$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)="766574683100000000ffffffffffef00", 0x22b) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff]}, 0x10) 2018/05/26 13:23:27 executing program 6: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf00000000000000]}, 0x2c) 2018/05/26 13:23:27 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0xc00]}, 0x2c) [ 1127.352038] TCP: out of memory -- consider tuning tcp_mem 2018/05/26 13:23:27 executing program 7: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0xaf01, &(0x7f0000000280)) r1 = eventfd(0x80000002) write$eventfd(r1, &(0x7f00000000c0)=0xffffffffffffff90, 0x8) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000857ff8)={0x0, r1}) readv(r1, &(0x7f0000000100)=[{&(0x7f00000002c0)=""/212, 0xd4}], 0x1) [ 1127.972076] sctp: sctp_transport_update_pmtu: Reported pmtu 72 too low, using default minimum of 512 [ 1128.115623] sctp: sctp_transport_update_pmtu: Reported pmtu 72 too low, using default minimum of 512 2018/05/26 13:23:28 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty=0x18, [0x0, 0x0, 0x0, 0xa000000]}, 0x10) 2018/05/26 13:23:28 executing program 6: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00]}, 0x2c) 2018/05/26 13:23:28 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)="766574683100000000ffffffffffef00", 0x22b) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x84489]}, 0x10) 2018/05/26 13:23:28 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0xc00]}, 0x2c) 2018/05/26 13:23:28 executing program 2: r0 = getpid() sched_setattr(r0, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x0, 0x4}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000f86000)='./control/file0\x00') rmdir(&(0x7f00000000c0)='./control\x00') syz_fuse_mount(&(0x7f0000000240)='./control\x00', 0x406000, 0x0, 0x0, 0x0, 0x700) syz_fuseblk_mount(&(0x7f0000000140)='./control\x00', &(0x7f0000000180)='./control/file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) close(r1) 2018/05/26 13:23:28 executing program 4: r0 = getpid() sched_setattr(r0, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x0, 0x4}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000f86000)='./control/file0\x00') syz_fuse_mount(&(0x7f0000000240)='./control\x00', 0x406000, 0x0, 0x0, 0x0, 0xfdffffff) syz_fuseblk_mount(&(0x7f0000000140)='./control\x00', &(0x7f0000000180)='./control/file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) close(r1) 2018/05/26 13:23:28 executing program 7: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0xaf01, &(0x7f0000000280)) r1 = eventfd(0x80000002) write$eventfd(r1, &(0x7f00000000c0)=0xffffffffffffff90, 0x8) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000857ff8)={0x0, r1}) readv(r1, &(0x7f0000000100)=[{&(0x7f00000002c0)=""/212, 0xd4}], 0x1) 2018/05/26 13:23:28 executing program 1: r0 = socket$inet(0x2, 0x5, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vcan0\x00', 0x10) sendmsg(r0, &(0x7f0000000480)={&(0x7f0000000140)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000380)="f0", 0x1}], 0x1}, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000a00)={@multicast1=0xe0000001, @local={0xac, 0x14, 0x14, 0xaa}}, 0xc) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000040)="84", 0x1}], 0x1, &(0x7f0000000540)}, 0x0) 2018/05/26 13:23:28 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty=0x18, [0x0, 0x0, 0x0, 0x3400]}, 0x10) 2018/05/26 13:23:28 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)="766574683100000000ffffffffffef00", 0x22b) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x80550000]}, 0x10) 2018/05/26 13:23:28 executing program 6: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf]}, 0x2c) 2018/05/26 13:23:28 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0xa0000000000000, 0x0, 0x0, 0x0, 0x0, 0xc00]}, 0x2c) 2018/05/26 13:23:28 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty=0x18, [0x0, 0x0, 0x0, 0x5580]}, 0x10) 2018/05/26 13:23:28 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)="766574683100000000ffffffffffef00", 0x22b) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0xc800]}, 0x10) 2018/05/26 13:23:28 executing program 6: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10]}, 0x2c) [ 1128.576056] TCP: out of memory -- consider tuning tcp_mem [ 1129.146909] sctp: sctp_transport_update_pmtu: Reported pmtu 72 too low, using default minimum of 512 [ 1129.291554] sctp: sctp_transport_update_pmtu: Reported pmtu 72 too low, using default minimum of 512 2018/05/26 13:23:29 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x4000000000000, 0x0, 0x0, 0x0, 0x0, 0xc00]}, 0x2c) 2018/05/26 13:23:29 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty=0x18, [0x0, 0x0, 0x0, 0x1f4]}, 0x10) 2018/05/26 13:23:29 executing program 6: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x353]}, 0x2c) 2018/05/26 13:23:29 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)="766574683100000000ffffffffffef00", 0x22b) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x84488]}, 0x10) 2018/05/26 13:23:29 executing program 7: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0xaf01, &(0x7f0000000280)) r1 = eventfd(0x80000002) write$eventfd(r1, &(0x7f00000000c0)=0xffffffffffffff90, 0x8) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000857ff8)={0x0, r1}) readv(r1, &(0x7f0000000100)=[{&(0x7f00000002c0)=""/212, 0xd4}], 0x1) 2018/05/26 13:23:29 executing program 4: r0 = getpid() sched_setattr(r0, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x0, 0x4}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000f86000)='./control/file0\x00') syz_fuse_mount(&(0x7f0000000240)='./control\x00', 0x406000, 0x0, 0x0, 0x0, 0x600) syz_fuseblk_mount(&(0x7f0000000140)='./control\x00', &(0x7f0000000180)='./control/file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) close(r1) 2018/05/26 13:23:29 executing program 1: r0 = socket$inet(0x2, 0x5, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vcan0\x00', 0x10) sendmsg(r0, &(0x7f0000000480)={&(0x7f0000000140)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000380)="f0", 0x1}], 0x1}, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000a00)={@multicast1=0xe0000001, @local={0xac, 0x14, 0x14, 0xaa}}, 0xc) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000040)="84", 0x1}], 0x1, &(0x7f0000000540)}, 0x0) 2018/05/26 13:23:29 executing program 2: r0 = getpid() sched_setattr(r0, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x0, 0x4}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000f86000)='./control/file0\x00') rmdir(&(0x7f00000000c0)='./control\x00') syz_fuse_mount(&(0x7f0000000240)='./control\x00', 0x406000, 0x0, 0x0, 0x0, 0x4800) syz_fuseblk_mount(&(0x7f0000000140)='./control\x00', &(0x7f0000000180)='./control/file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) close(r1) 2018/05/26 13:23:29 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty=0x18, [0x0, 0x0, 0x0, 0x20000]}, 0x10) 2018/05/26 13:23:29 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)="766574683100000000ffffffffffef00", 0x22b) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x8a44080000000000]}, 0x10) 2018/05/26 13:23:29 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0xc80300, 0x0, 0x0, 0x0, 0x0, 0xc00]}, 0x2c) [ 1129.477871] TCP: out of memory -- consider tuning tcp_mem [ 1129.489320] TCP: out of memory -- consider tuning tcp_mem 2018/05/26 13:23:29 executing program 6: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe]}, 0x2c) 2018/05/26 13:23:29 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty=0x18, [0x0, 0x0, 0x0, 0x3e8]}, 0x10) 2018/05/26 13:23:29 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)="766574683100000000ffffffffffef00", 0x22b) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x8144080000000000]}, 0x10) 2018/05/26 13:23:29 executing program 6: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x900000000000000]}, 0x2c) 2018/05/26 13:23:29 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0xe00, 0x0, 0x0, 0x0, 0x0, 0xc00]}, 0x2c) [ 1129.583613] TCP: out of memory -- consider tuning tcp_mem [ 1129.693132] TCP: out of memory -- consider tuning tcp_mem [ 1129.702520] TCP: out of memory -- consider tuning tcp_mem [ 1130.266107] sctp: sctp_transport_update_pmtu: Reported pmtu 72 too low, using default minimum of 512 [ 1130.413548] sctp: sctp_transport_update_pmtu: Reported pmtu 72 too low, using default minimum of 512 2018/05/26 13:23:30 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty=0x18, [0x0, 0x0, 0x0, 0xffffffff00000000]}, 0x10) 2018/05/26 13:23:30 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)="766574683100000000ffffffffffef00", 0x22b) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x7b44080000000000]}, 0x10) 2018/05/26 13:23:30 executing program 6: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000000]}, 0x2c) 2018/05/26 13:23:30 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0xe000, 0x0, 0x0, 0x0, 0x0, 0xc00]}, 0x2c) 2018/05/26 13:23:30 executing program 7: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r0) 2018/05/26 13:23:30 executing program 4: r0 = getpid() sched_setattr(r0, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x0, 0x4}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000f86000)='./control/file0\x00') syz_fuse_mount(&(0x7f0000000240)='./control\x00', 0x406000, 0x0, 0x0, 0x0, 0x11903) syz_fuseblk_mount(&(0x7f0000000140)='./control\x00', &(0x7f0000000180)='./control/file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) close(r1) 2018/05/26 13:23:30 executing program 1: r0 = socket$inet(0x2, 0x5, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vcan0\x00', 0x10) sendmsg(r0, &(0x7f0000000480)={&(0x7f0000000140)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000380)="f0", 0x1}], 0x1}, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000a00)={@multicast1=0xe0000001, @local={0xac, 0x14, 0x14, 0xaa}}, 0xc) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000040)="84", 0x1}], 0x1, &(0x7f0000000540)}, 0x0) 2018/05/26 13:23:30 executing program 2: r0 = getpid() sched_setattr(r0, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x0, 0x4}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000f86000)='./control/file0\x00') rmdir(&(0x7f00000000c0)='./control\x00') syz_fuse_mount(&(0x7f0000000240)='./control\x00', 0x406000, 0x0, 0x0, 0x0, 0xcd180100) syz_fuseblk_mount(&(0x7f0000000140)='./control\x00', &(0x7f0000000180)='./control/file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) close(r1) 2018/05/26 13:23:30 executing program 7: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f00000000c0)=""/148, 0x94}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_mr_cache\x00') preadv(r0, &(0x7f0000000480)=[{&(0x7f0000000380)=""/242, 0xf2}], 0x1, 0x10400003) 2018/05/26 13:23:30 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty=0x18, [0x0, 0x0, 0x0, 0x1000000]}, 0x10) 2018/05/26 13:23:30 executing program 6: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000]}, 0x2c) 2018/05/26 13:23:30 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)="766574683100000000ffffffffffef00", 0x22b) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x81440800]}, 0x10) 2018/05/26 13:23:30 executing program 7: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$evdev(r0, &(0x7f0000000200)=[{{0x77359400}}], 0xffa7) 2018/05/26 13:23:30 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0xa000, 0x0, 0x0, 0x0, 0x0, 0xc00]}, 0x2c) 2018/05/26 13:23:30 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)="766574683100000000ffffffffffef00", 0x22b) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x72440800]}, 0x10) 2018/05/26 13:23:30 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty=0x18, [0x0, 0x0, 0x0, 0x8055]}, 0x10) [ 1131.389792] sctp: sctp_transport_update_pmtu: Reported pmtu 72 too low, using default minimum of 512 [ 1131.533563] sctp: sctp_transport_update_pmtu: Reported pmtu 72 too low, using default minimum of 512 2018/05/26 13:23:31 executing program 7: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f00000006c0)) clock_gettime(0x0, &(0x7f0000000100)) sendmsg$nl_netfilter(r0, &(0x7f0000000000)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x14, 0x1, 0xa, 0xfffffff7ffffffff}, 0x14}, 0x1}, 0x0) 2018/05/26 13:23:31 executing program 6: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000000]}, 0x2c) 2018/05/26 13:23:31 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0xc8030000000000, 0x0, 0x0, 0x0, 0x0, 0xc00]}, 0x2c) 2018/05/26 13:23:31 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty=0x18, [0x0, 0x0, 0x0, 0xe803]}, 0x10) 2018/05/26 13:23:31 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)="766574683100000000ffffffffffef00", 0x22b) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x11000000]}, 0x10) 2018/05/26 13:23:31 executing program 2: r0 = getpid() sched_setattr(r0, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x0, 0x4}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000f86000)='./control/file0\x00') rmdir(&(0x7f00000000c0)='./control\x00') syz_fuse_mount(&(0x7f0000000240)='./control\x00', 0x406000, 0x0, 0x0, 0x0, 0x1f000000) syz_fuseblk_mount(&(0x7f0000000140)='./control\x00', &(0x7f0000000180)='./control/file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) close(r1) 2018/05/26 13:23:31 executing program 1: r0 = socket$inet(0x2, 0x5, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vcan0\x00', 0x10) sendmsg(r0, &(0x7f0000000480)={&(0x7f0000000140)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000380)="f0", 0x1}], 0x1}, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000a00)={@multicast1=0xe0000001, @local={0xac, 0x14, 0x14, 0xaa}}, 0xc) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000040)="84", 0x1}], 0x1, &(0x7f0000000540)}, 0x0) 2018/05/26 13:23:31 executing program 4: r0 = getpid() sched_setattr(r0, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x0, 0x4}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000f86000)='./control/file0\x00') syz_fuse_mount(&(0x7f0000000240)='./control\x00', 0x406000, 0x0, 0x0, 0x0, 0x15) syz_fuseblk_mount(&(0x7f0000000140)='./control\x00', &(0x7f0000000180)='./control/file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) close(r1) 2018/05/26 13:23:31 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)="766574683100000000ffffffffffef00", 0x22b) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x84477]}, 0x10) 2018/05/26 13:23:31 executing program 7: r0 = getpid() sched_setattr(r0, &(0x7f00000000c0), 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}}) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) syz_fuse_mount(&(0x7f0000000240)='./control\x00', 0x406000, 0x0, 0x0, 0x0, 0x48000000) close(0xffffffffffffffff) 2018/05/26 13:23:31 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x1800, 0x0, 0x0, 0x0, 0x0, 0xc00]}, 0x2c) 2018/05/26 13:23:31 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty=0x18, [0x0, 0x0, 0x0, 0xe]}, 0x10) 2018/05/26 13:23:32 executing program 6: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38000]}, 0x2c) 2018/05/26 13:23:32 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)="766574683100000000ffffffffffef00", 0x22b) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x7c44080000000000]}, 0x10) 2018/05/26 13:23:32 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x0, 0xc00]}, 0x2c) 2018/05/26 13:23:32 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty=0x18, [0x0, 0x0, 0x0, 0x4000000000000000]}, 0x10) 2018/05/26 13:23:32 executing program 7: r0 = getpid() sched_setattr(r0, &(0x7f00000000c0), 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x0, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) syz_fuse_mount(&(0x7f0000000240)='./control\x00', 0x406000, 0x0, 0x0, 0x0, 0x48000000) close(r1) 2018/05/26 13:23:32 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty=0x18, [0x0, 0x0, 0x0, 0x34000000]}, 0x10) 2018/05/26 13:23:32 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)="766574683100000000ffffffffffef00", 0x22b) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x5000000000000]}, 0x10) [ 1132.001046] net_ratelimit: 4 callbacks suppressed [ 1132.001051] TCP: out of memory -- consider tuning tcp_mem [ 1132.144562] TCP: out of memory -- consider tuning tcp_mem [ 1132.519688] sctp: sctp_transport_update_pmtu: Reported pmtu 72 too low, using default minimum of 512 [ 1132.664314] sctp: sctp_transport_update_pmtu: Reported pmtu 72 too low, using default minimum of 512 2018/05/26 13:23:32 executing program 6: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e000]}, 0x2c) 2018/05/26 13:23:32 executing program 7: r0 = getpid() sched_setattr(r0, &(0x7f00000000c0), 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x0, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) syz_fuse_mount(&(0x7f0000000240)='./control\x00', 0x406000, 0x0, 0x0, 0x0, 0x48000000) close(r1) 2018/05/26 13:23:32 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x0, 0xc00]}, 0x2c) 2018/05/26 13:23:32 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty=0x18, [0x0, 0x0, 0x0, 0xe803000000000000]}, 0x10) 2018/05/26 13:23:32 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)="766574683100000000ffffffffffef00", 0x22b) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x400000000000000]}, 0x10) 2018/05/26 13:23:32 executing program 4: r0 = getpid() sched_setattr(r0, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x0, 0x4}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000f86000)='./control/file0\x00') syz_fuse_mount(&(0x7f0000000240)='./control\x00', 0x406000, 0x0, 0x0, 0x0, 0x48) syz_fuseblk_mount(&(0x7f0000000140)='./control\x00', &(0x7f0000000180)='./control/file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) close(r1) 2018/05/26 13:23:32 executing program 1: r0 = socket$inet(0x2, 0x5, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vcan0\x00', 0x10) sendmsg(r0, &(0x7f0000000480)={&(0x7f0000000140)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000380)="f0", 0x1}], 0x1}, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000a00)={@multicast1=0xe0000001, @local={0xac, 0x14, 0x14, 0xaa}}, 0xc) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000040)="84", 0x1}], 0x1, &(0x7f0000000540)}, 0x0) 2018/05/26 13:23:32 executing program 2: r0 = getpid() sched_setattr(r0, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x0, 0x4}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000f86000)='./control/file0\x00') rmdir(&(0x7f00000000c0)='./control\x00') syz_fuse_mount(&(0x7f0000000240)='./control\x00', 0x406000, 0x0, 0x0, 0x0, 0x7a00) syz_fuseblk_mount(&(0x7f0000000140)='./control\x00', &(0x7f0000000180)='./control/file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) close(r1) 2018/05/26 13:23:33 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)="766574683100000000ffffffffffef00", 0x22b) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x7344080000000000]}, 0x10) 2018/05/26 13:23:33 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty=0x18, [0x0, 0x0, 0x0, 0xe00000000000000]}, 0x10) 2018/05/26 13:23:33 executing program 6: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}, 0x2c) 2018/05/26 13:23:33 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x400000000000000, 0x0, 0x0, 0x0, 0x0, 0xc00]}, 0x2c) 2018/05/26 13:23:33 executing program 7: r0 = getpid() sched_setattr(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) syz_fuse_mount(&(0x7f0000000240)='./control\x00', 0x406000, 0x0, 0x0, 0x0, 0x48000000) close(r1) 2018/05/26 13:23:33 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)="766574683100000000ffffffffffef00", 0x22b) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x8844080000000000]}, 0x10) 2018/05/26 13:23:33 executing program 6: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00]}, 0x2c) [ 1132.998745] TCP: out of memory -- consider tuning tcp_mem [ 1133.004753] TCP: out of memory -- consider tuning tcp_mem [ 1133.084723] TCP: out of memory -- consider tuning tcp_mem [ 1133.093567] TCP: out of memory -- consider tuning tcp_mem [ 1133.653366] sctp: sctp_transport_update_pmtu: Reported pmtu 72 too low, using default minimum of 512 [ 1133.796584] sctp: sctp_transport_update_pmtu: Reported pmtu 72 too low, using default minimum of 512 2018/05/26 13:23:34 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty=0x18, [0x0, 0x0, 0x0, 0x142800]}, 0x10) 2018/05/26 13:23:34 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0xc0000000000000, 0x0, 0x0, 0x0, 0x0, 0xc00]}, 0x2c) 2018/05/26 13:23:34 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)="766574683100000000ffffffffffef00", 0x22b) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x82440800]}, 0x10) 2018/05/26 13:23:34 executing program 6: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9000000]}, 0x2c) 2018/05/26 13:23:34 executing program 4: r0 = getpid() sched_setattr(r0, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x0, 0x4}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000f86000)='./control/file0\x00') syz_fuse_mount(&(0x7f0000000240)='./control\x00', 0x406000, 0x0, 0x0, 0x0, 0x8cffffff00000000) syz_fuseblk_mount(&(0x7f0000000140)='./control\x00', &(0x7f0000000180)='./control/file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) close(r1) 2018/05/26 13:23:34 executing program 2: r0 = getpid() sched_setattr(r0, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x0, 0x4}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000f86000)='./control/file0\x00') rmdir(&(0x7f00000000c0)='./control\x00') syz_fuse_mount(&(0x7f0000000240)='./control\x00', 0x406000, 0x0, 0x0, 0x0, 0x600000000000000) syz_fuseblk_mount(&(0x7f0000000140)='./control\x00', &(0x7f0000000180)='./control/file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) close(r1) 2018/05/26 13:23:34 executing program 1: r0 = socket$inet(0x2, 0x5, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vcan0\x00', 0x10) sendmsg(r0, &(0x7f0000000480)={&(0x7f0000000140)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000380)="f0", 0x1}], 0x1}, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000a00)={@multicast1=0xe0000001, @local={0xac, 0x14, 0x14, 0xaa}}, 0xc) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000040)="84", 0x1}], 0x1, &(0x7f0000000540)}, 0x0) 2018/05/26 13:23:34 executing program 7: r0 = getpid() sched_setattr(r0, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x0, 0x4}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) syz_fuse_mount(&(0x7f0000000240)='./control\x00', 0x406000, 0x0, 0x0, 0x0, 0x48000000) close(r1) 2018/05/26 13:23:34 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x1100000000000000, 0x0, 0x0, 0x0, 0x0, 0xc00]}, 0x2c) [ 1133.985045] TCP: out of memory -- consider tuning tcp_mem [ 1133.990838] TCP: out of memory -- consider tuning tcp_mem 2018/05/26 13:23:34 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty=0x18, [0x0, 0x0, 0x0, 0x12]}, 0x10) 2018/05/26 13:23:34 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)="766574683100000000ffffffffffef00", 0x22b) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x83440800]}, 0x10) 2018/05/26 13:23:34 executing program 6: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5303]}, 0x2c) 2018/05/26 13:23:34 executing program 7: r0 = getpid() sched_setattr(r0, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x0, 0x4}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) syz_fuse_mount(&(0x7f0000000240)='./control\x00', 0x406000, 0x0, 0x0, 0x0, 0x48000000) close(r1) [ 1134.038559] TCP: out of memory -- consider tuning tcp_mem 2018/05/26 13:23:34 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0xc00]}, 0x2c) 2018/05/26 13:23:34 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty=0x18, [0x0, 0x0, 0x0, 0xf4080b0000000000]}, 0x10) [ 1134.772161] sctp: sctp_transport_update_pmtu: Reported pmtu 72 too low, using default minimum of 512 [ 1134.916583] sctp: sctp_transport_update_pmtu: Reported pmtu 72 too low, using default minimum of 512 2018/05/26 13:23:35 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)="766574683100000000ffffffffffef00", 0x22b) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x8344080000000000]}, 0x10) 2018/05/26 13:23:35 executing program 7: r0 = getpid() sched_setattr(r0, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x0, 0x4}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000f86000)='./control/file0\x00') syz_fuse_mount(&(0x7f0000000240)='./control\x00', 0x406000, 0x0, 0x0, 0x0, 0x48000000) syz_fuseblk_mount(&(0x7f0000000140)='./control\x00', &(0x7f0000000180)='./control/file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) close(r1) 2018/05/26 13:23:35 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xc00]}, 0x2c) 2018/05/26 13:23:35 executing program 6: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24]}, 0x2c) 2018/05/26 13:23:35 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty=0x18, [0x0, 0x0, 0x0, 0x1100000000000000]}, 0x10) 2018/05/26 13:23:35 executing program 1: r0 = socket$inet(0x2, 0x5, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vcan0\x00', 0x10) sendmsg(r0, &(0x7f0000000480)={&(0x7f0000000140)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000380)="f0", 0x1}], 0x1}, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000a00)={@multicast1=0xe0000001, @local={0xac, 0x14, 0x14, 0xaa}}, 0xc) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000040)="84", 0x1}], 0x1, &(0x7f0000000540)}, 0x0) 2018/05/26 13:23:35 executing program 2: r0 = getpid() sched_setattr(r0, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x0, 0x4}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000f86000)='./control/file0\x00') rmdir(&(0x7f00000000c0)='./control\x00') syz_fuse_mount(&(0x7f0000000240)='./control\x00', 0x406000, 0x0, 0x0, 0x0, 0x100000000000000) syz_fuseblk_mount(&(0x7f0000000140)='./control\x00', &(0x7f0000000180)='./control/file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) close(r1) 2018/05/26 13:23:35 executing program 4: r0 = getpid() sched_setattr(r0, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x0, 0x4}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000f86000)='./control/file0\x00') syz_fuse_mount(&(0x7f0000000240)='./control\x00', 0x406000, 0x0, 0x0, 0x0, 0x5209000000000000) syz_fuseblk_mount(&(0x7f0000000140)='./control\x00', &(0x7f0000000180)='./control/file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) close(r1) 2018/05/26 13:23:35 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)="766574683100000000ffffffffffef00", 0x22b) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0xc800000000000000]}, 0x10) [ 1135.072049] TCP: out of memory -- consider tuning tcp_mem 2018/05/26 13:23:35 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty=0x18, [0x0, 0x0, 0x0, 0x12000000000000]}, 0x10) 2018/05/26 13:23:35 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x3000000, 0x0, 0x0, 0x0, 0x0, 0xc00]}, 0x2c) 2018/05/26 13:23:35 executing program 6: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]}, 0x2c) 2018/05/26 13:23:35 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)="766574683100000000ffffffffffef00", 0x22b) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x8055000000000000]}, 0x10) 2018/05/26 13:23:35 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty=0x18, [0x0, 0x0, 0x0, 0x7]}, 0x10) 2018/05/26 13:23:35 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x11000000, 0x0, 0x0, 0x0, 0x0, 0xc00]}, 0x2c) [ 1135.898185] sctp: sctp_transport_update_pmtu: Reported pmtu 72 too low, using default minimum of 512 [ 1136.040619] sctp: sctp_transport_update_pmtu: Reported pmtu 72 too low, using default minimum of 512 2018/05/26 13:23:36 executing program 6: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000]}, 0x2c) 2018/05/26 13:23:36 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)="766574683100000000ffffffffffef00", 0x22b) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x7c440800]}, 0x10) 2018/05/26 13:23:36 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0xa000000, 0x0, 0x0, 0x0, 0x0, 0xc00]}, 0x2c) 2018/05/26 13:23:36 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty=0x18, [0x0, 0x0, 0x0, 0xf401]}, 0x10) 2018/05/26 13:23:36 executing program 4: r0 = getpid() sched_setattr(r0, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x0, 0x4}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000f86000)='./control/file0\x00') syz_fuse_mount(&(0x7f0000000240)='./control\x00', 0x406000, 0x0, 0x0, 0x0, 0xfdffffff00000000) syz_fuseblk_mount(&(0x7f0000000140)='./control\x00', &(0x7f0000000180)='./control/file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) close(r1) 2018/05/26 13:23:36 executing program 7 (fault-call:9 fault-nth:0): r0 = getpid() sched_setattr(r0, &(0x7f00000000c0), 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}}) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) syz_fuse_mount(&(0x7f0000000240)='./control\x00', 0x406000, 0x0, 0x0, 0x0, 0x48000000) close(r1) 2018/05/26 13:23:36 executing program 1: r0 = socket$inet(0x2, 0x5, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vcan0\x00', 0x10) sendmsg(r0, &(0x7f0000000480)={&(0x7f0000000140)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000380)="f0", 0x1}], 0x1}, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000a00)={@multicast1=0xe0000001, @local={0xac, 0x14, 0x14, 0xaa}}, 0xc) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000040)="84", 0x1}], 0x1, &(0x7f0000000540)}, 0x0) 2018/05/26 13:23:36 executing program 2: r0 = getpid() sched_setattr(r0, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x0, 0x4}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000f86000)='./control/file0\x00') rmdir(&(0x7f00000000c0)='./control\x00') syz_fuse_mount(&(0x7f0000000240)='./control\x00', 0x406000, 0x0, 0x0, 0x0, 0x3800000000000000) syz_fuseblk_mount(&(0x7f0000000140)='./control\x00', &(0x7f0000000180)='./control/file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) close(r1) [ 1136.211667] FAULT_INJECTION: forcing a failure. [ 1136.211667] name failslab, interval 1, probability 0, space 0, times 0 [ 1136.223053] CPU: 0 PID: 568 Comm: syz-executor7 Not tainted 4.17.0-rc6+ #68 [ 1136.230158] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1136.239506] Call Trace: [ 1136.242104] dump_stack+0x1b9/0x294 [ 1136.245742] ? dump_stack_print_info.cold.2+0x52/0x52 [ 1136.250940] ? graph_lock+0x170/0x170 [ 1136.254758] should_fail.cold.4+0xa/0x1a [ 1136.258825] ? lock_downgrade+0x8e0/0x8e0 [ 1136.262985] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1136.268095] ? find_held_lock+0x36/0x1c0 [ 1136.272176] ? find_held_lock+0x36/0x1c0 [ 1136.276266] ? check_same_owner+0x320/0x320 [ 1136.280603] ? rcu_note_context_switch+0x710/0x710 [ 1136.285544] ? wait_for_completion+0x870/0x870 [ 1136.290139] __should_failslab+0x124/0x180 [ 1136.294387] should_failslab+0x9/0x14 [ 1136.298200] kmem_cache_alloc+0x2af/0x760 [ 1136.302367] getname_flags+0xd0/0x5a0 [ 1136.306182] getname+0x19/0x20 2018/05/26 13:23:36 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0xc00]}, 0x2c) 2018/05/26 13:23:36 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)="766574683100000000ffffffffffef00", 0x22b) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x78440800]}, 0x10) [ 1136.309384] do_sys_open+0x39a/0x740 [ 1136.313113] ? filp_open+0x80/0x80 [ 1136.316661] ? filp_open+0x80/0x80 [ 1136.320220] __x64_sys_open+0x7e/0xc0 [ 1136.324031] do_syscall_64+0x1b1/0x800 [ 1136.327929] ? finish_task_switch+0x1ca/0x840 [ 1136.332440] ? syscall_return_slowpath+0x5c0/0x5c0 [ 1136.337386] ? syscall_return_slowpath+0x30f/0x5c0 [ 1136.342330] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 1136.347704] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1136.352558] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1136.357749] RIP: 0033:0x40fc61 2018/05/26 13:23:36 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0xc00]}, 0x2c) 2018/05/26 13:23:36 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)="766574683100000000ffffffffffef00", 0x22b) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x40020000]}, 0x10) 2018/05/26 13:23:36 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty=0x18, [0x0, 0x0, 0x0, 0x3400000000000000]}, 0x10) [ 1136.360935] RSP: 002b:00007f118944d800 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 1136.368648] RAX: ffffffffffffffda RBX: 00007f118944e6d4 RCX: 000000000040fc61 [ 1136.375918] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 00000000004ba33e [ 1136.383192] RBP: 0000000000406000 R08: 0000000000000000 R09: 0000000048000000 [ 1136.390463] R10: 0000000020000240 R11: 0000000000000293 R12: 0000000000000000 [ 1136.397734] R13: 0000000020000240 R14: 0000000048000000 R15: 0000000000000000 2018/05/26 13:23:36 executing program 7 (fault-call:9 fault-nth:1): r0 = getpid() sched_setattr(r0, &(0x7f00000000c0), 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}}) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) syz_fuse_mount(&(0x7f0000000240)='./control\x00', 0x406000, 0x0, 0x0, 0x0, 0x48000000) close(r1) 2018/05/26 13:23:36 executing program 6: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x900]}, 0x2c) 2018/05/26 13:23:36 executing program 6: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc0030000000000]}, 0x2c) 2018/05/26 13:23:36 executing program 6: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80030000000000]}, 0x2c) [ 1136.535682] FAULT_INJECTION: forcing a failure. [ 1136.535682] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1136.547543] CPU: 0 PID: 596 Comm: syz-executor7 Not tainted 4.17.0-rc6+ #68 [ 1136.554642] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1136.563995] Call Trace: [ 1136.566593] dump_stack+0x1b9/0x294 [ 1136.570236] ? dump_stack_print_info.cold.2+0x52/0x52 [ 1136.575448] should_fail.cold.4+0xa/0x1a [ 1136.579518] ? fault_create_debugfs_attr+0x1f0/0x1f0 2018/05/26 13:23:36 executing program 6: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe0030000000000]}, 0x2c) 2018/05/26 13:23:36 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x38800, 0x0, 0x0, 0x0, 0x0, 0xc00]}, 0x2c) [ 1136.584641] ? debug_check_no_locks_freed+0x310/0x310 [ 1136.589837] ? _parse_integer+0x13b/0x190 [ 1136.593992] ? graph_lock+0x170/0x170 [ 1136.597805] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1136.603347] ? _kstrtoull+0x180/0x230 [ 1136.607159] ? _parse_integer+0x190/0x190 [ 1136.611312] ? graph_lock+0x170/0x170 [ 1136.615121] ? lock_release+0xa10/0xa10 [ 1136.619107] ? check_same_owner+0x320/0x320 [ 1136.623444] ? find_held_lock+0x36/0x1c0 [ 1136.627517] ? graph_lock+0x170/0x170 2018/05/26 13:23:36 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0xd00, 0x0, 0x0, 0x0, 0x0, 0xc00]}, 0x2c) [ 1136.631336] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1136.636883] ? should_fail+0x21b/0xbcd [ 1136.640774] ? lock_downgrade+0x8e0/0x8e0 [ 1136.644932] __alloc_pages_nodemask+0x34e/0xd70 [ 1136.649604] ? find_held_lock+0x36/0x1c0 [ 1136.653678] ? __alloc_pages_slowpath+0x2db0/0x2db0 [ 1136.658705] ? find_held_lock+0x36/0x1c0 [ 1136.662800] ? check_same_owner+0x320/0x320 [ 1136.667130] cache_grow_begin+0x6e/0x6c0 [ 1136.671205] kmem_cache_alloc+0x689/0x760 [ 1136.675369] getname_flags+0xd0/0x5a0 [ 1136.679187] getname+0x19/0x20 [ 1136.682387] do_sys_open+0x39a/0x740 [ 1136.686122] ? filp_open+0x80/0x80 [ 1136.689675] ? filp_open+0x80/0x80 [ 1136.693232] __x64_sys_open+0x7e/0xc0 [ 1136.697043] do_syscall_64+0x1b1/0x800 [ 1136.700935] ? finish_task_switch+0x1ca/0x840 [ 1136.705440] ? syscall_return_slowpath+0x5c0/0x5c0 [ 1136.710375] ? syscall_return_slowpath+0x30f/0x5c0 [ 1136.715317] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 1136.720690] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1136.725541] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1136.730722] RIP: 0033:0x40fc61 [ 1136.733893] RSP: 002b:00007f118944d800 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 1136.741583] RAX: ffffffffffffffda RBX: 00007f118944e6d4 RCX: 000000000040fc61 [ 1136.748831] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 00000000004ba33e [ 1136.756077] RBP: 0000000000406000 R08: 0000000000000000 R09: 0000000048000000 [ 1136.763324] R10: 0000000020000240 R11: 0000000000000293 R12: 0000000000000000 [ 1136.770573] R13: 0000000020000240 R14: 0000000048000000 R15: 0000000000000000 [ 1137.013453] sctp: sctp_transport_update_pmtu: Reported pmtu 72 too low, using default minimum of 512 [ 1137.156562] sctp: sctp_transport_update_pmtu: Reported pmtu 72 too low, using default minimum of 512 2018/05/26 13:23:37 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty=0x18, [0x0, 0x0, 0x0, 0xa00000000000000]}, 0x10) 2018/05/26 13:23:37 executing program 7 (fault-call:9 fault-nth:2): r0 = getpid() sched_setattr(r0, &(0x7f00000000c0), 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}}) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) syz_fuse_mount(&(0x7f0000000240)='./control\x00', 0x406000, 0x0, 0x0, 0x0, 0x48000000) close(r1) 2018/05/26 13:23:37 executing program 6: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000000000]}, 0x2c) 2018/05/26 13:23:37 executing program 4: r0 = getpid() sched_setattr(r0, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x0, 0x4}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000f86000)='./control/file0\x00') syz_fuse_mount(&(0x7f0000000240)='./control\x00', 0x406000, 0x0, 0x0, 0x0, 0x9190100) syz_fuseblk_mount(&(0x7f0000000140)='./control\x00', &(0x7f0000000180)='./control/file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) close(r1) 2018/05/26 13:23:37 executing program 1: r0 = socket$inet(0x2, 0x5, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vcan0\x00', 0x10) sendmsg(r0, &(0x7f0000000480)={&(0x7f0000000140)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000380)="f0", 0x1}], 0x1}, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000a00)={@multicast1=0xe0000001, @local={0xac, 0x14, 0x14, 0xaa}}, 0xc) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000040)="84", 0x1}], 0x1, &(0x7f0000000540)}, 0x0) 2018/05/26 13:23:37 executing program 2: r0 = getpid() sched_setattr(r0, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x0, 0x4}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000f86000)='./control/file0\x00') rmdir(&(0x7f00000000c0)='./control\x00') syz_fuse_mount(&(0x7f0000000240)='./control\x00', 0x406000, 0x0, 0x0, 0x0, 0x3800) syz_fuseblk_mount(&(0x7f0000000140)='./control\x00', &(0x7f0000000180)='./control/file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) close(r1) 2018/05/26 13:23:37 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x3c800, 0x0, 0x0, 0x0, 0x0, 0xc00]}, 0x2c) 2018/05/26 13:23:37 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)="766574683100000000ffffffffffef00", 0x22b) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x7244080000000000]}, 0x10) 2018/05/26 13:23:37 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty=0x18, [0x0, 0x0, 0x0, 0x40000000]}, 0x10) [ 1137.310769] FAULT_INJECTION: forcing a failure. [ 1137.310769] name failslab, interval 1, probability 0, space 0, times 0 [ 1137.322095] CPU: 1 PID: 632 Comm: syz-executor7 Not tainted 4.17.0-rc6+ #68 [ 1137.329200] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1137.338554] Call Trace: [ 1137.341152] dump_stack+0x1b9/0x294 [ 1137.344789] ? dump_stack_print_info.cold.2+0x52/0x52 [ 1137.349995] should_fail.cold.4+0xa/0x1a [ 1137.354069] ? fault_create_debugfs_attr+0x1f0/0x1f0 2018/05/26 13:23:37 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0xb00000000000000, 0x0, 0x0, 0x0, 0x0, 0xc00]}, 0x2c) [ 1137.359179] ? debug_check_no_locks_freed+0x310/0x310 [ 1137.364378] ? print_usage_bug+0xc0/0xc0 [ 1137.368451] ? find_held_lock+0x36/0x1c0 [ 1137.372544] ? check_same_owner+0x320/0x320 [ 1137.376882] ? rcu_note_context_switch+0x710/0x710 [ 1137.381824] __should_failslab+0x124/0x180 [ 1137.386074] should_failslab+0x9/0x14 [ 1137.389886] kmem_cache_alloc+0x2af/0x760 [ 1137.394049] ? debug_check_no_locks_freed+0x310/0x310 [ 1137.399255] get_empty_filp+0x125/0x520 [ 1137.403241] ? proc_nr_files+0x60/0x60 [ 1137.407156] ? lock_downgrade+0x8e0/0x8e0 [ 1137.411313] ? graph_lock+0x170/0x170 [ 1137.415122] ? kasan_check_read+0x11/0x20 [ 1137.419276] ? rcu_is_watching+0x85/0x140 [ 1137.423440] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 1137.428644] path_openat+0x116/0x4e20 [ 1137.432463] ? unwind_get_return_address+0x61/0xa0 [ 1137.437407] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 1137.442434] ? path_lookupat.isra.44+0xbd0/0xbd0 [ 1137.447199] ? find_held_lock+0x36/0x1c0 [ 1137.451277] ? lock_downgrade+0x8e0/0x8e0 [ 1137.455429] ? do_sys_open+0x39a/0x740 [ 1137.459328] ? kasan_check_read+0x11/0x20 [ 1137.463484] ? do_raw_spin_unlock+0x9e/0x2e0 [ 1137.467899] ? do_raw_spin_trylock+0x1b0/0x1b0 [ 1137.472486] ? __lock_is_held+0xb5/0x140 [ 1137.476565] ? _raw_spin_unlock+0x22/0x30 [ 1137.480726] ? __alloc_fd+0x346/0x700 [ 1137.484537] ? usercopy_warn+0x120/0x120 [ 1137.488621] do_filp_open+0x249/0x350 [ 1137.492426] ? may_open_dev+0x100/0x100 [ 1137.496430] ? strncpy_from_user+0x3b6/0x500 [ 1137.500870] ? mpi_free.cold.1+0x19/0x19 [ 1137.504934] ? get_unused_fd_flags+0x121/0x190 [ 1137.509513] ? getname_flags+0xd0/0x5a0 [ 1137.513493] ? getname_flags+0x26e/0x5a0 [ 1137.517565] do_sys_open+0x56f/0x740 [ 1137.520040] net_ratelimit: 10 callbacks suppressed [ 1137.520044] TCP: out of memory -- consider tuning tcp_mem [ 1137.521279] ? filp_open+0x80/0x80 [ 1137.521294] ? filp_open+0x80/0x80 [ 1137.521318] __x64_sys_open+0x7e/0xc0 [ 1137.521336] do_syscall_64+0x1b1/0x800 [ 1137.521352] ? finish_task_switch+0x1ca/0x840 [ 1137.521367] ? syscall_return_slowpath+0x5c0/0x5c0 [ 1137.521384] ? syscall_return_slowpath+0x30f/0x5c0 [ 1137.560852] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 1137.566232] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1137.571081] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1137.576273] RIP: 0033:0x40fc61 [ 1137.579462] RSP: 002b:00007f118944d800 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 1137.587177] RAX: ffffffffffffffda RBX: 00007f118944e6d4 RCX: 000000000040fc61 [ 1137.594440] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 00000000004ba33e [ 1137.601695] RBP: 0000000000406000 R08: 0000000000000000 R09: 0000000048000000 2018/05/26 13:23:37 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)="766574683100000000ffffffffffef00", 0x22b) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x5580]}, 0x10) [ 1137.608946] R10: 0000000020000240 R11: 0000000000000293 R12: 0000000000000000 [ 1137.616206] R13: 0000000020000240 R14: 0000000048000000 R15: 0000000000000000 [ 1138.231419] sctp: sctp_transport_update_pmtu: Reported pmtu 72 too low, using default minimum of 512 [ 1138.376636] sctp: sctp_transport_update_pmtu: Reported pmtu 72 too low, using default minimum of 512 2018/05/26 13:23:38 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty=0x18, [0x0, 0x0, 0x0, 0x11000000]}, 0x10) 2018/05/26 13:23:38 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)="766574683100000000ffffffffffef00", 0x22b) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x84473]}, 0x10) 2018/05/26 13:23:38 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x88030000000000, 0x0, 0x0, 0x0, 0x0, 0xc00]}, 0x2c) 2018/05/26 13:23:38 executing program 7 (fault-call:9 fault-nth:3): r0 = getpid() sched_setattr(r0, &(0x7f00000000c0), 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}}) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) syz_fuse_mount(&(0x7f0000000240)='./control\x00', 0x406000, 0x0, 0x0, 0x0, 0x48000000) close(r1) 2018/05/26 13:23:38 executing program 4: r0 = getpid() sched_setattr(r0, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x0, 0x4}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000f86000)='./control/file0\x00') syz_fuse_mount(&(0x7f0000000240)='./control\x00', 0x406000, 0x0, 0x0, 0x0, 0xfffffff5) syz_fuseblk_mount(&(0x7f0000000140)='./control\x00', &(0x7f0000000180)='./control/file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) close(r1) 2018/05/26 13:23:38 executing program 6: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00000000000000]}, 0x2c) 2018/05/26 13:23:38 executing program 1: r0 = socket$inet(0x2, 0x5, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vcan0\x00', 0x10) sendmsg(r0, &(0x7f0000000480)={&(0x7f0000000140)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000380)="f0", 0x1}], 0x1}, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000a00)={@multicast1=0xe0000001, @local={0xac, 0x14, 0x14, 0xaa}}, 0xc) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000040)="84", 0x1}], 0x1, &(0x7f0000000540)}, 0x0) 2018/05/26 13:23:38 executing program 2: r0 = getpid() sched_setattr(r0, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x0, 0x4}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000f86000)='./control/file0\x00') rmdir(&(0x7f00000000c0)='./control\x00') syz_fuse_mount(&(0x7f0000000240)='./control\x00', 0x406000, 0x0, 0x0, 0x0, 0x3500) syz_fuseblk_mount(&(0x7f0000000140)='./control\x00', &(0x7f0000000180)='./control/file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) close(r1) [ 1138.549305] FAULT_INJECTION: forcing a failure. [ 1138.549305] name failslab, interval 1, probability 0, space 0, times 0 [ 1138.560682] CPU: 1 PID: 671 Comm: syz-executor7 Not tainted 4.17.0-rc6+ #68 [ 1138.567789] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1138.577146] Call Trace: [ 1138.579747] dump_stack+0x1b9/0x294 [ 1138.583391] ? dump_stack_print_info.cold.2+0x52/0x52 [ 1138.588594] ? unwind_get_return_address+0x61/0xa0 [ 1138.593535] ? __save_stack_trace+0x7e/0xd0 [ 1138.597867] should_fail.cold.4+0xa/0x1a [ 1138.601935] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1138.607048] ? save_stack+0x43/0xd0 [ 1138.610677] ? __kasan_slab_free+0x11a/0x170 [ 1138.615088] ? kasan_slab_free+0xe/0x10 [ 1138.619065] ? kmem_cache_free+0x86/0x2d0 [ 1138.623218] ? do_sys_open+0x554/0x740 [ 1138.627110] ? __x64_sys_open+0x7e/0xc0 [ 1138.631092] ? do_syscall_64+0x1b1/0x800 [ 1138.634692] TCP: out of memory -- consider tuning tcp_mem [ 1138.635150] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe 2018/05/26 13:23:38 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty=0x18, [0x0, 0x0, 0x0, 0xe8030000]}, 0x10) 2018/05/26 13:23:38 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0xc00]}, 0x2c) 2018/05/26 13:23:38 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty=0x18, [0x0, 0x0, 0x0, 0xf4010000]}, 0x10) [ 1138.635173] ? find_held_lock+0x36/0x1c0 [ 1138.635210] ? check_same_owner+0x320/0x320 [ 1138.635225] ? rcu_is_watching+0x85/0x140 [ 1138.635238] ? rcu_note_context_switch+0x710/0x710 [ 1138.635255] __should_failslab+0x124/0x180 [ 1138.651892] TCP: out of memory -- consider tuning tcp_mem [ 1138.654492] should_failslab+0x9/0x14 [ 1138.654511] __kmalloc_track_caller+0x2c4/0x760 [ 1138.654532] ? strncpy_from_user+0x500/0x500 [ 1138.654551] ? strndup_user+0x77/0xd0 [ 1138.654569] memdup_user+0x2c/0xa0 [ 1138.654587] strndup_user+0x77/0xd0 [ 1138.697116] ksys_mount+0x3c/0x140 [ 1138.700676] __x64_sys_mount+0xbe/0x150 [ 1138.704661] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 1138.709682] do_syscall_64+0x1b1/0x800 [ 1138.713577] ? finish_task_switch+0x1ca/0x840 [ 1138.718077] ? syscall_return_slowpath+0x5c0/0x5c0 [ 1138.723010] ? syscall_return_slowpath+0x30f/0x5c0 [ 1138.727951] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 1138.733324] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1138.738174] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1138.743360] RIP: 0033:0x455a09 2018/05/26 13:23:38 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)="766574683100000000ffffffffffef00", 0x22b) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x8447b]}, 0x10) 2018/05/26 13:23:38 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty=0x18, [0x0, 0x0, 0x0, 0xffffffffffffffff]}, 0x10) 2018/05/26 13:23:38 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)="766574683100000000ffffffffffef00", 0x22b) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x11]}, 0x10) [ 1138.746544] RSP: 002b:00007f118944d808 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1138.754254] RAX: ffffffffffffffda RBX: 0000000000000016 RCX: 0000000000455a09 [ 1138.761520] RDX: 00000000004c1eb6 RSI: 0000000020000240 RDI: 00000000004de0c5 [ 1138.768787] RBP: 0000000000000000 R08: 00007f118944d820 R09: 0000000000000000 [ 1138.776055] R10: 0000000048000000 R11: 0000000000000246 R12: 0000000000000000 [ 1138.783331] R13: 0000000020000240 R14: 0000000048000000 R15: 0000000000000000 2018/05/26 13:23:39 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x20010000000000, 0x0, 0x0, 0x0, 0x0, 0xc00]}, 0x2c) 2018/05/26 13:23:39 executing program 7 (fault-call:9 fault-nth:4): r0 = getpid() sched_setattr(r0, &(0x7f00000000c0), 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}}) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) syz_fuse_mount(&(0x7f0000000240)='./control\x00', 0x406000, 0x0, 0x0, 0x0, 0x48000000) close(r1) 2018/05/26 13:23:39 executing program 6: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00000000000000]}, 0x2c) [ 1138.873644] TCP: out of memory -- consider tuning tcp_mem [ 1138.933574] FAULT_INJECTION: forcing a failure. [ 1138.933574] name failslab, interval 1, probability 0, space 0, times 0 [ 1138.944900] CPU: 1 PID: 717 Comm: syz-executor7 Not tainted 4.17.0-rc6+ #68 [ 1138.952000] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1138.961354] Call Trace: [ 1138.963955] dump_stack+0x1b9/0x294 [ 1138.967598] ? dump_stack_print_info.cold.2+0x52/0x52 [ 1138.972808] should_fail.cold.4+0xa/0x1a [ 1138.976880] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1138.981994] ? save_stack+0x43/0xd0 [ 1138.985633] ? kasan_kmalloc+0xc4/0xe0 [ 1138.989525] ? __kmalloc_track_caller+0x14a/0x760 [ 1138.994375] ? memdup_user+0x2c/0xa0 [ 1138.998086] ? strndup_user+0x77/0xd0 [ 1139.001870] ? graph_lock+0x170/0x170 [ 1139.005655] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1139.011015] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1139.016387] ? find_held_lock+0x36/0x1c0 [ 1139.020449] ? check_same_owner+0x320/0x320 [ 1139.024753] ? lock_release+0xa10/0xa10 [ 1139.028723] ? rcu_note_context_switch+0x710/0x710 [ 1139.033641] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 1139.038645] ? __check_object_size+0x95/0x5d9 [ 1139.043126] __should_failslab+0x124/0x180 [ 1139.047348] should_failslab+0x9/0x14 [ 1139.051148] __kmalloc_track_caller+0x2c4/0x760 [ 1139.055803] ? strncpy_from_user+0x500/0x500 [ 1139.060195] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1139.065717] ? strndup_user+0x77/0xd0 [ 1139.069518] memdup_user+0x2c/0xa0 [ 1139.073060] strndup_user+0x77/0xd0 [ 1139.076681] ksys_mount+0x73/0x140 [ 1139.080213] __x64_sys_mount+0xbe/0x150 [ 1139.084169] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 1139.089172] do_syscall_64+0x1b1/0x800 [ 1139.093045] ? finish_task_switch+0x1ca/0x840 [ 1139.097535] ? syscall_return_slowpath+0x5c0/0x5c0 [ 1139.102446] ? syscall_return_slowpath+0x30f/0x5c0 [ 1139.107370] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 1139.112726] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1139.117558] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1139.122732] RIP: 0033:0x455a09 [ 1139.125906] RSP: 002b:00007f118944d808 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1139.133607] RAX: ffffffffffffffda RBX: 0000000000000016 RCX: 0000000000455a09 [ 1139.140856] RDX: 00000000004c1eb6 RSI: 0000000020000240 RDI: 00000000004de0c5 [ 1139.148110] RBP: 0000000000000000 R08: 00007f118944d820 R09: 0000000000000000 [ 1139.155370] R10: 0000000048000000 R11: 0000000000000246 R12: 0000000000000000 [ 1139.162625] R13: 0000000020000240 R14: 0000000048000000 R15: 0000000000000000 [ 1139.350645] sctp: sctp_transport_update_pmtu: Reported pmtu 72 too low, using default minimum of 512 [ 1139.493537] sctp: sctp_transport_update_pmtu: Reported pmtu 72 too low, using default minimum of 512 2018/05/26 13:23:39 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)="766574683100000000ffffffffffef00", 0x22b) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x1f00000000000000]}, 0x10) 2018/05/26 13:23:39 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty=0x18, [0x0, 0x0, 0x0, 0x14280000000000]}, 0x10) 2018/05/26 13:23:39 executing program 6: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000]}, 0x2c) 2018/05/26 13:23:39 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0xc00]}, 0x2c) 2018/05/26 13:23:39 executing program 7 (fault-call:9 fault-nth:5): r0 = getpid() sched_setattr(r0, &(0x7f00000000c0), 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}}) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) syz_fuse_mount(&(0x7f0000000240)='./control\x00', 0x406000, 0x0, 0x0, 0x0, 0x48000000) close(r1) 2018/05/26 13:23:39 executing program 4: r0 = getpid() sched_setattr(r0, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x0, 0x4}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000f86000)='./control/file0\x00') syz_fuse_mount(&(0x7f0000000240)='./control\x00', 0x406000, 0x0, 0x0, 0x0, 0x38) syz_fuseblk_mount(&(0x7f0000000140)='./control\x00', &(0x7f0000000180)='./control/file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) close(r1) 2018/05/26 13:23:39 executing program 1: r0 = socket$inet(0x2, 0x5, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vcan0\x00', 0x10) sendmsg(r0, &(0x7f0000000480)={&(0x7f0000000140)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000380)="f0", 0x1}], 0x1}, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000a00)={@multicast1=0xe0000001, @local={0xac, 0x14, 0x14, 0xaa}}, 0xc) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000040)="84", 0x1}], 0x1, &(0x7f0000000540)}, 0x0) 2018/05/26 13:23:39 executing program 2: r0 = getpid() sched_setattr(r0, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x0, 0x4}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000f86000)='./control/file0\x00') rmdir(&(0x7f00000000c0)='./control\x00') syz_fuse_mount(&(0x7f0000000240)='./control\x00', 0x406000, 0x0, 0x0, 0x0, 0x118d2) syz_fuseblk_mount(&(0x7f0000000140)='./control\x00', &(0x7f0000000180)='./control/file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) close(r1) [ 1139.659431] FAULT_INJECTION: forcing a failure. [ 1139.659431] name failslab, interval 1, probability 0, space 0, times 0 [ 1139.670779] CPU: 0 PID: 743 Comm: syz-executor7 Not tainted 4.17.0-rc6+ #68 [ 1139.675453] TCP: out of memory -- consider tuning tcp_mem [ 1139.677874] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1139.677880] Call Trace: [ 1139.677903] dump_stack+0x1b9/0x294 [ 1139.677922] ? dump_stack_print_info.cold.2+0x52/0x52 [ 1139.677947] should_fail.cold.4+0xa/0x1a 2018/05/26 13:23:39 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)="766574683100000000ffffffffffef00", 0x22b) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x7744080000000000]}, 0x10) [ 1139.683935] TCP: out of memory -- consider tuning tcp_mem [ 1139.692817] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1139.692838] ? kasan_kmalloc+0xc4/0xe0 [ 1139.692854] ? __kmalloc_track_caller+0x14a/0x760 [ 1139.692869] ? memdup_user+0x2c/0xa0 [ 1139.692885] ? strndup_user+0x77/0xd0 [ 1139.735100] ? graph_lock+0x170/0x170 [ 1139.738912] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1139.744289] ? find_held_lock+0x36/0x1c0 [ 1139.748379] ? check_same_owner+0x320/0x320 [ 1139.752707] ? lock_release+0xa10/0xa10 2018/05/26 13:23:39 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xc00]}, 0x2c) [ 1139.756688] ? check_same_owner+0x320/0x320 [ 1139.761019] ? rcu_note_context_switch+0x710/0x710 [ 1139.765958] ? __check_object_size+0x95/0x5d9 [ 1139.770459] __should_failslab+0x124/0x180 [ 1139.774704] should_failslab+0x9/0x14 [ 1139.778513] kmem_cache_alloc_trace+0x2cb/0x780 [ 1139.779810] TCP: out of memory -- consider tuning tcp_mem [ 1139.783191] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1139.783210] ? _copy_from_user+0xdf/0x150 [ 1139.783230] copy_mount_options+0x5f/0x380 [ 1139.783250] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 2018/05/26 13:23:40 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)="766574683100000000ffffffffffef00", 0x22b) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x4]}, 0x10) 2018/05/26 13:23:40 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x3e800, 0x0, 0x0, 0x0, 0x0, 0xc00]}, 0x2c) [ 1139.783264] ksys_mount+0xd0/0x140 [ 1139.783280] __x64_sys_mount+0xbe/0x150 [ 1139.801424] TCP: out of memory -- consider tuning tcp_mem [ 1139.802685] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 1139.802705] do_syscall_64+0x1b1/0x800 [ 1139.802721] ? finish_task_switch+0x1ca/0x840 [ 1139.802739] ? syscall_return_slowpath+0x5c0/0x5c0 [ 1139.802755] ? syscall_return_slowpath+0x30f/0x5c0 [ 1139.802775] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 1139.849833] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1139.854686] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1139.859880] RIP: 0033:0x455a09 [ 1139.863070] RSP: 002b:00007f118944d808 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1139.870781] RAX: ffffffffffffffda RBX: 0000000000000016 RCX: 0000000000455a09 [ 1139.878052] RDX: 00000000004c1eb6 RSI: 0000000020000240 RDI: 00000000004de0c5 [ 1139.885317] RBP: 0000000000000000 R08: 00007f118944d820 R09: 0000000000000000 [ 1139.885464] TCP: out of memory -- consider tuning tcp_mem [ 1139.892579] R10: 0000000048000000 R11: 0000000000000246 R12: 0000000000000000 2018/05/26 13:23:40 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)="766574683100000000ffffffffffef00", 0x22b) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x4002000000000000]}, 0x10) 2018/05/26 13:23:40 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0xc00]}, 0x2c) 2018/05/26 13:23:40 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty=0x18, [0x0, 0x0, 0x0, 0x700000000000000]}, 0x10) [ 1139.892588] R13: 0000000020000240 R14: 0000000048000000 R15: 0000000000000000 [ 1139.892700] TCP: out of memory -- consider tuning tcp_mem 2018/05/26 13:23:40 executing program 7 (fault-call:9 fault-nth:6): r0 = getpid() sched_setattr(r0, &(0x7f00000000c0), 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}}) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) syz_fuse_mount(&(0x7f0000000240)='./control\x00', 0x406000, 0x0, 0x0, 0x0, 0x48000000) close(r1) 2018/05/26 13:23:40 executing program 6: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600300]}, 0x2c) 2018/05/26 13:23:40 executing program 6: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000]}, 0x2c) [ 1140.084017] FAULT_INJECTION: forcing a failure. [ 1140.084017] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1140.095881] CPU: 0 PID: 774 Comm: syz-executor7 Not tainted 4.17.0-rc6+ #68 [ 1140.102982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1140.112329] Call Trace: [ 1140.114924] dump_stack+0x1b9/0x294 [ 1140.118563] ? dump_stack_print_info.cold.2+0x52/0x52 [ 1140.123759] ? find_held_lock+0x36/0x1c0 [ 1140.127834] should_fail.cold.4+0xa/0x1a 2018/05/26 13:23:40 executing program 6: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa]}, 0x2c) [ 1140.131905] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1140.137025] ? debug_check_no_locks_freed+0x310/0x310 [ 1140.142229] ? debug_check_no_locks_freed+0x310/0x310 [ 1140.147433] ? is_bpf_text_address+0xd7/0x170 [ 1140.151943] ? kernel_text_address+0x79/0xf0 [ 1140.156360] ? __unwind_start+0x166/0x330 [ 1140.160513] ? __kernel_text_address+0xd/0x40 [ 1140.165013] ? unwind_get_return_address+0x61/0xa0 [ 1140.169958] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1140.175504] ? should_fail+0x21b/0xbcd [ 1140.179412] __alloc_pages_nodemask+0x34e/0xd70 2018/05/26 13:23:40 executing program 6: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000]}, 0x2c) [ 1140.184104] ? memdup_user+0x2c/0xa0 [ 1140.187854] ? strndup_user+0x77/0xd0 [ 1140.191674] ? __alloc_pages_slowpath+0x2db0/0x2db0 [ 1140.196707] ? find_held_lock+0x36/0x1c0 [ 1140.200796] ? check_same_owner+0x320/0x320 [ 1140.205120] ? lock_release+0xa10/0xa10 [ 1140.209101] ? check_same_owner+0x320/0x320 [ 1140.213429] cache_grow_begin+0x6e/0x6c0 [ 1140.217508] kmem_cache_alloc_trace+0x6a5/0x780 [ 1140.222188] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1140.227741] copy_mount_options+0x5f/0x380 2018/05/26 13:23:40 executing program 6: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5303000000000000]}, 0x2c) [ 1140.231987] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1140.237535] ksys_mount+0xd0/0x140 [ 1140.241090] __x64_sys_mount+0xbe/0x150 [ 1140.245067] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 1140.250092] do_syscall_64+0x1b1/0x800 [ 1140.253989] ? finish_task_switch+0x1ca/0x840 [ 1140.258497] ? syscall_return_slowpath+0x5c0/0x5c0 [ 1140.263434] ? syscall_return_slowpath+0x30f/0x5c0 [ 1140.268377] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 1140.273756] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1140.278610] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1140.283802] RIP: 0033:0x455a09 [ 1140.286989] RSP: 