524a7196ef57b9958dfed50400000000000000f7ffffffffffffff02000000000001000000000000010000000000000000fb3e0000a000000000010000000000000c0001000000000000ef3e00000c000000000000000000000000", 0xa0, 0x2414000}, {&(0x7f0000016400)="0000000000000000000000000000000000000000000000010000000000000005000000000000000200000000000000b00400000000000000010000000000000005000000000000000200000000000000010000000000000005000000000000000200000000000000b00100000000000000010000000000000005000000000000000200000000000000b00100000000000000010000000000000005000000000000000200000000000000b00400000000000000010000000000000005000000000000000200000000000000b00200000000000000010000000000000004000000000000000200000000000000b0f7ffffffffffffff010000000000000004000000000000000200000000000000b00700000000000000008001000000000000010000000000002400000000000000010000000000000004000000000000000200000000000000b00500000000000000010000000000000005000000000000000200000000000000b0030000000000000000400000000000000001000000000000220000000000000000000000000000000001000000000000010000000000000069099a7100000000000000000000000000000000000000000000000000000000ce2c9a379e86491285a63d8b33ccda1a00c0c10100000000010000000000000192e862cb22524a7196ef57b9958dfed50500000000000000040000000000000005000000000100000000000000cc0000c000000000006b3f0000300000000100000000000000cc00004001000000003b3f0000300000000100000000000000cc0000c001000000000b3f0000300000000100000000000000cc0000400200000000db3e0000300000000100000000000000cc0000400400000000ab3e0000300000000100000000000000cc0000400400000000ab3e0000300000000100000000000000cc00004004000000007b3e000030000000000000000000000000000000", 0x2c0, 0x241be60}, {&(0x7f0000016a00)="000000000000000000000001000000000000000000000000000000030000000000000000400000000000000000000000000000010000000000000000000000ed4100000000000000000000000000000000000000000000000000000000000000", 0x60, 0x2423680}, {&(0x7f0000016c00)="000001000000000000000000000000000000030000000000000000400000000000000000000000000000010000000000000000000000ed410000000000000000", 0x40, 0x2423840}, {&(0x7f0000016e00)="00000000000000000000000000000000000000000000000000050000000000000084ffffffffffffffff0000000000000000000007000264656661756c74000000000000000002002e2e03000000000000000000000000000000000000000000000000400000000000000000000000000000010000000000000000000000ed41000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008043be5a00000000000000008043be5a00000000000000008043be5a00000000000000008043be5a000000000000000001000000000000000000000000000000030000000000000000400000000000000000000000000000010000000000000000000000ed41", 0x120, 0x24239e0}, {&(0x7f0000017100)="000000000000000000070064656661756c7401000000000000000000000000000000030000000000000000400000000000000000000000000000010000000000000000000000ed41000000000000000000000000000000000000000000000000", 0x60, 0x2423c80}, {&(0x7f0000017300)="00000000000000000001000000000000000000000000000000030000000000000000400000000000000000000000000000010000000000000000000000ed4100", 0x40, 0x2423e40}, {&(0x7f0000017500)="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", 0x140, 0x4000000}, {&(0x7f0000017800)="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", 0x100, 0x4000320}, {&(0x7f0000017a00)="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", 0x220, 0x4403f40}, {&(0x7f0000017e00)="0000000000000000000000040000000000000000010000000000000040c1010000000000000000000000000040000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000040000000000", 0x60, 0x4407720}, {&(0x7f0000018000)="0000040000000000000000000000000000000000c1010000000000000000000000000040000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000040000000000000000000000000000", 0x60, 0x44078e0}, {&(0x7f0000018300)="00000000000000000000040000000000000000010000000000000000c001000000000000000000000000004000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000004000000000000", 0x60, 0x4407b60}, {&(0x7f0000018500)="0000000000000000000000000000000000000400000000000000000000000000000000c0c001000000000000000000000000004000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000", 0x80, 0x4407d20}, {&(0x7f0000018700)="000000000000000000040000000000000000000000000000000080c00100000000000000000000000000400000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000400000000000000", 0x60, 0x4407ee0}, {&(0x7f0000018a00)="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", 0x2a0, 0x440be80}, {&(0x7f0000018f00)="bb43ce2300000000000000000000000000000000000000000000000000000000ce2c9a379e86491285a63d8b33ccda1a0040c10100000000010000000000000192e862cb22524a7196ef57b9958dfed50400000000000000f7ffffffffffffff02000000000001000000000000010000000000000000fb3e0000a000000000010000000000000c0001000000000000ef3e00000c000000000000000000000000", 0xa0, 0x4414000}, {&(0x7f0000019300)="0000000000000000000000000000000000000000000000010000000000000005000000000000000200000000000000b00400000000000000010000000000000005000000000000000200000000000000010000000000000005000000000000000200000000000000b00100000000000000010000000000000005000000000000000200000000000000b00100000000000000010000000000000005000000000000000200000000000000b00400000000000000010000000000000005000000000000000200000000000000b00200000000000000010000000000000004000000000000000200000000000000b0f7ffffffffffffff010000000000000004000000000000000200000000000000b00700000000000000008001000000000000010000000000002400000000000000010000000000000004000000000000000200000000000000b00500000000000000010000000000000005000000000000000200000000000000b0030000000000000000400000000000000001000000000000220000000000000000000000000000000001000000000000010000000000000069099a7100000000000000000000000000000000000000000000000000000000ce2c9a379e86491285a63d8b33ccda1a00c0c10100000000010000000000000192e862cb22524a7196ef57b9958dfed50500000000000000040000000000000005000000000100000000000000cc0000c000000000006b3f0000300000000100000000000000cc00004001000000003b3f0000300000000100000000000000cc0000c001000000000b3f0000300000000100000000000000cc0000400200000000db3e0000300000000100000000000000cc0000400400000000ab3e0000300000000100000000000000cc0000400400000000ab3e0000300000000100000000000000cc00004004000000007b3e000030000000000000000000000000000000", 0x2c0, 0x441be60}, {&(0x7f0000019900)="000000000000000000000001000000000000000000000000000000030000000000000000400000000000000000000000000000010000000000000000000000ed4100000000000000000000000000000000000000000000000000000000000000", 0x60, 0x4423680}, {&(0x7f0000019b00)="000001000000000000000000000000000000030000000000000000400000000000000000000000000000010000000000000000000000ed410000000000000000", 0x40, 0x4423840}, {&(0x7f0000019d00)="00000000000000000000000000000000000000000000000000050000000000000084ffffffffffffffff0000000000000000000007000264656661756c74000000000000000002002e2e03000000000000000000000000000000000000000000000000400000000000000000000000000000010000000000000000000000ed41000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008043be5a00000000000000008043be5a00000000000000008043be5a00000000000000008043be5a000000000000000001000000000000000000000000000000030000000000000000400000000000000000000000000000010000000000000000000000ed41", 0x120, 0x44239e0}, {&(0x7f000001a000)="000000000000000000070064656661756c7401000000000000000000000000000000030000000000000000400000000000000000000000000000010000000000000000000000ed41000000000000000000000000000000000000000000000000", 0x60, 0x4423c80}, {&(0x7f000001a200)="00000000000000000001000000000000000000000000000000030000000000000000400000000000000000000000000000010000000000000000000000ed4100", 0x40, 0x4423e40}], 0x0, &(0x7f0000000740)=ANY=[]) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000040)=0x0) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) ptrace(0xffffffffffffffff, r0) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000080)) ptrace$peekuser(0x3, r0, 0xfffffffffffffffc) 2018/03/31 07:26:36 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_nanosleep(0x4, 0x0, &(0x7f0000000100)={r1, r2+30000000}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000a32000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f000000e000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000001800010300000000000000000100000008000100b5000000e6a99b0e8b96d23cf65adb13f96c49dfec70fdc0d75503682b7a2c231cfd2f2d69c14f20840be948dd618b816035ca54ec27346f674fdf349d0cebd2877117d9dfe38d0d351f249aa72053"], 0x1c}, 0x1}, 0x0) 2018/03/31 07:26:36 executing program 1 (fault-call:6 fault-nth:50): mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) open(&(0x7f00000000c0)='./file0\x00', 0xa0441, 0x80) syz_mount_image$msdos(&(0x7f0000000140)='msdos\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x1, &(0x7f0000000100)=[{&(0x7f0000000480)="9196b107dc9e5c731d56d84afae6a7bf24", 0x11, 0x1f}], 0x0, &(0x7f0000000000)=ANY=[]) rmdir(&(0x7f0000000080)='./file0//ile0\x00') mkdir(&(0x7f0000000340)='./file0//ile0\x00', 0x1) r0 = semget$private(0x0, 0x4, 0x21) semctl$GETPID(r0, 0x1, 0xb, &(0x7f0000000200)=""/154) 2018/03/31 07:26:36 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000fa8fe4)={0xa, 0x4e23}, 0x1c) connect$inet6(r0, &(0x7f0000966fe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000000), 0x8) 2018/03/31 07:26:36 executing program 7: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) r0 = open(&(0x7f00000000c0)='./file0\x00', 0xa0441, 0x80) syz_mount_image$msdos(&(0x7f0000000140)='msdos\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x1, &(0x7f0000000100)=[{&(0x7f0000000480)="9196b107dc9e5c731d56d84afae6a7bf24", 0x11, 0x1f}], 0x0, &(0x7f0000000000)=ANY=[]) mkdir(&(0x7f0000000180)='./file0//ile0\x00', 0x112) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23}, 0x10) rmdir(&(0x7f0000000080)='./file0//ile0\x00') mkdir(&(0x7f0000000340)='./file0//ile0\x00', 0x1) r1 = semget$private(0x0, 0x4, 0x21) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000400)={&(0x7f00000002c0)='./file1\x00', r0}, 0x10) semctl$GETPID(r1, 0x1, 0xb, &(0x7f0000000200)=""/154) 2018/03/31 07:26:36 executing program 6: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f00001b3000)='/dev/vhost-vsock\x00', 0x2, 0x0) r1 = accept(0xffffffffffffffff, &(0x7f0000000000)=@nfc_llcp, &(0x7f0000000080)=0x80) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DAEMON(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="05062bbd7000fbdbdf250a0000002800020008000600efdf53ad6d276f9a6e4ac23cf40100000008000b000a00000014000100e000000200000000000000000000000008000400782e0000"], 0x44}, 0x1, 0x0, 0x0, 0x44}, 0x4) ioctl$VHOST_SET_LOG_BASE(r0, 0xaf01, &(0x7f0000675000)=&(0x7f0000989fff)) ioctl$KVM_CHECK_EXTENSION(r0, 0x4004af07, 0x0) getsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000240), 0x2) [ 206.031124] binder: undelivered TRANSACTION_COMPLETE [ 206.036307] binder: undelivered TRANSACTION_ERROR: 29189 [ 206.077824] FAULT_INJECTION: forcing a failure. [ 206.077824] name failslab, interval 1, probability 0, space 0, times 0 [ 206.089127] CPU: 1 PID: 14749 Comm: syz-executor1 Not tainted 4.16.0-rc7+ #372 [ 206.096486] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 206.105836] Call Trace: [ 206.108427] dump_stack+0x194/0x24d [ 206.112057] ? arch_local_irq_restore+0x53/0x53 [ 206.116737] should_fail+0x8c0/0xa40 [ 206.120468] ? kstrdup+0x39/0x70 2018/03/31 07:26:36 executing program 4: sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="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", 0x1a1, 0x0, &(0x7f0000001000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}}, 0x1c) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f00000001c0)={'sit0\x00', @ifru_data=&(0x7f0000000180)="d61a072afa6a2e6e9105a65cf0b08be4d57565e1a85eff283ee23d954743a2e3"}) r1 = syz_open_dev$sndpcmc(&(0x7f0000000200)='/dev/snd/pcmC#D#c\x00', 0x5, 0x7eaefd4bdbaa35c6) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000280)='IPVS\x00') sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x88, r2, 0x800, 0x70bd2a, 0x25dfdbfb, {0xc}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_DEST={0x4c, 0x2, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x8dd1af2}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x100000000}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x5e8}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xda}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x7}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1000}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x7}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3}]}, @IPVS_CMD_ATTR_DEST={0x20, 0x2, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x4008081}, 0x4000080) 2018/03/31 07:26:36 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x1) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x400200, 0x0) ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000000100)={0x4, 0x47, &(0x7f0000000080)="0196773ad8e017be9c11fe4d8e5202e363c6baf425726e683013506af5f7de83d2cc34355826b594d6b896a66e18217efee3342c1f9ca1b0035e409ab4c6ad35fe4a74ca2695d3"}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000f68000)={@loopback={0x0, 0x1}, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f000089b000)=0xffffffffffffffff, 0x4) socketpair$inet6(0xa, 0x1, 0x80000000, &(0x7f0000000000)) connect$inet6(r0, &(0x7f000000cfe4)={0xa, 0x0, 0x807}, 0x1c) sendmmsg(r0, &(0x7f0000008a00)=[{{0x0, 0x0, &(0x7f0000000480), 0x0, &(0x7f0000000500)=[{0x60, 0x29, 0x3, "e10984fa3279d7a9e03a22b169d736c06ab11a96f7d25adf9166e34ba01ef80187324065bcda06ab9013268169230973698dc95dde627650790df783841dcbb38ed04b54d5375b9d6a"}], 0x60}}], 0x1, 0x0) [ 206.123838] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 206.128944] ? cgroup_apply_control_enable+0x390/0xbc0 [ 206.134223] ? kernfs_iop_mkdir+0x153/0x1e0 [ 206.138542] ? vfs_mkdir+0x390/0x600 [ 206.142257] ? SyS_mkdir+0x220/0x2a0 [ 206.145974] ? do_syscall_64+0x281/0x940 [ 206.150036] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 206.155397] ? find_held_lock+0x35/0x1d0 [ 206.159462] ? find_held_lock+0x35/0x1d0 [ 206.163527] ? __lock_is_held+0xb6/0x140 [ 206.167594] ? check_same_owner+0x320/0x320 [ 206.171922] ? rcu_note_context_switch+0x710/0x710 [ 206.176855] ? rcu_read_lock_sched_held+0x108/0x120 [ 206.181876] should_failslab+0xec/0x120 [ 206.185852] kmem_cache_alloc+0x47/0x760 [ 206.189913] ? memcpy+0x45/0x50 [ 206.193191] ? kstrdup+0x59/0x70 [ 206.196560] __kernfs_new_node+0xe2/0x570 [ 206.200711] ? kernfs_dop_revalidate+0x380/0x380 [ 206.205471] ? snprintf+0xc0/0xf0 [ 206.208923] ? vsprintf+0x40/0x40 [ 206.212371] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 206.217308] ? cgroup_file_name+0x1d0/0x1d0 [ 206.221628] kernfs_new_node+0x80/0xe0 2018/03/31 07:26:36 executing program 5: r0 = socket$inet(0x2, 0x20000000000005, 0x2) recvfrom$inet(r0, &(0x7f0000000080)=""/115, 0x73, 0x2, &(0x7f0000000140)={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x13) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='bond0\x00', 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f0000000180)={"6e6174000000005a00000000000000000000000600", 0x2, [{}, {}]}, 0x2e) lstat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)) sendmsg(r0, &(0x7f0000000100)={0x0, 0x338, &(0x7f0000000040), 0x126}, 0x0) 2018/03/31 07:26:36 executing program 4: r0 = syz_open_dev$tun(&(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f0000000000)=0x1) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'ifb0\x00', 0x4012}) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000100)={0x0, 0xa, [@remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, @empty, @link_local={0x1, 0x80, 0xc2}, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @random="5124b9df8522"]}) [ 206.225517] __kernfs_create_file+0x4b/0x320 [ 206.229923] cgroup_addrm_files+0x3c5/0xa70 [ 206.234253] ? cgroup_file_write+0x710/0x710 [ 206.238667] ? cgroup_idr_replace+0x3f/0x50 [ 206.242989] ? __lock_is_held+0xb6/0x140 [ 206.247051] ? __local_bh_enable_ip+0x121/0x230 [ 206.251715] ? online_css+0x224/0x2e0 [ 206.255513] css_populate_dir+0x198/0x420 [ 206.259658] cgroup_apply_control_enable+0x390/0xbc0 [ 206.264764] ? cgroup_propagate_control+0x570/0x570 [ 206.269777] ? css_populate_dir+0x289/0x420 [ 206.274101] cgroup_mkdir+0x56f/0xfc0 [ 206.277893] ? __lock_is_held+0xb6/0x140 [ 206.281951] ? cgroup_destroy_locked+0x750/0x750 [ 206.286703] ? rcu_read_lock_sched_held+0x108/0x120 [ 206.291714] ? kmem_cache_free+0x258/0x2a0 [ 206.295943] ? set_nlink+0xc1/0x160 [ 206.299574] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 206.304499] ? generic_permission+0x105/0x3c0 [ 206.308995] ? cgroup_destroy_locked+0x750/0x750 [ 206.313750] kernfs_iop_mkdir+0x153/0x1e0 [ 206.317896] vfs_mkdir+0x390/0x600 [ 206.321518] SyS_mkdir+0x220/0x2a0 [ 206.325058] ? SyS_mkdirat+0x2b0/0x2b0 2018/03/31 07:26:37 executing program 5: r0 = syz_open_dev$admmidi(&(0x7f0000000680)='/dev/admmidi#\x00', 0x3, 0x4000) ioctl$PIO_FONTX(r0, 0x4b6c, &(0x7f00000006c0)) r1 = syz_open_dev$evdev(&(0x7f0000d19fee)='/dev/input/event#\x00', 0x0, 0x2) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) write$evdev(r1, &(0x7f0000057fa0)=[{}, {{r2, r3/1000+10000}, 0x100000001}], 0x30) r4 = memfd_create(&(0x7f0000000040)='+\x00', 0x0) getsockopt$inet_mreqn(r4, 0x0, 0x23, &(0x7f00000006c0)={@multicast1, @loopback, 0x0}, &(0x7f00000000c0)=0xc) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000100)={@loopback={0x0, 0x1}, 0x0, r5}) r6 = gettid() timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f0000044000)) ioctl$KVM_SET_XSAVE(r4, 0x5000aea5, &(0x7f0000000140)={"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"}) clock_nanosleep(0x6, 0x0, &(0x7f0000000600), &(0x7f0000000640)) ioctl$EVIOCSREP(r1, 0x40084503, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r6, 0x1000000000015) ioctl$DRM_IOCTL_RES_CTX(r4, 0xc0106426, &(0x7f0000000580)={0x3, &(0x7f0000000540)=[{}, {}, {0x0}]}) ioctl$DRM_IOCTL_RM_CTX(r4, 0xc0086421, &(0x7f00000005c0)={r7, 0x2}) [ 206.328942] ? do_syscall_64+0xb7/0x940 [ 206.332916] ? SyS_mkdirat+0x2b0/0x2b0 [ 206.336798] do_syscall_64+0x281/0x940 [ 206.340685] ? vmalloc_sync_all+0x30/0x30 [ 206.344827] ? _raw_spin_unlock_irq+0x27/0x70 [ 206.349316] ? finish_task_switch+0x1c1/0x7e0 [ 206.353803] ? syscall_return_slowpath+0x550/0x550 [ 206.358727] ? syscall_return_slowpath+0x2ac/0x550 [ 206.363653] ? prepare_exit_to_usermode+0x350/0x350 [ 206.368669] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 206.374120] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 206.378963] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 206.384143] RIP: 0033:0x454e79 [ 206.387325] RSP: 002b:00007f2d4ca09c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 206.395029] RAX: ffffffffffffffda RBX: 00007f2d4ca0a6d4 RCX: 0000000000454e79 [ 206.402293] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000020000340 [ 206.409563] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 206.416834] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000013 2018/03/31 07:26:37 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) mmap(&(0x7f0000000000/0xeef000)=nil, 0xeef000, 0x4, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f00000000c0)={0x0, @in={{0x2, 0x0, @dev={0xac, 0x14, 0x14}}}, 0x0, 0xfffffffffffffffd}, &(0x7f0000000000)=0x98) 2018/03/31 07:26:37 executing program 4: mkdir(&(0x7f000000dff6)='./control\x00', 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0xa000, 0x0) accept$inet6(r0, 0x0, &(0x7f0000000040)) r1 = open(&(0x7f0000028000)='./control\x00', 0x0, 0x0) symlinkat(&(0x7f0000d45000)='./file0\x00', r1, &(0x7f0000041000)='./file0\x00') renameat2(r1, &(0x7f0000047ff6)='./file0\x00', r1, &(0x7f0000011000)='./file1\x00', 0x2) 2018/03/31 07:26:37 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000000000)=0x3, 0x2b9) sendto$inet6(r0, &(0x7f0000f72fcf), 0x0, 0x0, &(0x7f0000f5afe4)={0xa, 0x4e20}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_int(r0, 0x29, 0x5, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r0, 0x29, 0xd3, &(0x7f00000000c0)={{0xa, 0x4e23, 0x81, @loopback={0x0, 0x1}, 0x843}, {0xa, 0x4e22, 0xd98, @ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}, 0x8}, 0x8, [0x5e6, 0x6, 0xdb6, 0x2, 0xffffffffffffff81, 0x7, 0xffffffffffff0001, 0x10001]}, 0x5c) recvfrom$inet6(r0, &(0x7f00006f4000)=""/246, 0xf6, 0x23fffd, 0x0, 0xfd67) [ 206.424091] R13: 00000000000003ea R14: 00000000006f7e90 R15: 0000000000000032 [ 206.431513] cgroup: cgroup_addrm_files: failed to add bfq.weight, err=-12 2018/03/31 07:26:37 executing program 6: r0 = syz_open_dev$dspn(&(0x7f0000000240)='/dev/dsp#\x00', 0x7, 0x80800) getsockopt$packet_buf(r0, 0x107, 0x2, &(0x7f0000000280)=""/135, &(0x7f0000000340)=0x87) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000002000)={0xaa}) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = dup(r0) syz_open_dev$dmmidi(&(0x7f00000001c0)='/dev/dmmidi#\x00', 0x5, 0x82001) setsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, &(0x7f0000000200)=0x1000, 0x4) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x1}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000180)={0xa2, 0x8, 0x7fffffff, 0x81, r3}, 0x10) ioctl$TTUNGETFILTER(r2, 0x801054db, &(0x7f00000000c0)=""/83) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000003ff0)={&(0x7f0000011000/0x3000)=nil, 0x400000}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000003c0)={{{@in=@rand_addr, @in6=@mcast2}}, {{@in6=@mcast2}, 0x0, @in6}}, &(0x7f0000000080)=0xe8) 2018/03/31 07:26:37 executing program 4: setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000600)={0x10000, 0x0, 0x576c, 0x3}, 0xfffffffffffffdfc) r0 = socket(0x11, 0x4000000000080002, 0x0) recvfrom$inet6(r0, &(0x7f0000000040)=""/236, 0xec, 0x0, &(0x7f0000000140)={0xa, 0x4e21, 0x4, @local={0xfe, 0x80, [], 0xaa}, 0x80000001}, 0x1c) setsockopt(r0, 0x107, 0xd, &(0x7f0000001000), 0x717) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x30000010}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'erspan0\x00', 0x0}) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000340)='/dev/dsp\x00', 0x0, 0x0) ioctl$RNDCLEARPOOL(r3, 0x5206, &(0x7f00000005c0)=0x6) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2}}, 0x14) r4 = getpid() process_vm_readv(r4, &(0x7f0000000180)=[{&(0x7f0000000240)=""/87, 0x57}], 0x1, &(0x7f0000000300)=[{&(0x7f00000003c0)=""/254, 0xfe}, {&(0x7f00000004c0)=""/199, 0xc7}], 0x2, 0x0) writev(r0, &(0x7f0000000380)=[{&(0x7f00000002c0)='0', 0x1}], 0x1) 2018/03/31 07:26:37 executing program 5: r0 = syz_open_dev$loop(&(0x7f00000005c0)='/dev/loop#\x00', 0x0, 0x100086) r1 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x1) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r1, 