002b:00007f118944d808 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1140.294699] RAX: ffffffffffffffda RBX: 0000000000000016 RCX: 0000000000455a09 [ 1140.301967] RDX: 00000000004c1eb6 RSI: 0000000020000240 RDI: 00000000004de0c5 [ 1140.309231] RBP: 0000000000000000 R08: 00007f118944d820 R09: 0000000000000000 [ 1140.316503] R10: 0000000048000000 R11: 0000000000000246 R12: 0000000000000000 [ 1140.323773] R13: 0000000020000240 R14: 0000000048000000 R15: 0000000000000000 [ 1140.463065] sctp: sctp_transport_update_pmtu: Reported pmtu 72 too low, using default minimum of 512 [ 1140.605551] sctp: sctp_transport_update_pmtu: Reported pmtu 72 too low, using default minimum of 512 2018/05/26 13:23:40 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)="766574683100000000ffffffffffef00", 0x22b) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x73440800]}, 0x10) 2018/05/26 13:23:40 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty=0x18, [0x0, 0x0, 0x0, 0x1100]}, 0x10) 2018/05/26 13:23:40 executing program 7 (fault-call:9 fault-nth:7): r0 = getpid() sched_setattr(r0, &(0x7f00000000c0), 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}}) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) syz_fuse_mount(&(0x7f0000000240)='./control\x00', 0x406000, 0x0, 0x0, 0x0, 0x48000000) close(r1) 2018/05/26 13:23:40 executing program 4: r0 = getpid() sched_setattr(r0, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x0, 0x4}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000f86000)='./control/file0\x00') syz_fuse_mount(&(0x7f0000000240)='./control\x00', 0x406000, 0x0, 0x0, 0x0, 0x3800) syz_fuseblk_mount(&(0x7f0000000140)='./control\x00', &(0x7f0000000180)='./control/file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) close(r1) 2018/05/26 13:23:40 executing program 1: r0 = socket$inet(0x2, 0x5, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vcan0\x00', 0x10) sendmsg(r0, &(0x7f0000000480)={&(0x7f0000000140)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000380)="f0", 0x1}], 0x1}, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000a00)={@multicast1=0xe0000001, @local={0xac, 0x14, 0x14, 0xaa}}, 0xc) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000040)="84", 0x1}], 0x1, &(0x7f0000000540)}, 0x0) 2018/05/26 13:23:40 executing program 2: r0 = getpid() sched_setattr(r0, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x0, 0x4}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x8800, 0x0) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000100)=0xffffffffffffff00, 0x4) r2 = userfaultfd(0x80000) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r3, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x8, @time, {0x80000000}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000f86000)='./control/file0\x00') rmdir(&(0x7f00000000c0)='./control\x00') syz_fuse_mount(&(0x7f0000000240)='./control\x00', 0x406000, 0x0, 0x0, 0x0, 0x0) r4 = syz_fuseblk_mount(&(0x7f0000000140)='./control\x00', &(0x7f0000000040)='./control/file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) fcntl$setpipe(r4, 0x407, 0x81) close(r2) 2018/05/26 13:23:40 executing program 6: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe000000]}, 0x2c) 2018/05/26 13:23:40 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0xc00]}, 0x2c) [ 1140.780189] FAULT_INJECTION: forcing a failure. [ 1140.780189] name failslab, interval 1, probability 0, space 0, times 0 [ 1140.791521] CPU: 0 PID: 819 Comm: syz-executor7 Not tainted 4.17.0-rc6+ #68 [ 1140.798628] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1140.807983] Call Trace: [ 1140.810583] dump_stack+0x1b9/0x294 [ 1140.814224] ? dump_stack_print_info.cold.2+0x52/0x52 [ 1140.819431] should_fail.cold.4+0xa/0x1a [ 1140.823502] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1140.828615] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 1140.833822] ? is_bpf_text_address+0xd7/0x170 [ 1140.838327] ? find_held_lock+0x36/0x1c0 [ 1140.842412] ? check_same_owner+0x320/0x320 [ 1140.846739] ? kasan_slab_free+0xe/0x10 [ 1140.850718] ? kmem_cache_free+0x86/0x2d0 [ 1140.854870] ? putname+0xf2/0x130 [ 1140.858336] ? rcu_note_context_switch+0x710/0x710 [ 1140.863262] ? ksys_mount+0x12d/0x140 [ 1140.867052] ? __x64_sys_mount+0xbe/0x150 [ 1140.871193] ? do_syscall_64+0x1b1/0x800 [ 1140.875246] __should_failslab+0x124/0x180 [ 1140.879464] should_failslab+0x9/0x14 [ 1140.883251] kmem_cache_alloc+0x2af/0x760 [ 1140.887384] ? kasan_check_write+0x14/0x20 [ 1140.891601] ? do_raw_spin_lock+0xc1/0x200 [ 1140.895827] alloc_vfsmnt+0xe0/0x9d0 [ 1140.899537] ? mnt_free_id.isra.27+0x60/0x60 [ 1140.903939] ? kasan_check_read+0x11/0x20 [ 1140.908069] ? graph_lock+0x170/0x170 [ 1140.911857] ? rcu_pm_notify+0xc0/0xc0 [ 1140.915733] ? trace_hardirqs_off+0xd/0x10 [ 1140.919957] ? putname+0xf2/0x130 [ 1140.923407] ? putname+0xf2/0x130 [ 1140.926862] ? find_held_lock+0x36/0x1c0 [ 1140.930909] ? lock_downgrade+0x8e0/0x8e0 [ 1140.935049] ? module_unload_free+0x5b0/0x5b0 [ 1140.939526] ? lock_release+0xa10/0xa10 [ 1140.943489] ? mpi_free.cold.1+0x19/0x19 [ 1140.947532] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1140.953066] vfs_kern_mount.part.34+0x88/0x4d0 [ 1140.957654] ? may_umount+0xb0/0xb0 [ 1140.961270] ? _raw_read_unlock+0x22/0x30 [ 1140.965406] ? __get_fs_type+0x97/0xc0 [ 1140.969281] do_mount+0x564/0x3070 [ 1140.972805] ? interrupt_entry+0xb1/0xf0 [ 1140.976848] ? copy_mount_string+0x40/0x40 [ 1140.981070] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1140.985819] ? retint_kernel+0x10/0x10 [ 1140.989703] ? copy_mount_options+0x213/0x380 [ 1140.994203] ? write_comp_data+0x6d/0x70 [ 1140.998259] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1141.003776] ? copy_mount_options+0x285/0x380 [ 1141.008254] ksys_mount+0x12d/0x140 [ 1141.011878] __x64_sys_mount+0xbe/0x150 [ 1141.015851] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 1141.020859] do_syscall_64+0x1b1/0x800 [ 1141.024738] ? finish_task_switch+0x1ca/0x840 [ 1141.029216] ? syscall_return_slowpath+0x5c0/0x5c0 [ 1141.034128] ? syscall_return_slowpath+0x30f/0x5c0 [ 1141.039043] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 1141.044392] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1141.049219] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1141.054389] RIP: 0033:0x455a09 [ 1141.057557] RSP: 002b:00007f118944d808 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1141.065245] RAX: ffffffffffffffda RBX: 0000000000000016 RCX: 0000000000455a09 [ 1141.072495] RDX: 00000000004c1eb6 RSI: 0000000020000240 RDI: 00000000004de0c5 [ 1141.079753] RBP: 0000000000000000 R08: 00007f118944d820 R09: 0000000000000000 [ 1141.087013] R10: 0000000048000000 R11: 0000000000000246 R12: 0000000000000000 [ 1141.094270] R13: 0000000020000240 R14: 0000000048000000 R15: 0000000000000000 [ 1141.579425] sctp: sctp_transport_update_pmtu: Reported pmtu 72 too low, using default minimum of 512 [ 1141.724547] sctp: sctp_transport_update_pmtu: Reported pmtu 72 too low, using default minimum of 512 2018/05/26 13:23:42 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0xe0, 0x0, 0x0, 0x0, 0x0, 0xc00]}, 0x2c) 2018/05/26 13:23:42 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)="766574683100000000ffffffffffef00", 0x22b) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0xa000000]}, 0x10) 2018/05/26 13:23:42 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty=0x18, [0x0, 0x0, 0x0, 0x2]}, 0x10) 2018/05/26 13:23:42 executing program 7 (fault-call:9 fault-nth:8): r0 = getpid() sched_setattr(r0, &(0x7f00000000c0), 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}}) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) syz_fuse_mount(&(0x7f0000000240)='./control\x00', 0x406000, 0x0, 0x0, 0x0, 0x48000000) close(r1) 2018/05/26 13:23:42 executing program 6: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600]}, 0x2c) 2018/05/26 13:23:42 executing program 4: r0 = getpid() sched_setattr(r0, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x0, 0x4}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000f86000)='./control/file0\x00') syz_fuse_mount(&(0x7f0000000240)='./control\x00', 0x406000, 0x0, 0x0, 0x0, 0x4800000000000000) syz_fuseblk_mount(&(0x7f0000000140)='./control\x00', &(0x7f0000000180)='./control/file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) close(r1) 2018/05/26 13:23:42 executing program 1: r0 = socket$inet(0x2, 0x5, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vcan0\x00', 0x10) sendmsg(r0, &(0x7f0000000480)={&(0x7f0000000140)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000380)="f0", 0x1}], 0x1}, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000a00)={@multicast1=0xe0000001, @local={0xac, 0x14, 0x14, 0xaa}}, 0xc) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000040)="84", 0x1}], 0x1, &(0x7f0000000540)}, 0x0) 2018/05/26 13:23:42 executing program 2: r0 = getpid() sched_setattr(r0, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x0, 0x4}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) getpeername$packet(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000000100)=0x14) sendto$packet(r2, &(0x7f00000003c0)="8829dd7d4cdad0e7cd57b8dd46ffbd1627c90b6dd5db34fbe60629e0c8665e336b82c13bc5eacea8022e4c9fb5dacdd44e504813cfc797bf4609f230f9d7638f418c2413d733919c07959b6c4cf5fa4558719a68893a6290a609133bbc16966ae70e17ab38b996fe207ca5b731bebbed5a5f34a0aa5fe30d759c5a3c221edd019324cae2cc4e172a8e89d83d9dec2768915c2b94a2356d45292569b3ebdfe8d7b0d851d34d4a25f6e9b0fe1bebd685ad2de971afec5ef8d34a592e54ae505d38a777c768b829682a597048cee230857e6a1a3083a2a14b55615c98a91345688588f4ae4887ddb8e1f90d880c1d4ba67b84f09bbb678f390733", 0xf9, 0x810, &(0x7f00000001c0)={0x11, 0xf7, r3, 0x1, 0xfffffffffffffffb, 0x6, @random="092828d55ead"}, 0x14) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000f86000)='./control/file0\x00') rmdir(&(0x7f00000000c0)='./control\x00') syz_fuse_mount(&(0x7f0000000240)='./control\x00', 0x406000, 0x0, 0x0, 0x0, 0x0) syz_fuseblk_mount(&(0x7f0000000140)='./control\x00', &(0x7f0000000180)='./control/file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000580)=@assoc_value={0x0, 0xcba9}, &(0x7f00000005c0)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000600)={0x0, 0x6, 0x8000, 0x10000000000, 0x0, 0x8, 0x4, 0x80000001, r4}, &(0x7f0000000640)=0x20) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r2, 0xc1105518, &(0x7f0000000280)={{0x0, 0x7, 0x0, 0x5, "180100cb9ca7e450a6845640b112fb681627b7ab0f9b2bc3b98eab0d66b3886e42b5429d722e7aa74312f536", 0x8}, 0x0, 0x0, 0x3ff, r0, 0xc88, 0x8, "3f8beee1810df00ee13e64d64248cd097d75d2deea7e6cc3e39eb46ada6b646a74967355ecad00884d1e27018ed09cbb5fa9b4278ebbb473e66a75dbeb112252", &(0x7f0000000040)='*em1.security/usercpusetGPL.-\x00', 0x1e, [], [0x32c4, 0x6, 0x101, 0x7fffffff]}) getsockopt$IP_VS_SO_GET_DESTS(r2, 0x0, 0x484, &(0x7f00000004c0)=""/156, &(0x7f0000000200)=0x9c) close(r1) [ 1141.888172] FAULT_INJECTION: forcing a failure. [ 1141.888172] name failslab, interval 1, probability 0, space 0, times 0 [ 1141.899484] CPU: 0 PID: 854 Comm: syz-executor7 Not tainted 4.17.0-rc6+ #68 [ 1141.906592] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1141.915950] Call Trace: [ 1141.918549] dump_stack+0x1b9/0x294 [ 1141.922193] ? dump_stack_print_info.cold.2+0x52/0x52 [ 1141.927396] should_fail.cold.4+0xa/0x1a [ 1141.931466] ? fault_create_debugfs_attr+0x1f0/0x1f0 2018/05/26 13:23:42 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)="766574683100000000ffffffffffef00", 0x22b) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x7b440800]}, 0x10) 2018/05/26 13:23:42 executing program 6: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00]}, 0x2c) [ 1141.936577] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 1141.941774] ? is_bpf_text_address+0xd7/0x170 [ 1141.946279] ? find_held_lock+0x36/0x1c0 [ 1141.950367] ? check_same_owner+0x320/0x320 [ 1141.954698] ? kasan_slab_free+0xe/0x10 [ 1141.958685] ? kmem_cache_free+0x86/0x2d0 [ 1141.962844] ? putname+0xf2/0x130 [ 1141.966309] ? rcu_note_context_switch+0x710/0x710 [ 1141.971244] ? ksys_mount+0x12d/0x140 [ 1141.975055] ? __x64_sys_mount+0xbe/0x150 [ 1141.979214] ? do_syscall_64+0x1b1/0x800 [ 1141.983282] __should_failslab+0x124/0x180 2018/05/26 13:23:42 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)="766574683100000000ffffffffffef00", 0x22b) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x84483]}, 0x10) [ 1141.987530] should_failslab+0x9/0x14 [ 1141.991342] kmem_cache_alloc+0x2af/0x760 [ 1141.995498] ? kasan_check_write+0x14/0x20 [ 1141.999740] ? do_raw_spin_lock+0xc1/0x200 [ 1142.003983] alloc_vfsmnt+0xe0/0x9d0 [ 1142.007711] ? mnt_free_id.isra.27+0x60/0x60 [ 1142.012129] ? kasan_check_read+0x11/0x20 [ 1142.016282] ? graph_lock+0x170/0x170 [ 1142.020091] ? rcu_pm_notify+0xc0/0xc0 [ 1142.023984] ? trace_hardirqs_off+0xd/0x10 [ 1142.028232] ? putname+0xf2/0x130 [ 1142.031693] ? putname+0xf2/0x130 [ 1142.035158] ? find_held_lock+0x36/0x1c0 [ 1142.039235] ? lock_downgrade+0x8e0/0x8e0 [ 1142.043398] ? module_unload_free+0x5b0/0x5b0 [ 1142.047908] ? lock_release+0xa10/0xa10 [ 1142.051896] ? mpi_free.cold.1+0x19/0x19 [ 1142.055968] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1142.061519] vfs_kern_mount.part.34+0x88/0x4d0 [ 1142.066111] ? may_umount+0xb0/0xb0 [ 1142.069741] ? _raw_read_unlock+0x22/0x30 [ 1142.073890] ? __get_fs_type+0x97/0xc0 [ 1142.077787] do_mount+0x564/0x3070 [ 1142.081338] ? copy_mount_string+0x40/0x40 2018/05/26 13:23:42 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)="766574683100000000ffffffffffef00", 0x22b) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x8244080000000000]}, 0x10) 2018/05/26 13:23:42 executing program 6: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x900000000000000]}, 0x2c) [ 1142.085575] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 1142.090595] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1142.095357] ? retint_kernel+0x10/0x10 [ 1142.099254] ? copy_mount_options+0x1f0/0x380 [ 1142.103752] ? copy_mount_options+0x1fa/0x380 [ 1142.108255] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1142.113795] ? copy_mount_options+0x285/0x380 [ 1142.118298] ksys_mount+0x12d/0x140 [ 1142.121937] __x64_sys_mount+0xbe/0x150 [ 1142.125917] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 1142.130946] do_syscall_64+0x1b1/0x800 [ 1142.134844] ? finish_task_switch+0x1ca/0x840 2018/05/26 13:23:42 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)="766574683100000000ffffffffffef00", 0x22b) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0xffffffff00000000]}, 0x10) [ 1142.139345] ? syscall_return_slowpath+0x5c0/0x5c0 [ 1142.144282] ? syscall_return_slowpath+0x30f/0x5c0 [ 1142.149226] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 1142.154600] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1142.159450] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1142.164640] RIP: 0033:0x455a09 [ 1142.167822] RSP: 002b:00007f118944d808 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1142.175525] RAX: ffffffffffffffda RBX: 0000000000000016 RCX: 0000000000455a09 2018/05/26 13:23:42 executing program 6: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600000000000000]}, 0x2c) [ 1142.182794] RDX: 00000000004c1eb6 RSI: 0000000020000240 RDI: 00000000004de0c5 [ 1142.190063] RBP: 0000000000000000 R08: 00007f118944d820 R09: 0000000000000000 [ 1142.197336] R10: 0000000048000000 R11: 0000000000000246 R12: 0000000000000000 [ 1142.204606] R13: 0000000020000240 R14: 0000000048000000 R15: 0000000000000000 2018/05/26 13:23:42 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty=0x18, [0x0, 0x0, 0x0, 0x34]}, 0x10) 2018/05/26 13:23:42 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0xc00]}, 0x2c) 2018/05/26 13:23:42 executing program 7 (fault-call:9 fault-nth:9): r0 = getpid() sched_setattr(r0, &(0x7f00000000c0), 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}}) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) syz_fuse_mount(&(0x7f0000000240)='./control\x00', 0x406000, 0x0, 0x0, 0x0, 0x48000000) close(r1) 2018/05/26 13:23:42 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)="766574683100000000ffffffffffef00", 0x22b) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x8944080000000000]}, 0x10) [ 1142.382283] FAULT_INJECTION: forcing a failure. [ 1142.382283] name failslab, interval 1, probability 0, space 0, times 0 [ 1142.393586] CPU: 0 PID: 889 Comm: syz-executor7 Not tainted 4.17.0-rc6+ #68 [ 1142.400689] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1142.410044] Call Trace: [ 1142.412646] dump_stack+0x1b9/0x294 [ 1142.416292] ? dump_stack_print_info.cold.2+0x52/0x52 [ 1142.421495] ? kernel_text_address+0x79/0xf0 [ 1142.425917] ? __unwind_start+0x166/0x330 [ 1142.430071] ? __kernel_text_address+0xd/0x40 [ 1142.434574] should_fail.cold.4+0xa/0x1a [ 1142.438651] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1142.443774] ? save_stack+0x43/0xd0 [ 1142.447413] ? kasan_kmalloc+0xc4/0xe0 [ 1142.451313] ? kasan_slab_alloc+0x12/0x20 [ 1142.455465] ? kmem_cache_alloc+0x12e/0x760 [ 1142.459790] ? alloc_vfsmnt+0xe0/0x9d0 [ 1142.463687] ? vfs_kern_mount.part.34+0x88/0x4d0 [ 1142.468454] ? find_held_lock+0x36/0x1c0 [ 1142.472526] ? check_same_owner+0x320/0x320 [ 1142.476853] ? rcu_note_context_switch+0x710/0x710 [ 1142.481793] __should_failslab+0x124/0x180 [ 1142.486038] should_failslab+0x9/0x14 [ 1142.489850] __kmalloc_track_caller+0x2c4/0x760 [ 1142.494527] ? kasan_check_read+0x11/0x20 [ 1142.498685] ? do_raw_spin_unlock+0x9e/0x2e0 [ 1142.503098] ? kstrdup_const+0x66/0x80 [ 1142.506977] kstrdup+0x39/0x70 [ 1142.510156] kstrdup_const+0x66/0x80 [ 1142.513856] alloc_vfsmnt+0x1b3/0x9d0 [ 1142.517650] ? mnt_free_id.isra.27+0x60/0x60 [ 1142.522063] ? kasan_check_read+0x11/0x20 [ 1142.526196] ? graph_lock+0x170/0x170 [ 1142.529984] ? rcu_pm_notify+0xc0/0xc0 [ 1142.533855] ? trace_hardirqs_off+0xd/0x10 [ 1142.538090] ? putname+0xf2/0x130 [ 1142.541528] ? putname+0xf2/0x130 [ 1142.544968] ? find_held_lock+0x36/0x1c0 [ 1142.549039] ? lock_downgrade+0x8e0/0x8e0 [ 1142.553185] ? module_unload_free+0x5b0/0x5b0 [ 1142.557660] ? lock_release+0xa10/0xa10 [ 1142.561619] ? mpi_free.cold.1+0x19/0x19 [ 1142.565676] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1142.571201] vfs_kern_mount.part.34+0x88/0x4d0 [ 1142.575765] ? may_umount+0xb0/0xb0 [ 1142.579371] ? _raw_read_unlock+0x22/0x30 [ 1142.583501] ? __get_fs_type+0x97/0xc0 [ 1142.587381] do_mount+0x564/0x3070 [ 1142.590914] ? copy_mount_string+0x40/0x40 [ 1142.595138] ? rcu_pm_notify+0xc0/0xc0 [ 1142.599029] ? copy_mount_options+0x5f/0x380 [ 1142.603428] ? rcu_read_lock_sched_held+0x108/0x120 [ 1142.608433] ? kmem_cache_alloc_trace+0x616/0x780 [ 1142.613273] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1142.618802] ? _copy_from_user+0xdf/0x150 [ 1142.622944] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1142.628468] ? copy_mount_options+0x285/0x380 [ 1142.632966] ksys_mount+0x12d/0x140 [ 1142.636581] __x64_sys_mount+0xbe/0x150 [ 1142.640537] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 1142.645548] do_syscall_64+0x1b1/0x800 [ 1142.649434] ? finish_task_switch+0x1ca/0x840 [ 1142.653919] ? syscall_return_slowpath+0x5c0/0x5c0 [ 1142.658832] ? syscall_return_slowpath+0x30f/0x5c0 [ 1142.663761] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 1142.669117] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1142.673975] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1142.679144] RIP: 0033:0x455a09 [ 1142.682322] RSP: 002b:00007f118944d808 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1142.690035] RAX: ffffffffffffffda RBX: 0000000000000016 RCX: 0000000000455a09 [ 1142.697297] RDX: 00000000004c1eb6 RSI: 0000000020000240 RDI: 00000000004de0c5 [ 1142.704548] RBP: 0000000000000000 R08: 00007f118944d820 R09: 0000000000000000 [ 1142.710122] sctp: sctp_transport_update_pmtu: Reported pmtu 72 too low, using default minimum of 512 [ 1142.711803] R10: 0000000048000000 R11: 0000000000000246 R12: 0000000000000000 [ 1142.711813] R13: 0000000020000240 R14: 0000000048000000 R15: 0000000000000000 [ 1142.872719] sctp: sctp_transport_update_pmtu: Reported pmtu 72 too low, using default minimum of 512 2018/05/26 13:23:43 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty=0x18, [0x0, 0x0, 0x0, 0x8055000000000000]}, 0x10) 2018/05/26 13:23:43 executing program 6: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000]}, 0x2c) 2018/05/26 13:23:43 executing program 7 (fault-call:9 fault-nth:10): r0 = getpid() sched_setattr(r0, &(0x7f00000000c0), 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}}) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) syz_fuse_mount(&(0x7f0000000240)='./control\x00', 0x406000, 0x0, 0x0, 0x0, 0x48000000) close(r1) 2018/05/26 13:23:43 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0xc00]}, 0x2c) 2018/05/26 13:23:43 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)="766574683100000000ffffffffffef00", 0x22b) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x100000000000000]}, 0x10) 2018/05/26 13:23:43 executing program 1: r0 = socket$inet(0x2, 0x5, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vcan0\x00', 0x10) sendmsg(r0, &(0x7f0000000480)={&(0x7f0000000140)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000380)="f0", 0x1}], 0x1}, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000a00)={@multicast1=0xe0000001, @local={0xac, 0x14, 0x14, 0xaa}}, 0xc) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000040)="84", 0x1}], 0x1, &(0x7f0000000540)}, 0x0) 2018/05/26 13:23:43 executing program 4: r0 = getpid() sched_setattr(r0, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x0, 0x4}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000f86000)='./control/file0\x00') syz_fuse_mount(&(0x7f0000000240)='./control\x00', 0x406000, 0x0, 0x0, 0x0, 0x74) syz_fuseblk_mount(&(0x7f0000000140)='./control\x00', &(0x7f0000000180)='./control/file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) close(r1) 2018/05/26 13:23:43 executing program 2: r0 = getpid() sched_setattr(r0, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x0, 0x4}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000f86000)='./control/file0\x00') rmdir(&(0x7f00000000c0)='./control\x00') syz_fuse_mount(&(0x7f0000000240)='./control\x00', 0x406000, 0x0, 0x0, 0x0, 0x0) syz_fuseblk_mount(&(0x7f0000000140)='./control\x00', &(0x7f0000000180)='./control/file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) close(r1) setsockopt$IP_VS_SO_SET_DEL(r2, 0x0, 0x484, &(0x7f0000000040)={0x0, @rand_addr=0x3, 0x4e24, 0x0, 'none\x00', 0x8, 0x8979, 0x54}, 0x2c) [ 1143.037204] FAULT_INJECTION: forcing a failure. [ 1143.037204] name failslab, interval 1, probability 0, space 0, times 0 [ 1143.049057] CPU: 1 PID: 926 Comm: syz-executor7 Not tainted 4.17.0-rc6+ #68 [ 1143.056173] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1143.065525] Call Trace: [ 1143.068117] dump_stack+0x1b9/0x294 [ 1143.071754] ? dump_stack_print_info.cold.2+0x52/0x52 [ 1143.076964] should_fail.cold.4+0xa/0x1a [ 1143.081038] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1143.086146] ? graph_lock+0x170/0x170 [ 1143.089957] ? wait_for_completion+0x870/0x870 [ 1143.094548] ? graph_lock+0x170/0x170 [ 1143.098356] ? find_next_zero_bit+0x111/0x140 [ 1143.102863] ? find_held_lock+0x36/0x1c0 [ 1143.106934] ? __lock_is_held+0xb5/0x140 [ 1143.111015] ? check_same_owner+0x320/0x320 [ 1143.115344] ? __might_sleep+0x95/0x190 [ 1143.119331] ? rcu_note_context_switch+0x710/0x710 [ 1143.124269] __should_failslab+0x124/0x180 [ 1143.128516] should_failslab+0x9/0x14 [ 1143.132325] __kmalloc+0x2c8/0x760 [ 1143.135892] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 1143.140917] ? __lockdep_init_map+0x105/0x590 [ 1143.145424] ? __list_lru_init+0xdd/0x790 [ 1143.149580] __list_lru_init+0xdd/0x790 [ 1143.153566] ? list_lru_destroy+0x4c0/0x4c0 [ 1143.157900] ? mark_held_locks+0xc9/0x160 [ 1143.162062] ? __raw_spin_lock_init+0x1c/0x100 [ 1143.166648] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 1143.171675] ? __lockdep_init_map+0x105/0x590 [ 1143.176184] ? lockdep_init_map+0x9/0x10 [ 1143.180252] sget_userns+0x73a/0xf00 [ 1143.183971] ? get_anon_bdev+0x2f0/0x2f0 [ 1143.188049] ? destroy_unused_super.part.11+0x110/0x110 [ 1143.193428] ? __alloc_pages_nodemask+0xacf/0xd70 [ 1143.198283] ? __alloc_pages_slowpath+0x2db0/0x2db0 [ 1143.203312] ? kasan_check_read+0x11/0x20 [ 1143.207472] ? cap_capable+0x1f9/0x260 [ 1143.211373] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1143.216919] ? security_capable+0x99/0xc0 [ 1143.221080] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1143.226621] ? ns_capable_common+0x13f/0x170 [ 1143.231035] ? get_anon_bdev+0x2f0/0x2f0 [ 1143.235114] sget+0x10b/0x150 [ 1143.238232] ? fuse_get_root_inode+0x190/0x190 [ 1143.242816] mount_nodev+0x33/0x110 [ 1143.246445] fuse_mount+0x2c/0x40 [ 1143.249905] mount_fs+0xae/0x328 [ 1143.253294] vfs_kern_mount.part.34+0xd4/0x4d0 [ 1143.257888] ? may_umount+0xb0/0xb0 [ 1143.261517] ? _raw_read_unlock+0x22/0x30 [ 1143.265665] ? __get_fs_type+0x97/0xc0 [ 1143.269559] do_mount+0x564/0x3070 [ 1143.273105] ? copy_mount_string+0x40/0x40 [ 1143.277349] ? rcu_pm_notify+0xc0/0xc0 [ 1143.281257] ? copy_mount_options+0x5f/0x380 [ 1143.285667] ? rcu_read_lock_sched_held+0x108/0x120 [ 1143.290687] ? kmem_cache_alloc_trace+0x616/0x780 [ 1143.295544] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1143.300656] net_ratelimit: 12 callbacks suppressed [ 1143.300661] TCP: out of memory -- consider tuning tcp_mem [ 1143.301079] ? copy_mount_options+0x285/0x380 [ 1143.316100] ksys_mount+0x12d/0x140 [ 1143.319733] __x64_sys_mount+0xbe/0x150 [ 1143.323710] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 1143.323812] TCP: out of memory -- consider tuning tcp_mem [ 1143.328722] do_syscall_64+0x1b1/0x800 [ 1143.328739] ? finish_task_switch+0x1ca/0x840 [ 1143.328756] ? syscall_return_slowpath+0x5c0/0x5c0 [ 1143.328774] ? syscall_return_slowpath+0x30f/0x5c0 [ 1143.328795] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 1143.328815] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1143.328832] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1143.367879] RIP: 0033:0x455a09 [ 1143.371063] RSP: 002b:00007f118944d808 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1143.378779] RAX: ffffffffffffffda RBX: 0000000000000016 RCX: 0000000000455a09 2018/05/26 13:23:43 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty=0x18, [0x0, 0x0, 0x0, 0x120000]}, 0x10) 2018/05/26 13:23:43 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0xa80300, 0x0, 0x0, 0x0, 0x0, 0xc00]}, 0x2c) 2018/05/26 13:23:43 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty=0x18, [0x0, 0x0, 0x0, 0xe00]}, 0x10) 2018/05/26 13:23:43 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0xb00, 0x0, 0x0, 0x0, 0x0, 0xc00]}, 0x2c) 2018/05/26 13:23:43 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty=0x18, [0x0, 0x0, 0x0, 0x4002]}, 0x10) 2018/05/26 13:23:43 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0xc0, 0x0, 0x0, 0x0, 0x0, 0xc00]}, 0x2c) 2018/05/26 13:23:43 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)="766574683100000000ffffffffffef00", 0x22b) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x10) [ 1143.386060] RDX: 00000000004c1eb6 RSI: 0000000020000240 RDI: 00000000004de0c5 [ 1143.393332] RBP: 0000000000000000 R08: 00007f118944d820 R09: 0000000000000000 [ 1143.400607] R10: 0000000048000000 R11: 0000000000000246 R12: 0000000000000000 [ 1143.407881] R13: 0000000020000240 R14: 0000000048000000 R15: 0000000000000000 [ 1143.415283] TCP: out of memory -- consider tuning tcp_mem [ 1143.416062] TCP: out of memory -- consider tuning tcp_mem [ 1143.850458] sctp: sctp_transport_update_pmtu: Reported pmtu 72 too low, using default minimum of 512 [ 1143.995548] sctp: sctp_transport_update_pmtu: Reported pmtu 72 too low, using default minimum of 512 2018/05/26 13:23:44 executing program 1: r0 = socket$inet(0x2, 0x5, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vcan0\x00', 0x10) sendmsg(r0, &(0x7f0000000480)={&(0x7f0000000140)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000380)="f0", 0x1}], 0x1}, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000a00)={@multicast1=0xe0000001, @local={0xac, 0x14, 0x14, 0xaa}}, 0xc) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000040)="84", 0x1}], 0x1, &(0x7f0000000540)}, 0x0) 2018/05/26 13:23:44 executing program 6: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}, 0x2c) 2018/05/26 13:23:44 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)="766574683100000000ffffffffffef00", 0x22b) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x81440800]}, 0x10) 2018/05/26 13:23:44 executing program 4: r0 = getpid() sched_setattr(r0, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x0, 0x4}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000f86000)='./control/file0\x00') syz_fuse_mount(&(0x7f0000000240)='./control\x00', 0x406000, 0x0, 0x0, 0x0, 0x2) syz_fuseblk_mount(&(0x7f0000000140)='./control\x00', &(0x7f0000000180)='./control/file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) close(r1) 2018/05/26 13:23:44 executing program 2: r0 = getpid() sched_setattr(r0, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x0, 0x4}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) exit(0x0) unlink(&(0x7f0000f86000)='./control/file0\x00') rmdir(&(0x7f00000000c0)='./control\x00') openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./control/file0\x00', 0x10001, 0x8) syz_fuse_mount(&(0x7f0000000240)='./control\x00', 0x406000, 0x0, 0x0, 0x0, 0x0) syz_fuseblk_mount(&(0x7f0000000140)='./control\x00', &(0x7f0000000180)='./control/file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) close(r1) 2018/05/26 13:23:44 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0xc00]}, 0x2c) 2018/05/26 13:23:44 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty=0x18, [0x0, 0x0, 0x0, 0x11]}, 0x10) 2018/05/26 13:23:44 executing program 7 (fault-call:9 fault-nth:11): r0 = getpid() sched_setattr(r0, &(0x7f00000000c0), 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}}) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) syz_fuse_mount(&(0x7f0000000240)='./control\x00', 0x406000, 0x0, 0x0, 0x0, 0x48000000) close(r1) [ 1144.170208] FAULT_INJECTION: forcing a failure. [ 1144.170208] name failslab, interval 1, probability 0, space 0, times 0 [ 1144.181550] CPU: 1 PID: 988 Comm: syz-executor7 Not tainted 4.17.0-rc6+ #68 [ 1144.188656] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1144.198010] Call Trace: [ 1144.200607] dump_stack+0x1b9/0x294 [ 1144.204241] ? dump_stack_print_info.cold.2+0x52/0x52 [ 1144.209445] should_fail.cold.4+0xa/0x1a [ 1144.213516] ? fault_create_debugfs_attr+0x1f0/0x1f0 2018/05/26 13:23:44 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty=0x18, [0x0, 0x0, 0x0, 0x2000000000000]}, 0x10) 2018/05/26 13:23:44 executing program 6: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, 0x2c) [ 1144.218637] ? find_next_zero_bit+0x111/0x140 [ 1144.223141] ? rcu_is_watching+0x85/0x140 [ 1144.227295] ? rcu_pm_notify+0xc0/0xc0 [ 1144.231195] ? find_held_lock+0x36/0x1c0 [ 1144.235284] ? check_same_owner+0x320/0x320 [ 1144.239619] ? rcu_note_context_switch+0x710/0x710 [ 1144.244559] __should_failslab+0x124/0x180 [ 1144.248803] should_failslab+0x9/0x14 [ 1144.252615] kmem_cache_alloc_trace+0x2cb/0x780 [ 1144.257966] ? kasan_check_write+0x14/0x20 [ 1144.262209] ? do_raw_spin_lock+0xc1/0x200 [ 1144.266461] sget_userns+0x1c7/0xf00 2018/05/26 13:23:44 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x3a800, 0x0, 0x0, 0x0, 0x0, 0xc00]}, 0x2c) [ 1144.270177] ? get_anon_bdev+0x2f0/0x2f0 [ 1144.274253] ? destroy_unused_super.part.11+0x110/0x110 [ 1144.279624] ? __alloc_pages_nodemask+0xacf/0xd70 [ 1144.284475] ? __alloc_pages_slowpath+0x2db0/0x2db0 [ 1144.289501] ? kasan_check_read+0x11/0x20 [ 1144.293662] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1144.299202] ? cap_capable+0x1f9/0x260 [ 1144.303101] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1144.308644] ? security_capable+0x99/0xc0 [ 1144.312800] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1144.318347] ? ns_capable_common+0x13f/0x170 [ 1144.322763] ? get_anon_bdev+0x2f0/0x2f0 [ 1144.326828] sget+0x10b/0x150 [ 1144.329945] ? fuse_get_root_inode+0x190/0x190 [ 1144.334534] mount_nodev+0x33/0x110 [ 1144.338169] fuse_mount+0x2c/0x40 [ 1144.341627] mount_fs+0xae/0x328 [ 1144.345000] vfs_kern_mount.part.34+0xd4/0x4d0 [ 1144.349590] ? may_umount+0xb0/0xb0 [ 1144.353223] ? _raw_read_unlock+0x22/0x30 [ 1144.357373] ? __get_fs_type+0x97/0xc0 [ 1144.361269] do_mount+0x564/0x3070 [ 1144.364820] ? copy_mount_string+0x40/0x40 [ 1144.369058] ? rcu_pm_notify+0xc0/0xc0 [ 1144.372955] ? copy_mount_options+0x5f/0x380 [ 1144.377369] ? rcu_read_lock_sched_held+0x108/0x120 [ 1144.382397] ? kmem_cache_alloc_trace+0x616/0x780 [ 1144.387257] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1144.392803] ? copy_mount_options+0x285/0x380 [ 1144.397307] ksys_mount+0x12d/0x140 [ 1144.400949] __x64_sys_mount+0xbe/0x150 [ 1144.404928] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 1144.409954] do_syscall_64+0x1b1/0x800 [ 1144.413850] ? finish_task_switch+0x1ca/0x840 [ 1144.418362] ? syscall_return_slowpath+0x5c0/0x5c0 [ 1144.423298] ? syscall_return_slowpath+0x30f/0x5c0 [ 1144.428236] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 1144.433610] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1144.438460] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1144.443646] RIP: 0033:0x455a09 [ 1144.446836] RSP: 002b:00007f118944d808 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1144.454545] RAX: ffffffffffffffda RBX: 0000000000000016 RCX: 0000000000455a09 [ 1144.461813] RDX: 00000000004c1eb6 RSI: 0000000020000240 RDI: 00000000004de0c5 2018/05/26 13:23:44 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty=0x18, [0x0, 0x0, 0x0, 0xf4080b00]}, 0x10) 2018/05/26 13:23:44 executing program 6: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700000000000000]}, 0x2c) 2018/05/26 13:23:44 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0xc000, 0x0, 0x0, 0x0, 0x0, 0xc00]}, 0x2c) 2018/05/26 13:23:44 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty=0x18, [0x0, 0x0, 0x0, 0xe000000]}, 0x10) [ 1144.469084] RBP: 0000000000000000 R08: 00007f118944d820 R09: 0000000000000000 [ 1144.476357] R10: 0000000048000000 R11: 0000000000000246 R12: 0000000000000000 [ 1144.483630] R13: 0000000020000240 R14: 0000000048000000 R15: 0000000000000000 2018/05/26 13:23:44 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)="766574683100000000ffffffffffef00", 0x22b) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x10) [ 1144.984868] sctp: sctp_transport_update_pmtu: Reported pmtu 72 too low, using default minimum of 512 [ 1145.129605] sctp: sctp_transport_update_pmtu: Reported pmtu 72 too low, using default minimum of 512 2018/05/26 13:23:45 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x5000000, 0x0, 0x0, 0x0, 0x0, 0xc00]}, 0x2c) 2018/05/26 13:23:45 executing program 7 (fault-call:9 fault-nth:12): r0 = getpid() sched_setattr(r0, &(0x7f00000000c0), 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}}) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) syz_fuse_mount(&(0x7f0000000240)='./control\x00', 0x406000, 0x0, 0x0, 0x0, 0x48000000) close(r1) 2018/05/26 13:23:45 executing program 6: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5207000000000000]}, 0x2c) 2018/05/26 13:23:45 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty=0x18, [0x0, 0x0, 0x0, 0x2000000]}, 0x10) 2018/05/26 13:23:45 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)="766574683100000000ffffffffffef00", 0x22b) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x6f44080000000000]}, 0x10) 2018/05/26 13:23:45 executing program 4: r0 = getpid() sched_setattr(r0, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x0, 0x4}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000f86000)='./control/file0\x00') syz_fuse_mount(&(0x7f0000000240)='./control\x00', 0x406000, 0x0, 0x0, 0x0, 0x5) syz_fuseblk_mount(&(0x7f0000000140)='./control\x00', &(0x7f0000000180)='./control/file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) close(r1) 2018/05/26 13:23:45 executing program 1: r0 = socket$inet(0x2, 0x5, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vcan0\x00', 0x10) sendmsg(r0, &(0x7f0000000480)={&(0x7f0000000140)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000380)="f0", 0x1}], 0x1}, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000a00)={@multicast1=0xe0000001, @local={0xac, 0x14, 0x14, 0xaa}}, 0xc) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000040)="84", 0x1}], 0x1, &(0x7f0000000540)}, 0x0) 2018/05/26 13:23:45 executing program 2: r0 = getpid() sched_setattr(r0, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x0, 0x4}, 0x0) mkdir(&(0x7f0000000340)='./control/file1\x00', 0xfffffffffffffffd) r1 = socket$inet(0x2, 0x3, 0x1) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000400)={{{@in=@remote={0xac, 0x14, 0x14, 0xbb}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}}, {{@in=@rand_addr, 0x0, 0x6c}, 0x0, @in6=@remote={0xfe, 0x80, [], 0xbb}}}, 0xe8) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="cbaaadaaaaaaaaaaaaaaaa0008004500001c000000000001907800000000e00000010800907800000000"], &(0x7f0000000040)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./control/file2\x00', 0x4000, 0x80) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f00000001c0)) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x0) setsockopt$RDS_CANCEL_SENT_TO(r2, 0x114, 0x1, &(0x7f0000000300)={0x2, 0x4e21, @broadcast=0xffffffff}, 0x10) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r4 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r4, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) renameat2(r4, &(0x7f0000000040)='./control\x00', r4, &(0x7f0000000080)='./control/file2\x00', 0x6) unlink(&(0x7f0000f86000)='./control/file0\x00') rmdir(&(0x7f00000000c0)='./control\x00') syz_fuse_mount(&(0x7f0000000240)='./control\x00', 0x406000, 0x0, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind(r4, &(0x7f0000000280)=@can={0x1d, r5}, 0x80) ioctl$TUNSETFILTEREBPF(r4, 0x800454e1, &(0x7f0000000500)=r2) renameat2(r4, &(0x7f0000000380)='./control/file2\x00', r2, &(0x7f00000003c0)='./control/file1\x00', 0x2) syz_fuseblk_mount(&(0x7f0000000140)='./control\x00', &(0x7f0000000180)='./control/file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) close(r3) [ 1145.300108] FAULT_INJECTION: forcing a failure. [ 1145.300108] name failslab, interval 1, probability 0, space 0, times 0 [ 1145.311452] CPU: 1 PID: 1049 Comm: syz-executor7 Not tainted 4.17.0-rc6+ #68 [ 1145.318649] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1145.328003] Call Trace: [ 1145.330598] dump_stack+0x1b9/0x294 [ 1145.334247] ? dump_stack_print_info.cold.2+0x52/0x52 [ 1145.339448] ? kasan_check_write+0x14/0x20 [ 1145.343696] should_fail.cold.4+0xa/0x1a [ 1145.347780] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1145.352890] ? find_next_zero_bit+0x111/0x140 [ 1145.357397] ? rcu_is_watching+0x85/0x140 [ 1145.361556] ? rcu_pm_notify+0xc0/0xc0 [ 1145.365453] ? update_block_group.isra.59+0x1298/0x1410 [ 1145.370829] ? find_held_lock+0x36/0x1c0 [ 1145.374905] ? update_block_group.isra.59+0x1290/0x1410 [ 1145.380294] ? check_same_owner+0x320/0x320 [ 1145.384630] ? rcu_note_context_switch+0x710/0x710 [ 1145.389576] __should_failslab+0x124/0x180 [ 1145.393825] should_failslab+0x9/0x14 [ 1145.397633] kmem_cache_alloc_trace+0x2cb/0x780 [ 1145.402310] ? kasan_check_write+0x14/0x20 [ 1145.406553] ? do_raw_spin_lock+0xc1/0x200 [ 1145.410800] sget_userns+0x1c7/0xf00 [ 1145.414520] ? get_anon_bdev+0x2f0/0x2f0 [ 1145.418596] ? destroy_unused_super.part.11+0x110/0x110 [ 1145.423970] ? __alloc_pages_nodemask+0xacf/0xd70 [ 1145.428827] ? __alloc_pages_slowpath+0x2db0/0x2db0 [ 1145.433851] ? kasan_check_read+0x11/0x20 [ 1145.438007] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1145.443545] ? cap_capable+0x1f9/0x260 [ 1145.447443] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1145.452990] ? security_capable+0x99/0xc0 [ 1145.457151] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1145.462695] ? ns_capable_common+0x13f/0x170 [ 1145.467111] ? get_anon_bdev+0x2f0/0x2f0 [ 1145.471178] sget+0x10b/0x150 [ 1145.474299] ? fuse_get_root_inode+0x190/0x190 [ 1145.478898] mount_nodev+0x33/0x110 [ 1145.482536] fuse_mount+0x2c/0x40 [ 1145.485996] mount_fs+0xae/0x328 [ 1145.489372] vfs_kern_mount.part.34+0xd4/0x4d0 [ 1145.493959] ? may_umount+0xb0/0xb0 [ 1145.497597] ? _raw_read_unlock+0x22/0x30 [ 1145.501749] ? __get_fs_type+0x97/0xc0 [ 1145.505651] do_mount+0x564/0x3070 [ 1145.509202] ? do_raw_spin_unlock+0x9e/0x2e0 [ 1145.513624] ? copy_mount_string+0x40/0x40 [ 1145.517866] ? rcu_pm_notify+0xc0/0xc0 [ 1145.521767] ? copy_mount_options+0x5f/0x380 [ 1145.526174] ? rcu_read_lock_sched_held+0x108/0x120 [ 1145.531191] ? kmem_cache_alloc_trace+0x616/0x780 [ 1145.536042] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1145.541587] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1145.547131] ? copy_mount_options+0x285/0x380 [ 1145.551632] ksys_mount+0x12d/0x140 [ 1145.555268] __x64_sys_mount+0xbe/0x150 [ 1145.559275] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 1145.564300] do_syscall_64+0x1b1/0x800 [ 1145.568200] ? finish_task_switch+0x1ca/0x840 [ 1145.572703] ? syscall_return_slowpath+0x5c0/0x5c0 [ 1145.577635] ? syscall_return_slowpath+0x30f/0x5c0 [ 1145.582582] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 1145.587959] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1145.592813] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1145.598003] RIP: 0033:0x455a09 2018/05/26 13:23:45 executing program 6: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1100000000000000]}, 0x2c) 2018/05/26 13:23:45 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty=0x18, [0x0, 0x0, 0x0, 0xa00]}, 0x10) 2018/05/26 13:23:45 executing program 6: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1100]}, 0x2c) 2018/05/26 13:23:45 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty=0x18, [0x0, 0x0, 0x0, 0x240]}, 0x10) 2018/05/26 13:23:45 executing program 6: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}, 0x2c) 2018/05/26 13:23:45 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty=0x18, [0x0, 0x0, 0x0, 0xb08f4]}, 0x10) 2018/05/26 13:23:45 executing program 6: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x2c) [ 1145.601190] RSP: 002b:00007f118944d808 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1145.608910] RAX: ffffffffffffffda RBX: 0000000000000016 RCX: 0000000000455a09 [ 1145.616180] RDX: 00000000004c1eb6 RSI: 0000000020000240 RDI: 00000000004de0c5 [ 1145.623446] RBP: 0000000000000000 R08: 00007f118944d820 R09: 0000000000000000 [ 1145.630715] R10: 0000000048000000 R11: 0000000000000246 R12: 0000000000000000 [ 1145.637983] R13: 0000000020000240 R14: 0000000048000000 R15: 0000000000000000 [ 1145.679282] TCP: out of memory -- consider tuning tcp_mem [ 1146.100384] sctp: sctp_transport_update_pmtu: Reported pmtu 72 too low, using default minimum of 512 [ 1146.245613] sctp: sctp_transport_update_pmtu: Reported pmtu 72 too low, using default minimum of 512 2018/05/26 13:23:46 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty=0x18, [0x0, 0x0, 0x0, 0x200000000000000]}, 0x10) 2018/05/26 13:23:46 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)="766574683100000000ffffffffffef00", 0x22b) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x7c44080000000000]}, 0x10) 2018/05/26 13:23:46 executing program 2: r0 = getpid() sched_setattr(r0, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x0, 0x4}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000f86000)='./control/file0\x00') getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0x81}, &(0x7f0000000280)=0x8) setsockopt$inet_sctp_SCTP_AUTH_KEY(r2, 0x84, 0x17, &(0x7f00000002c0)={r3, 0xffff, 0xb4, "b87ea1514374a1ae50612fc8864625bc38aff94c37cb65527d5785783f4eb00bd958f525a6d3ca51896421736957f6ea765f213a64ff305ebd72ce641d18c011237a5ae5b2f68be6fe83c60b5700667eb35633c0f8cdea16e9ccab0b62c5666737ce47a61ae05cc59d40709e4d1e1c204fc3ed5fe71578fb761a8535e497334a671cab1b3ad5b8e6a612c91e184401cef6b554d42a940e8b556615d424ab3ad4008f4dbddbcd5ec3a41a82e73a751e5301028058"}, 0xbc) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) ppoll(&(0x7f0000000040)=[{r2, 0x6b8}, {r2}, {r2, 0x400}, {r2, 0x8}, {r1, 0x10}, {r2}, {r1, 0x1020}, {r1, 0x40}], 0x8, &(0x7f0000000100)={r4, r5+30000000}, &(0x7f00000001c0)={0x79}, 0x8) rmdir(&(0x7f00000000c0)='./control\x00') syz_fuse_mount(&(0x7f0000000240)='./control\x00', 0x406000, 0x0, 0x0, 0x0, 0x0) syz_fuseblk_mount(&(0x7f0000000140)='./control\x00', &(0x7f0000000180)='./control/file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) close(r1) 2018/05/26 13:23:46 executing program 7 (fault-call:9 fault-nth:13): r0 = getpid() sched_setattr(r0, &(0x7f00000000c0), 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}}) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) syz_fuse_mount(&(0x7f0000000240)='./control\x00', 0x406000, 0x0, 0x0, 0x0, 0x48000000) close(r1) 2018/05/26 13:23:46 executing program 6: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf00000000000000]}, 0x2c) 2018/05/26 13:23:46 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0xc00]}, 0x2c) 2018/05/26 13:23:46 executing program 1: r0 = socket$inet(0x2, 0x5, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vcan0\x00', 0x10) sendmsg(r0, &(0x7f0000000480)={&(0x7f0000000140)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000380)="f0", 0x1}], 0x1}, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000a00)={@multicast1=0xe0000001, @local={0xac, 0x14, 0x14, 0xaa}}, 0xc) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000040)="84", 0x1}], 0x1, &(0x7f0000000540)}, 0x0) 2018/05/26 13:23:46 executing program 4: r0 = getpid() sched_setattr(r0, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x0, 0x4}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000f86000)='./control/file0\x00') syz_fuse_mount(&(0x7f0000000240)='./control\x00', 0x406000, 0x0, 0x0, 0x0, 0x97ffffff00000000) syz_fuseblk_mount(&(0x7f0000000140)='./control\x00', &(0x7f0000000180)='./control/file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) close(r1) [ 1146.404945] FAULT_INJECTION: forcing a failure. [ 1146.404945] name failslab, interval 1, probability 0, space 0, times 0 [ 1146.416304] CPU: 0 PID: 1101 Comm: syz-executor7 Not tainted 4.17.0-rc6+ #68 [ 1146.423499] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1146.432851] Call Trace: [ 1146.435456] dump_stack+0x1b9/0x294 [ 1146.439102] ? dump_stack_print_info.cold.2+0x52/0x52 [ 1146.444301] ? kernel_text_address+0x79/0xf0 [ 1146.448714] ? __unwind_start+0x166/0x330 2018/05/26 13:23:46 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x9000000, 0x0, 0x0, 0x0, 0x0, 0xc00]}, 0x2c) 2018/05/26 13:23:46 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)="766574683100000000ffffffffffef00", 0x22b) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x7844080000000000]}, 0x10) [ 1146.452869] should_fail.cold.4+0xa/0x1a [ 1146.456939] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1146.462053] ? graph_lock+0x170/0x170 [ 1146.465859] ? save_stack+0x43/0xd0 [ 1146.467056] TCP: out of memory -- consider tuning tcp_mem [ 1146.469487] ? kasan_kmalloc+0xc4/0xe0 [ 1146.469502] ? __kmalloc+0x14e/0x760 [ 1146.469518] ? __list_lru_init+0xdd/0x790 [ 1146.469537] ? find_held_lock+0x36/0x1c0 [ 1146.469558] ? __lock_is_held+0xb5/0x140 [ 1146.469585] ? check_same_owner+0x320/0x320 [ 1146.475950] TCP: out of memory -- consider tuning tcp_mem [ 1146.478983] ? rcu_note_context_switch+0x710/0x710 [ 1146.479005] __should_failslab+0x124/0x180 [ 1146.479026] should_failslab+0x9/0x14 [ 1146.479044] kmem_cache_alloc_node_trace+0x26f/0x770 [ 1146.479058] ? mark_held_locks+0xc9/0x160 [ 1146.479076] ? __raw_spin_lock_init+0x1c/0x100 [ 1146.479095] __kmalloc_node+0x33/0x70 [ 1146.479112] kvmalloc_node+0x6b/0x100 [ 1146.539137] __list_lru_init+0x559/0x790 [ 1146.543209] ? list_lru_destroy+0x4c0/0x4c0 [ 1146.547535] ? mark_held_locks+0xc9/0x160 2018/05/26 13:23:46 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)="766574683100000000ffffffffffef00", 0x22b) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x8944080000000000]}, 0x10) [ 1146.551691] ? __raw_spin_lock_init+0x1c/0x100 [ 1146.556279] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 1146.561298] ? __lockdep_init_map+0x105/0x590 [ 1146.565143] TCP: out of memory -- consider tuning tcp_mem [ 1146.565793] ? lockdep_init_map+0x9/0x10 [ 1146.565813] sget_userns+0x73a/0xf00 [ 1146.565826] ? get_anon_bdev+0x2f0/0x2f0 [ 1146.565846] ? destroy_unused_super.part.11+0x110/0x110 [ 1146.571816] TCP: out of memory -- consider tuning tcp_mem [ 1146.575420] ? __alloc_pages_nodemask+0xacf/0xd70 [ 1146.575440] ? __alloc_pages_slowpath+0x2db0/0x2db0 2018/05/26 13:23:46 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0xc00, 0x0, 0x0, 0x0, 0x0, 0xc00]}, 0x2c) [ 1146.575461] ? kasan_check_read+0x11/0x20 [ 1146.575479] ? cap_capable+0x1f9/0x260 [ 1146.575503] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1146.575518] ? security_capable+0x99/0xc0 [ 1146.575534] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1146.575550] ? ns_capable_common+0x13f/0x170 [ 1146.631562] ? get_anon_bdev+0x2f0/0x2f0 [ 1146.635631] sget+0x10b/0x150 [ 1146.638746] ? fuse_get_root_inode+0x190/0x190 [ 1146.643331] mount_nodev+0x33/0x110 [ 1146.646959] fuse_mount+0x2c/0x40 [ 1146.650418] mount_fs+0xae/0x328 2018/05/26 13:23:46 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)="766574683100000000ffffffffffef00", 0x22b) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x8a440800]}, 0x10) [ 1146.653792] vfs_kern_mount.part.34+0xd4/0x4d0 [ 1146.658377] ? may_umount+0xb0/0xb0 [ 1146.662007] ? _raw_read_unlock+0x22/0x30 [ 1146.666154] ? __get_fs_type+0x97/0xc0 [ 1146.668826] TCP: out of memory -- consider tuning tcp_mem [ 1146.670046] do_mount+0x564/0x3070 [ 1146.670067] ? copy_mount_string+0x40/0x40 [ 1146.670084] ? rcu_pm_notify+0xc0/0xc0 [ 1146.670106] ? copy_mount_options+0x5f/0x380 [ 1146.670121] ? rcu_read_lock_sched_held+0x108/0x120 [ 1146.670136] ? kmem_cache_alloc_trace+0x616/0x780 2018/05/26 13:23:46 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0xc00]}, 0x2c) [ 1146.670160] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1146.707192] ? copy_mount_options+0x285/0x380 [ 1146.711698] ksys_mount+0x12d/0x140 [ 1146.715330] __x64_sys_mount+0xbe/0x150 [ 1146.719314] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 1146.724341] do_syscall_64+0x1b1/0x800 [ 1146.728235] ? finish_task_switch+0x1ca/0x840 [ 1146.732742] ? syscall_return_slowpath+0x5c0/0x5c0 [ 1146.737685] ? syscall_return_slowpath+0x30f/0x5c0 [ 1146.742623] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 1146.747996] ? trace_hardirqs_off_thunk+0x1a/0x1c 2018/05/26 13:23:46 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)="766574683100000000ffffffffffef00", 0x22b) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x1800]}, 0x10) [ 1146.752850] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1146.758040] RIP: 0033:0x455a09 [ 1146.761233] RSP: 002b:00007f118944d808 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1146.768949] RAX: ffffffffffffffda RBX: 0000000000000016 RCX: 0000000000455a09 [ 1146.776217] RDX: 00000000004c1eb6 RSI: 0000000020000240 RDI: 00000000004de0c5 [ 1146.783487] RBP: 0000000000000000 R08: 00007f118944d820 R09: 0000000000000000 [ 1146.790759] R10: 0000000048000000 R11: 0000000000000246 R12: 0000000000000000 [ 1146.798025] R13: 0000000020000240 R14: 0000000048000000 R15: 0000000000000000 2018/05/26 13:23:47 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty=0x18, [0x0, 0x0, 0x0, 0x4000]}, 0x10) 2018/05/26 13:23:47 executing program 6: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000000]}, 0x2c) [ 1147.230111] sctp: sctp_transport_update_pmtu: Reported pmtu 72 too low, using default minimum of 512 [ 1147.375564] sctp: sctp_transport_update_pmtu: Reported pmtu 72 too low, using default minimum of 512 2018/05/26 13:23:47 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)="766574683100000000ffffffffffef00", 0x22b) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x5580]}, 0x10) 2018/05/26 13:23:47 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x20000000000000, 0x0, 0x0, 0x0, 0x0, 0xc00]}, 0x2c) 2018/05/26 13:23:47 executing program 7 (fault-call:9 fault-nth:14): r0 = getpid() sched_setattr(r0, &(0x7f00000000c0), 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}}) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) syz_fuse_mount(&(0x7f0000000240)='./control\x00', 0x406000, 0x0, 0x0, 0x0, 0x48000000) close(r1) 2018/05/26 13:23:47 executing program 6: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd000000]}, 0x2c) 2018/05/26 13:23:47 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty=0x18, [0x0, 0x0, 0x0, 0x4002000000000000]}, 0x10) 2018/05/26 13:23:47 executing program 4: r0 = getpid() sched_setattr(r0, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x0, 0x4}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000f86000)='./control/file0\x00') syz_fuse_mount(&(0x7f0000000240)='./control\x00', 0x406000, 0x0, 0x0, 0x0, 0xd19010000000000) syz_fuseblk_mount(&(0x7f0000000140)='./control\x00', &(0x7f0000000180)='./control/file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) close(r1) 2018/05/26 13:23:47 executing program 1: r0 = socket$inet(0x2, 0x5, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vcan0\x00', 0x10) sendmsg(r0, &(0x7f0000000480)={&(0x7f0000000140)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000380)="f0", 0x1}], 0x1}, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000a00)={@multicast1=0xe0000001, @local={0xac, 0x14, 0x14, 0xaa}}, 0xc) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000040)="84", 0xffffffffffffff50}], 0x1, &(0x7f0000000540)}, 0x0) 2018/05/26 13:23:47 executing program 2: r0 = getpid() sched_setattr(r0, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x0, 0x4}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$random(&(0x7f0000000080)='/dev/random\x00', 0x0, 0x100) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0}, &(0x7f00000001c0)=0xc) r3 = getegid() fchown(r1, r2, r3) r4 = userfaultfd(0x0) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r5 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r5, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000f86000)='./control/file0\x00') rmdir(&(0x7f00000000c0)='./control\x00') syz_fuse_mount(&(0x7f0000000240)='./control\x00', 0x406000, 0x0, 0x0, 0x0, 0x0) chdir(&(0x7f0000000040)='./control/file1\x00') syz_fuseblk_mount(&(0x7f0000000140)='./control\x00', &(0x7f0000000180)='./control/file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) close(r4) [ 1147.534217] FAULT_INJECTION: forcing a failure. [ 1147.534217] name failslab, interval 1, probability 0, space 0, times 0 [ 1147.545558] CPU: 1 PID: 1162 Comm: syz-executor7 Not tainted 4.17.0-rc6+ #68 [ 1147.552751] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1147.562107] Call Trace: [ 1147.564705] dump_stack+0x1b9/0x294 [ 1147.568347] ? dump_stack_print_info.cold.2+0x52/0x52 [ 1147.573549] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 1147.578751] should_fail.cold.4+0xa/0x1a [ 1147.582815] ? is_bpf_text_address+0xd7/0x170 [ 1147.587319] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1147.592433] ? unwind_get_return_address+0x61/0xa0 [ 1147.597375] ? __save_stack_trace+0x7e/0xd0 [ 1147.601711] ? graph_lock+0x170/0x170 [ 1147.605532] ? find_held_lock+0x36/0x1c0 [ 1147.609610] ? __lock_is_held+0xb5/0x140 [ 1147.613693] ? check_same_owner+0x320/0x320 [ 1147.618027] ? rcu_note_context_switch+0x710/0x710 [ 1147.622969] __should_failslab+0x124/0x180 [ 1147.627214] should_failslab+0x9/0x14 [ 1147.631025] kmem_cache_alloc_trace+0x2cb/0x780 [ 1147.635701] ? __kmalloc_node+0x33/0x70 [ 1147.639677] ? __kmalloc_node+0x33/0x70 [ 1147.643661] ? rcu_read_lock_sched_held+0x108/0x120 [ 1147.648693] __memcg_init_list_lru_node+0x17d/0x2c0 [ 1147.653720] ? kvfree_rcu+0x20/0x20 [ 1147.657355] ? __kmalloc_node+0x47/0x70 [ 1147.661339] __list_lru_init+0x456/0x790 [ 1147.665409] ? list_lru_destroy+0x4c0/0x4c0 [ 1147.669737] ? mark_held_locks+0xc9/0x160 [ 1147.673898] ? __raw_spin_lock_init+0x1c/0x100 [ 1147.678490] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 1147.683514] ? __lockdep_init_map+0x105/0x590 [ 1147.688016] ? lockdep_init_map+0x9/0x10 [ 1147.692090] sget_userns+0x73a/0xf00 [ 1147.695808] ? get_anon_bdev+0x2f0/0x2f0 [ 1147.699883] ? destroy_unused_super.part.11+0x110/0x110 [ 1147.705252] ? __alloc_pages_nodemask+0xacf/0xd70 [ 1147.710107] ? __alloc_pages_slowpath+0x2db0/0x2db0 [ 1147.715129] ? kasan_check_read+0x11/0x20 [ 1147.719284] ? cap_capable+0x1f9/0x260 [ 1147.723192] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1147.728742] ? security_capable+0x99/0xc0 2018/05/26 13:23:47 executing program 6: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000]}, 0x2c) 2018/05/26 13:23:47 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty=0x18, [0x0, 0x0, 0x0, 0x100000000000000]}, 0x10) 2018/05/26 13:23:47 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)="766574683100000000ffffffffffef00", 0x22b) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x1100000000000000]}, 0x10) 2018/05/26 13:23:47 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty=0x18, [0x0, 0x0, 0x0, 0x80550000]}, 0x10) 2018/05/26 13:23:47 executing program 6: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500]}, 0x2c) [ 1147.732903] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1147.738447] ? ns_capable_common+0x13f/0x170 [ 1147.742859] ? get_anon_bdev+0x2f0/0x2f0 [ 1147.746919] sget+0x10b/0x150 [ 1147.750032] ? fuse_get_root_inode+0x190/0x190 [ 1147.754623] mount_nodev+0x33/0x110 [ 1147.758252] fuse_mount+0x2c/0x40 [ 1147.761710] mount_fs+0xae/0x328 [ 1147.765089] vfs_kern_mount.part.34+0xd4/0x4d0 [ 1147.769673] ? may_umount+0xb0/0xb0 [ 1147.773301] ? _raw_read_unlock+0x22/0x30 [ 1147.777457] ? __get_fs_type+0x97/0xc0 [ 1147.781351] do_mount+0x564/0x3070 [ 1147.784900] ? copy_mount_string+0x40/0x40 [ 1147.789136] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 1147.794159] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1147.798922] ? retint_kernel+0x10/0x10 [ 1147.802820] ? copy_mount_options+0x1a1/0x380 [ 1147.807316] ? copy_mount_options+0x1a4/0x380 [ 1147.811816] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1147.817358] ? copy_mount_options+0x285/0x380 [ 1147.821858] ksys_mount+0x12d/0x140 [ 1147.825493] __x64_sys_mount+0xbe/0x150 [ 1147.829474] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 1147.834497] do_syscall_64+0x1b1/0x800 [ 1147.838390] ? finish_task_switch+0x1ca/0x840 [ 1147.842895] ? syscall_return_slowpath+0x5c0/0x5c0 [ 1147.847828] ? syscall_return_slowpath+0x30f/0x5c0 [ 1147.852764] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 1147.858136] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1147.862994] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1147.868182] RIP: 0033:0x455a09 [ 1147.871369] RSP: 002b:00007f118944d808 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 2018/05/26 13:23:47 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty=0x18, [0x0, 0x0, 0x0, 0x0, 0x7]}, 0x10) 2018/05/26 13:23:48 executing program 6: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe]}, 0x2c) [ 1147.879084] RAX: ffffffffffffffda RBX: 0000000000000016 RCX: 0000000000455a09 [ 1147.886356] RDX: 00000000004c1eb6 RSI: 0000000020000240 RDI: 00000000004de0c5 [ 1147.893623] RBP: 0000000000000000 R08: 00007f118944d820 R09: 0000000000000000 [ 1147.900891] R10: 0000000048000000 R11: 0000000000000246 R12: 0000000000000000 [ 1147.908163] R13: 0000000020000240 R14: 0000000048000000 R15: 0000000000000000 2018/05/26 13:23:48 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty=0x18, [0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff]}, 0x10) 2018/05/26 13:23:48 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)="766574683100000000ffffffffffef00", 0x22b) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000]}, 0x10) 2018/05/26 13:23:48 executing program 7 (fault-call:9 fault-nth:15): r0 = getpid() sched_setattr(r0, &(0x7f00000000c0), 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}}) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) syz_fuse_mount(&(0x7f0000000240)='./control\x00', 0x406000, 0x0, 0x0, 0x0, 0x48000000) close(r1) 2018/05/26 13:23:48 executing program 6: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, 0x2c) 2018/05/26 13:23:48 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0xc000000, 0x0, 0x0, 0x0, 0x0, 0xc00]}, 0x2c) 2018/05/26 13:23:48 executing program 4: r0 = getpid() sched_setattr(r0, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x0, 0x4}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000f86000)='./control/file0\x00') syz_fuse_mount(&(0x7f0000000240)='./control\x00', 0x406000, 0x0, 0x0, 0x0, 