0xc0605345, &(0x7f0000000100)={0x6afc, 0x2, {0x1, 0x2, 0x1, 0x0, 0x20}}) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, &(0x7f0000000080)=0x5f, 0x102000004) 2018/03/31 07:26:37 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1=0xe0000001, @loopback=0x7f000001}, 0xb6) pwrite64(r0, &(0x7f00000000c0)="e551454dc21a78dfad8ff4877d366223a780067fd6a83e83e66bc7a0553570d1828019f5d0f1255a34fd4f71cbb77d4c1f96e99d1bd19ca69097baa7611fd069e67392597cad042b5ca73cc9e19820bb23cddfb0f080b918c06ddfe128836240e2e95acb05c3938c386ccc0aa4d00df8ba1d9d05c78d62371dc2e632eeb421a69383648d87cb51f4180effdbde6845eced685fc3836d45881ce3185b0186ca01a5367ccc2fc9406c4d042e57a2aa4f478f6eb9b0eeddd85b50b661ef3a14549fe49f3c47d07ef30e419267d37d26650e6ce36c1a3071714884d87b22b9405fdd894ab39636d2b02e348bfdcffa62227373d9a1908f4516bfbc3829", 0xfb, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f000043e000)={0x1, {{0x2, 0x0, @multicast1=0xe0000001}}}, 0x90) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000380)={0x2, {{0x2, 0x0, @multicast1=0xe0000001}}}, 0x88) getsockopt$inet_buf(r0, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000695ffc)=0x314) 2018/03/31 07:26:37 executing program 6: perf_event_open(&(0x7f0000220000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x10000000000000, 0x2, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) truncate(&(0x7f00000003c0)='./file0\x00', 0xff) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc\x00', 0x40, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000680)={0x5, 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000004c0)={0x7, 0x1, 0xffffffffffffdf1d, 'queue1\x00', 0x3}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r2 = socket$netlink(0x10, 0x3, 0xf) r3 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(r3, 0x0) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r4, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c480347859f1c6e19600693dcf", 0x55, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000380)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r4, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) seccomp(0x0, 0x1, &(0x7f0000000400)={0x0, &(0x7f00000003c0)}) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r1, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f00000006c0)=ANY=[@ANYBLOB="6e6174000006d803000000000000000000000000000000001b00000005000000400400003802000028010000ffff6c5affff00000011e8030000e8030015008000b52fe7caf4c16f883b8c46795d12032800ffffffffe803123508070000e80000d2c5815b66b3d9957cb59c834fff1ee457256b5110921b143a841d9991a09e720f7ff15cc1cc88d52dc60cad4df964fa4fb8bf8478074f83bc8fd132ee9032cede990a421a2c874b135745064682e8b4a8353d7322cd1c310eb06b55a8d681674ab7d63e762122d021abce904dd8d017acc8dc07a1f22613bcce2e3723ff1f4a8fabf326b92f06e3"], 0x1) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040)={0x0, 0x0, 0x80000000}) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) connect$bt_rfcomm(r6, &(0x7f0000000640)={0x1f, {0x0, 0x2, 0x8, 0x400, 0x0, 0x9}, 0x7fffffff}, 0xa) r7 = ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) ioctl$LOOP_CTL_ADD(r6, 0x4c81, r7) ioctl$LOOP_CTL_REMOVE(r5, 0x4c80, r7) setsockopt$llc_int(r3, 0x10c, 0x7, &(0x7f0000000180)=0x8, 0x4) 2018/03/31 07:26:37 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x100) setsockopt$IP_VS_SO_SET_DEL(r1, 0x0, 0x484, &(0x7f00000000c0)={0x0, @rand_addr=0x7, 0x4e24, 0x1, 'dh\x00', 0x2, 0x9, 0x6b}, 0x2c) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={&(0x7f0000b2c000)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f0000cde000)={0x18, 0x1, 0x2, 0x5, 0x0, 0x0, {}, [@nested={0x4, 0x2}]}, 0x18}, 0x1}, 0x0) r2 = getpgrp(0xffffffffffffffff) r3 = syz_open_procfs(r2, &(0x7f0000000040)='net/packet\x00') r4 = dup3(r3, r1, 0x80000) sendmsg$unix(r1, &(0x7f0000000780)={&(0x7f0000000100)=@abs={0x993d269424f9a683, 0x0, 0x4e24}, 0x6e, &(0x7f0000000300)=[{&(0x7f0000000180)="b3a2d12533c88ea69c05625bb83bdfdfb10a001ebaf24294072488b4b78818851c7033fc3d3b3a9d7289f5fd56d26be3e9fd08ad49e64ea50003f0edda3271", 0x3f}, {&(0x7f00000001c0)="69733c424e19bda0b6ca40e46097b4c98be01a1456daf06fe90c2c45963d3dc4b7938241f35db97b2a5bf8730a36f7df8573670854492c8dea52beee2d31a0a6", 0x40}, {&(0x7f0000000200)="a4275775c72c3bab7b3ee6821941b043069ba9988150802ab9564fe0246e5a66740f1f163ee4d960f0cee104affe40c92639602165565e61b6e0d2bdfc50a5e6d113e5b80d6d747c8e1e4c70a72c8abc32216ae11fd28bcf6f2d11d21d76edf7e8c5bee4b55c9272181601c8b854e84fdc3e137cda929e392cd04a3c577d0e007837cd04be956a0685de77dc001a5031f0228c4d2cf002b03faefb3e2a288c23d8b7e5dc22b65fa5c36e73a2e58b87bac7b73eb79e37825789f91b141940180c4c0ca63e1be642c831", 0xc9}], 0x3, &(0x7f00000006c0)=[@rights={0x20, 0x1, 0x1, [r3, r1, r3]}, @rights={0x18, 0x1, 0x1, [r0, r0]}, @rights={0x38, 0x1, 0x1, [r3, r3, r1, r1, r3, r3, r0, r3, r3, r1]}, @rights={0x18, 0x1, 0x1, [r1]}, @rights={0x30, 0x1, 0x1, [r1, r3, r3, r4, r1, r3, r0]}], 0xb8, 0x20000004}, 0x4000) 2018/03/31 07:26:37 executing program 3: r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0xc000, 0x1a) getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000300), &(0x7f0000000340)=0x4) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_CPUID2(0xffffffffffffffff, 0xc008ae91, &(0x7f0000000080)=ANY=[@ANYBLOB="03000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"]) unshare(0x8000000) r1 = mq_open(&(0x7f0000000000)='-$\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000664fc0)={0x0, 0x1, 0x9}) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000180)=""/130, &(0x7f0000000240)=0x82) mq_timedsend(r1, &(0x7f0000e71fff), 0x0, 0x0, 0x0) mq_timedsend(0xffffffffffffffff, &(0x7f000066c000), 0x0, 0x0, &(0x7f000058eff0)={0x77359400}) lseek(r1, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f00000003c0)=0x58f6, 0x4) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000280), &(0x7f00000002c0)=0x4) socketpair$ax25(0x3, 0x3, 0x8, &(0x7f0000000140)) syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x4000) mq_timedreceive(r1, &(0x7f0000be2f7d)=""/131, 0xfffffffffffffffd, 0x0, 0x0) 2018/03/31 07:26:37 executing program 1 (fault-call:6 fault-nth:51): mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) open(&(0x7f00000000c0)='./file0\x00', 0xa0441, 0x80) syz_mount_image$msdos(&(0x7f0000000140)='msdos\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x1, &(0x7f0000000100)=[{&(0x7f0000000480)="9196b107dc9e5c731d56d84afae6a7bf24", 0x11, 0x1f}], 0x0, &(0x7f0000000000)=ANY=[]) rmdir(&(0x7f0000000080)='./file0//ile0\x00') mkdir(&(0x7f0000000340)='./file0//ile0\x00', 0x1) r0 = semget$private(0x0, 0x4, 0x21) semctl$GETPID(r0, 0x1, 0xb, &(0x7f0000000200)=""/154) 2018/03/31 07:26:37 executing program 7: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000002c0)='./file0\x00', &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='tracefs\x00', 0xfffffffffffffffc, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) open(&(0x7f00000000c0)='./file0\x00', 0xa0441, 0x80) syz_mount_image$msdos(&(0x7f0000000140)='msdos\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x1, &(0x7f0000000100)=[{&(0x7f0000000480)="9196b107dc9e5c731d56d84afae6a7bf24", 0x11, 0x1f}], 0x0, &(0x7f0000000000)=ANY=[]) mkdir(&(0x7f0000000180)='./file0//ile0\x00', 0x112) rmdir(&(0x7f0000000080)='./file0//ile0\x00') mkdir(&(0x7f0000000340)='./file0//ile0\x00', 0x1b) r0 = semget$private(0x0, 0x4, 0x21) semctl$GETPID(r0, 0x1, 0xb, &(0x7f0000000200)=""/154) [ 207.024146] FAULT_INJECTION: forcing a failure. [ 207.024146] name failslab, interval 1, probability 0, space 0, times 0 [ 207.035441] CPU: 1 PID: 14835 Comm: syz-executor1 Not tainted 4.16.0-rc7+ #372 [ 207.042805] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 207.052156] Call Trace: [ 207.054747] dump_stack+0x194/0x24d [ 207.058377] ? arch_local_irq_restore+0x53/0x53 [ 207.063057] should_fail+0x8c0/0xa40 [ 207.066765] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 207.071854] ? kernfs_add_one+0x50/0x450 [ 207.075900] ? rb_first_postorder+0xa0/0xa0 [ 207.080211] ? save_stack+0x43/0xd0 [ 207.083815] ? kasan_kmalloc+0xad/0xe0 [ 207.087685] ? trace_hardirqs_off+0x10/0x10 [ 207.091988] ? find_held_lock+0x35/0x1d0 [ 207.096040] ? __lock_is_held+0xb6/0x140 [ 207.100092] ? check_same_owner+0x320/0x320 [ 207.104395] ? lock_downgrade+0x980/0x980 [ 207.108529] ? rcu_note_context_switch+0x710/0x710 [ 207.113446] should_failslab+0xec/0x120 [ 207.117402] __kmalloc+0x63/0x760 [ 207.120835] ? idr_alloc_cyclic+0x1d6/0x320 [ 207.125136] ? mem_cgroup_css_alloc+0x177/0x19c0 [ 207.129881] mem_cgroup_css_alloc+0x177/0x19c0 [ 207.134448] ? setup_cpu_cache+0x1c0/0x1c0 [ 207.138661] ? __kernfs_new_node+0x3f5/0x570 [ 207.143052] ? kernfs_dop_revalidate+0x380/0x380 [ 207.147794] ? trace_hardirqs_off+0x10/0x10 [ 207.152099] ? kernfs_link_sibling+0x27d/0x380 [ 207.156660] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 207.161570] ? cgroup_kn_set_ugid+0x2c7/0x370 [ 207.166046] ? cgroup_file_name+0x1d0/0x1d0 [ 207.170346] ? mutex_unlock+0xd/0x10 [ 207.174043] ? __lock_is_held+0xb6/0x140 [ 207.178093] ? cgroup_addrm_files+0x67f/0xa70 [ 207.182573] ? trace_hardirqs_off+0x10/0x10 [ 207.186870] ? cgroup_file_write+0x710/0x710 [ 207.191263] ? cgroup_idr_replace+0x3f/0x50 [ 207.195566] ? trace_hardirqs_off+0x10/0x10 [ 207.199866] ? __lock_is_held+0xb6/0x140 [ 207.203911] ? __local_bh_enable_ip+0x121/0x230 [ 207.208561] ? __lock_is_held+0xb6/0x140 [ 207.212611] cgroup_apply_control_enable+0x44d/0xbc0 [ 207.217702] ? cgroup_propagate_control+0x570/0x570 [ 207.222702] ? css_populate_dir+0x289/0x420 [ 207.227008] cgroup_mkdir+0x56f/0xfc0 [ 207.230792] ? __lock_is_held+0xb6/0x140 [ 207.234834] ? cgroup_destroy_locked+0x750/0x750 [ 207.239568] ? rcu_read_lock_sched_held+0x108/0x120 [ 207.244561] ? kmem_cache_free+0x258/0x2a0 [ 207.248777] ? set_nlink+0xc1/0x160 [ 207.252384] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 207.257290] ? generic_permission+0x105/0x3c0 [ 207.261766] ? cgroup_destroy_locked+0x750/0x750 [ 207.266516] kernfs_iop_mkdir+0x153/0x1e0 [ 207.270645] vfs_mkdir+0x390/0x600 [ 207.274166] SyS_mkdir+0x220/0x2a0 [ 207.277689] ? SyS_mkdirat+0x2b0/0x2b0 [ 207.281558] ? do_syscall_64+0xb7/0x940 [ 207.285514] ? SyS_mkdirat+0x2b0/0x2b0 [ 207.289382] do_syscall_64+0x281/0x940 [ 207.293251] ? vmalloc_sync_all+0x30/0x30 [ 207.297376] ? _raw_spin_unlock_irq+0x27/0x70 [ 207.301851] ? finish_task_switch+0x1c1/0x7e0 [ 207.306326] ? syscall_return_slowpath+0x550/0x550 [ 207.311235] ? syscall_return_slowpath+0x2ac/0x550 [ 207.316145] ? prepare_exit_to_usermode+0x350/0x350 [ 207.321144] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 207.326489] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 207.331314] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 207.336481] RIP: 0033:0x454e79 [ 207.339651] RSP: 002b:00007f2d4ca09c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 207.347358] RAX: ffffffffffffffda RBX: 00007f2d4ca0a6d4 RCX: 0000000000454e79 [ 207.354609] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000020000340 [ 207.361856] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 2018/03/31 07:26:38 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x2) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000000)) sendmmsg(r0, &(0x7f0000005d40), 0x2, 0x20040080) [ 207.369104] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000013 [ 207.376351] R13: 00000000000003ea R14: 00000000006f7e90 R15: 0000000000000033 2018/03/31 07:26:38 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x7fffffff, 0x100) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0xd8, r2, 0x18, 0x70bd26, 0x25dfdbfd, {0x9}, [@IPVS_CMD_ATTR_DEST={0x44, 0x2, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xffffffff}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x8b}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x8eb}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xfffffffffffffff7}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x3}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x7}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x3f}]}, @IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'eql\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote={0xfe, 0x80, [], 0xbb}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast=0xffffffff}]}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e21}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x9}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}]}, 0xd8}, 0x1, 0x0, 0x0, 0x8800}, 0x80) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00008b2ffd)='nv\x00', 0x3) getsockopt$inet_tcp_int(r0, 0x6, 0x1a, &(0x7f0000ae7000), &(0x7f000034dffc)=0x4) 2018/03/31 07:26:38 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1=0xe0000001, @loopback=0x7f000001}, 0xb6) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f000043e000)={0x1, {{0x2, 0x0, @multicast1=0xe0000001}}}, 0x90) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000380)={0x2, {{0x2, 0x0, @multicast1=0xe0000001}}}, 0x88) r1 = socket(0x10000000, 0x3, 0x8408) setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000000180)=0x3f, 0x4) openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x680081, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/fib_triestat\x00') r3 = dup2(r0, r0) ioctl$VHOST_SET_VRING_ERR(r2, 0x4008af22, &(0x7f0000000100)={0x2, r3}) getsockopt$inet_buf(r0, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000695ffc)=0x314) 2018/03/31 07:26:38 executing program 7: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0xa0441, 0x80) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f00000002c0)={0xffff}, 0x4) syz_mount_image$msdos(&(0x7f0000000140)='msdos\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x1, &(0x7f0000000100)=[{&(0x7f0000000480)="9196b107dc9e5c731d56d84afae6a7bf24", 0x11, 0x1f}], 0x0, &(0x7f0000000000)=ANY=[]) mkdir(&(0x7f0000000180)='./file0//ile0\x00', 0x112) rmdir(&(0x7f0000000080)='./file0//ile0\x00') setsockopt(r0, 0x4, 0x7f, &(0x7f00000004c0)="43ee8fbc5fbed11bb700a5071420f967a86b987125e5f215e2b93a24aedaf4c21b35f3f8972917ca49f89356137a3d794064c248fc1e81ae69ccb3326d2a37ca6dc5f7bc69c5031f4daa6bc193146f29aef4411b21679621ec20cb4cf28fd89a53c075bb79a0fe04ddc78bacb73f6cea848a3ea34b45eb97ad4b5609bf88b5ac750232c04e6c24e01b2c32ca814cca92f914758085b1923af4dad9670ee2e641d95f6314b056141cdd5a3687a81e52cb014efac8c6b176afc8a50e1192ad24516edff77c1f941e24d06fd88b06c7d472a0b6570eef5cbc438a8b24ca21a2c48e58394a26e9fc4e17c2ac99c3d57475877d83d6d86214889c940cd6f475182c3e7f8cf6ac394cb81684a7a3fd78120f247ab447c33034235b498d6d56fc7754c1923b445a7be957323b23014608e5a83a13825fab99f6e158d9f7dd8fcd7be08049458721bedaaadda2e597bbb7a44f3c7d2930399f58f19619fa7438720cad6c3bba7ca066833894a1a93079c9e8fe5f3560f39d2a62fb3ec974fc32e5ddcda523ad6394cba982b0441d188b1640d8962dcdb2fb75964ff3d645b37f408b281df1243fa32451bd03ab737cb7b45b33e9488a00fb1e7a235580c8b8eb89256e0e759ce3e66c911134d17407b59755b7cf54959985c3705884bcd2978180a4353d14305e449d792831dddec93fc8eca75ae40ec59c03bbb92c78aabf7313ca7899c6b031573d2df59ba02f5819e2631f2969c47832e93b22ce41628bcb0457f771247555d10682e22f0a25445ccf26d6b006225dfb1823c28c2fd59cc38314baa01e791ca840f10eb9ccc1b73907dcf5f43b37246966d566e2805a610671b4ec932a0ce58ff77074a896bf0188596c7356d8d42ca18659981a4ddbcdde53beab1a9529588bc6422c45365dcb0fad23560d0ae6f55fb34d58eb7cf75085b64e0b455c24891bc178b69c9d42074693b0b4d712333f600bba72aa2376bf6f468df586aabd457a9b1d7f001d0b746f2bf50ff299b43f2e2c5829bf80287ec73d4c012cd28656e8f1e85073b0ef9c18cd4b372e5189b1e4f630b31c0bb645d722ae2e81b9472375f317d79686af31689266967ae8c178f708b4ddbd40ae41eac606b48d09604097c7085ff33e19ed9292d8ca97277b84452dc3c56cba2fef66fe94b52eea504946f8673a8539c8987238f89c3823f5517ebdc98ea3c6a2b52d51341b758032e35eb51eeceb8a2357da1980d8674872cf16c41bccbe350315feffad2e06911d2ea88bdd8cd43e4f22d5c3fbf9be9df4d4f182a89a063c14ec988b8da49f529107b43a5d2afad014b3072a068a896f8c5e2974b20ed097117b7a52401def928ed4a6e4434f135353ef895745ec2be69e5a70dc975c4875193e5a4cf89b32a0fc490bd8ae086edc99b4940715e32efa8482cb7e41db27b9636edda3f6682853902dd535b3335f90886dfa335598760bba4242ef166d585e3e9aba8d00740c16cba7e48919e8af324863d9407dd60923a3e504081f8c1cc5d59a6e37c715dec886c022be55f4a34b836eb853a6ee993dafed4c02b194b22ff83cac3cb19262e8554c8fabb2642fd21fbb9790705d8439f865cd99d7ed2e4d16ee5c3110f2fddc9d43d698a74ad7e37a60e525d55e3429ee1847cb4e69bba9db13a5ea7d9c1737b99d15e3916266c8f34df4758182e0d777fa6e8aa040aa54311a24bb1699b595541c569ae95ba48f999ad4e6c696f5c4bf2f5aff7d5e9cef20314348025f82553e2921b309dc92a64029eb7ea206a619965bfc58309985652d1e6ae3135b405384a0434335de7869c0a9018d57ce7a5c93f13890a85d56d54ff8b48729db42335134de5f6e178b63d3aec6b09df30dc156fad33cb2d869d7b00fa12641aaa890798bd7ec58923d0b61ed68b96ef66767796bb75272720059915b91668127a8e16124e064d9471a626161ce12d32c7b23614c54438970a5dd140a829e45fe67e47a902cd6f8cb2b473ba98134fba71a7861e271995e130506d3e15e79da044885733510af05d3a283424e4b9e86b6c00d89375bde713428097d209e2890f60212bad5b08c778bcaceac0c33a5937ee127656be07167a790a8a5979a8214cd2813f268ba378b519dec12f6f53f41c1fc772a30acca4d1018a693d9b57822425837204a9659832a6999193449706d9ccaccb2ad15f65205758ae43bfb42ab4760093039d57cdfbcb1aac5d94ff97455c1e08ec21076bcb78ca5a22dfabe4ccf940a0a61d2814520b5028c4417b70970a52d12440a18c77f4ba0793f915f22974af7954fa06a86d10389c78b8fe6fef7336224a313f7d231a559fc1cefce87df4346cb46d56e2c38a2ee41ed4a00754f210aca7e984b63149001e2a9e0494ada6fa03983a1c68e015f89758b3405677442f772bf37c143b8029bbfef8afd30e99e155919e30d43a00647c415b10f861430fb77886e877aa5d9e1bd083d4498905b7f6a3b0387bc3e8a0b088abc70e049f7172b3a3308a146fb78ffb8e173db59f8b6143f133d2cb3d80cf4874f37fa0219d0328ed537992d7f9bb43df0600a22321fe80848fe51f6950e24b921c2d9a10b20388a3952da7cabd2dc08225258f6aa000ab0751a524e5dcdce8dab9dc4f2e82a6606b9031aca86e221f6282b1349c329cd56883ff640e80c4a7bcde92d9df3dde8cddf49c8dca753817b13b8c1412b85960303820e5d957807c2cc8cc295a099419e838846951052fde3138bab1ddf9a95a16af1dea020f2ee4b634f3fb142e90bf0d614398e5af0e506f1b52c0f56a41b532411095d1a63fd8d025e29ac0d0062ae5c6c7de87e1b5147b4f70dedf9aa8ca35f6752a5ec148a3e3c39ebb209bc61dbd5629bc2445dec6703967528ce6a4c3ce939dc44ca3dc64b5668299c6682ed6f1d857155bc552c92afdf2efd14d4a5e21b4cc264fc2ba7e8e384deec4a978bc97aafa6e19f3aa5bf3b368f01b4fe88f3c2c4a37768bdc8d1486313556dd430b77ac32a6af5f0a68406cee01d2a0974fc5f3c2d84649f176a6795c7de1675d7e34cda456bcbcd4746bd78308ea62316be4abf057a866d2cd174880d8322b947a779bf399b0237a60281195c56a0aafa1420c8a9fb979c97159a1dfb504af2df9fba32702a41993180aa86e68aa8d738ac5b5de63c17217c74ecf0ad60717b482f4af642aeb7177fed5c893d6df3d846371c89a420d6c0089b4729462ff7c32825efc27ce3a6cfbe6b8887135b52434003a26363fb4bb9e9206d6b0bb820412a83fe2cf2dedf8a2d51488751c8b2c09bd17d6026789c816bdea235f45ef98c5d136a95f19c45ba34e42c7c15396bb4d38f5137ed31eca8c5612f1b808619e038bcfc630b9ff06875aa4523bd0c0b821344f4a7770277e978f6bc01d0f9ed5d984a33f96aad1f19dd07ca71b8fafeff7e1fe29dd1db7af086690897193caedfae4f10243cb04c63764e23cd7fb7832d6abdc1cb0e9668d1c552a0450b458106b1b4173a9330deb892bf40ae67bf79184867dfb17259368c15ff69d723d96791a518f524398e90999d902cae31d8e5077e4bb15953d827bfda4c791f1fde063476c9c0621eb472d4a31c26f34626c98d659316ce639cd5951a21bac73855455e341717dcf2beeb31c0dad69a7a615c3c944e94078a0d42dd172faf72335ec8146ef83dfb49a493eec91fd5b023ee098530bc7bbd3bdeb0d0f9711e182e1ff5cc8fa9f1edf9328fd910c8f8a4444ef1651c22f6d8a7d6ddb7b3cc126ec0248ef9f231ca66fc3458a37c27d5eaffe5ce9240b496f65d67d8c601c18ca85d029289c8f8cf887f70151fafc2a09799cd3b36d27014b49ca46e1534beb23722ed8cb4e4e580ec3604870f56cb208062364ff60310f145bff8cff622fa55088c7d3450fb9441251d3d277ed2d3779a65cafd7e4fefd8fa9ec0fbbc6a1118393153922daff80bebf45610cec15b65d676bf8901499692695eb5510aea3e3922439118a92d20c687f8a5350715c4a8a051e12d7e0b9074fd190ae068a5accb83faecdda46cdf45d7b54225c2ca74b8eddf26360e4b8a81e21b1f659c8911491cdf1bb232ab1f7ff7a0e1ad6f3b81f83174816236cf320d54e845ec78f97d33045c658f1be91a4fe9b787600a09fb54633772e42aca6f91f0de99b5c4821e5dca49f8712ba6aa498793a3210cab2e3da1e1c8b76518192fbdb96c19db80dedd201eb2ad74f2cfd420538d0de4bf7ae26f442e6f9ff9d98cf7efaeeeff0512cdf17a5093e740370a5cf2de12adfdec6b0e038a7db270dd321300972eaee7db6a91d714a9accd601414abeb23720b8ede97f1b581fceb70c41a825d27d52162a1711cf7c63ab660d125993d6ee3ca2beda0e1bdaa60100dd138e12e314b067f9ccc7ab972d29600b4ae8ba9a37df8d15afc5bdff45bf01d3899b0dd01ff0f4493d8cbe65badd80ced9f978ef409b8b0049042a9a918c6c2ede3937677c790f5493087b9df974de70eff13d376ac53cf17ae66b9a1246a7d21daf6fa657739b96e87c2ff865222076ada9572877fe457ce81b9537ea1e82168846643731a7ec9476cc0d795470e090629ef494529a47983226f0f17ca96e9a87cf63044c0b1d1e8a293d32761d1c33f892b48526a27dbfdccd649e3d39bd62e67c3cba5146f8a95c910951345ab3f66b28316b6dd708872035f124a7c1ce214b0b91a005830bdc501847e6965e16b5dfb1e096d7da141e204a76bedc94aa7a6901e693391de1f33791e160da6f55232ef7609ac041e7e1a02967837c2c26ffb536f87660d8e100b8c50ee0da354fb092cefc0abc35b751a0a9754e8a4446a754c55e898de48f2d347215b52d6388c49e689c97d8d8c39959b11b437eb27c2e42709f33b1b581e53119a435d0d03af55d71c1bbd2fecf1a64eaef80ed2dda3ea86fafa0e10902d74ae9c6b8529c16818086613b2af9c76fbbbed230e65791b5eee6edcc13fa6d77de088fe2a00e4e5d25f03563a4ebc0535201578fdf2d162b31d22e10cd48985a646c44875897ee55ec10ae5d85142ad2b7792c7fa2c5fdafd201e9cf137bc4da891b60d863d4bf102683ec6ffbfd2132d0a30f41e623e6e634ca90d0973906f335d543b532e005504996f3016317e492d36039bc97e8328653286a4b794df880ff1163f240522d683a73e93f9719c6da8fd41d1ebf81418168b8a1796cc25fce637025d8e9e0515900e89c3cc63093593b404cbbc63e40ac52b14ba14840c290510548487ceebdc7070d0ad7134edb31aaff18f9f4d2b3b4805b41d1bcc7480ca723409a6e7decb428114ef03c7c194bdb75745834cebaf4bac7ededb43a4e5a78374cdbb5c4c871b71c2e588140ebd86e3992922957e06c0c85a68cd73072a8df7209bcb20fa3b3d4990a961f12c58065f9a43e95dabe66ac4047e00561b8919ec4e270f09356604ed6964c695b13f7018a0ced71d26f36df8998386b091bbb6c1dd5856ef267df78f94fb77304e8d3b0aa6370eee052ebcc764154486bb13133ecb17e174bdeadae9483d82271c528c6e0361bc41e737873cc23eec2a2f626f2c7baa37cd6471133594f794380e08008ea2f027d946aca6af78bd55aa823daeb1ca1271b1b516f93c34c0bf3202262b9b888c47493de730e0f736bb0044f83f6b9dfe32f349346838c660e076418f8a61c71caeea525317986aadcd4bb994dcdf12aa1cbcd83595d475fc6b677c3a80b837acb8e31e31af2565fe01e13262cf2126f6372544d3dddce41798ba65ae783bf02e6d", 0x1000) mkdir(&(0x7f0000000340)='./file0//ile0\x00', 0x1) mkdir(&(0x7f0000000000)='./file0\x00', 0xc) r1 = semget$private(0x0, 0x4, 0x21) semctl$GETPID(r1, 0x1, 0xb, &(0x7f0000000200)=""/154) 2018/03/31 07:26:38 executing program 6: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = socket(0x98ecb7963021fa4, 0xe, 0x2) msgrcv(0x0, &(0x7f0000000000)={0x0, ""/68}, 0x4c, 0x0, 0x0) r2 