0x3c00000000000000) syz_fuseblk_mount(&(0x7f0000000140)='./control\x00', &(0x7f0000000180)='./control/file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) close(r1) 2018/05/26 13:23:48 executing program 1: r0 = socket$inet(0x2, 0x5, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vcan0\x00', 0x10) sendmsg(r0, &(0x7f0000000480)={&(0x7f0000000140)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000380)="f0", 0x1}], 0x1}, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000a00)={@multicast1=0xe0000001, @local={0xac, 0x14, 0x14, 0xaa}}, 0xc) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000040)="84", 0xaa00}], 0x1, &(0x7f0000000540)}, 0x0) 2018/05/26 13:23:48 executing program 2: r0 = getpid() sched_setattr(r0, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x0, 0x4}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x5, 0x200000) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, &(0x7f0000000100)={0x0, 0x80000, r2}) ioctl$DRM_IOCTL_GEM_CLOSE(r2, 0x40086409, &(0x7f00000001c0)={r4}) write$sndseq(r3, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000f86000)='./control/file0\x00') syz_fuse_mount(&(0x7f0000000240)='./control\x00', 0x406000, 0x0, 0x0, 0x0, 0x0) syz_fuseblk_mount(&(0x7f0000000140)='./control\x00', &(0x7f0000000180)='./control/file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) close(r1) setsockopt$nfc_llcp_NFC_LLCP_RW(r3, 0x118, 0x0, &(0x7f0000000080)=0x2, 0x4) getsockopt$inet_dccp_buf(r3, 0x21, 0xc0, &(0x7f0000000280)=""/172, &(0x7f0000000200)=0xac) [ 1148.642194] FAULT_INJECTION: forcing a failure. [ 1148.642194] name failslab, interval 1, probability 0, space 0, times 0 [ 1148.653575] CPU: 1 PID: 1226 Comm: syz-executor7 Not tainted 4.17.0-rc6+ #68 [ 1148.660771] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1148.670128] Call Trace: [ 1148.672723] dump_stack+0x1b9/0x294 [ 1148.676360] ? dump_stack_print_info.cold.2+0x52/0x52 [ 1148.681558] ? kernel_text_address+0x79/0xf0 [ 1148.685971] ? __unwind_start+0x166/0x330 [ 1148.690130] should_fail.cold.4+0xa/0x1a [ 1148.694201] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1148.699318] ? graph_lock+0x170/0x170 [ 1148.703126] ? save_stack+0x43/0xd0 [ 1148.706760] ? kasan_kmalloc+0xc4/0xe0 [ 1148.710649] ? __kmalloc+0x14e/0x760 [ 1148.714371] ? __list_lru_init+0xdd/0x790 [ 1148.718527] ? find_held_lock+0x36/0x1c0 [ 1148.722599] ? __lock_is_held+0xb5/0x140 [ 1148.726681] ? check_same_owner+0x320/0x320 [ 1148.731019] ? rcu_note_context_switch+0x710/0x710 [ 1148.735957] __should_failslab+0x124/0x180 [ 1148.740213] should_failslab+0x9/0x14 [ 1148.744034] kmem_cache_alloc_node_trace+0x26f/0x770 [ 1148.749139] ? mark_held_locks+0xc9/0x160 [ 1148.753297] ? __raw_spin_lock_init+0x1c/0x100 [ 1148.757891] __kmalloc_node+0x33/0x70 [ 1148.761700] kvmalloc_node+0x6b/0x100 [ 1148.765503] __list_lru_init+0x559/0x790 [ 1148.769570] ? list_lru_destroy+0x4c0/0x4c0 [ 1148.773893] ? mark_held_locks+0xc9/0x160 [ 1148.778049] ? __raw_spin_lock_init+0x1c/0x100 [ 1148.782637] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 1148.787660] ? __lockdep_init_map+0x105/0x590 2018/05/26 13:23:49 executing program 6: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x2c) 2018/05/26 13:23:49 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)="766574683100000000ffffffffffef00", 0x22b) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x8144080000000000]}, 0x10) 2018/05/26 13:23:49 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0xc00000, 0x0, 0x0, 0x0, 0x0, 0xc00]}, 0x2c) [ 1148.792162] ? lockdep_init_map+0x9/0x10 [ 1148.796233] sget_userns+0x73a/0xf00 [ 1148.799954] ? get_anon_bdev+0x2f0/0x2f0 [ 1148.804037] ? destroy_unused_super.part.11+0x110/0x110 [ 1148.809408] ? __alloc_pages_nodemask+0xacf/0xd70 [ 1148.814261] ? __alloc_pages_slowpath+0x2db0/0x2db0 [ 1148.819286] ? kasan_check_read+0x11/0x20 [ 1148.823440] ? cap_capable+0x1f9/0x260 [ 1148.827342] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1148.832882] ? security_capable+0x99/0xc0 [ 1148.837040] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1148.842586] ? ns_capable_common+0x13f/0x170 [ 1148.847006] ? get_anon_bdev+0x2f0/0x2f0 [ 1148.851068] sget+0x10b/0x150 [ 1148.854188] ? fuse_get_root_inode+0x190/0x190 [ 1148.858785] mount_nodev+0x33/0x110 [ 1148.862417] fuse_mount+0x2c/0x40 [ 1148.865873] mount_fs+0xae/0x328 [ 1148.869244] vfs_kern_mount.part.34+0xd4/0x4d0 [ 1148.873827] ? may_umount+0xb0/0xb0 [ 1148.877454] ? _raw_read_unlock+0x22/0x30 [ 1148.881601] ? __get_fs_type+0x97/0xc0 [ 1148.885495] do_mount+0x564/0x3070 [ 1148.885605] net_ratelimit: 7 callbacks suppressed [ 1148.885610] TCP: out of memory -- consider tuning tcp_mem [ 1148.889033] ? do_raw_spin_unlock+0x9e/0x2e0 [ 1148.889052] ? copy_mount_string+0x40/0x40 [ 1148.889068] ? rcu_pm_notify+0xc0/0xc0 [ 1148.889090] ? copy_mount_options+0x5f/0x380 [ 1148.889105] ? rcu_read_lock_sched_held+0x108/0x120 [ 1148.889122] ? kmem_cache_alloc_trace+0x616/0x780 [ 1148.889142] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1148.889160] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1148.894751] TCP: out of memory -- consider tuning tcp_mem [ 1148.899512] ? copy_mount_options+0x285/0x380 [ 1148.899531] ksys_mount+0x12d/0x140 [ 1148.899549] __x64_sys_mount+0xbe/0x150 [ 1148.899564] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 1148.899583] do_syscall_64+0x1b1/0x800 [ 1148.899599] ? finish_task_switch+0x1ca/0x840 [ 1148.899616] ? syscall_return_slowpath+0x5c0/0x5c0 [ 1148.899633] ? syscall_return_slowpath+0x30f/0x5c0 [ 1148.899654] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 1148.983481] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1148.988338] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1148.993529] RIP: 0033:0x455a09 [ 1148.996718] RSP: 002b:00007f118944d808 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1149.004429] RAX: ffffffffffffffda RBX: 0000000000000016 RCX: 0000000000455a09 [ 1149.011698] RDX: 00000000004c1eb6 RSI: 0000000020000240 RDI: 00000000004de0c5 [ 1149.018976] RBP: 0000000000000000 R08: 00007f118944d820 R09: 0000000000000000 [ 1149.024363] TCP: out of memory -- consider tuning tcp_mem [ 1149.026240] R10: 0000000048000000 R11: 0000000000000246 R12: 0000000000000000 2018/05/26 13:23:49 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty=0x18, [0x0, 0x0, 0x0, 0x0, 0x8055000000000000]}, 0x10) 2018/05/26 13:23:49 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty=0x18, [0x0, 0x0, 0x0, 0x0, 0xf401000000000000]}, 0x10) 2018/05/26 13:23:49 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)="766574683100000000ffffffffffef00", 0x22b) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x50000]}, 0x10) 2018/05/26 13:23:49 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty=0x18, [0x0, 0x0, 0x0, 0x0, 0x142800]}, 0x10) 2018/05/26 13:23:49 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0xc00]}, 0x2c) 2018/05/26 13:23:49 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)="766574683100000000ffffffffffef00", 0x22b) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000]}, 0x10) [ 1149.026250] R13: 0000000020000240 R14: 0000000048000000 R15: 0000000000000000 [ 1149.046678] TCP: out of memory -- consider tuning tcp_mem [ 1149.069009] TCP: out of memory -- consider tuning tcp_mem [ 1149.152040] TCP: out of memory -- consider tuning tcp_mem [ 1149.156897] TCP: out of memory -- consider tuning tcp_mem [ 1149.451578] sctp: sctp_transport_update_pmtu: Reported pmtu 72 too low, using default minimum of 512 [ 1149.595619] sctp: sctp_transport_update_pmtu: Reported pmtu 72 too low, using default minimum of 512 2018/05/26 13:23:49 executing program 1: r0 = socket$inet(0x2, 0x5, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vcan0\x00', 0x10) sendmsg(r0, &(0x7f0000000480)={&(0x7f0000000140)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000380)="f0", 0x1}], 0x1}, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000a00)={@multicast1=0xe0000001, @local={0xac, 0x14, 0x14, 0xaa}}, 0xc) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000040)="84", 0x3}], 0x1, &(0x7f0000000540)}, 0x0) 2018/05/26 13:23:49 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)="766574683100000000ffffffffffef00", 0x22b) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x72440800]}, 0x10) 2018/05/26 13:23:49 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x40000000000, 0x0, 0x0, 0x0, 0x0, 0xc00]}, 0x2c) 2018/05/26 13:23:49 executing program 4: r0 = getpid() sched_setattr(r0, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x0, 0x4}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000f86000)='./control/file0\x00') syz_fuse_mount(&(0x7f0000000240)='./control\x00', 0x406000, 0x0, 0x0, 0x0, 0xa19010000000000) syz_fuseblk_mount(&(0x7f0000000140)='./control\x00', &(0x7f0000000180)='./control/file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) close(r1) 2018/05/26 13:23:49 executing program 2: r0 = getpid() sched_setattr(r0, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x0, 0x4}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) fcntl$setpipe(r1, 0x407, 0x8001) unlink(&(0x7f0000f86000)='./control/file0\x00') rmdir(&(0x7f00000000c0)='./control\x00') syz_fuse_mount(&(0x7f0000000240)='./control\x00', 0x406000, 0x0, 0x0, 0x0, 0x0) syz_fuseblk_mount(&(0x7f0000000140)='./control\x00', &(0x7f0000000180)='./control/file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) close(r1) 2018/05/26 13:23:49 executing program 7 (fault-call:9 fault-nth:16): r0 = getpid() sched_setattr(r0, &(0x7f00000000c0), 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}}) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) syz_fuse_mount(&(0x7f0000000240)='./control\x00', 0x406000, 0x0, 0x0, 0x0, 0x48000000) close(r1) 2018/05/26 13:23:49 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty=0x18, [0x0, 0x0, 0x0, 0x0, 0xf4080b0000000000]}, 0x10) 2018/05/26 13:23:49 executing program 6: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf000000]}, 0x2c) 2018/05/26 13:23:49 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty=0x18, [0x0, 0x0, 0x0, 0x0, 0x4002000000000000]}, 0x10) [ 1149.761621] FAULT_INJECTION: forcing a failure. [ 1149.761621] name failslab, interval 1, probability 0, space 0, times 0 [ 1149.772964] CPU: 1 PID: 1298 Comm: syz-executor7 Not tainted 4.17.0-rc6+ #68 [ 1149.780155] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1149.789507] Call Trace: [ 1149.792104] dump_stack+0x1b9/0x294 [ 1149.795742] ? dump_stack_print_info.cold.2+0x52/0x52 [ 1149.800950] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 1149.806150] should_fail.cold.4+0xa/0x1a 2018/05/26 13:23:50 executing program 6: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd00]}, 0x2c) [ 1149.810221] ? is_bpf_text_address+0xd7/0x170 [ 1149.814725] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1149.819841] ? unwind_get_return_address+0x61/0xa0 [ 1149.824779] ? __save_stack_trace+0x7e/0xd0 [ 1149.829627] ? graph_lock+0x170/0x170 [ 1149.833447] ? find_held_lock+0x36/0x1c0 [ 1149.837520] ? __lock_is_held+0xb5/0x140 [ 1149.841599] ? check_same_owner+0x320/0x320 [ 1149.845935] ? rcu_note_context_switch+0x710/0x710 [ 1149.850876] __should_failslab+0x124/0x180 [ 1149.855141] should_failslab+0x9/0x14 [ 1149.858948] kmem_cache_alloc_trace+0x2cb/0x780 [ 1149.863624] ? __kmalloc_node+0x33/0x70 [ 1149.867605] ? __kmalloc_node+0x33/0x70 [ 1149.871584] ? rcu_read_lock_sched_held+0x108/0x120 [ 1149.876614] __memcg_init_list_lru_node+0x17d/0x2c0 [ 1149.881637] ? kvfree_rcu+0x20/0x20 [ 1149.885269] ? __kmalloc_node+0x47/0x70 [ 1149.889250] __list_lru_init+0x456/0x790 [ 1149.893320] ? list_lru_destroy+0x4c0/0x4c0 [ 1149.897654] ? mark_held_locks+0xc9/0x160 [ 1149.901815] ? __raw_spin_lock_init+0x1c/0x100 [ 1149.906407] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 1149.911427] ? __lockdep_init_map+0x105/0x590 [ 1149.915934] ? lockdep_init_map+0x9/0x10 [ 1149.920005] sget_userns+0x73a/0xf00 [ 1149.923725] ? get_anon_bdev+0x2f0/0x2f0 [ 1149.927806] ? destroy_unused_super.part.11+0x110/0x110 [ 1149.933178] ? __alloc_pages_nodemask+0xacf/0xd70 [ 1149.938029] ? __alloc_pages_slowpath+0x2db0/0x2db0 [ 1149.943052] ? kasan_check_read+0x11/0x20 [ 1149.947212] ? cap_capable+0x1f9/0x260 [ 1149.951111] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1149.956655] ? security_capable+0x99/0xc0 [ 1149.960814] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1149.966356] ? ns_capable_common+0x13f/0x170 [ 1149.970769] ? get_anon_bdev+0x2f0/0x2f0 [ 1149.974834] sget+0x10b/0x150 [ 1149.977947] ? fuse_get_root_inode+0x190/0x190 [ 1149.982532] mount_nodev+0x33/0x110 [ 1149.986163] fuse_mount+0x2c/0x40 [ 1149.989617] mount_fs+0xae/0x328 [ 1149.992989] vfs_kern_mount.part.34+0xd4/0x4d0 [ 1149.997576] ? may_umount+0xb0/0xb0 [ 1150.001208] ? _raw_read_unlock+0x22/0x30 [ 1150.005357] ? __get_fs_type+0x97/0xc0 [ 1150.009257] do_mount+0x564/0x3070 [ 1150.012815] ? do_raw_spin_unlock+0x9e/0x2e0 [ 1150.017231] ? copy_mount_string+0x40/0x40 [ 1150.021477] ? rcu_pm_notify+0xc0/0xc0 [ 1150.025378] ? copy_mount_options+0x5f/0x380 [ 1150.029791] ? rcu_read_lock_sched_held+0x108/0x120 [ 1150.034815] ? kmem_cache_alloc_trace+0x616/0x780 [ 1150.039666] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1150.045213] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1150.050755] ? copy_mount_options+0x285/0x380 [ 1150.055262] ksys_mount+0x12d/0x140 [ 1150.058904] __x64_sys_mount+0xbe/0x150 [ 1150.062889] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 1150.067919] do_syscall_64+0x1b1/0x800 [ 1150.071812] ? finish_task_switch+0x1ca/0x840 [ 1150.076312] ? syscall_return_slowpath+0x5c0/0x5c0 [ 1150.081248] ? syscall_return_slowpath+0x30f/0x5c0 [ 1150.086188] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 1150.091562] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1150.096415] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1150.101602] RIP: 0033:0x455a09 [ 1150.104792] RSP: 002b:00007f118944d808 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 2018/05/26 13:23:50 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty=0x18, [0x0, 0x0, 0x0, 0x0, 0x1100000000000000]}, 0x10) 2018/05/26 13:23:50 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)="766574683100000000ffffffffffef00", 0x22b) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4002]}, 0x10) 2018/05/26 13:23:50 executing program 6: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5303]}, 0x2c) 2018/05/26 13:23:50 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty=0x18, [0x0, 0x0, 0x0, 0x0, 0x120000]}, 0x10) 2018/05/26 13:23:50 executing program 6: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00]}, 0x2c) [ 1150.112507] RAX: ffffffffffffffda RBX: 0000000000000016 RCX: 0000000000455a09 [ 1150.119776] RDX: 00000000004c1eb6 RSI: 0000000020000240 RDI: 00000000004de0c5 [ 1150.127044] RBP: 0000000000000000 R08: 00007f118944d820 R09: 0000000000000000 [ 1150.134327] R10: 0000000048000000 R11: 0000000000000246 R12: 0000000000000000 [ 1150.141591] R13: 0000000020000240 R14: 0000000048000000 R15: 0000000000000000 [ 1150.196707] TCP: out of memory -- consider tuning tcp_mem [ 1150.210568] TCP: out of memory -- consider tuning tcp_mem [ 1150.575073] sctp: sctp_transport_update_pmtu: Reported pmtu 72 too low, using default minimum of 512 [ 1150.718558] sctp: sctp_transport_update_pmtu: Reported pmtu 72 too low, using default minimum of 512 2018/05/26 13:23:51 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty=0x18, [0x0, 0x0, 0x0, 0x0, 0xe000000]}, 0x10) 2018/05/26 13:23:51 executing program 6: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc]}, 0x2c) 2018/05/26 13:23:51 executing program 7 (fault-call:9 fault-nth:17): r0 = getpid() sched_setattr(r0, &(0x7f00000000c0), 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}}) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) syz_fuse_mount(&(0x7f0000000240)='./control\x00', 0x406000, 0x0, 0x0, 0x0, 0x48000000) close(r1) 2018/05/26 13:23:51 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)="766574683100000000ffffffffffef00", 0x22b) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff]}, 0x10) 2018/05/26 13:23:51 executing program 4: r0 = getpid() sched_setattr(r0, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x0, 0x4}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000f86000)='./control/file0\x00') syz_fuse_mount(&(0x7f0000000240)='./control\x00', 0x406000, 0x0, 0x0, 0x0, 0x1000000000000) syz_fuseblk_mount(&(0x7f0000000140)='./control\x00', &(0x7f0000000180)='./control/file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) close(r1) 2018/05/26 13:23:51 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x200000000000000, 0x0, 0x0, 0x0, 0x0, 0xc00]}, 0x2c) 2018/05/26 13:23:51 executing program 1: r0 = socket$inet(0x2, 0x5, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vcan0\x00', 0x10) sendmsg(r0, &(0x7f0000000480)={&(0x7f0000000140)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000380)="f0", 0x1}], 0x1}, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000a00)={@multicast1=0xe0000001, @local={0xac, 0x14, 0x14, 0xaa}}, 0xc) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000040)="84", 0x5}], 0x1, &(0x7f0000000540)}, 0x0) 2018/05/26 13:23:51 executing program 2: r0 = getpid() sched_setattr(r0, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x0, 0x4}, 0x0) mkdir(&(0x7f00000001c0)='./control/file0\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = dup2(0xffffffffffffffff, 0xffffffffffffff9c) r2 = open$dir(&(0x7f0000000040)='./control/file1\x00', 0x100, 0x40) fanotify_mark(r1, 0x1, 0x2, r2, &(0x7f0000000080)='./control/file0\x00') r3 = userfaultfd(0x100000000000) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r4 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) time(&(0x7f0000000100)) write$sndseq(r4, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000f86000)='./control/file0\x00') write$binfmt_aout(r3, &(0x7f0000000380)=ANY=[@ANYBLOB="cf01ff9201030000bd03000047cb0000890200000500000000000000000000005c2de7d1e58f46f3f2912ff221d15f87f572071c6b2886f1af07728edb73140204ec72e8558a60afde54b840c8619911501b1c6c63ba82709da1230af679493d6a60ef959d4a7da87ec92a0ea1f9749e0d8067f9865ed79b43d92028219ed70d3f574559533b8ce4c953ea78f6e12535746272c16095ee6e6437fc636fe797909a3237d1f9122dfcacbdf4a1ed529feaabe72685bd510b9e11a5a167558a60df00cc1a0385ccda0eaa08ef38b1939eaa4f826852bcfeab0572cdf4ba1cf04ca7c90ad024938beb1dd637225e03d2a0916ff07ba84535"], 0xdd) rmdir(&(0x7f00000000c0)='./control\x00') syz_fuse_mount(&(0x7f0000000240)='./control\x00', 0x406000, 0x0, 0x0, 0x0, 0x0) syz_fuseblk_mount(&(0x7f0000000140)='./control\x00', &(0x7f0000000180)='./control/file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) close(r3) [ 1150.890773] FAULT_INJECTION: forcing a failure. [ 1150.890773] name failslab, interval 1, probability 0, space 0, times 0 [ 1150.902127] CPU: 0 PID: 1344 Comm: syz-executor7 Not tainted 4.17.0-rc6+ #68 [ 1150.909329] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1150.918681] Call Trace: [ 1150.921283] dump_stack+0x1b9/0x294 [ 1150.924926] ? dump_stack_print_info.cold.2+0x52/0x52 [ 1150.930126] ? __save_stack_trace+0x7e/0xd0 [ 1150.934460] should_fail.cold.4+0xa/0x1a [ 1150.938148] TCP: out of memory -- consider tuning tcp_mem [ 1150.938527] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1150.938547] ? save_stack+0x43/0xd0 [ 1150.938563] ? kasan_kmalloc+0xc4/0xe0 [ 1150.938579] ? kmem_cache_alloc_trace+0x152/0x780 [ 1150.938593] ? __memcg_init_list_lru_node+0x17d/0x2c0 [ 1150.938608] ? __list_lru_init+0x456/0x790 [ 1150.970934] ? sget_userns+0x73a/0xf00 [ 1150.974832] ? graph_lock+0x170/0x170 [ 1150.978637] ? vfs_kern_mount.part.34+0xd4/0x4d0 [ 1150.983400] ? do_mount+0x564/0x3070 [ 1150.987121] ? ksys_mount+0x12d/0x140 2018/05/26 13:23:51 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)="766574683100000000ffffffffffef00", 0x22b) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x8844080000000000]}, 0x10) 2018/05/26 13:23:51 executing program 6: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000]}, 0x2c) [ 1150.990937] ? __x64_sys_mount+0xbe/0x150 [ 1150.995101] ? do_syscall_64+0x1b1/0x800 [ 1150.999172] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1151.004546] ? find_held_lock+0x36/0x1c0 [ 1151.008615] ? __lock_is_held+0xb5/0x140 [ 1151.012678] ? br_multicast_add_port+0x140/0x2a0 [ 1151.017447] ? check_same_owner+0x320/0x320 [ 1151.021780] ? rcu_note_context_switch+0x710/0x710 [ 1151.026722] __should_failslab+0x124/0x180 [ 1151.030968] should_failslab+0x9/0x14 [ 1151.034771] kmem_cache_alloc_trace+0x2cb/0x780 2018/05/26 13:23:51 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)="766574683100000000ffffffffffef00", 0x22b) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x8244080000000000]}, 0x10) 2018/05/26 13:23:51 executing program 6: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x52070000]}, 0x2c) [ 1151.039442] ? __kmalloc_node+0x33/0x70 [ 1151.043423] ? __kmalloc_node+0x33/0x70 [ 1151.047403] ? rcu_read_lock_sched_held+0x108/0x120 [ 1151.052428] __memcg_init_list_lru_node+0x17d/0x2c0 [ 1151.057448] ? kvfree_rcu+0x20/0x20 [ 1151.061081] ? __kmalloc_node+0x47/0x70 [ 1151.065062] __list_lru_init+0x456/0x790 [ 1151.069125] ? list_lru_destroy+0x4c0/0x4c0 [ 1151.073450] ? mark_held_locks+0xc9/0x160 [ 1151.077604] ? __raw_spin_lock_init+0x1c/0x100 [ 1151.082194] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 1151.087218] ? __lockdep_init_map+0x105/0x590 [ 1151.091720] ? lockdep_init_map+0x9/0x10 [ 1151.095788] sget_userns+0x73a/0xf00 [ 1151.099505] ? get_anon_bdev+0x2f0/0x2f0 [ 1151.103578] ? destroy_unused_super.part.11+0x110/0x110 [ 1151.108942] ? __alloc_pages_nodemask+0xacf/0xd70 [ 1151.113793] ? __alloc_pages_slowpath+0x2db0/0x2db0 [ 1151.118816] ? kasan_check_read+0x11/0x20 [ 1151.122971] ? cap_capable+0x1f9/0x260 [ 1151.126872] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1151.132409] ? security_capable+0x99/0xc0 [ 1151.136564] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 2018/05/26 13:23:51 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)="766574683100000000ffffffffffef00", 0x22b) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0xa00000000000000]}, 0x10) 2018/05/26 13:23:51 executing program 6: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800300]}, 0x2c) [ 1151.142107] ? ns_capable_common+0x13f/0x170 [ 1151.146519] ? get_anon_bdev+0x2f0/0x2f0 [ 1151.150580] sget+0x10b/0x150 [ 1151.153692] ? fuse_get_root_inode+0x190/0x190 [ 1151.158285] mount_nodev+0x33/0x110 [ 1151.161919] fuse_mount+0x2c/0x40 [ 1151.165379] mount_fs+0xae/0x328 [ 1151.168753] vfs_kern_mount.part.34+0xd4/0x4d0 [ 1151.173341] ? may_umount+0xb0/0xb0 [ 1151.176972] ? _raw_read_unlock+0x22/0x30 [ 1151.181120] ? __get_fs_type+0x97/0xc0 [ 1151.185013] do_mount+0x564/0x3070 2018/05/26 13:23:51 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)="766574683100000000ffffffffffef00", 0x22b) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x83440800]}, 0x10) [ 1151.188565] ? copy_mount_string+0x40/0x40 [ 1151.192809] ? rcu_pm_notify+0xc0/0xc0 [ 1151.196703] ? copy_mount_options+0x5f/0x380 [ 1151.201115] ? rcu_read_lock_sched_held+0x108/0x120 [ 1151.206141] ? kmem_cache_alloc_trace+0x616/0x780 [ 1151.210996] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1151.216542] ? _copy_from_user+0xdf/0x150 [ 1151.220705] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1151.226245] ? copy_mount_options+0x285/0x380 [ 1151.230751] ksys_mount+0x12d/0x140 [ 1151.234380] __x64_sys_mount+0xbe/0x150 2018/05/26 13:23:51 executing program 6: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300]}, 0x2c) [ 1151.238353] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 1151.243378] do_syscall_64+0x1b1/0x800 [ 1151.247272] ? finish_task_switch+0x1ca/0x840 [ 1151.251778] ? syscall_return_slowpath+0x5c0/0x5c0 [ 1151.256713] ? syscall_return_slowpath+0x30f/0x5c0 [ 1151.261649] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 1151.267018] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1151.271876] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1151.277062] RIP: 0033:0x455a09 [ 1151.280250] RSP: 002b:00007f118944d808 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1151.287966] RAX: ffffffffffffffda RBX: 0000000000000016 RCX: 0000000000455a09 [ 1151.295231] RDX: 00000000004c1eb6 RSI: 0000000020000240 RDI: 00000000004de0c5 [ 1151.302498] RBP: 0000000000000000 R08: 00007f118944d820 R09: 0000000000000000 [ 1151.309764] R10: 0000000048000000 R11: 0000000000000246 R12: 0000000000000000 [ 1151.317035] R13: 0000000020000240 R14: 0000000048000000 R15: 0000000000000000 [ 1151.695059] sctp: sctp_transport_update_pmtu: Reported pmtu 72 too low, using default minimum of 512 [ 1151.839589] sctp: sctp_transport_update_pmtu: Reported pmtu 72 too low, using default minimum of 512 2018/05/26 13:23:52 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)="766574683100000000ffffffffffef00", 0x22b) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x80550000]}, 0x10) 2018/05/26 13:23:52 executing program 2: r0 = getpid() sched_setattr(r0, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x0, 0x4}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000f86000)='./control/file0\x00') rmdir(&(0x7f00000000c0)='./control\x00') syz_fuse_mount(&(0x7f0000000240)='./control\x00', 0x406000, 0x0, 0x0, 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000280)={{{@in6=@loopback, @in6}}, {{@in6}, 0x0, @in=@loopback}}, &(0x7f0000000040)=0xe8) lstat(&(0x7f0000000080)='./control\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuseblk_mount(&(0x7f0000000140)='./control\x00', &(0x7f0000000180)='./control\x00', 0xa003, r3, 0x0, 0x0, 0x0, 0x0) close(r1) 2018/05/26 13:23:52 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty=0x18, [0x0, 0x0, 0x0, 0x0, 0x240]}, 0x10) 2018/05/26 13:23:52 executing program 6: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000000]}, 0x2c) 2018/05/26 13:23:52 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0xb000000, 0x0, 0x0, 0x0, 0x0, 0xc00]}, 0x2c) 2018/05/26 13:23:52 executing program 7 (fault-call:9 fault-nth:18): r0 = getpid() sched_setattr(r0, &(0x7f00000000c0), 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}}) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) syz_fuse_mount(&(0x7f0000000240)='./control\x00', 0x406000, 0x0, 0x0, 0x0, 0x48000000) close(r1) 2018/05/26 13:23:52 executing program 1: r0 = socket$inet(0x2, 0x5, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vcan0\x00', 0x10) sendmsg(r0, &(0x7f0000000480)={&(0x7f0000000140)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000380)="f0", 0x1}], 0x1}, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000a00)={@multicast1=0xe0000001, @local={0xac, 0x14, 0x14, 0xaa}}, 0xc) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000040)="84", 0x68}], 0x1, &(0x7f0000000540)}, 0x0) 2018/05/26 13:23:52 executing program 4: r0 = getpid() sched_setattr(r0, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x0, 0x4}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000f86000)='./control/file0\x00') syz_fuse_mount(&(0x7f0000000240)='./control\x00', 0x406000, 0x0, 0x0, 0x0, 0x5000000) syz_fuseblk_mount(&(0x7f0000000140)='./control\x00', &(0x7f0000000180)='./control/file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) close(r1) 2018/05/26 13:23:52 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty=0x18, [0x0, 0x0, 0x0, 0x0, 0xe803000000000000]}, 0x10) [ 1152.026236] FAULT_INJECTION: forcing a failure. [ 1152.026236] name failslab, interval 1, probability 0, space 0, times 0 [ 1152.037648] CPU: 1 PID: 1410 Comm: syz-executor7 Not tainted 4.17.0-rc6+ #68 [ 1152.044842] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1152.054202] Call Trace: [ 1152.056798] dump_stack+0x1b9/0x294 [ 1152.060439] ? dump_stack_print_info.cold.2+0x52/0x52 [ 1152.065643] ? __save_stack_trace+0x7e/0xd0 [ 1152.069977] should_fail.cold.4+0xa/0x1a 2018/05/26 13:23:52 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0xf000000, 0x0, 0x0, 0x0, 0x0, 0xc00]}, 0x2c) [ 1152.074052] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1152.079168] ? save_stack+0x43/0xd0 [ 1152.082810] ? kasan_kmalloc+0xc4/0xe0 [ 1152.086706] ? kmem_cache_alloc_trace+0x152/0x780 [ 1152.091563] ? __memcg_init_list_lru_node+0x17d/0x2c0 [ 1152.096763] ? __list_lru_init+0x456/0x790 [ 1152.101006] ? sget_userns+0x73a/0xf00 [ 1152.104901] ? graph_lock+0x170/0x170 [ 1152.108708] ? vfs_kern_mount.part.34+0xd4/0x4d0 [ 1152.113476] ? do_mount+0x564/0x3070 [ 1152.117197] ? ksys_mount+0x12d/0x140 [ 1152.121005] ? __x64_sys_mount+0xbe/0x150 [ 1152.125159] ? do_syscall_64+0x1b1/0x800 [ 1152.129227] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1152.134598] ? find_held_lock+0x36/0x1c0 [ 1152.138672] ? __lock_is_held+0xb5/0x140 [ 1152.142758] ? check_same_owner+0x320/0x320 [ 1152.147091] ? rcu_note_context_switch+0x710/0x710 [ 1152.152031] __should_failslab+0x124/0x180 [ 1152.156273] should_failslab+0x9/0x14 [ 1152.160078] kmem_cache_alloc_trace+0x2cb/0x780 [ 1152.164756] ? __kmalloc_node+0x33/0x70 [ 1152.168746] ? __kmalloc_node+0x33/0x70 [ 1152.172737] ? rcu_read_lock_sched_held+0x108/0x120 [ 1152.177767] __memcg_init_list_lru_node+0x17d/0x2c0 [ 1152.182789] ? kvfree_rcu+0x20/0x20 [ 1152.186421] ? __kmalloc_node+0x47/0x70 [ 1152.190409] __list_lru_init+0x456/0x790 [ 1152.194484] ? list_lru_destroy+0x4c0/0x4c0 [ 1152.198812] ? mark_held_locks+0xc9/0x160 [ 1152.202971] ? __raw_spin_lock_init+0x1c/0x100 [ 1152.207553] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 1152.212568] ? __lockdep_init_map+0x105/0x590 [ 1152.217070] ? lockdep_init_map+0x9/0x10 [ 1152.221143] sget_userns+0x73a/0xf00 [ 1152.224860] ? get_anon_bdev+0x2f0/0x2f0 [ 1152.228932] ? destroy_unused_super.part.11+0x110/0x110 [ 1152.234300] ? __alloc_pages_nodemask+0xacf/0xd70 [ 1152.239154] ? __alloc_pages_slowpath+0x2db0/0x2db0 [ 1152.244185] ? kasan_check_read+0x11/0x20 [ 1152.248343] ? cap_capable+0x1f9/0x260 [ 1152.252243] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1152.258449] ? security_capable+0x99/0xc0 [ 1152.262608] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1152.268152] ? ns_capable_common+0x13f/0x170 [ 1152.272572] ? get_anon_bdev+0x2f0/0x2f0 [ 1152.278465] sget+0x10b/0x150 [ 1152.281581] ? fuse_get_root_inode+0x190/0x190 [ 1152.286170] mount_nodev+0x33/0x110 [ 1152.289797] fuse_mount+0x2c/0x40 [ 1152.293250] mount_fs+0xae/0x328 [ 1152.296629] vfs_kern_mount.part.34+0xd4/0x4d0 [ 1152.301216] ? may_umount+0xb0/0xb0 [ 1152.304848] ? _raw_read_unlock+0x22/0x30 [ 1152.308999] ? __get_fs_type+0x97/0xc0 [ 1152.312887] do_mount+0x564/0x3070 [ 1152.316429] ? copy_mount_string+0x40/0x40 [ 1152.320667] ? rcu_pm_notify+0xc0/0xc0 [ 1152.324565] ? copy_mount_options+0x5f/0x380 [ 1152.328976] ? rcu_read_lock_sched_held+0x108/0x120 [ 1152.333997] ? kmem_cache_alloc_trace+0x616/0x780 [ 1152.338845] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1152.344385] ? _copy_from_user+0xdf/0x150 [ 1152.348544] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1152.354084] ? copy_mount_options+0x285/0x380 [ 1152.358583] ksys_mount+0x12d/0x140 [ 1152.362219] __x64_sys_mount+0xbe/0x150 [ 1152.366197] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 1152.371222] do_syscall_64+0x1b1/0x800 [ 1152.375114] ? finish_task_switch+0x1ca/0x840 [ 1152.379620] ? syscall_return_slowpath+0x5c0/0x5c0 [ 1152.384558] ? syscall_return_slowpath+0x30f/0x5c0 [ 1152.389502] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 1152.394881] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1152.399737] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1152.404923] RIP: 0033:0x455a09 [ 1152.408128] RSP: 002b:00007f118944d808 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1152.415872] RAX: ffffffffffffffda RBX: 0000000000000016 RCX: 0000000000455a09 2018/05/26 13:23:52 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)="766574683100000000ffffffffffef00", 0x22b) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x1100]}, 0x10) 2018/05/26 13:23:52 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty=0x18, [0x0, 0x0, 0x0, 0x0, 0x7000000]}, 0x10) 2018/05/26 13:23:52 executing program 6: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x2c) 2018/05/26 13:23:52 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty=0x18, [0x0, 0x0, 0x0, 0x0, 0x34000000]}, 0x10) 2018/05/26 13:23:52 executing program 6: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11000000]}, 0x2c) 2018/05/26 13:23:52 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)="766574683100000000ffffffffffef00", 0x22b) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0xc800]}, 0x10) 2018/05/26 13:23:52 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty=0x18, [0x0, 0x0, 0x0, 0x0, 0xe00]}, 0x10) [ 1152.423142] RDX: 00000000004c1eb6 RSI: 0000000020000240 RDI: 00000000004de0c5 [ 1152.430408] RBP: 0000000000000000 R08: 00007f118944d820 R09: 0000000000000000 [ 1152.437681] R10: 0000000048000000 R11: 0000000000000246 R12: 0000000000000000 [ 1152.444953] R13: 0000000020000240 R14: 0000000048000000 R15: 0000000000000000 [ 1152.830966] sctp: sctp_transport_update_pmtu: Reported pmtu 72 too low, using default minimum of 512 [ 1152.974711] sctp: sctp_transport_update_pmtu: Reported pmtu 72 too low, using default minimum of 512 2018/05/26 13:23:53 executing program 6: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000]}, 0x2c) 2018/05/26 13:23:53 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)="766574683100000000ffffffffffef00", 0x22b) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x84477]}, 0x10) 2018/05/26 13:23:53 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty=0x18, [0x0, 0x0, 0x0, 0x0, 0xa00]}, 0x10) 2018/05/26 13:23:53 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0xe000, 0x0, 0x0, 0x0, 0xc00]}, 0x2c) 2018/05/26 13:23:53 executing program 4: r0 = getpid() sched_setattr(r0, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x0, 0x4}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000f86000)='./control/file0\x00') syz_fuse_mount(&(0x7f0000000240)='./control\x00', 0x406000, 0x0, 0x0, 0x0, 0xe190100) syz_fuseblk_mount(&(0x7f0000000140)='./control\x00', &(0x7f0000000180)='./control/file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) close(r1) 2018/05/26 13:23:53 executing program 1: r0 = socket$inet(0x2, 0x5, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vcan0\x00', 0x10) sendmsg(r0, &(0x7f0000000480)={&(0x7f0000000140)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000380)="f0", 0x1}], 0x1}, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000a00)={@multicast1=0xe0000001, @local={0xac, 0x14, 0x14, 0xaa}}, 0xc) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000040)="84", 0x33c00}], 0x1, &(0x7f0000000540)}, 0x0) 2018/05/26 13:23:53 executing program 2: r0 = getpid() sched_setattr(r0, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x0, 0x4}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000f86000)='./control/file0\x00') syz_open_procfs$namespace(r0, &(0x7f0000000040)='ns/user\x00') rmdir(&(0x7f00000000c0)='./control\x00') syz_fuse_mount(&(0x7f0000000240)='./control\x00', 0x406000, 0x0, 0x0, 0x0, 0x0) close(r1) 2018/05/26 13:23:53 executing program 7 (fault-call:9 fault-nth:19): r0 = getpid() sched_setattr(r0, &(0x7f00000000c0), 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}}) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) syz_fuse_mount(&(0x7f0000000240)='./control\x00', 0x406000, 0x0, 0x0, 0x0, 0x48000000) close(r1) [ 1153.112822] device bridge_slave_1 left promiscuous mode [ 1153.118466] bridge0: port 2(bridge_slave_1) entered disabled state [ 1153.150838] FAULT_INJECTION: forcing a failure. [ 1153.150838] name failslab, interval 1, probability 0, space 0, times 0 [ 1153.162202] CPU: 0 PID: 1472 Comm: syz-executor7 Not tainted 4.17.0-rc6+ #68 [ 1153.169398] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1153.178749] Call Trace: [ 1153.181350] dump_stack+0x1b9/0x294 [ 1153.184996] ? dump_stack_print_info.cold.2+0x52/0x52 [ 1153.190198] ? __save_stack_trace+0x7e/0xd0 [ 1153.194535] should_fail.cold.4+0xa/0x1a [ 1153.198605] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1153.203720] ? save_stack+0x43/0xd0 [ 1153.207355] ? kasan_kmalloc+0xc4/0xe0 [ 1153.211248] ? kmem_cache_alloc_trace+0x152/0x780 [ 1153.216097] ? __memcg_init_list_lru_node+0x17d/0x2c0 [ 1153.221290] ? __list_lru_init+0x456/0x790 [ 1153.225537] ? sget_userns+0x73a/0xf00 [ 1153.229438] ? graph_lock+0x170/0x170 [ 1153.233246] ? vfs_kern_mount.part.34+0xd4/0x4d0 [ 1153.238006] ? do_mount+0x564/0x3070 [ 1153.241726] ? ksys_mount+0x12d/0x140 [ 1153.245531] ? __x64_sys_mount+0xbe/0x150 [ 1153.249686] ? do_syscall_64+0x1b1/0x800 [ 1153.253751] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1153.259122] ? find_held_lock+0x36/0x1c0 [ 1153.263195] ? __lock_is_held+0xb5/0x140 [ 1153.267274] ? check_same_owner+0x320/0x320 [ 1153.271605] ? rcu_note_context_switch+0x710/0x710 [ 1153.276550] __should_failslab+0x124/0x180 [ 1153.280791] should_failslab+0x9/0x14 [ 1153.284595] kmem_cache_alloc_trace+0x2cb/0x780 [ 1153.289273] ? __kmalloc_node+0x33/0x70 [ 1153.293248] ? __kmalloc_node+0x33/0x70 [ 1153.297233] ? rcu_read_lock_sched_held+0x108/0x120 [ 1153.302257] __memcg_init_list_lru_node+0x17d/0x2c0 [ 1153.307282] ? kvfree_rcu+0x20/0x20 2018/05/26 13:23:53 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0xc00]}, 0x2c) 2018/05/26 13:23:53 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0xc00]}, 0x2c) [ 1153.310914] ? __kmalloc_node+0x47/0x70 [ 1153.314899] __list_lru_init+0x456/0x790 [ 1153.318968] ? list_lru_destroy+0x4c0/0x4c0 [ 1153.323291] ? mark_held_locks+0xc9/0x160 [ 1153.327442] ? __raw_spin_lock_init+0x1c/0x100 [ 1153.332051] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 1153.337074] ? __lockdep_init_map+0x105/0x590 [ 1153.341574] ? lockdep_init_map+0x9/0x10 [ 1153.345645] sget_userns+0x73a/0xf00 [ 1153.349355] ? get_anon_bdev+0x2f0/0x2f0 [ 1153.353423] ? destroy_unused_super.part.11+0x110/0x110 [ 1153.358791] ? __alloc_pages_nodemask+0xacf/0xd70 2018/05/26 13:23:53 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x3000000, 0x0, 0x0, 0x0, 0xc00]}, 0x2c) [ 1153.363644] ? __alloc_pages_slowpath+0x2db0/0x2db0 [ 1153.368674] ? kasan_check_read+0x11/0x20 [ 1153.372829] ? cap_capable+0x1f9/0x260 [ 1153.376718] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1153.382255] ? security_capable+0x99/0xc0 [ 1153.386407] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1153.391946] ? ns_capable_common+0x13f/0x170 [ 1153.396355] ? get_anon_bdev+0x2f0/0x2f0 [ 1153.400414] sget+0x10b/0x150 [ 1153.403528] ? fuse_get_root_inode+0x190/0x190 [ 1153.408115] mount_nodev+0x33/0x110 [ 1153.411754] fuse_mount+0x2c/0x40 [ 1153.415216] mount_fs+0xae/0x328 [ 1153.418591] vfs_kern_mount.part.34+0xd4/0x4d0 [ 1153.423690] ? may_umount+0xb0/0xb0 [ 1153.427317] ? _raw_read_unlock+0x22/0x30 [ 1153.431471] ? __get_fs_type+0x97/0xc0 [ 1153.435370] do_mount+0x564/0x3070 [ 1153.438912] ? copy_mount_string+0x40/0x40 [ 1153.443158] ? rcu_pm_notify+0xc0/0xc0 [ 1153.447049] ? copy_mount_options+0x5f/0x380 [ 1153.451459] ? rcu_read_lock_sched_held+0x108/0x120 [ 1153.456479] ? kmem_cache_alloc_trace+0x616/0x780 2018/05/26 13:23:53 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x1800, 0x0, 0x0, 0x0, 0xc00]}, 0x2c) [ 1153.461331] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1153.466873] ? _copy_from_user+0xdf/0x150 [ 1153.471033] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1153.476575] ? copy_mount_options+0x285/0x380 [ 1153.481077] ksys_mount+0x12d/0x140 [ 1153.484710] __x64_sys_mount+0xbe/0x150 [ 1153.488688] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 1153.493709] do_syscall_64+0x1b1/0x800 [ 1153.497601] ? finish_task_switch+0x1ca/0x840 [ 1153.502103] ? syscall_return_slowpath+0x5c0/0x5c0 [ 1153.507041] ? syscall_return_slowpath+0x30f/0x5c0 [ 1153.511987] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 1153.517366] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1153.522222] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1153.527412] RIP: 0033:0x455a09 [ 1153.530602] RSP: 002b:00007f118944d808 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1153.538309] RAX: ffffffffffffffda RBX: 0000000000000016 RCX: 0000000000455a09 [ 1153.545576] RDX: 00000000004c1eb6 RSI: 0000000020000240 RDI: 00000000004de0c5 [ 1153.552844] RBP: 0000000000000000 R08: 00007f118944d820 R09: 0000000000000000 2018/05/26 13:23:53 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xc00]}, 0x2c) [ 1153.560112] R10: 0000000048000000 R11: 0000000000000246 R12: 0000000000000000 [ 1153.567401] R13: 0000000020000240 R14: 0000000048000000 R15: 0000000000000000 [ 1153.594847] device bridge_slave_0 left promiscuous mode [ 1153.600492] bridge0: port 1(bridge_slave_0) entered disabled state 2018/05/26 13:23:53 executing program 6: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf]}, 0x2c) [ 1153.801639] team0 (unregistering): Port device team_slave_1 removed [ 1153.828001] team0 (unregistering): Port device team_slave_0 removed [ 1153.849331] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1153.868859] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1153.941838] bond0 (unregistering): Released all slaves [ 1153.953043] net_ratelimit: 10 callbacks suppressed [ 1153.953048] TCP: out of memory -- consider tuning tcp_mem [ 1154.029862] sctp: sctp_transport_update_pmtu: Reported pmtu 72 too low, using default minimum of 512 [ 1154.173830] sctp: sctp_transport_update_pmtu: Reported pmtu 72 too low, using default minimum of 512 [ 1154.962353] IPVS: ftp: loaded support on port[0] = 21 [ 1155.286405] bridge0: port 1(bridge_slave_0) entered blocking state [ 1155.292830] bridge0: port 1(bridge_slave_0) entered disabled state [ 1155.299912] device bridge_slave_0 entered promiscuous mode [ 1155.324553] bridge0: port 2(bridge_slave_1) entered blocking state [ 1155.330924] bridge0: port 2(bridge_slave_1) entered disabled state [ 1155.337939] device bridge_slave_1 entered promiscuous mode [ 1155.362694] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 1155.386180] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 1155.452120] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1155.477688] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1155.575761] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1155.582858] team0: Port device team_slave_0 added [ 1155.605895] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1155.612964] team0: Port device team_slave_1 added [ 1155.636234] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1155.660789] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1155.685464] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1155.709862] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1155.919586] bridge0: port 2(bridge_slave_1) entered blocking state [ 1155.925992] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1155.932635] bridge0: port 1(bridge_slave_0) entered blocking state [ 1155.938995] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1156.691363] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1156.766823] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1156.841536] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 1156.847742] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1156.854774] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1156.927732] 8021q: adding VLAN 0 to HW filter on device team0 2018/05/26 13:23:58 executing program 6: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10]}, 0x2c) 2018/05/26 13:23:58 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x6000, 0x0, 0x0, 0x0, 0xc00]}, 0x2c) 2018/05/26 13:23:58 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)="766574683100000000ffffffffffef00", 0x22b) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x8a44080000000000]}, 0x10) 2018/05/26 13:23:58 executing program 7 (fault-call:9 fault-nth:20): r0 = getpid() sched_setattr(r0, &(0x7f00000000c0), 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}}) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) syz_fuse_mount(&(0x7f0000000240)='./control\x00', 0x406000, 0x0, 0x0, 0x0, 0x48000000) close(r1) 2018/05/26 13:23:58 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty=0x18, [0x0, 0x0, 0x0, 0x0, 0x11]}, 0x10) 2018/05/26 13:23:58 executing program 2: r0 = getpid() sched_setattr(r0, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x0, 0x4}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x10) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) rmdir(&(0x7f0000000200)='./control/file0\x00') r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000f86000)='./control/file0\x00') rmdir(&(0x7f00000000c0)='./control\x00') r3 = syz_fuse_mount(&(0x7f0000000240)='./control\x00', 0x406000, 0x0, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000080)={0x0, 0x1, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x7}) syz_fuseblk_mount(&(0x7f0000000140)='./control\x00', &(0x7f0000000180)='./control/file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sigaltstack(&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)) close(r1) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000000, 0x6110, r3, 0x0) 2018/05/26 13:23:58 executing program 4: r0 = getpid() sched_setattr(r0, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x0, 0x4}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000f86000)='./control/file0\x00') syz_fuse_mount(&(0x7f0000000240)='./control\x00', 0x406000, 0x0, 0x0, 0x0, 0x1190d) syz_fuseblk_mount(&(0x7f0000000140)='./control\x00', &(0x7f0000000180)='./control/file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) close(r1) 2018/05/26 13:23:58 executing program 1: r0 = socket$inet(0x2, 0x5, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vcan0\x00', 0x10) sendmsg(r0, &(0x7f0000000480)={&(0x7f0000000140)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000380)="f0", 0x1}], 0x1}, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000a00)={@multicast1=0xe0000001, @local={0xac, 0x14, 0x14, 0xaa}}, 0xc) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000040)="84", 0x386}], 0x1, &(0x7f0000000540)}, 0x0) 2018/05/26 13:23:58 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty=0x18, [0x0, 0x0, 0x0, 0x0, 0x281400]}, 0x10) [ 1158.322577] FAULT_INJECTION: forcing a failure. [ 1158.322577] name failslab, interval 1, probability 0, space 0, times 0 [ 1158.333943] CPU: 1 PID: 1807 Comm: syz-executor7 Not tainted 4.17.0-rc6+ #68 [ 1158.341139] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1158.350494] Call Trace: [ 1158.353087] dump_stack+0x1b9/0x294 [ 1158.356722] ? dump_stack_print_info.cold.2+0x52/0x52 [ 1158.361919] ? __save_stack_trace+0x7e/0xd0 [ 1158.366258] should_fail.cold.4+0xa/0x1a 2018/05/26 13:23:58 executing program 6: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000]}, 0x2c) [ 1158.370326] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1158.375437] ? save_stack+0x43/0xd0 [ 1158.379071] ? kasan_kmalloc+0xc4/0xe0 [ 1158.382962] ? kmem_cache_alloc_trace+0x152/0x780 [ 1158.387812] ? __memcg_init_list_lru_node+0x17d/0x2c0 [ 1158.393007] ? __list_lru_init+0x456/0x790 [ 1158.397257] ? sget_userns+0x73a/0xf00 [ 1158.401152] ? graph_lock+0x170/0x170 [ 1158.404958] ? vfs_kern_mount.part.34+0xd4/0x4d0 [ 1158.409720] ? do_mount+0x564/0x3070 [ 1158.413442] ? ksys_mount+0x12d/0x140 [ 1158.417257] ? __x64_sys_mount+0xbe/0x150 [ 1158.421412] ? do_syscall_64+0x1b1/0x800 [ 1158.425483] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1158.430863] ? find_held_lock+0x36/0x1c0 [ 1158.434932] ? __lock_is_held+0xb5/0x140 [ 1158.439019] ? check_same_owner+0x320/0x320 [ 1158.443355] ? rcu_note_context_switch+0x710/0x710 [ 1158.448296] __should_failslab+0x124/0x180 [ 1158.452538] should_failslab+0x9/0x14 [ 1158.456347] kmem_cache_alloc_trace+0x2cb/0x780 [ 1158.461016] ? __kmalloc_node+0x33/0x70 [ 1158.464994] ? __kmalloc_node+0x33/0x70 [ 1158.468970] ? rcu_read_lock_sched_held+0x108/0x120 [ 1158.473999] __memcg_init_list_lru_node+0x17d/0x2c0 [ 1158.479025] ? kvfree_rcu+0x20/0x20 [ 1158.482660] ? __kmalloc_node+0x47/0x70 [ 1158.486645] __list_lru_init+0x456/0x790 [ 1158.490710] ? list_lru_destroy+0x4c0/0x4c0 [ 1158.495037] ? mark_held_locks+0xc9/0x160 [ 1158.499196] ? __raw_spin_lock_init+0x1c/0x100 [ 1158.503790] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 1158.508816] ? __lockdep_init_map+0x105/0x590 [ 1158.513321] ? lockdep_init_map+0x9/0x10 [ 1158.517386] sget_userns+0x73a/0xf00 [ 1158.521100] ? get_anon_bdev+0x2f0/0x2f0 [ 1158.525175] ? destroy_unused_super.part.11+0x110/0x110 [ 1158.530551] ? __alloc_pages_nodemask+0xacf/0xd70 [ 1158.535402] ? __alloc_pages_slowpath+0x2db0/0x2db0 [ 1158.540422] ? kasan_check_read+0x11/0x20 [ 1158.544573] ? cap_capable+0x1f9/0x260 [ 1158.548471] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1158.554011] ? security_capable+0x99/0xc0 [ 1158.558170] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1158.563704] ? ns_capable_common+0x13f/0x170 [ 1158.568117] ? get_anon_bdev+0x2f0/0x2f0 [ 1158.572181] sget+0x10b/0x150 [ 1158.575284] ? fuse_get_root_inode+0x190/0x190 [ 1158.579871] mount_nodev+0x33/0x110 [ 1158.583503] fuse_mount+0x2c/0x40 [ 1158.586960] mount_fs+0xae/0x328 [ 1158.590334] vfs_kern_mount.part.34+0xd4/0x4d0 [ 1158.594921] ? may_umount+0xb0/0xb0 [ 1158.598554] ? _raw_read_unlock+0x22/0x30 [ 1158.602702] ? __get_fs_type+0x97/0xc0 [ 1158.606598] do_mount+0x564/0x3070 [ 1158.610140] ? copy_mount_string+0x40/0x40 [ 1158.614375] ? rcu_pm_notify+0xc0/0xc0 [ 1158.618273] ? copy_mount_options+0x5f/0x380 [ 1158.622686] ? rcu_read_lock_sched_held+0x108/0x120 [ 1158.627707] ? kmem_cache_alloc_trace+0x616/0x780 [ 1158.632560] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1158.638102] ? _copy_from_user+0xdf/0x150 [ 1158.642265] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1158.647804] ? copy_mount_options+0x285/0x380 [ 1158.652307] ksys_mount+0x12d/0x140 [ 1158.655939] __x64_sys_mount+0xbe/0x150 [ 1158.659916] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 1158.664940] do_syscall_64+0x1b1/0x800 [ 1158.668829] ? finish_task_switch+0x1ca/0x840 [ 1158.673333] ? syscall_return_slowpath+0x5c0/0x5c0 [ 1158.678268] ? syscall_return_slowpath+0x30f/0x5c0 [ 1158.683205] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 1158.688583] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1158.693438] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1158.698627] RIP: 0033:0x455a09 [ 1158.701816] RSP: 002b:00007f118944d808 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1158.709526] RAX: ffffffffffffffda RBX: 0000000000000016 RCX: 0000000000455a09 2018/05/26 13:23:58 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty=0x18, [0x0, 0x0, 0x0, 0x0, 0x12000000000000]}, 0x10) 2018/05/26 13:23:58 executing program 6: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18000000]}, 0x2c) 2018/05/26 13:23:58 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty=0x18, [0x0, 0x0, 0x0, 0x0, 0x4002]}, 0x10) 2018/05/26 13:23:58 executing program 6: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1800]}, 0x2c) 2018/05/26 13:23:58 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xc00]}, 0x2c) 2018/05/26 13:23:58 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty=0x18, [0x0, 0x0, 0x0, 0x0, 0x700000000000000]}, 0x10) 2018/05/26 13:23:58 executing program 6: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe00]}, 0x2c) [ 1158.716795] RDX: 00000000004c1eb6 RSI: 0000000020000240 RDI: 00000000004de0c5 [ 1158.726236] RBP: 0000000000000000 R08: 00007f118944d820 R09: 0000000000000000 [ 1158.733505] R10: 0000000048000000 R11: 0000000000000246 R12: 0000000000000000 [ 1158.740777] R13: 0000000020000240 R14: 0000000048000000 R15: 0000000000000000 2018/05/26 13:23:59 executing program 7 (fault-call:9 fault-nth:21): r0 = getpid() sched_setattr(r0, &(0x7f00000000c0), 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}}) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) syz_fuse_mount(&(0x7f0000000240)='./control\x00', 0x406000, 0x0, 0x0, 0x0, 0x48000000) close(r1) 2018/05/26 13:23:59 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)="766574683100000000ffffffffffef00", 0x22b) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000]}, 0x10) [ 1158.831836] TCP: out of memory -- consider tuning tcp_mem [ 1158.889181] FAULT_INJECTION: forcing a failure. [ 1158.889181] name failslab, interval 1, probability 0, space 0, times 0 [ 1158.900540] CPU: 1 PID: 1848 Comm: syz-executor7 Not tainted 4.17.0-rc6+ #68 [ 1158.907734] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1158.917083] Call Trace: [ 1158.919682] dump_stack+0x1b9/0x294 [ 1158.923323] ? dump_stack_print_info.cold.2+0x52/0x52 [ 1158.928530] ? __save_stack_trace+0x7e/0xd0 [ 1158.932876] should_fail.cold.4+0xa/0x1a [ 1158.936949] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1158.942062] ? save_stack+0x43/0xd0 [ 1158.945697] ? kasan_kmalloc+0xc4/0xe0 [ 1158.949592] ? kmem_cache_alloc_trace+0x152/0x780 [ 1158.954440] ? __memcg_init_list_lru_node+0x17d/0x2c0 [ 1158.959630] ? __list_lru_init+0x456/0x790 [ 1158.963867] ? sget_userns+0x73a/0xf00 [ 1158.967759] ? graph_lock+0x170/0x170 [ 1158.967929] TCP: out of memory -- consider tuning tcp_mem [ 1158.971555] ? vfs_kern_mount.part.34+0xd4/0x4d0 [ 1158.971570] ? do_mount+0x564/0x3070 [ 1158.971584] ? ksys_mount+0x12d/0x140 [ 1158.971600] ? __x64_sys_mount+0xbe/0x150 [ 1158.971617] ? do_syscall_64+0x1b1/0x800 [ 1158.971633] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1158.971650] ? find_held_lock+0x36/0x1c0 [ 1158.971667] ? __lock_is_held+0xb5/0x140 [ 1158.977676] TCP: out of memory -- consider tuning tcp_mem [ 1158.981951] ? check_same_owner+0x320/0x320 [ 1158.981975] ? rcu_note_context_switch+0x710/0x710 [ 1158.981996] __should_failslab+0x124/0x180 [ 1158.982014] should_failslab+0x9/0x14 [ 1158.982030] kmem_cache_alloc_trace+0x2cb/0x780 [ 1158.982045] ? __kmalloc_node+0x33/0x70 [ 1158.982060] ? __kmalloc_node+0x33/0x70 [ 1158.982076] ? rcu_read_lock_sched_held+0x108/0x120 [ 1159.051434] __memcg_init_list_lru_node+0x17d/0x2c0 [ 1159.056441] ? kvfree_rcu+0x20/0x20 [ 1159.060059] ? __kmalloc_node+0x47/0x70 [ 1159.064027] __list_lru_init+0x456/0x790 [ 1159.068080] ? list_lru_destroy+0x4c0/0x4c0 [ 1159.072392] ? mark_held_locks+0xc9/0x160 [ 1159.076544] ? __raw_spin_lock_init+0x1c/0x100 [ 1159.081118] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 1159.086133] ? __lockdep_init_map+0x105/0x590 [ 1159.090620] ? lockdep_init_map+0x9/0x10 [ 1159.094667] sget_userns+0x73a/0xf00 [ 1159.098363] ? get_anon_bdev+0x2f0/0x2f0 [ 1159.098899] sctp: sctp_transport_update_pmtu: Reported pmtu 72 too low, using default minimum of 512 [ 1159.102420] ? destroy_unused_super.part.11+0x110/0x110 [ 1159.102436] ? __alloc_pages_nodemask+0xacf/0xd70 [ 1159.102456] ? __alloc_pages_slowpath+0x2db0/0x2db0 [ 1159.102476] ? kasan_check_read+0x11/0x20 [ 1159.102495] ? cap_capable+0x1f9/0x260 [ 1159.102515] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1159.102531] ? security_capable+0x99/0xc0 [ 1159.144568] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1159.150098] ? ns_capable_common+0x13f/0x170 [ 1159.154492] ? get_anon_bdev+0x2f0/0x2f0 [ 1159.158543] sget+0x10b/0x150 [ 1159.161643] ? fuse_get_root_inode+0x190/0x190 [ 1159.166222] mount_nodev+0x33/0x110 [ 1159.169842] fuse_mount+0x2c/0x40 [ 1159.173282] mount_fs+0xae/0x328 [ 1159.176635] vfs_kern_mount.part.34+0xd4/0x4d0 [ 1159.181217] ? may_umount+0xb0/0xb0 [ 1159.184837] ? _raw_read_unlock+0x22/0x30 [ 1159.188969] ? __get_fs_type+0x97/0xc0 [ 1159.192851] do_mount+0x564/0x3070 [ 1159.196391] ? copy_mount_string+0x40/0x40 [ 1159.200621] ? rcu_pm_notify+0xc0/0xc0 [ 1159.204515] ? copy_mount_options+0x5f/0x380 [ 1159.208916] ? rcu_read_lock_sched_held+0x108/0x120 [ 1159.213918] ? kmem_cache_alloc_trace+0x616/0x780 [ 1159.218761] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1159.224290] ? _copy_from_user+0xdf/0x150 [ 1159.228439] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1159.233980] ? copy_mount_options+0x285/0x380 [ 1159.238468] ksys_mount+0x12d/0x140 [ 1159.242079] __x64_sys_mount+0xbe/0x150 [ 1159.246048] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 1159.247435] sctp: sctp_transport_update_pmtu: Reported pmtu 72 too low, using default minimum of 512 [ 1159.251062] do_syscall_64+0x1b1/0x800 [ 1159.251080] ? finish_task_switch+0x1ca/0x840 [ 1159.251097] ? syscall_return_slowpath+0x5c0/0x5c0 [ 1159.251114] ? syscall_return_slowpath+0x30f/0x5c0 [ 1159.251134] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 1159.251153] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1159.251172] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1159.251188] RIP: 0033:0x455a09 [ 1159.297068] RSP: 002b:00007f118944d808 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1159.304777] RAX: ffffffffffffffda RBX: 0000000000000016 RCX: 0000000000455a09 [ 1159.312044] RDX: 00000000004c1eb6 RSI: 0000000020000240 RDI: 00000000004de0c5 [ 1159.319307] RBP: 0000000000000000 R08: 00007f118944d820 R09: 0000000000000000 [ 1159.326556] R10: 0000000048000000 R11: 0000000000000246 R12: 0000000000000000 [ 1159.333817] R13: 0000000020000240 R14: 0000000048000000 R15: 0000000000000000 2018/05/26 13:23:59 executing program 6: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700]}, 0x2c) 2018/05/26 13:23:59 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0xe00000000000000, 0x0, 0x0, 0x0, 0xc00]}, 0x2c) 2018/05/26 13:23:59 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)="766574683100000000ffffffffffef00", 0x22b) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000]}, 0x10) 2018/05/26 13:23:59 executing program 4: r0 = getpid() sched_setattr(r0, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x0, 0x4}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000f86000)='./control/file0\x00') syz_fuse_mount(&(0x7f0000000240)='./control\x00', 0x406000, 0x0, 0x0, 0x0, 0xc19010000000000) syz_fuseblk_mount(&(0x7f0000000140)='./control\x00', &(0x7f0000000180)='./control/file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) close(r1) 2018/05/26 13:23:59 executing program 2: r0 = getpid() sched_setattr(r0, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x0, 0x4}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) setsockopt$inet_sctp6_SCTP_NODELAY(r2, 0x84, 0x3, &(0x7f0000000040)=0x117, 0x4) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000100)={0x0, 0x946, 0x7, [0x3f, 0x80, 0x7fff, 0x7, 0x81, 0x3, 0x5]}, &(0x7f0000000280)=0x16) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f00000002c0)={r3, @in={{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x19}}}, 0xffffffffffffffc0}, &(0x7f0000000380)=0x90) unlink(&(0x7f0000f86000)='./control/file0\x00') rmdir(&(0x7f00000000c0)='./control\x00') syz_fuse_mount(&(0x7f0000000240)='./control\x00', 0x406000, 0x0, 0x0, 0x0, 0x0) syz_fuseblk_mount(&(0x7f0000000140)='./control\x00', &(0x7f0000000180)='./control/file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) close(r1) getpeername(r2, &(0x7f00000001c0)=@can, &(0x7f0000000080)=0x80) 2018/05/26 13:23:59 executing program 7 (fault-call:9 fault-nth:22): r0 = getpid() sched_setattr(r0, &(0x7f00000000c0), 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}}) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) syz_fuse_mount(&(0x7f0000000240)='./control\x00', 0x406000, 0x0, 0x0, 0x0, 0x48000000) close(r1) 2018/05/26 13:23:59 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty=0x18, [0x0, 0x0, 0x0, 0x0, 0xf4010000]}, 0x10) 2018/05/26 13:23:59 executing program 1: r0 = socket$inet(0x2, 0x5, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vcan0\x00', 0x10) sendmsg(r0, &(0x7f0000000480)={&(0x7f0000000140)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000380)="f0", 0x1}], 0x1}, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000a00)={@multicast1=0xe0000001, @local={0xac, 0x14, 0x14, 0xaa}}, 0xc) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000040)="84", 0xffffff50}], 0x1, &(0x7f0000000540)}, 0x0) [ 1159.491011] FAULT_INJECTION: forcing a failure. [ 1159.491011] name failslab, interval 1, probability 0, space 0, times 0 [ 1159.502442] CPU: 0 PID: 1876 Comm: syz-executor7 Not tainted 4.17.0-rc6+ #68 [ 1159.509632] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1159.518989] Call Trace: [ 1159.521586] dump_stack+0x1b9/0x294 [ 1159.523591] TCP: out of memory -- consider tuning tcp_mem [ 1159.525220] ? dump_stack_print_info.cold.2+0x52/0x52 [ 1159.525241] ? __save_stack_trace+0x7e/0xd0 [ 1159.525264] should_fail.cold.4+0xa/0x1a [ 1159.533559] TCP: out of memory -- consider tuning tcp_mem [ 1159.535973] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1159.535993] ? save_stack+0x43/0xd0 [ 1159.536010] ? kasan_kmalloc+0xc4/0xe0 [ 1159.536025] ? kmem_cache_alloc_trace+0x152/0x780 [ 1159.536042] ? __memcg_init_list_lru_node+0x17d/0x2c0 [ 1159.572498] ? __list_lru_init+0x456/0x790 [ 1159.576718] ? sget_userns+0x73a/0xf00 [ 1159.580587] ? graph_lock+0x170/0x170 [ 1159.584380] ? vfs_kern_mount.part.34+0xd4/0x4d0 [ 1159.589142] ? do_mount+0x564/0x3070 [ 1159.592857] ? ksys_mount+0x12d/0x140 [ 1159.596663] ? __x64_sys_mount+0xbe/0x150 [ 