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) readv(r2, &(0x7f0000000300)=[{&(0x7f0000000240)=""/188, 0xbc}], 0x1) getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f0000000080), &(0x7f00000000c0)=0x4) setsockopt$inet6_dccp_buf(r1, 0x21, 0xc2, &(0x7f0000000140)="0b009937ef7a8379f0c3045b5fe444da499ce757c04eff00adba14619750fd896a1a8d9b2709dfbf26130cb0b4b5bbf4613f24dec3d927bb9fcad541fe16f8078956647688fb", 0x46) 2018/03/31 07:26:38 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_tcp_buf(r0, 0x6, 0x1f, &(0x7f0000000040)=""/4096, &(0x7f0000000000)=0xffffffffffffff7a) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000001040)='/dev/autofs\x00', 0x40002, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000005800)) 2018/03/31 07:26:38 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1=0xe0000001, @loopback=0x7f000001}, 0xb6) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f000043e000)={0x1, {{0x2, 0x0, @multicast1=0xe0000001}}}, 0x90) clock_adjtime(0x0, &(0x7f00000000c0)={0xff, 0x0, 0x3, 0x4, 0xb9, 0x56d, 0x7, 0x7, 0xab25, 0x20, 0x3a, 0x280, 0x9, 0x1, 0x6, 0xffff, 0x2c0230ca, 0x8000, 0x5, 0x4, 0x6, 0xfffffffffffffff9, 0x1ff, 0x6, 0x0, 0xffffffffffff8000}) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000380)={0x2, {{0x2, 0x0, @multicast1=0xe0000001}}}, 0x88) getsockopt$inet_buf(r0, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000695ffc)=0x314) 2018/03/31 07:26:38 executing program 7: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) open(&(0x7f00000000c0)='./file0\x00', 0xa0441, 0x80) syz_mount_image$msdos(&(0x7f0000000140)='msdos\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x1, &(0x7f0000000100)=[{&(0x7f0000000480)="9196b107dc9e5c731d56d84afae6a7bf24", 0x11, 0x1f}], 0x0, &(0x7f0000000000)=ANY=[]) mkdir(&(0x7f0000000180)='./file0//ile0\x00', 0x112) rmdir(&(0x7f0000000080)='./file0//ile0\x00') mkdir(&(0x7f0000000340)='./file0//ile0\x00', 0x1) semctl$GETPID(0x0, 0x1, 0xb, &(0x7f0000000200)=""/154) 2018/03/31 07:26:38 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000f5b000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msgsnd(0x0, &(0x7f0000001080)=ANY=[@ANYBLOB="00000000000400005e47b345d57007f700912c3320f302fd7f30b67e721c04a0326c1b03cd8714e7afad236901fc4c46315e7860e0c79265a6f2a3a704948c77bb73979c14a4501cfa62cf70ef886aad817ba94e01fffc7d6bf9572badfc6cbc7a61eea3ce5a8be69f8a69af7aabcc6ffdedaee81680814f04b8cd5cfdffffe964449efd93497bfe65f389363b552081c659bc0640627bdcb925e5ca510d5e551408a35cf545f36d49332bd931c9719c912dd3a3"], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x8a44ce69d2d8333, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="11634840010000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000", @ANYPTR=&(0x7f0000000000)=ANY=[], @ANYPTR=&(0x7f0000000040)=ANY=[], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0xfffffffffffffcb3, 0x0, &(0x7f00000001c0)}) r1 = syz_open_dev$sndctrl(&(0x7f0000000600)='/dev/snd/controlC#\x00', 0x2, 0x0) pipe(&(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) pread64(r1, &(0x7f0000000900)=""/195, 0xc3, 0x0) keyctl$set_reqkey_keyring(0xe, 0x1000000000000) r4 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/enforce\x00', 0x16907a, 0x0) ioctl$TIOCLINUX4(r4, 0x541c, &(0x7f00000012c0)=0x4) ioctl$int_in(r3, 0x0, &(0x7f0000000100)=0xfffffffffffffffa) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001280)={0x5c, 0x0, &(0x7f0000001180)=[@reply_sg={0x40486312, {{0x4, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x38, 0x20, &(0x7f0000000040)=[@fda={0x66646185, 0x1, 0x2, 0xd}, @fd={0x66642a85, 0x0, r3, 0x0, 0x2}], &(0x7f0000001140)=[0x30, 0x0, 0x58, 0x78]}, 0x9}}, @acquire={0x40046305, 0x1}, @decrefs={0x40046307, 0x3}], 0x43, 0x0, &(0x7f0000001200)="8b2793c756c503cf22554de7797b838cf7295b172faaff57b33715ec5ef3db7614ff643ffe5154df0b87b6dc8edf487d87b7385e81df39c8a1dbacfa68758d19f633da"}) ioctl$TIOCLINUX2(r2, 0x541c, &(0x7f0000000080)={0x2, 0xcaf0, 0x0, 0xffff, 0x51c, 0x1f}) ftruncate(r4, 0x44ad) pwritev(r4, &(0x7f0000001400)=[{&(0x7f0000000180)="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", 0xdcc}], 0x1, 0x4) ioctl$sock_SIOCSIFBR(r2, 0x8941, &(0x7f0000000f80)=@generic={0x20, 0x7, 0x9}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000140)={@local={0xfe, 0x80, [], 0xaa}, 0x9, 0x3, 0xff, 0x8, 0x200, 0x8, 0x80000000}, &(0x7f0000000fc0)=0x20) ioctl$EVIOCGSW(r4, 0x8040451b, &(0x7f0000001300)=""/200) setsockopt$netlink_NETLINK_NO_ENOBUFS(r2, 0x10e, 0x5, &(0x7f0000001040)=0x6, 0x4) 2018/03/31 07:26:38 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1=0xe0000001, @loopback=0x7f000001}, 0xb6) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f000043e000)={0x1, {{0x2, 0x0, @multicast1=0xe0000001}}}, 0x90) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f00000000c0)={0x9, {{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x16}}}}, 0x88) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000380)={0x2, {{0x2, 0x0, @multicast1=0xe0000001}}}, 0x88) getsockopt$inet_buf(r0, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000695ffc)=0x314) 2018/03/31 07:26:38 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4$netrom(0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000000c0)=0xd, 0x0) write(r0, &(0x7f00000000c0), 0xfec9) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x800) ioctl$FUSE_DEV_IOC_CLONE(r1, 0x8004e500, &(0x7f0000000100)=r2) 2018/03/31 07:26:38 executing program 7: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) r0 = open(&(0x7f00000000c0)='./file0\x00', 0xa0441, 0x80) syz_mount_image$msdos(&(0x7f0000000140)='msdos\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x1, &(0x7f0000000100)=[{&(0x7f0000000480)="9196b107dc9e5c731d56d84afae6a7bf24", 0x11, 0x1f}], 0x0, &(0x7f0000000000)=ANY=[]) mkdir(&(0x7f0000000180)='./file0//ile0\x00', 0x112) rmdir(&(0x7f0000000080)='./file0//ile0\x00') mkdir(&(0x7f0000000340)='./file0//ile0\x00', 0x1) r1 = semget$private(0x0, 0x4, 0x21) semctl$GETPID(r1, 0x1, 0xb, &(0x7f0000000200)=""/154) open_by_handle_at(r0, &(0x7f00000004c0)={0x52, 0xff, "2752da9b1a71a1cf00b6f5d400521cc18dd464efc7ad3d668733e78aa506c643404fbb0af8863a753e75c4e3427b8a9f0732eaa0c502c1febe3d5d6ca021990d763bc7bebd429e6a25a7"}, 0x80100) 2018/03/31 07:26:38 executing program 3: r0 = open(&(0x7f0000000000)='./file0\x00', 0x22800, 0x0) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r0, 0x118, 0x1, &(0x7f0000000400)=0x9, 0x4) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000080), 0xfffffffffffffea4) io_setup(0xa4, &(0x7f0000000100)=0x0) r2 = syz_open_dev$urandom(&(0x7f0000000440)='/dev/urandom\x00', 0x0, 0x101800) io_cancel(r1, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x3, 0x8, r2, &(0x7f00000005c0)="58a81785bc46c9ccb5960f945e987c8e297ff48c541307d8292428f8ea176ff9588e126786d76303fbe37522992ee9a31614f22df8e3955c41d1f77c36b85866fcbe9e5966aa4119900ec3fa65afd6e77ad40dec02585bc9067f261e23f2a035dafa6b85bf9856636d53c4affb9706c7b97b19c047bf8ffd20ae8ed0d144d94dd46c5c15f5474064182e8f2b645525e24c2895", 0x93, 0x2, 0x0, 0x1, r0}, &(0x7f00000006c0)) ioctl$KVM_SET_XCRS(r0, 0x4188aea7, &(0x7f0000000a40)=ANY=[@ANYBLOB="0700000001000000010100000000eb3431b2c7198b8a00000180000000000000ff00000000000000240400000000000000000000010000000700000000000000000000000004d6a3ec72af1f0a3c000000000000000900000000000000000000000000000000000000000000000000000000000000000000071ac9c345"]) r3 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x2, 0x28001) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000780)={{{@in=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}}}, &(0x7f0000000880)=0xe8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000008c0)={0x0, 0x0, 0x0}, &(0x7f0000000900)=0xc) ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc008ae05, &(0x7f0000000ac0)=""/225) syz_fuseblk_mount(&(0x7f0000000700)='./file0\x00', &(0x7f0000000740)='./file0\x00', 0xc002, r4, r5, 0x4, 0x6, 0x110002) write$evdev(r3, &(0x7f0000000040)=[{{}, 0x1, 0x200000000200046, 0x6}, {}], 0x30) sysfs$1(0x1, &(0x7f0000000480)='\x00') getsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000080), &(0x7f0000000180)=0x10) r6 = accept4(r0, &(0x7f00000001c0)=@pppoe={0x0, 0x0, {0x0, @broadcast}}, &(0x7f0000000240)=0x80, 0x80000) getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000940)={0x0, 0x6}, &(0x7f0000000980)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(r6, 0x84, 0x0, &(0x7f00000009c0)={r7, 0xd41d, 0x100, 0x25c}, &(0x7f0000000280)=0xffffffffffffffe6) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f00000004c0)={{{@in6=@loopback, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6}}, &(0x7f0000000140)=0xe8) ioprio_set$uid(0x3, r8, 0x0) getsockopt$inet_opts(r6, 0x0, 0x9, &(0x7f0000000300)=""/131, &(0x7f00000003c0)=0x83) 2018/03/31 07:26:38 executing program 2: perf_event_open(&(0x7f0000348f88)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f0000000000)='./file0\x00', &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='cgroup2\x00', 0x0, 0x0) mount(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000080)='iso9660\x00', 0x40020, &(0x7f0000000040)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000ec0)={0xffffffffffffffff, 0x50, &(0x7f0000000e40)}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000f80)={0xffffffffffffff9c, 0xffffffffffffff8f, &(0x7f0000002780)}, 0x695a9ca53b4162d5) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000e00)={0xffffffffffffffff, 0x50, &(0x7f0000000fc0)={0x0, 0x0}}, 0x3e3) r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000200)=r1, 0x4) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000140)={&(0x7f0000000040)='./file0\x00'}, 0x10) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000f00)=0x0) ptrace$getregset(0x4204, r3, 0x6, &(0x7f0000000f40)={&(0x7f0000002800)=""/214, 0xd6}) socketpair$ipx(0x4, 0x2, 0x0, &(0x7f0000000b40)={0xffffffffffffffff}) recvmsg(r4, &(0x7f00000025c0)={&(0x7f0000000b80)=@ipx, 0x80, &(0x7f00000024c0)=[{&(0x7f0000000c00)=""/248, 0xf8}, {&(0x7f00000014c0)=""/4096, 0x1000}, {&(0x7f0000000d00)=""/224, 0xe0}], 0x3, &(0x7f0000002500)=""/151, 0x97, 0x1ff}, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x8) modify_ldt$write(0x1, &(0x7f0000000b00)={0xd5, 0xffffffff, 0x1000, 0x9, 0x682f, 0x4, 0x5, 0x3f, 0x3, 0xffffffffffffff00}, 0x10) mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='./file0\x00', &(0x7f0000000340)='cpuset\x00', 0x10, &(0x7f0000000380)="7bff71eacab2ec1c2ce228b533467bc1644c892ae5cf4701f82220b12d600c600df009011a692aa5a889a906379a756e37de47be6004e0bb1e7ef900a7448c336f6b0eca18188eb861") r5 = socket$kcm(0x29, 0x7, 0x0) recvmsg(r5, &(0x7f0000000a40)={&(0x7f0000000440)=@nl=@proc, 0x80, &(0x7f00000008c0)=[{&(0x7f00000004c0)=""/254, 0xfe}, {&(0x7f00000005c0)=""/201, 0xc9}, {&(0x7f00000006c0)=""/100, 0x64}, {&(0x7f0000000740)=""/175, 0xaf}, {&(0x7f0000000800)=""/159, 0x9f}], 0x5, &(0x7f0000000940)=""/227, 0xe3, 0x9}, 0x2000) mount(&(0x7f0000002600)='./file0\x00', &(0x7f0000002640)='./file0\x00', &(0x7f0000002680)='rpc_pipefs\x00', 0x110c12, &(0x7f0000001040)="7f2f39ea05b7f295307ba04f52caa2c3306f3272a25215bd80ec605c78f39be27eacda2600c5505c301ae6cd21a4b419d16a37aee479377b688c26fbecf0c1b75d46900e543aacb4cbe2679b27ad668b2a2faff74834c1ce679a71fa7d22ee30b182ecab7dbe2625b69f4aa7e1be4a2f06920b9cbdd32a9aa7979f06b86733aa40b0beb0d2618e82dd82ae955c2eb392ff628bc4c008eb4a46ecb2270c4a") bpf$OBJ_PIN_PROG(0x6, &(0x7f00000001c0)={&(0x7f00000000c0)='./file0\x00', r2}, 