1159.600815] ? do_syscall_64+0x1b1/0x800 [ 1159.604886] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1159.610254] ? find_held_lock+0x36/0x1c0 [ 1159.614323] ? __lock_is_held+0xb5/0x140 [ 1159.618399] ? check_same_owner+0x320/0x320 [ 1159.622727] ? rcu_note_context_switch+0x710/0x710 [ 1159.627671] __should_failslab+0x124/0x180 [ 1159.631910] should_failslab+0x9/0x14 [ 1159.635716] kmem_cache_alloc_trace+0x2cb/0x780 [ 1159.640403] ? __kmalloc_node+0x33/0x70 [ 1159.644379] ? __kmalloc_node+0x33/0x70 [ 1159.648359] ? rcu_read_lock_sched_held+0x108/0x120 [ 1159.653384] __memcg_init_list_lru_node+0x17d/0x2c0 [ 1159.658409] ? kvfree_rcu+0x20/0x20 [ 1159.662045] ? __kmalloc_node+0x47/0x70 [ 1159.666028] __list_lru_init+0x456/0x790 [ 1159.670093] ? list_lru_destroy+0x4c0/0x4c0 [ 1159.673749] TCP: out of memory -- consider tuning tcp_mem [ 1159.674411] ? mark_held_locks+0xc9/0x160 [ 1159.674431] ? __raw_spin_lock_init+0x1c/0x100 2018/05/26 13:23:59 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)="766574683100000000ffffffffffef00", 0x22b) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x89440800]}, 0x10) 2018/05/26 13:23:59 executing program 6: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf00]}, 0x2c) 2018/05/26 13:23:59 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0xa80300, 0x0, 0x0, 0x0, 0xc00]}, 0x2c) 2018/05/26 13:23:59 executing program 6: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3a000]}, 0x2c) 2018/05/26 13:23:59 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)="766574683100000000ffffffffffef00", 0x22b) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00]}, 0x10) [ 1159.674447] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 1159.674463] ? __lockdep_init_map+0x105/0x590 [ 1159.674480] ? lockdep_init_map+0x9/0x10 [ 1159.674495] sget_userns+0x73a/0xf00 [ 1159.674510] ? get_anon_bdev+0x2f0/0x2f0 [ 1159.691079] TCP: out of memory -- consider tuning tcp_mem [ 1159.693746] ? destroy_unused_super.part.11+0x110/0x110 [ 1159.693763] ? __alloc_pages_nodemask+0xacf/0xd70 [ 1159.693784] ? __alloc_pages_slowpath+0x2db0/0x2db0 [ 1159.693803] ? kasan_check_read+0x11/0x20 [ 1159.693820] ? cap_capable+0x1f9/0x260 [ 1159.738794] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1159.744346] ? security_capable+0x99/0xc0 [ 1159.748506] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1159.754049] ? ns_capable_common+0x13f/0x170 [ 1159.758464] ? get_anon_bdev+0x2f0/0x2f0 [ 1159.762531] sget+0x10b/0x150 [ 1159.765647] ? fuse_get_root_inode+0x190/0x190 [ 1159.770236] mount_nodev+0x33/0x110 [ 1159.773867] fuse_mount+0x2c/0x40 [ 1159.777327] mount_fs+0xae/0x328 [ 1159.780696] vfs_kern_mount.part.34+0xd4/0x4d0 [ 1159.785282] ? may_umount+0xb0/0xb0 2018/05/26 13:24:00 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0xc00]}, 0x2c) [ 1159.788916] ? _raw_read_unlock+0x22/0x30 [ 1159.792379] TCP: out of memory -- consider tuning tcp_mem [ 1159.793063] ? __get_fs_type+0x97/0xc0 [ 1159.793083] do_mount+0x564/0x3070 [ 1159.793104] ? copy_mount_string+0x40/0x40 [ 1159.793120] ? rcu_pm_notify+0xc0/0xc0 [ 1159.793142] ? copy_mount_options+0x5f/0x380 [ 1159.793155] ? rcu_read_lock_sched_held+0x108/0x120 [ 1159.793172] ? kmem_cache_alloc_trace+0x616/0x780 [ 1159.808819] TCP: out of memory -- consider tuning tcp_mem [ 1159.810310] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1159.810328] ? _copy_from_user+0xdf/0x150 [ 1159.810349] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1159.810363] ? copy_mount_options+0x285/0x380 [ 1159.810382] ksys_mount+0x12d/0x140 [ 1159.810398] __x64_sys_mount+0xbe/0x150 [ 1159.810416] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 1159.866248] do_syscall_64+0x1b1/0x800 [ 1159.870139] ? syscall_slow_exit_work+0x4f0/0x4f0 [ 1159.874979] ? syscall_return_slowpath+0x5c0/0x5c0 [ 1159.879906] ? syscall_return_slowpath+0x30f/0x5c0 [ 1159.884843] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 1159.890213] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1159.895063] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1159.900248] RIP: 0033:0x455a09 [ 1159.903438] RSP: 002b:00007f118944d808 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1159.911149] RAX: ffffffffffffffda RBX: 0000000000000016 RCX: 0000000000455a09 [ 1159.918420] RDX: 00000000004c1eb6 RSI: 0000000020000240 RDI: 00000000004de0c5 [ 1159.925689] RBP: 0000000000000000 R08: 00007f118944d820 R09: 0000000000000000 [ 1159.932957] R10: 0000000048000000 R11: 0000000000000246 R12: 0000000000000000 [ 1159.940221] R13: 0000000020000240 R14: 0000000048000000 R15: 0000000000000000 2018/05/26 13:24:00 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)="766574683100000000ffffffffffef00", 0x22b) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x6f440800]}, 0x10) 2018/05/26 13:24:00 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x600000, 0x0, 0x0, 0x0, 0xc00]}, 0x2c) 2018/05/26 13:24:00 executing program 6: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}, 0x2c) 2018/05/26 13:24:00 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty=0x18, [0x0, 0x0, 0x0, 0x0, 0x5580]}, 0x10) 2018/05/26 13:24:00 executing program 7 (fault-call:9 fault-nth:23): r0 = getpid() sched_setattr(r0, &(0x7f00000000c0), 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}}) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) syz_fuse_mount(&(0x7f0000000240)='./control\x00', 0x406000, 0x0, 0x0, 0x0, 0x48000000) close(r1) 2018/05/26 13:24:00 executing program 4: r0 = getpid() sched_setattr(r0, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x0, 0x4}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000f86000)='./control/file0\x00') syz_fuse_mount(&(0x7f0000000240)='./control\x00', 0x406000, 0x0, 0x0, 0x0, 0x7000000) syz_fuseblk_mount(&(0x7f0000000140)='./control\x00', &(0x7f0000000180)='./control/file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) close(r1) 2018/05/26 13:24:00 executing program 1: r0 = socket$inet(0x2, 0x5, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vcan0\x00', 0x10) sendmsg(r0, &(0x7f0000000480)={&(0x7f0000000140)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000380)="f0", 0x1}], 0x1}, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000a00)={@multicast1=0xe0000001, @local={0xac, 0x14, 0x14, 0xaa}}, 0xc) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000040)="84", 0x25}], 0x1, &(0x7f0000000540)}, 0x0) 2018/05/26 13:24:00 executing program 2: r0 = getpid() sched_setattr(r0, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x0, 0x4}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000f86000)='./control/file0\x00') rmdir(&(0x7f00000000c0)='./control\x00') syz_fuse_mount(&(0x7f0000000240)='./control\x00', 0x406000, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x27, &(0x7f0000000040)=0x4, 0x4) syz_fuseblk_mount(&(0x7f0000000140)='./control\x00', &(0x7f0000000180)='./control/file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) close(r1) [ 1160.573187] FAULT_INJECTION: forcing a failure. [ 1160.573187] name failslab, interval 1, probability 0, space 0, times 0 [ 1160.584536] CPU: 0 PID: 1929 Comm: syz-executor7 Not tainted 4.17.0-rc6+ #68 [ 1160.591728] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1160.601086] Call Trace: [ 1160.603682] dump_stack+0x1b9/0x294 [ 1160.607328] ? dump_stack_print_info.cold.2+0x52/0x52 [ 1160.612525] ? __save_stack_trace+0x7e/0xd0 [ 1160.616856] should_fail.cold.4+0xa/0x1a 2018/05/26 13:24:00 executing program 6: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe00000000000000]}, 0x2c) 2018/05/26 13:24:00 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)="766574683100000000ffffffffffef00", 0x22b) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0xa00]}, 0x10) [ 1160.620930] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1160.626039] ? save_stack+0x43/0xd0 [ 1160.629675] ? kasan_kmalloc+0xc4/0xe0 [ 1160.631600] TCP: out of memory -- consider tuning tcp_mem [ 1160.633565] ? kmem_cache_alloc_trace+0x152/0x780 [ 1160.633588] ? __memcg_init_list_lru_node+0x17d/0x2c0 [ 1160.633602] ? __list_lru_init+0x456/0x790 [ 1160.633617] ? sget_userns+0x73a/0xf00 [ 1160.633633] ? graph_lock+0x170/0x170 [ 1160.633646] ? vfs_kern_mount.part.34+0xd4/0x4d0 [ 1160.633662] ? do_mount+0x564/0x3070 [ 1160.669524] ? ksys_mount+0x12d/0x140 [ 1160.673329] ? __x64_sys_mount+0xbe/0x150 [ 1160.677487] ? do_syscall_64+0x1b1/0x800 [ 1160.681557] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1160.686934] ? find_held_lock+0x36/0x1c0 [ 1160.691006] ? __lock_is_held+0xb5/0x140 [ 1160.695093] ? check_same_owner+0x320/0x320 [ 1160.699427] ? rcu_note_context_switch+0x710/0x710 [ 1160.704362] __should_failslab+0x124/0x180 [ 1160.708610] should_failslab+0x9/0x14 [ 1160.712415] kmem_cache_alloc_trace+0x2cb/0x780 [ 1160.717085] ? __kmalloc_node+0x33/0x70 2018/05/26 13:24:00 executing program 6: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb000000]}, 0x2c) 2018/05/26 13:24:00 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)="766574683100000000ffffffffffef00", 0x22b) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}, 0x10) [ 1160.721062] ? __kmalloc_node+0x33/0x70 [ 1160.725042] ? rcu_read_lock_sched_held+0x108/0x120 [ 1160.725833] TCP: out of memory -- consider tuning tcp_mem [ 1160.730061] __memcg_init_list_lru_node+0x17d/0x2c0 [ 1160.730077] ? kvfree_rcu+0x20/0x20 [ 1160.730092] ? __kmalloc_node+0x47/0x70 [ 1160.730112] __list_lru_init+0x456/0x790 [ 1160.730130] ? list_lru_destroy+0x4c0/0x4c0 [ 1160.730145] ? mark_held_locks+0xc9/0x160 [ 1160.730161] ? __raw_spin_lock_init+0x1c/0x100 [ 1160.730177] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 1160.770323] ? __lockdep_init_map+0x105/0x590 [ 1160.774829] ? lockdep_init_map+0x9/0x10 [ 1160.778900] sget_userns+0x73a/0xf00 [ 1160.782622] ? get_anon_bdev+0x2f0/0x2f0 [ 1160.786693] ? destroy_unused_super.part.11+0x110/0x110 [ 1160.792066] ? __alloc_pages_nodemask+0xacf/0xd70 [ 1160.796916] ? __alloc_pages_slowpath+0x2db0/0x2db0 [ 1160.801940] ? kasan_check_read+0x11/0x20 [ 1160.806093] ? cap_capable+0x1f9/0x260 [ 1160.809988] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1160.815528] ? security_capable+0x99/0xc0 2018/05/26 13:24:01 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)="766574683100000000ffffffffffef00", 0x22b) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x84473]}, 0x10) 2018/05/26 13:24:01 executing program 6: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000]}, 0x2c) [ 1160.819689] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1160.825232] ? ns_capable_common+0x13f/0x170 [ 1160.829645] ? get_anon_bdev+0x2f0/0x2f0 [ 1160.833708] sget+0x10b/0x150 [ 1160.836821] ? fuse_get_root_inode+0x190/0x190 [ 1160.841414] mount_nodev+0x33/0x110 [ 1160.845043] fuse_mount+0x2c/0x40 [ 1160.848500] mount_fs+0xae/0x328 [ 1160.851877] vfs_kern_mount.part.34+0xd4/0x4d0 [ 1160.856461] ? may_umount+0xb0/0xb0 [ 1160.860095] ? _raw_read_unlock+0x22/0x30 [ 1160.864245] ? __get_fs_type+0x97/0xc0 [ 1160.868139] do_mount+0x564/0x3070 [ 1160.871686] ? do_raw_spin_unlock+0x9e/0x2e0 [ 1160.876102] ? copy_mount_string+0x40/0x40 [ 1160.880337] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 1160.885359] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1160.890128] ? retint_kernel+0x10/0x10 [ 1160.894027] ? copy_mount_options+0x1f0/0x380 [ 1160.898526] ? copy_mount_options+0x202/0x380 [ 1160.903061] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1160.908607] ? copy_mount_options+0x285/0x380 [ 1160.913113] ksys_mount+0x12d/0x140 [ 1160.916745] __x64_sys_mount+0xbe/0x150 2018/05/26 13:24:01 executing program 6: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5207]}, 0x2c) [ 1160.920724] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 1160.925748] do_syscall_64+0x1b1/0x800 [ 1160.929640] ? finish_task_switch+0x1ca/0x840 [ 1160.934141] ? syscall_return_slowpath+0x5c0/0x5c0 [ 1160.939076] ? syscall_return_slowpath+0x30f/0x5c0 [ 1160.944011] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 1160.949384] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1160.954236] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1160.959429] RIP: 0033:0x455a09 [ 1160.962621] RSP: 002b:00007f118944d808 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1160.970332] RAX: ffffffffffffffda RBX: 0000000000000016 RCX: 0000000000455a09 [ 1160.977606] RDX: 00000000004c1eb6 RSI: 0000000020000240 RDI: 00000000004de0c5 [ 1160.984871] RBP: 0000000000000000 R08: 00007f118944d820 R09: 0000000000000000 [ 1160.992140] R10: 0000000048000000 R11: 0000000000000246 R12: 0000000000000000 [ 1160.999410] R13: 0000000020000240 R14: 0000000048000000 R15: 0000000000000000 [ 1161.373943] sctp: sctp_transport_update_pmtu: Reported pmtu 72 too low, using default minimum of 512 [ 1161.517621] sctp: sctp_transport_update_pmtu: Reported pmtu 72 too low, using default minimum of 512 2018/05/26 13:24:01 executing program 6: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38000]}, 0x2c) 2018/05/26 13:24:01 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)="766574683100000000ffffffffffef00", 0x22b) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x240]}, 0x10) 2018/05/26 13:24:01 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty=0x18, [0x0, 0x0, 0x0, 0x0, 0xe]}, 0x10) 2018/05/26 13:24:01 executing program 7 (fault-call:9 fault-nth:24): r0 = getpid() sched_setattr(r0, &(0x7f00000000c0), 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}}) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) syz_fuse_mount(&(0x7f0000000240)='./control\x00', 0x406000, 0x0, 0x0, 0x0, 0x48000000) close(r1) 2018/05/26 13:24:01 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0xe80300, 0x0, 0x0, 0x0, 0xc00]}, 0x2c) 2018/05/26 13:24:01 executing program 4: r0 = getpid() sched_setattr(r0, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x0, 0x4}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000f86000)='./control/file0\x00') syz_fuse_mount(&(0x7f0000000240)='./control\x00', 0x406000, 0x0, 0x0, 0x0, 0xa000000) syz_fuseblk_mount(&(0x7f0000000140)='./control\x00', &(0x7f0000000180)='./control/file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) close(r1) 2018/05/26 13:24:01 executing program 1: r0 = socket$inet(0x2, 0x5, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vcan0\x00', 0x10) sendmsg(r0, &(0x7f0000000480)={&(0x7f0000000140)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000380)="f0", 0x1}], 0x1}, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000a00)={@multicast1=0xe0000001, @local={0xac, 0x14, 0x14, 0xaa}}, 0xc) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000040)="84", 0x4}], 0x1, &(0x7f0000000540)}, 0x0) 2018/05/26 13:24:01 executing program 2: r0 = getpid() sched_setattr(r0, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x0, 0x4}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_DISABLE(r2, 0x2401, 0x3) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x60c00, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r3, &(0x7f00000001c0)="dba0b8f465e7580f7b6d8358aab6e20c87702c60f426c1f9359e517817295063568a036aa08ba09279cbca92ec78474f569aadc6c9647e14ea47f025e58ffd113ea6d0acab9b71d2f397400fbf4c76043bb704ce755f19aae529933cec4892f49f0bc58e3b73eb04d20116cfb0eb36207edd14528e99f065378ff70192f2", &(0x7f0000000280)=""/140}, 0x18) r4 = creat(&(0x7f0000000400)='./control/file0\x00', 0x41) write$sndseq(r4, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000f86000)='./control/file0\x00') rmdir(&(0x7f0000000040)='./control/file0\x00') syz_fuse_mount(&(0x7f0000000240)='./control\x00', 0x406000, 0x0, 0x0, 0x0, 0x0) syz_fuseblk_mount(&(0x7f0000000140)='./control\x00', &(0x7f0000000180)='./control/file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) close(r1) 2018/05/26 13:24:01 executing program 6: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300000000000000]}, 0x2c) [ 1161.694593] FAULT_INJECTION: forcing a failure. [ 1161.694593] name failslab, interval 1, probability 0, space 0, times 0 [ 1161.707419] CPU: 0 PID: 1994 Comm: syz-executor7 Not tainted 4.17.0-rc6+ #68 [ 1161.714622] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1161.723975] Call Trace: [ 1161.726575] dump_stack+0x1b9/0x294 [ 1161.730214] ? dump_stack_print_info.cold.2+0x52/0x52 [ 1161.735416] ? mutex_trylock+0x2a0/0x2a0 [ 1161.739498] should_fail.cold.4+0xa/0x1a 2018/05/26 13:24:01 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)="766574683100000000ffffffffffef00", 0x22b) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x11]}, 0x10) [ 1161.743573] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1161.748689] ? print_usage_bug+0xc0/0xc0 [ 1161.752760] ? graph_lock+0x170/0x170 [ 1161.756570] ? lock_downgrade+0x8e0/0x8e0 [ 1161.760731] ? find_held_lock+0x36/0x1c0 [ 1161.764803] ? __lock_is_held+0xb5/0x140 [ 1161.768884] ? check_same_owner+0x320/0x320 [ 1161.773217] ? __might_sleep+0x95/0x190 [ 1161.777205] ? rcu_note_context_switch+0x710/0x710 [ 1161.782149] __should_failslab+0x124/0x180 [ 1161.786391] should_failslab+0x9/0x14 [ 1161.790198] __kmalloc+0x2c8/0x760 [ 1161.793750] ? __kmalloc_node+0x47/0x70 [ 1161.797738] ? __list_lru_init+0xdd/0x790 [ 1161.801896] __list_lru_init+0xdd/0x790 [ 1161.805874] ? list_lru_destroy+0x4c0/0x4c0 [ 1161.810197] ? mark_held_locks+0xc9/0x160 [ 1161.814352] ? __raw_spin_lock_init+0x1c/0x100 [ 1161.818943] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 1161.823973] ? lockdep_init_map+0x9/0x10 [ 1161.828039] sget_userns+0x767/0xf00 [ 1161.831759] ? get_anon_bdev+0x2f0/0x2f0 [ 1161.835831] ? destroy_unused_super.part.11+0x110/0x110 2018/05/26 13:24:02 executing program 6: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000]}, 0x2c) 2018/05/26 13:24:02 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)="766574683100000000ffffffffffef00", 0x22b) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0xc800000000000000]}, 0x10) [ 1161.841201] ? __alloc_pages_nodemask+0xacf/0xd70 [ 1161.846057] ? __alloc_pages_slowpath+0x2db0/0x2db0 [ 1161.851089] ? kasan_check_read+0x11/0x20 [ 1161.855245] ? cap_capable+0x1f9/0x260 [ 1161.859143] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1161.864684] ? security_capable+0x99/0xc0 [ 1161.868846] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1161.874390] ? ns_capable_common+0x13f/0x170 [ 1161.878807] ? get_anon_bdev+0x2f0/0x2f0 [ 1161.882870] sget+0x10b/0x150 [ 1161.885983] ? fuse_get_root_inode+0x190/0x190 [ 1161.890593] mount_nodev+0x33/0x110 [ 1161.894227] fuse_mount+0x2c/0x40 [ 1161.897683] mount_fs+0xae/0x328 [ 1161.901063] vfs_kern_mount.part.34+0xd4/0x4d0 [ 1161.905644] ? may_umount+0xb0/0xb0 [ 1161.909275] ? _raw_read_unlock+0x22/0x30 [ 1161.913422] ? __get_fs_type+0x97/0xc0 [ 1161.917311] do_mount+0x564/0x3070 [ 1161.920860] ? copy_mount_string+0x40/0x40 [ 1161.925096] ? rcu_pm_notify+0xc0/0xc0 [ 1161.928997] ? copy_mount_options+0x5f/0x380 [ 1161.933410] ? rcu_read_lock_sched_held+0x108/0x120 [ 1161.938434] ? kmem_cache_alloc_trace+0x616/0x780 2018/05/26 13:24:02 executing program 6: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000]}, 0x2c) 2018/05/26 13:24:02 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)="766574683100000000ffffffffffef00", 0x22b) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x7344080000000000]}, 0x10) [ 1161.943287] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1161.948831] ? _copy_from_user+0xdf/0x150 [ 1161.952986] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1161.958529] ? copy_mount_options+0x285/0x380 [ 1161.963031] ksys_mount+0x12d/0x140 [ 1161.966666] __x64_sys_mount+0xbe/0x150 [ 1161.970641] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 1161.975663] do_syscall_64+0x1b1/0x800 [ 1161.979557] ? finish_task_switch+0x1ca/0x840 [ 1161.984058] ? syscall_return_slowpath+0x5c0/0x5c0 [ 1161.988988] ? syscall_return_slowpath+0x30f/0x5c0 2018/05/26 13:24:02 executing program 6: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, 0x2c) [ 1161.993928] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 1161.999303] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1162.004157] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1162.009344] RIP: 0033:0x455a09 [ 1162.012533] RSP: 002b:00007f118944d808 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1162.020247] RAX: ffffffffffffffda RBX: 0000000000000016 RCX: 0000000000455a09 [ 1162.027523] RDX: 00000000004c1eb6 RSI: 0000000020000240 RDI: 00000000004de0c5 [ 1162.034794] RBP: 0000000000000000 R08: 00007f118944d820 R09: 0000000000000000 [ 1162.042069] R10: 0000000048000000 R11: 0000000000000246 R12: 0000000000000000 [ 1162.049343] R13: 0000000020000240 R14: 0000000048000000 R15: 0000000000000000 2018/05/26 13:24:02 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty=0x18, [0x0, 0x0, 0x0, 0x0, 0xa000000]}, 0x10) 2018/05/26 13:24:02 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)="766574683100000000ffffffffffef00", 0x22b) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x84483]}, 0x10) 2018/05/26 13:24:02 executing program 7 (fault-call:9 fault-nth:25): r0 = getpid() sched_setattr(r0, &(0x7f00000000c0), 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}}) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) syz_fuse_mount(&(0x7f0000000240)='./control\x00', 0x406000, 0x0, 0x0, 0x0, 0x48000000) close(r1) 2018/05/26 13:24:02 executing program 6: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e000]}, 0x2c) 2018/05/26 13:24:02 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x60000000000000, 0x0, 0x0, 0x0, 0xc00]}, 0x2c) 2018/05/26 13:24:02 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)="766574683100000000ffffffffffef00", 0x22b) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x8044080000000000]}, 0x10) [ 1162.245686] FAULT_INJECTION: forcing a failure. [ 1162.245686] name failslab, interval 1, probability 0, space 0, times 0 [ 1162.257015] CPU: 0 PID: 2043 Comm: syz-executor7 Not tainted 4.17.0-rc6+ #68 [ 1162.264206] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1162.273560] Call Trace: [ 1162.276161] dump_stack+0x1b9/0x294 [ 1162.279807] ? dump_stack_print_info.cold.2+0x52/0x52 [ 1162.285004] ? kernel_text_address+0x79/0xf0 [ 1162.289424] ? __unwind_start+0x166/0x330 [ 1162.293590] should_fail.cold.4+0xa/0x1a [ 1162.297663] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1162.302789] ? graph_lock+0x170/0x170 [ 1162.306606] ? save_stack+0x43/0xd0 [ 1162.310240] ? kasan_kmalloc+0xc4/0xe0 [ 1162.314128] ? __kmalloc+0x14e/0x760 [ 1162.317846] ? __list_lru_init+0xdd/0x790 [ 1162.322007] ? find_held_lock+0x36/0x1c0 [ 1162.326078] ? __lock_is_held+0xb5/0x140 [ 1162.330157] ? check_same_owner+0x320/0x320 [ 1162.334491] ? rcu_note_context_switch+0x710/0x710 [ 1162.339431] __should_failslab+0x124/0x180 [ 1162.343686] should_failslab+0x9/0x14 [ 1162.347498] kmem_cache_alloc_node_trace+0x26f/0x770 [ 1162.352610] ? mark_held_locks+0xc9/0x160 [ 1162.356766] ? __raw_spin_lock_init+0x1c/0x100 [ 1162.361348] __kmalloc_node+0x33/0x70 [ 1162.365136] kvmalloc_node+0x6b/0x100 [ 1162.368922] __list_lru_init+0x559/0x790 [ 1162.372969] ? list_lru_destroy+0x4c0/0x4c0 [ 1162.377271] ? mark_held_locks+0xc9/0x160 [ 1162.381403] ? __raw_spin_lock_init+0x1c/0x100 [ 1162.385970] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 1162.390977] ? lockdep_init_map+0x9/0x10 [ 1162.395034] sget_userns+0x767/0xf00 [ 1162.398752] ? get_anon_bdev+0x2f0/0x2f0 [ 1162.402815] ? destroy_unused_super.part.11+0x110/0x110 [ 1162.408174] ? __alloc_pages_nodemask+0xacf/0xd70 [ 1162.413015] ? __alloc_pages_slowpath+0x2db0/0x2db0 [ 1162.418040] ? kasan_check_read+0x11/0x20 [ 1162.422170] ? cap_capable+0x1f9/0x260 [ 1162.426053] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1162.431570] ? security_capable+0x99/0xc0 [ 1162.435715] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1162.441248] ? ns_capable_common+0x13f/0x170 [ 1162.445661] ? get_anon_bdev+0x2f0/0x2f0 [ 1162.449710] sget+0x10b/0x150 [ 1162.452800] ? fuse_get_root_inode+0x190/0x190 [ 1162.457362] mount_nodev+0x33/0x110 [ 1162.460971] fuse_mount+0x2c/0x40 [ 1162.464416] mount_fs+0xae/0x328 [ 1162.467792] vfs_kern_mount.part.34+0xd4/0x4d0 [ 1162.472366] ? may_umount+0xb0/0xb0 [ 1162.475973] ? _raw_read_unlock+0x22/0x30 [ 1162.480101] ? __get_fs_type+0x97/0xc0 [ 1162.483983] do_mount+0x564/0x3070 [ 1162.487520] ? copy_mount_string+0x40/0x40 [ 1162.491759] ? rcu_pm_notify+0xc0/0xc0 [ 1162.495646] ? copy_mount_options+0x5f/0x380 [ 1162.498501] sctp: sctp_transport_update_pmtu: Reported pmtu 72 too low, using default minimum of 512 [ 1162.500046] ? rcu_read_lock_sched_held+0x108/0x120 [ 1162.500065] ? kmem_cache_alloc_trace+0x616/0x780 [ 1162.500085] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1162.500103] ? _copy_from_user+0xdf/0x150 [ 1162.528804] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1162.534326] ? copy_mount_options+0x285/0x380 [ 1162.538803] ksys_mount+0x12d/0x140 [ 1162.542420] __x64_sys_mount+0xbe/0x150 [ 1162.546381] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 1162.551395] do_syscall_64+0x1b1/0x800 [ 1162.555281] ? finish_task_switch+0x1ca/0x840 [ 1162.559761] ? syscall_return_slowpath+0x5c0/0x5c0 [ 1162.564682] ? syscall_return_slowpath+0x30f/0x5c0 [ 1162.569608] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 1162.574954] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1162.579779] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1162.584949] RIP: 0033:0x455a09 [ 1162.588118] RSP: 002b:00007f118944d808 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1162.595806] RAX: ffffffffffffffda RBX: 0000000000000016 RCX: 0000000000455a09 [ 1162.603068] RDX: 00000000004c1eb6 RSI: 0000000020000240 RDI: 00000000004de0c5 [ 1162.610334] RBP: 0000000000000000 R08: 00007f118944d820 R09: 0000000000000000 [ 1162.617598] R10: 0000000048000000 R11: 0000000000000246 R12: 0000000000000000 [ 1162.624851] R13: 0000000020000240 R14: 0000000048000000 R15: 0000000000000000 [ 1162.654908] sctp: sctp_transport_update_pmtu: Reported pmtu 72 too low, using default minimum of 512 2018/05/26 13:24:02 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty=0x18, [0x0, 0x0, 0x0, 0x0, 0x80550000]}, 0x10) 2018/05/26 13:24:02 executing program 7 (fault-call:9 fault-nth:26): r0 = getpid() sched_setattr(r0, &(0x7f00000000c0), 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}}) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) syz_fuse_mount(&(0x7f0000000240)='./control\x00', 0x406000, 0x0, 0x0, 0x0, 0x48000000) close(r1) 2018/05/26 13:24:02 executing program 4: r0 = getpid() sched_setattr(r0, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x0, 0x4}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000f86000)='./control/file0\x00') syz_fuse_mount(&(0x7f0000000240)='./control\x00', 0x406000, 0x0, 0x0, 0x0, 0x3e00) syz_fuseblk_mount(&(0x7f0000000140)='./control\x00', &(0x7f0000000180)='./control/file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) close(r1) 2018/05/26 13:24:02 executing program 2: r0 = getpid() sched_setattr(r0, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x0, 0x4}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x80c00, 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000f86000)='./control/file0\x00') ioctl(r1, 0x0, &(0x7f0000000040)="5736e57dec1d950e") getsockopt$inet_sctp_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000100)=@assoc_value={0x0, 0x8001}, &(0x7f00000001c0)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r2, 0x84, 0x23, &(0x7f00000002c0)={r3, 0x7}, 0x8) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000200)={r3, 0x1}, &(0x7f0000000280)=0x8) rmdir(&(0x7f00000000c0)='./control\x00') syz_fuse_mount(&(0x7f0000000240)='./control\x00', 0x406000, 0x0, 0x0, 0x0, 0x0) syz_fuseblk_mount(&(0x7f0000000140)='./control\x00', &(0x7f0000000180)='./control/file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 2018/05/26 13:24:02 executing program 1: r0 = socket$inet(0x2, 0x5, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vcan0\x00', 0x10) sendmsg(r0, &(0x7f0000000480)={&(0x7f0000000140)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000380)="f0", 0x1}], 0x1}, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000a00)={@multicast1=0xe0000001, @local={0xac, 0x14, 0x14, 0xaa}}, 0xc) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000040)="84", 0x1300}], 0x1, &(0x7f0000000540)}, 0x0) 2018/05/26 13:24:02 executing program 6: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000000]}, 0x2c) 2018/05/26 13:24:02 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0xc0000000000000, 0x0, 0x0, 0x0, 0xc00]}, 0x2c) 2018/05/26 13:24:02 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)="766574683100000000ffffffffffef00", 0x22b) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x1600]}, 0x10) 2018/05/26 13:24:03 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)="766574683100000000ffffffffffef00", 0x22b) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000]}, 0x10) [ 1162.837425] FAULT_INJECTION: forcing a failure. [ 1162.837425] name failslab, interval 1, probability 0, space 0, times 0 [ 1162.848782] CPU: 0 PID: 2075 Comm: syz-executor7 Not tainted 4.17.0-rc6+ #68 [ 1162.855968] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1162.865327] Call Trace: [ 1162.867927] dump_stack+0x1b9/0x294 [ 1162.871568] ? dump_stack_print_info.cold.2+0x52/0x52 [ 1162.876770] ? kernel_text_address+0x79/0xf0 [ 1162.881187] ? __unwind_start+0x166/0x330 2018/05/26 13:24:03 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x100000000000000, 0x0, 0x0, 0x0, 0xc00]}, 0x2c) [ 1162.885347] should_fail.cold.4+0xa/0x1a [ 1162.889423] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1162.894539] ? graph_lock+0x170/0x170 [ 1162.898349] ? save_stack+0x43/0xd0 [ 1162.901983] ? kasan_kmalloc+0xc4/0xe0 [ 1162.905875] ? __kmalloc+0x14e/0x760 [ 1162.909595] ? __list_lru_init+0xdd/0x790 [ 1162.913756] ? find_held_lock+0x36/0x1c0 [ 1162.917833] ? __lock_is_held+0xb5/0x140 [ 1162.921914] ? check_same_owner+0x320/0x320 [ 1162.926250] ? rcu_note_context_switch+0x710/0x710 [ 1162.931194] __should_failslab+0x124/0x180 2018/05/26 13:24:03 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x1800000000000000, 0x0, 0x0, 0x0, 0xc00]}, 0x2c) 2018/05/26 13:24:03 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)="766574683100000000ffffffffffef00", 0x22b) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x7b440800]}, 0x10) [ 1162.935441] should_failslab+0x9/0x14 [ 1162.939248] kmem_cache_alloc_node_trace+0x26f/0x770 [ 1162.944355] ? mark_held_locks+0xc9/0x160 [ 1162.948513] ? __raw_spin_lock_init+0x1c/0x100 [ 1162.953106] __kmalloc_node+0x33/0x70 [ 1162.956913] kvmalloc_node+0x6b/0x100 [ 1162.960718] __list_lru_init+0x559/0x790 [ 1162.964783] ? list_lru_destroy+0x4c0/0x4c0 [ 1162.969106] ? mark_held_locks+0xc9/0x160 [ 1162.973262] ? __raw_spin_lock_init+0x1c/0x100 [ 1162.977850] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 1162.982871] ? lockdep_init_map+0x9/0x10 [ 1162.986941] sget_userns+0x767/0xf00 [ 1162.990660] ? get_anon_bdev+0x2f0/0x2f0 [ 1162.994735] ? destroy_unused_super.part.11+0x110/0x110 [ 1163.000104] ? __alloc_pages_nodemask+0xacf/0xd70 [ 1163.005056] ? __alloc_pages_slowpath+0x2db0/0x2db0 [ 1163.010085] ? kasan_check_read+0x11/0x20 [ 1163.014241] ? cap_capable+0x1f9/0x260 [ 1163.018147] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1163.023687] ? security_capable+0x99/0xc0 [ 1163.027840] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1163.033380] ? ns_capable_common+0x13f/0x170 [ 1163.037802] ? get_anon_bdev+0x2f0/0x2f0 [ 1163.041868] sget+0x10b/0x150 [ 1163.044980] ? fuse_get_root_inode+0x190/0x190 [ 1163.049565] mount_nodev+0x33/0x110 [ 1163.053194] fuse_mount+0x2c/0x40 [ 1163.056649] mount_fs+0xae/0x328 [ 1163.060027] vfs_kern_mount.part.34+0xd4/0x4d0 [ 1163.064617] ? may_umount+0xb0/0xb0 [ 1163.068245] ? _raw_read_unlock+0x22/0x30 [ 1163.072401] ? __get_fs_type+0x97/0xc0 [ 1163.076298] do_mount+0x564/0x3070 [ 1163.079843] ? copy_mount_string+0x40/0x40 [ 1163.084082] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1163.088850] ? retint_kernel+0x10/0x10 [ 1163.092747] ? copy_mount_options+0x1a1/0x380 [ 1163.097251] ? __sanitizer_cov_trace_pc+0x48/0x50 [ 1163.102099] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1163.107643] ? copy_mount_options+0x285/0x380 [ 1163.112147] ksys_mount+0x12d/0x140 [ 1163.115779] __x64_sys_mount+0xbe/0x150 [ 1163.119760] ? do_syscall_64+0xc2/0x800 [ 1163.123730] do_syscall_64+0x1b1/0x800 [ 1163.127613] ? finish_task_switch+0x1ca/0x840 [ 1163.132102] ? syscall_return_slowpath+0x5c0/0x5c0 [ 1163.137020] ? syscall_return_slowpath+0x30f/0x5c0 [ 1163.141944] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 1163.147293] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1163.152118] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1163.157285] RIP: 0033:0x455a09 [ 1163.160452] RSP: 002b:00007f118944d808 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1163.168139] RAX: ffffffffffffffda RBX: 0000000000000016 RCX: 0000000000455a09 [ 1163.175392] RDX: 00000000004c1eb6 RSI: 0000000020000240 RDI: 00000000004de0c5 [ 1163.182641] RBP: 0000000000000000 R08: 00007f118944d820 R09: 0000000000000000 [ 1163.189889] R10: 0000000048000000 R11: 0000000000000246 R12: 0000000000000000 [ 1163.197139] R13: 0000000020000240 R14: 0000000048000000 R15: 0000000000000000 [ 1163.638704] sctp: sctp_transport_update_pmtu: Reported pmtu 72 too low, using default minimum of 512 [ 1163.782572] sctp: sctp_transport_update_pmtu: Reported pmtu 72 too low, using default minimum of 512 2018/05/26 13:24:04 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x0, 0x0, 0xc00]}, 0x2c) 2018/05/26 13:24:04 executing program 6: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000]}, 0x2c) 2018/05/26 13:24:04 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)="766574683100000000ffffffffffef00", 0x22b) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x40020000]}, 0x10) 2018/05/26 13:24:04 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty=0x18, [0x0, 0x0, 0x0, 0x0, 0x1200]}, 0x10) 2018/05/26 13:24:04 executing program 7 (fault-call:9 fault-nth:27): r0 = getpid() sched_setattr(r0, &(0x7f00000000c0), 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}}) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) syz_fuse_mount(&(0x7f0000000240)='./control\x00', 0x406000, 0x0, 0x0, 0x0, 0x48000000) close(r1) 2018/05/26 13:24:04 executing program 4: r0 = getpid() sched_setattr(r0, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x0, 0x4}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000f86000)='./control/file0\x00') syz_fuse_mount(&(0x7f0000000240)='./control\x00', 0x406000, 0x0, 0x0, 0x0, 0xfffffffe) syz_fuseblk_mount(&(0x7f0000000140)='./control\x00', &(0x7f0000000180)='./control/file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) close(r1) 2018/05/26 13:24:04 executing program 2: r0 = getpid() sched_setattr(r0, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x0, 0x4}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000f86000)='./control/file0\x00') rmdir(&(0x7f00000000c0)='./control\x00') syz_fuse_mount(&(0x7f0000000240)='./control\x00', 0x406000, 0x0, 0x0, 0x0, 0x0) syz_fuseblk_mount(&(0x7f0000000140)='./control\x00', &(0x7f0000000180)='./control/file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f0000000080)='./control/file0\x00', 0xa, 0x8) close(r1) 2018/05/26 13:24:04 executing program 1: r0 = socket$inet(0x2, 0x5, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vcan0\x00', 0x10) sendmsg(r0, &(0x7f0000000480)={&(0x7f0000000140)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000380)="f0", 0x1}], 0x1}, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000a00)={@multicast1=0xe0000001, @local={0xac, 0x14, 0x14, 0xaa}}, 0xc) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000040)="84", 0xff50}], 0x1, &(0x7f0000000540)}, 0x0) [ 1164.008622] FAULT_INJECTION: forcing a failure. [ 1164.008622] name failslab, interval 1, probability 0, space 0, times 0 [ 1164.019954] CPU: 0 PID: 2130 Comm: syz-executor7 Not tainted 4.17.0-rc6+ #68 [ 1164.027143] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1164.036497] Call Trace: [ 1164.039095] dump_stack+0x1b9/0x294 [ 1164.042733] ? dump_stack_print_info.cold.2+0x52/0x52 [ 1164.047930] ? __save_stack_trace+0x7e/0xd0 [ 1164.049290] net_ratelimit: 24 callbacks suppressed 2018/05/26 13:24:04 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)="766574683100000000ffffffffffef00", 0x22b) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x8446f]}, 0x10) 2018/05/26 13:24:04 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x207, 0x0, 0x0, 0x0, 0xc00]}, 0x2c) [ 1164.049294] TCP: out of memory -- consider tuning tcp_mem [ 1164.052259] should_fail.cold.4+0xa/0x1a [ 1164.052280] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1164.052300] ? save_stack+0x43/0xd0 [ 1164.052320] ? kasan_kmalloc+0xc4/0xe0 [ 1164.052332] ? kmem_cache_alloc_trace+0x152/0x780 [ 1164.052352] ? __memcg_init_list_lru_node+0x17d/0x2c0 [ 1164.065868] TCP: out of memory -- consider tuning tcp_mem [ 1164.066843] ? __list_lru_init+0x456/0x790 [ 1164.066859] ? sget_userns+0x767/0xf00 [ 1164.066877] ? graph_lock+0x170/0x170 [ 1164.066891] ? vfs_kern_mount.part.34+0xd4/0x4d0 [ 1164.066904] ? do_mount+0x564/0x3070 [ 1164.066919] ? ksys_mount+0x12d/0x140 [ 1164.066932] ? __x64_sys_mount+0xbe/0x150 [ 1164.066950] ? do_syscall_64+0x1b1/0x800 [ 1164.127329] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1164.132701] ? find_held_lock+0x36/0x1c0 [ 1164.136773] ? __lock_is_held+0xb5/0x140 [ 1164.140847] ? check_same_owner+0x320/0x320 [ 1164.145180] ? rcu_note_context_switch+0x710/0x710 [ 1164.150114] __should_failslab+0x124/0x180 [ 1164.154357] should_failslab+0x9/0x14 2018/05/26 13:24:04 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x11000000, 0x0, 0x0, 0x0, 0xc00]}, 0x2c) [ 1164.158162] kmem_cache_alloc_trace+0x2cb/0x780 [ 1164.162831] ? __kmalloc_node+0x33/0x70 [ 1164.163626] TCP: out of memory -- consider tuning tcp_mem [ 1164.166801] ? __kmalloc_node+0x33/0x70 [ 1164.166819] ? rcu_read_lock_sched_held+0x108/0x120 [ 1164.166839] __memcg_init_list_lru_node+0x17d/0x2c0 [ 1164.166855] ? kvfree_rcu+0x20/0x20 [ 1164.166870] ? __kmalloc_node+0x47/0x70 [ 1164.166890] __list_lru_init+0x456/0x790 [ 1164.166910] ? list_lru_destroy+0x4c0/0x4c0 [ 1164.179845] TCP: out of memory -- consider tuning tcp_mem 2018/05/26 13:24:04 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)="766574683100000000ffffffffffef00", 0x22b) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0xa]}, 0x10) [ 1164.181391] ? mark_held_locks+0xc9/0x160 [ 1164.181411] ? __raw_spin_lock_init+0x1c/0x100 [ 1164.181428] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 1164.181448] ? lockdep_init_map+0x9/0x10 [ 1164.181466] sget_userns+0x767/0xf00 [ 1164.181480] ? get_anon_bdev+0x2f0/0x2f0 [ 1164.181499] ? destroy_unused_super.part.11+0x110/0x110 [ 1164.181515] ? __alloc_pages_nodemask+0xacf/0xd70 [ 1164.243620] ? __alloc_pages_slowpath+0x2db0/0x2db0 [ 1164.248648] ? kasan_check_read+0x11/0x20 [ 1164.252804] ? cap_capable+0x1f9/0x260 2018/05/26 13:24:04 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0xe00000, 0x0, 0x0, 0x0, 0xc00]}, 0x2c) 2018/05/26 13:24:04 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)="766574683100000000ffffffffffef00", 0x22b) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x281400]}, 0x10) [ 1164.256042] TCP: out of memory -- consider tuning tcp_mem [ 1164.256703] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1164.256719] ? security_capable+0x99/0xc0 [ 1164.256739] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1164.256755] ? ns_capable_common+0x13f/0x170 [ 1164.256771] ? get_anon_bdev+0x2f0/0x2f0 [ 1164.256786] sget+0x10b/0x150 [ 1164.289038] ? fuse_get_root_inode+0x190/0x190 [ 1164.293629] mount_nodev+0x33/0x110 [ 1164.297265] fuse_mount+0x2c/0x40 [ 1164.300729] mount_fs+0xae/0x328 [ 1164.304109] vfs_kern_mount.part.34+0xd4/0x4d0 2018/05/26 13:24:04 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x3e800, 0x0, 0x0, 0x0, 0xc00]}, 0x2c) [ 1164.308698] ? may_umount+0xb0/0xb0 [ 1164.312325] ? _raw_read_unlock+0x22/0x30 [ 1164.316473] ? __get_fs_type+0x97/0xc0 [ 1164.320374] do_mount+0x564/0x3070 [ 1164.323920] ? copy_mount_string+0x40/0x40 [ 1164.328159] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1164.332929] ? retint_kernel+0x10/0x10 [ 1164.336824] ? copy_mount_options+0x1a1/0x380 [ 1164.341335] ? __sanitizer_cov_trace_pc+0x38/0x50 [ 1164.346184] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1164.351726] ? copy_mount_options+0x285/0x380 [ 1164.356240] ksys_mount+0x12d/0x140 [ 1164.359872] __x64_sys_mount+0xbe/0x150 [ 1164.363842] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 1164.368855] do_syscall_64+0x1b1/0x800 [ 1164.372747] ? finish_task_switch+0x1ca/0x840 [ 1164.377232] ? syscall_return_slowpath+0x5c0/0x5c0 [ 1164.382156] ? syscall_return_slowpath+0x30f/0x5c0 [ 1164.387073] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 1164.392433] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1164.397268] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1164.402440] RIP: 0033:0x455a09 2018/05/26 13:24:04 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty=0x18, [0x0, 0x0, 0x0, 0x0, 0x34]}, 0x10) [ 1164.405616] RSP: 002b:00007f118944d808 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1164.413318] RAX: ffffffffffffffda RBX: 0000000000000016 RCX: 0000000000455a09 [ 1164.420573] RDX: 00000000004c1eb6 RSI: 0000000020000240 RDI: 00000000004de0c5 [ 1164.427827] RBP: 0000000000000000 R08: 00007f118944d820 R09: 0000000000000000 [ 1164.435076] R10: 0000000048000000 R11: 0000000000000246 R12: 0000000000000000 [ 1164.442329] R13: 0000000020000240 R14: 0000000048000000 R15: 0000000000000000 2018/05/26 13:24:04 executing program 7 (fault-call:9 fault-nth:28): r0 = getpid() sched_setattr(r0, &(0x7f00000000c0), 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}}) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) syz_fuse_mount(&(0x7f0000000240)='./control\x00', 0x406000, 0x0, 0x0, 0x0, 0x48000000) close(r1) 2018/05/26 13:24:04 executing program 6: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}, 0x2c) [ 1164.537543] TCP: out of memory -- consider tuning tcp_mem [ 1164.562386] TCP: out of memory -- consider tuning tcp_mem [ 1164.612647] FAULT_INJECTION: forcing a failure. [ 1164.612647] name failslab, interval 1, probability 0, space 0, times 0 [ 1164.624019] CPU: 1 PID: 2165 Comm: syz-executor7 Not tainted 4.17.0-rc6+ #68 [ 1164.631210] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1164.640571] Call Trace: [ 1164.643169] dump_stack+0x1b9/0x294 [ 1164.646817] ? dump_stack_print_info.cold.2+0x52/0x52 [ 1164.652018] ? __save_stack_trace+0x7e/0xd0 [ 1164.656351] should_fail.cold.4+0xa/0x1a [ 1164.660420] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1164.665533] ? save_stack+0x43/0xd0 [ 1164.669163] ? kasan_kmalloc+0xc4/0xe0 [ 1164.673058] ? kmem_cache_alloc_trace+0x152/0x780 [ 1164.677907] ? __memcg_init_list_lru_node+0x17d/0x2c0 [ 1164.683100] ? __list_lru_init+0x456/0x790 [ 1164.687337] ? sget_userns+0x767/0xf00 [ 1164.691216] ? graph_lock+0x170/0x170 [ 1164.695014] ? vfs_kern_mount.part.34+0xd4/0x4d0 [ 1164.699764] ? do_mount+0x564/0x3070 [ 1164.703458] ? ksys_mount+0x12d/0x140 [ 1164.707239] ? __x64_sys_mount+0xbe/0x150 [ 1164.711371] ? do_syscall_64+0x1b1/0x800 [ 1164.715414] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1164.720769] ? find_held_lock+0x36/0x1c0 [ 1164.724812] ? __lock_is_held+0xb5/0x140 [ 1164.728882] ? check_same_owner+0x320/0x320 [ 1164.733198] ? rcu_note_context_switch+0x710/0x710 [ 1164.738120] __should_failslab+0x124/0x180 [ 1164.742337] should_failslab+0x9/0x14 [ 1164.746124] kmem_cache_alloc_trace+0x2cb/0x780 [ 1164.750788] ? __kmalloc_node+0x33/0x70 [ 1164.754741] ? __kmalloc_node+0x33/0x70 [ 1164.758707] ? rcu_read_lock_sched_held+0x108/0x120 [ 1164.763716] __memcg_init_list_lru_node+0x17d/0x2c0 [ 1164.768722] ? kvfree_rcu+0x20/0x20 [ 1164.772332] ? __kmalloc_node+0x47/0x70 [ 1164.776303] __list_lru_init+0x456/0x790 [ 1164.780354] ? list_lru_destroy+0x4c0/0x4c0 [ 1164.784658] ? mark_held_locks+0xc9/0x160 [ 1164.788789] ? __raw_spin_lock_init+0x1c/0x100 [ 1164.793351] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 1164.798353] ? lockdep_init_map+0x9/0x10 [ 1164.802399] sget_userns+0x767/0xf00 [ 1164.806103] ? get_anon_bdev+0x2f0/0x2f0 [ 1164.809678] sctp: sctp_transport_update_pmtu: Reported pmtu 72 too low, using default minimum of 512 [ 1164.810167] ? destroy_unused_super.part.11+0x110/0x110 [ 1164.810182] ? __alloc_pages_nodemask+0xacf/0xd70 [ 1164.810200] ? __alloc_pages_slowpath+0x2db0/0x2db0 [ 1164.834622] ? kasan_check_read+0x11/0x20 [ 1164.838768] ? cap_capable+0x1f9/0x260 [ 1164.842667] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1164.848199] ? security_capable+0x99/0xc0 [ 1164.852335] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1164.857858] ? ns_capable_common+0x13f/0x170 [ 1164.862250] ? get_anon_bdev+0x2f0/0x2f0 [ 1164.866296] sget+0x10b/0x150 [ 1164.869394] ? fuse_get_root_inode+0x190/0x190 [ 1164.873958] mount_nodev+0x33/0x110 [ 1164.877565] fuse_mount+0x2c/0x40 [ 1164.881009] mount_fs+0xae/0x328 [ 1164.884375] vfs_kern_mount.part.34+0xd4/0x4d0 [ 1164.888937] ? may_umount+0xb0/0xb0 [ 1164.892553] ? _raw_read_unlock+0x22/0x30 [ 1164.896689] ? __get_fs_type+0x97/0xc0 [ 1164.900558] do_mount+0x564/0x3070 [ 1164.904081] ? copy_mount_string+0x40/0x40 [ 1164.908298] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 1164.913298] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1164.918046] ? retint_kernel+0x10/0x10 [ 1164.921942] ? copy_mount_options+0x1f0/0x380 [ 1164.926424] ? copy_mount_options+0x1fa/0x380 [ 1164.930905] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1164.936427] ? copy_mount_options+0x285/0x380 [ 1164.940916] ksys_mount+0x12d/0x140 [ 1164.944539] __x64_sys_mount+0xbe/0x150 [ 1164.948504] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 1164.952816] sctp: sctp_transport_update_pmtu: Reported pmtu 72 too low, using default minimum of 512 [ 1164.953510] do_syscall_64+0x1b1/0x800 [ 1164.953526] ? syscall_slow_exit_work+0x4f0/0x4f0 [ 1164.953544] ? syscall_return_slowpath+0x5c0/0x5c0 [ 1164.953558] ? syscall_return_slowpath+0x30f/0x5c0 [ 1164.953578] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 1164.986647] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1164.991484] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1164.996651] RIP: 0033:0x455a09 [ 1164.999823] RSP: 002b:00007f118944d808 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1165.007520] RAX: ffffffffffffffda RBX: 0000000000000016 RCX: 0000000000455a09 [ 1165.014774] RDX: 00000000004c1eb6 RSI: 0000000020000240 RDI: 00000000004de0c5 [ 1165.022028] RBP: 0000000000000000 R08: 00007f118944d820 R09: 0000000000000000 [ 1165.029283] R10: 0000000048000000 R11: 0000000000000246 R12: 0000000000000000 [ 1165.036531] R13: 0000000020000240 R14: 0000000048000000 R15: 0000000000000000 2018/05/26 13:24:05 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x24000000000000, 0x0, 0x0, 0x0, 0xc00]}, 0x2c) 2018/05/26 13:24:05 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)="766574683100000000ffffffffffef00", 0x22b) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x7744080000000000]}, 0x10) 2018/05/26 13:24:05 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty=0x18, [0x0, 0x0, 0x0, 0x0, 0x3400000000000000]}, 0x10) 2018/05/26 13:24:05 executing program 6: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18]}, 0x2c) 2018/05/26 13:24:05 executing program 4: r0 = getpid() sched_setattr(r0, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x0, 0x4}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000f86000)='./control/file0\x00') syz_fuse_mount(&(0x7f0000000240)='./control\x00', 0x406000, 0x0, 0x0, 0x0, 0x7a00000000000000) syz_fuseblk_mount(&(0x7f0000000140)='./control\x00', &(0x7f0000000180)='./control/file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) close(r1) 2018/05/26 13:24:05 executing program 7 (fault-call:9 fault-nth:29): r0 = getpid() sched_setattr(r0, &(0x7f00000000c0), 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}}) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) syz_fuse_mount(&(0x7f0000000240)='./control\x00', 0x406000, 0x0, 0x0, 0x0, 0x48000000) close(r1) 2018/05/26 13:24:05 executing program 2: r0 = getpid() sched_setattr(r0, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x0, 0x4}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x8) ioctl$KVM_SET_FPU(r1, 0x41a0ae8d, &(0x7f0000000280)={[], 0x9, 0x6, 0x0, 0x0, 0x4, 0x0, 0x0, [], 0x7}) unlink(&(0x7f0000f86000)='./control/file0\x00') rmdir(&(0x7f00000000c0)='./control\x00') syz_fuse_mount(&(0x7f0000000240)='./control\x00', 0x406000, 0x0, 0x0, 0x0, 0x0) syz_fuseblk_mount(&(0x7f0000000140)='./control\x00', &(0x7f0000000180)='./control/file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) 2018/05/26 13:24:05 executing program 1: r0 = socket$inet(0x2, 0x5, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vcan0\x00', 0x10) sendmsg(r0, &(0x7f0000000480)={&(0x7f0000000140)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000380)="f0", 0x1}], 0x1}, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000a00)={@multicast1=0xe0000001, @local={0xac, 0x14, 0x14, 0xaa}}, 0xc) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000040)="84", 0x7}], 0x1, &(0x7f0000000540)}, 0x0) [ 1165.175966] FAULT_INJECTION: forcing a failure. [ 1165.175966] name failslab, interval 1, probability 0, space 0, times 0 [ 1165.187315] CPU: 1 PID: 2205 Comm: syz-executor7 Not tainted 4.17.0-rc6+ #68 [ 1165.194506] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1165.203860] Call Trace: [ 1165.206461] dump_stack+0x1b9/0x294 [ 1165.210105] ? dump_stack_print_info.cold.2+0x52/0x52 [ 1165.215306] ? __save_stack_trace+0x7e/0xd0 [ 1165.219636] should_fail.cold.4+0xa/0x1a 2018/05/26 13:24:05 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty=0x18, [0x0, 0x0, 0x0, 0x0, 0x40020000]}, 0x10) 2018/05/26 13:24:05 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty=0x18, [0x0, 0x0, 0x0, 0x0, 0x3400]}, 0x10) [ 1165.223730] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1165.228837] ? save_stack+0x43/0xd0 [ 1165.232469] ? kasan_kmalloc+0xc4/0xe0 [ 1165.236362] ? kmem_cache_alloc_trace+0x152/0x780 [ 1165.241207] ? __memcg_init_list_lru_node+0x17d/0x2c0 [ 1165.246399] ? __list_lru_init+0x456/0x790 [ 1165.250638] ? sget_userns+0x767/0xf00 [ 1165.254531] ? graph_lock+0x170/0x170 [ 1165.258339] ? vfs_kern_mount.part.34+0xd4/0x4d0 [ 1165.263097] ? do_mount+0x564/0x3070 [ 1165.266810] ? ksys_mount+0x12d/0x140 [ 1165.270614] ? __x64_sys_mount+0xbe/0x150 [ 1165.274768] ? do_syscall_64+0x1b1/0x800 [ 1165.278841] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1165.284217] ? find_held_lock+0x36/0x1c0 [ 1165.288293] ? __lock_is_held+0xb5/0x140 [ 1165.292375] ? check_same_owner+0x320/0x320 [ 1165.296708] ? rcu_note_context_switch+0x710/0x710 [ 1165.301653] __should_failslab+0x124/0x180 [ 1165.305897] should_failslab+0x9/0x14 [ 1165.309712] kmem_cache_alloc_trace+0x2cb/0x780 [ 1165.314393] ? __kmalloc_node+0x33/0x70 [ 1165.318383] ? __kmalloc_node+0x33/0x70 [ 1165.322383] ? rcu_read_lock_sched_held+0x108/0x120 [ 1165.327428] __memcg_init_list_lru_node+0x17d/0x2c0 [ 1165.332453] ? kvfree_rcu+0x20/0x20 [ 1165.336086] ? __kmalloc_node+0x47/0x70 [ 1165.340073] __list_lru_init+0x456/0x790 [ 1165.344140] ? list_lru_destroy+0x4c0/0x4c0 [ 1165.348466] ? mark_held_locks+0xc9/0x160 [ 1165.352623] ? __raw_spin_lock_init+0x1c/0x100 [ 1165.357209] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 1165.362231] ? lockdep_init_map+0x9/0x10 [ 1165.366291] sget_userns+0x767/0xf00 [ 1165.370004] ? get_anon_bdev+0x2f0/0x2f0 [ 1165.374074] ? destroy_unused_super.part.11+0x110/0x110 [ 1165.379441] ? __alloc_pages_nodemask+0xacf/0xd70 [ 1165.384291] ? __alloc_pages_slowpath+0x2db0/0x2db0 [ 1165.389317] ? kasan_check_read+0x11/0x20 [ 1165.393475] ? cap_capable+0x1f9/0x260 [ 1165.397378] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1165.402921] ? security_capable+0x99/0xc0 [ 1165.407077] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1165.412620] ? ns_capable_common+0x13f/0x170 [ 1165.417031] ? get_anon_bdev+0x2f0/0x2f0 [ 1165.421096] sget+0x10b/0x150 [ 1165.424205] ? fuse_get_root_inode+0x190/0x190 [ 1165.428785] mount_nodev+0x33/0x110 [ 1165.432417] fuse_mount+0x2c/0x40 [ 1165.435874] mount_fs+0xae/0x328 [ 1165.439251] vfs_kern_mount.part.34+0xd4/0x4d0 [ 1165.443836] ? may_umount+0xb0/0xb0 [ 1165.447468] ? _raw_read_unlock+0x22/0x30 [ 1165.451623] ? __get_fs_type+0x97/0xc0 [ 1165.455521] do_mount+0x564/0x3070 [ 1165.459063] ? interrupt_entry+0xb1/0xf0 [ 1165.463127] ? copy_mount_string+0x40/0x40 [ 1165.467367] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1165.472128] ? retint_kernel+0x10/0x10 [ 1165.476026] ? copy_mount_options+0x213/0x380 [ 1165.480527] ? write_comp_data+0x22/0x70 [ 1165.484600] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1165.490138] ? copy_mount_options+0x285/0x380 [ 1165.494638] ksys_mount+0x12d/0x140 [ 1165.498266] __x64_sys_mount+0xbe/0x150 [ 1165.502243] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 1165.507268] do_syscall_64+0x1b1/0x800 [ 1165.511147] ? finish_task_switch+0x1ca/0x840 [ 1165.515625] ? syscall_return_slowpath+0x5c0/0x5c0 [ 1165.520546] ? syscall_return_slowpath+0x30f/0x5c0 [ 1165.525477] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 1165.530830] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1165.535661] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1165.540832] RIP: 0033:0x455a09 [ 1165.544000] RSP: 002b:00007f118944d808 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1165.551700] RAX: ffffffffffffffda RBX: 0000000000000016 RCX: 0000000000455a09 [ 1165.558948] RDX: 00000000004c1eb6 RSI: 0000000020000240 RDI: 00000000004de0c5 [ 1165.566199] RBP: 0000000000000000 R08: 00007f118944d820 R09: 0000000000000000 2018/05/26 13:24:05 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)="766574683100000000ffffffffffef00", 0x22b) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0xfeffffff00000000]}, 0x10) 2018/05/26 13:24:05 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty=0x18, [0x0, 0x0, 0x0, 0x0, 0xb08f4]}, 0x10) 2018/05/26 13:24:05 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)="766574683100000000ffffffffffef00", 0x22b) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]}, 0x10) 2018/05/26 13:24:05 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty=0x18, [0x0, 0x0, 0x0, 0x0, 0x700]}, 0x10) [ 1165.573452] R10: 0000000048000000 R11: 0000000000000246 R12: 0000000000000000 [ 1165.580719] R13: 0000000020000240 R14: 0000000048000000 R15: 0000000000000000 [ 1165.954143] sctp: sctp_transport_update_pmtu: Reported pmtu 72 too low, using default minimum of 512 [ 1166.097563] sctp: sctp_transport_update_pmtu: Reported pmtu 72 too low, using default minimum of 512 2018/05/26 13:24:06 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)="766574683100000000ffffffffffef00", 0x22b) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x88440800]}, 0x10) 2018/05/26 13:24:06 executing program 6: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe00300]}, 0x2c) 2018/05/26 13:24:06 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty=0x18, [0x0, 0x0, 0x0, 0x0, 0xe803]}, 0x10) 2018/05/26 13:24:06 executing program 7 (fault-call:9 fault-nth:30): r0 = getpid() sched_setattr(r0, &(0x7f00000000c0), 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}}) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) syz_fuse_mount(&(0x7f0000000240)='./control\x00', 0x406000, 0x0, 0x0, 0x0, 0x48000000) close(r1) 2018/05/26 13:24:06 executing program 1: r0 = socket$inet(0x2, 0x5, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vcan0\x00', 0x10) sendmsg(r0, &(0x7f0000000480)={&(0x7f0000000140)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000380)="f0", 0x1}], 0x1}, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000a00)={@multicast1=0xe0000001, @local={0xac, 0x14, 0x14, 0xaa}}, 0xc) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000040)="84", 0x7ffff000}], 0x1, &(0x7f0000000540)}, 0x0) 2018/05/26 13:24:06 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0xb000000, 0x0, 0x0, 0x0, 0xc00]}, 0x2c) 2018/05/26 13:24:06 executing program 4: r0 = getpid() sched_setattr(r0, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x0, 0x4}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000f86000)='./control/file0\x00') syz_fuse_mount(&(0x7f0000000240)='./control\x00', 0x406000, 0x0, 0x0, 0x0, 0xffffff7f00000000) syz_fuseblk_mount(&(0x7f0000000140)='./control\x00', &(0x7f0000000180)='./control/file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) close(r1) 2018/05/26 13:24:06 executing program 2: r0 = getpid() sched_setattr(r0, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x0, 0x4}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000480)='/dev/hwrng\x00', 0x10400, 0x0) setsockopt$l2tp_PPPOL2TP_SO_DEBUG(r2, 0x111, 0x1, 0xc49, 0x4) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r3, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000f86000)='./control/file0\x00') syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000080)='./control/file0\x00', 0xa9ed, 0x7, &(0x7f00000015c0)=[{&(0x7f00000001c0)="4ea9492b483f4d750ab8062a59a59505d7f4aecca524c9605699465fc4038b4a5b8e23027b7380a20fe85765f449d12e8ce427cfd201d48584ae5b2110bc168de886210d1115ce469ce6ba", 0x4b, 0xfffffffffffffff8}, {&(0x7f0000000280)="11784baf1d8237a3598ef83fa35679323c32777d229e9c43803db2e9d2e731cd15f12402175b82ef16343a80607fbda771ae1fb32644b25f4ffa314200bdb8d5497981de51b16fa95cd78d46dddc31bc2fd85dc3c11a8b9fd63ab8a21e04c90fb0098904b270ea3c80bfe0aa2c0c92338ac30b431181b25012c13aa2fa5aaab4480ab97603de492a614fe25baf7a78b8632a70c157f4a59c5c63a73c670adb21baf50eed5acbcc916d6067ee1705d9e19c72d8afaaf87091286836fdfe0b3ee6e958eb94b6", 0xc5, 0xb45}, {&(0x7f0000000100)="eb0188ebb8eeb6beff615fd49b37ee901c5da4f2b266aaa020ecfca9f48d3a36661bdc2961c4f06105316931a559c0278f5f22a3f1b34a0ee76955b8f3ac61", 0x3f, 0xca05}, {&(0x7f0000000380)="c1bc5b6e97c3c7f3da036f559860f389b50357354b6df47fd6a32f7e923d01525a751f8c7165dd6cda3d7fd8ba114800295db54a97d225e6ace857eec11e68f43bd94f79a5611085d283b9a6b88c7ab94b0c7aeaf55338f7f285827f3aa097dac1cfa99c2152eb4a84ec4033c531ab30cee87eb650366ce8ef7b821598648a3eb94585667a8a334078763a4ac6ec6343cbd11f146917d3a5fda07f6a138156c1f3a4241e56f8ddba755afd2ddb8559533d65e30a822c45d1eff5a979bd5670879fb0f1c320fcd8519d5a1ff34a3cc817f8680f9b139944807f7e19062ddca15fbb8b8642e67dd3e2b30e", 0xea, 0x4}, {&(0x7f0000000480), 0x0, 0xff}, {&(0x7f00000004c0)="d88a6be23f2955c6ed94af5e88b23919d5b2602e88ccb9323021805efae11e5517dd7fe3d53a6fdbe11bf8a10779f9d9a7a576305217c2afad7b85dca2fe4e638de74e95a600ad2fbbc4ff160f2418eaf72534070b44550c4ecad18f1dfcda42c105fb37c95729be3a88bf63bcdc84050de3a98597962286f1f60929fca10f93bb320bf35909e40a80c91ac1b70dee423169fd616649d3349b91d2cb4356bbf06f51d4fe0ce07703190689c1326de1e2560729841c836c9242b384ce4b638b11443965413e5d38aa65ffa08605ddd7fa", 0xd0, 0x2}, {&(0x7f00000005c0)="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", 0x1000, 0x4}], 0x100000, &(0x7f0000001680)=ANY=[@ANYBLOB="6e6f636173452c926572726f72733d7265566d6f756e742d726f2c666c8a73682c7379735f696d6d757461626c65"]) rmdir(&(0x7f00000000c0)='./control\x00') syz_fuse_mount(&(0x7f0000000240)='./control\x00', 0x406000, 0x0, 0x0, 0x0, 0x0) syz_fuseblk_mount(&(0x7f0000000140)='./control\x00', &(0x7f0000000180)='./control/file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) close(r1) [ 1166.265137] FAULT_INJECTION: forcing a failure. [ 1166.265137] name failslab, interval 1, probability 0, space 0, times 0 [ 1166.276519] CPU: 0 PID: 2245 Comm: syz-executor7 Not tainted 4.17.0-rc6+ #68 [ 1166.283709] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1166.288630] TCP: out of memory -- consider tuning tcp_mem [ 1166.293054] Call Trace: [ 1166.293079] dump_stack+0x1b9/0x294 [ 1166.293099] ? dump_stack_print_info.cold.2+0x52/0x52 [ 1166.293120] ? __save_stack_trace+0x7e/0xd0 [ 1166.298950] TCP: out of memory -- consider tuning tcp_mem [ 1166.301227] should_fail.cold.4+0xa/0x1a [ 1166.301247] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1166.301266] ? save_stack+0x43/0xd0 [ 1166.301283] ? kasan_kmalloc+0xc4/0xe0 [ 1166.336518] ? kmem_cache_alloc_trace+0x152/0x780 [ 1166.341369] ? __memcg_init_list_lru_node+0x17d/0x2c0 [ 1166.346560] ? __list_lru_init+0x456/0x790 [ 1166.350801] ? sget_userns+0x767/0xf00 [ 1166.354697] ? graph_lock+0x170/0x170 [ 1166.358503] ? vfs_kern_mount.part.34+0xd4/0x4d0 [ 1166.363262] ? do_mount+0x564/0x3070 [ 1166.366973] ? ksys_mount+0x12d/0x140 [ 1166.370771] ? __x64_sys_mount+0xbe/0x150 [ 1166.374920] ? do_syscall_64+0x1b1/0x800 [ 1166.378982] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1166.384356] ? find_held_lock+0x36/0x1c0 [ 1166.388427] ? __lock_is_held+0xb5/0x140 [ 1166.392507] ? check_same_owner+0x320/0x320 [ 1166.396835] ? rcu_note_context_switch+0x710/0x710 [ 1166.401774] __should_failslab+0x124/0x180 [ 1166.406018] should_failslab+0x9/0x14 [ 1166.409821] kmem_cache_alloc_trace+0x2cb/0x780 2018/05/26 13:24:06 executing program 6: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000]}, 0x2c) 2018/05/26 13:24:06 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)="766574683100000000ffffffffffef00", 0x22b) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x16000000]}, 0x10) 2018/05/26 13:24:06 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0xe000000, 0x0, 0x0, 0x0, 0xc00]}, 0x2c) [ 1166.414491] ? __kmalloc_node+0x33/0x70 [ 1166.418461] ? __kmalloc_node+0x33/0x70 [ 1166.422434] ? rcu_read_lock_sched_held+0x108/0x120 [ 1166.427456] __memcg_init_list_lru_node+0x17d/0x2c0 [ 1166.432481] ? kvfree_rcu+0x20/0x20 [ 1166.436121] ? __kmalloc_node+0x47/0x70 [ 1166.440119] __list_lru_init+0x456/0x790 [ 1166.444190] ? list_lru_destroy+0x4c0/0x4c0 [ 1166.448515] ? mark_held_locks+0xc9/0x160 [ 1166.452672] ? __raw_spin_lock_init+0x1c/0x100 [ 1166.457258] ? trace_hardirqs_on_caller+0x421/0x5c0 2018/05/26 13:24:06 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)="766574683100000000ffffffffffef00", 0x22b) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}, 0x10) 2018/05/26 13:24:06 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0xa00, 0x0, 0x0, 0x0, 0xc00]}, 0x2c) [ 1166.462284] ? lockdep_init_map+0x9/0x10 [ 1166.465775] TCP: out of memory -- consider tuning tcp_mem [ 1166.466352] sget_userns+0x767/0xf00 [ 1166.466365] ? get_anon_bdev+0x2f0/0x2f0 [ 1166.466384] ? destroy_unused_super.part.11+0x110/0x110 [ 1166.485002] ? __alloc_pages_nodemask+0xacf/0xd70 [ 1166.489852] ? __alloc_pages_slowpath+0x2db0/0x2db0 [ 1166.494874] ? kasan_check_read+0x11/0x20 [ 1166.499031] ? cap_capable+0x1f9/0x260 [ 1166.502933] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1166.508472] ? security_capable+0x99/0xc0 2018/05/26 13:24:06 executing program 6: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24]}, 0x2c) [ 1166.512627] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1166.518176] ? ns_capable_common+0x13f/0x170 [ 1166.522591] ? get_anon_bdev+0x2f0/0x2f0 [ 1166.526656] sget+0x10b/0x150 [ 1166.529770] ? fuse_get_root_inode+0x190/0x190 [ 1166.534356] mount_nodev+0x33/0x110 [ 1166.537987] fuse_mount+0x2c/0x40 [ 1166.541446] mount_fs+0xae/0x328 [ 1166.544821] vfs_kern_mount.part.34+0xd4/0x4d0 [ 1166.549407] ? may_umount+0xb0/0xb0 [ 1166.553038] ? _raw_read_unlock+0x22/0x30 [ 1166.557186] ? __get_fs_type+0x97/0xc0 [ 1166.561082] do_mount+0x564/0x3070 2018/05/26 13:24:06 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)="766574683100000000ffffffffffef00", 0x22b) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, 0x10) [ 1166.564626] ? copy_mount_string+0x40/0x40 [ 1166.568863] ? rcu_pm_notify+0xc0/0xc0 [ 1166.572759] ? copy_mount_options+0x5f/0x380 [ 1166.577171] ? rcu_read_lock_sched_held+0x108/0x120 [ 1166.582192] ? kmem_cache_alloc_trace+0x616/0x780 [ 1166.587044] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1166.592587] ? _copy_from_user+0xdf/0x150 [ 1166.596743] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1166.602284] ? copy_mount_options+0x285/0x380 [ 1166.606805] ksys_mount+0x12d/0x140 [ 1166.610451] __x64_sys_mount+0xbe/0x150 [ 1166.614429] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 1166.619456] do_syscall_64+0x1b1/0x800 [ 1166.623344] ? finish_task_switch+0x1ca/0x840 [ 1166.627837] ? syscall_return_slowpath+0x5c0/0x5c0 [ 1166.632772] ? syscall_return_slowpath+0x30f/0x5c0 [ 1166.637708] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 1166.643081] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1166.647941] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1166.653132] RIP: 0033:0x455a09 [ 1166.656319] RSP: 002b:00007f118944d808 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1166.664028] RAX: ffffffffffffffda RBX: 0000000000000016 RCX: 0000000000455a09 [ 1166.671303] RDX: 00000000004c1eb6 RSI: 0000000020000240 RDI: 00000000004de0c5 [ 1166.678575] RBP: 0000000000000000 R08: 00007f118944d820 R09: 0000000000000000 [ 1166.685845] R10: 0000000048000000 R11: 0000000000000246 R12: 0000000000000000 [ 1166.693123] R13: 0000000020000240 R14: 0000000048000000 R15: 0000000000000000 2018/05/26 13:24:07 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)="766574683100000000ffffffffffef00", 0x22b) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x16]}, 0x10) 2018/05/26 13:24:07 executing program 6: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x752]}, 0x2c) 2018/05/26 13:24:07 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty=0x18, [0x0, 0x0, 0x0, 0x0, 0x2]}, 0x10) 2018/05/26 13:24:07 executing program 7 (fault-call:9 fault-nth:31): r0 = getpid() sched_setattr(r0, &(0x7f00000000c0), 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}}) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) syz_fuse_mount(&(0x7f0000000240)='./control\x00', 0x406000, 0x0, 0x0, 0x0, 0x48000000) close(r1) 2018/05/26 13:24:07 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x3a800, 0x0, 0x0, 0x0, 0xc00]}, 0x2c) 2018/05/26 13:24:07 executing program 4: r0 = getpid() sched_setattr(r0, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x0, 0x4}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000f86000)='./control/file0\x00') syz_fuse_mount(&(0x7f0000000240)='./control\x00', 0x406000, 0x0, 0x0, 0x0, 0x819010000000000) syz_fuseblk_mount(&(0x7f0000000140)='./control\x00', &(0x7f0000000180)='./control/file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) close(r1) 2018/05/26 13:24:07 executing program 1: r0 = socket$inet(0x2, 0x5, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vcan0\x00', 0x10) sendmsg(r0, &(0x7f0000000480)={&(0x7f0000000140)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000380)="f0", 0x1}], 0x1}, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000a00)={@multicast1=0xe0000001, @local={0xac, 0x14, 0x14, 0xaa}}, 0xc) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000040)="84", 0x2}], 0x1, &(0x7f0000000540)}, 0x0) 2018/05/26 13:24:07 executing program 2: r0 = getpid() sched_setattr(r0, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x0, 0x4}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x973, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000f86000)='./control/file0\x00') rmdir(&(0x7f00000000c0)='./control\x00') syz_fuse_mount(&(0x7f0000000240)='./control\x00', 0x406000, 0x0, 0x0, 0x0, 0x0) syz_fuseblk_mount(&(0x7f0000000140)='./control\x00', &(0x7f0000000180)='./control/file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) close(r1) [ 1167.473179] FAULT_INJECTION: forcing a failure. [ 1167.473179] name failslab, interval 1, probability 0, space 0, times 0 [ 1167.484525] CPU: 1 PID: 2323 Comm: syz-executor7 Not tainted 4.17.0-rc6+ #68 [ 1167.491727] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1167.501078] Call Trace: [ 1167.503675] dump_stack+0x1b9/0x294 [ 1167.507315] ? dump_stack_print_info.cold.2+0x52/0x52 [ 1167.512511] ? __save_stack_trace+0x7e/0xd0 [ 1167.516849] should_fail.cold.4+0xa/0x1a 2018/05/26 13:24:07 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty=0x18, [0x0, 0x0, 0x0, 0x0, 0x14280000000000]}, 0x10) 2018/05/26 13:24:07 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0xa000, 0x0, 0x0, 0x0, 0xc00]}, 0x2c) 2018/05/26 13:24:07 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)="766574683100000000ffffffffffef00", 0x22b) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0xc8000000]}, 0x10) [ 1167.520921] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1167.526035] ? save_stack+0x43/0xd0 [ 1167.529670] ? kasan_kmalloc+0xc4/0xe0 [ 1167.533569] ? kmem_cache_alloc_trace+0x152/0x780 [ 1167.538414] ? __memcg_init_list_lru_node+0x17d/0x2c0 [ 1167.543606] ? __list_lru_init+0x456/0x790 [ 1167.547844] ? sget_userns+0x767/0xf00 [ 1167.551735] ? graph_lock+0x170/0x170 [ 1167.555539] ? vfs_kern_mount.part.34+0xd4/0x4d0 [ 1167.560305] ? do_mount+0x564/0x3070 [ 1167.564024] ? ksys_mount+0x12d/0x140 [ 1167.567827] ? __x64_sys_mount+0xbe/0x150 [ 1167.571983] ? do_syscall_64+0x1b1/0x800 [ 1167.576047] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1167.581417] ? find_held_lock+0x36/0x1c0 [ 1167.585486] ? __lock_is_held+0xb5/0x140 [ 1167.589570] ? check_same_owner+0x320/0x320 [ 1167.593903] ? rcu_note_context_switch+0x710/0x710 [ 1167.598845] __should_failslab+0x124/0x180 [ 1167.603096] should_failslab+0x9/0x14 [ 1167.606907] kmem_cache_alloc_trace+0x2cb/0x780 [ 1167.611584] ? __kmalloc_node+0x33/0x70 [ 1167.615568] ? __kmalloc_node+0x33/0x70 [ 1167.619556] ? rcu_read_lock_sched_held+0x108/0x120 [ 1167.624581] __memcg_init_list_lru_node+0x17d/0x2c0 [ 1167.629602] ? kvfree_rcu+0x20/0x20 [ 1167.633235] ? __kmalloc_node+0x47/0x70 [ 1167.637215] __list_lru_init+0x456/0x790 [ 1167.641283] ? list_lru_destroy+0x4c0/0x4c0 [ 1167.645610] ? mark_held_locks+0xc9/0x160 [ 1167.649762] ? __raw_spin_lock_init+0x1c/0x100 [ 1167.654352] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 1167.659378] ? lockdep_init_map+0x9/0x10 [ 1167.663444] sget_userns+0x767/0xf00 [ 1167.667161] ? get_anon_bdev+0x2f0/0x2f0 [ 1167.671230] ? destroy_unused_super.part.11+0x110/0x110 [ 1167.676596] ? __alloc_pages_nodemask+0xacf/0xd70 [ 1167.681446] ? __alloc_pages_slowpath+0x2db0/0x2db0 [ 1167.686469] ? kasan_check_read+0x11/0x20 [ 1167.690626] ? cap_capable+0x1f9/0x260 [ 1167.694522] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1167.700069] ? security_capable+0x99/0xc0 [ 1167.704226] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1167.709765] ? ns_capable_common+0x13f/0x170 [ 1167.714184] ? get_anon_bdev+0x2f0/0x2f0 [ 1167.718261] sget+0x10b/0x150 [ 1167.721371] ? fuse_get_root_inode+0x190/0x190 [ 1167.725952] mount_nodev+0x33/0x110 [ 1167.729583] fuse_mount+0x2c/0x40 [ 1167.733040] mount_fs+0xae/0x328 [ 1167.736414] vfs_kern_mount.part.34+0xd4/0x4d0 [ 1167.741003] ? may_umount+0xb0/0xb0 [ 1167.744633] ? _raw_read_unlock+0x22/0x30 [ 1167.748785] ? __get_fs_type+0x97/0xc0 [ 1167.752682] do_mount+0x564/0x3070 [ 1167.756231] ? copy_mount_string+0x40/0x40 [ 1167.760469] ? rcu_pm_notify+0xc0/0xc0 [ 1167.764368] ? copy_mount_options+0x5f/0x380 [ 1167.768782] ? rcu_read_lock_sched_held+0x108/0x120 [ 1167.773802] ? kmem_cache_alloc_trace+0x616/0x780 [ 1167.778661] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1167.784200] ? copy_mount_options+0x285/0x380 [ 1167.788705] ksys_mount+0x12d/0x140 [ 1167.792342] __x64_sys_mount+0xbe/0x150 [ 1167.796320] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 1167.801352] do_syscall_64+0x1b1/0x800 [ 1167.805239] ? finish_task_switch+0x1ca/0x840 [ 1167.809739] ? syscall_return_slowpath+0x5c0/0x5c0 [ 1167.814685] ? syscall_return_slowpath+0x30f/0x5c0 [ 1167.819624] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 1167.824996] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1167.829848] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1167.835039] RIP: 0033:0x455a09 [ 1167.838225] RSP: 002b:00007f118944d808 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1167.845935] RAX: ffffffffffffffda RBX: 0000000000000016 RCX: 0000000000455a09 [ 1167.853209] RDX: 00000000004c1eb6 RSI: 0000000020000240 RDI: 00000000004de0c5 [ 1167.860483] RBP: 0000000000000000 R08: 00007f118944d820 R09: 0000000000000000 [ 1167.867752] R10: 0000000048000000 R11: 0000000000000246 R12: 0000000000000000 2018/05/26 13:24:07 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty=0x18, [0x0, 0x0, 0x0, 0x0, 0xa00000000000000]}, 0x10) 2018/05/26 13:24:07 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)="766574683100000000ffffffffffef00", 0x22b) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x73440800]}, 0x10) 2018/05/26 13:24:07 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x14000, 0x0, 0x0, 0x0, 0xc00]}, 0x2c) 2018/05/26 13:24:07 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty=0x18, [0x0, 0x0, 0x0, 0x0, 0x11000000]}, 0x10) 2018/05/26 13:24:07 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x20010000000000, 0x0, 0x0, 0x0, 0xc00]}, 0x2c) 2018/05/26 13:24:08 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty=0x18, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x10) [ 1167.875020] R13: 0000000020000240 R14: 0000000048000000 R15: 0000000000000000 [ 1168.271101] sctp: sctp_transport_update_pmtu: Reported pmtu 72 too low, using default minimum of 512 [ 1168.415118] sctp: sctp_transport_update_pmtu: Reported pmtu 72 too low, using default minimum of 512 2018/05/26 13:24:08 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0xc00]}, 0x2c) 2018/05/26 13:24:08 executing program 1: r0 = socket$inet(0x2, 0x5, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vcan0\x00', 0x10) sendmsg(r0, &(0x7f0000000480)={&(0x7f0000000140)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000380)="f0", 0x1}], 0x1}, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000a00)={@multicast1=0xe0000001, @local={0xac, 0x14, 0x14, 0xaa}}, 0xc) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000040)="84", 0x8}], 0x1, &(0x7f0000000540)}, 0x0) 2018/05/26 13:24:08 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)="766574683100000000ffffffffffef00", 0x22b) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x500]}, 0x10) 2018/05/26 13:24:08 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty=0x18, [0x0, 0x0, 0x0, 0x0, 0xf4080b00]}, 0x10) 2018/05/26 13:24:08 executing program 7 (fault-call:9 fault-nth:32): r0 = getpid() sched_setattr(r0, &(0x7f00000000c0), 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}}) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) syz_fuse_mount(&(0x7f0000000240)='./control\x00', 0x406000, 0x0, 0x0, 0x0, 0x48000000) close(r1) 2018/05/26 13:24:08 executing program 2: r0 = getpid() r1 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x7, 0x10000) ioctl$BLKRAGET(r1, 0x1263, &(0x7f0000000080)) sched_setattr(r0, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x0, 0x4}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r3, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000f86000)='./control/file0\x00') rmdir(&(0x7f00000000c0)='./control\x00') syz_fuse_mount(&(0x7f0000000240)='./control\x00', 0x406000, 0x0, 0x0, 0x0, 0x0) syz_fuseblk_mount(&(0x7f0000000140)='./control\x00', &(0x7f0000000180)='./control/file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) close(r2) 2018/05/26 13:24:08 executing program 4: r0 = getpid() sched_setattr(r0, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x0, 0x4}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000f86000)='./control/file0\x00') syz_fuse_mount(&(0x7f0000000240)='./control\x00', 0x406000, 0x0, 0x0, 0x0, 0x3f000000) syz_fuseblk_mount(&(0x7f0000000140)='./control\x00', &(0x7f0000000180)='./control/file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) close(r1) 2018/05/26 13:24:08 executing program 6: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd00000000000000]}, 0x2c) [ 1168.593469] FAULT_INJECTION: forcing a failure. [ 1168.593469] name failslab, interval 1, probability 0, space 0, times 0 [ 1168.604818] CPU: 1 PID: 2377 Comm: syz-executor7 Not tainted 4.17.0-rc6+ #68 [ 1168.612003] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1168.621354] Call Trace: [ 1168.623953] dump_stack+0x1b9/0x294 [ 1168.627586] ? dump_stack_print_info.cold.2+0x52/0x52 [ 1168.632784] ? __save_stack_trace+0x7e/0xd0 [ 1168.637116] should_fail.cold.4+0xa/0x1a 2018/05/26 13:24:08 executing program 6: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9000000]}, 0x2c) 2018/05/26 13:24:08 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty=0x18, [0x0, 0x0, 0x0, 0x0, 0x20000]}, 0x10) [ 1168.641186] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1168.646298] ? save_stack+0x43/0xd0 [ 1168.649932] ? kasan_kmalloc+0xc4/0xe0 [ 1168.653827] ? kmem_cache_alloc_trace+0x152/0x780 [ 1168.658677] ? __memcg_init_list_lru_node+0x17d/0x2c0 [ 1168.663873] ? __list_lru_init+0x456/0x790 [ 1168.668119] ? sget_userns+0x767/0xf00 [ 1168.672014] ? graph_lock+0x170/0x170 [ 1168.675818] ? vfs_kern_mount.part.34+0xd4/0x4d0 [ 1168.680578] ? do_mount+0x564/0x3070 [ 1168.684295] ? ksys_mount+0x12d/0x140 [ 1168.688096] ? __x64_sys_mount+0xbe/0x150 [ 1168.692251] ? do_syscall_64+0x1b1/0x800 [ 1168.696318] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1168.701692] ? find_held_lock+0x36/0x1c0 [ 1168.705765] ? __lock_is_held+0xb5/0x140 [ 1168.709845] ? check_same_owner+0x320/0x320 [ 1168.714176] ? rcu_note_context_switch+0x710/0x710 [ 1168.719114] __should_failslab+0x124/0x180 [ 1168.723360] should_failslab+0x9/0x14 [ 1168.727171] kmem_cache_alloc_trace+0x2cb/0x780 [ 1168.731844] ? __kmalloc_node+0x33/0x70 [ 1168.735825] ? __kmalloc_node+0x33/0x70 [ 1168.739806] ? rcu_read_lock_sched_held+0x108/0x120 [ 1168.744837] __memcg_init_list_lru_node+0x17d/0x2c0 [ 1168.749860] ? kvfree_rcu+0x20/0x20 [ 1168.753495] ? __kmalloc_node+0x47/0x70 [ 1168.757481] __list_lru_init+0x456/0x790 [ 1168.761550] ? list_lru_destroy+0x4c0/0x4c0 [ 1168.765879] ? mark_held_locks+0xc9/0x160 [ 1168.770033] ? __raw_spin_lock_init+0x1c/0x100 [ 1168.774620] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 1168.779642] ? lockdep_init_map+0x9/0x10 [ 1168.783708] sget_userns+0x767/0xf00 [ 1168.787424] ? get_anon_bdev+0x2f0/0x2f0 [ 1168.791502] ? destroy_unused_super.part.11+0x110/0x110 [ 1168.796869] ? __alloc_pages_nodemask+0xacf/0xd70 [ 1168.801718] ? __alloc_pages_slowpath+0x2db0/0x2db0 [ 1168.806738] ? kasan_check_read+0x11/0x20 [ 1168.810890] ? cap_capable+0x1f9/0x260 [ 1168.814792] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1168.820330] ? security_capable+0x99/0xc0 [ 1168.824487] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1168.830028] ? ns_capable_common+0x13f/0x170 [ 1168.834441] ? get_anon_bdev+0x2f0/0x2f0 [ 1168.838509] sget+0x10b/0x150 [ 1168.841624] ? fuse_get_root_inode+0x190/0x190 [ 1168.846214] mount_nodev+0x33/0x110 [ 1168.849850] fuse_mount+0x2c/0x40 [ 1168.853315] mount_fs+0xae/0x328 [ 1168.856695] vfs_kern_mount.part.34+0xd4/0x4d0 [ 1168.861284] ? may_umount+0xb0/0xb0 [ 1168.864915] ? _raw_read_unlock+0x22/0x30 [ 1168.869064] ? __get_fs_type+0x97/0xc0 [ 1168.872958] do_mount+0x564/0x3070 [ 1168.876506] ? copy_mount_string+0x40/0x40 [ 1168.880747] ? rcu_pm_notify+0xc0/0xc0 [ 1168.884649] ? copy_mount_options+0x5f/0x380 [ 1168.889058] ? rcu_read_lock_sched_held+0x108/0x120 [ 1168.894081] ? kmem_cache_alloc_trace+0x616/0x780 [ 1168.898935] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1168.904479] ? _copy_from_user+0xdf/0x150 [ 1168.908631] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1168.914171] ? copy_mount_options+0x285/0x380 [ 1168.918670] ksys_mount+0x12d/0x140 [ 1168.922305] __x64_sys_mount+0xbe/0x150 [ 1168.926287] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 1168.931306] do_syscall_64+0x1b1/0x800 [ 1168.935194] ? finish_task_switch+0x1ca/0x840 [ 1168.939689] ? syscall_return_slowpath+0x5c0/0x5c0 [ 1168.944626] ? syscall_return_slowpath+0x30f/0x5c0 [ 1168.949563] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 1168.954934] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1168.959791] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1168.964984] RIP: 0033:0x455a09 [ 1168.968169] RSP: 002b:00007f118944d808 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1168.975877] RAX: ffffffffffffffda RBX: 0000000000000016 RCX: 0000000000455a09 [ 1168.983148] RDX: 00000000004c1eb6 RSI: 0000000020000240 RDI: 00000000004de0c5 2018/05/26 13:24:08 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0xc00]}, 0x2c) 2018/05/26 13:24:08 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)="766574683100000000ffffffffffef00", 0x22b) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe]}, 0x10) 2018/05/26 13:24:09 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty=0x18, [0x0, 0x0, 0x0, 0x0, 0x8055]}, 0x10) 2018/05/26 13:24:09 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)="766574683100000000ffffffffffef00", 0x22b) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x84488]}, 0x10) 2018/05/26 13:24:09 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0xa00000, 0x0, 0x0, 0x0, 0xc00]}, 0x2c) 2018/05/26 13:24:09 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty=0x18, [0x0, 0x0, 0x0, 0x0, 0x12]}, 0x10) 2018/05/26 13:24:09 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)="766574683100000000ffffffffffef00", 0x22b) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x8344080000000000]}, 0x10) [ 1168.990419] RBP: 0000000000000000 R08: 00007f118944d820 R09: 0000000000000000 [ 1168.997694] R10: 0000000048000000 R11: 0000000000000246 R12: 0000000000000000 [ 1169.004963] R13: 0000000020000240 R14: 0000000048000000 R15: 0000000000000000 [ 1169.386717] sctp: sctp_transport_update_pmtu: Reported pmtu 72 too low, using default minimum of 512 [ 1169.537625] sctp: sctp_transport_update_pmtu: Reported pmtu 72 too low, using default minimum of 512 2018/05/26 13:24:09 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xc00]}, 0x2c) 2018/05/26 13:24:09 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)="766574683100000000ffffffffffef00", 0x22b) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x78440800]}, 0x10) 2018/05/26 13:24:09 executing program 7 (fault-call:9 fault-nth:33): r0 = getpid() sched_setattr(r0, &(0x7f00000000c0), 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}}) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) syz_fuse_mount(&(0x7f0000000240)='./control\x00', 0x406000, 0x0, 0x0, 0x0, 0x48000000) close(r1) 2018/05/26 13:24:09 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty=0x18, [0x0, 0x0, 0x0, 0x0, 0x3e8]}, 0x10) 2018/05/26 13:24:09 executing program 6: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00300]}, 0x2c) 2018/05/26 13:24:09 executing program 4: r0 = getpid() sched_setattr(r0, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x0, 0x4}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000f86000)='./control/file0\x00') syz_fuse_mount(&(0x7f0000000240)='./control\x00', 0x406000, 0x0, 0x0, 0x0, 0xc000000) syz_fuseblk_mount(&(0x7f0000000140)='./control\x00', &(0x7f0000000180)='./control/file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) close(r1) 2018/05/26 13:24:09 executing program 1: r0 = socket$inet(0x2, 0x5, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vcan0\x00', 0x10) sendmsg(r0, &(0x7f0000000480)={&(0x7f0000000140)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000380)="f0", 0x1}], 0x1}, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000a00)={@multicast1=0xe0000001, @local={0xac, 0x14, 0x14, 0xaa}}, 0xc) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000040)="84", 0x7592da1f}], 0x1, &(0x7f0000000540)}, 0x0) 2018/05/26 13:24:09 executing program 2: r0 = getpid() sched_setattr(r0, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x0, 0x4}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000f86000)='./control/file0\x00') rmdir(&(0x7f00000000c0)='./control\x00') openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x80001, 0x0) syz_fuse_mount(&(0x7f0000000240)='./control\x00', 0x406000, 0x0, 0x0, 0x0, 0x0) syz_fuseblk_mount(&(0x7f0000000140)='./control\x00', &(0x7f0000000180)='./control/file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) close(r1) 2018/05/26 13:24:09 executing program 6: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000]}, 0x2c) [ 1169.720458] FAULT_INJECTION: forcing a failure. [ 1169.720458] name failslab, interval 1, probability 0, space 0, times 0 [ 1169.731815] CPU: 0 PID: 2451 Comm: syz-executor7 Not tainted 4.17.0-rc6+ #68 [ 1169.739004] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1169.748359] Call Trace: [ 1169.750959] dump_stack+0x1b9/0x294 [ 1169.754598] ? dump_stack_print_info.cold.2+0x52/0x52 [ 1169.759799] ? __save_stack_trace+0x7e/0xd0 [ 1169.764136] should_fail.cold.4+0xa/0x1a 2018/05/26 13:24:09 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)="766574683100000000ffffffffffef00", 0x22b) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x84489]}, 0x10) [ 1169.764642] net_ratelimit: 12 callbacks suppressed [ 1169.764646] TCP: out of memory -- consider tuning tcp_mem [ 1169.768202] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1169.768222] ? save_stack+0x43/0xd0 [ 1169.768237] ? kasan_kmalloc+0xc4/0xe0 [ 1169.768251] ? kmem_cache_alloc_trace+0x152/0x780 [ 1169.768269] ? __memcg_init_list_lru_node+0x17d/0x2c0 [ 1169.801297] ? __list_lru_init+0x456/0x790 [ 1169.805657] ? sget_userns+0x767/0xf00 [ 1169.809558] ? graph_lock+0x170/0x170 [ 1169.813362] ? vfs_kern_mount.part.34+0xd4/0x4d0 2018/05/26 13:24:10 executing program 6: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb00000000000000]}, 0x2c) [ 1169.818121] ? do_mount+0x564/0x3070 [ 1169.821837] ? ksys_mount+0x12d/0x140 [ 1169.825646] ? __x64_sys_mount+0xbe/0x150 [ 1169.829801] ? do_syscall_64+0x1b1/0x800 [ 1169.833866] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1169.839243] ? find_held_lock+0x36/0x1c0 [ 1169.843314] ? __lock_is_held+0xb5/0x140 [ 1169.847401] ? check_same_owner+0x320/0x320 [ 1169.851737] ? rcu_note_context_switch+0x710/0x710 [ 1169.856674] __should_failslab+0x124/0x180 [ 1169.860914] should_failslab+0x9/0x14 [ 1169.864726] kmem_cache_alloc_trace+0x2cb/0x780 2018/05/26 13:24:10 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)="766574683100000000ffffffffffef00", 0x22b) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x84480]}, 0x10) [ 1169.869402] ? __kmalloc_node+0x33/0x70 [ 1169.872043] TCP: out of memory -- consider tuning tcp_mem [ 1169.873373] ? __kmalloc_node+0x33/0x70 [ 1169.873391] ? rcu_read_lock_sched_held+0x108/0x120 [ 1169.873412] __memcg_init_list_lru_node+0x17d/0x2c0 [ 1169.873429] ? kvfree_rcu+0x20/0x20 [ 1169.873444] ? __kmalloc_node+0x47/0x70 [ 1169.873464] __list_lru_init+0x456/0x790 [ 1169.873479] ? list_lru_destroy+0x4c0/0x4c0 [ 1169.908886] ? mark_held_locks+0xc9/0x160 [ 1169.913048] ? __raw_spin_lock_init+0x1c/0x100 2018/05/26 13:24:10 executing program 6: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1800000000000000]}, 0x2c) [ 1169.917638] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 1169.922657] ? lockdep_init_map+0x9/0x10 [ 1169.926721] sget_userns+0x767/0xf00 [ 1169.930440] ? get_anon_bdev+0x2f0/0x2f0 [ 1169.934512] ? destroy_unused_super.part.11+0x110/0x110 [ 1169.939895] ? __alloc_pages_nodemask+0xacf/0xd70 [ 1169.944757] ? __alloc_pages_slowpath+0x2db0/0x2db0 [ 1169.949783] ? kasan_check_read+0x11/0x20 [ 1169.953939] ? cap_capable+0x1f9/0x260 [ 1169.957839] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1169.963385] ? security_capable+0x99/0xc0 [ 1169.967540] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1169.973080] ? ns_capable_common+0x13f/0x170 [ 1169.977492] ? get_anon_bdev+0x2f0/0x2f0 [ 1169.981560] sget+0x10b/0x150 [ 1169.984672] ? fuse_get_root_inode+0x190/0x190 [ 1169.989260] mount_nodev+0x33/0x110 [ 1169.992899] fuse_mount+0x2c/0x40 [ 1169.993677] TCP: out of memory -- consider tuning tcp_mem [ 1169.996352] mount_fs+0xae/0x328 [ 1169.996372] vfs_kern_mount.part.34+0xd4/0x4d0 [ 1169.996389] ? may_umount+0xb0/0xb0 [ 1169.996403] ? _raw_read_unlock+0x22/0x30 [ 1169.996416] ? __get_fs_type+0x97/0xc0 2018/05/26 13:24:10 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)="766574683100000000ffffffffffef00", 0x22b) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x84482]}, 0x10) 2018/05/26 13:24:10 executing program 6: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000]}, 0x2c) [ 1169.996435] do_mount+0x564/0x3070 [ 1169.996452] ? copy_mount_string+0x40/0x40 [ 1170.015452] TCP: out of memory -- consider tuning tcp_mem [ 1170.017627] ? rcu_pm_notify+0xc0/0xc0 [ 1170.017652] ? copy_mount_options+0x5f/0x380 [ 1170.017667] ? rcu_read_lock_sched_held+0x108/0x120 [ 1170.017685] ? kmem_cache_alloc_trace+0x616/0x780 [ 1170.017704] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1170.017722] ? _copy_from_user+0xdf/0x150 [ 1170.062614] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1170.068159] ? copy_mount_options+0x285/0x380 [ 1170.072666] ksys_mount+0x12d/0x140 [ 1170.076303] __x64_sys_mount+0xbe/0x150 [ 1170.080291] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 1170.085316] do_syscall_64+0x1b1/0x800 [ 1170.089210] ? finish_task_switch+0x1ca/0x840 [ 1170.093713] ? syscall_return_slowpath+0x5c0/0x5c0 [ 1170.098646] ? syscall_return_slowpath+0x30f/0x5c0 [ 1170.103584] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 1170.108955] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1170.113808] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1170.118993] RIP: 0033:0x455a09 [ 1170.122174] RSP: 002b:00007f118944d808 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1170.123434] TCP: out of memory -- consider tuning tcp_mem [ 1170.129883] RAX: ffffffffffffffda RBX: 0000000000000016 RCX: 0000000000455a09 [ 1170.129893] RDX: 00000000004c1eb6 RSI: 0000000020000240 RDI: 00000000004de0c5 [ 1170.129902] RBP: 0000000000000000 R08: 00007f118944d820 R09: 0000000000000000 [ 1170.129911] R10: 0000000048000000 R11: 0000000000000246 R12: 0000000000000000 [ 1170.129920] R13: 0000000020000240 R14: 0000000048000000 R15: 0000000000000000 [ 1170.130527] TCP: out of memory -- consider tuning tcp_mem 2018/05/26 13:24:10 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)="766574683100000000ffffffffffef00", 0x22b) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x80440800]}, 0x10) 2018/05/26 13:24:10 executing program 7 (fault-call:9 fault-nth:34): r0 = getpid() sched_setattr(r0, &(0x7f00000000c0), 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}}) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) syz_fuse_mount(&(0x7f0000000240)='./control\x00', 0x406000, 0x0, 0x0, 0x0, 0x48000000) close(r1) 2018/05/26 13:24:10 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0xc00]}, 0x2c) 2018/05/26 13:24:10 executing program 6: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c000]}, 0x2c) 2018/05/26 13:24:10 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty=0x18, [0x0, 0x0, 0x0, 0x0, 0x1f4]}, 0x10) 2018/05/26 13:24:10 executing program 1: r0 = socket$inet(0x2, 0x5, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vcan0\x00', 0x10) sendmsg(r0, &(0x7f0000000480)={&(0x7f0000000140)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000380)="f0", 0x1}], 0x1}, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000a00)={@multicast1=0xe0000001, @local={0xac, 0x14, 0x14, 0xaa}}, 0xc) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000040)="84", 0xfffffdef}], 0x1, &(0x7f0000000540)}, 0x0) 2018/05/26 13:24:10 executing program 4: r0 = getpid() sched_setattr(r0, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x0, 0x4}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000f86000)='./control/file0\x00') syz_fuse_mount(&(0x7f0000000240)='./control\x00', 0x406000, 0x0, 0x0, 0x0, 0x1f000000) syz_fuseblk_mount(&(0x7f0000000140)='./control\x00', &(0x7f0000000180)='./control/file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) close(r1) 2018/05/26 13:24:10 executing program 2: r0 = getpid() sched_setattr(r0, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x0, 0x4}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40010, r1, 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000f86000)='./control/file0\x00') rmdir(&(0x7f00000000c0)='./control\x00') syz_fuse_mount(&(0x7f0000000240)='./control\x00', 0x406000, 0x0, 0x0, 0x0, 0x0) syz_fuseblk_mount(&(0x7f0000000140)='./control\x00', &(0x7f0000000180)='./control/file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) close(r1) [ 1170.787953] FAULT_INJECTION: forcing a failure. [ 1170.787953] name failslab, interval 1, probability 0, space 0, times 0 [ 1170.799289] CPU: 0 PID: 2499 Comm: syz-executor7 Not tainted 4.17.0-rc6+ #68 [ 1170.806480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1170.815842] Call Trace: [ 1170.818449] dump_stack+0x1b9/0x294 [ 1170.822092] ? dump_stack_print_info.cold.2+0x52/0x52 [ 1170.827288] ? __save_stack_trace+0x7e/0xd0 [ 1170.831622] should_fail.cold.4+0xa/0x1a 2018/05/26 13:24:11 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)="766574683100000000ffffffffffef00", 0x22b) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x142800]}, 0x10) 2018/05/26 13:24:11 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0xf00000000000000, 0x0, 0x0, 0x0, 0xc00]}, 0x2c) [ 1170.835692] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1170.838141] TCP: out of memory -- consider tuning tcp_mem [ 1170.840802] ? save_stack+0x43/0xd0 [ 1170.840818] ? kasan_kmalloc+0xc4/0xe0 [ 1170.840834] ? kmem_cache_alloc_trace+0x152/0x780 [ 1170.840850] ? __memcg_init_list_lru_node+0x17d/0x2c0 [ 1170.840860] ? __list_lru_init+0x456/0x790 [ 1170.840876] ? sget_userns+0x767/0xf00 [ 1170.871992] ? graph_lock+0x170/0x170 [ 1170.875808] ? vfs_kern_mount.part.34+0xd4/0x4d0 [ 1170.880569] ? do_mount+0x564/0x3070 [ 1170.884288] ? ksys_mount+0x12d/0x140 [ 1170.888093] ? __x64_sys_mount+0xbe/0x150 [ 1170.892247] ? do_syscall_64+0x1b1/0x800 [ 1170.896312] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1170.901693] ? find_held_lock+0x36/0x1c0 [ 1170.905780] ? __lock_is_held+0xb5/0x140 [ 1170.909864] ? check_same_owner+0x320/0x320 [ 1170.914194] ? rcu_note_context_switch+0x710/0x710 [ 1170.919134] __should_failslab+0x124/0x180 [ 1170.921566] TCP: out of memory -- consider tuning tcp_mem [ 1170.923369] should_failslab+0x9/0x14 [ 1170.923387] kmem_cache_alloc_trace+0x2cb/0x780 2018/05/26 13:24:11 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)="766574683100000000ffffffffffef00", 0x22b) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x1600000000000000]}, 0x10) 2018/05/26 13:24:11 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0xe0000000000000, 0x0, 0x0, 0x0, 0xc00]}, 0x2c) [ 1170.923401] ? __kmalloc_node+0x33/0x70 [ 1170.923415] ? __kmalloc_node+0x33/0x70 [ 1170.923432] ? rcu_read_lock_sched_held+0x108/0x120 [ 1170.923450] __memcg_init_list_lru_node+0x17d/0x2c0 [ 1170.923466] ? kvfree_rcu+0x20/0x20 [ 1170.934069] TCP: out of memory -- consider tuning tcp_mem [ 1170.937434] ? __kmalloc_node+0x47/0x70 [ 1170.937456] __list_lru_init+0x456/0x790 [ 1170.937474] ? list_lru_destroy+0x4c0/0x4c0 [ 1170.937490] ? mark_held_locks+0xc9/0x160 [ 1170.937509] ? __raw_spin_lock_init+0x1c/0x100 2018/05/26 13:24:11 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x1100, 0x0, 0x0, 0x0, 0xc00]}, 0x2c) [ 1170.937525] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 1170.937543] ? lockdep_init_map+0x9/0x10 [ 1170.994645] sget_userns+0x767/0xf00 [ 1170.998368] ? get_anon_bdev+0x2f0/0x2f0 [ 1171.002437] ? destroy_unused_super.part.11+0x110/0x110 [ 1171.007809] ? __alloc_pages_nodemask+0xacf/0xd70 [ 1171.012660] ? __alloc_pages_slowpath+0x2db0/0x2db0 [ 1171.017690] ? kasan_check_read+0x11/0x20 [ 1171.021850] ? cap_capable+0x1f9/0x260 [ 1171.025749] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1171.031293] ? security_capable+0x99/0xc0 [ 1171.035451] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1171.040995] ? ns_capable_common+0x13f/0x170 [ 1171.045410] ? get_anon_bdev+0x2f0/0x2f0 [ 1171.049474] sget+0x10b/0x150 [ 1171.052587] ? fuse_get_root_inode+0x190/0x190 [ 1171.057174] mount_nodev+0x33/0x110 [ 1171.060812] fuse_mount+0x2c/0x40 [ 1171.064269] mount_fs+0xae/0x328 [ 1171.067639] vfs_kern_mount.part.34+0xd4/0x4d0 [ 1171.072222] ? may_umount+0xb0/0xb0 [ 1171.075851] ? _raw_read_unlock+0x22/0x30 [ 1171.080006] ? __get_fs_type+0x97/0xc0 [ 1171.083906] do_mount+0x564/0x3070 2018/05/26 13:24:11 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0xc00]}, 0x2c) [ 1171.087451] ? copy_mount_string+0x40/0x40 [ 1171.091686] ? rcu_pm_notify+0xc0/0xc0 [ 1171.095585] ? copy_mount_options+0x5f/0x380 [ 1171.099996] ? rcu_read_lock_sched_held+0x108/0x120 [ 1171.105017] ? kmem_cache_alloc_trace+0x616/0x780 [ 1171.109874] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1171.115412] ? copy_mount_options+0x285/0x380 [ 1171.119914] ksys_mount+0x12d/0x140 [ 1171.123549] __x64_sys_mount+0xbe/0x150 [ 1171.127524] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 1171.132546] do_syscall_64+0x1b1/0x800 2018/05/26 13:24:11 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)="766574683100000000ffffffffffef00", 0x22b) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000000000]}, 0x10) [ 1171.136437] ? finish_task_switch+0x1ca/0x840 [ 1171.140937] ? syscall_return_slowpath+0x5c0/0x5c0 [ 1171.143921] TCP: out of memory -- consider tuning tcp_mem [ 1171.145871] ? syscall_return_slowpath+0x30f/0x5c0 [ 1171.145896] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 1171.145917] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1171.145938] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1171.145950] RIP: 0033:0x455a09 [ 1171.145956] RSP: 002b:00007f118944d808 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1171.182644] RAX: ffffffffffffffda RBX: 0000000000000016 RCX: 0000000000455a09 2018/05/26 13:24:11 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x200100, 0x0, 0x0, 0x0, 0xc00]}, 0x2c) [ 1171.189915] RDX: 00000000004c1eb6 RSI: 0000000020000240 RDI: 00000000004de0c5 [ 1171.197182] RBP: 0000000000000000 R08: 00007f118944d820 R09: 0000000000000000 [ 1171.204451] R10: 0000000048000000 R11: 0000000000000246 R12: 0000000000000000 [ 1171.211722] R13: 0000000020000240 R14: 0000000048000000 R15: 0000000000000000 2018/05/26 13:24:12 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)="766574683100000000ffffffffffef00", 0x22b) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00000000000000]}, 0x10) 2018/05/26 13:24:12 executing program 7 (fault-call:9 fault-nth:35): r0 = getpid() sched_setattr(r0, &(0x7f00000000c0), 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}}) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) syz_fuse_mount(&(0x7f0000000240)='./control\x00', 0x406000, 0x0, 0x0, 0x0, 0x48000000) close(r1) 2018/05/26 13:24:12 executing program 6: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}, 0x2c) 2018/05/26 13:24:12 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x400100, 0x0, 0x0, 0x0, 0xc00]}, 0x2c) 2018/05/26 13:24:12 executing program 4: r0 = getpid() sched_setattr(r0, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x0, 0x4}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000f86000)='./control/file0\x00') syz_fuse_mount(&(0x7f0000000240)='./control\x00', 0x406000, 0x0, 0x0, 0x0, 0x300) syz_fuseblk_mount(&(0x7f0000000140)='./control\x00', &(0x7f0000000180)='./control/file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) close(r1) 2018/05/26 13:24:12 executing program 1: r0 = socket$inet(0x2, 0x5, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vcan0\x00', 0x10) sendmsg(r0, &(0x7f0000000480)={&(0x7f0000000140)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000380)="f0", 0x1}], 0x1}, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000a00)={@multicast1=0xe0000001, @local={0xac, 0x14, 0x14, 0xaa}}, 0xc) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000040)="84", 0xa}], 0x1, &(0x7f0000000540)}, 0x0) 2018/05/26 13:24:12 executing program 2: r0 = getpid() sched_setattr(r0, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x0, 0x4}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x800) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000f86000)='./control/file0\x00') rmdir(&(0x7f00000000c0)='./control\x00') syz_fuse_mount(&(0x7f0000000240)='./control\x00', 0x406000, 0x0, 0x0, 0x0, 0x0) syz_fuseblk_mount(&(0x7f0000000140)='./control\x00', &(0x7f0000000180)='./control/file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) close(r1) 2018/05/26 13:24:12 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty=0x18, [0x0, 0x0, 0x0, 0x0, 0xe00000000000000]}, 0x10) [ 1171.902443] FAULT_INJECTION: forcing a failure. [ 1171.902443] name failslab, interval 1, probability 0, space 0, times 0 [ 1171.913800] CPU: 1 PID: 2563 Comm: syz-executor7 Not tainted 4.17.0-rc6+ #68 [ 1171.921002] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1171.930359] Call Trace: [ 1171.932952] dump_stack+0x1b9/0x294 [ 1171.936586] ? dump_stack_print_info.cold.2+0x52/0x52 [ 1171.941780] ? __save_stack_trace+0x7e/0xd0 [ 1171.946114] should_fail.cold.4+0xa/0x1a [ 1171.950188] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1171.955308] ? save_stack+0x43/0xd0 [ 1171.958945] ? kasan_kmalloc+0xc4/0xe0 [ 1171.962837] ? kmem_cache_alloc_trace+0x152/0x780 [ 1171.967683] ? __memcg_init_list_lru_node+0x17d/0x2c0 [ 1171.972877] ? __list_lru_init+0x456/0x790 [ 1171.977119] ? sget_userns+0x767/0xf00 [ 1171.981013] ? graph_lock+0x170/0x170 [ 1171.984819] ? vfs_kern_mount.part.34+0xd4/0x4d0 [ 1171.989582] ? do_mount+0x564/0x3070 [ 1171.993298] ? ksys_mount+0x12d/0x140 [ 1171.997101] ? __x64_sys_mount+0xbe/0x150 [ 1172.001256] ? do_syscall_64+0x1b1/0x800 [ 1172.005326] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1172.010703] ? find_held_lock+0x36/0x1c0 [ 1172.014780] ? __lock_is_held+0xb5/0x140 [ 1172.018865] ? check_same_owner+0x320/0x320 [ 1172.023208] ? rcu_note_context_switch+0x710/0x710 [ 1172.028149] __should_failslab+0x124/0x180 [ 1172.032398] should_failslab+0x9/0x14 [ 1172.036214] kmem_cache_alloc_trace+0x2cb/0x780 [ 1172.040890] ? __kmalloc_node+0x33/0x70 [ 1172.044866] ? __kmalloc_node+0x33/0x70 [ 1172.048847] ? rcu_read_lock_sched_held+0x108/0x120 [ 1172.053875] __memcg_init_list_lru_node+0x17d/0x2c0 [ 1172.058901] ? kvfree_rcu+0x20/0x20 [ 1172.062540] ? __kmalloc_node+0x47/0x70 [ 1172.066523] __list_lru_init+0x456/0x790 [ 1172.070589] ? list_lru_destroy+0x4c0/0x4c0 [ 1172.074920] ? mark_held_locks+0xc9/0x160 [ 1172.079079] ? __raw_spin_lock_init+0x1c/0x100 [ 1172.083662] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 1172.088683] ? lockdep_init_map+0x9/0x10 [ 1172.092749] sget_userns+0x767/0xf00 [ 1172.096463] ? get_anon_bdev+0x2f0/0x2f0 [ 1172.100536] ? destroy_unused_super.part.11+0x110/0x110 [ 1172.105898] ? __alloc_pages_nodemask+0xacf/0xd70 [ 1172.110750] ? __alloc_pages_slowpath+0x2db0/0x2db0 [ 1172.115776] ? kasan_check_read+0x11/0x20 [ 1172.119931] ? cap_capable+0x1f9/0x260 [ 1172.123832] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1172.129369] ? security_capable+0x99/0xc0 [ 1172.133526] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1172.139065] ? ns_capable_common+0x13f/0x170 [ 1172.143477] ? get_anon_bdev+0x2f0/0x2f0 [ 1172.147539] sget+0x10b/0x150 [ 1172.150657] ? fuse_get_root_inode+0x190/0x190 [ 1172.155242] mount_nodev+0x33/0x110 [ 1172.158873] fuse_mount+0x2c/0x40 [ 1172.162332] mount_fs+0xae/0x328 [ 1172.165703] vfs_kern_mount.part.34+0xd4/0x4d0 [ 1172.170287] ? may_umount+0xb0/0xb0 [ 1172.173922] ? _raw_read_unlock+0x22/0x30 [ 1172.178078] ? __get_fs_type+0x97/0xc0 [ 1172.181973] do_mount+0x564/0x3070 [ 1172.185521] ? copy_mount_string+0x40/0x40 [ 1172.189760] ? rcu_pm_notify+0xc0/0xc0 [ 1172.193658] ? copy_mount_options+0x5f/0x380 [ 1172.198070] ? rcu_read_lock_sched_held+0x108/0x120 [ 1172.203093] ? kmem_cache_alloc_trace+0x616/0x780 [ 1172.207945] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1172.213484] ? _copy_from_user+0xdf/0x150 [ 1172.217638] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1172.223175] ? copy_mount_options+0x285/0x380 [ 1172.227680] ksys_mount+0x12d/0x140 [ 1172.231312] __x64_sys_mount+0xbe/0x150 [ 1172.235295] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 1172.240319] do_syscall_64+0x1b1/0x800 [ 1172.244223] ? finish_task_switch+0x1ca/0x840 [ 1172.248728] ? syscall_return_slowpath+0x5c0/0x5c0 [ 1172.254148] ? syscall_return_slowpath+0x30f/0x5c0 [ 1172.259089] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 1172.264464] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1172.269314] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1172.274503] RIP: 0033:0x455a09 [ 1172.277689] RSP: 002b:00007f118944d808 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1172.285397] RAX: ffffffffffffffda RBX: 0000000000000016 RCX: 0000000000455a09 [ 1172.292670] RDX: 00000000004c1eb6 RSI: 0000000020000240 RDI: 00000000004de0c5 2018/05/26 13:24:12 executing program 6: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x353]}, 0x2c) 2018/05/26 13:24:12 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty=0x18, [0x0, 0x0, 0x0, 0x0, 0x200000000000000]}, 0x10) 2018/05/26 13:24:12 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)="766574683100000000ffffffffffef00", 0x22b) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x8447c]}, 0x10) 2018/05/26 13:24:12 executing program 6: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000]}, 0x2c) 2018/05/26 13:24:12 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty=0x18, [0x0, 0x0, 0x0, 0x0, 0x4000000000000000]}, 0x10) 2018/05/26 13:24:12 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)="766574683100000000ffffffffffef00", 0x22b) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x84472]}, 0x10) 2018/05/26 13:24:12 executing program 6: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000]}, 0x2c) 2018/05/26 13:24:12 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty=0x18, [0x0, 0x0, 0x0, 0x0, 0xffffffff00000000]}, 0x10) 2018/05/26 13:24:12 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)="766574683100000000ffffffffffef00", 0x22b) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x84481]}, 0x10) 2018/05/26 13:24:12 executing program 7 (fault-call:9 fault-nth:36): r0 = getpid() sched_setattr(r0, &(0x7f00000000c0), 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}}) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) syz_fuse_mount(&(0x7f0000000240)='./control\x00', 0x406000, 0x0, 0x0, 0x0, 0x48000000) close(r1) [ 1172.299948] RBP: 0000000000000000 R08: 00007f118944d820 R09: 0000000000000000 [ 1172.307225] R10: 0000000048000000 R11: 0000000000000246 R12: 0000000000000000 [ 1172.314497] R13: 0000000020000240 R14: 0000000048000000 R15: 0000000000000000 [ 1172.428944] FAULT_INJECTION: forcing a failure. [ 1172.428944] name failslab, interval 1, probability 0, space 0, times 0 [ 1172.440710] CPU: 0 PID: 2606 Comm: syz-executor7 Not tainted 4.17.0-rc6+ #68 [ 1172.447907] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1172.457256] Call Trace: [ 1172.459855] dump_stack+0x1b9/0x294 [ 1172.463496] ? dump_stack_print_info.cold.2+0x52/0x52 [ 1172.468691] ? lock_downgrade+0x8e0/0x8e0 [ 1172.472836] ? graph_lock+0x170/0x170 [ 1172.476640] should_fail.cold.4+0xa/0x1a [ 1172.480719] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1172.485807] ? print_usage_bug+0xc0/0xc0 [ 1172.489856] ? print_usage_bug+0xc0/0xc0 [ 1172.493898] ? graph_lock+0x170/0x170 [ 1172.497691] ? find_held_lock+0x36/0x1c0 [ 1172.501739] ? __lock_is_held+0xb5/0x140 [ 1172.505792] ? check_same_owner+0x320/0x320 [ 1172.510098] ? lockdep_init_map+0x9/0x10 [ 1172.514157] ? rcu_note_context_switch+0x710/0x710 [ 1172.519079] ? kasan_check_write+0x14/0x20 [ 1172.523316] ? __init_rwsem+0x1c4/0x290 [ 1172.527285] __should_failslab+0x124/0x180 [ 1172.531511] should_failslab+0x9/0x14 [ 1172.535297] __kmalloc+0x2c8/0x760 [ 1172.538831] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 1172.543841] ? prealloc_shrinker+0xcf/0x130 [ 1172.548152] prealloc_shrinker+0xcf/0x130 [ 1172.552294] sget_userns+0x9b2/0xf00 [ 1172.555992] ? get_anon_bdev+0x2f0/0x2f0 [ 1172.560060] ? destroy_unused_super.part.11+0x110/0x110 [ 1172.565424] ? __alloc_pages_nodemask+0xacf/0xd70 [ 1172.570261] ? __alloc_pages_slowpath+0x2db0/0x2db0 [ 1172.575270] ? kasan_check_read+0x11/0x20 [ 1172.579405] ? cap_capable+0x1f9/0x260 [ 1172.583282] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1172.588804] ? security_capable+0x99/0xc0 [ 1172.592935] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1172.598456] ? ns_capable_common+0x13f/0x170 [ 1172.602856] ? get_anon_bdev+0x2f0/0x2f0 [ 1172.606902] sget+0x10b/0x150 [ 1172.609993] ? fuse_get_root_inode+0x190/0x190 [ 1172.614562] mount_nodev+0x33/0x110 [ 1172.618179] fuse_mount+0x2c/0x40 [ 1172.621632] mount_fs+0xae/0x328 [ 1172.624996] vfs_kern_mount.part.34+0xd4/0x4d0 [ 1172.629569] ? may_umount+0xb0/0xb0 [ 1172.633176] ? _raw_read_unlock+0x22/0x30 [ 1172.637303] ? __get_fs_type+0x97/0xc0 [ 1172.641184] do_mount+0x564/0x3070 [ 1172.644726] ? copy_mount_string+0x40/0x40 [ 1172.648950] ? rcu_pm_notify+0xc0/0xc0 [ 1172.652826] ? copy_mount_options+0x5f/0x380 [ 1172.657214] ? rcu_read_lock_sched_held+0x108/0x120 [ 1172.662215] ? kmem_cache_alloc_trace+0x616/0x780 [ 1172.667069] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1172.672600] ? copy_mount_options+0x285/0x380 [ 1172.677085] ksys_mount+0x12d/0x140 [ 1172.680698] __x64_sys_mount+0xbe/0x150 [ 1172.684673] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 1172.689686] do_syscall_64+0x1b1/0x800 [ 1172.693558] ? finish_task_switch+0x1ca/0x840 [ 1172.698045] ? syscall_return_slowpath+0x5c0/0x5c0 [ 1172.702969] ? syscall_return_slowpath+0x30f/0x5c0 [ 1172.707895] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 1172.710570] sctp: sctp_transport_update_pmtu: Reported pmtu 72 too low, using default minimum of 512 [ 1172.713256] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1172.713288] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1172.713299] RIP: 0033:0x455a09 [ 1172.713307] RSP: 002b:00007f118944d808 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1172.743407] RAX: ffffffffffffffda RBX: 0000000000000016 RCX: 0000000000455a09 [ 1172.750669] RDX: 00000000004c1eb6 RSI: 0000000020000240 RDI: 00000000004de0c5 [ 1172.757940] RBP: 0000000000000000 R08: 00007f118944d820 R09: 0000000000000000 [ 1172.765201] R10: 0000000048000000 R11: 0000000000000246 R12: 0000000000000000 [ 1172.772458] R13: 0000000020000240 R14: 0000000048000000 R15: 0000000000000000 [ 1172.862586] sctp: sctp_transport_update_pmtu: Reported pmtu 72 too low, using default minimum of 512 2018/05/26 13:24:13 executing program 6: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x53030000]}, 0x2c) 2018/05/26 13:24:13 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty=0x18, [0x0, 0x0, 0x0, 0x0, 0xe8030000]}, 0x10) 2018/05/26 13:24:13 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0xa0, 0x0, 0x0, 0x0, 0xc00]}, 0x2c) 2018/05/26 13:24:13 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)="766574683100000000ffffffffffef00", 0x22b) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000]}, 0x10) 2018/05/26 13:24:13 executing program 7 (fault-call:9 fault-nth:37): r0 = getpid() sched_setattr(r0, &(0x7f00000000c0), 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}}) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) syz_fuse_mount(&(0x7f0000000240)='./control\x00', 0x406000, 0x0, 0x0, 0x0, 0x48000000) close(r1) 2018/05/26 13:24:13 executing program 4: r0 = getpid() sched_setattr(r0, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x0, 0x4}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000f86000)='./control/file0\x00') syz_fuse_mount(&(0x7f0000000240)='./control\x00', 0x406000, 0x0, 0x0, 0x0, 0x700) syz_fuseblk_mount(&(0x7f0000000140)='./control\x00', &(0x7f0000000180)='./control/file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) close(r1) 2018/05/26 13:24:13 executing program 1: r0 = socket$inet(0x2, 0x5, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vcan0\x00', 0x10) sendmsg(r0, &(0x7f0000000480)={&(0x7f0000000140)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000380)="f0", 0x1}], 0x1}, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000a00)={@multicast1=0xe0000001, @local={0xac, 0x14, 0x14, 0xaa}}, 0xc) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000040)="84", 0x50}], 0x1, &(0x7f0000000540)}, 0x0) 2018/05/26 13:24:13 executing program 2: r0 = getpid() sched_setattr(r0, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x0, 0x4}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) syz_mount_image$minix(&(0x7f0000000080)='minix\x00', &(0x7f0000000100)='./control\x00', 0x3, 0x7, &(0x7f0000002400)=[{&(0x7f00000001c0)="04f88866d7eb3e28a8430a692c0c64a2db4fdbfa989f1175c5120af1f5806c9ed885ac25de424baa1e347584cf28ea67ff2008546a98ed5cb85d415f9ad848810340e8da8f17bd682171fd6d87e8e6330c96d46aa6f5fe34e33d35913f020b05f9d35a5799", 0x65, 0x10001}, {&(0x7f0000000280), 0x0, 0x3}, {&(0x7f00000002c0)="fe32aee74b8186ccb6f305dd33ac111f72f67eff", 0x14, 0x8}, {&(0x7f0000000300)="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", 0x1000, 0x1}, {&(0x7f0000001300)="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", 0x1000, 0x7}, {&(0x7f0000002300)="a921f986f96b58b33c5a788950f379b022c4ae834ff9f130ebd790bf588de175bae491958758e8d8a8fd7fdfab2f9c08c2a1a1c842255a48271ab4a1aa7b0df4d116251c8e5388f63d37159a61c8794931676a9ceb06a84d7f778df53bef823e3a4e21148c8f4e0309d3ebdf814e684a7e628ad217226d02aa43dbe457b53ab1559223c45918", 0x86, 0x2}, {&(0x7f00000023c0)="633e06f16a7cb674251d2efa7bff90a0bca1fefc536965e37e59e1c2c26a850ec5", 0x21}], 0x100000, 0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) mkdir(&(0x7f0000000040)='./control/file0\x00', 0x10) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) getsockopt$IP6T_SO_GET_ENTRIES(r2, 0x29, 0x41, &(0x7f00000024c0)={'security\x00', 0xe2, "2c8e297dc37963d768da31865fa10c4e629fa6f72931302f9573b1097fd9fc8d63919efe672c8715f36c5b722728f140018e7bbce35e01e340dccb507e47d29d2c23f57f55382f8d940e100747429599567077db467ae95e22a9990ca84a6bb2f9da054f855740244ab13820c368e7354fe36895179ed2aea26728ce646d641132de7e607c7cb38df29c12e046d83a306197942691a35d84240ed80fabf236482940efa5b98c3049d6b01a7f85e5f961cea28c6796dbf84795e33574af45d1815fdac80fb6d396dcbebd28eb1ff5adbfeecd9146103c12cf212f7473cb781f7074f1"}, &(0x7f0000000240)=0x106) r3 = shmget$private(0x0, 0x2000, 0x54000100, &(0x7f0000013000/0x2000)=nil) shmctl$SHM_LOCK(r3, 0xb) unlink(&(0x7f0000000280)='./control/file1\x00') unlink(&(0x7f0000f86000)='./control/file0\x00') rmdir(&(0x7f00000000c0)='./control\x00') syz_fuseblk_mount(&(0x7f0000000140)='./control\x00', &(0x7f0000000180)='./control/file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) close(r1) [ 1173.037748] FAULT_INJECTION: forcing a failure. [ 1173.037748] name failslab, interval 1, probability 0, space 0, times 0 [ 1173.049066] CPU: 1 PID: 2628 Comm: syz-executor7 Not tainted 4.17.0-rc6+ #68 [ 1173.056254] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1173.065606] Call Trace: [ 1173.068208] dump_stack+0x1b9/0x294 [ 1173.071855] ? dump_stack_print_info.cold.2+0x52/0x52 [ 1173.077056] ? __save_stack_trace+0x7e/0xd0 [ 1173.081397] should_fail.cold.4+0xa/0x1a [ 1173.085466] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1173.090577] ? save_stack+0x43/0xd0 [ 1173.094208] ? kasan_kmalloc+0xc4/0xe0 [ 1173.098101] ? kmem_cache_alloc_trace+0x152/0x780 [ 1173.102955] ? __memcg_init_list_lru_node+0x17d/0x2c0 [ 1173.108154] ? __list_lru_init+0x456/0x790 [ 1173.112399] ? sget_userns+0x767/0xf00 [ 1173.116292] ? graph_lock+0x170/0x170 [ 1173.120096] ? vfs_kern_mount.part.34+0xd4/0x4d0 [ 1173.124862] ? do_mount+0x564/0x3070 [ 1173.128583] ? ksys_mount+0x12d/0x140 [ 1173.132390] ? __x64_sys_mount+0xbe/0x150 [ 1173.136546] ? do_syscall_64+0x1b1/0x800 [ 1173.140613] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1173.145986] ? find_held_lock+0x36/0x1c0 [ 1173.150059] ? __lock_is_held+0xb5/0x140 [ 1173.154133] ? build_bredr_pairing_cmd.isra.5+0x180/0x520 [ 1173.159690] ? check_same_owner+0x320/0x320 [ 1173.164022] ? rcu_note_context_switch+0x710/0x710 [ 1173.168968] __should_failslab+0x124/0x180 [ 1173.173212] should_failslab+0x9/0x14 [ 1173.177019] kmem_cache_alloc_trace+0x2cb/0x780 [ 1173.181697] ? __kmalloc_node+0x33/0x70 [ 1173.185675] ? __kmalloc_node+0x33/0x70 [ 1173.189654] ? rcu_read_lock_sched_held+0x108/0x120 [ 1173.194681] __memcg_init_list_lru_node+0x17d/0x2c0 [ 1173.199708] ? kvfree_rcu+0x20/0x20 [ 1173.203346] ? __kmalloc_node+0x47/0x70 [ 1173.207327] __list_lru_init+0x456/0x790 [ 1173.211394] ? list_lru_destroy+0x4c0/0x4c0 [ 1173.215716] ? mark_held_locks+0xc9/0x160 [ 1173.219871] ? __raw_spin_lock_init+0x1c/0x100 [ 1173.224463] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 1173.229483] ? lockdep_init_map+0x9/0x10 [ 1173.233552] sget_userns+0x767/0xf00 [ 1173.237272] ? get_anon_bdev+0x2f0/0x2f0 [ 1173.241346] ? destroy_unused_super.part.11+0x110/0x110 [ 1173.246714] ? __alloc_pages_nodemask+0xacf/0xd70 [ 1173.251567] ? __alloc_pages_slowpath+0x2db0/0x2db0 [ 1173.256593] ? kasan_check_read+0x11/0x20 [ 1173.260750] ? cap_capable+0x1f9/0x260 [ 1173.264649] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1173.270191] ? security_capable+0x99/0xc0 [ 1173.274347] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1173.279892] ? ns_capable_common+0x13f/0x170 [ 1173.284305] ? get_anon_bdev+0x2f0/0x2f0 2018/05/26 13:24:13 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0xc0, 0x0, 0x0, 0x0, 0xc00]}, 0x2c) 2018/05/26 13:24:13 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty=0x18, [0x0, 0x0, 0x0, 0x0, 0x4000]}, 0x10) 2018/05/26 13:24:13 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)="766574683100000000ffffffffffef00", 0x22b) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x7244080000000000]}, 0x10) 2018/05/26 13:24:13 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty=0x18, [0x0, 0x0, 0x0, 0x0, 0x2000000000000]}, 0x10) [ 1173.288363] sget+0x10b/0x150 [ 1173.291475] ? fuse_get_root_inode+0x190/0x190 [ 1173.296063] mount_nodev+0x33/0x110 [ 1173.299692] fuse_mount+0x2c/0x40 [ 1173.303150] mount_fs+0xae/0x328 [ 1173.306530] vfs_kern_mount.part.34+0xd4/0x4d0 [ 1173.311129] ? may_umount+0xb0/0xb0 [ 1173.314784] ? _raw_read_unlock+0x22/0x30 [ 1173.318935] ? __get_fs_type+0x97/0xc0 [ 1173.322827] do_mount+0x564/0x3070 [ 1173.326370] ? do_raw_spin_unlock+0x9e/0x2e0 [ 1173.330784] ? copy_mount_string+0x40/0x40 [ 1173.335018] ? rcu_pm_notify+0xc0/0xc0 [ 1173.338916] ? copy_mount_options+0x5f/0x380 [ 1173.343325] ? rcu_read_lock_sched_held+0x108/0x120 [ 1173.348346] ? kmem_cache_alloc_trace+0x616/0x780 [ 1173.353201] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1173.358752] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1173.364290] ? copy_mount_options+0x285/0x380 [ 1173.368791] ksys_mount+0x12d/0x140 [ 1173.372425] __x64_sys_mount+0xbe/0x150 [ 1173.376403] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 1173.381424] do_syscall_64+0x1b1/0x800 [ 1173.385324] ? finish_task_switch+0x1ca/0x840 [ 1173.389828] ? syscall_return_slowpath+0x5c0/0x5c0 [ 1173.394761] ? syscall_return_slowpath+0x30f/0x5c0 [ 1173.399703] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 1173.405078] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1173.409940] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1173.415128] RIP: 0033:0x455a09 [ 1173.418313] RSP: 002b:00007f118944d808 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1173.426026] RAX: ffffffffffffffda RBX: 0000000000000016 RCX: 0000000000455a09 2018/05/26 13:24:13 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty=0x18, [0x0, 0x0, 0x0, 0x0, 0xf401]}, 0x10) 2018/05/26 13:24:13 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)="766574683100000000ffffffffffef00", 0x22b) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x7b44080000000000]}, 0x10) [ 1173.433292] RDX: 00000000004c1eb6 RSI: 0000000020000240 RDI: 00000000004de0c5 [ 1173.440561] RBP: 0000000000000000 R08: 00007f118944d820 R09: 0000000000000000 [ 1173.447829] R10: 0000000048000000 R11: 0000000000000246 R12: 0000000000000000 [ 1173.455107] R13: 0000000020000240 R14: 0000000048000000 R15: 0000000000000000 [ 1173.851680] sctp: sctp_transport_update_pmtu: Reported pmtu 72 too low, using default minimum of 512 [ 1173.994628] sctp: sctp_transport_update_pmtu: Reported pmtu 72 too low, using default minimum of 512 2018/05/26 13:24:14 executing program 1: r0 = socket$inet(0x2, 0x5, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vcan0\x00', 0x10) sendmsg(r0, &(0x7f0000000480)={&(0x7f0000000140)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000380)="f0", 0x1}], 0x1}, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000a00)={@multicast1=0xe0000001, @local={0xac, 0x14, 0x14, 0xaa}}, 0xc) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000040)="84", 0x34000}], 0x1, &(0x7f0000000540)}, 0x0) 2018/05/26 13:24:14 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x80000000000000, 0x0, 0x0, 0x0, 0xc00]}, 0x2c) 2018/05/26 13:24:14 executing program 7 (fault-call:9 fault-nth:38): r0 = getpid() sched_setattr(r0, &(0x7f00000000c0), 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}}) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) syz_fuse_mount(&(0x7f0000000240)='./control\x00', 0x406000, 0x0, 0x0, 0x0, 0x48000000) close(r1) 2018/05/26 13:24:14 executing program 6: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc000000]}, 0x2c) 2018/05/26 13:24:14 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty=0x18, [0x0, 0x0, 0x0, 0x0, 0x1100]}, 0x10) 2018/05/26 13:24:14 executing program 4: r0 = getpid() sched_setattr(r0, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x0, 0x4}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000f86000)='./control/file0\x00') r3 = syz_fuse_mount(&(0x7f0000000240)='./control\x00', 0x406000, 0x0, 0x0, 0x0, 0x0) syz_fuseblk_mount(&(0x7f0000000140)='./control\x00', &(0x7f0000000180)='./control/file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) signalfd(r3, &(0x7f0000000100)={0x1}, 0x8) close(r1) listxattr(&(0x7f0000000040)='./control/file0\x00', &(0x7f0000000080)=""/30, 0x1e) 