0xc) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0xffffffff}, 0x2c) close(r6) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)={&(0x7f0000000080)='./file0/', r6}, 0x10) mkdir(&(0x7f0000000000)='./file0/', 0xfffffffffffffffe) socket$kcm(0x29, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000019ff8)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r8, 0x8000000000000007, &(0x7f0000000000)) fcntl$lock(r8, 0x26, &(0x7f000001d000)={0x8000000000000001}) dup3(r7, r8, 0x0) 2018/03/31 07:26:38 executing program 1 (fault-call:6 fault-nth:52): mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) open(&(0x7f00000000c0)='./file0\x00', 0xa0441, 0x80) syz_mount_image$msdos(&(0x7f0000000140)='msdos\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x1, &(0x7f0000000100)=[{&(0x7f0000000480)="9196b107dc9e5c731d56d84afae6a7bf24", 0x11, 0x1f}], 0x0, &(0x7f0000000000)=ANY=[]) rmdir(&(0x7f0000000080)='./file0//ile0\x00') mkdir(&(0x7f0000000340)='./file0//ile0\x00', 0x1) r0 = semget$private(0x0, 0x4, 0x21) semctl$GETPID(r0, 0x1, 0xb, &(0x7f0000000200)=""/154) 2018/03/31 07:26:38 executing program 5: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x103002, 0x0) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x82) getsockopt$IP6T_SO_GET_INFO(r1, 0x29, 0x40, &(0x7f0000000080)={'raw\x00'}, &(0x7f0000000100)=0x54) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x8080) mmap(&(0x7f00003f5000/0x2000)=nil, 0x2000, 0x0, 0x1011, r0, 0x0) fcntl$setflags(r0, 0x2, 0x1) getsockopt$inet6_int(r1, 0x29, 0x0, &(0x7f0000000240), &(0x7f0000000280)=0x4) getrlimit(0xa, &(0x7f00000002c0)) ioctl$EVIOCGABS0(r1, 0x80184540, &(0x7f0000000140)=""/130) openat(r1, &(0x7f0000000200)='./file0\x00', 0x200, 0x18) 2018/03/31 07:26:38 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1=0xe0000001, @loopback=0x7f000001}, 0xb6) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f000043e000)={0x1, {{0x2, 0x0, @multicast1=0xe0000001}}}, 0x90) socket$pppoe(0x18, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000380)={0x2, {{0x2, 0x0, @multicast1=0xe0000001}}}, 0x88) getsockopt$inet_buf(r0, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000695ffc)=0x314) [ 208.158824] binder: 14909:14920 got transaction to invalid handle [ 208.165176] binder: 14909:14920 transaction failed 29201/-22, size 0-0 line 2848 [ 208.175604] FAULT_INJECTION: forcing a failure. [ 208.175604] name failslab, interval 1, probability 0, space 0, times 0 [ 208.186869] CPU: 1 PID: 14921 Comm: syz-executor1 Not tainted 4.16.0-rc7+ #372 [ 208.194229] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 208.203584] Call Trace: 2018/03/31 07:26:38 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x1) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5334, &(0x7f0000001000)={0x5, 0x0, 0x0, 'queue0\x00'}) ioctl$KVM_GET_REGS(r0, 0x8090ae81, &(0x7f0000000040)) ioctl(r0, 0x1, &(0x7f0000001000)) [ 208.206178] dump_stack+0x194/0x24d [ 208.209815] ? arch_local_irq_restore+0x53/0x53 [ 208.214493] should_fail+0x8c0/0xa40 [ 208.218206] ? trace_hardirqs_off+0x10/0x10 [ 208.222533] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 208.227643] ? __lock_acquire+0x664/0x3e00 [ 208.231880] ? find_held_lock+0x35/0x1d0 [ 208.235939] ? __lock_is_held+0xb6/0x140 [ 208.240009] ? check_same_owner+0x320/0x320 [ 208.244336] ? rcu_note_context_switch+0x710/0x710 [ 208.249268] should_failslab+0xec/0x120 [ 208.253242] __kmalloc_track_caller+0x5f/0x760 2018/03/31 07:26:38 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x7f, 0x0) getresuid(&(0x7f0000000080), &(0x7f00000000c0)=0x0, &(0x7f0000000100)) sendmsg$nl_generic(r0, &(0x7f0000001380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001340)={&(0x7f0000000140)={0x11d8, 0x18, 0x12, 0x70bd2d, 0x25dfdbfd, {0xc}, [@generic="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", @nested={0x1c4, 0x94, [@typed={0x8, 0x67, @uid=r1}, @generic="4c38b144a313a9be77189f8625f843c1aeeb93a9ed30e6779d1c37ceb7c11f200b2f75a2f1837e3f00a9bbd665d595126bfde8754c9672935016caf3f3f7da275959202f018cbeced78a48ec4b06df47a7005b4b6964", @typed={0x68, 0x64, @binary="8ceda6799dc6b2a3f5f1f4e751e21e211048480ff8e2d68a91498f67dc2db543b333f68d4ded8a5fbb2b4a0df2e4059ac6773bee2488faabfde6dee499f0ad06a68672d3800faf59662e8d508782fe2726491dee3e180132e39b5ea4e429ef4cee6f"}, @typed={0x8, 0x8f, @ipv4=@dev={0xac, 0x14, 0x14, 0x16}}, @generic="10a7f344953fb14419417265260c7c2da1d1aa44ed1946eca82f711af4902adc85d1057acb2aeeceb2d026117409710e7e12ece82ead0f030a1271faeefa3ddd6b38721d06ae066cd8ef5f5e9ca7c5293d980a49c11677eb05cd41248812c4f2badc4c9dfe220d19e736fce3485206385b1ac924a4150b2fc82804b14233ee8933ec0bec8e510aa9dddc839199d9f4497abc427239e05d404b3c0d39503a480c52aa34628a7ad9365a73dfaaad1bab9c3aa24c4c51b3ab4c88f9a579bc67cdc8671dad8f552e237925e4afb5c64ce6856193cd9c0caf87daf07d5639bd888d785060f1c7f4a152e9d0b3a9182d23e7383cc9"]}]}, 0x11d8}, 0x1, 0x0, 0x0, 0x1}, 0x4004000) r2 = socket$nl_generic(0x10, 0x3, 0x10) bind(r2, &(0x7f0000f8effa)=@hci={0x1f}, 0x6) 2018/03/31 07:26:38 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer\x00', 0x8000, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r1, 0x29, 0x1, &(0x7f00000001c0)=0x2, 0x4) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1=0xe0000001, @loopback=0x7f000001}, 0xb6) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f000043e000)={0x1, {{0x2, 0x0, @multicast1=0xe0000001}}}, 0x90) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000380)={0x2, {{0x2, 0x0, @multicast1=0xe0000001}}}, 0x88) getsockopt$inet_buf(r1, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000695ffc)=0x91) [ 208.257827] ? string+0x180/0x200 [ 208.261280] ? kstrdup_const+0x39/0x50 [ 208.265167] kstrdup+0x39/0x70 [ 208.268365] kstrdup_const+0x39/0x50 [ 208.272078] __kernfs_new_node+0xa2/0x570 [ 208.276230] ? kernfs_dop_revalidate+0x380/0x380 [ 208.280986] ? delete_node+0x2db/0xbc0 [ 208.284877] ? snprintf+0xc0/0xf0 [ 208.288327] ? vsprintf+0x40/0x40 [ 208.291785] kernfs_new_node+0x80/0xe0 [ 208.295674] __kernfs_create_file+0x4b/0x320 [ 208.300085] cgroup_addrm_files+0x3c5/0xa70 [ 208.304431] ? cgroup_file_write+0x710/0x710 [ 208.308841] ? memcg_oom_wake_function+0x6a0/0x6a0 [ 208.313773] ? cgroup_idr_replace+0x3f/0x50 [ 208.318102] ? percpu_ref_get_many+0x1f0/0x1f0 [ 208.322684] ? mem_cgroup_css_online+0xf7/0x140 [ 208.327349] ? percpu_ref_get_many+0x1f0/0x1f0 [ 208.331934] ? __local_bh_enable_ip+0x121/0x230 [ 208.336611] ? online_css+0x224/0x2e0 [ 208.340421] css_populate_dir+0x198/0x420 [ 208.344568] cgroup_apply_control_enable+0x390/0xbc0 [ 208.349674] ? cgroup_propagate_control+0x570/0x570 [ 208.354691] ? css_populate_dir+0x289/0x420 2018/03/31 07:26:39 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000240)={0x10, 0x0, 0x25dfdbfc, 0x80000}, 0xc) r1 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x10000, 0x10a) ioctl$KDGKBMODE(r1, 0x4b44, &(0x7f0000000500)) perf_event_open(&(0x7f0000220000)={0x2, 0x70, 0x3e3, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000340000/0xc00000)=nil, 0xc00000, 0x1000009, 0x32, 0xffffffffffffffff, 0x0) r2 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xffffffffffffffff) r3 = syz_open_dev$mice(&(0x7f0000000100)='/dev/input/mice\x00', 0x0, 0x0) setsockopt$inet6_udp_int(r3, 0x11, 0x64, &(0x7f0000000140)=0x7, 0x4) renameat2(r3, &(0x7f00000001c0)='./file0\x00', r3, &(0x7f0000000200)='./file0\x00', 0x5) rename(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='./file0\x00') getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000300)={0xe92, 0x4, 0x100000000000000, 0x30c7, 0x0}, &(0x7f0000000340)=0x10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000380)={r4, 0x80}, &(0x7f00000003c0)=0x8) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000400)=0x1) getsockname$netlink(r3, &(0x7f0000000440), &(0x7f0000000480)=0xc) add_key(&(0x7f000030fff3)='big_key\x00', &(0x7f00004cb000)={0x73, 0x79, 0x7a}, &(0x7f0000000040)="b8", 0x1, r2) socketpair(0x8, 0x1, 0x29, &(0x7f0000000180)) 2018/03/31 07:26:39 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00001abfef)='/dev/qat_adf_ctl\x00', 0x0, 0x0) connect$rds(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @broadcast=0xffffffff}, 0x10) timerfd_create(0x7, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x40096100, &(0x7f0000000400)) r1 = socket$inet(0x15, 0x0, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @broadcast=0xffffffff}, 0x10) setsockopt$netrom_NETROM_T4(r0, 0x103, 0x6, &(0x7f00000003c0)=0xab8, 0x4) sendmsg(r1, &(0x7f0000000200)={0x0, 0x290, &(0x7f0000000140), 0x1}, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000003140)='IPVS\x00') sendmsg$IPVS_CMD_SET_DEST(r0, &(0x7f0000003200)={&(0x7f0000003100)={0x10, 0x0, 0x0, 0x41}, 0xc, &(0x7f00000031c0)={&(0x7f0000003180)={0x38, r2, 0x0, 0x70bd26, 0x25dfdbfd, {0x6}, [@IPVS_CMD_ATTR_DEST={0x1c, 0x2, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x215}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x40}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7722}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x40) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@mcast1, @in6=@remote}}, {{@in=@multicast1}, 0x0, @in=@rand_addr}}, &(0x7f00000005c0)=0xe8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000a00), &(0x7f0000000a40)=0xc) sendmsg$netlink(r0, &(0x7f00000030c0)={&(0x7f0000000480)=@proc={0x10, 0x0, 0x25dfdbfe}, 0xc, &(0x7f0000003040)=[{&(0x7f0000000600)={0x68, 0x2a, 0x4, 0x70bd2c, 0x25dfdbfb, "", [@generic="8d15c6bf82e53dd16798042189e806e76440da8ad16878cf2b9013dbb838b02bf56597370d37a9a57360917339ae87969c1a6a4a748f2b033e631e8bfdee87611a4e5cd2af712e1c02b6d71298920782eb5b6aaa3119e1f2"]}, 0x68}, {&(0x7f0000001b00)={0x10, 0x41, 0xc, 0x70bd28, 0x25dfdbfe}, 0x10}, {&(0x7f0000001c00)={0x104, 0x40, 0x200, 0x70bd27, 0x25dfdbfc, "", [@nested={0x20, 0x30, [@typed={0x4, 0x22}, @typed={0xc, 0x7a, @u64=0x1}, @typed={0xc, 0x5, @u64=0x5}]}, @generic="a63a1ab0e36beb2c5e97470a60883fa3b9cfac511c1379c59df1f8a8e8824c07f20ddb414e713bd04a7794f3d6ea2daf402e314c738f041bf673d03908b42aa06c5a75c146296416e73ad80775a325743108f6b6820b0f7d8f114bbbe3feb6e7f3deaafd04ed104c3f92013fbf5cd6c2bcc695ae9ff9899d5580739cdd1ea3dbc711dcdbf2cf5e572329d5697127320f75f8c6485777d78f27737ca607f5e8b938b3fff3444ebc96fa9791df05fe8d097a1c9247b7f7a01307c985994da1ab4ab265d3b856ee222484c88ad24245150b6f13225a"]}, 0x104}], 0x3, 0x0, 0x0, 0x1}, 0x10) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0xc080, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r4, 0x28, 0x0, &(0x7f0000000440)=0x3, 0x8) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, &(0x7f0000000680)={'filter\x00'}, &(0x7f0000000700)=0x78) execveat(r4, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=[&(0x7f0000000100)='wlan0E\x00'], &(0x7f0000000380)=[&(0x7f0000000180)='-\x00', &(0x7f00000001c0)=']\x00', &(0x7f0000000240)='self\x00', &(0x7f0000000280)='selinux:Ovboxnet1\x00', &(0x7f00000002c0)='*systemmime_type\x00', &(0x7f0000000300)='vmnet1trusted\x00', &(0x7f0000000340)='\x00'], 0x1000) tkill(r3, 0x1000000000016) [ 208.359012] cgroup_mkdir+0x56f/0xfc0 [ 208.362807] ? __lock_is_held+0xb6/0x140 [ 208.366871] ? cgroup_destroy_locked+0x750/0x750 [ 208.371626] ? rcu_read_lock_sched_held+0x108/0x120 [ 208.376635] ? kmem_cache_free+0x258/0x2a0 [ 208.380865] ? set_nlink+0xc1/0x160 [ 208.384493] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 208.389416] ? generic_permission+0x105/0x3c0 [ 208.393910] ? cgroup_destroy_locked+0x750/0x750 [ 208.398665] kernfs_iop_mkdir+0x153/0x1e0 [ 208.402810] vfs_mkdir+0x390/0x600 [ 208.406345] SyS_mkdir+0x220/0x2a0 [ 208.409885] ? SyS_mkdirat+0x2b0/0x2b0 [ 208.413768] ? do_syscall_64+0xb7/0x940 [ 208.417737] ? SyS_mkdirat+0x2b0/0x2b0 [ 208.421624] do_syscall_64+0x281/0x940 [ 208.425507] ? vmalloc_sync_all+0x30/0x30 [ 208.429650] ? _raw_spin_unlock_irq+0x27/0x70 [ 208.434142] ? finish_task_switch+0x1c1/0x7e0 [ 208.438632] ? syscall_return_slowpath+0x550/0x550 [ 208.443556] ? syscall_return_slowpath+0x2ac/0x550 [ 208.448481] ? prepare_exit_to_usermode+0x350/0x350 [ 208.453502] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 208.458865] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 208.463713] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 208.468898] RIP: 0033:0x454e79 [ 208.472087] RSP: 002b:00007f2d4ca09c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 208.479793] RAX: ffffffffffffffda RBX: 00007f2d4ca0a6d4 RCX: 0000000000454e79 [ 208.487062] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000020000340 [ 208.494328] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 208.501590] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000013 [ 208.508850] R13: 00000000000003ea R14: 00000000006f7e90 R15: 0000000000000034 [ 208.516261] cgroup: cgroup_addrm_files: failed to add current, err=-12 [ 208.525822] binder: 14909:14920 got reply transaction with no transaction stack [ 208.533497] binder: 14909:14920 transaction failed 29201/-71, size 56-32 line 2763 [ 208.582637] binder: 14909:14920 got transaction to invalid handle [ 208.588989] binder: 14909:14920 transaction failed 29201/-22, size 0-0 line 2848 [ 208.606341] binder: 14909:14920 got reply transaction with no transaction stack [ 208.614008] binder: 14909:14920 transaction failed 29201/-71, size 56-32 line 2763 [ 208.657674] binder: undelivered TRANSACTION_ERROR: 29201 [ 208.663478] binder: undelivered TRANSACTION_ERROR: 29201 2018/03/31 07:26:39 executing program 4: r0 = socket(0x10, 0x200000000002, 0xc) ioctl$PPPIOCSFLAGS(r0, 0x40047459, &(0x7f0000000000)=0x800) write(r0, &(0x7f0000000040)="1f0000000506fd00010000f60000ff0180fff80009000180060107ec000000", 0x1f) 2018/03/31 07:26:39 executing program 0: setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1=0xe0000001, @loopback=0x7f000001}, 0xb6) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f000043e000)={0x1, {{0x2, 0x0, @multicast1=0xe0000001}}}, 0x90) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000380)={0x2, {{0x2, 0x0, @multicast1=0xe0000001}}}, 0x88) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000695ffc)=0x314) 2018/03/31 07:26:39 executing program 1 (fault-call:6 fault-nth:53): mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) open(&(0x7f00000000c0)='./file0\x00', 0xa0441, 0x80) syz_mount_image$msdos(&(0x7f0000000140)='msdos\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x1, &(0x7f0000000100)=[{&(0x7f0000000480)="9196b107dc9e5c731d56d84afae6a7bf24", 0x11, 0x1f}], 0x0, &(0x7f0000000000)=ANY=[]) rmdir(&(0x7f0000000080)='./file0//ile0\x00') mkdir(&(0x7f0000000340)='./file0//ile0\x00', 0x1) r0 = semget$private(0x0, 0x4, 0x21) semctl$GETPID(r0, 0x1, 0xb, &(0x7f0000000200)=""/154) 2018/03/31 07:26:39 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000fafff7)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$vcsa(&(0x7f0000000200)='/dev/vcsa#\x00', 0x3, 0x40) recvfrom$ax25(r2, &(0x7f0000000240)=""/147, 0x93, 0x2001, 0x0, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000040)={0x79}) r3 = memfd_create(&(0x7f00000000c0)='/dev/kvm\x00', 0x2) getsockopt$IPT_SO_GET_ENTRIES(r3, 0x0, 0x41, &(0x7f0000000100)=ANY=[], &(0x7f0000000000)) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000300)=ANY=[@ANYBLOB="bf030000000000000000000004000000000000000000000000000000040000000000000000000000002c3200000000000000000000000000a27bf1f328a76b9167fc3a940262012f682593bdb0991f4fcb95cd3c2b47b28465326b95b740955cde20f07602a5e325b2e5a23bfb90c27ec4c8c383"]) 2018/03/31 07:26:39 executing program 7: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) open(&(0x7f00000000c0)='./file0\x00', 0xa0441, 0x80) syz_mount_image$msdos(&(0x7f0000000140)='msdos\x00', &(0x7f0000000440)='./file0\x00', 0x80000000000, 0x1, &(0x7f0000000100)=[{&(0x7f0000000480)="9196b107dc9e5c731d56d84afae6a7bf24", 0x11, 0x1f}], 0x0, &(0x7f0000000000)=ANY=[]) mkdir(&(0x7f0000000180)='./file0//ile0\x00', 0x112) rmdir(&(0x7f0000000080)='./file0//ile0\x00') mkdir(&(0x7f0000000340)='./file0//ile0\x00', 0x1) r0 = semget$private(0x0, 0x4, 0x21) semctl$GETPID(r0, 0x1, 0xb, &(0x7f0000000200)=""/154) 2018/03/31 07:26:39 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = accept4$inet(0xffffffffffffffff, 0x0, &(0x7f00000000c0), 0x100000000080000) sendto$inet(r1, &(0x7f0000001a40)="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", 0x1000, 0x1, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000d80)=ANY=[@ANYRES32=0x0, @ANYBLOB="98000000651b13f8f9495d9bf41248204dc8af503b3ba8679dd6092f74ffff3a8e207c2976d065c5d701235d0100010000000000d8a71752f0f641d03c0b07c1a9b2c4ae6d13d67ec55af995fb10c0e89c679764cddb2f21c9718b94703e87bf1451170291f4f005c4566d1313ad328396949b97dfb2d91bb40134df09ed3b"], &(0x7f0000000200)=0x2) socketpair(0xa, 0x3, 0x5, &(0x7f0000000cc0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f00000003c0)=@int=0x80000000, 0x4) ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000d40)={0x0}) ioctl$DRM_IOCTL_SET_SAREA_CTX(r1, 0x4010641c, &(0x7f0000000680)={r4, &(0x7f0000000a80)=""/97}) r5 = accept(0xffffffffffffffff, &(0x7f0000000b00)=@alg, &(0x7f0000000b80)=0x80) sendto$ipx(r5, &(0x7f0000000bc0)="662df4a093cdd7b35ff6ae42bc7d13930c1fea26aee3a47d99eb39c72fb76601dc87206d4eb86e00240f2194fa63c4e57a634a03fbc5a09ef3dcfb35ce84046ec80043aad86ba46f2e3bf4f8838948f37ed11512a1b49e", 0x57, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_buf(r0, 0x6, 0x1f, &(0x7f0000000340)="f6fa4b79ba6f6c4c5323e2af43013ecee5c86b06eeb23ef53a19c375a5f79c47658a554390c336a7455599d8f112c413f52eec22356dd4871dd874ff3eeb849bf7f48b056e1ccdd135800a9abba99cc4db4e02cfaac519c0bc3587121524814260ae93745387f031b19f", 0x6a) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r5, 0x84, 0x77, &(0x7f00000003c0)=ANY=[], &(0x7f0000000240)) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000540)=@broute={'broute\x00', 0x20, 0x6, 0x2ab, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000a80], 0x0, &(0x7f0000000300), &(0x7f0000001080)=ANY=[@ANYBLOB="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"]}, 0x323) getsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000000100), &(0x7f0000000140)=0x8) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f000000b000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000beeff0)={&(0x7f0000000e40)=ANY=[@ANYBLOB="3c010000100013070000000000ec23ca2be8b6973da271000000fe8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000937387c10257a96924601cacebc174705a7363cce61dfc8dc4b6c56b96ed731a39cfd45e16186746a213466913b5fcdb280f356b21b429ab203f96f2e93c4f464485d1213abe647410d8f35cb902818537ae1a49b60d16ec0cc9dd09a3a96cc2d6556ff9ebae8d53d177e75ccd1ae074890397d69162f4f52333c93758773473b9ada62da6d90bf1", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000000003200000000000000000000000000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c001200726663343130362867636d28616573292900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000"], 0x13c}, 0x1}, 0x0) getpeername$inet6(r3, &(0x7f0000000040), &(0x7f0000000080)=0x1c) bind$inet(r1, &(0x7f0000000180)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x2b) syz_emit_ethernet(0x1, &(0x7f0000000840)=ANY=[@ANYBLOB="aaaaaaaaaaaa000000000000119078ac2314aaac14142b4e204e20000890780000000000000000000000970ea6f5ee54ca02247b67f1f29f5036727cbd1b4c93ea961aa7f9d2c1fcbb82274000000000000000a86a3ff95f7df69e1c823dca133782c22601bb9939674f56ce4db6dce3c79a4465a60205ec054c34609034427530dc40f2cdfdd083f236ba6ebfd04b777ba72feaa2715e783f561bcf4b774cd81e2a99d834d0747983f16c43f4fe9a96da84ac17f4f8db14b59b2b871fef55702df30966092bcfa651de8bd7fa6029af17b3b5406bebd9d90d91b85db0256b87a7afbbb9cc0000000000000000000000"], &(0x7f00000000c0)={0x0, 0x0, [0x0, 0x0, 0x0, 0x8bc]}) getsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, &(0x7f0000000940)={{{@in=@local, @in6=@local}}, {{@in6=@local}, 0x0, @in6=@remote}}, &(0x7f0000000a40)=0xd) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000001840)={{{@in6=@ipv4={[], [], @broadcast}, @in6=@ipv4={[], [], @multicast1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@remote}}, &(0x7f0000000c40)=0xfffffffffffffdb3) setsockopt$inet6_buf(r0, 0x29, 0x0, &(0x7f00000006c0)="c5d3082e99819f3816efd1e9205adcf5810fe53baa9be3b9658e190724ad8e0e987431b5206f8bc9548b3c4903f6fda0b86bb6d10bcdca853545b94745197c1a41d4fe428cc06875a9574a8427d7aeef2cf0f95154dfe7fdad", 0x59) setsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000001940)={{{@in6=@ipv4={[], [0xff, 0xff], @loopback=0x7f000001}, @in6=@ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, 0x4e20, 0x0, 0x4e23, 0x200, 0x0, 0x0, 0x0, 0x1d, 0x0, r7}, {0x100000000, 0x0, 0x100, 0x0, 0x6, 0x3, 0x9, 0x7}, {0x9, 0x1ff, 0x2, 0x689}, 0x40, 0x0, 0x2, 0x0, 0x2, 0x3}, {{@in=@multicast1=0xe0000001, 0x4d4}, 0xa, @in6=@loopback={0x0, 0x1}, 0x3504, 0x0, 0x1, 0x95b8, 0x0, 0x100, 0xfffffffffffffffe}}, 0xe8) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r5, 0x84, 0x18, &(0x7f0000000400)={0x0, 0x2d}, &(0x7f00000005c0)=0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r5, 0x84, 0x76, &(0x7f0000000640), 0x8) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r3, 0x4058534c, &(0x7f0000000740)={0x1, 0x4, 0x20000000000, 0x8000006, 0x7, 0x9}) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r3, 0x84, 0x1e, &(0x7f0000000280), &(0x7f00000002c0)=0x4) setsockopt$inet6_int(r0, 0x29, 0x0, &(0x7f0000000000), 0x4) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000440)={0x6, 0x1, 0x9, 0x3, 0xcb0b}, 0xc) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r5, 0x84, 0x77, &(0x7f0000000480)={r8, 0x4, 0x5, [0x8, 0x8, 0x5, 0x62, 0x5]}, &(0x7f00000004c0)=0x12) 2018/03/31 07:26:39 executing program 2: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)="2f70726f632f7379040000000000000074687265736800", 0x2, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') io_setup(0x3, &(0x7f0000000000)=0x0) r2 = syz_open_dev$usbmon(&(0x7f0000000240)='/dev/usbmon#\x00', 0x806, 0x101000) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f00000000c0)=0x3) io_getevents(r1, 0xf69, 0x2, &(0x7f0000000100)=[{}, {}], &(0x7f00005cfff0)={0x77359400}) sendto$inet6(r0, &(0x7f0000000400)="f7d6e3f51c253857de70e07f46e5e10b1e67a856af0d888b1f3cd408da4bfdd49db91d2219da3e75fb51fa503ee588a8b46128f3941e94888481491b6c13fc8c4c6ed8ecb80b55728a003df5a1b79697be1854e08ec2ad37fb1245509720075b1c0e23b3f05db7a03dccfc451296722ec8d3f4ae236aa958cbc7542eabea0cb0af7cee094b02f5b74e90ab612227f02f334fc02414aa81d2e1d99e17d19ba20f5d78f08eeb7068c0f0d9847b340630a8ee99fa9d31fb592575ba5bc448cfaca6e98f180598c965281c59f87a7220dfb0005473771c841103e9da45c8703f67bd57d78e5389e0197a229b79bd24ce248f49ea26", 