2018/05/26 13:24:14 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)="766574683100000000ffffffffffef00", 0x22b) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x18000000]}, 0x10) 2018/05/26 13:24:14 executing program 2: r0 = getpid() sched_setattr(r0, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x0, 0x4}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) openat$cgroup_ro(r2, &(0x7f0000000040)='cpu.stat\x00', 0x0, 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000f86000)='./control/file0\x00') rmdir(&(0x7f00000000c0)='./control\x00') syz_fuse_mount(&(0x7f0000000240)='./control\x00', 0x406000, 0x0, 0x0, 0x0, 0x0) syz_fuseblk_mount(&(0x7f0000000140)='./control\x00', &(0x7f0000000180)='./control/file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) close(r1) [ 1174.159110] FAULT_INJECTION: forcing a failure. [ 1174.159110] name failslab, interval 1, probability 0, space 0, times 0 [ 1174.170462] CPU: 1 PID: 2696 Comm: syz-executor7 Not tainted 4.17.0-rc6+ #68 [ 1174.177650] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1174.187004] Call Trace: [ 1174.189611] dump_stack+0x1b9/0x294 [ 1174.193253] ? dump_stack_print_info.cold.2+0x52/0x52 [ 1174.198466] should_fail.cold.4+0xa/0x1a [ 1174.202532] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1174.207642] ? kasan_slab_free+0xe/0x10 [ 1174.211625] ? kfree+0xd9/0x260 [ 1174.214911] ? match_number.isra.0+0x192/0x260 [ 1174.219504] ? match_int+0x23/0x30 [ 1174.223058] ? fuse_fill_super+0x812/0x1e20 [ 1174.227386] ? mount_nodev+0x6b/0x110 [ 1174.231189] ? fuse_mount+0x2c/0x40 [ 1174.234827] ? graph_lock+0x170/0x170 [ 1174.238642] ? __x64_sys_mount+0xbe/0x150 [ 1174.242797] ? do_syscall_64+0x1b1/0x800 [ 1174.246860] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1174.252928] ? do_raw_spin_unlock+0x9e/0x2e0 [ 1174.257343] ? find_held_lock+0x36/0x1c0 [ 1174.261412] ? __lock_is_held+0xb5/0x140 [ 1174.265496] ? check_same_owner+0x320/0x320 [ 1174.269824] ? mark_held_locks+0xc9/0x160 [ 1174.273975] ? quarantine_put+0xeb/0x190 [ 1174.278050] ? rcu_note_context_switch+0x710/0x710 [ 1174.282986] ? kfree+0x111/0x260 [ 1174.286363] __should_failslab+0x124/0x180 [ 1174.290606] should_failslab+0x9/0x14 [ 1174.294413] __kmalloc+0x2c8/0x760 [ 1174.297966] ? match_strdup+0x5e/0xa0 [ 1174.301779] match_strdup+0x5e/0xa0 [ 1174.305415] fuse_match_uint+0x1a/0x60 [ 1174.309318] fuse_fill_super+0x6e3/0x1e20 [ 1174.313480] ? fuse_get_root_inode+0x190/0x190 [ 1174.318087] ? __alloc_pages_slowpath+0x2db0/0x2db0 [ 1174.323115] ? kasan_check_read+0x11/0x20 [ 1174.327275] ? cap_capable+0x1f9/0x260 [ 1174.331175] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1174.336719] ? security_capable+0x99/0xc0 [ 1174.340879] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1174.346425] ? ns_capable_common+0x13f/0x170 [ 1174.350839] ? get_anon_bdev+0x2f0/0x2f0 [ 1174.354900] ? sget+0x113/0x150 [ 1174.358186] ? fuse_get_root_inode+0x190/0x190 [ 1174.362774] mount_nodev+0x6b/0x110 [ 1174.366407] fuse_mount+0x2c/0x40 [ 1174.369863] mount_fs+0xae/0x328 [ 1174.373235] vfs_kern_mount.part.34+0xd4/0x4d0 [ 1174.377823] ? may_umount+0xb0/0xb0 [ 1174.381449] ? _raw_read_unlock+0x22/0x30 [ 1174.385601] ? __get_fs_type+0x97/0xc0 [ 1174.389495] do_mount+0x564/0x3070 [ 1174.393053] ? copy_mount_string+0x40/0x40 [ 1174.397289] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 1174.402310] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1174.407077] ? retint_kernel+0x10/0x10 [ 1174.410975] ? copy_mount_options+0x1f0/0x380 [ 1174.415470] ? copy_mount_options+0x1fa/0x380 [ 1174.419973] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1174.425509] ? copy_mount_options+0x285/0x380 [ 1174.430011] ksys_mount+0x12d/0x140 [ 1174.433650] __x64_sys_mount+0xbe/0x150 [ 1174.437626] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 1174.442657] do_syscall_64+0x1b1/0x800 [ 1174.446550] ? finish_task_switch+0x1ca/0x840 [ 1174.451053] ? syscall_return_slowpath+0x5c0/0x5c0 [ 1174.455982] ? syscall_return_slowpath+0x30f/0x5c0 [ 1174.460927] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 1174.466299] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1174.471152] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1174.476341] RIP: 0033:0x455a09 [ 1174.479524] RSP: 002b:00007f118944d808 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1174.487233] RAX: ffffffffffffffda RBX: 0000000000000016 RCX: 0000000000455a09 [ 1174.494502] RDX: 00000000004c1eb6 RSI: 0000000020000240 RDI: 00000000004de0c5 [ 1174.501775] RBP: 0000000000000000 R08: 00007f118944d820 R09: 0000000000000000 2018/05/26 13:24:14 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty=0x18, [0x0, 0x0, 0x0, 0x0, 0xa]}, 0x10) 2018/05/26 13:24:14 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)="766574683100000000ffffffffffef00", 0x22b) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x1f000000]}, 0x10) 2018/05/26 13:24:14 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x1000000000000000, 0x0, 0x0, 0x0, 0xc00]}, 0x2c) 2018/05/26 13:24:14 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty=0x18, [0x0, 0x0, 0x0, 0x0, 0x100000000000000]}, 0x10) 2018/05/26 13:24:14 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)="766574683100000000ffffffffffef00", 0x22b) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x84478]}, 0x10) 2018/05/26 13:24:14 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty=0x18, [0x0, 0x0, 0x0, 0x0, 0x1000000]}, 0x10) 2018/05/26 13:24:14 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x40000000000, 0x0, 0x0, 0x0, 0xc00]}, 0x2c) 2018/05/26 13:24:14 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)="766574683100000000ffffffffffef00", 0x22b) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x8448a]}, 0x10) [ 1174.509047] R10: 0000000048000000 R11: 0000000000000246 R12: 0000000000000000 [ 1174.516318] R13: 0000000020000240 R14: 0000000048000000 R15: 0000000000000000 [ 1174.979790] sctp: sctp_transport_update_pmtu: Reported pmtu 72 too low, using default minimum of 512 [ 1175.122582] sctp: sctp_transport_update_pmtu: Reported pmtu 72 too low, using default minimum of 512 2018/05/26 13:24:15 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0xc00]}, 0x2c) 2018/05/26 13:24:15 executing program 7 (fault-call:9 fault-nth:39): r0 = getpid() sched_setattr(r0, &(0x7f00000000c0), 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}}) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) syz_fuse_mount(&(0x7f0000000240)='./control\x00', 0x406000, 0x0, 0x0, 0x0, 0x48000000) close(r1) 2018/05/26 13:24:15 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)="766574683100000000ffffffffffef00", 0x22b) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x8055]}, 0x10) 2018/05/26 13:24:15 executing program 6: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000]}, 0x2c) 2018/05/26 13:24:15 executing program 2: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040)='/dev/urandom\x00', 0x80400, 0x0) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, &(0x7f0000000080)) r1 = getpid() close(r0) sched_setattr(r1, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x0, 0x4}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) recvmmsg(r0, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000002c0)=""/77, 0x4d}], 0x1, &(0x7f0000000380)=""/67, 0x43}, 0xa6f}], 0x1, 0x100, 0x0) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) ioctl$SG_SET_TIMEOUT(r3, 0x2201, &(0x7f0000000100)=0x618a) write$sndseq(r3, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) readv(r2, &(0x7f0000000280)=[{&(0x7f00000001c0)=""/81, 0x51}], 0x1) unlink(&(0x7f0000f86000)='./control/file0\x00') rmdir(&(0x7f00000000c0)='./control\x00') syz_fuse_mount(&(0x7f0000000240)='./control\x00', 0x406000, 0x0, 0x0, 0x0, 0x0) syz_fuseblk_mount(&(0x7f0000000140)='./control\x00', &(0x7f0000000180)='./control/file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) close(r2) 2018/05/26 13:24:15 executing program 1: r0 = socket$inet(0x2, 0x5, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vcan0\x00', 0x10) sendmsg(r0, &(0x7f0000000480)={&(0x7f0000000140)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000380)="f0", 0x1}], 0x1}, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000a00)={@multicast1=0xe0000001, @local={0xac, 0x14, 0x14, 0xaa}}, 0xc) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000040)="84", 0x6}], 0x1, &(0x7f0000000540)}, 0x0) 2018/05/26 13:24:15 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty=0x18, [0x0, 0x0, 0x0, 0x0, 0x40000000]}, 0x10) 2018/05/26 13:24:15 executing program 4: r0 = getpid() sched_setattr(r0, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x0, 0x4}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) r2 = fcntl$dupfd(r1, 0x406, r1) bind$rds(r2, &(0x7f0000000080)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r3, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000f86000)='./control/file0\x00') syz_fuse_mount(&(0x7f0000000240)='./control\x00', 0x406000, 0x0, 0x0, 0x0, 0x0) syz_fuseblk_mount(&(0x7f0000000140)='./control\x00', &(0x7f0000000180)='./control/file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0x6, 0x2) close(r1) syz_read_part_table(0x7ff, 0x7, &(0x7f0000001780)=[{&(0x7f0000000380)="13170ae3bf90aa5d442305e0cabb72efaa5d05928247e9f718fa7962747cf35ab2433e2b9c7948b96598f389f57b9565c822da7895954ac6fa4c3c3028dbaf81fcae01090699ff98231ed0ea73e97caad041b8a1414158bf9e86b47dac1797fe3afd718d812b99a720b19e7e71374f354e36817598b42975cf82b78ba1b832822a433efc28710d87f184b9890115841f061c8820fcb4f142835571f459213cb09fd10c4bde40cb997d8315a3c8a5e6d958328e9d1a806806ce8d445c28334215b1ad3e054fa8254b91731fac60a3ee308bafb1369a16dbbe659cb9d48382ba8e09da1cee22299558bc2d7dc46a", 0xed, 0xfffffffffffff28e}, {&(0x7f0000000480)="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", 0x1000, 0xfff}, {&(0x7f0000001480)="d2006d3c06be141cb6a8e91bbdfa2e13001dd7d67a4dc7af10eec7fd92ef48c5acfaf50dd25e2bf873d81db2c8adf6a18a8b1a6133b8d4f8c1e3b1e5b8e1ca407ca92782f1a17bbcd96e080e7c9dd9e3221d581c39c5c5890db89c15ac9521af5965e62ae7dec3191f72945e54984b5125f61f6e10cde399eba76ed293de1e350982ef970371cb3eefc128e761252490243dec20de8a8518cc2f", 0x9a, 0x100000001}, {&(0x7f0000001540)="27909c1d92ceca421a55cd0ae9791c8e05a1dc9849a58b805c39a020805e1925d639c129d7c6c76b5dfa0c27089abd9fbd0c565902e079f623910902f7d7017e4bd79fd51a3adc19f0a960b5f61ed8381bc16a6f227737befd909a17edf091e738b930f061f4734f77daca77a5dd34439f3c6759b0bc35f9ea2eb48e30812f80d035e0fe7692bdbd", 0x88, 0x8}, {&(0x7f0000001600)="9f22afcd3136851d4857bff3bfc94a8a0eaf44cfb7ae56a781605c4ec12de99ded74cda776c2f35b", 0x28}, {&(0x7f0000001640)="ac9b88090f2d2edc525417e45e2bc34fb4457bb94cd844cfcf2e5dbc31637cffcead544671e82865fee3609ff9017587", 0x30, 0x2}, {&(0x7f0000001680)="505e503bf3e581e1d274b4402b387a66a92831723b853a8d1dee81e5e71d5a4feff271df489f62d95a49da231aa5b25b4e346b99dc19a2ee583b00a7e711b1b3f761a5a9e6c59afe7efeb7d745fa0e1bdf71eecf90b5aa8e8fe32bd4a255139f4235d3655a13552080ff699f449ed8c5946730aec73f6e4e404b173ad255d30f520f1829e32a363b6e061760aa12f6c3de3d27d491b4236b77192e9c2c0ff9b32836455b5a5fd8c803beed240b51ca437cad6d2eab74830c02c850c951350b9c8f68217e676a9e42a7b4c7bb9e5ab1d3658adfa9030f7d45aae943acb85fdf897bf58c6343dfe1f01b0b14", 0xeb, 0xfffffffffffffffe}]) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000001840)={{{@in6, @in=@multicast1}}, {{@in=@multicast1}}}, &(0x7f0000001940)=0xe8) sendmsg$IPVS_CMD_ZERO(r2, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400024}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0xc0, r5, 0x100, 0x70bd2b, 0x25dfdbfe, {0x10}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@remote={0xac, 0x14, 0x14, 0xbb}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xfff}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x7}]}, @IPVS_CMD_ATTR_DEST={0x58, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xb7}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x81}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e21}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x4}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@broadcast=0xffffffff}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e23}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x4b43}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xd9}]}, 0xc0}, 0x1, 0x0, 0x0, 0x40}, 0x4) [ 1175.304708] FAULT_INJECTION: forcing a failure. [ 1175.304708] name failslab, interval 1, probability 0, space 0, times 0 [ 1175.316125] CPU: 1 PID: 2760 Comm: syz-executor7 Not tainted 4.17.0-rc6+ #68 [ 1175.323318] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1175.328053] net_ratelimit: 19 callbacks suppressed [ 1175.328057] TCP: out of memory -- consider tuning tcp_mem [ 1175.332664] Call Trace: [ 1175.332688] dump_stack+0x1b9/0x294 [ 1175.332707] ? dump_stack_print_info.cold.2+0x52/0x52 2018/05/26 13:24:15 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)="766574683100000000ffffffffffef00", 0x22b) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x11000000]}, 0x10) [ 1175.332728] ? is_bpf_text_address+0xd7/0x170 [ 1175.359031] should_fail.cold.4+0xa/0x1a [ 1175.363110] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1175.368227] ? graph_lock+0x170/0x170 [ 1175.372040] ? save_stack+0xa9/0xd0 [ 1175.375680] ? find_held_lock+0x36/0x1c0 [ 1175.379751] ? __lock_is_held+0xb5/0x140 [ 1175.383828] ? check_same_owner+0x320/0x320 [ 1175.388147] ? trace_hardirqs_off+0xd/0x10 [ 1175.392387] ? _raw_spin_unlock_irqrestore+0x63/0xc0 [ 1175.397502] ? rcu_note_context_switch+0x710/0x710 2018/05/26 13:24:15 executing program 6: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x240000]}, 0x2c) [ 1175.402440] ? debug_check_no_obj_freed+0x2ff/0x584 [ 1175.407468] __should_failslab+0x124/0x180 [ 1175.411711] should_failslab+0x9/0x14 [ 1175.415522] __kmalloc+0x2c8/0x760 [ 1175.419081] ? match_strdup+0x5e/0xa0 [ 1175.422895] match_strdup+0x5e/0xa0 [ 1175.426527] fuse_match_uint+0x1a/0x60 [ 1175.430426] fuse_fill_super+0x455/0x1e20 [ 1175.434586] ? fuse_get_root_inode+0x190/0x190 [ 1175.439176] ? __alloc_pages_slowpath+0x2db0/0x2db0 [ 1175.444201] ? kasan_check_read+0x11/0x20 [ 1175.448360] ? cap_capable+0x1f9/0x260 [ 1175.452255] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1175.457796] ? security_capable+0x99/0xc0 [ 1175.461957] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1175.467501] ? ns_capable_common+0x13f/0x170 [ 1175.471915] ? get_anon_bdev+0x2f0/0x2f0 [ 1175.475984] ? sget+0x113/0x150 [ 1175.479263] ? fuse_get_root_inode+0x190/0x190 [ 1175.483844] mount_nodev+0x6b/0x110 [ 1175.487475] fuse_mount+0x2c/0x40 [ 1175.488054] TCP: out of memory -- consider tuning tcp_mem [ 1175.490928] mount_fs+0xae/0x328 [ 1175.490953] vfs_kern_mount.part.34+0xd4/0x4d0 [ 1175.490970] ? may_umount+0xb0/0xb0 [ 1175.490985] ? _raw_read_unlock+0x22/0x30 [ 1175.490998] ? __get_fs_type+0x97/0xc0 [ 1175.491018] do_mount+0x564/0x3070 [ 1175.491035] ? copy_mount_string+0x40/0x40 [ 1175.491053] ? rcu_pm_notify+0xc0/0xc0 [ 1175.527736] ? copy_mount_options+0x5f/0x380 [ 1175.532152] ? rcu_read_lock_sched_held+0x108/0x120 [ 1175.537174] ? kmem_cache_alloc_trace+0x616/0x780 [ 1175.542031] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1175.547577] ? copy_mount_options+0x285/0x380 [ 1175.552079] ksys_mount+0x12d/0x140 [ 1175.555711] __x64_sys_mount+0xbe/0x150 [ 1175.559685] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 1175.564706] do_syscall_64+0x1b1/0x800 [ 1175.568599] ? finish_task_switch+0x1ca/0x840 [ 1175.573095] ? syscall_return_slowpath+0x5c0/0x5c0 [ 1175.578029] ? syscall_return_slowpath+0x30f/0x5c0 [ 1175.582971] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 1175.588345] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1175.593202] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1175.598390] RIP: 0033:0x455a09 2018/05/26 13:24:15 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty=0x18, [0x0, 0x0, 0x0, 0x0, 0x0, 0x11000000]}, 0x10) 2018/05/26 13:24:15 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x20000000000000, 0x0, 0x0, 0x0, 0xc00]}, 0x2c) 2018/05/26 13:24:15 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty=0x18, [0x0, 0x0, 0x0, 0x0, 0x0, 0x700]}, 0x10) 2018/05/26 13:24:15 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty=0x18, [0x0, 0x0, 0x0, 0x0, 0x0, 0xe00]}, 0x10) 2018/05/26 13:24:15 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x4000000000000000, 0x0, 0x0, 0x0, 0xc00]}, 0x2c) [ 1175.601578] RSP: 002b:00007f118944d808 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1175.609292] RAX: ffffffffffffffda RBX: 0000000000000016 RCX: 0000000000455a09 [ 1175.616566] RDX: 00000000004c1eb6 RSI: 0000000020000240 RDI: 00000000004de0c5 [ 1175.623836] RBP: 0000000000000000 R08: 00007f118944d820 R09: 0000000000000000 [ 1175.631102] R10: 0000000048000000 R11: 0000000000000246 R12: 0000000000000000 [ 1175.638372] R13: 0000000020000240 R14: 0000000048000000 R15: 0000000000000000 2018/05/26 13:24:15 executing program 7 (fault-call:9 fault-nth:40): r0 = getpid() sched_setattr(r0, &(0x7f00000000c0), 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}}) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) syz_fuse_mount(&(0x7f0000000240)='./control\x00', 0x406000, 0x0, 0x0, 0x0, 0x48000000) close(r1) 2018/05/26 13:24:15 executing program 6: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb00]}, 0x2c) [ 1175.711340] TCP: out of memory -- consider tuning tcp_mem [ 1175.776325] FAULT_INJECTION: forcing a failure. [ 1175.776325] name failslab, interval 1, probability 0, space 0, times 0 [ 1175.787758] CPU: 1 PID: 2796 Comm: syz-executor7 Not tainted 4.17.0-rc6+ #68 [ 1175.794959] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1175.804313] Call Trace: [ 1175.806921] dump_stack+0x1b9/0x294 [ 1175.810562] ? dump_stack_print_info.cold.2+0x52/0x52 [ 1175.815761] ? rcu_is_watching+0x85/0x140 [ 1175.819924] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 1175.825122] should_fail.cold.4+0xa/0x1a [ 1175.829192] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1175.834305] ? kernel_text_address+0x79/0xf0 [ 1175.838721] ? __unwind_start+0x166/0x330 [ 1175.842875] ? __kernel_text_address+0xd/0x40 [ 1175.847372] ? graph_lock+0x170/0x170 [ 1175.851158] ? __save_stack_trace+0x7e/0xd0 [ 1175.855467] ? find_held_lock+0x36/0x1c0 [ 1175.859525] ? __lock_is_held+0xb5/0x140 [ 1175.863589] ? check_same_owner+0x320/0x320 [ 1175.867919] ? rcu_note_context_switch+0x710/0x710 [ 1175.872844] __should_failslab+0x124/0x180 [ 1175.877079] should_failslab+0x9/0x14 [ 1175.880877] __kmalloc+0x2c8/0x760 [ 1175.884420] ? match_number.isra.0+0xb6/0x260 [ 1175.888902] match_number.isra.0+0xb6/0x260 [ 1175.893218] ? match_strdup+0xa0/0xa0 [ 1175.897007] ? match_wildcard+0x3c0/0x3c0 [ 1175.901150] ? trace_hardirqs_on+0xd/0x10 [ 1175.905284] match_octal+0x26/0x30 [ 1175.908809] fuse_fill_super+0x615/0x1e20 [ 1175.912947] ? fuse_get_root_inode+0x190/0x190 [ 1175.917515] ? __alloc_pages_slowpath+0x2db0/0x2db0 [ 1175.922518] ? kasan_check_read+0x11/0x20 [ 1175.926653] ? cap_capable+0x1f9/0x260 [ 1175.930541] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1175.936062] ? security_capable+0x99/0xc0 [ 1175.940205] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1175.945735] ? ns_capable_common+0x13f/0x170 [ 1175.950125] ? get_anon_bdev+0x2f0/0x2f0 [ 1175.954176] ? sget+0x113/0x150 [ 1175.957449] ? fuse_get_root_inode+0x190/0x190 [ 1175.962017] mount_nodev+0x6b/0x110 [ 1175.965635] fuse_mount+0x2c/0x40 [ 1175.969082] mount_fs+0xae/0x328 [ 1175.972454] vfs_kern_mount.part.34+0xd4/0x4d0 [ 1175.977027] ? may_umount+0xb0/0xb0 [ 1175.980657] ? _raw_read_unlock+0x22/0x30 [ 1175.984793] ? __get_fs_type+0x97/0xc0 [ 1175.988664] do_mount+0x564/0x3070 [ 1175.992189] ? copy_mount_string+0x40/0x40 [ 1175.996408] ? rcu_pm_notify+0xc0/0xc0 [ 1176.000285] ? copy_mount_options+0x5f/0x380 [ 1176.004686] ? rcu_read_lock_sched_held+0x108/0x120 [ 1176.009697] ? kmem_cache_alloc_trace+0x616/0x780 [ 1176.014535] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1176.020067] ? _copy_from_user+0xdf/0x150 [ 1176.024203] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1176.029737] ? copy_mount_options+0x285/0x380 [ 1176.034232] ksys_mount+0x12d/0x140 [ 1176.037844] __x64_sys_mount+0xbe/0x150 [ 1176.041804] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 1176.046814] do_syscall_64+0x1b1/0x800 [ 1176.050687] ? finish_task_switch+0x1ca/0x840 [ 1176.055166] ? syscall_return_slowpath+0x5c0/0x5c0 [ 1176.060080] ? syscall_return_slowpath+0x30f/0x5c0 [ 1176.064995] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 1176.070353] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1176.075182] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1176.080349] RIP: 0033:0x455a09 [ 1176.083517] RSP: 002b:00007f118944d808 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1176.091204] RAX: ffffffffffffffda RBX: 0000000000000016 RCX: 0000000000455a09 [ 1176.098454] RDX: 00000000004c1eb6 RSI: 0000000020000240 RDI: 00000000004de0c5 [ 1176.105710] RBP: 0000000000000000 R08: 00007f118944d820 R09: 0000000000000000 [ 1176.106747] sctp: sctp_transport_update_pmtu: Reported pmtu 72 too low, using default minimum of 512 [ 1176.112967] R10: 0000000048000000 R11: 0000000000000246 R12: 0000000000000000 [ 1176.112976] R13: 0000000020000240 R14: 0000000048000000 R15: 0000000000000000 [ 1176.278573] sctp: sctp_transport_update_pmtu: Reported pmtu 72 too low, using default minimum of 512 2018/05/26 13:24:16 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0xf000000, 0x0, 0x0, 0x0, 0xc00]}, 0x2c) 2018/05/26 13:24:16 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty=0x18, [0x0, 0x0, 0x0, 0x0, 0x0, 0xb08f4]}, 0x10) 2018/05/26 13:24:16 executing program 7 (fault-call:9 fault-nth:41): r0 = getpid() sched_setattr(r0, &(0x7f00000000c0), 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}}) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) syz_fuse_mount(&(0x7f0000000240)='./control\x00', 0x406000, 0x0, 0x0, 0x0, 0x48000000) close(r1) 2018/05/26 13:24:16 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)="766574683100000000ffffffffffef00", 0x22b) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x82440800]}, 0x10) 2018/05/26 13:24:16 executing program 6: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x36000]}, 0x2c) 2018/05/26 13:24:16 executing program 4: r0 = getpid() sched_setattr(r0, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x0, 0x4}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x9, 0x8000) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000280)={{{@in=@remote, @in6=@dev}}, {{@in=@rand_addr}, 0x0, @in=@loopback}}, &(0x7f0000000080)=0xe8) r3 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r3, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000f86000)='./control/file0\x00') syz_fuse_mount(&(0x7f0000000240)='./control\x00', 0x406000, 0x0, 0x0, 0x0, 0x0) syz_fuseblk_mount(&(0x7f0000000140)='./control\x00', &(0x7f0000000180)='./control/file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) close(r1) 2018/05/26 13:24:16 executing program 2: r0 = getpid() sched_setattr(r0, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x0, 0x4}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f0000000000)='./control/file1\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000f86000)='./control/file0\x00') rmdir(&(0x7f00000000c0)='./control\x00') syz_fuse_mount(&(0x7f0000000240)='./control\x00', 0x406000, 0x0, 0x0, 0x0, 0x0) syz_fuseblk_mount(&(0x7f0000000140)='./control\x00', &(0x7f0000000180)='./control/file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) close(r1) getsockname$llc(r2, &(0x7f0000000040), &(0x7f0000000080)=0x10) 2018/05/26 13:24:16 executing program 1: r0 = socket$inet(0x2, 0x5, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vcan0\x00', 0x10) sendmsg(r0, &(0x7f0000000480)={&(0x7f0000000140)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000380)="f0", 0x1}], 0x1}, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000a00)={@multicast1=0xe0000001, @local={0xac, 0x14, 0x14, 0xaa}}, 0xc) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000040)="84", 0xe}], 0x1, &(0x7f0000000540)}, 0x0) [ 1176.514357] FAULT_INJECTION: forcing a failure. [ 1176.514357] name failslab, interval 1, probability 0, space 0, times 0 [ 1176.525704] CPU: 1 PID: 2835 Comm: syz-executor7 Not tainted 4.17.0-rc6+ #68 [ 1176.532893] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1176.542248] Call Trace: [ 1176.544850] dump_stack+0x1b9/0x294 [ 1176.548494] ? dump_stack_print_info.cold.2+0x52/0x52 [ 1176.553699] ? is_bpf_text_address+0xd7/0x170 [ 1176.556221] TCP: out of memory -- consider tuning tcp_mem 2018/05/26 13:24:16 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty=0x18, [0x0, 0x0, 0x0, 0x0, 0x0, 0x11]}, 0x10) [ 1176.558203] should_fail.cold.4+0xa/0x1a [ 1176.558223] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1176.558248] ? graph_lock+0x170/0x170 [ 1176.558265] ? save_stack+0xa9/0xd0 [ 1176.558281] ? find_held_lock+0x36/0x1c0 [ 1176.576950] TCP: out of memory -- consider tuning tcp_mem [ 1176.580365] ? __lock_is_held+0xb5/0x140 [ 1176.580397] ? check_same_owner+0x320/0x320 [ 1176.580411] ? trace_hardirqs_off+0xd/0x10 [ 1176.580428] ? _raw_spin_unlock_irqrestore+0x63/0xc0 [ 1176.580448] ? rcu_note_context_switch+0x710/0x710 [ 1176.612601] ? debug_check_no_obj_freed+0x2ff/0x584 [ 1176.617627] __should_failslab+0x124/0x180 [ 1176.621874] should_failslab+0x9/0x14 [ 1176.625676] __kmalloc+0x2c8/0x760 [ 1176.629232] ? match_strdup+0x5e/0xa0 [ 1176.633041] match_strdup+0x5e/0xa0 [ 1176.636675] fuse_match_uint+0x1a/0x60 [ 1176.640570] fuse_fill_super+0x455/0x1e20 [ 1176.644730] ? fuse_get_root_inode+0x190/0x190 [ 1176.649319] ? __alloc_pages_slowpath+0x2db0/0x2db0 [ 1176.654346] ? kasan_check_read+0x11/0x20 [ 1176.658503] ? cap_capable+0x1f9/0x260 [ 1176.662400] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1176.667941] ? security_capable+0x99/0xc0 [ 1176.672100] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1176.677639] ? ns_capable_common+0x13f/0x170 [ 1176.682057] ? get_anon_bdev+0x2f0/0x2f0 [ 1176.686128] ? sget+0x113/0x150 [ 1176.689418] ? fuse_get_root_inode+0x190/0x190 [ 1176.694004] mount_nodev+0x6b/0x110 [ 1176.697633] fuse_mount+0x2c/0x40 [ 1176.701087] mount_fs+0xae/0x328 [ 1176.704464] vfs_kern_mount.part.34+0xd4/0x4d0 [ 1176.709050] ? may_umount+0xb0/0xb0 [ 1176.712677] ? _raw_read_unlock+0x22/0x30 [ 1176.716826] ? __get_fs_type+0x97/0xc0 [ 1176.720719] do_mount+0x564/0x3070 [ 1176.724259] ? copy_mount_string+0x40/0x40 [ 1176.728498] ? rcu_pm_notify+0xc0/0xc0 [ 1176.732395] ? copy_mount_options+0x5f/0x380 [ 1176.736808] ? rcu_read_lock_sched_held+0x108/0x120 [ 1176.741829] ? kmem_cache_alloc_trace+0x616/0x780 [ 1176.746688] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1176.752237] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1176.757780] ? copy_mount_options+0x285/0x380 [ 1176.762285] ksys_mount+0x12d/0x140 [ 1176.765918] __x64_sys_mount+0xbe/0x150 [ 1176.767788] TCP: out of memory -- consider tuning tcp_mem [ 1176.769900] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 1176.769919] do_syscall_64+0x1b1/0x800 [ 1176.769935] ? finish_task_switch+0x1ca/0x840 [ 1176.769953] ? syscall_return_slowpath+0x5c0/0x5c0 [ 1176.769970] ? syscall_return_slowpath+0x30f/0x5c0 [ 1176.769990] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 1176.770008] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1176.808905] entry_SYSCALL_64_after_hwframe+0x49/0xbe 2018/05/26 13:24:16 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)="766574683100000000ffffffffffef00", 0x22b) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x7c440800]}, 0x10) 2018/05/26 13:24:16 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty=0x18, [0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000]}, 0x10) 2018/05/26 13:24:16 executing program 6: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11]}, 0x2c) 2018/05/26 13:24:16 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty=0x18, [0x0, 0x0, 0x0, 0x0, 0x0, 0x3400000000000000]}, 0x10) 2018/05/26 13:24:16 executing program 6: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0030000000000]}, 0x2c) [ 1176.812473] TCP: out of memory -- consider tuning tcp_mem [ 1176.814093] RIP: 0033:0x455a09 [ 1176.814102] RSP: 002b:00007f118944d808 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1176.814118] RAX: ffffffffffffffda RBX: 0000000000000016 RCX: 0000000000455a09 [ 1176.814127] RDX: 00000000004c1eb6 RSI: 0000000020000240 RDI: 00000000004de0c5 [ 1176.814137] RBP: 0000000000000000 R08: 00007f118944d820 R09: 0000000000000000 [ 1176.814146] R10: 0000000048000000 R11: 0000000000000246 R12: 0000000000000000 2018/05/26 13:24:17 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)="766574683100000000ffffffffffef00", 0x22b) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x8447b]}, 0x10) 2018/05/26 13:24:17 executing program 7 (fault-call:9 fault-nth:42): r0 = getpid() sched_setattr(r0, &(0x7f00000000c0), 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}}) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) syz_fuse_mount(&(0x7f0000000240)='./control\x00', 0x406000, 0x0, 0x0, 0x0, 0x48000000) close(r1) [ 1176.814155] R13: 0000000020000240 R14: 0000000048000000 R15: 0000000000000000 [ 1176.814267] TCP: out of memory -- consider tuning tcp_mem [ 1176.819865] TCP: out of memory -- consider tuning tcp_mem [ 1176.962100] FAULT_INJECTION: forcing a failure. [ 1176.962100] name failslab, interval 1, probability 0, space 0, times 0 [ 1176.973488] CPU: 1 PID: 2869 Comm: syz-executor7 Not tainted 4.17.0-rc6+ #68 [ 1176.980683] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1176.990044] Call Trace: [ 1176.992641] dump_stack+0x1b9/0x294 [ 1176.996280] ? dump_stack_print_info.cold.2+0x52/0x52 [ 1177.001474] ? rcu_is_watching+0x85/0x140 [ 1177.005633] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 1177.010830] should_fail.cold.4+0xa/0x1a [ 1177.014874] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1177.019971] ? kernel_text_address+0x79/0xf0 [ 1177.024381] ? __unwind_start+0x166/0x330 [ 1177.028511] ? __kernel_text_address+0xd/0x40 [ 1177.032988] ? graph_lock+0x170/0x170 [ 1177.036787] ? __save_stack_trace+0x7e/0xd0 [ 1177.041112] ? find_held_lock+0x36/0x1c0 [ 1177.045169] ? __lock_is_held+0xb5/0x140 [ 1177.049228] ? check_same_owner+0x320/0x320 [ 1177.053532] ? rcu_note_context_switch+0x710/0x710 [ 1177.058447] __should_failslab+0x124/0x180 [ 1177.062667] should_failslab+0x9/0x14 [ 1177.066460] __kmalloc+0x2c8/0x760 [ 1177.070002] ? match_number.isra.0+0xb6/0x260 [ 1177.074491] match_number.isra.0+0xb6/0x260 [ 1177.078794] ? match_strdup+0xa0/0xa0 [ 1177.082585] ? match_wildcard+0x3c0/0x3c0 [ 1177.086714] ? trace_hardirqs_on+0xd/0x10 [ 1177.090857] match_octal+0x26/0x30 [ 1177.094402] fuse_fill_super+0x615/0x1e20 [ 1177.098557] ? fuse_get_root_inode+0x190/0x190 [ 1177.103132] ? __alloc_pages_slowpath+0x2db0/0x2db0 [ 1177.108132] ? kasan_check_read+0x11/0x20 [ 1177.112261] ? cap_capable+0x1f9/0x260 [ 1177.116147] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1177.121681] ? security_capable+0x99/0xc0 [ 1177.125823] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1177.131340] ? ns_capable_common+0x13f/0x170 [ 1177.135730] ? get_anon_bdev+0x2f0/0x2f0 [ 1177.139776] ? sget+0x113/0x150 [ 1177.143045] ? fuse_get_root_inode+0x190/0x190 [ 1177.147610] mount_nodev+0x6b/0x110 [ 1177.151228] fuse_mount+0x2c/0x40 [ 1177.154673] mount_fs+0xae/0x328 [ 1177.158035] vfs_kern_mount.part.34+0xd4/0x4d0 [ 1177.162618] ? may_umount+0xb0/0xb0 [ 1177.166225] ? _raw_read_unlock+0x22/0x30 [ 1177.170355] ? __get_fs_type+0x97/0xc0 [ 1177.174225] do_mount+0x564/0x3070 [ 1177.177744] ? do_raw_spin_unlock+0x9e/0x2e0 [ 1177.182134] ? copy_mount_string+0x40/0x40 [ 1177.186357] ? rcu_pm_notify+0xc0/0xc0 [ 1177.190233] ? copy_mount_options+0x5f/0x380 [ 1177.194620] ? rcu_read_lock_sched_held+0x108/0x120 [ 1177.199618] ? kmem_cache_alloc_trace+0x616/0x780 [ 1177.204444] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1177.209963] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1177.215489] ? copy_mount_options+0x285/0x380 [ 1177.219968] ksys_mount+0x12d/0x140 [ 1177.223590] __x64_sys_mount+0xbe/0x150 [ 1177.227557] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 1177.232555] do_syscall_64+0x1b1/0x800 [ 1177.236424] ? finish_task_switch+0x1ca/0x840 [ 1177.240899] ? syscall_return_slowpath+0x5c0/0x5c0 [ 1177.245814] ? syscall_return_slowpath+0x30f/0x5c0 [ 1177.250726] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 1177.256072] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1177.260899] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1177.266080] RIP: 0033:0x455a09 [ 1177.269262] RSP: 002b:00007f118944d808 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1177.273068] sctp: sctp_transport_update_pmtu: Reported pmtu 72 too low, using default minimum of 512 [ 1177.276964] RAX: ffffffffffffffda RBX: 0000000000000016 RCX: 0000000000455a09 [ 1177.276973] RDX: 00000000004c1eb6 RSI: 0000000020000240 RDI: 00000000004de0c5 [ 1177.276982] RBP: 0000000000000000 R08: 00007f118944d820 R09: 0000000000000000 [ 1177.276991] R10: 0000000048000000 R11: 0000000000000246 R12: 0000000000000000 [ 1177.277000] R13: 0000000020000240 R14: 0000000048000000 R15: 0000000000000000 [ 1177.447582] sctp: sctp_transport_update_pmtu: Reported pmtu 72 too low, using default minimum of 512 2018/05/26 13:24:17 executing program 6: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000]}, 0x2c) 2018/05/26 13:24:17 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0xe00, 0x0, 0x0, 0x0, 0xc00]}, 0x2c) 2018/05/26 13:24:17 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)="766574683100000000ffffffffffef00", 0x22b) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0xc8]}, 0x10) 2018/05/26 13:24:17 executing program 7 (fault-call:9 fault-nth:43): r0 = getpid() sched_setattr(r0, &(0x7f00000000c0), 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}}) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) syz_fuse_mount(&(0x7f0000000240)='./control\x00', 0x406000, 0x0, 0x0, 0x0, 0x48000000) close(r1) 2018/05/26 13:24:17 executing program 2: r0 = getpid() sched_setattr(r0, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x0, 0x4}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x4000, 0x0) userfaultfd(0x80800) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r1, 0x84, 0x74, &(0x7f0000000080), &(0x7f0000000100)) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r3, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000f86000)='./control/file0\x00') rmdir(&(0x7f00000000c0)='./control\x00') syz_fuse_mount(&(0x7f0000000240)='./control\x00', 0x406000, 0x0, 0x0, 0x0, 0x0) syz_fuseblk_mount(&(0x7f0000000140)='./control\x00', &(0x7f0000000180)='./control/file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) close(r2) 2018/05/26 13:24:17 executing program 1: r0 = socket$inet(0x2, 0x5, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vcan0\x00', 0x10) sendmsg(r0, &(0x7f0000000480)={&(0x7f0000000140)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000380)="f0", 0x1}], 0x1}, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000a00)={@multicast1=0xe0000001, @local={0xac, 0x14, 0x14, 0xaa}}, 0xc) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000040)="84", 0x20000041}], 0x1, &(0x7f0000000540)}, 0x0) 2018/05/26 13:24:17 executing program 4: r0 = getpid() sched_setattr(r0, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x0, 0x4}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000f86000)='./control/file0\x00') syz_fuse_mount(&(0x7f0000000240)='./control\x00', 0x406000, 0x0, 0x0, 0x0, 0x0) syz_fuseblk_mount(&(0x7f0000000140)='./control\x00', &(0x7f0000000180)='./control/file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) close(r1) 2018/05/26 13:24:17 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty=0x18, [0x0, 0x0, 0x0, 0x0, 0x0, 0x12000000000000]}, 0x10) [ 1177.619701] FAULT_INJECTION: forcing a failure. [ 1177.619701] name failslab, interval 1, probability 0, space 0, times 0 [ 1177.631100] CPU: 1 PID: 2896 Comm: syz-executor7 Not tainted 4.17.0-rc6+ #68 [ 1177.638287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1177.647639] Call Trace: [ 1177.650236] dump_stack+0x1b9/0x294 [ 1177.653876] ? dump_stack_print_info.cold.2+0x52/0x52 [ 1177.659079] should_fail.cold.4+0xa/0x1a [ 1177.663152] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1177.668271] ? graph_lock+0x170/0x170 [ 1177.672082] ? _raw_spin_unlock_irqrestore+0x74/0xc0 [ 1177.677198] ? find_held_lock+0x36/0x1c0 [ 1177.681274] ? __lock_is_held+0xb5/0x140 [ 1177.685360] ? check_same_owner+0x320/0x320 [ 1177.689695] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1177.695242] ? rcu_note_context_switch+0x710/0x710 [ 1177.700181] __should_failslab+0x124/0x180 [ 1177.704422] should_failslab+0x9/0x14 [ 1177.708227] kmem_cache_alloc_trace+0x2cb/0x780 [ 1177.712902] ? __raw_spin_lock_init+0x1c/0x100 [ 1177.717499] device_create_groups_vargs+0xa7/0x270 [ 1177.722441] device_create_vargs+0x46/0x60 [ 1177.726692] bdi_register_va.part.10+0xbb/0x9b0 [ 1177.731368] ? cgwb_kill+0x630/0x630 [ 1177.735092] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1177.740631] ? bdi_init+0x416/0x510 [ 1177.744268] ? wb_init+0x9e0/0x9e0 [ 1177.747815] ? bdi_alloc_node+0x67/0xe0 [ 1177.751799] ? bdi_alloc_node+0x67/0xe0 [ 1177.755787] ? rcu_read_lock_sched_held+0x108/0x120 [ 1177.760808] ? kmem_cache_alloc_node_trace+0x34e/0x770 [ 1177.766089] ? _raw_spin_unlock+0x22/0x30 [ 1177.770243] bdi_register_va+0x68/0x80 [ 1177.774138] super_setup_bdi_name+0x123/0x220 [ 1177.778636] ? kill_block_super+0x100/0x100 [ 1177.782968] ? kmem_cache_alloc_trace+0x616/0x780 [ 1177.787819] ? match_wildcard+0x3c0/0x3c0 [ 1177.791972] ? trace_hardirqs_on+0xd/0x10 [ 1177.796131] fuse_fill_super+0xe6e/0x1e20 [ 1177.800289] ? fuse_get_root_inode+0x190/0x190 [ 1177.804500] TCP: out of memory -- consider tuning tcp_mem [ 1177.804874] ? __alloc_pages_slowpath+0x2db0/0x2db0 [ 1177.804895] ? kasan_check_read+0x11/0x20 [ 1177.804912] ? cap_capable+0x1f9/0x260 [ 1177.804933] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1177.828985] ? security_capable+0x99/0xc0 [ 1177.833141] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1177.838685] ? ns_capable_common+0x13f/0x170 [ 1177.843102] ? get_anon_bdev+0x2f0/0x2f0 [ 1177.847162] ? sget+0x113/0x150 [ 1177.850446] ? fuse_get_root_inode+0x190/0x190 [ 1177.855036] mount_nodev+0x6b/0x110 [ 1177.858670] fuse_mount+0x2c/0x40 [ 1177.862124] mount_fs+0xae/0x328 [ 1177.865499] vfs_kern_mount.part.34+0xd4/0x4d0 [ 1177.870087] ? may_umount+0xb0/0xb0 [ 1177.873716] ? _raw_read_unlock+0x22/0x30 [ 1177.877868] ? __get_fs_type+0x97/0xc0 [ 1177.881767] do_mount+0x564/0x3070 [ 1177.885315] ? copy_mount_string+0x40/0x40 [ 1177.889556] ? rcu_pm_notify+0xc0/0xc0 [ 1177.893456] ? copy_mount_options+0x5f/0x380 [ 1177.897879] ? rcu_read_lock_sched_held+0x108/0x120 [ 1177.902900] ? kmem_cache_alloc_trace+0x616/0x780 [ 1177.907764] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1177.913304] ? copy_mount_options+0x285/0x380 [ 1177.917811] ksys_mount+0x12d/0x140 [ 1177.921448] __x64_sys_mount+0xbe/0x150 [ 1177.925425] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 1177.930448] do_syscall_64+0x1b1/0x800 [ 1177.934339] ? finish_task_switch+0x1ca/0x840 [ 1177.938844] ? syscall_return_slowpath+0x5c0/0x5c0 [ 1177.943781] ? syscall_return_slowpath+0x30f/0x5c0 [ 1177.948717] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 1177.954088] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1177.958940] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1177.964131] RIP: 0033:0x455a09 2018/05/26 13:24:17 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty=0x18, [0x0, 0x0, 0x0, 0x0, 0x0, 0x80550000]}, 0x10) 2018/05/26 13:24:17 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)="766574683100000000ffffffffffef00", 0x22b) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x14280000000000]}, 0x10) 2018/05/26 13:24:17 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty=0x18, [0x0, 0x0, 0x0, 0x0, 0x0, 0xe000000]}, 0x10) 2018/05/26 13:24:17 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty=0x18, [0x0, 0x0, 0x0, 0x0, 0x0, 0x34000000]}, 0x10) 2018/05/26 13:24:18 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)="766574683100000000ffffffffffef00", 0x22b) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x1800000000000000]}, 0x10) 2018/05/26 13:24:18 executing program 6: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2400]}, 0x2c) 2018/05/26 13:24:18 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty=0x18, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4002]}, 0x10) 2018/05/26 13:24:18 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty=0x18, [0x0, 0x0, 0x0, 0x0, 0x0, 0xe]}, 0x10) [ 1177.967319] RSP: 002b:00007f118944d808 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1177.975032] RAX: ffffffffffffffda RBX: 0000000000000016 RCX: 0000000000455a09 [ 1177.982304] RDX: 00000000004c1eb6 RSI: 0000000020000240 RDI: 00000000004de0c5 [ 1177.989572] RBP: 0000000000000000 R08: 00007f118944d820 R09: 0000000000000000 [ 1177.996842] R10: 0000000048000000 R11: 0000000000000246 R12: 0000000000000000 [ 1178.004112] R13: 0000000020000240 R14: 0000000048000000 R15: 0000000000000000 2018/05/26 13:24:18 executing program 6: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60030000000000]}, 0x2c) 2018/05/26 13:24:18 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)="766574683100000000ffffffffffef00", 0x22b) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x8055000000000000]}, 0x10) 2018/05/26 13:24:18 executing program 7 (fault-call:9 fault-nth:44): r0 = getpid() sched_setattr(r0, &(0x7f00000000c0), 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}}) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) syz_fuse_mount(&(0x7f0000000240)='./control\x00', 0x406000, 0x0, 0x0, 0x0, 0x48000000) close(r1) 2018/05/26 13:24:18 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x40000000000000, 0x0, 0x0, 0x0, 0xc00]}, 0x2c) 2018/05/26 13:24:18 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty=0x18, [0x0, 0x0, 0x0, 0x0, 0x0, 0x700000000000000]}, 0x10) 2018/05/26 13:24:18 executing program 4: r0 = getpid() sched_setattr(r0, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x0, 0x4}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) fcntl$setlease(r1, 0x400, 0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000f86000)='./control/file0\x00') syz_fuse_mount(&(0x7f0000000240)='./control\x00', 0x406000, 0x0, 0x0, 0x0, 0x0) syz_fuseblk_mount(&(0x7f0000000140)='./control\x00', &(0x7f0000000180)='./control/file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) close(r1) 2018/05/26 13:24:18 executing program 1: r0 = socket$inet(0x2, 0x5, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vcan0\x00', 0x10) sendmsg(r0, &(0x7f0000000480)={&(0x7f0000000140)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000380)="f0", 0x1}], 0x1}, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000a00)={@multicast1=0xe0000001, @local={0xac, 0x14, 0x14, 0xaa}}, 0xc) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000040)="84", 0xffffffe0}], 0x1, &(0x7f0000000540)}, 0x0) 2018/05/26 13:24:18 executing program 2: r0 = getpid() sched_setattr(r0, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x0, 0x4}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000f86000)='./control/file0\x00') rmdir(&(0x7f00000000c0)='./control\x00') r3 = syz_fuse_mount(&(0x7f0000000240)='./control\x00', 0x406000, 0x0, 0x0, 0x0, 0x0) close(r3) [ 1178.738006] FAULT_INJECTION: forcing a failure. [ 1178.738006] name failslab, interval 1, probability 0, space 0, times 0 [ 1178.749373] CPU: 1 PID: 2961 Comm: syz-executor7 Not tainted 4.17.0-rc6+ #68 [ 1178.756557] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1178.765910] Call Trace: [ 1178.768505] dump_stack+0x1b9/0x294 [ 1178.772140] ? dump_stack_print_info.cold.2+0x52/0x52 [ 1178.777347] should_fail.cold.4+0xa/0x1a [ 1178.781416] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1178.786528] ? trace_hardirqs_on+0xd/0x10 [ 1178.790691] ? graph_lock+0x170/0x170 [ 1178.794501] ? graph_lock+0x170/0x170 [ 1178.798313] ? find_held_lock+0x36/0x1c0 [ 1178.802390] ? __lock_is_held+0xb5/0x140 [ 1178.806472] ? check_same_owner+0x320/0x320 [ 1178.810805] ? rcu_note_context_switch+0x710/0x710 [ 1178.815747] __should_failslab+0x124/0x180 [ 1178.819991] should_failslab+0x9/0x14 [ 1178.823799] kmem_cache_alloc_trace+0x2cb/0x780 [ 1178.828477] ? _raw_spin_unlock_irqrestore+0x74/0xc0 [ 1178.833588] ? trace_hardirqs_on_caller+0x421/0x5c0 2018/05/26 13:24:18 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty=0x18, [0x0, 0x0, 0x0, 0x0, 0x0, 0x142800]}, 0x10) 2018/05/26 13:24:18 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xc00]}, 0x2c) 2018/05/26 13:24:19 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty=0x18, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4000]}, 0x10) [ 1178.838618] wb_congested_get_create+0x1ca/0x450 [ 1178.843381] ? wb_wakeup_delayed+0xf0/0xf0 [ 1178.847627] ? __lockdep_init_map+0x105/0x590 [ 1178.852133] wb_init+0x62e/0x9e0 [ 1178.855510] ? bdi_put+0x180/0x180 [ 1178.859064] ? mark_held_locks+0xc9/0x160 [ 1178.863222] ? do_mount+0x564/0x3070 [ 1178.866946] ? __raw_spin_lock_init+0x1c/0x100 [ 1178.871544] ? mark_held_locks+0xc9/0x160 [ 1178.875705] ? __raw_spin_lock_init+0x1c/0x100 [ 1178.880301] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 1178.885335] ? lockdep_init_map+0x9/0x10 [ 1178.889404] bdi_init+0x353/0x510 [ 1178.892863] ? wb_init+0x9e0/0x9e0 [ 1178.896410] ? bdi_alloc_node+0x67/0xe0 [ 1178.900394] ? bdi_alloc_node+0x67/0xe0 [ 1178.904375] ? rcu_read_lock_sched_held+0x108/0x120 [ 1178.909406] ? kmem_cache_alloc_node_trace+0x34e/0x770 [ 1178.914712] ? _raw_spin_unlock+0x22/0x30 [ 1178.918868] bdi_alloc_node+0x81/0xe0 [ 1178.922683] super_setup_bdi_name+0x8b/0x220 [ 1178.927096] ? kill_block_super+0x100/0x100 [ 1178.931421] ? rcu_read_lock_sched_held+0x108/0x120 [ 1178.936442] ? kmem_cache_alloc_trace+0x616/0x780 [ 1178.941288] ? match_wildcard+0x3c0/0x3c0 [ 1178.945440] ? trace_hardirqs_on+0xd/0x10 [ 1178.949595] fuse_fill_super+0xe6e/0x1e20 [ 1178.953751] ? fuse_get_root_inode+0x190/0x190 [ 1178.958340] ? __alloc_pages_slowpath+0x2db0/0x2db0 [ 1178.963360] ? kasan_check_read+0x11/0x20 [ 1178.967516] ? cap_capable+0x1f9/0x260 [ 1178.971415] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1178.976955] ? security_capable+0x99/0xc0 [ 1178.981111] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1178.986655] ? ns_capable_common+0x13f/0x170 [ 1178.991076] ? get_anon_bdev+0x2f0/0x2f0 [ 1178.995143] ? sget+0x113/0x150 [ 1178.998434] ? fuse_get_root_inode+0x190/0x190 [ 1179.003018] mount_nodev+0x6b/0x110 [ 1179.006656] fuse_mount+0x2c/0x40 [ 1179.010120] mount_fs+0xae/0x328 [ 1179.013499] vfs_kern_mount.part.34+0xd4/0x4d0 [ 1179.018088] ? may_umount+0xb0/0xb0 [ 1179.021714] ? _raw_read_unlock+0x22/0x30 [ 1179.025860] ? __get_fs_type+0x97/0xc0 [ 1179.029755] do_mount+0x564/0x3070 [ 1179.033304] ? copy_mount_string+0x40/0x40 [ 1179.037544] ? rcu_pm_notify+0xc0/0xc0 [ 1179.041448] ? copy_mount_options+0x5f/0x380 [ 1179.045865] ? rcu_read_lock_sched_held+0x108/0x120 [ 1179.050882] ? kmem_cache_alloc_trace+0x616/0x780 [ 1179.055735] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1179.061279] ? _copy_from_user+0xdf/0x150 [ 1179.065433] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1179.070976] ? copy_mount_options+0x285/0x380 [ 1179.075475] ksys_mount+0x12d/0x140 [ 1179.079108] __x64_sys_mount+0xbe/0x150 [ 1179.083089] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 1179.088111] do_syscall_64+0x1b1/0x800 [ 1179.092004] ? finish_task_switch+0x1ca/0x840 [ 1179.096508] ? syscall_return_slowpath+0x5c0/0x5c0 [ 1179.101447] ? syscall_return_slowpath+0x30f/0x5c0 [ 1179.106384] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 1179.111754] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1179.116613] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1179.121800] RIP: 0033:0x455a09 [ 1179.124988] RSP: 002b:00007f118944d808 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1179.132699] RAX: ffffffffffffffda RBX: 0000000000000016 RCX: 0000000000455a09 2018/05/26 13:24:19 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x600000000000000, 0x0, 0x0, 0x0, 0xc00]}, 0x2c) 2018/05/26 13:24:19 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty=0x18, [0x0, 0x0, 0x0, 0x0, 0x0, 0x3e8]}, 0x10) 2018/05/26 13:24:19 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty=0x18, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, 0x10) 2018/05/26 13:24:19 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)="766574683100000000ffffffffffef00", 0x22b) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x77440800]}, 0x10) 2018/05/26 13:24:19 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x6000000, 0x0, 0x0, 0x0, 0xc00]}, 0x2c) [ 1179.139972] RDX: 00000000004c1eb6 RSI: 0000000020000240 RDI: 00000000004de0c5 [ 1179.147242] RBP: 0000000000000000 R08: 00007f118944d820 R09: 0000000000000000 [ 1179.154510] R10: 0000000048000000 R11: 0000000000000246 R12: 0000000000000000 [ 1179.161776] R13: 0000000020000240 R14: 0000000048000000 R15: 0000000000000000 2018/05/26 13:24:20 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty=0x18, [0x0, 0x0, 0x0, 0x0, 0x0, 0xf4080b0000000000]}, 0x10) 2018/05/26 13:24:20 executing program 7 (fault-call:9 fault-nth:45): r0 = getpid() sched_setattr(r0, &(0x7f00000000c0), 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}}) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) syz_fuse_mount(&(0x7f0000000240)='./control\x00', 0x406000, 0x0, 0x0, 0x0, 0x48000000) close(r1) 2018/05/26 13:24:20 executing program 6: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500000000000000]}, 0x2c) 2018/05/26 13:24:20 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0xb00000000000000, 0x0, 0x0, 0x0, 0xc00]}, 0x2c) 2018/05/26 13:24:20 executing program 4: r0 = getpid() sched_setattr(r0, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x0, 0x4}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000f86000)='./control/file0\x00') syz_fuse_mount(&(0x7f0000000240)='./control\x00', 0x406000, 0x0, 0x0, 0x0, 0x0) syz_fuseblk_mount(&(0x7f0000000140)='./control\x00', &(0x7f0000000180)='./control/file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) close(r1) 2018/05/26 13:24:20 executing program 2: r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x0, 0x4}, 0x0) mkdir(&(0x7f0000000200)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000f86000)='./control/file0\x00') rmdir(&(0x7f00000000c0)='./control\x00') syz_fuse_mount(&(0x7f0000000240)='./control\x00', 0x406000, 0x0, 0x0, 0x0, 0x0) r3 = syz_fuseblk_mount(&(0x7f0000000140)='./control\x00', &(0x7f0000000180)='./control/file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000080)={0x0, 0x6, 0xc02, 0x7365}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000280)={r4, @in6={{0xa, 0x4e20, 0x7, @loopback={0x0, 0x1}, 0x4}}, 0x5, 0x8}, &(0x7f00000001c0)=0x90) close(r1) tee(r3, r2, 0x3, 0x8) 2018/05/26 13:24:20 executing program 1: r0 = socket$inet(0x2, 0x5, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vcan0\x00', 0x10) sendmsg(r0, &(0x7f0000000480)={&(0x7f0000000140)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000380)="f0", 0x1}], 0x1}, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000a00)={@multicast1=0xe0000001, @local={0xac, 0x14, 0x14, 0xaa}}, 0xc) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000040)="84", 0xaa}], 0x1, &(0x7f0000000540)}, 0x0) 2018/05/26 13:24:20 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)="766574683100000000ffffffffffef00", 0x22b) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x18]}, 0x10) [ 1179.954566] FAULT_INJECTION: forcing a failure. [ 1179.954566] name failslab, interval 1, probability 0, space 0, times 0 [ 1179.965902] CPU: 0 PID: 3022 Comm: syz-executor7 Not tainted 4.17.0-rc6+ #68 [ 1179.973098] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1179.982456] Call Trace: [ 1179.985056] dump_stack+0x1b9/0x294 [ 1179.988706] ? dump_stack_print_info.cold.2+0x52/0x52 [ 1179.993918] should_fail.cold.4+0xa/0x1a [ 1179.997992] ? fault_create_debugfs_attr+0x1f0/0x1f0 2018/05/26 13:24:20 executing program 6: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00300]}, 0x2c) [ 1180.003108] ? fuse_mount+0x2c/0x40 [ 1180.006740] ? mount_fs+0xae/0x328 [ 1180.010285] ? vfs_kern_mount.part.34+0xd4/0x4d0 [ 1180.015049] ? do_mount+0x564/0x3070 [ 1180.018765] ? ksys_mount+0x12d/0x140 [ 1180.022567] ? __x64_sys_mount+0xbe/0x150 [ 1180.026718] ? do_syscall_64+0x1b1/0x800 [ 1180.030788] ? graph_lock+0x170/0x170 [ 1180.034603] ? find_held_lock+0x36/0x1c0 [ 1180.038678] ? find_held_lock+0x36/0x1c0 [ 1180.042754] ? __lock_is_held+0xb5/0x140 [ 1180.046833] ? check_same_owner+0x320/0x320 2018/05/26 13:24:20 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)="766574683100000000ffffffffffef00", 0x22b) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4002000000000000]}, 0x10) 2018/05/26 13:24:20 executing program 6: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000]}, 0x2c) [ 1180.051168] ? rcu_note_context_switch+0x710/0x710 [ 1180.056108] ? kasan_check_read+0x11/0x20 [ 1180.060272] __should_failslab+0x124/0x180 [ 1180.064519] should_failslab+0x9/0x14 [ 1180.068326] kmem_cache_alloc_node_trace+0x26f/0x770 [ 1180.073437] ? _raw_spin_unlock+0x22/0x30 [ 1180.077595] bdi_alloc_node+0x67/0xe0 [ 1180.081405] super_setup_bdi_name+0x8b/0x220 [ 1180.085821] ? kill_block_super+0x100/0x100 [ 1180.090151] ? rcu_read_lock_sched_held+0x108/0x120 [ 1180.095180] ? kmem_cache_alloc_trace+0x616/0x780 [ 1180.100049] ? match_wildcard+0x3c0/0x3c0 2018/05/26 13:24:20 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)="766574683100000000ffffffffffef00", 0x22b) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0xfeffffff]}, 0x10) [ 1180.104212] ? trace_hardirqs_on+0xd/0x10 [ 1180.108373] fuse_fill_super+0xe6e/0x1e20 [ 1180.112535] ? fuse_get_root_inode+0x190/0x190 [ 1180.117131] ? __alloc_pages_slowpath+0x2db0/0x2db0 [ 1180.122159] ? kasan_check_read+0x11/0x20 [ 1180.126315] ? cap_capable+0x1f9/0x260 [ 1180.130216] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1180.135754] ? security_capable+0x99/0xc0 [ 1180.139907] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1180.145451] ? ns_capable_common+0x13f/0x170 [ 1180.149868] ? get_anon_bdev+0x2f0/0x2f0 2018/05/26 13:24:20 executing program 6: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe00]}, 0x2c) [ 1180.153942] ? sget+0x113/0x150 [ 1180.157253] ? fuse_get_root_inode+0x190/0x190 [ 1180.161842] mount_nodev+0x6b/0x110 [ 1180.165477] fuse_mount+0x2c/0x40 [ 1180.168939] mount_fs+0xae/0x328 [ 1180.172314] vfs_kern_mount.part.34+0xd4/0x4d0 [ 1180.176906] ? may_umount+0xb0/0xb0 [ 1180.180533] ? _raw_read_unlock+0x22/0x30 [ 1180.184678] ? __get_fs_type+0x97/0xc0 [ 1180.188577] do_mount+0x564/0x3070 [ 1180.192121] ? do_raw_spin_unlock+0x9e/0x2e0 [ 1180.196536] ? copy_mount_string+0x40/0x40 [ 1180.200774] ? rcu_pm_notify+0xc0/0xc0 2018/05/26 13:24:20 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)="766574683100000000ffffffffffef00", 0x22b) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000]}, 0x10) [ 1180.204669] ? copy_mount_options+0x5f/0x380 [ 1180.209082] ? rcu_read_lock_sched_held+0x108/0x120 [ 1180.214127] ? kmem_cache_alloc_trace+0x616/0x780 [ 1180.218984] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1180.224538] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1180.230088] ? copy_mount_options+0x285/0x380 [ 1180.234592] ksys_mount+0x12d/0x140 [ 1180.238225] __x64_sys_mount+0xbe/0x150 [ 1180.242198] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 1180.247215] do_syscall_64+0x1b1/0x800 [ 1180.251112] ? finish_task_switch+0x1ca/0x840 [ 1180.255610] ? syscall_return_slowpath+0x5c0/0x5c0 [ 1180.260544] ? syscall_return_slowpath+0x30f/0x5c0 [ 1180.265483] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 1180.270858] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1180.275709] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1180.280896] RIP: 0033:0x455a09 [ 1180.284088] RSP: 002b:00007f118944d808 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1180.291797] RAX: ffffffffffffffda RBX: 0000000000000016 RCX: 0000000000455a09 [ 1180.299064] RDX: 00000000004c1eb6 RSI: 0000000020000240 RDI: 00000000004de0c5 [ 1180.306343] RBP: 0000000000000000 R08: 00007f118944d820 R09: 0000000000000000 [ 1180.313612] R10: 0000000048000000 R11: 0000000000000246 R12: 0000000000000000 [ 1180.320873] R13: 0000000020000240 R14: 0000000048000000 R15: 0000000000000000 [ 1180.720856] sctp: sctp_transport_update_pmtu: Reported pmtu 72 too low, using default minimum of 512 [ 1180.865197] sctp: sctp_transport_update_pmtu: Reported pmtu 72 too low, using default minimum of 512 2018/05/26 13:24:21 executing program 1: r0 = socket$inet(0x2, 0x5, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vcan0\x00', 0x10) sendmsg(r0, &(0x7f0000000480)={&(0x7f0000000140)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000380)="f0", 0x1}], 0x1}, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000a00)={@multicast1=0xe0000001, @local={0xac, 0x14, 0x14, 0xaa}}, 0xc) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000040)="84", 0x7592da19}], 0x1, &(0x7f0000000540)}, 0x0) 2018/05/26 13:24:21 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty=0x18, [0x0, 0x0, 0x0, 0x0, 0x0, 0x240]}, 0x10) 2018/05/26 13:24:21 executing program 7 (fault-call:9 fault-nth:46): r0 = getpid() sched_setattr(r0, &(0x7f00000000c0), 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}}) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) syz_fuse_mount(&(0x7f0000000240)='./control\x00', 0x406000, 0x0, 0x0, 0x0, 0x48000000) close(r1) 2018/05/26 13:24:21 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x40010000000000, 0x0, 0x0, 0x0, 0xc00]}, 0x2c) 2018/05/26 13:24:21 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)="766574683100000000ffffffffffef00", 0x22b) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84482]}, 0x10) 2018/05/26 13:24:21 executing program 2: r0 = getpid() sched_setattr(r0, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x0, 0x4}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000f86000)='./control/file0\x00') rmdir(&(0x7f00000000c0)='./control\x00') syz_fuse_mount(&(0x7f0000000240)='./control\x00', 0x406000, 0x0, 0x0, 0x0, 0x0) syz_fuseblk_mount(&(0x7f0000000140)='./control\x00', &(0x7f0000000180)='./control/file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) close(r1) bind$ipx(r2, &(0x7f0000000080)={0x4, 0x2, 0x0, "76c8af89f4d5"}, 0x10) getitimer(0x2, &(0x7f0000000040)) 2018/05/26 13:24:21 executing program 6: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00]}, 0x2c) 2018/05/26 13:24:21 executing program 4: r0 = getpid() sched_setattr(r0, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x0, 0x4, 0x800000000000}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) syz_open_dev$sndseq(&(0x7f0000000940)='/dev/snd/seq\x00', 0x0, 0x2000) unlink(&(0x7f0000000880)='./control/file0\x00') sendmsg(r2, &(0x7f0000000840)={&(0x7f0000000040)=@l2={0x1f, 0x2, {0x3, 0x101, 0x3, 0x1, 0x7ff, 0xe4db}, 0x1, 0x5a143be6}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000100)="6ec0a9305fa98f943929d6e0944025", 0xf}, {&(0x7f00000001c0)="77a1d500671f4d1ce11da0cbb4452c6e6ff12f1a77e79988437122754b08387efaddc55d261334b29e24a5eda8041d23efb8e1b089ef3c8df05c95cedf4568b94c91fcff3e97192d164614a3ee3e31d3da6a722d8995c088f1874a21e536c6edfc34b4", 0x63}, {&(0x7f0000000280)="3ef854bd8d109ac66e2ec35bfcaf087c3e6054f7a4df20236046dfccddb597c4244c838027418c32abaf2d2a48e0e06cb183917fc3c82389045e37d884199497a68c11fde16a4d83407ab54053ef468b223b2927152ef63b4d61bd74c5c85df9c2f81275fd937bebf07f71d9e4ba148f99c315d7d7c5403a7435764d6168d7b719d4a32fb44c3d094dc36d058d932bdfa68ee9c977ead5d112d14a6f689141115c86f6dfd3bca52f3fa4421a4fe7cf0f83febe0bb1ae557543d510994494852e1729ce5ba8cb35ca6b8937e899226436eca89ce34cece45bf744693a2a8a378499424ca5193fc0041ab36fd1ad3c0f", 0xef}], 0x3, &(0x7f00000003c0)=[{0xc8, 0x109, 0x8, "4b02769682263cbdf6cd4de2a9f9ae3984da213f064d33baa6c2ec38851dd270f613244ee51419cdc876760c4abe6608fba7887c0f49988ad663292b500977559971d7003fbff62c781de306a7057a1f6a4b39c48a5bb6defcd940e8e5bc7d51ed56998b5fee30c23987e8dc407bec31a18697bc4533ba4fc52d9fa78f6fe96e2bc9af413e6944c531c617029ddb2198741428ac361ff94887afc006293cbfbf690804a7cc3ea3cfc1b71fb836c107e048bc789168ea"}, {0x108, 0xff, 0x1, "6419e9fc296348c6b0956dfe0e519154a05e6aded4ffd2f950409eee96f2b06ec66da4eb4a86a99f7c115d6a6505126b8934c618d36c2285ae80e5487e2b10a6aea42e431e5775f5b58c0ef3c7253c32910e69c0c50168f0c22eb1322c3462a07e661981e659cb67d9e1893bf560aff5d5d8d451a6bd240b44eb8f271f558da487baa762c5a01d77cc198f3b4b3003e4048ad4807e1d006804ecdecb671c9effbcb4c9540a9c8aeadaae53eb40acea05a2089d4f84bade670800a1c2ccfd7f3c2e816a7f3ecfed6e2bda3a1e179973aa8faeefecd545f48f3a8ba1395870f82ebc44dcac0b4568190d8969b67500bcf74b32ef7accf7d6"}, {0xf8, 0x113, 0x100000000, "d8f64728f129bbd19d3c2b8c0bf4b2ad11013a0d07ea0aa3745bb3f92c58783f8203b41e37598e625b9c80449aa61333d514fd93744e242fb5d56da3ad9b904d0eb33fdf2addbf898a987af775bd272d022909234a2bcfe3036169d0b7c025938e21a933258d993a6a14cd8504b553c21dc9a6b84c34d8cea4308a3a2c5972179d4cd764cb49064396f103c9b37dbb1db9198af440927345864da79a662bc692764c6be311fe9a1750423dde0509e784facc88c26ff780c4e154d139eab6216b17fb31eab1c766a9bd7386fb4c7719f456a1f818bf355190b7887074ea4fa41c65f228"}, {0x28, 0x10d, 0x1ff, "fabba9e48550ffca06bba4cb9948563a63b1b454dfb326"}, {0x90, 0x10f, 0x9, "a80696efb7601229fd66ec6dca753878dfd8183cabe30ca217888360304c51c0c631c3ba4773194dcb63a12711d949e2f48c33b6c936560478714dff0b97611296a4297caa7c0923d15c8fde115fb950904bf0b9b9b82add3595b50a2f219ff993611bfa74c47c302d1b8394f2a9a09e48c76822c9aa9f3ed3b7"}, {0xf8, 0xe4376af27cd3b208, 0x2, "b192846ea797b16de1c1d9752f0e40814e853b6bc38038a9d0eb8c94df3c2d11c330c74bb3e2bc441f8bceddc63461a3f83376249149a711bf08c8293c0676d641ef86ff4a170eb5f3dade947318c5324f709cc0bb6d75ffbfcf233a655a2ce8150c6edd42a36572826b055733ce60ff52b647688fd13c50f489e86c92bbe8b3c853acb343881a4b348984499574c2c9f27f2ac271117c1bba620dbdd46853c84d1d641310b740a50cf85c062e4bd144b12a8e4e885bec5a005416dacb7249a94d581b5986f6248a367a3908ddcd1aa5654ea660fce89bd3c30ccb52ca59f8a4c45c9e39"}], 0x478, 0x40080c4}, 0x4000) syz_fuse_mount(&(0x7f0000000240)='./control\x00', 0x406000, 0x0, 0x0, 0x0, 0x0) syz_fuseblk_mount(&(0x7f0000000140)='./control\x00', &(0x7f0000000180)='./control/file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xf, r0, 0x4, &(0x7f00000008c0)="32899cd59337f9cf637aad3e1262bbaafe9adc1938e77197e2a997847e81967bc6d7a6afcb750183d6a51500a0d2c0dc8585770214ca8b711094f81f685858a594f7ea6756d3a0c552466fa5486c2b83") close(r1) 2018/05/26 13:24:21 executing program 6: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1800]}, 0x2c) [ 1181.037338] FAULT_INJECTION: forcing a failure. [ 1181.037338] name failslab, interval 1, probability 0, space 0, times 0 [ 1181.048684] CPU: 0 PID: 3074 Comm: syz-executor7 Not tainted 4.17.0-rc6+ #68 [ 1181.055882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1181.065235] Call Trace: [ 1181.067832] dump_stack+0x1b9/0x294 [ 1181.071471] ? dump_stack_print_info.cold.2+0x52/0x52 [ 1181.075796] net_ratelimit: 11 callbacks suppressed [ 1181.075801] TCP: out of memory -- consider tuning tcp_mem 2018/05/26 13:24:21 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)="766574683100000000ffffffffffef00", 0x22b) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7244080000000000]}, 0x10) [ 1181.076680] should_fail.cold.4+0xa/0x1a [ 1181.076701] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1181.076724] ? graph_lock+0x170/0x170 [ 1181.076740] ? _raw_spin_unlock_irqrestore+0x74/0xc0 [ 1181.076758] ? find_held_lock+0x36/0x1c0 [ 1181.109262] ? __lock_is_held+0xb5/0x140 [ 1181.113332] ? br_multicast_add_port+0x140/0x2a0 [ 1181.118110] ? check_same_owner+0x320/0x320 [ 1181.122446] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1181.127996] ? rcu_note_context_switch+0x710/0x710 [ 1181.132948] __should_failslab+0x124/0x180 2018/05/26 13:24:21 executing program 6: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000]}, 0x2c) [ 1181.137190] should_failslab+0x9/0x14 [ 1181.140997] kmem_cache_alloc_trace+0x2cb/0x780 [ 1181.145691] ? __raw_spin_lock_init+0x1c/0x100 [ 1181.150282] device_create_groups_vargs+0xa7/0x270 [ 1181.155221] device_create_vargs+0x46/0x60 [ 1181.159463] bdi_register_va.part.10+0xbb/0x9b0 [ 1181.164141] ? cgwb_kill+0x630/0x630 [ 1181.165055] TCP: out of memory -- consider tuning tcp_mem [ 1181.167858] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1181.167872] ? bdi_init+0x416/0x510 [ 1181.167886] ? wb_init+0x9e0/0x9e0 2018/05/26 13:24:21 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)="766574683100000000ffffffffffef00", 0x22b) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x142800]}, 0x10) [ 1181.167902] ? bdi_alloc_node+0x67/0xe0 [ 1181.167916] ? bdi_alloc_node+0x67/0xe0 [ 1181.167930] ? rcu_read_lock_sched_held+0x108/0x120 [ 1181.167948] ? kmem_cache_alloc_node_trace+0x34e/0x770 [ 1181.185781] TCP: out of memory -- consider tuning tcp_mem [ 1181.186140] ? _raw_spin_unlock+0x22/0x30 [ 1181.186158] bdi_register_va+0x68/0x80 [ 1181.217866] super_setup_bdi_name+0x123/0x220 [ 1181.222366] ? kill_block_super+0x100/0x100 [ 1181.226693] ? kmem_cache_alloc_trace+0x616/0x780 [ 1181.231539] ? match_wildcard+0x3c0/0x3c0 2018/05/26 13:24:21 executing program 6: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}, 0x2c) [ 1181.235695] ? trace_hardirqs_on+0xd/0x10 [ 1181.239852] fuse_fill_super+0xe6e/0x1e20 [ 1181.244013] ? fuse_get_root_inode+0x190/0x190 [ 1181.248603] ? __alloc_pages_slowpath+0x2db0/0x2db0 [ 1181.253623] ? kasan_check_read+0x11/0x20 [ 1181.257778] ? cap_capable+0x1f9/0x260 [ 1181.261676] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1181.267217] ? security_capable+0x99/0xc0 [ 1181.271378] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1181.276923] ? ns_capable_common+0x13f/0x170 [ 1181.281340] ? get_anon_bdev+0x2f0/0x2f0 [ 1181.285402] ? sget+0x113/0x150 2018/05/26 13:24:21 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)="766574683100000000ffffffffffef00", 0x22b) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82440800]}, 0x10) [ 1181.287642] TCP: out of memory -- consider tuning tcp_mem [ 1181.288685] ? fuse_get_root_inode+0x190/0x190 [ 1181.288702] mount_nodev+0x6b/0x110 [ 1181.288719] fuse_mount+0x2c/0x40 [ 1181.288736] mount_fs+0xae/0x328 [ 1181.288757] vfs_kern_mount.part.34+0xd4/0x4d0 [ 1181.288773] ? may_umount+0xb0/0xb0 [ 1181.288786] ? _raw_read_unlock+0x22/0x30 [ 1181.288801] ? __get_fs_type+0x97/0xc0 [ 1181.304505] TCP: out of memory -- consider tuning tcp_mem [ 1181.305951] do_mount+0x564/0x3070 [ 1181.305970] ? do_raw_spin_unlock+0x9e/0x2e0 2018/05/26 13:24:21 executing program 6: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000]}, 0x2c) [ 1181.305993] ? copy_mount_string+0x40/0x40 [ 1181.306010] ? rcu_pm_notify+0xc0/0xc0 [ 1181.306032] ? copy_mount_options+0x5f/0x380 [ 1181.306047] ? rcu_read_lock_sched_held+0x108/0x120 [ 1181.306064] ? kmem_cache_alloc_trace+0x616/0x780 [ 1181.361351] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1181.366904] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1181.372450] ? copy_mount_options+0x285/0x380 [ 1181.376959] ksys_mount+0x12d/0x140 [ 1181.380604] __x64_sys_mount+0xbe/0x150 [ 1181.384584] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 1181.389610] do_syscall_64+0x1b1/0x800 [ 1181.393501] ? finish_task_switch+0x1ca/0x840 [ 1181.398008] ? syscall_return_slowpath+0x5c0/0x5c0 [ 1181.401413] TCP: out of memory -- consider tuning tcp_mem [ 1181.402938] ? syscall_return_slowpath+0x30f/0x5c0 [ 1181.402959] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 1181.402980] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1181.403001] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1181.403011] RIP: 0033:0x455a09 2018/05/26 13:24:21 executing program 7 (fault-call:9 fault-nth:47): r0 = getpid() sched_setattr(r0, &(0x7f00000000c0), 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}}) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) syz_fuse_mount(&(0x7f0000000240)='./control\x00', 0x406000, 0x0, 0x0, 0x0, 0x48000000) close(r1) [ 1181.403018] RSP: 002b:00007f118944d808 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1181.403033] RAX: ffffffffffffffda RBX: 0000000000000016 RCX: 0000000000455a09 [ 1181.403043] RDX: 00000000004c1eb6 RSI: 0000000020000240 RDI: 00000000004de0c5 [ 1181.403050] RBP: 0000000000000000 R08: 00007f118944d820 R09: 0000000000000000 [ 1181.403062] R10: 0000000048000000 R11: 0000000000000246 R12: 0000000000000000 [ 1181.417372] TCP: out of memory -- consider tuning tcp_mem [ 1181.419229] R13: 0000000020000240 R14: 0000000048000000 R15: 0000000000000000 [ 1181.585613] FAULT_INJECTION: forcing a failure. [ 1181.585613] name failslab, interval 1, probability 0, space 0, times 0 [ 1181.597142] CPU: 0 PID: 3110 Comm: syz-executor7 Not tainted 4.17.0-rc6+ #68 [ 1181.604327] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1181.613667] Call Trace: [ 1181.616250] dump_stack+0x1b9/0x294 [ 1181.619863] ? dump_stack_print_info.cold.2+0x52/0x52 [ 1181.625055] should_fail.cold.4+0xa/0x1a [ 1181.629106] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1181.634218] ? graph_lock+0x170/0x170 [ 1181.638016] ? _raw_spin_unlock_irqrestore+0x74/0xc0 [ 1181.643128] ? find_held_lock+0x36/0x1c0 [ 1181.647171] ? __lock_is_held+0xb5/0x140 [ 1181.651223] ? check_same_owner+0x320/0x320 [ 1181.655527] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1181.661051] ? rcu_note_context_switch+0x710/0x710 [ 1181.665971] __should_failslab+0x124/0x180 [ 1181.670188] should_failslab+0x9/0x14 [ 1181.674005] kmem_cache_alloc_trace+0x2cb/0x780 [ 1181.678682] ? __raw_spin_lock_init+0x1c/0x100 [ 1181.683257] device_create_groups_vargs+0xa7/0x270 [ 1181.688176] device_create_vargs+0x46/0x60 [ 1181.692414] bdi_register_va.part.10+0xbb/0x9b0 [ 1181.697074] ? cgwb_kill+0x630/0x630 [ 1181.700776] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1181.706310] ? bdi_init+0x416/0x510 [ 1181.709936] ? wb_init+0x9e0/0x9e0 [ 1181.713474] ? bdi_alloc_node+0x67/0xe0 [ 1181.717429] ? bdi_alloc_node+0x67/0xe0 [ 1181.721386] ? rcu_read_lock_sched_held+0x108/0x120 [ 1181.726386] ? kmem_cache_alloc_node_trace+0x34e/0x770 [ 1181.731649] ? _raw_spin_unlock+0x22/0x30 [ 1181.735780] bdi_register_va+0x68/0x80 [ 1181.739665] super_setup_bdi_name+0x123/0x220 [ 1181.744164] ? kill_block_super+0x100/0x100 [ 1181.748503] ? kmem_cache_alloc_trace+0x616/0x780 [ 1181.753340] ? match_wildcard+0x3c0/0x3c0 [ 1181.757472] ? trace_hardirqs_on+0xd/0x10 [ 1181.761611] fuse_fill_super+0xe6e/0x1e20 [ 1181.765756] ? fuse_get_root_inode+0x190/0x190 [ 1181.770331] ? __alloc_pages_slowpath+0x2db0/0x2db0 [ 1181.775338] ? kasan_check_read+0x11/0x20 [ 1181.779470] ? cap_capable+0x1f9/0x260 [ 1181.783342] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1181.788861] ? security_capable+0x99/0xc0 [ 1181.793000] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1181.798533] ? ns_capable_common+0x13f/0x170 [ 1181.802934] ? get_anon_bdev+0x2f0/0x2f0 [ 1181.806994] ? sget+0x113/0x150 [ 1181.810276] ? fuse_get_root_inode+0x190/0x190 [ 1181.814847] mount_nodev+0x6b/0x110 [ 1181.818456] fuse_mount+0x2c/0x40 [ 1181.821889] mount_fs+0xae/0x328 [ 1181.825237] vfs_kern_mount.part.34+0xd4/0x4d0 [ 1181.829801] ? may_umount+0xb0/0xb0 [ 1181.833415] ? _raw_read_unlock+0x22/0x30 [ 1181.837563] ? __get_fs_type+0x97/0xc0 [ 1181.841452] do_mount+0x564/0x3070 [ 1181.844985] ? do_raw_spin_unlock+0x9e/0x2e0 [ 1181.849383] ? copy_mount_string+0x40/0x40 [ 1181.853602] ? rcu_pm_notify+0xc0/0xc0 [ 1181.857487] ? copy_mount_options+0x5f/0x380 [ 1181.861892] ? rcu_read_lock_sched_held+0x108/0x120 [ 1181.866904] ? kmem_cache_alloc_trace+0x616/0x780 [ 1181.871743] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1181.877291] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1181.882826] ? copy_mount_options+0x285/0x380 [ 1181.887309] ksys_mount+0x12d/0x140 [ 1181.890931] __x64_sys_mount+0xbe/0x150 [ 1181.894903] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 1181.899915] do_syscall_64+0x1b1/0x800 [ 1181.903789] ? finish_task_switch+0x1ca/0x840 [ 1181.908269] ? syscall_return_slowpath+0x5c0/0x5c0 [ 1181.913182] ? syscall_return_slowpath+0x30f/0x5c0 [ 1181.918108] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 1181.923458] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1181.928285] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1181.933452] RIP: 0033:0x455a09 [ 1181.936630] RSP: 002b:00007f118944d808 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1181.944334] RAX: ffffffffffffffda RBX: 0000000000000016 RCX: 0000000000455a09 [ 1181.951594] RDX: 00000000004c1eb6 RSI: 0000000020000240 RDI: 00000000004de0c5 [ 1181.958842] RBP: 0000000000000000 R08: 00007f118944d820 R09: 0000000000000000 [ 1181.966090] R10: 0000000048000000 R11: 0000000000000246 R12: 0000000000000000 [ 1181.973346] R13: 0000000020000240 R14: 0000000048000000 R15: 0000000000000000 2018/05/26 13:24:22 executing program 7 (fault-call:9 fault-nth:48): r0 = getpid() sched_setattr(r0, &(0x7f00000000c0), 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}}) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) syz_fuse_mount(&(0x7f0000000240)='./control\x00', 0x406000, 0x0, 0x0, 0x0, 0x48000000) close(r1) 2018/05/26 13:24:22 executing program 4: r0 = getpid() sched_setattr(r0, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x0, 0x4}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000f86000)='./control/file0\x00') r3 = syz_fuse_mount(&(0x7f0000000240)='./control\x00', 0x406000, 0x0, 0x0, 0x0, 0x0) syz_fuseblk_mount(&(0x7f0000000140)='./control\x00', &(0x7f0000000180)='./control/file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) close(r1) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000040)={0x0, 0x7}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r3, 0x84, 0x23, &(0x7f0000000100)={r4, 0x7}, 0x8) 2018/05/26 13:24:22 executing program 1: r0 = socket$inet(0x2, 0x5, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vcan0\x00', 0x10) sendmsg(r0, &(0x7f0000000480)={&(0x7f0000000140)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000380)="f0", 0x1}], 0x1}, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000a00)={@multicast1=0xe0000001, @local={0xac, 0x14, 0x14, 0xaa}}, 0xc) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000040)="84", 0x1}], 0xff50, &(0x7f0000000540)}, 0x0) 2018/05/26 13:24:22 executing program 2: r0 = getpid() socketpair$inet6_sctp(0xa, 0x5, 0x84, &(0x7f0000000000)={0xffffffffffffffff}) flistxattr(r1, &(0x7f0000000280)=""/233, 0xe9) sched_setattr(r0, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x0, 0x4}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = creat(&(0x7f0000000040)='./control/file0\x00', 0x1) write$sndseq(r3, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {0x0, 0x6}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000f86000)='./control/file0\x00') rmdir(&(0x7f00000000c0)='./control\x00') syz_fuse_mount(&(0x7f0000000240)='./control\x00', 0x10000406000, 0x0, 0x0, 0x0, 0x2010) syz_fuseblk_mount(&(0x7f0000000140)='./control\x00', &(0x7f0000000180)='./control/file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) close(r2) 2018/05/26 13:24:22 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty=0x18, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000]}, 0x10) 2018/05/26 13:24:22 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)="766574683100000000ffffffffffef00", 0x22b) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c440800]}, 0x10) 2018/05/26 13:24:22 executing program 6: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000]}, 0x2c) 2018/05/26 13:24:22 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x700000000000000, 0x0, 0x0, 0x0, 0xc00]}, 0x2c) [ 1182.140143] FAULT_INJECTION: forcing a failure. [ 1182.140143] name failslab, interval 1, probability 0, space 0, times 0 [ 1182.151524] CPU: 1 PID: 3127 Comm: syz-executor7 Not tainted 4.17.0-rc6+ #68 [ 1182.158719] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1182.168070] Call Trace: [ 1182.170672] dump_stack+0x1b9/0x294 [ 1182.174314] ? dump_stack_print_info.cold.2+0x52/0x52 [ 1182.179522] should_fail.cold.4+0xa/0x1a [ 1182.183598] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1182.188713] ? graph_lock+0x170/0x170 [ 1182.192558] ? find_held_lock+0x36/0x1c0 [ 1182.196628] ? __lock_is_held+0xb5/0x140 [ 1182.200703] ? check_same_owner+0x320/0x320 [ 1182.205034] ? rcu_note_context_switch+0x710/0x710 [ 1182.209974] ? check_same_owner+0x320/0x320 [ 1182.214307] __should_failslab+0x124/0x180 [ 1182.218551] should_failslab+0x9/0x14 [ 1182.222362] __kmalloc_track_caller+0x2c4/0x760 [ 1182.227046] ? debug_check_no_locks_freed+0x310/0x310 [ 1182.232241] ? kasan_check_write+0x14/0x20 [ 1182.236480] ? __mutex_lock+0x7d9/0x17f0 [ 1182.240551] ? kstrdup_const+0x66/0x80 [ 1182.244455] kstrdup+0x39/0x70 [ 1182.247662] kstrdup_const+0x66/0x80 [ 1182.251936] __kernfs_new_node+0xa8/0x580 [ 1182.256092] ? kernfs_dop_revalidate+0x3c0/0x3c0 [ 1182.260864] ? lock_downgrade+0x8e0/0x8e0 [ 1182.265028] kernfs_new_node+0x80/0xf0 [ 1182.268926] kernfs_create_dir_ns+0x3d/0x140 [ 1182.273344] sysfs_create_dir_ns+0xbe/0x1d0 [ 1182.277679] kobject_add_internal+0x354/0xac0 [ 1182.282186] ? kobj_ns_type_registered+0x60/0x60 [ 1182.286952] ? lock_downgrade+0x8e0/0x8e0 2018/05/26 13:24:22 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty=0x18, [0x0, 0x0, 0x0, 0x0, 0x0, 0xf401]}, 0x10) 2018/05/26 13:24:22 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)="766574683100000000ffffffffffef00", 0x22b) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe]}, 0x10) 2018/05/26 13:24:22 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty=0x18, [0x0, 0x0, 0x0, 0x0, 0x0, 0x281400]}, 0x10) 2018/05/26 13:24:22 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty=0x18, [0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}, 0x10) [ 1182.291112] ? refcount_add_not_zero+0x320/0x320 [ 1182.295879] ? kasan_check_read+0x11/0x20 [ 1182.300037] kobject_add+0x13a/0x190 [ 1182.301947] TCP: out of memory -- consider tuning tcp_mem [ 1182.303754] ? kset_create_and_add+0x190/0x190 [ 1182.303778] ? mutex_unlock+0xd/0x10 [ 1182.303802] device_add+0x3a5/0x16d0 [ 1182.303823] ? device_private_init+0x230/0x230 [ 1182.303835] ? kfree+0x1e9/0x260 [ 1182.303853] ? kfree_const+0x5e/0x70 [ 1182.320314] TCP: out of memory -- consider tuning tcp_mem [ 1182.321342] device_create_groups_vargs+0x1ff/0x270 [ 1182.321362] device_create_vargs+0x46/0x60 [ 1182.321382] bdi_register_va.part.10+0xbb/0x9b0 [ 1182.321398] ? cgwb_kill+0x630/0x630 [ 1182.321418] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1182.321433] ? bdi_init+0x416/0x510 [ 1182.365268] ? wb_init+0x9e0/0x9e0 [ 1182.368820] ? bdi_alloc_node+0x67/0xe0 [ 1182.372799] ? bdi_alloc_node+0x67/0xe0 [ 1182.376786] ? rcu_read_lock_sched_held+0x108/0x120 [ 1182.381812] ? kmem_cache_alloc_node_trace+0x34e/0x770 [ 1182.387098] ? _raw_spin_unlock+0x22/0x30 [ 1182.391256] bdi_register_va+0x68/0x80 [ 1182.395152] super_setup_bdi_name+0x123/0x220 [ 1182.399652] ? kill_block_super+0x100/0x100 [ 1182.403979] ? kmem_cache_alloc_trace+0x616/0x780 [ 1182.408825] ? match_wildcard+0x3c0/0x3c0 [ 1182.412980] ? trace_hardirqs_on+0xd/0x10 [ 1182.417138] fuse_fill_super+0xe6e/0x1e20 [ 1182.421299] ? fuse_get_root_inode+0x190/0x190 [ 1182.425886] ? __alloc_pages_slowpath+0x2db0/0x2db0 [ 1182.430910] ? kasan_check_read+0x11/0x20 [ 1182.435065] ? cap_capable+0x1f9/0x260 [ 1182.438958] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1182.444495] ? security_capable+0x99/0xc0 [ 1182.448651] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1182.454227] ? ns_capable_common+0x13f/0x170 [ 1182.458643] ? get_anon_bdev+0x2f0/0x2f0 [ 1182.462711] ? sget+0x113/0x150 [ 1182.466001] ? fuse_get_root_inode+0x190/0x190 [ 1182.470586] mount_nodev+0x6b/0x110 [ 1182.474217] fuse_mount+0x2c/0x40 [ 1182.477675] mount_fs+0xae/0x328 [ 1182.481051] vfs_kern_mount.part.34+0xd4/0x4d0 [ 1182.485641] ? may_umount+0xb0/0xb0 [ 1182.489270] ? _raw_read_unlock+0x22/0x30 [ 1182.493424] ? __get_fs_type+0x97/0xc0 [ 1182.497320] do_mount+0x564/0x3070 [ 1182.500866] ? copy_mount_string+0x40/0x40 [ 1182.505115] ? rcu_pm_notify+0xc0/0xc0 [ 1182.509012] ? copy_mount_options+0x5f/0x380 [ 1182.513427] ? rcu_read_lock_sched_held+0x108/0x120 [ 1182.518449] ? kmem_cache_alloc_trace+0x616/0x780 [ 1182.523303] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1182.528850] ? _copy_from_user+0xdf/0x150 [ 1182.533008] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1182.538547] ? copy_mount_options+0x285/0x380 [ 1182.543048] ksys_mount+0x12d/0x140 [ 1182.546680] __x64_sys_mount+0xbe/0x150 [ 1182.550656] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 1182.555675] do_syscall_64+0x1b1/0x800 [ 1182.559567] ? finish_task_switch+0x1ca/0x840 [ 1182.564071] ? syscall_return_slowpath+0x5c0/0x5c0 [ 1182.569006] ? syscall_return_slowpath+0x30f/0x5c0 [ 1182.573943] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 1182.579316] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1182.584160] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1182.589333] RIP: 0033:0x455a09 [ 1182.592504] RSP: 002b:00007f118944d808 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1182.600201] RAX: ffffffffffffffda RBX: 0000000000000016 RCX: 0000000000455a09 [ 1182.607466] RDX: 00000000004c1eb6 RSI: 0000000020000240 RDI: 00000000004de0c5 [ 1182.614729] RBP: 0000000000000000 R08: 00007f118944d820 R09: 0000000000000000 [ 1182.621981] R10: 0000000048000000 R11: 0000000000000246 R12: 0000000000000000 [ 1182.629238] R13: 0000000020000240 R14: 0000000048000000 R15: 0000000000000000 2018/05/26 13:24:22 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)="766574683100000000ffffffffffef00", 0x22b) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14280000000000]}, 0x10) 2018/05/26 13:24:22 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0xe0, 0x0, 0x0, 0x0, 0xc00]}, 0x2c) 2018/05/26 13:24:22 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty=0x18, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000]}, 0x10) 2018/05/26 13:24:22 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)="766574683100000000ffffffffffef00", 0x22b) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8244080000000000]}, 0x10) [ 1182.637167] kobject_add_internal failed for 0:44 (error: -12 parent: bdi) 2018/05/26 13:24:23 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)="766574683100000000ffffffffffef00", 0x22b) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8055000000000000]}, 0x10) 2018/05/26 13:24:23 executing program 7 (fault-call:9 fault-nth:49): r0 = getpid() sched_setattr(r0, &(0x7f00000000c0), 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}}) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) syz_fuse_mount(&(0x7f0000000240)='./control\x00', 0x406000, 0x0, 0x0, 0x0, 0x48000000) close(r1) 2018/05/26 13:24:23 executing program 6: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf00]}, 0x2c) 2018/05/26 13:24:23 executing program 4: r0 = getpid() sched_setattr(r0, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x0, 0x4}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0xd}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000f86000)='./control/file0\x00') syz_fuse_mount(&(0x7f0000000240)='./control\x00', 0x406000, 0x0, 0x0, 0x0, 0x0) syz_fuseblk_mount(&(0x7f0000000140)='./control\x00', &(0x7f0000000180)='./control/file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) close(r1) 2018/05/26 13:24:23 executing program 1: r0 = socket$inet(0x2, 0x5, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vcan0\x00', 0x10) sendmsg(r0, &(0x7f0000000480)={&(0x7f0000000140)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000380)="f0", 0x1}], 0x1}, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000a00)={@multicast1=0xe0000001, @local={0xac, 0x14, 0x14, 0xaa}}, 0xc) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000040)="84", 0x1}], 0x5, &(0x7f0000000540)}, 0x0) 2018/05/26 13:24:23 executing program 2: r0 = getpid() sched_setattr(r0, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x0, 0x4}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x101040, 0x0) execveat(r1, &(0x7f0000000080)='./control/file1\x00', &(0x7f0000000380)=[&(0x7f0000000100)='securitybdev%vmnet1-\'vmnet1vmnet1\x00', &(0x7f00000001c0)="b700", &(0x7f0000000200)='wlan0\x00', &(0x7f0000000280)='*\x00', &(0x7f00000002c0)=':trustedmd5sum\x00', &(0x7f0000000340)='wlan0,-\\\x00'], &(0x7f0000000540)=[&(0x7f00000003c0)='{+\x00', &(0x7f0000000400)='bdevtrusted,+\x00', &(0x7f0000000440)='\x00', &(0x7f0000000480)='posix_acl_access\x00', &(0x7f00000004c0)='posix_acl_access\x00', &(0x7f0000000500)="407d5d7b76626f786e6574307dcb73656375726974792500"], 0x100) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r3, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000000300)='./control/file0\x00') rmdir(&(0x7f00000000c0)='./control\x00') syz_fuse_mount(&(0x7f0000000240)='./control\x00', 0x406000, 0x0, 0x0, 0x0, 0x0) syz_fuseblk_mount(&(0x7f0000000140)='./control\x00', &(0x7f0000000180)='./control/file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) close(r2) 2018/05/26 13:24:23 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0xc00]}, 0x2c) 2018/05/26 13:24:23 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty=0x18, [0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000]}, 0x10) [ 1183.261420] FAULT_INJECTION: forcing a failure. [ 1183.261420] name failslab, interval 1, probability 0, space 0, times 0 [ 1183.272852] CPU: 0 PID: 3197 Comm: syz-executor7 Not tainted 4.17.0-rc6+ #68 [ 1183.280045] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1183.289402] Call Trace: [ 1183.292004] dump_stack+0x1b9/0x294 [ 1183.295646] ? dump_stack_print_info.cold.2+0x52/0x52 [ 1183.300847] ? is_bpf_text_address+0xd7/0x170 [ 1183.305352] ? kernel_text_address+0x79/0xf0 [ 1183.309772] should_fail.cold.4+0xa/0x1a [ 1183.313840] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1183.316877] TCP: out of memory -- consider tuning tcp_mem [ 1183.318953] ? graph_lock+0x170/0x170 [ 1183.318970] ? save_stack+0xa9/0xd0 [ 1183.318988] ? save_stack+0x43/0xd0 [ 1183.319003] ? kasan_kmalloc+0xc4/0xe0 [ 1183.319020] ? find_held_lock+0x36/0x1c0 [ 1183.343487] ? __lock_is_held+0xb5/0x140 [ 1183.347576] ? check_same_owner+0x320/0x320 [ 1183.351913] ? rcu_note_context_switch+0x710/0x710 [ 1183.356861] __should_failslab+0x124/0x180 2018/05/26 13:24:23 executing program 6: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24]}, 0x2c) 2018/05/26 13:24:23 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x2400, 0x0, 0x0, 0x0, 0xc00]}, 0x2c) 2018/05/26 13:24:23 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)="766574683100000000ffffffffffef00", 0x22b) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18000000]}, 0x10) 2018/05/26 13:24:23 executing program 4: r0 = getpid() sched_setattr(r0, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x0, 0x4}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$TUNGETIFF(r1, 0x800454d2, &(0x7f0000000100)) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) r2 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0xe7, 0x101200) ioctl$TIOCSPGRP(r2, 0x5410, &(0x7f00000001c0)=r0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r3, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000f86000)='./control/file0\x00') syz_fuse_mount(&(0x7f0000000240)='./control\x00', 0x406000, 0x0, 0x0, 0x0, 0x0) syz_fuseblk_mount(&(0x7f0000000140)='./control\x00', &(0x7f0000000180)='./control/file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) close(r1) 2018/05/26 13:24:23 executing program 6: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x36000]}, 0x2c) [ 1183.361107] should_failslab+0x9/0x14 [ 1183.364919] kmem_cache_alloc_trace+0x2cb/0x780 [ 1183.369602] ? refcount_add_not_zero+0x320/0x320 [ 1183.374370] device_private_init+0x98/0x230 [ 1183.378700] ? virtual_device_parent+0x60/0x60 [ 1183.383298] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1183.388843] ? refcount_inc+0x29/0x70 [ 1183.392650] device_add+0xe98/0x16d0 [ 1183.396375] ? device_private_init+0x230/0x230 [ 1183.400953] ? kfree+0x1e9/0x260 [ 1183.404322] ? kfree_const+0x5e/0x70 [ 1183.408042] device_create_groups_vargs+0x1ff/0x270 [ 1183.413066] device_create_vargs+0x46/0x60 [ 1183.417309] bdi_register_va.part.10+0xbb/0x9b0 [ 1183.422436] ? cgwb_kill+0x630/0x630 [ 1183.426159] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1183.431700] ? bdi_init+0x416/0x510 [ 1183.435331] ? wb_init+0x9e0/0x9e0 [ 1183.438877] ? bdi_alloc_node+0x67/0xe0 [ 1183.442862] ? bdi_alloc_node+0x67/0xe0 [ 1183.446850] ? rcu_read_lock_sched_held+0x108/0x120 [ 1183.451873] ? kmem_cache_alloc_node_trace+0x34e/0x770 [ 1183.457150] ? _raw_spin_unlock+0x22/0x30 2018/05/26 13:24:23 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)="766574683100000000ffffffffffef00", 0x22b) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x78440800]}, 0x10) [ 1183.461307] bdi_register_va+0x68/0x80 [ 1183.465204] super_setup_bdi_name+0x123/0x220 [ 1183.469705] ? kill_block_super+0x100/0x100 [ 1183.474036] ? kmem_cache_alloc_trace+0x616/0x780 [ 1183.478881] ? match_wildcard+0x3c0/0x3c0 [ 1183.483034] ? trace_hardirqs_on+0xd/0x10 [ 1183.487192] fuse_fill_super+0xe6e/0x1e20 [ 1183.491343] ? fuse_get_root_inode+0x190/0x190 [ 1183.495927] ? __alloc_pages_slowpath+0x2db0/0x2db0 [ 1183.500952] ? kasan_check_read+0x11/0x20 [ 1183.505107] ? cap_capable+0x1f9/0x260 2018/05/26 13:24:23 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0xc00]}, 0x2c) [ 1183.509012] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1183.514554] ? security_capable+0x99/0xc0 [ 1183.518713] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1183.524258] ? ns_capable_common+0x13f/0x170 [ 1183.528677] ? get_anon_bdev+0x2f0/0x2f0 [ 1183.532746] ? sget+0x113/0x150 [ 1183.536034] ? fuse_get_root_inode+0x190/0x190 [ 1183.540629] mount_nodev+0x6b/0x110 [ 1183.544267] fuse_mount+0x2c/0x40 [ 1183.547729] mount_fs+0xae/0x328 [ 1183.551114] vfs_kern_mount.part.34+0xd4/0x4d0 [ 1183.555710] ? may_umount+0xb0/0xb0 2018/05/26 13:24:23 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)="766574683100000000ffffffffffef00", 0x22b) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00]}, 0x10) [ 1183.559344] ? _raw_read_unlock+0x22/0x30 [ 1183.563496] ? __get_fs_type+0x97/0xc0 [ 1183.567397] do_mount+0x564/0x3070 [ 1183.570951] ? do_raw_spin_unlock+0x9e/0x2e0 [ 1183.575373] ? copy_mount_string+0x40/0x40 [ 1183.579611] ? rcu_pm_notify+0xc0/0xc0 [ 1183.583514] ? copy_mount_options+0x5f/0x380 [ 1183.587930] ? rcu_read_lock_sched_held+0x108/0x120 [ 1183.592955] ? kmem_cache_alloc_trace+0x616/0x780 [ 1183.597812] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1183.603368] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 2018/05/26 13:24:23 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0xc00]}, 0x2c) [ 1183.608913] ? copy_mount_options+0x285/0x380 [ 1183.613414] ksys_mount+0x12d/0x140 [ 1183.617044] __x64_sys_mount+0xbe/0x150 [ 1183.621027] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 1183.626049] do_syscall_64+0x1b1/0x800 [ 1183.629942] ? finish_task_switch+0x1ca/0x840 [ 1183.634440] ? syscall_return_slowpath+0x5c0/0x5c0 [ 1183.639374] ? syscall_return_slowpath+0x30f/0x5c0 [ 1183.644311] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 1183.649690] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1183.654544] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1183.659731] RIP: 0033:0x455a09 [ 1183.662917] RSP: 002b:00007f118944d808 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1183.670626] RAX: ffffffffffffffda RBX: 0000000000000016 RCX: 0000000000455a09 [ 1183.677895] RDX: 00000000004c1eb6 RSI: 0000000020000240 RDI: 00000000004de0c5 [ 1183.685168] RBP: 0000000000000000 R08: 00007f118944d820 R09: 0000000000000000 [ 1183.692441] R10: 0000000048000000 R11: 0000000000000246 R12: 0000000000000000 [ 1183.699715] R13: 0000000020000240 R14: 0000000048000000 R15: 0000000000000000 [ 1184.042388] sctp: sctp_transport_update_pmtu: Reported pmtu 72 too low, using default minimum of 512 [ 1184.186553] sctp: sctp_transport_update_pmtu: Reported pmtu 72 too low, using default minimum of 512 2018/05/26 13:24:24 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)="766574683100000000ffffffffffef00", 0x22b) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00]}, 0x10) 2018/05/26 13:24:24 executing program 7 (fault-call:9 fault-nth:50): r0 = getpid() sched_setattr(r0, &(0x7f00000000c0), 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}}) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) syz_fuse_mount(&(0x7f0000000240)='./control\x00', 0x406000, 0x0, 0x0, 0x0, 0x48000000) close(r1) 2018/05/26 13:24:24 executing program 6: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60030000000000]}, 0x2c) 2018/05/26 13:24:24 executing program 2: r0 = getpid() sched_setattr(r0, &(0x7f0000000280)={0xffffffffffffffff, 0x2, 0x0, 0x0, 0xebd0}, 0x0) syslog(0x1, &(0x7f00000001c0)=""/92, 0x5c) mkdir(&(0x7f000082f000)='./control\x00', 0x0) r1 = syz_fuse_mount(&(0x7f00000002c0)='./control\x00', 0xe001, 0xffffffffffffffff, 0xffffffffffffffff, 0x8, 0x10) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, r1, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r3, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000f86000)='./control/file0\x00') ioctl$TIOCSPGRP(r3, 0x5410, &(0x7f0000000040)=r0) rmdir(&(0x7f00000000c0)='./control\x00') write$tun(r3, &(0x7f00000004c0)={@void, @void, @arp=@ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x0, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @empty, @empty, @broadcast=0xffffffff}}, 0x1c) fstat(r1, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000400)='./control/file1\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuseblk_mount(&(0x7f0000000300)='./control/file1\x00', &(0x7f0000000340)='./control/file0\x00', 0x0, r4, r5, 0x6, 0x4, 0x80020) syz_fuse_mount(&(0x7f0000000240)='./control\x00', 0x406000, 0x0, 0x0, 0x0, 0x0) syz_fuseblk_mount(&(0x7f0000000140)='./control\x00', &(0x7f0000000180)='./control/file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f0000000100), 0x4000) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000002680)={'vcan0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000002740)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000001}, 0xc, &(0x7f0000002700)={&(0x7f00000026c0)=@gettclass={0x24, 0x2a, 0x0, 0x70bd2c, 0x25dfdbfd, {0x0, r6, {0xffe8}, {0xfffb, 0xe}, {0xd}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0xdd0395892bada75d}, 0x4000010) close(r2) 2018/05/26 13:24:24 executing program 4: r0 = getpid() sched_setattr(r0, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x0, 0x4}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x800) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$int_out(r1, 0x5460, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {0xffffffffffffffff}, {0x1000000000001}, @note={0x401, 0x3, 0xffff, 0x6, 0x5}}], 0x30) unlink(&(0x7f0000f86000)='./control/file0\x00') openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x200000, 0x0) r3 = getuid() syz_fuse_mount(&(0x7f0000000240)='./control\x00', 0x406000, r3, 0x0, 0x0, 0x0) syz_fuseblk_mount(&(0x7f0000000140)='./control\x00', &(0x7f0000000180)='./control/file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) close(r1) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x2, 0x0) 2018/05/26 13:24:24 executing program 1: r0 = socket$inet(0x2, 0x5, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vcan0\x00', 0x10) sendmsg(r0, &(0x7f0000000480)={&(0x7f0000000140)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000380)="f0", 0x1}], 0x1}, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000a00)={@multicast1=0xe0000001, @local={0xac, 0x14, 0x14, 0xaa}}, 0xc) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000040)="84", 0x1}], 0x68, &(0x7f0000000540)}, 0x0) 2018/05/26 13:24:24 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty=0x18, [0x0, 0x0, 0x0, 0x0, 0x0, 0xa00]}, 0x10) 2018/05/26 13:24:24 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0xc00]}, 0x2c) 2018/05/26 13:24:24 executing program 6: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000]}, 0x2c) [ 1184.410105] FAULT_INJECTION: forcing a failure. [ 1184.410105] name failslab, interval 1, probability 0, space 0, times 0 [ 1184.421470] CPU: 0 PID: 3264 Comm: syz-executor7 Not tainted 4.17.0-rc6+ #68 [ 1184.428656] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1184.438007] Call Trace: [ 1184.440605] dump_stack+0x1b9/0x294 [ 1184.444248] ? dump_stack_print_info.cold.2+0x52/0x52 [ 1184.449443] ? is_bpf_text_address+0xd7/0x170 [ 1184.453946] ? kernel_text_address+0x79/0xf0 2018/05/26 13:24:24 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)="766574683100000000ffffffffffef00", 0x22b) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84488]}, 0x10) [ 1184.458367] should_fail.cold.4+0xa/0x1a [ 1184.462442] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1184.467558] ? graph_lock+0x170/0x170 [ 1184.471365] ? save_stack+0xa9/0xd0 [ 1184.475001] ? save_stack+0x43/0xd0 [ 1184.478632] ? kasan_kmalloc+0xc4/0xe0 [ 1184.482530] ? find_held_lock+0x36/0x1c0 [ 1184.486605] ? __lock_is_held+0xb5/0x140 [ 1184.490675] ? f2fs_gc+0x2560/0x44e0 [ 1184.494412] ? check_same_owner+0x320/0x320 [ 1184.498754] ? rcu_note_context_switch+0x710/0x710 [ 1184.503702] __should_failslab+0x124/0x180 [ 1184.507954] should_failslab+0x9/0x14 [ 1184.511779] kmem_cache_alloc_trace+0x2cb/0x780 [ 1184.516467] ? refcount_add_not_zero+0x320/0x320 [ 1184.521229] device_private_init+0x98/0x230 [ 1184.525570] ? virtual_device_parent+0x60/0x60 [ 1184.530166] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1184.535708] ? refcount_inc+0x29/0x70 [ 1184.539523] device_add+0xe98/0x16d0 [ 1184.543251] ? device_private_init+0x230/0x230 [ 1184.547840] ? kfree+0x1e9/0x260 [ 1184.551218] ? kfree_const+0x5e/0x70 [ 1184.554943] device_create_groups_vargs+0x1ff/0x270 2018/05/26 13:24:24 executing program 6: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11000000]}, 0x2c) 2018/05/26 13:24:24 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)="766574683100000000ffffffffffef00", 0x22b) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8a44080000000000]}, 0x10) [ 1184.559968] device_create_vargs+0x46/0x60 [ 1184.564208] bdi_register_va.part.10+0xbb/0x9b0 [ 1184.568888] ? cgwb_kill+0x630/0x630 [ 1184.572615] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1184.578155] ? bdi_init+0x416/0x510 [ 1184.581785] ? wb_init+0x9e0/0x9e0 [ 1184.585332] ? bdi_alloc_node+0x67/0xe0 [ 1184.589311] ? bdi_alloc_node+0x67/0xe0 [ 1184.593289] ? rcu_read_lock_sched_held+0x108/0x120 [ 1184.598309] ? kmem_cache_alloc_node_trace+0x34e/0x770 [ 1184.603591] ? _raw_spin_unlock+0x22/0x30 [ 1184.607774] bdi_register_va+0x68/0x80 [ 1184.611672] super_setup_bdi_name+0x123/0x220 [ 1184.616173] ? kill_block_super+0x100/0x100 [ 1184.620503] ? kmem_cache_alloc_trace+0x616/0x780 [ 1184.625342] ? match_wildcard+0x3c0/0x3c0 [ 1184.629488] ? trace_hardirqs_on+0xd/0x10 [ 1184.633637] fuse_fill_super+0xe6e/0x1e20 [ 1184.637795] ? fuse_get_root_inode+0x190/0x190 [ 1184.642378] ? __alloc_pages_slowpath+0x2db0/0x2db0 [ 1184.647392] ? kasan_check_read+0x11/0x20 [ 1184.651537] ? cap_capable+0x1f9/0x260 [ 1184.655413] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1184.660939] ? security_capable+0x99/0xc0 [ 1184.665086] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1184.670612] ? ns_capable_common+0x13f/0x170 [ 1184.675015] ? get_anon_bdev+0x2f0/0x2f0 [ 1184.679078] ? sget+0x113/0x150 [ 1184.682358] ? fuse_get_root_inode+0x190/0x190 [ 1184.686949] mount_nodev+0x6b/0x110 [ 1184.690564] fuse_mount+0x2c/0x40 [ 1184.694001] mount_fs+0xae/0x328 [ 1184.697364] vfs_kern_mount.part.34+0xd4/0x4d0 [ 1184.701940] ? may_umount+0xb0/0xb0 [ 1184.705559] ? _raw_read_unlock+0x22/0x30 [ 1184.709699] ? __get_fs_type+0x97/0xc0 [ 1184.713582] do_mount+0x564/0x3070 [ 1184.717108] ? do_raw_spin_unlock+0x9e/0x2e0 [ 1184.721513] ? copy_mount_string+0x40/0x40 [ 1184.725737] ? rcu_pm_notify+0xc0/0xc0 [ 1184.729626] ? copy_mount_options+0x5f/0x380 [ 1184.734037] ? rcu_read_lock_sched_held+0x108/0x120 [ 1184.739057] ? kmem_cache_alloc_trace+0x616/0x780 [ 1184.743906] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1184.749453] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1184.754991] ? copy_mount_options+0x285/0x380 [ 1184.759480] ksys_mount+0x12d/0x140 [ 1184.763104] __x64_sys_mount+0xbe/0x150 [ 1184.767076] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 1184.772093] do_syscall_64+0x1b1/0x800 [ 1184.775976] ? finish_task_switch+0x1ca/0x840 [ 1184.780468] ? syscall_return_slowpath+0x5c0/0x5c0 [ 1184.785391] ? syscall_return_slowpath+0x30f/0x5c0 [ 1184.790313] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 1184.795677] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1184.800516] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1184.805703] RIP: 0033:0x455a09 [ 1184.808888] RSP: 002b:00007f118944d808 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1184.816580] RAX: ffffffffffffffda RBX: 0000000000000016 RCX: 0000000000455a09 [ 1184.823830] RDX: 00000000004c1eb6 RSI: 0000000020000240 RDI: 00000000004de0c5 [ 1184.831090] RBP: 0000000000000000 R08: 00007f118944d820 R09: 0000000000000000 [ 1184.838356] R10: 0000000048000000 R11: 0000000000000246 R12: 0000000000000000 [ 1184.845623] R13: 0000000020000240 R14: 0000000048000000 R15: 0000000000000000 2018/05/26 13:24:25 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty=0x18, [0x0, 0x0, 0x0, 0x0, 0x0, 0x34]}, 0x10) 2018/05/26 13:24:25 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)="766574683100000000ffffffffffef00", 0x22b) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7344080000000000]}, 0x10) 2018/05/26 13:24:25 executing program 7 (fault-call:9 fault-nth:51): r0 = getpid() sched_setattr(r0, &(0x7f00000000c0), 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}}) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) syz_fuse_mount(&(0x7f0000000240)='./control\x00', 0x406000, 0x0, 0x0, 0x0, 0x48000000) close(r1) 2018/05/26 13:24:25 executing program 6: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x53030000]}, 0x2c) 2018/05/26 13:24:25 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x500000000000000, 0x0, 0x0, 0x0, 0xc00]}, 0x2c) [ 1184.990869] FAULT_INJECTION: forcing a failure. [ 1184.990869] name failslab, interval 1, probability 0, space 0, times 0 [ 1185.002195] CPU: 0 PID: 3292 Comm: syz-executor7 Not tainted 4.17.0-rc6+ #68 [ 1185.009387] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1185.018740] Call Trace: [ 1185.021343] dump_stack+0x1b9/0x294 [ 1185.024990] ? dump_stack_print_info.cold.2+0x52/0x52 [ 1185.030200] should_fail.cold.4+0xa/0x1a [ 1185.034272] ? fault_create_debugfs_attr+0x1f0/0x1f0 2018/05/26 13:24:25 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)="766574683100000000ffffffffffef00", 0x22b) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b44080000000000]}, 0x10) [ 1185.039380] ? graph_lock+0x170/0x170 [ 1185.043191] ? find_held_lock+0x36/0x1c0 [ 1185.047265] ? __lock_is_held+0xb5/0x140 [ 1185.051348] ? check_same_owner+0x320/0x320 [ 1185.055682] ? rcu_note_context_switch+0x710/0x710 [ 1185.060624] ? check_same_owner+0x320/0x320 [ 1185.064960] __should_failslab+0x124/0x180 [ 1185.069212] should_failslab+0x9/0x14 [ 1185.073022] __kmalloc_track_caller+0x2c4/0x760 [ 1185.077708] ? debug_check_no_locks_freed+0x310/0x310 [ 1185.082911] ? kasan_check_write+0x14/0x20 [ 1185.087163] ? __mutex_lock+0x7d9/0x17f0 2018/05/26 13:24:25 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0xa0000000000000, 0x0, 0x0, 0x0, 0xc00]}, 0x2c) [ 1185.091232] ? kstrdup_const+0x66/0x80 [ 1185.095131] kstrdup+0x39/0x70 [ 1185.098335] kstrdup_const+0x66/0x80 [ 1185.102060] __kernfs_new_node+0xa8/0x580 [ 1185.106218] ? kernfs_dop_revalidate+0x3c0/0x3c0 [ 1185.110994] ? lock_downgrade+0x8e0/0x8e0 [ 1185.115156] kernfs_new_node+0x80/0xf0 [ 1185.119053] kernfs_create_dir_ns+0x3d/0x140 [ 1185.123474] sysfs_create_dir_ns+0xbe/0x1d0 [ 1185.127804] kobject_add_internal+0x354/0xac0 [ 1185.132315] ? kobj_ns_type_registered+0x60/0x60 [ 1185.137082] ? lock_downgrade+0x8e0/0x8e0 [ 1185.141240] ? refcount_add_not_zero+0x320/0x320 [ 1185.146007] ? kasan_check_read+0x11/0x20 [ 1185.150163] kobject_add+0x13a/0x190 [ 1185.153883] ? kset_create_and_add+0x190/0x190 [ 1185.158473] ? mutex_unlock+0xd/0x10 [ 1185.162198] device_add+0x3a5/0x16d0 [ 1185.165924] ? device_private_init+0x230/0x230 [ 1185.170507] ? kfree+0x1e9/0x260 [ 1185.173884] ? kfree_const+0x5e/0x70 [ 1185.177602] device_create_groups_vargs+0x1ff/0x270 [ 1185.182625] device_create_vargs+0x46/0x60 [ 1185.186862] bdi_register_va.part.10+0xbb/0x9b0 [ 1185.191537] ? cgwb_kill+0x630/0x630 [ 1185.195261] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1185.200803] ? bdi_init+0x416/0x510 [ 1185.204434] ? wb_init+0x9e0/0x9e0 [ 1185.207968] ? bdi_alloc_node+0x67/0xe0 [ 1185.211927] ? bdi_alloc_node+0x67/0xe0 [ 1185.215887] ? rcu_read_lock_sched_held+0x108/0x120 [ 1185.220900] ? kmem_cache_alloc_node_trace+0x34e/0x770 [ 1185.226167] ? _raw_spin_unlock+0x22/0x30 [ 1185.230316] bdi_register_va+0x68/0x80 [ 1185.234199] super_setup_bdi_name+0x123/0x220 [ 1185.238676] ? kill_block_super+0x100/0x100 [ 1185.242992] ? kmem_cache_alloc_trace+0x616/0x780 [ 1185.247823] ? match_wildcard+0x3c0/0x3c0 [ 1185.251967] ? trace_hardirqs_on+0xd/0x10 [ 1185.256116] fuse_fill_super+0xe6e/0x1e20 [ 1185.260255] ? fuse_get_root_inode+0x190/0x190 [ 1185.264838] ? __alloc_pages_slowpath+0x2db0/0x2db0 [ 1185.269851] ? kasan_check_read+0x11/0x20 [ 1185.273999] ? cap_capable+0x1f9/0x260 [ 1185.277899] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1185.283432] ? security_capable+0x99/0xc0 [ 1185.287570] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1185.293092] ? ns_capable_common+0x13f/0x170 [ 1185.297486] ? get_anon_bdev+0x2f0/0x2f0 [ 1185.301529] ? sget+0x113/0x150 [ 1185.304795] ? fuse_get_root_inode+0x190/0x190 [ 1185.309362] mount_nodev+0x6b/0x110 [ 1185.312972] fuse_mount+0x2c/0x40 [ 1185.316411] mount_fs+0xae/0x328 [ 1185.319766] vfs_kern_mount.part.34+0xd4/0x4d0 [ 1185.324332] ? may_umount+0xb0/0xb0 [ 1185.327954] ? _raw_read_unlock+0x22/0x30 [ 1185.332095] ? __get_fs_type+0x97/0xc0 [ 1185.335980] do_mount+0x564/0x3070 [ 1185.339526] ? do_raw_spin_unlock+0x9e/0x2e0 [ 1185.343933] ? copy_mount_string+0x40/0x40 [ 1185.348151] ? rcu_pm_notify+0xc0/0xc0 [ 1185.352037] ? copy_mount_options+0x5f/0x380 [ 1185.356436] ? rcu_read_lock_sched_held+0x108/0x120 [ 1185.361445] ? kmem_cache_alloc_trace+0x616/0x780 [ 1185.366294] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1185.371839] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1185.377377] ? copy_mount_options+0x285/0x380 [ 1185.381871] ksys_mount+0x12d/0x140 [ 1185.385504] __x64_sys_mount+0xbe/0x150 [ 1185.389478] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 1185.394496] do_syscall_64+0x1b1/0x800 [ 1185.398367] ? finish_task_switch+0x1ca/0x840 [ 1185.402860] ? syscall_return_slowpath+0x5c0/0x5c0 [ 1185.407791] ? syscall_return_slowpath+0x30f/0x5c0 [ 1185.412721] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 1185.418086] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1185.423323] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1185.428513] RIP: 0033:0x455a09 [ 1185.431702] RSP: 002b:00007f118944d808 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1185.439412] RAX: ffffffffffffffda RBX: 0000000000000016 RCX: 0000000000455a09 [ 1185.446687] RDX: 00000000004c1eb6 RSI: 0000000020000240 RDI: 00000000004de0c5 [ 1185.453957] RBP: 0000000000000000 R08: 00007f118944d820 R09: 0000000000000000 [ 1185.461222] R10: 0000000048000000 R11: 0000000000000246 R12: 0000000000000000 [ 1185.468474] R13: 0000000020000240 R14: 0000000048000000 R15: 0000000000000000 [ 1185.476184] kobject_add_internal failed for 0:44 (error: -12 parent: bdi) 2018/05/26 13:24:25 executing program 7 (fault-call:9 fault-nth:52): r0 = getpid() sched_setattr(r0, &(0x7f00000000c0), 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}}) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) syz_fuse_mount(&(0x7f0000000240)='./control\x00', 0x406000, 0x0, 0x0, 0x0, 0x48000000) close(r1) 2018/05/26 13:24:25 executing program 4: r0 = getpid() sched_setattr(r0, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x0, 0x4}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) getresgid(&(0x7f0000000280), &(0x7f00000001c0), &(0x7f0000000200)=0x0) fchown(r1, r2, r3) prctl$void(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r4 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r4, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000f86000)='./control/file0\x00') syz_fuse_mount(&(0x7f0000000240)='./control\x00', 0x406000, 0x0, 0x0, 0x0, 0x0) syz_fuseblk_mount(&(0x7f0000000140)='./control\x00', &(0x7f0000000180)='./control/file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) close(r1) 2018/05/26 13:24:25 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)="766574683100000000ffffffffffef00", 0x22b) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x10) 2018/05/26 13:24:25 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0xc00000, 0x0, 0x0, 0x0, 0xc00]}, 0x2c) 2018/05/26 13:24:25 executing program 6: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd00]}, 0x2c) 2018/05/26 13:24:25 executing program 1: r0 = socket$inet(0x2, 0x5, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vcan0\x00', 0x10) sendmsg(r0, &(0x7f0000000480)={&(0x7f0000000140)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000380)="f0", 0x1}], 0x1}, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000a00)={@multicast1=0xe0000001, @local={0xac, 0x14, 0x14, 0xaa}}, 0xc) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000040)="84", 0x1}], 0x2, &(0x7f0000000540)}, 0x0) 2018/05/26 13:24:25 executing program 2: r0 = getpid() sched_setattr(r0, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x0, 0x4}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) ioctl$TIOCMBIC(0xffffffffffffffff, 0x5417, &(0x7f0000000080)=0x6) r1 = userfaultfd(0x4000800) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) write$sndseq(0xffffffffffffffff, &(0x7f0000000080), 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='memory.current\x00', 0x0, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ppp\x00', 0x20000, 0x0) linkat(r2, &(0x7f0000000100)='./control/file1\x00', r3, &(0x7f0000000340)='./control/file0\x00', 0x1400) unlink(&(0x7f0000f86000)='./control/file0\x00') getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x1a, &(0x7f0000000280)=""/187, &(0x7f00000001c0)=0xbb) rmdir(&(0x7f00000000c0)='./control\x00') syz_fuse_mount(&(0x7f0000000240)='./control\x00', 0x406000, 0x0, 0x0, 0x0, 0x0) syz_fuseblk_mount(&(0x7f0000000140)='./control\x00', &(0x7f0000000180)='./control/file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) close(r1) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000040)=0x1) 2018/05/26 13:24:25 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty=0x18, [0x0, 0x0, 0x0, 0x0, 0x0, 0xe00000000000000]}, 0x10) [ 1185.649939] FAULT_INJECTION: forcing a failure. [ 1185.649939] name failslab, interval 1, probability 0, space 0, times 0 [ 1185.662010] CPU: 1 PID: 3332 Comm: syz-executor7 Not tainted 4.17.0-rc6+ #68 [ 1185.669213] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1185.678580] Call Trace: [ 1185.681190] dump_stack+0x1b9/0x294 [ 1185.684829] ? dump_stack_print_info.cold.2+0x52/0x52 [ 1185.690037] should_fail.cold.4+0xa/0x1a [ 1185.694112] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1185.699238] ? find_held_lock+0x36/0x1c0 [ 1185.703314] ? graph_lock+0x170/0x170 [ 1185.707130] ? graph_lock+0x170/0x170 [ 1185.710938] ? print_usage_bug+0xc0/0xc0 [ 1185.715011] ? print_usage_bug+0xc0/0xc0 [ 1185.719080] __should_failslab+0x124/0x180 [ 1185.723327] should_failslab+0x9/0x14 [ 1185.727133] kmem_cache_alloc+0x47/0x760 [ 1185.731210] ? lock_downgrade+0x8e0/0x8e0 [ 1185.735371] radix_tree_node_alloc.constprop.19+0x1e6/0x310 [ 1185.741098] idr_get_free+0x891/0x10a0 [ 1185.745008] ? radix_tree_clear_tags+0xc0/0xc0 2018/05/26 13:24:25 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty=0x18, [0x0, 0x0, 0x0, 0x0, 0x0, 0x1100000000000000]}, 0x10) 2018/05/26 13:24:25 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)="766574683100000000ffffffffffef00", 0x22b) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x77440800]}, 0x10) 2018/05/26 13:24:25 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0xa8030000000000, 0x0, 0x0, 0x0, 0xc00]}, 0x2c) 2018/05/26 13:24:25 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty=0x18, [0x0, 0x0, 0x0, 0x0, 0x0, 0x40020000]}, 0x10) [ 1185.749601] ? unwind_get_return_address+0x61/0xa0 [ 1185.754539] ? __save_stack_trace+0x7e/0xd0 [ 1185.758880] ? save_stack+0xa9/0xd0 [ 1185.762519] ? save_stack+0x43/0xd0 [ 1185.766158] ? kasan_kmalloc+0xc4/0xe0 [ 1185.770052] ? kasan_slab_alloc+0x12/0x20 [ 1185.774215] ? kmem_cache_alloc+0x12e/0x760 [ 1185.778544] ? __kernfs_new_node+0xe7/0x580 [ 1185.782867] ? kernfs_new_node+0x80/0xf0 [ 1185.786940] ? kernfs_create_dir_ns+0x3d/0x140 [ 1185.791535] ? sysfs_create_dir_ns+0xbe/0x1d0 [ 1185.796039] ? kobject_add_internal+0x354/0xac0 [ 1185.800710] ? kobject_add+0x13a/0x190 [ 1185.804608] ? device_create_groups_vargs+0x1ff/0x270 [ 1185.809801] ? device_create_vargs+0x46/0x60 [ 1185.814216] ? bdi_register_va.part.10+0xbb/0x9b0 [ 1185.819061] ? bdi_register_va+0x68/0x80 [ 1185.823122] ? super_setup_bdi_name+0x123/0x220 [ 1185.827797] ? fuse_fill_super+0xe6e/0x1e20 [ 1185.832121] ? mount_nodev+0x6b/0x110 [ 1185.835928] ? mount_fs+0xae/0x328 [ 1185.839468] ? vfs_kern_mount.part.34+0xd4/0x4d0 [ 1185.844224] ? do_mount+0x564/0x3070 [ 1185.847940] ? ksys_mount+0x12d/0x140 [ 1185.851741] ? __x64_sys_mount+0xbe/0x150 [ 1185.855887] ? do_syscall_64+0x1b1/0x800 [ 1185.859946] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1185.865313] ? print_usage_bug+0xc0/0xc0 [ 1185.869391] idr_alloc_u32+0x1f9/0x3d0 [ 1185.873291] ? __fprop_inc_percpu_max+0x2c0/0x2c0 [ 1185.878145] ? lock_acquire+0x1dc/0x520 [ 1185.882128] ? __kernfs_new_node+0x10e/0x580 [ 1185.886542] ? __lock_is_held+0xb5/0x140 [ 1185.890613] idr_alloc_cyclic+0x167/0x340 [ 1185.894765] ? idr_alloc+0x1a0/0x1a0 [ 1185.898482] ? kasan_check_write+0x14/0x20 [ 1185.902713] ? do_raw_spin_lock+0xc1/0x200 [ 1185.906950] __kernfs_new_node+0x1a3/0x580 [ 1185.911194] ? kernfs_dop_revalidate+0x3c0/0x3c0 [ 1185.915963] ? lock_downgrade+0x8e0/0x8e0 [ 1185.920125] kernfs_new_node+0x80/0xf0 [ 1185.924026] kernfs_create_dir_ns+0x3d/0x140 [ 1185.928446] sysfs_create_dir_ns+0xbe/0x1d0 [ 1185.932772] kobject_add_internal+0x354/0xac0 [ 1185.937266] ? kobj_ns_type_registered+0x60/0x60 [ 1185.942006] ? lock_downgrade+0x8e0/0x8e0 [ 1185.946150] ? refcount_add_not_zero+0x320/0x320 [ 1185.950891] ? kasan_check_read+0x11/0x20 [ 1185.955029] kobject_add+0x13a/0x190 [ 1185.958740] ? kset_create_and_add+0x190/0x190 [ 1185.963317] ? mutex_unlock+0xd/0x10 [ 1185.967022] device_add+0x3a5/0x16d0 [ 1185.970742] ? device_private_init+0x230/0x230 [ 1185.975311] ? kfree+0x1e9/0x260 [ 1185.978682] ? kfree_const+0x5e/0x70 [ 1185.982389] device_create_groups_vargs+0x1ff/0x270 [ 1185.987390] device_create_vargs+0x46/0x60 [ 1185.991610] bdi_register_va.part.10+0xbb/0x9b0 [ 1185.996272] ? cgwb_kill+0x630/0x630 [ 1185.999979] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1186.005497] ? bdi_init+0x416/0x510 [ 1186.009103] ? wb_init+0x9e0/0x9e0 [ 1186.012624] ? bdi_alloc_node+0x67/0xe0 [ 1186.016579] ? bdi_alloc_node+0x67/0xe0 [ 1186.020537] ? rcu_read_lock_sched_held+0x108/0x120 [ 1186.025535] ? kmem_cache_alloc_node_trace+0x34e/0x770 [ 1186.030796] ? _raw_spin_unlock+0x22/0x30 [ 1186.034936] bdi_register_va+0x68/0x80 [ 1186.038814] super_setup_bdi_name+0x123/0x220 [ 1186.043288] ? kill_block_super+0x100/0x100 [ 1186.047593] ? kmem_cache_alloc_trace+0x616/0x780 [ 1186.052415] ? match_wildcard+0x3c0/0x3c0 [ 1186.056546] ? trace_hardirqs_on+0xd/0x10 [ 1186.060689] fuse_fill_super+0xe6e/0x1e20 [ 1186.064820] ? fuse_get_root_inode+0x190/0x190 [ 1186.069383] ? __alloc_pages_slowpath+0x2db0/0x2db0 [ 1186.074380] ? kasan_check_read+0x11/0x20 [ 1186.078516] ? cap_capable+0x1f9/0x260 [ 1186.082386] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1186.087902] ? security_capable+0x99/0xc0 [ 1186.092042] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1186.097578] ? ns_capable_common+0x13f/0x170 [ 1186.101986] ? get_anon_bdev+0x2f0/0x2f0 [ 1186.106045] ? sget+0x113/0x150 [ 1186.109321] ? fuse_get_root_inode+0x190/0x190 [ 1186.113887] mount_nodev+0x6b/0x110 [ 1186.117502] fuse_mount+0x2c/0x40 [ 1186.120936] mount_fs+0xae/0x328 [ 1186.124287] vfs_kern_mount.part.34+0xd4/0x4d0 [ 1186.128858] ? may_umount+0xb0/0xb0 [ 1186.132467] ? _raw_read_unlock+0x22/0x30 [ 1186.136594] ? __get_fs_type+0x97/0xc0 [ 1186.140464] do_mount+0x564/0x3070 [ 1186.143988] ? copy_mount_string+0x40/0x40 [ 1186.148205] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1186.152952] ? retint_kernel+0x10/0x10 [ 1186.156822] ? copy_mount_options+0x213/0x380 [ 1186.161299] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1186.166817] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1186.172335] ? copy_mount_options+0x285/0x380 [ 1186.176825] ksys_mount+0x12d/0x140 [ 1186.180445] __x64_sys_mount+0xbe/0x150 [ 1186.184399] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 1186.189403] do_syscall_64+0x1b1/0x800 [ 1186.193275] ? finish_task_switch+0x1ca/0x840 [ 1186.197762] ? syscall_return_slowpath+0x5c0/0x5c0 [ 1186.202690] ? syscall_return_slowpath+0x30f/0x5c0 [ 1186.207612] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 1186.212965] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1186.217794] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1186.222963] RIP: 0033:0x455a09 [ 1186.226134] RSP: 002b:00007f118944d808 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1186.233823] RAX: ffffffffffffffda RBX: 0000000000000016 RCX: 0000000000455a09 [ 1186.241074] RDX: 00000000004c1eb6 RSI: 0000000020000240 RDI: 00000000004de0c5 [ 1186.248330] RBP: 0000000000000000 R08: 00007f118944d820 R09: 0000000000000000 [ 1186.255933] R10: 0000000048000000 R11: 0000000000000246 R12: 0000000000000000 [ 1186.263181] R13: 0000000020000240 R14: 0000000048000000 R15: 0000000000000000 [ 1186.395069] sctp: sctp_transport_update_pmtu: Reported pmtu 72 too low, using default minimum of 512 [ 1186.539570] sctp: sctp_transport_update_pmtu: Reported pmtu 72 too low, using default minimum of 512 2018/05/26 13:24:26 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty=0x18, [0x0, 0x0, 0x0, 0x0, 0x0, 0x3400]}, 0x10) 2018/05/26 13:24:26 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x600, 0x0, 0x0, 0x0, 0xc00]}, 0x2c) 2018/05/26 13:24:26 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)="766574683100000000ffffffffffef00", 0x22b) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x72440800]}, 0x10) 2018/05/26 13:24:26 executing program 2: r0 = getpid() sched_setattr(r0, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x0, 0x4}, 0x0) mkdir(&(0x7f0000006a00)='./control\x00', 0x120) r1 = syz_open_dev$dmmidi(&(0x7f0000000080)='/dev/dmmidi#\x00', 0x3ff, 0x4200) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffff9c, 0x84, 0x1, &(0x7f0000000100)={0x0, 0x7, 0xe73, 0x95, 0x3f, 0xffffffff00000000}, &(0x7f00000001c0)=0x14) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000200)={r2, 0x5}, 0x8) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) sendmmsg(r1, &(0x7f00000067c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000300)="18350ed9839991df9b7cb8e647e148509e794b79690a43efaaa4e231c90710b700d63e12e38e494da91229f353d517e3728297e4128c7a6f8f2a002600e05d131b2077f5f7e5837508ee4d5e5b695bdc076f952d45157364508612fe3c42b743bdd486073b253448953a315eee8cee0456596ab64c0b855decfd9e54791956de58e9a896db6137fd23c0fd8d097a52e9cbf1155be7f7e63c8116d7773d885ae893cb278581e9af48c3f8269150ec0a69e4a386ec29d9b311df6e6647719f3ee6dbd38897229804da620ed5c58c4c96201fd030f5b098ccd71b5a8c2397b6da6d430bb9847dca7d5a99cfebdca2", 0xed}], 0x1, &(0x7f0000000440)=[{0x78, 0x113, 0x5, "06fd28134c9bdfb5a96c4e06546467f66ba312662d4d563650f551794f174a8528ec0d84b149a3e5246f8fe57bc7d3e62aa63374a1c908adc4165a406c028323360401b6bd7a2ef0e34b7692c4214609f717b20985e5a9214ff1f907843bee1babe36d29"}, {0x60, 0x1, 0x1, "19e91320be5d458d2319eadf5fbabc166a63e861dd521115c39adf1a44ddc5707173a7291a69f4103758b49be3a8e44c9eeba003f8be0c56d8b1c44f1c7319b02533fd5e1f7c2476dda4"}], 0xd8}, 0x9}, {{&(0x7f0000000540)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x2, 0x2, 0x4, 0x2, {0xa, 0x4e22, 0x0, @dev={0xfe, 0x80, [], 0x1d}, 0x7d0}}}, 0x80, &(0x7f00000017c0), 0x0, &(0x7f0000001840)=[{0xb0, 0x11, 0x100000001, "341b91073bc1c1a2012660cd9b0b4e85668b3775733043ebd726a76fed1f81eff40d4bd1afb527ef040f7e10c9db9988d3ebe278c189768f4490c9c6724ef53d533c5114edb1b652259f7081831a971bd42548f64783c028507428c21dab6b84131d7dc304ed037c0ad615cf287f20607e7009236d75f161aa95c605dc03e38783548b5393247dd4e8e9763e1b8db9ffa4edcc19b56eaea1f94c"}, {0xd8, 0x114, 0x6, "93bc9b74a83da0c4dbce1b5e6ce63f6440061626b816ed08f6ec8e193e2284a3aa10919567c50882eb053fdefad003a0073ab71cfbce24cce3a6c9ff789a3667319065b4eef57d4520f5c19f3f5fa0bdb89f2c714f88c1d819599824a7acf82b479f09baaeb695bc7e2be1a7dcc83c2414b83a44752e31460790919152b4f296d731131ed0d7f61e24bd88a5427c4458dc207aef7fe8a109bee90e94c5dffd848b83485def5dd7d89fa0a97d74b099f62f5669f83d770e161a1df7b10b42b451faebe4"}, {0x78, 0x107, 0x3e5f, "587235bfb149d6130af3374f12892490da2a2b3a91cc1328a88b986c37fbe50b4fe65aba0b13e465169ee04381ac077e063983268769f918a12a39a8bf770bd33464065cf4afe0fee89d0f71096b92b998d47fe10d77b78e370e8c451bb0b74b930e5fed"}, {0x1010, 0x11b, 