0xf3, 0x20000040, 0x0, 0x0) clock_settime(0x7, &(0x7f0000000180)={0x0, 0x989680}) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) io_getevents(r1, 0x4, 0x4, &(0x7f00000002c0)=[{}, {}, {}, {}], &(0x7f00000003c0)={r3, r4+30000000}) r5 = memfd_create(&(0x7f0000000500)=':+lo#\x00', 0x0) io_submit(r1, 0x3cd, &(0x7f0000001280)=[&(0x7f0000001100)={0x0, 0x0, 0x0, 0x3, 0x3, r5, &(0x7f0000000100)}]) io_destroy(r1) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r5, 0xc0145401, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x5, 0x3, 0xbd2}) ioctl$TCXONC(r2, 0x540a, 0x7f) 2018/03/31 07:26:39 executing program 6: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'lo\x00', &(0x7f00000001c0)=ANY=[@ANYBLOB="170000000000000000000000e8ffffffffffffff00000000000000000000000000"]}) [ 209.053319] FAULT_INJECTION: forcing a failure. [ 209.053319] name failslab, interval 1, probability 0, space 0, times 0 [ 209.064764] CPU: 0 PID: 14982 Comm: syz-executor1 Not tainted 4.16.0-rc7+ #372 [ 209.064771] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 209.064776] Call Trace: [ 209.064791] dump_stack+0x194/0x24d [ 209.064805] ? arch_local_irq_restore+0x53/0x53 [ 209.064824] should_fail+0x8c0/0xa40 [ 209.064837] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 209.064849] ? rcu_read_lock_sched_held+0x108/0x120 [ 209.064870] ? find_held_lock+0x35/0x1d0 [ 209.064884] ? __lock_is_held+0xb6/0x140 [ 209.064902] ? check_same_owner+0x320/0x320 [ 209.064914] ? rcu_note_context_switch+0x710/0x710 [ 209.064930] should_failslab+0xec/0x120 [ 209.064940] kmem_cache_alloc_node_trace+0x5a/0x760 [ 209.064948] ? idr_alloc_u32+0x390/0x390 [ 209.064964] mem_cgroup_css_alloc+0x3b6/0x19c0 [ 209.064976] ? setup_cpu_cache+0x1c0/0x1c0 [ 209.064985] ? __kernfs_new_node+0x3f5/0x570 [ 209.064996] ? kernfs_dop_revalidate+0x380/0x380 [ 209.065013] ? trace_hardirqs_off+0x10/0x10 [ 209.065024] ? kernfs_link_sibling+0x27d/0x380 [ 209.065033] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 209.065042] ? cgroup_kn_set_ugid+0x2c7/0x370 [ 209.065052] ? cgroup_file_name+0x1d0/0x1d0 [ 209.065060] ? mutex_unlock+0xd/0x10 [ 209.065071] ? __lock_is_held+0xb6/0x140 [ 209.065086] ? cgroup_addrm_files+0x67f/0xa70 [ 209.065101] ? trace_hardirqs_off+0x10/0x10 [ 209.065109] ? cgroup_file_write+0x710/0x710 [ 209.065123] ? cgroup_idr_replace+0x3f/0x50 [ 209.065132] ? trace_hardirqs_off+0x10/0x10 [ 209.065142] ? __lock_is_held+0xb6/0x140 [ 209.065157] ? __local_bh_enable_ip+0x121/0x230 [ 209.065169] ? __lock_is_held+0xb6/0x140 [ 209.065185] cgroup_apply_control_enable+0x44d/0xbc0 [ 209.088964] netlink: 76 bytes leftover after parsing attributes in process `syz-executor5'. [ 209.092730] ? cgroup_propagate_control+0x570/0x570 [ 209.092748] ? css_populate_dir+0x289/0x420 [ 209.092765] cgroup_mkdir+0x56f/0xfc0 [ 209.104363] netlink: 'syz-executor4': attribute type 1 has an invalid length. [ 209.106549] ? __lock_is_held+0xb6/0x140 [ 209.106565] ? cgroup_destroy_locked+0x750/0x750 [ 209.106579] ? rcu_read_lock_sched_held+0x108/0x120 [ 209.153881] netlink: 'syz-executor4': attribute type 1 has an invalid length. [ 209.154767] ? kmem_cache_free+0x258/0x2a0 [ 209.154780] ? set_nlink+0xc1/0x160 [ 209.154792] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 209.154800] ? generic_permission+0x105/0x3c0 [ 209.154811] ? cgroup_destroy_locked+0x750/0x750 [ 209.296161] kernfs_iop_mkdir+0x153/0x1e0 [ 209.300288] vfs_mkdir+0x390/0x600 [ 209.303803] SyS_mkdir+0x220/0x2a0 [ 209.307320] ? SyS_mkdirat+0x2b0/0x2b0 [ 209.311186] ? do_syscall_64+0xb7/0x940 [ 209.315135] ? SyS_mkdirat+0x2b0/0x2b0 [ 209.319001] do_syscall_64+0x281/0x940 [ 209.322867] ? vmalloc_sync_all+0x30/0x30 [ 209.326991] ? _raw_spin_unlock_irq+0x27/0x70 [ 209.331464] ? finish_task_switch+0x1c1/0x7e0 [ 209.335936] ? syscall_return_slowpath+0x550/0x550 [ 209.340840] ? syscall_return_slowpath+0x2ac/0x550 [ 209.345746] ? prepare_exit_to_usermode+0x350/0x350 [ 209.350740] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 209.356080] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 209.360900] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 209.366076] RIP: 0033:0x454e79 [ 209.369243] RSP: 002b:00007f2d4ca09c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 209.376937] RAX: ffffffffffffffda RBX: 00007f2d4ca0a6d4 RCX: 0000000000454e79 [ 209.384182] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000020000340 [ 209.391428] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 209.398671] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000013 [ 209.405916] R13: 00000000000003ea R14: 00000000006f7e90 R15: 0000000000000035 [ 209.413549] kasan: CONFIG_KASAN_INLINE enabled [ 209.418423] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 209.425804] general protection fault: 0000 [#1] SMP KASAN [ 209.427599] netlink: 76 bytes leftover after parsing attributes in process `syz-executor5'. [ 209.431330] Dumping ftrace buffer: [ 209.431335] (ftrace buffer empty) [ 209.431338] Modules linked in: [ 209.431349] CPU: 0 PID: 14982 Comm: syz-executor1 Not tainted 4.16.0-rc7+ #372 [ 209.431353] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 209.431367] RIP: 0010:__mem_cgroup_free+0x71/0x110 [ 209.431375] RSP: 0018:ffff88017acc75b0 EFLAGS: 00010206 [ 209.477118] RAX: 0000000000000011 RBX: 0000000000000000 RCX: ffffffff8310cdfd [ 209.484363] RDX: 0000000000040000 RSI: ffffc90003eb8000 RDI: 0000000000000088 [ 209.491605] RBP: ffff88017acc75d0 R08: 0000000000000000 R09: ffff88017acc73a8 [ 209.498847] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 209.506091] R13: ffff880177de8040 R14: dffffc0000000000 R15: ffff880177de8040 [ 209.513338] FS: 00007f2d4ca0a700(0000) GS:ffff8801db000000(0000) knlGS:0000000000000000 [ 209.521537] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 209.527391] CR2: 00007f6d47fc8518 CR3: 00000001c8c24003 CR4: 00000000001626f0 [ 209.534636] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 209.541881] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 209.549144] Call Trace: [ 209.551710] mem_cgroup_css_alloc+0x403/0x19c0 [ 209.556275] ? setup_cpu_cache+0x1c0/0x1c0 [ 209.560484] ? __kernfs_new_node+0x3f5/0x570 [ 209.564871] ? kernfs_dop_revalidate+0x380/0x380 [ 209.569602] ? trace_hardirqs_off+0x10/0x10 [ 209.573986] ? kernfs_link_sibling+0x27d/0x380 [ 209.578545] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 209.583446] ? cgroup_kn_set_ugid+0x2c7/0x370 [ 209.587913] ? cgroup_file_name+0x1d0/0x1d0 [ 209.592209] ? mutex_unlock+0xd/0x10 [ 209.595897] ? __lock_is_held+0xb6/0x140 [ 209.599935] ? cgroup_addrm_files+0x67f/0xa70 [ 209.604407] ? trace_hardirqs_off+0x10/0x10 [ 209.608700] ? cgroup_file_write+0x710/0x710 [ 209.613086] ? cgroup_idr_replace+0x3f/0x50 [ 209.617380] ? trace_hardirqs_off+0x10/0x10 [ 209.621673] ? __lock_is_held+0xb6/0x140 [ 209.625712] ? __local_bh_enable_ip+0x121/0x230 [ 209.630359] ? __lock_is_held+0xb6/0x140 [ 209.634397] cgroup_apply_control_enable+0x44d/0xbc0 [ 209.639477] ? cgroup_propagate_control+0x570/0x570 [ 209.644473] ? css_populate_dir+0x289/0x420 [ 209.648779] cgroup_mkdir+0x56f/0xfc0 [ 209.652563] ? __lock_is_held+0xb6/0x140 [ 209.656600] ? cgroup_destroy_locked+0x750/0x750 [ 209.661330] ? rcu_read_lock_sched_held+0x108/0x120 [ 209.666321] ? kmem_cache_free+0x258/0x2a0 [ 209.670703] ? set_nlink+0xc1/0x160 [ 209.674302] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 209.679203] ? generic_permission+0x105/0x3c0 [ 209.683844] ? cgroup_destroy_locked+0x750/0x750 [ 209.688575] kernfs_iop_mkdir+0x153/0x1e0 [ 209.692695] vfs_mkdir+0x390/0x600 [ 209.696208] SyS_mkdir+0x220/0x2a0 [ 209.699723] ? SyS_mkdirat+0x2b0/0x2b0 [ 209.703584] ? do_syscall_64+0xb7/0x940 [ 209.707535] ? SyS_mkdirat+0x2b0/0x2b0 [ 209.711395] do_syscall_64+0x281/0x940 [ 209.715256] ? vmalloc_sync_all+0x30/0x30 [ 209.719376] ? _raw_spin_unlock_irq+0x27/0x70 [ 209.723851] ? finish_task_switch+0x1c1/0x7e0 [ 209.728320] ? syscall_return_slowpath+0x550/0x550 [ 209.733222] ? syscall_return_slowpath+0x2ac/0x550 [ 209.738125] ? prepare_exit_to_usermode+0x350/0x350 [ 209.743115] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 209.748454] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 209.753277] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 209.758442] RIP: 0033:0x454e79 [ 209.761607] RSP: 002b:00007f2d4ca09c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 209.769290] RAX: ffffffffffffffda RBX: 00007f2d4ca0a6d4 RCX: 0000000000454e79 [ 209.776533] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000020000340 [ 209.783777] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 209.791022] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000013 [ 209.798266] R13: 00000000000003ea R14: 00000000006f7e90 R15: 0000000000000035 2018/03/31 07:26:39 executing program 6: r0 = msgget$private(0x0, 0x0) msgctl$IPC_SET(r0, 0x1, &(0x7f0000258f88)) msgrcv(r0, &(0x7f00000010c0)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e0ec6fee72e0b6c6a94600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002e9700000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050fc45aaa5c29e7c01ed2a317226a1c1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x1008, 0x0, 0x2000) msgsnd(r0, &(0x7f0000000040)={0x3}, 0x8, 0x0) msgctl$IPC_RMID(r0, 0x0) 2018/03/31 07:26:40 executing program 0: r0 = syz_open_dev$mice(&(0x7f0000000100)='/dev/input/mice\x00', 0x0, 0x230200) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r0, 0x12, 0x2, &(0x7f0000000140)=""/13, &(0x7f0000000180)=0xd) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a, 0x2}, &(0x7f00000001c0)="e232a59a3468b715850c02638d90234e9f579cd5bea0fd1fa7a6c624f607d792f2a0cce0e679503cf3139700675b709114b06a5543ca315eeedbbe51df9c4179601a1baf10de17eabe02df1db8e20856897aabafdf2441e7d22572bf68f74cd9e845f89c61a1ec63599912a604768c01559ccf3c0bbe538a4d2954066f9faf2e2027b1717802908c139ce3130e8c24a26611a47ff63593cd4b895ac323bd9e72c3d3b4e008d9611e38a8565656ea4e2bf58a9c0c8e25e6c9eb7481440f740f77dbc478", 0xc3, 0xfffffffffffffffe) r3 = request_key(&(0x7f00000002c0)='dns_resolver\x00', &(0x7f0000000300)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000340)='\x00', 0x0) keyctl$link(0x8, r2, r3) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1=0xe0000001, @loopback=0x7f000001}, 0xb6) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f000043e000)={0x1, {{0x2, 0x0, @rand_addr=0x62cc}}}, 0x88) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r1, 0xc008551c, &(0x7f00000000c0)=ANY=[@ANYBLOB="d5090000180000001f0000000400000001000000952500000900000006000000"]) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000380)={0x2, {{0x2, 0x0, @multicast1=0xe0000001}}}, 0x88) getsockopt$inet_buf(r1, 0x0, 0x27, &(0x7f0000000440)=""/145, &(0x7f0000000500)=0xffffff48) [ 209.805514] Code: 00 00 48 89 f8 48 c1 e8 03 42 80 3c 30 00 0f 85 99 00 00 00 4f 8b a4 e5 f0 09 00 00 49 8d bc 24 88 00 00 00 48 89 f8 48 c1 e8 03 <42> 80 3c 30 00 0f 85 88 00 00 00 49 8b bc 24 88 00 00 00 e8 77 [ 209.824620] RIP: __mem_cgroup_free+0x71/0x110 RSP: ffff88017acc75b0 [ 209.831025] ---[ end trace 2d75563067ea677a ]--- [ 209.835765] Kernel panic - not syncing: Fatal exception [ 209.841541] Dumping ftrace buffer: [ 209.845061] (ftrace buffer empty) [ 209.848742] Kernel Offset: disabled [ 209.852342] Rebooting in 86400 seconds..