0x3, "a97f6146f7c2d17a9bbed1921875d7c4f9ebfa41686a3d831331bf602a8932d34cd76c79dcec2c0d953a922db2f8454f43a0b38d378adcccc004dbf8a87584bee6e7952a5c7a01d23a096f7201d10ac65d9f2ec69724a64a5a58bbb0ae2a4a28ffd64c3385097b68968f13c3cac3fcfe73ebd5d15e9557c90e4443b18f41a132f0170cf963d8dcb1256b7d17967929c42b2fd06652504be79142026425b1a4140e9a24c3c1c8e7dce68cc023fe6c9d5264a1ba7f2195d99af781d6bf744df9f8019dace0aa8365e83135fc18a6f5fdc589f9ab77fb91bb364c96bebcddf4ced821678366cbc5af2667bd70f07a75b5270ec6e18ca33dbd6b3af213c9703b0adfb88c34d54886f56146de83a9b88521649257215b9346cdf8f8e61bd21edc09945f6e9338e22d460b9e729da59f8eca38e9738f8366e5e2189baf79b5b156a256e1d9077995b976e20b9fffabfc497dbf7602e2644f285da79c3a8109a968029a2b118d2344dc459b0cf9981b516be3e9547126d4f45d22d500ba36c0bcf60b9b082e998c671b1383abb6210bedb356596c348d3a2aaadf6c43b7be310a2c515bd84affa75c7074097037847fa97d8ec58efe190c65ca86d1eb7b529f2182f7219bc1901856fa347a4475f586596a7c5062fadb24eec09e83dfe2403fcdf7f0e9aa18255453f6037c49bcad248e424d410de119cc3dded0a25eb7d0f9150b4fe0524857ada0cbe64804a6290fae7b8bf139729747baad9d93428a5f30b0378b5ae8b9de8a54abe7f831a1a592ddf1106d9bbb624318e016e31b107c083859279fb7cb80063af51cf1a4e0cb296cfce9b1b5cf381830db739b661069b7b3ab6d263fd749d92620a3f8656dcc9a7e812cfc862553f68e815f58cdcb59c2a4833f2fc1c1ea02c1216bb80f93e8e9b902464f3bbbbbd01743e7d38786afca8172713c40015fe9b42c7d1a75b22abf0214f2aefa061196cc02bbcf612be832a9f3a58e9bdb319f16e0321d60ff3f1c621d816a0c7092efadaec443be872685c8fb9c6c686ef33efdca72c4ef5cfad6b9f7bc1b197a7e78a59fdd95be4c21d2d632565bdc32a5da9525bbb62f1edace65b25db4810dc778437a66decada669e5da7748d8ee65242cb2096cec93fa20625aefc15549330da1c10e2338ef05d8287acc932d51e222e09c7067da08b00f67eee80356598582344f76056e4b8aa3b6577dba13deaa5809f263db979eab9223dd410007d6032dc20f4189bdf803feb7687158c6a195d3524d48cfecb6a70f9506fbc29a2504451e7a43906678948993f5c5827284334508a8d26f3728632ab13fe31e73f2365ae1212d31954f7bbd32805af1dc0882a5573119ec7c9f946399e8cddfaffc2af26fc38b633d897c0fb136db98999a5fdf90ac0316ffae09314391e5409a1f5a91ee8dc36b67bad8e04030a5294651821dbe91aa84dcd43cbcb4f65f7e559f63e0aa41bf6a73281bdfc515dd4f87511251e7278f4aa53c061c008d9f8d787690b410269a376b00a7e6ffe1598a72e7ae883d0208c2cf03b14ebc4d4edd713efeb5f0cd96a643470851501cdced37ebc46f8ef2b4064fc0ec858b7f1681514d5315f2e3cba8043d91a6a59c92ff8b95ceb868807ec4a3d84131ddc87f5b048cd5d76163ab8a80e4773a852780f74f523577e460396dee732b2b596290e0ef6615b652cfd298d03dc3ee556802470bf88fc8ccfb50b388621913a5455013543137fb8d6d26a6b9222bbebbddebc9ebbeac4714768f1c5c6c0807afd59bcf5455476143df293b9f6a9aa1486aa5a950a01df5e4a66f7ac68a66d9118f5b94d9b76afeddea5e90979b57675bff5f393c08b9554ead73956a6719e1f1ad2c7e0690801d2cc36bbb3327a4529bba54660467ba8080b752d92d3aae03766bb31b121adf38e23adb64a79120dea1e1b30c909b8ca8084c79099820f3febc85f8250e04535897255090b3f63ac25002c7ff7fc6717fd7fc40a83bfe6e0401956de848ce93608976b3b7a3a9a079ac9a6b9cbcf6afb663d1db858330f3ef196d3ae740d4d479c76a75a7a97916e182c72cb4bf89ce1fa8c69b7a377bdfe7cba6780a2d1f1651d80e751eab9c60c08c26ae16c4fa149a38d63d035d6031c0c5b7a085fefff3bac15806e594e0f59c0d65681e5397aa501a264e606402954be12b8929ab870aff1701e7f4ba324799596c81379d5c5cc22ff7d6cb203c0ef15029deff35570b1928da00a11ed676cb28dd45c618667010b93fda6b693c58e7e4710afe756ef9a91e5422ba94061afe341b84f97ca4388dca8cbfb838e45dd5d50160089c048c26f9c7b6fc21b400c90489d58f7620563a80166005dcba023b5fff803066107a81967233abb8d3d55df55b1fd0cfe746d062823972cb64f85cc6fb67ecdbabac90840a882edc9b92540bf65a62c31534636c7b70b56885fea26099587e0212afb0f3746eafb7c92275745ea5f3affbc78ee246c328e6fcde3e88fb71b2939ad1760de450bdf7c49ab6e856aeefd82467e82b0ab5f568c01c5f0eae464784695e0d1ffccf2e9e27f0fab3f37285222b5fc7ea67c57066c355eceea98fd568d557ea2f569e9ffd5bfacacf3be3baade1ae1f9fa7e66d1d26ee16a0b4ac9a2b5fc7c3ffe27b79d5f3ed91529a2a5b9e9354de5f7dcee934faef2c8d9fb06eb0d7931678191d5743804bb9d5244aac115559dad46d5d21533b95f26630f7dc2ff63d830dfbd1932d711c9de5b45594a820a0fb48f95b60d666e75bc9a87621fb9f10390b4df6e113ec43aa4e89f808885853b4ed0d14105fc08a4ee9f41b5867167ddb88cd1c24bb93584ea52888d834838277bd342caa9e15dd240ad246eeb2335c40f5a60e76d287768ac8f4983ea933413557d969e3fefbb3b424233dffb4bcae2f4290a26f6e8fa1af262b6305d1428906c3bb66f69a6e0fbc912c0daf94488d27c66f86711cc783e2138cc044df8d7f80c05c69fbf02f1cc0726fb1d2baa19c7f77969d7b5e02b2eb8c08d2f031c5bfd1ea3e42df7c6b3fceccdbc3c5e2a9827be03762792b8c9448990ec74dbb0da9c31e4ee44d8352719bd3a42370031c7e82a4e50e7c07da06bedfac0700329016f6b2d8673adf8659011ef0a2db0391c9bf5f6ba3ef66f1552b774ea1e2c6242ceab5caf62fc561c218abae82940d048f4d7ca3f935c450999ec8bf839178cd50fde1f8c2e8debddea83e3568fef8bf0528e9e0efd58e7373c28f2aa306c60913ced33f18c9ebcae43d7630d163ea55d3c54fdff8368f815fbfaa7e85f114e9100aaab3561ae55d2202487ea9651871037c7b325b1ecfbce3840b371fad9b6bd77f7e99986d6deaf61cdd854f53efa0f37d75111a61c09ae60517214f9a072289b77a2d9bf63b7a51c199d25057698fc2dfceb96ce1076d55f3b24f60f5f142717ce3a5a7c94c817982e228e4302302f7c929aceed1998e1d40d7c76ec151a12c0e2a9b521b92e5e0b7737c4622600a5416d92e423d2ecd27bbab494c416e6860193d1e54d8ea562de2cb27ad52ca694a94f3c31249b0011b974ce64aa3e966df63aad9c55c716a52ffcfc09ba387b6405ef9c39bf059fb5bc46c93da012f99ba5e123541c64c75df3d6af54c9ea5e6321f0cca202cb62f6522b77e4959cc3e0ac0c253f0480719c049a3b5d6fd1782b4a8d7c6e801be4dabd73ac156ede8aaf8b0b097ecf9349ce0fe565215d1d0e7bcdd158d006af4d475cf1175c3e89730e65b46ef05095d744f0a2845210446a551cc582c8cfa85ed1977ecfcd821a9e286968b35aff75f0719f71fbfef053e8e7a37ec6a16b490c0638d1fb27db3bd9293b82583a8df00b64e9fb0899a1962fe20a3a4c816b02e55d16cc0467c77e81fdc4e552bfdce986e8be4877f1f3eeaf0d44050af8770658e9ec6e182756850643c58e3d810a59c31acef4b60664db057e98458b945cd26882922abc6d0ce43aead0337510e7b76b2fc7ab50f6edd92e95909b9b624b8c7a1a1468c0ce812c2d2c0e7da02e9e59e784800d14a02566e5b7b7764cb99b498a0a888f937475fba7880a6a1aaafc6cf8ce5da0ca3c04f9cfdc3d291a07d6b7ca85f60190958ebeae4b6800c3e56fc25e911fc0ff2d9ae4e7af6263b4f25849abd23e988ae4635ed66bffc8fbe377247a7ff51f69651f092ad6f01d8e6446fb4329b253e3f6d7a6105fdf8d184d784af96ed41125f165d64b11018d93fe56979e6bb55c0f023a13bfcb5aac130ce522a70176b4f10add607baefaaf7b20d052bfe524e23e86500715c7db7f5f878d3f1df1180efd5b2987b583d5605c2b9aa23b97274b6aa31b7feec66141faad4e8a3173fac9ee1e930d897b58621898e2d389e6ea7b40140cd36030296180e9f1f0ee5846c6e295fa27c1d77b4bafc5ca9f6aa1f94e72bedfbbd4dbf26413a181b2eeb90684994dadf060ac78a6a3d9b09b21b41526de6a4efd9574bd617e366b9d14bd5ca5565a80ec21d03c34a2c5b0d1b8b1bd96a494c95dc493bc88a2b873c9e5af6d7af5fab6dc8a20f87b367bff5bfe38f3a234d744a9b8b5e1fa9b5ef790c9530e17754013e621dd30375e1efcc691565feb6d647ad8e4b0c56f7de4942ddb8e0d3aae1f46a468dc90dc75e2b443f43f80458274247c89e517ad0a7a96c0c35f5720e12eda38efb945a121cbd09a4555c21336d99603b1f0052e9bea1ba506249230e40c3a4b61f800adc266af33e8483fff31b69d150a4e60ab22f48269bc482f616c3303bbe0a535335af8ef4ad9dac75eed391b016b8765b9cdb91e8dba3995af54d79ae53a6c217df96f73e93581e3c3f1a531e8db30e0edb68a911ccbe85f651dcb447d93251058c4c9c2e5b828251c74d787ae18304edc63411f975639bed237c9fbae157b0a08423e02fdd46e3f00ef6af65d65948a122632e8f72a5cd9bddf39d11386f6dffb017215c115c0549ead03fec23189def31ccde05b58b0165e180748628847137a61d52d40001a26981f127e1c0f68a48bc0ed072fc3e95ee9aaa17d4e527902a6125076d9ea76b23a16b8d5eb98ce475def9915ca081a67e8049cafe114b27d992df181b911bc80a2321f1ff916bca513b9a78857355efc31090e1619c405fedcccf246424fe02a6de7bc3b1982bc2495bbe7370d3bf1e9c4ba17c1d08440e8c2e4675b5924e184ff53705688ab9bae1c2b47faa45d2f4bd2e285b2bb643393f986995d1a03b5649f7a299fa4aebc869141b6bab13dfeef08b26efe4885947cfda22de08a384f8830901785cf8a07e01daac3f0f1b6daf2d84d9d5a560add3b2eecd7ce09ac3f83b7272e36668843585d326c102a7f7266aaf92ef020936ebe81b9cd9e990c1547bbf3e2640cf545d0b633d49f13ef6d951b93d5ef093d08e4db07bf480667b68c93c1ef4b360434739e040ae1402cf88e277b2a9ff6c9c806a57cec5fa7206805d44d7f759492da21fb7ec21f5d481ff72fc279c388d5a6981af66deb7d96b5a37ea52e8b9fffdbb3085662b30aa1a6010c9cc2f52ad3c85e45618c817d63fe04209d511a72c18a6f83ad000d627eb711690b8dbbb881ab497082da7be2ed9d2e7c887f9abd0ac4deb6ed090319633216d0d37de5804ae4f0e1893100938c045ddd41cd7069cfeb4e49b7c1bb9ac4ceffdd072bfcbf3bac85da8d1dad25729a9ee47e7f853587eacbf2b87df399f20ca5a0836cabca8b999c1d27f552c852a48eda8180dc0951e14b22c2d964f5d3cae77e84ee917988004e12f435d173812f6d8486893254"}, {0xa8, 0x119, 0xffffffffffff3ac9, "03d12de32f75101accf60081973b2b7aedd180a7bc23725d47b85837c71edb95e1fddba65483d1ac021f786eb716414195d3f17a325907fd9cae67f49f4e20237ddd190182c658cd3b9d8154e018c571ad8df91a264ddf77568a98cae709bc4d322e243f249d742fb91e1ffe5a44892b87d27426bf03180b31b040e9ce388b9f995fc308a0aaa8344b52fa8ea0fe8d0f9668"}], 0x12b8, 0x40810}, 0xffffffffffff77e8}, {{0x0, 0x0, &(0x7f0000002d80)=[{&(0x7f0000002b00)="b1121ae07c49cd524d5eb3a85be9c8b02287c20b55bd6d8069313be9691be3518c1698f64e56ab1fca22115986122addd3e1", 0x32}, {&(0x7f0000002b40)="c642ac404980c8629dcedfed50a3639d445bfb789509bd1c81691df8d5e527884e7407bb22e1e03c32d9f508e2dcf963b3e6f79a9903f98b15864162e220444b69662c90691b9a803f3f2876f011f753cd9ff2bb0140a2d743ab5c875770bff28c0d8a4beb304ad3dcd5553a1950040464f388613d6b5a81118da087d13a0e68960f7b5b436468765600bfa3393f1e77", 0x90}, {&(0x7f0000002c00)="9e348831e1c508463aa25f938c023d162e1cbd4cb45c790d40b5710488c766e4677366163e983b7710f70d5c3fedf8fc9a3cc0823a69319ab4db374a3fa13b8a9667680f755f7f1a3a5b33bf7599978eb2d9e009173454a45a4a8b9d6aafa88339f50004ef45ae48d1d15a8f30fb2964277f9db0a35b3d76f4b40fd3753394231fee0eb9ea984eeb1896ae0b3e276c443803a392c9f9c80743ab16830b", 0x9d}, {&(0x7f0000002cc0)="ec58863ba7166827fdccae86d676ec6f58877b0745cd8525b1a3685834e897f0f741", 0x22}, {&(0x7f0000002d00)="4624ec628a61ea4f5506ca1eb51e76a993", 0x11}, {&(0x7f0000002d40)="d792bd51bd29e44121fa9211d41d85e89af7e06429d0c36744d85f54f4403d87654102b0a29d310eea2d4b", 0x2b}], 0x6, 0x0, 0x0, 0x40000}, 0xffff}, {{&(0x7f0000002e00)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x19}}, 0x3, 0x0, 0x4, 0x4}}, 0x80, &(0x7f0000003040)=[{&(0x7f0000002e80)="8ed5d76c229352b49b3d9a9ea3b7af8aecdd9598f2d23b0567dc8b5b14a77355bc4eaa9977bbc4959963b24d4ff37a06a6e22b89c963b48e3318dfc9b722bd754e10faa95e3b14f1acae9450fd1ecaa9c9eb", 0x52}, {&(0x7f0000002f00)="39968662573a24e390b76532d98e6057906dc2b7769180830b4e58c51eccc4431b78519e189f54974f8f764affc4afda9c388a2ed9a9c2bb4278b18eb2f34b25192db48067af3c95f58b9336e4b133b529b5b4f2b45ab8c19000c2412334774d3c72f957edcc530ea6a4e4d0e6e99a75", 0x70}, {&(0x7f0000002f80)="b5c270b1752846891443f7d4c416a075bdbb6d417368c8e4217c0e543f12fb4118a0a726fd7b2ce57f98b71217e2446770f3f16506e53a440ea3d3b190d0bd3557c317e3673343fa21d27105c8750b571c83956146e0d846174217ef1babc60e9088b9c455999bc91977dd84b58f00ea22dbd3329e2a5d4700d64593db2724062337c89d497a7d935907b5ef4b843fc5a423670c2daf8a5851891f62834923137790798c8fc83dda42039c8937e491866dc7a7bc3fc854dda9e8f51af629", 0xbe}], 0x3, 0x0, 0x0, 0x44014}, 0x8}, {{&(0x7f0000003080)=@llc={0x1a, 0x300, 0x81, 0x7053, 0xd2, 0x7c1, @random="091c82b58d3f"}, 0x80, &(0x7f0000003480)=[{&(0x7f0000003100)="0fa4cfd5b77a3e2572f204b10ffc19b87eda91b6c4cffbe75d14008a31d8694ac1f27a34161f50769818052519a24a604f7639a50c1535268fc1f55c910f505c1e56ef42995cb13178ca47e8eae6acd4e29cbd1b640b87f90001795776fba2c9e8b38231862186b252cca3aae49479f51c6011d8356ce3a95f9b01ffe47d272bcc40bbc1888106cf2ccc5c67c60c49d006d5b43b83b49048fc21a16211e5e7dd8c5c6d179179406101aad0663ae33e67b4fa751b5f18de", 0xb7}, {&(0x7f00000031c0)="e7a370b1", 0x4}, {&(0x7f0000003200)="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", 0xff}, {&(0x7f0000003300)="825fc184abe8d1a2c19e836d89290d8307d62399c331ef39c98467d6bca529e3a648c9c5af57f1e6639cbb2847", 0x2d}, {&(0x7f0000003340)="dca63e1a7cb332e4ff1e5c4d4d1e26a1532ccf6dac9d75f8b4103682e33d426f04dc8767ebfa970f242d52f46bad", 0x2e}, {&(0x7f0000003380)="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", 0xfa}], 0x6, &(0x7f0000003500)=[{0x18, 0x0, 0x7ff, "c269"}, {0x78, 0x1, 0x7, "1b31dd84a543b9435132dfbf1eced309ef49617f0575b8dd922389b090a112af554b2aa9a1b14e2d80f04581ae7535db3640e4b948a49186a198c695201e0495e8eb69a16f598fc7b21d61d9e4c4dba4e7ca4f6af671b7f1a4e9ef3966319a9b76af1d01"}, {0x68, 0x107, 0x1ff, "f8e55f2f6732b7dbf51d91572b2954adc023952d0fc9623272a809c6ac56b9ac194a9bc31f7154b1f6be2cf1958a9e3a3ff320232f7681ee1b02d358c84fc5a846e9e728cd0499380c05aa1de41fea978a49e7cb27"}, {0x60, 0x117, 0x2, "45179346b44f1d6ea183af651bd3bd9fd98ac105953bc82d0640042c8b11b50f2697b5961ea39b1f21305c21bf9b8e4a23eaeef53c8ced9593ca6878e140632de1e135768ca755ff797930ee"}, {0x40, 0x111, 0xffffffffffffffb6, "e042b052e3cee21d02e99fa256c284af632d88f0b351bc42213b7cc86cd2e47b0d46958fe07aa953434892"}, {0x110, 0x11f, 0x4, "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"}], 0x2a8}, 0x400}, {{&(0x7f00000037c0)=@nl=@unspec, 0x80, &(0x7f0000004a00)=[{&(0x7f0000003840)="3eb76ea2c61cea", 0x7}, {&(0x7f0000003880)="69e0482df0a23267831a89d77a430b0c4acafd30b43850a21c9eddc6921b49f0f0888a01a06c079b452d2db901653c6b0fe201b54d85d80c02d771fc471076772bde01e43c460b99726df833d97ff2905fd6a451f44fd694", 0x58}, {&(0x7f0000003900)="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", 0x1000}, {&(0x7f0000004900)="fc8c73642aba2772d6b098c097aea675e14ade101feea66d2b66fcc28d96792648bc8a3fd3d52988da85c3e8603a762841ce15110ca2425a846af522929182670cfce95ad9db8a0aa8ee58a0270680f200da8f7478350df3a12efa2fc1c12ede11fa2cbbaddde52d2b07a423061e0d1d6c93a241a5250f41f3f479ebf056a4703297e52fd10bd360a675f521b2ab9cce6cfe4cb1289930c51b794424b59c18779eb616522923fb31e560e6d02cd8d8ad9c651905a227e2f8f7488dc4508c68ab38b9f8c61e18f1ded1473fa3bb0440b05f0da31d7b4609a924fc09ca80e7f73258439d6a14dc234777eeb8", 0xeb}], 0x4, &(0x7f0000004a40)=[{0x108, 0x11d, 0xfffffffffffffffd, "ac2df4bc67fc8d09b9990d159d2e74369afe50341c882d8671a6e8762faa4593a319225153d609876381d00494e2f7fc789379b0a6acbd40cb32d3b43083142b09537029015cf7533a7d8b75818dc3c88d33c44cb7f5372f04797215a0c07df6668c94d9445540a019dda92491d79a68e70d13605d89f1991d6febd206c9277d6178402c5f75b76aa324d8fbb78a4fb9f41a67660191b378599245b220ae8d319325d86058abad667c5f3053faad3d00a841be5ea5c9c5c82c10ebdf793cae87c587e6ae5cf1f5863a2f555d10281d1cbaa1c9c4a4e5d3f6435e5652b91141c77478a41b285d9bfd879e474bc2dc85ae9a8b07e79b252f"}, {0x1010, 0x110, 0x0, "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"}, {0x40, 0x11b, 0x0, "271e4b1fa81689eabb81ccd5d1a54b571b0e44b05a5c795f9d774335e285a3601bec09c633d7bf8b28d21506881455b6"}, {0xe0, 0x0, 0x1000, "f16383402f24cf129cf2dfd696bb6cde6325390674af42491b14562d11b6ce315ae0ff9a72c3e8d5bd20127db55ee782b0479fdea39f7476dd89130dfd602939b7c2b1592a83bdd6702fd160f8ff7bcc95d508d4f981ea64e6c51174af9992b9026b6395102cfd5fe35da5920e79dd734299cb149c98dca169ae038475afd3f108cd96e83f7c8f9b7c467212f791879056d742b02dc88244bcd5f58d4a635d94d09528d3325a23e302ee5ea554827e409832e0071cb173873def5e5ae6340922f45aac433c79f8e09b70"}, {0x80, 0x10d, 0x0, "d98b3d3977b74dee9c140a241b8f42befc1e0ef65e8a53d852a0a73acd90fec98d104b690fc47773c7a14762115e9d33df3e76bd525dbad1bde31cdcacb98b7b14fec769abf2b20f358c6a6673f84338fdcbb0443c9089e5ca4e53539ded3e35a91c1c38a1b72ccc91e4c409c7bbe838"}, {0xb0, 0x3a, 0x3, "f76255c140c414a432fb3c335dfe3058b94e23d8fc4ecea42213e1539a62f082cabcb0897fd77b28c6784cbf615a08391c6c1808e77f14e55ad28e8d4d5d1047b711884a5b624d4b825fb1580f0985bbbabce3b2446c70cc77b8c05bcd77005c374e51c56a30bbd497625a529345060c64076581b4290e38f811b675d29385e7552f164a70a5239162c31789450da31fc3bb4be88609834f1023947c30e72591"}], 0x1368, 0x667a06135b5538c0}, 0xe3c}, {{&(0x7f0000005dc0)=@rc={0x1f, {0x3, 0xb9, 0x327, 0xffff, 0x9, 0x6}, 0x1000000000000}, 0x80, &(0x7f0000005f40)=[{&(0x7f0000005e40)="b299601d707f34dc6e9002623c0cbf4f5f47417c0aa0b6ef275d0e8335d9404e5922b3e2500f6042559fa6eb4d1d1c7192bd66e47d9d57cdce686ae8c5d8016fe8e3b7ceed1b0af3ba9d361c735ddf71fd10ed3d283780ab19beb4249daf24f19b63fd84985f3d16b9f0bbccb4b7e78a1e895c385ba29a4bbe3a816ed43aa486e60b22f38e83b8070800885091eb863eee5a315e7ed1cf7d11921539bab55a7b5db9347abf00e4a2bfe47fa6a1319550c2ead961bfb9f9474359d95efdad33af22b22ddf0a899c3c9e2bb019938e99b3d10693cdf8890a7a4a8326b930b1e61c88fd1f245942a594a798", 0xea}], 0x1, &(0x7f0000005f80)=[{0xd8, 0x101, 0x5, "4050a5253c516f55dcae5538f978baf90a700a558bf7fc54d5197dc33dd79a9527cd2379829b267dcc4e7e4c7e5637da95f48f42c7044851c5d70adc6a6d1df11586d40af7e709fcabbb4f51d0342337db57298ab18546957e637c83e7aa207ae0cd1a2846089c906ba0176ec8c0327ab9c16676671108c18bed599bb78035254f8c0aa79eb5c4936fa020d112f1a107d59451ebb59cd63014feb82a18065e26eb82e960c24eab298e3955e2106e13b11834bf00db4ec5c3398cd6a32431803a215beddbdb5097"}], 0xd8, 0x4}, 0x4}, {{&(0x7f0000006080)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x1, 0x0, 0x2, 0x4, {0xa, 0x4e21, 0x1f, @mcast2={0xff, 0x2, [], 0x1}, 0xffffffff}}}, 0x80, &(0x7f0000006700)=[{&(0x7f0000006100)="576f956dad7e99d4d58d7a6c67b9c582d1e79bbc90433f18142a194743e5dade9dccd4616c16c50ff2b5621d243967fa28b96ee93a371bba0e473bfecc8a6bb1c07aa7424e13b106ba0285f21773156bbbe76f597546e688d24b6c6e0ba4a1691616e4051ba0aebc3baa2aa944a950bb005fb044cbd330a9e8c385ea46e202d9477c4e9ad1448692e2a94d8902e2afe132dd38f76f3f5fa362ba569d62af3183e79be2e7f47931df3d8796dec20808ff3665d04e974b31c44d7eb500ec75e72a283aa0a8c9e0773814dd97a7044f9712cf33", 0xd2}, {&(0x7f0000006200)="190a8958d54411693f9b4cdef68b1d98a062f1219b2280a9797f5315e964b2a63e25f844129decbb8c2cd8163f5b249b1f7a5b8f479020b24190a86e954249f72c6777e1172e66d86915ed75a484147ac61ae07cb6", 0x55}, {&(0x7f0000006280)="33dad17e8eb0a460a15af521405975db1b4ed520838325d992427dddb061a73fcc6875d3a14f1c72b0098f63562bf753f548f3216ba3b5602a5380b6f1de5e4268c2e1be1e2c54ee7e9a436dd235be46512610f7ce077eb5e81f61c7bfebb0c8ce3b0cb90cb5b1e96c8be6cb5a9dd9915686ae9dfe3202125c2e4a96882e14409d33e113ae07ce460361d4474b07848f336f2da9206dff2602c8500c983bb48fbdc1776341c5e0bad5ce196c82dfb2925b3b74efb7e3e225335def9fda438ae1e79a539a05090e927cbf8ce5db815d712cd207b8a8f8fad2c558", 0xda}, {&(0x7f0000006380)="b744eeebb27ec5b9afba648da5d540d6496a23e1b861c94152a3b3ffb2e5397e8271129ac881c1256d6f4996f3b2e0ad03750f276dffb1cc880ff964b3c920f72c17db475399e9b8c373a38553092f0589516c489edf86472a", 0x59}, {&(0x7f0000006400)="8a202ea36339e3a663bbaf0e75f2533f72f16e9398ca1bf7a5854d9dbf5cea00b55a9560525f8797dc6a8b8d0b20887567f01f3a1bd60626af9458a7be7a875df3387f3dec855d22cca8ca9b1a59e6a25c88a215d368d39a824b41d44a29c5ecd361a3109083f6322dd4dcc0e9a97f1e44f2d5f9f9f55bc09fd69fc451aabd147a8c1a55ac4f2b2d3b953eea5622951cd99572bc9202949a284397cbd781a0ecf686f6f06b2262183c3334db06ef0ec8496911891ba735f9eed82766f0e2e95a0d57864d78ea2601cae607f9db1186350818bc6f9153c6827cd964cea01bf98de13756a402", 0xe5}, {&(0x7f0000006500)="f5b9a0ec53c7b6edc1a0a2d8c1650ac90397d3807200f71f983ea4ce65be4c19711e892e88f4", 0x26}, {&(0x7f0000006540)="5bdcb687a6857b684a7fcdd09c83197668b9390b4e0f4f0af62b7f57cc2b70014aa20f50b7a0acd562b32a40ab108e466108aa6dfdea7c7d46f3170a2b490d97f90dfdc7e393177db017149bec07bd0f46ccaf085906b1c61603452c00f2767db46b6ea410e2c6413c8353e5", 0x6c}, {&(0x7f00000065c0)="f028350663539db8e4a5248fdbe359d0065ca6800672e6b04928bc84c144dce98825a77808e00944c016d4375b24aa7adf50e7ef585a3d3b73a6f24cac61defb74ef34cb12ba1d22565bc5b7b04f8aa7b6c2a430dc70f3d0589cb95d065af7b0bff3ac6965075c49d5dea76a162dfed3a92a8b09a0c43b7f84a697228ca7a5fbbfb0bf87f8f93279a9f8b5b51699", 0x8e}, {&(0x7f0000006680)="ba5cac3e14e5a4af286ffb2980536fdb98906c0dc2ef0628f78e0212008ef609f3", 0x21}, {&(0x7f00000066c0)="5b6c19b952845f31642b302455", 0xd}], 0xa, 0x0, 0x0, 0xfcaf956bf4909f86}, 0xffff}], 0x8, 0x4) r4 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r4, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000f86000)='./control/file0\x00') rmdir(&(0x7f00000000c0)='./control\x00') ptrace$poke(0x5, r0, &(0x7f00000005c0), 0x7) r5 = syz_fuse_mount(&(0x7f0000000240)='./control\x00', 0x406000, 0x0, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000280)=ANY=[@ANYBLOB="5fbe7e51", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f00000002c0)=0x28) syz_fuseblk_mount(&(0x7f0000000140)='./control\x00', &(0x7f0000000180)='./control/file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) signalfd4(r5, &(0x7f0000000040)={0xa5}, 0x8, 0x1e45d644b88bddf2) close(r3) 2018/05/26 13:24:26 executing program 6: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000]}, 0x2c) 2018/05/26 13:24:26 executing program 7 (fault-call:9 fault-nth:53): r0 = getpid() sched_setattr(r0, &(0x7f00000000c0), 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}}) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) syz_fuse_mount(&(0x7f0000000240)='./control\x00', 0x406000, 0x0, 0x0, 0x0, 0x48000000) close(r1) 2018/05/26 13:24:26 executing program 1: r0 = socket$inet(0x2, 0x5, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vcan0\x00', 0x10) sendmsg(r0, &(0x7f0000000480)={&(0x7f0000000140)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000380)="f0", 0x1}], 0x1}, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000a00)={@multicast1=0xe0000001, @local={0xac, 0x14, 0x14, 0xaa}}, 0xc) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000040)="84", 0x1}], 0x6, &(0x7f0000000540)}, 0x0) 2018/05/26 13:24:26 executing program 4: r0 = getpid() sched_setattr(r0, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x0, 0x4}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x80003) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) symlink(&(0x7f0000000100)='./control/file0\x00', &(0x7f00000001c0)='./control/file0\x00') r2 = shmget$private(0x0, 0x3000, 0x100, &(0x7f0000012000/0x3000)=nil) shmctl$IPC_INFO(r2, 0x3, &(0x7f00000002c0)=""/194) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r3, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000f86000)='./control/file0\x00') rt_sigprocmask(0x2, &(0x7f0000000040)={0x3ff}, &(0x7f0000000080), 0x8) syz_fuse_mount(&(0x7f0000000240)='./control\x00', 0x406000, 0x0, 0x0, 0x0, 0x0) ioctl$SG_GET_KEEP_ORPHAN(r3, 0x2288, &(0x7f0000000200)) syz_fuseblk_mount(&(0x7f0000000140)='./control\x00', &(0x7f0000000180)='./control/file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) close(r1) sched_setattr(r0, &(0x7f00000003c0)={0x30, 0x0, 0x0, 0x7f, 0x0, 0x5, 0xfffffffffffffffa, 0x9}, 0x0) ioctl$VHOST_GET_FEATURES(r3, 0x8008af00, &(0x7f0000000280)) [ 1186.737596] FAULT_INJECTION: forcing a failure. [ 1186.737596] name failslab, interval 1, probability 0, space 0, times 0 [ 1186.748921] CPU: 1 PID: 3386 Comm: syz-executor7 Not tainted 4.17.0-rc6+ #68 [ 1186.756108] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1186.765460] Call Trace: [ 1186.765608] net_ratelimit: 21 callbacks suppressed [ 1186.765612] TCP: out of memory -- consider tuning tcp_mem [ 1186.768050] dump_stack+0x1b9/0x294 [ 1186.768078] ? dump_stack_print_info.cold.2+0x52/0x52 [ 1186.768095] ? lock_release+0xa10/0xa10 [ 1186.768115] ? check_same_owner+0x320/0x320 [ 1186.773339] TCP: out of memory -- consider tuning tcp_mem [ 1186.778557] should_fail.cold.4+0xa/0x1a [ 1186.778578] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1186.778598] ? kasan_check_write+0x14/0x20 [ 1186.778615] ? __mutex_lock+0x7d9/0x17f0 [ 1186.778631] ? graph_lock+0x170/0x170 [ 1186.822388] ? find_held_lock+0x36/0x1c0 [ 1186.826470] ? __lock_is_held+0xb5/0x140 [ 1186.830588] ? check_same_owner+0x320/0x320 2018/05/26 13:24:27 executing program 4: r0 = getpid() sched_setattr(r0, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x0, 0x4}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) mmap(&(0x7f0000011000/0x1000)=nil, 0x1000, 0xfffffffffffffffe, 0x3e, r1, 0x0) r2 = userfaultfd(0x8000000000) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r3, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000f86000)='./control/file0\x00') r4 = syz_fuse_mount(&(0x7f0000000240)='./control\x00', 0x406000, 0x0, 0x0, 0x0, 0x0) syz_fuseblk_mount(&(0x7f0000000140)='./control\x00', &(0x7f0000000180)='./control/file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) close(r4) 2018/05/26 13:24:27 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x88030000000000, 0x0, 0x0, 0x0, 0xc00]}, 0x2c) [ 1186.835244] ? find_held_lock+0x36/0x1c0 [ 1186.839311] ? rcu_note_context_switch+0x710/0x710 [ 1186.844251] __should_failslab+0x124/0x180 [ 1186.848498] should_failslab+0x9/0x14 [ 1186.852312] kmem_cache_alloc+0x2af/0x760 [ 1186.856464] ? kasan_check_write+0x14/0x20 [ 1186.860714] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 1186.865649] ? lock_downgrade+0x8e0/0x8e0 [ 1186.869802] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 1186.874824] __kernfs_new_node+0xe7/0x580 [ 1186.878981] ? kernfs_dop_revalidate+0x3c0/0x3c0 [ 1186.883746] ? kasan_check_write+0x14/0x20 [ 1186.887987] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 1186.892927] ? __lock_is_held+0xb5/0x140 [ 1186.896996] ? wait_for_completion+0x870/0x870 [ 1186.901597] kernfs_new_node+0x80/0xf0 [ 1186.905495] __kernfs_create_file+0x4d/0x330 [ 1186.909912] sysfs_add_file_mode_ns+0x21a/0x560 [ 1186.914601] internal_create_group+0x282/0x970 [ 1186.919206] sysfs_create_groups+0x9b/0x150 [ 1186.923537] device_add+0x84d/0x16d0 [ 1186.927262] ? device_private_init+0x230/0x230 [ 1186.931848] ? kfree+0x1e9/0x260 [ 1186.935222] ? kfree_const+0x5e/0x70 [ 1186.938945] device_create_groups_vargs+0x1ff/0x270 [ 1186.943965] device_create_vargs+0x46/0x60 [ 1186.948210] bdi_register_va.part.10+0xbb/0x9b0 [ 1186.952882] ? cgwb_kill+0x630/0x630 [ 1186.956602] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1186.962136] ? bdi_init+0x416/0x510 [ 1186.965763] ? wb_init+0x9e0/0x9e0 [ 1186.969306] ? bdi_alloc_node+0x67/0xe0 [ 1186.973284] ? bdi_alloc_node+0x67/0xe0 [ 1186.977262] ? rcu_read_lock_sched_held+0x108/0x120 [ 1186.982286] ? kmem_cache_alloc_node_trace+0x34e/0x770 [ 1186.987570] ? _raw_spin_unlock+0x22/0x30 [ 1186.991724] bdi_register_va+0x68/0x80 [ 1186.995626] super_setup_bdi_name+0x123/0x220 [ 1187.000123] ? kill_block_super+0x100/0x100 [ 1187.004452] ? kmem_cache_alloc_trace+0x616/0x780 [ 1187.009299] ? match_wildcard+0x3c0/0x3c0 [ 1187.013450] ? trace_hardirqs_on+0xd/0x10 [ 1187.017609] fuse_fill_super+0xe6e/0x1e20 [ 1187.021764] ? fuse_get_root_inode+0x190/0x190 [ 1187.026353] ? __alloc_pages_slowpath+0x2db0/0x2db0 [ 1187.031379] ? kasan_check_read+0x11/0x20 [ 1187.035531] ? cap_capable+0x1f9/0x260 [ 1187.039427] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1187.044968] ? security_capable+0x99/0xc0 [ 1187.049125] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1187.054667] ? ns_capable_common+0x13f/0x170 [ 1187.059089] ? get_anon_bdev+0x2f0/0x2f0 [ 1187.063151] ? sget+0x113/0x150 [ 1187.066437] ? fuse_get_root_inode+0x190/0x190 [ 1187.071031] mount_nodev+0x6b/0x110 [ 1187.074669] fuse_mount+0x2c/0x40 [ 1187.078128] mount_fs+0xae/0x328 [ 1187.081502] vfs_kern_mount.part.34+0xd4/0x4d0 [ 1187.086087] ? may_umount+0xb0/0xb0 [ 1187.089717] ? _raw_read_unlock+0x22/0x30 [ 1187.093865] ? __get_fs_type+0x97/0xc0 [ 1187.097760] do_mount+0x564/0x3070 [ 1187.101311] ? copy_mount_string+0x40/0x40 [ 1187.105548] ? rcu_pm_notify+0xc0/0xc0 [ 1187.109440] ? copy_mount_options+0x5f/0x380 [ 1187.113848] ? rcu_read_lock_sched_held+0x108/0x120 [ 1187.118866] ? kmem_cache_alloc_trace+0x616/0x780 [ 1187.119029] TCP: out of memory -- consider tuning tcp_mem [ 1187.123710] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1187.123728] ? _copy_from_user+0xdf/0x150 [ 1187.123749] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1187.123764] ? copy_mount_options+0x285/0x380 [ 1187.123783] ksys_mount+0x12d/0x140 [ 1187.123799] __x64_sys_mount+0xbe/0x150 [ 1187.155156] TCP: out of memory -- consider tuning tcp_mem [ 1187.156544] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 1187.156564] do_syscall_64+0x1b1/0x800 [ 1187.156581] ? finish_task_switch+0x1ca/0x840 [ 1187.156598] ? syscall_return_slowpath+0x5c0/0x5c0 [ 1187.156615] ? syscall_return_slowpath+0x30f/0x5c0 [ 1187.156635] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 1187.156652] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1187.195541] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1187.200731] RIP: 0033:0x455a09 [ 1187.203921] RSP: 002b:00007f118944d808 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1187.211636] RAX: ffffffffffffffda RBX: 0000000000000016 RCX: 0000000000455a09 [ 1187.218904] RDX: 00000000004c1eb6 RSI: 0000000020000240 RDI: 00000000004de0c5 [ 1187.226167] RBP: 0000000000000000 R08: 00007f118944d820 R09: 0000000000000000 2018/05/26 13:24:27 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)="766574683100000000ffffffffffef00", 0x22b) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc8]}, 0x10) 2018/05/26 13:24:27 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty=0x18, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4002000000000000]}, 0x10) 2018/05/26 13:24:27 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty=0x18, [0x0, 0x0, 0x0, 0x0, 0x0, 0x8055]}, 0x10) 2018/05/26 13:24:27 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x4000000000000, 0x0, 0x0, 0x0, 0xc00]}, 0x2c) 2018/05/26 13:24:27 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)="766574683100000000ffffffffffef00", 0x22b) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, 0x10) 2018/05/26 13:24:27 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty=0x18, [0x0, 0x0, 0x0, 0x0, 0x0, 0x1100]}, 0x10) 2018/05/26 13:24:27 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x400000000000000, 0x0, 0x0, 0x0, 0xc00]}, 0x2c) [ 1187.233419] R10: 0000000048000000 R11: 0000000000000246 R12: 0000000000000000 [ 1187.240679] R13: 0000000020000240 R14: 0000000048000000 R15: 0000000000000000 [ 1187.527101] sctp: sctp_transport_update_pmtu: Reported pmtu 72 too low, using default minimum of 512 [ 1187.669576] sctp: sctp_transport_update_pmtu: Reported pmtu 72 too low, using default minimum of 512 2018/05/26 13:24:27 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty=0x18, [0x0, 0x0, 0x0, 0x0, 0x0, 0xe803]}, 0x10) 2018/05/26 13:24:27 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0xc000000, 0x0, 0x0, 0x0, 0xc00]}, 0x2c) 2018/05/26 13:24:27 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)="766574683100000000ffffffffffef00", 0x22b) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84477]}, 0x10) 2018/05/26 13:24:27 executing program 7 (fault-call:9 fault-nth:54): r0 = getpid() sched_setattr(r0, &(0x7f00000000c0), 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}}) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) syz_fuse_mount(&(0x7f0000000240)='./control\x00', 0x406000, 0x0, 0x0, 0x0, 0x48000000) close(r1) 2018/05/26 13:24:27 executing program 4: r0 = getpid() sched_setattr(r0, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x0, 0x4}, 0x0) socketpair(0x0, 0x80000, 0x6, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={&(0x7f0000011000/0x4000)=nil, 0x4000}) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r3, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000f86000)='./control/file0\x00') syz_fuse_mount(&(0x7f0000000240)='./control\x00', 0x406000, 0x0, 0x0, 0x0, 0x0) syz_fuseblk_mount(&(0x7f0000000140)='./control\x00', &(0x7f0000000180)='./control/file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) close(r2) 2018/05/26 13:24:27 executing program 6: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc000000]}, 0x2c) 2018/05/26 13:24:27 executing program 1: r0 = socket$inet(0x2, 0x5, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vcan0\x00', 0x10) sendmsg(r0, &(0x7f0000000480)={&(0x7f0000000140)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000380)="f0", 0x1}], 0x1}, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000a00)={@multicast1=0xe0000001, @local={0xac, 0x14, 0x14, 0xaa}}, 0xc) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000040)="84", 0x1}], 0x7ffff000, &(0x7f0000000540)}, 0x0) 2018/05/26 13:24:27 executing program 2: r0 = getpid() sched_setattr(r0, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x0, 0x4}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000f86000)='./control/file0\x00') rmdir(&(0x7f00000000c0)='./control\x00') syz_fuse_mount(&(0x7f0000000240)='./control\x00', 0x406000, 0x0, 0x0, 0x0, 0x0) syz_fuseblk_mount(&(0x7f0000000140)='./control\x00', &(0x7f0000000180)='./control/file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) close(r1) [ 1187.850790] FAULT_INJECTION: forcing a failure. [ 1187.850790] name failslab, interval 1, probability 0, space 0, times 0 [ 1187.862144] CPU: 1 PID: 3445 Comm: syz-executor7 Not tainted 4.17.0-rc6+ #68 [ 1187.869327] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1187.878682] Call Trace: [ 1187.881281] dump_stack+0x1b9/0x294 [ 1187.884924] ? dump_stack_print_info.cold.2+0x52/0x52 [ 1187.890130] should_fail.cold.4+0xa/0x1a [ 1187.894201] ? __kmalloc_track_caller+0x14a/0x760 [ 1187.899051] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1187.904162] ? device_create_groups_vargs+0x1ff/0x270 [ 1187.909359] ? device_create_vargs+0x46/0x60 [ 1187.913777] ? bdi_register_va.part.10+0xbb/0x9b0 [ 1187.918627] ? bdi_register_va+0x68/0x80 [ 1187.922691] ? super_setup_bdi_name+0x123/0x220 [ 1187.927365] ? fuse_fill_super+0xe6e/0x1e20 [ 1187.931692] ? mount_nodev+0x6b/0x110 [ 1187.935500] ? graph_lock+0x170/0x170 [ 1187.939304] ? ksys_mount+0x12d/0x140 [ 1187.943109] ? __x64_sys_mount+0xbe/0x150 [ 1187.947264] ? do_syscall_64+0x1b1/0x800 2018/05/26 13:24:28 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty=0x18, [0x0, 0x0, 0x0, 0x0, 0x0, 0x1f4]}, 0x10) 2018/05/26 13:24:28 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)="766574683100000000ffffffffffef00", 0x22b) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc8000000]}, 0x10) 2018/05/26 13:24:28 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x702, 0x0, 0x0, 0x0, 0xc00]}, 0x2c) 2018/05/26 13:24:28 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty=0x18, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000]}, 0x10) [ 1187.951330] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1187.956707] ? find_held_lock+0x36/0x1c0 [ 1187.960779] ? __lock_is_held+0xb5/0x140 [ 1187.964865] ? check_same_owner+0x320/0x320 [ 1187.969200] ? rcu_note_context_switch+0x710/0x710 [ 1187.974131] ? rcu_read_lock_sched_held+0x108/0x120 [ 1187.979151] __should_failslab+0x124/0x180 [ 1187.983395] should_failslab+0x9/0x14 [ 1187.987201] kmem_cache_alloc+0x2af/0x760 [ 1187.991361] ? memcpy+0x45/0x50 [ 1187.994653] ? kstrdup+0x59/0x70 [ 1187.998033] __kernfs_new_node+0xe7/0x580 [ 1188.002194] ? kernfs_dop_revalidate+0x3c0/0x3c0 [ 1188.006960] ? lock_downgrade+0x8e0/0x8e0 [ 1188.011127] ? kasan_check_read+0x11/0x20 [ 1188.015283] ? do_raw_spin_unlock+0x9e/0x2e0 [ 1188.019702] ? do_raw_spin_trylock+0x1b0/0x1b0 [ 1188.024297] kernfs_new_node+0x80/0xf0 [ 1188.028194] kernfs_create_link+0x33/0x180 [ 1188.032049] TCP: out of memory -- consider tuning tcp_mem [ 1188.032430] sysfs_do_create_link_sd.isra.2+0x90/0x130 [ 1188.032451] sysfs_create_link+0x65/0xc0 [ 1188.032469] device_add+0x7a0/0x16d0 [ 1188.032489] ? device_private_init+0x230/0x230 [ 1188.032503] ? kfree+0x1e9/0x260 [ 1188.032521] ? kfree_const+0x5e/0x70 [ 1188.062679] device_create_groups_vargs+0x1ff/0x270 [ 1188.067703] device_create_vargs+0x46/0x60 [ 1188.071947] bdi_register_va.part.10+0xbb/0x9b0 [ 1188.076621] ? cgwb_kill+0x630/0x630 [ 1188.080348] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1188.085886] ? bdi_init+0x416/0x510 [ 1188.089516] ? wb_init+0x9e0/0x9e0 [ 1188.093065] ? bdi_alloc_node+0x67/0xe0 [ 1188.097044] ? bdi_alloc_node+0x67/0xe0 [ 1188.101021] ? rcu_read_lock_sched_held+0x108/0x120 [ 1188.106047] ? kmem_cache_alloc_node_trace+0x34e/0x770 [ 1188.111330] ? _raw_spin_unlock+0x22/0x30 [ 1188.115489] bdi_register_va+0x68/0x80 [ 1188.119386] super_setup_bdi_name+0x123/0x220 [ 1188.123889] ? kill_block_super+0x100/0x100 [ 1188.128217] ? kmem_cache_alloc_trace+0x616/0x780 [ 1188.133066] ? match_wildcard+0x3c0/0x3c0 [ 1188.137221] ? trace_hardirqs_on+0xd/0x10 [ 1188.141379] fuse_fill_super+0xe6e/0x1e20 [ 1188.145539] ? fuse_get_root_inode+0x190/0x190 [ 1188.150134] ? __alloc_pages_slowpath+0x2db0/0x2db0 [ 1188.155156] ? kasan_check_read+0x11/0x20 [ 1188.159311] ? cap_capable+0x1f9/0x260 [ 1188.163209] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1188.168749] ? security_capable+0x99/0xc0 [ 1188.172906] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1188.178444] ? ns_capable_common+0x13f/0x170 [ 1188.182861] ? get_anon_bdev+0x2f0/0x2f0 [ 1188.186925] ? sget+0x113/0x150 [ 1188.190210] ? fuse_get_root_inode+0x190/0x190 [ 1188.194789] mount_nodev+0x6b/0x110 [ 1188.198415] fuse_mount+0x2c/0x40 [ 1188.201874] mount_fs+0xae/0x328 [ 1188.205254] vfs_kern_mount.part.34+0xd4/0x4d0 [ 1188.209842] ? may_umount+0xb0/0xb0 [ 1188.213470] ? _raw_read_unlock+0x22/0x30 [ 1188.217623] ? __get_fs_type+0x97/0xc0 [ 1188.221518] do_mount+0x564/0x3070 [ 1188.225066] ? copy_mount_string+0x40/0x40 [ 1188.229305] ? rcu_pm_notify+0xc0/0xc0 [ 1188.233206] ? copy_mount_options+0x5f/0x380 [ 1188.237616] ? rcu_read_lock_sched_held+0x108/0x120 [ 1188.242651] ? kmem_cache_alloc_trace+0x616/0x780 [ 1188.247511] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1188.253653] ? _copy_from_user+0xdf/0x150 [ 1188.257811] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1188.263355] ? copy_mount_options+0x285/0x380 [ 1188.267863] ksys_mount+0x12d/0x140 [ 1188.271497] __x64_sys_mount+0xbe/0x150 [ 1188.275480] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 1188.280507] do_syscall_64+0x1b1/0x800 [ 1188.284407] ? finish_task_switch+0x1ca/0x840 [ 1188.288914] ? syscall_return_slowpath+0x5c0/0x5c0 [ 1188.293852] ? syscall_return_slowpath+0x30f/0x5c0 [ 1188.298794] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 1188.304167] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1188.309022] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1188.314214] RIP: 0033:0x455a09 [ 1188.317402] RSP: 002b:00007f118944d808 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1188.325113] RAX: ffffffffffffffda RBX: 0000000000000016 RCX: 0000000000455a09 [ 1188.332366] RDX: 00000000004c1eb6 RSI: 0000000020000240 RDI: 00000000004de0c5 [ 1188.339617] RBP: 0000000000000000 R08: 00007f118944d820 R09: 0000000000000000 2018/05/26 13:24:28 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty=0x18, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000]}, 0x10) 2018/05/26 13:24:28 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)="766574683100000000ffffffffffef00", 0x22b) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83440800]}, 0x10) 2018/05/26 13:24:28 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xc00]}, 0x2c) 2018/05/26 13:24:28 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty=0x18, [0x0, 0x0, 0x0, 0x0, 0x0, 0xf4080b00]}, 0x10) [ 1188.346871] R10: 0000000048000000 R11: 0000000000000246 R12: 0000000000000000 [ 1188.354122] R13: 0000000020000240 R14: 0000000048000000 R15: 0000000000000000 [ 1188.361522] TCP: out of memory -- consider tuning tcp_mem 2018/05/26 13:24:29 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0xb00, 0x0, 0x0, 0x0, 0xc00]}, 0x2c) 2018/05/26 13:24:29 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty=0x18, [0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000]}, 0x10) 2018/05/26 13:24:29 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)="766574683100000000ffffffffffef00", 0x22b) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40020000]}, 0x10) 2018/05/26 13:24:29 executing program 7 (fault-call:9 fault-nth:55): r0 = getpid() sched_setattr(r0, &(0x7f00000000c0), 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}}) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) syz_fuse_mount(&(0x7f0000000240)='./control\x00', 0x406000, 0x0, 0x0, 0x0, 0x48000000) close(r1) 2018/05/26 13:24:29 executing program 6: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf00000000000000]}, 0x2c) 2018/05/26 13:24:29 executing program 4: r0 = getpid() sched_setattr(r0, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x0, 0x4}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) syz_fuse_mount(&(0x7f0000000240)='./control\x00', 0x406000, 0x0, 0x0, 0x0, 0x0) syz_fuseblk_mount(&(0x7f0000000140)='./control\x00', &(0x7f0000000180)='./control/file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) close(r1) 2018/05/26 13:24:29 executing program 1: r0 = socket$inet(0x2, 0x5, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vcan0\x00', 0x10) sendmsg(r0, &(0x7f0000000480)={&(0x7f0000000140)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000380)="f0", 0x1}], 0x1}, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000a00)={@multicast1=0xe0000001, @local={0xac, 0x14, 0x14, 0xaa}}, 0xc) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000040)="84", 0x1}], 0x20000041, &(0x7f0000000540)}, 0x0) 2018/05/26 13:24:29 executing program 2: r0 = getpid() sched_setattr(r0, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x0, 0x4}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000f86000)='./control/file0\x00') setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r2, 0x84, 0x79, &(0x7f0000000040)=0xffffffff, 0x4) rmdir(&(0x7f00000000c0)='./control\x00') syz_fuse_mount(&(0x7f0000000240)='./control\x00', 0x406000, 0x0, 0x0, 0x0, 0x0) syz_fuseblk_mount(&(0x7f0000000140)='./control\x00', &(0x7f0000000180)='./control/file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) close(r1) [ 1188.950328] FAULT_INJECTION: forcing a failure. [ 1188.950328] name failslab, interval 1, probability 0, space 0, times 0 [ 1188.961637] CPU: 1 PID: 3498 Comm: syz-executor7 Not tainted 4.17.0-rc6+ #68 [ 1188.968825] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1188.978180] Call Trace: [ 1188.980785] dump_stack+0x1b9/0x294 [ 1188.984429] ? dump_stack_print_info.cold.2+0x52/0x52 [ 1188.989631] ? __might_sleep+0x95/0x190 [ 1188.993613] should_fail.cold.4+0xa/0x1a 2018/05/26 13:24:29 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty=0x18, [0x0, 0x0, 0x0, 0x0, 0x0, 0xe8030000]}, 0x10) 2018/05/26 13:24:29 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0xa00000000000000, 0x0, 0x0, 0x0, 0xc00]}, 0x2c) [ 1188.997679] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1189.002792] ? mutex_trylock+0x2a0/0x2a0 [ 1189.006862] ? graph_lock+0x170/0x170 [ 1189.010670] ? __mutex_lock+0x7d9/0x17f0 [ 1189.014750] ? find_held_lock+0x36/0x1c0 [ 1189.018821] ? __lock_is_held+0xb5/0x140 [ 1189.022906] ? check_same_owner+0x320/0x320 [ 1189.027237] ? rcu_note_context_switch+0x710/0x710 [ 1189.032179] __should_failslab+0x124/0x180 [ 1189.036428] should_failslab+0x9/0x14 [ 1189.040237] __kmalloc_track_caller+0x2c4/0x760 [ 1189.044914] ? graph_lock+0x170/0x170 [ 1189.048717] ? graph_lock+0x170/0x170 [ 1189.052527] ? kstrdup_const+0x66/0x80 [ 1189.056423] kstrdup+0x39/0x70 [ 1189.059625] kstrdup_const+0x66/0x80 [ 1189.063351] __kernfs_new_node+0xa8/0x580 [ 1189.067510] ? kernfs_dop_revalidate+0x3c0/0x3c0 [ 1189.072279] ? lock_downgrade+0x8e0/0x8e0 [ 1189.076438] ? kasan_check_read+0x11/0x20 [ 1189.080593] ? do_raw_spin_unlock+0x9e/0x2e0 [ 1189.085032] ? do_raw_spin_trylock+0x1b0/0x1b0 [ 1189.089623] kernfs_new_node+0x80/0xf0 [ 1189.093523] kernfs_create_link+0x33/0x180 [ 1189.097769] sysfs_do_create_link_sd.isra.2+0x90/0x130 [ 1189.103064] sysfs_create_link+0x65/0xc0 [ 1189.107134] device_add+0x7a0/0x16d0 [ 1189.110862] ? device_private_init+0x230/0x230 [ 1189.115455] ? kfree+0x1e9/0x260 [ 1189.118828] ? kfree_const+0x5e/0x70 [ 1189.122548] device_create_groups_vargs+0x1ff/0x270 [ 1189.127574] device_create_vargs+0x46/0x60 [ 1189.131819] bdi_register_va.part.10+0xbb/0x9b0 [ 1189.136498] ? cgwb_kill+0x630/0x630 [ 1189.140224] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1189.145765] ? bdi_init+0x416/0x510 [ 1189.149391] ? wb_init+0x9e0/0x9e0 [ 1189.152950] ? bdi_alloc_node+0x67/0xe0 [ 1189.156933] ? bdi_alloc_node+0x67/0xe0 [ 1189.160915] ? rcu_read_lock_sched_held+0x108/0x120 [ 1189.165940] ? kmem_cache_alloc_node_trace+0x34e/0x770 [ 1189.171222] ? _raw_spin_unlock+0x22/0x30 [ 1189.175377] bdi_register_va+0x68/0x80 [ 1189.179272] super_setup_bdi_name+0x123/0x220 [ 1189.183771] ? kill_block_super+0x100/0x100 [ 1189.188099] ? kmem_cache_alloc_trace+0x616/0x780 [ 1189.192949] ? match_wildcard+0x3c0/0x3c0 [ 1189.197108] fuse_fill_super+0xe6e/0x1e20 [ 1189.197481] TCP: out of memory -- consider tuning tcp_mem [ 1189.201259] ? fuse_get_root_inode+0x190/0x190 [ 1189.201279] ? __alloc_pages_slowpath+0x2db0/0x2db0 [ 1189.201299] ? kasan_check_read+0x11/0x20 [ 1189.201317] ? cap_capable+0x1f9/0x260 [ 1189.201340] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1189.201358] ? security_capable+0x99/0xc0 [ 1189.234120] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1189.237618] TCP: out of memory -- consider tuning tcp_mem [ 1189.239657] ? ns_capable_common+0x13f/0x170 [ 1189.239676] ? get_anon_bdev+0x2f0/0x2f0 [ 1189.239690] ? sget+0x113/0x150 [ 1189.239709] ? fuse_get_root_inode+0x190/0x190 [ 1189.239725] mount_nodev+0x6b/0x110 [ 1189.239741] fuse_mount+0x2c/0x40 [ 1189.239755] mount_fs+0xae/0x328 [ 1189.239773] vfs_kern_mount.part.34+0xd4/0x4d0 [ 1189.276546] ? may_umount+0xb0/0xb0 [ 1189.280182] ? _raw_read_unlock+0x22/0x30 [ 1189.284335] ? __get_fs_type+0x97/0xc0 [ 1189.288236] do_mount+0x564/0x3070 [ 1189.291783] ? do_raw_spin_unlock+0x9e/0x2e0 [ 1189.296197] ? copy_mount_string+0x40/0x40 [ 1189.300437] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 1189.305456] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1189.310222] ? retint_kernel+0x10/0x10 [ 1189.314122] ? copy_mount_options+0x1f0/0x380 [ 1189.318620] ? copy_mount_options+0x202/0x380 [ 1189.323119] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1189.328657] ? copy_mount_options+0x285/0x380 [ 1189.333159] ksys_mount+0x12d/0x140 [ 1189.336791] __x64_sys_mount+0xbe/0x150 [ 1189.340770] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 1189.344041] TCP: out of memory -- consider tuning tcp_mem [ 1189.345789] do_syscall_64+0x1b1/0x800 [ 1189.345807] ? finish_task_switch+0x1ca/0x840 [ 1189.345825] ? syscall_return_slowpath+0x5c0/0x5c0 [ 1189.345842] ? syscall_return_slowpath+0x30f/0x5c0 [ 1189.345862] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 1189.345888] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1189.345906] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1189.384947] RIP: 0033:0x455a09 [ 1189.388139] RSP: 002b:00007f118944d808 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 2018/05/26 13:24:29 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)="766574683100000000ffffffffffef00", 0x22b) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x16]}, 0x10) 2018/05/26 13:24:29 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty=0x18, [0x0, 0x0, 0x0, 0x0, 0x0, 0xa]}, 0x10) 2018/05/26 13:24:29 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0xa000000, 0x0, 0x0, 0x0, 0xc00]}, 0x2c) 2018/05/26 13:24:29 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)="766574683100000000ffffffffffef00", 0x22b) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1100000000000000]}, 0x10) 2018/05/26 13:24:29 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty=0x18, [0x0, 0x0, 0x0, 0x0, 0x0, 0xf401000000000000]}, 0x10) 2018/05/26 13:24:29 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0xc00]}, 0x2c) [ 1189.395853] RAX: ffffffffffffffda RBX: 0000000000000016 RCX: 0000000000455a09 [ 1189.403131] RDX: 00000000004c1eb6 RSI: 0000000020000240 RDI: 00000000004de0c5 [ 1189.410406] RBP: 0000000000000000 R08: 00007f118944d820 R09: 0000000000000000 [ 1189.417680] R10: 0000000048000000 R11: 0000000000000246 R12: 0000000000000000 [ 1189.424955] R13: 0000000020000240 R14: 0000000048000000 R15: 0000000000000000 [ 1189.472044] TCP: out of memory -- consider tuning tcp_mem 2018/05/26 13:24:30 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty=0x18, [0x0, 0x0, 0x0, 0x0, 0x0, 0x14280000000000]}, 0x10) 2018/05/26 13:24:30 executing program 6: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000]}, 0x2c) 2018/05/26 13:24:30 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x7020000, 0x0, 0x0, 0x0, 0xc00]}, 0x2c) 2018/05/26 13:24:30 executing program 7 (fault-call:9 fault-nth:56): r0 = getpid() sched_setattr(r0, &(0x7f00000000c0), 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}}) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) syz_fuse_mount(&(0x7f0000000240)='./control\x00', 0x406000, 0x0, 0x0, 0x0, 0x48000000) close(r1) 2018/05/26 13:24:30 executing program 4: r0 = getpid() sched_setattr(r0, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x0, 0x4}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000280)={{{@in=@broadcast, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@loopback}}, &(0x7f0000000100)=0xe8) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f00000001c0)={@mcast2={0xff, 0x2, [], 0x1}, 0x7f, r3}) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) unlink(&(0x7f0000f86000)='./control/file0\x00') syz_fuse_mount(&(0x7f0000000240)='./control\x00', 0x406000, 0x0, 0x0, 0x0, 0x0) syz_fuseblk_mount(&(0x7f0000000140)='./control\x00', &(0x7f0000000180)='./control/file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) close(r1) 2018/05/26 13:24:30 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)="766574683100000000ffffffffffef00", 0x22b) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88440800]}, 0x10) 2018/05/26 13:24:30 executing program 1: r0 = socket$inet(0x2, 0x5, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vcan0\x00', 0x10) sendmsg(r0, &(0x7f0000000480)={&(0x7f0000000140)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000380)="f0", 0x1}], 0x1}, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000a00)={@multicast1=0xe0000001, @local={0xac, 0x14, 0x14, 0xaa}}, 0xc) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000040)="84", 0x1}], 0x1300, &(0x7f0000000540)}, 0x0) 2018/05/26 13:24:30 executing program 2: r0 = getpid() sched_setattr(r0, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x0, 0x4}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) ioctl$KVM_HAS_DEVICE_ATTR(r2, 0x4018aee3, &(0x7f00000001c0)={0x0, 0x7f, 0x5, &(0x7f0000000100)=0x5}) bind$unix(r2, &(0x7f0000000040)=@abs={0x1, 0x0, 0x4e24}, 0x6e) sched_getparam(r0, &(0x7f0000000200)) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000f86000)='./control/file0\x00') rmdir(&(0x7f00000000c0)='./control\x00') syz_fuse_mount(&(0x7f0000000240)='./control\x00', 0x406000, 0x0, 0x0, 0x0, 0x0) syz_fuseblk_mount(&(0x7f0000000140)='./control\x00', &(0x7f0000000180)='./control/file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) close(r1) [ 1190.051631] FAULT_INJECTION: forcing a failure. [ 1190.051631] name failslab, interval 1, probability 0, space 0, times 0 [ 1190.062981] CPU: 1 PID: 3563 Comm: syz-executor7 Not tainted 4.17.0-rc6+ #68 [ 1190.070175] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1190.079528] Call Trace: [ 1190.082125] dump_stack+0x1b9/0x294 [ 1190.085765] ? dump_stack_print_info.cold.2+0x52/0x52 [ 1190.090968] should_fail.cold.4+0xa/0x1a [ 1190.095037] ? __kmalloc_track_caller+0x14a/0x760 2018/05/26 13:24:30 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)="766574683100000000ffffffffffef00", 0x22b) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4002]}, 0x10) 2018/05/26 13:24:30 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty=0x18, [0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000]}, 0x10) [ 1190.099894] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1190.105007] ? device_create_groups_vargs+0x1ff/0x270 [ 1190.110200] ? device_create_vargs+0x46/0x60 [ 1190.114612] ? bdi_register_va.part.10+0xbb/0x9b0 [ 1190.119464] ? bdi_register_va+0x68/0x80 [ 1190.123532] ? super_setup_bdi_name+0x123/0x220 [ 1190.128209] ? fuse_fill_super+0xe6e/0x1e20 [ 1190.132540] ? mount_nodev+0x6b/0x110 [ 1190.136352] ? graph_lock+0x170/0x170 [ 1190.140159] ? ksys_mount+0x12d/0x140 [ 1190.143967] ? __x64_sys_mount+0xbe/0x150 [ 1190.148116] ? do_syscall_64+0x1b1/0x800 2018/05/26 13:24:30 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty=0x18, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x10) [ 1190.152187] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1190.157564] ? find_held_lock+0x36/0x1c0 [ 1190.161638] ? __lock_is_held+0xb5/0x140 [ 1190.165720] ? check_same_owner+0x320/0x320 [ 1190.170056] ? rcu_note_context_switch+0x710/0x710 [ 1190.174990] ? rcu_read_lock_sched_held+0x108/0x120 [ 1190.180017] __should_failslab+0x124/0x180 [ 1190.184258] should_failslab+0x9/0x14 [ 1190.188066] kmem_cache_alloc+0x2af/0x760 [ 1190.192216] ? memcpy+0x45/0x50 [ 1190.195502] ? kstrdup+0x59/0x70 [ 1190.198878] __kernfs_new_node+0xe7/0x580 [ 1190.203035] ? kernfs_dop_revalidate+0x3c0/0x3c0 [ 1190.207800] ? lock_downgrade+0x8e0/0x8e0 [ 1190.211962] ? kasan_check_read+0x11/0x20 [ 1190.216115] ? do_raw_spin_unlock+0x9e/0x2e0 [ 1190.220529] ? do_raw_spin_trylock+0x1b0/0x1b0 [ 1190.225119] kernfs_new_node+0x80/0xf0 [ 1190.229016] kernfs_create_link+0x33/0x180 [ 1190.233258] sysfs_do_create_link_sd.isra.2+0x90/0x130 [ 1190.238541] sysfs_create_link+0x65/0xc0 [ 1190.242619] device_add+0x7a0/0x16d0 [ 1190.246353] ? device_private_init+0x230/0x230 [ 1190.251581] ? kfree+0x1e9/0x260 [ 1190.254952] ? kfree_const+0x5e/0x70 [ 1190.258677] device_create_groups_vargs+0x1ff/0x270 [ 1190.263694] device_create_vargs+0x46/0x60 [ 1190.267936] bdi_register_va.part.10+0xbb/0x9b0 [ 1190.272617] ? cgwb_kill+0x630/0x630 [ 1190.276340] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1190.281880] ? bdi_init+0x416/0x510 [ 1190.285506] ? wb_init+0x9e0/0x9e0 [ 1190.289048] ? bdi_alloc_node+0x67/0xe0 [ 1190.293025] ? bdi_alloc_node+0x67/0xe0 [ 1190.297003] ? rcu_read_lock_sched_held+0x108/0x120 [ 1190.302026] ? kmem_cache_alloc_node_trace+0x34e/0x770 [ 1190.307310] ? _raw_spin_unlock+0x22/0x30 [ 1190.311464] bdi_register_va+0x68/0x80 [ 1190.315358] super_setup_bdi_name+0x123/0x220 [ 1190.319856] ? kill_block_super+0x100/0x100 [ 1190.324182] ? kmem_cache_alloc_trace+0x616/0x780 [ 1190.329026] ? match_wildcard+0x3c0/0x3c0 [ 1190.333179] ? trace_hardirqs_on+0xd/0x10 [ 1190.337338] fuse_fill_super+0xe6e/0x1e20 [ 1190.341501] ? fuse_get_root_inode+0x190/0x190 [ 1190.346088] ? __alloc_pages_slowpath+0x2db0/0x2db0 [ 1190.351111] ? kasan_check_read+0x11/0x20 [ 1190.355273] ? cap_capable+0x1f9/0x260 [ 1190.359173] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1190.364722] ? security_capable+0x99/0xc0 [ 1190.368883] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1190.374424] ? ns_capable_common+0x13f/0x170 [ 1190.378838] ? get_anon_bdev+0x2f0/0x2f0 [ 1190.382905] ? sget+0x113/0x150 [ 1190.386196] ? fuse_get_root_inode+0x190/0x190 [ 1190.390782] mount_nodev+0x6b/0x110 [ 1190.394417] fuse_mount+0x2c/0x40 [ 1190.397872] mount_fs+0xae/0x328 [ 1190.401248] vfs_kern_mount.part.34+0xd4/0x4d0 [ 1190.405839] ? may_umount+0xb0/0xb0 [ 1190.409469] ? _raw_read_unlock+0x22/0x30 [ 1190.413615] ? __get_fs_type+0x97/0xc0 [ 1190.417512] do_mount+0x564/0x3070 [ 1190.421058] ? copy_mount_string+0x40/0x40 [ 1190.425296] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1190.430059] ? retint_kernel+0x10/0x10 [ 1190.433956] ? copy_mount_options+0x1f0/0x380 [ 1190.438458] ? __sanitizer_cov_trace_pc+0x48/0x50 [ 1190.443300] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1190.448835] ? copy_mount_options+0x285/0x380 [ 1190.453337] ksys_mount+0x12d/0x140 [ 1190.456970] __x64_sys_mount+0xbe/0x150 [ 1190.460949] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 1190.465972] do_syscall_64+0x1b1/0x800 [ 1190.469865] ? finish_task_switch+0x1ca/0x840 [ 1190.474366] ? syscall_return_slowpath+0x5c0/0x5c0 [ 1190.479297] ? syscall_return_slowpath+0x30f/0x5c0 [ 1190.484236] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 1190.489607] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1190.494461] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1190.499653] RIP: 0033:0x455a09 2018/05/26 13:24:30 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0xc00]}, 0x2c) 2018/05/26 13:24:30 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty=0x18, [0x0, 0x0, 0x0, 0x0, 0x0, 0x12]}, 0x10) 2018/05/26 13:24:30 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty=0x18, [0x0, 0x0, 0x0, 0x0, 0x0, 0x1200]}, 0x10) 2018/05/26 13:24:30 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0xc8030000000000, 0x0, 0x0, 0x0, 0xc00]}, 0x2c) 2018/05/26 13:24:30 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty=0x18, [0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000]}, 0x10) [ 1190.502844] RSP: 002b:00007f118944d808 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1190.510555] RAX: ffffffffffffffda RBX: 0000000000000016 RCX: 0000000000455a09 [ 1190.517822] RDX: 00000000004c1eb6 RSI: 0000000020000240 RDI: 00000000004de0c5 [ 1190.525087] RBP: 0000000000000000 R08: 00007f118944d820 R09: 0000000000000000 [ 1190.532357] R10: 0000000048000000 R11: 0000000000000246 R12: 0000000000000000 [ 1190.539621] R13: 0000000020000240 R14: 0000000048000000 R15: 0000000000000000 2018/05/26 13:24:31 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x38800, 0x0, 0x0, 0x0, 0xc00]}, 0x2c) 2018/05/26 13:24:31 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty=0x18, [0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]}, 0x10) 2018/05/26 13:24:31 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)="766574683100000000ffffffffffef00", 0x22b) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500]}, 0x10) 2018/05/26 13:24:31 executing program 7 (fault-call:9 fault-nth:57): r0 = getpid() sched_setattr(r0, &(0x7f00000000c0), 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}}) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) syz_fuse_mount(&(0x7f0000000240)='./control\x00', 0x406000, 0x0, 0x0, 0x0, 0x48000000) close(r1) 2018/05/26 13:24:31 executing program 6: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000]}, 0x2c) 2018/05/26 13:24:31 executing program 4: r0 = getpid() sched_setattr(r0, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x0, 0x4}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) unlink(&(0x7f0000f86000)='./control/file0\x00') setsockopt$inet6_icmp_ICMP_FILTER(r2, 0x1, 0x1, &(0x7f0000000040)={0x497b}, 0x4) syz_fuse_mount(&(0x7f0000000240)='./control\x00', 0x406000, 0x0, 0x0, 0x0, 0x0) syz_fuseblk_mount(&(0x7f0000000140)='./control\x00', &(0x7f0000000180)='./control/file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_AUTH_MAGIC(r2, 0x40046411, &(0x7f0000000080)=0x1) close(r1) 2018/05/26 13:24:31 executing program 1: r0 = socket$inet(0x2, 0x5, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vcan0\x00', 0x10) sendmsg(r0, &(0x7f0000000480)={&(0x7f0000000140)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000380)="f0", 0x1}], 0x1}, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000a00)={@multicast1=0xe0000001, @local={0xac, 0x14, 0x14, 0xaa}}, 0xc) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000040)="84", 0x1}], 0x50, &(0x7f0000000540)}, 0x0) 2018/05/26 13:24:31 executing program 2: r0 = getpid() sched_setattr(r0, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x0, 0x4}, 0x0) pipe(&(0x7f0000000040)) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000f86000)='./control/file0\x00') rmdir(&(0x7f00000000c0)='./control\x00') syz_fuse_mount(&(0x7f0000000240)='./control\x00', 0x406000, 0x0, 0x0, 0x0, 0x0) syz_fuseblk_mount(&(0x7f0000000140)='./control\x00', &(0x7f0000000180)='./control/file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) close(r1) 2018/05/26 13:24:31 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty=0x18, [0x0, 0x0, 0x0, 0x0, 0x0, 0x120000]}, 0x10) [ 1191.167385] FAULT_INJECTION: forcing a failure. [ 1191.167385] name failslab, interval 1, probability 0, space 0, times 0 [ 1191.178785] CPU: 1 PID: 3634 Comm: syz-executor7 Not tainted 4.17.0-rc6+ #68 [ 1191.185975] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1191.195335] Call Trace: [ 1191.197947] dump_stack+0x1b9/0x294 [ 1191.201590] ? dump_stack_print_info.cold.2+0x52/0x52 [ 1191.206789] ? __mutex_lock+0x7d9/0x17f0 [ 1191.210864] should_fail.cold.4+0xa/0x1a [ 1191.214935] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1191.220045] ? kasan_kmalloc+0xc4/0xe0 [ 1191.223946] ? graph_lock+0x170/0x170 [ 1191.227764] ? find_held_lock+0x36/0x1c0 [ 1191.231833] ? __lock_is_held+0xb5/0x140 [ 1191.235913] ? check_same_owner+0x320/0x320 [ 1191.240244] ? kasan_check_write+0x14/0x20 [ 1191.244490] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 1191.249434] ? rcu_note_context_switch+0x710/0x710 [ 1191.254377] __should_failslab+0x124/0x180 [ 1191.258621] should_failslab+0x9/0x14 [ 1191.262427] kmem_cache_alloc+0x2af/0x760 [ 1191.266581] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 1191.271525] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 1191.276553] __kernfs_new_node+0xe7/0x580 [ 1191.280716] ? kernfs_dop_revalidate+0x3c0/0x3c0 [ 1191.285486] ? mutex_unlock+0xd/0x10 [ 1191.289205] ? kernfs_activate+0x20e/0x2a0 [ 1191.293449] ? kernfs_walk_and_get_ns+0x320/0x320 [ 1191.298305] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1191.303846] ? kernfs_link_sibling+0x1d2/0x3b0 [ 1191.308443] kernfs_new_node+0x80/0xf0 [ 1191.312351] __kernfs_create_file+0x4d/0x330 [ 1191.316776] sysfs_add_file_mode_ns+0x21a/0x560 [ 1191.321460] internal_create_group+0x282/0x970 [ 1191.326063] sysfs_create_groups+0x9b/0x150 [ 1191.330398] device_add+0x84d/0x16d0 [ 1191.334129] ? device_private_init+0x230/0x230 [ 1191.338712] ? kfree+0x1e9/0x260 [ 1191.342085] ? kfree_const+0x5e/0x70 [ 1191.345810] device_create_groups_vargs+0x1ff/0x270 [ 1191.350831] device_create_vargs+0x46/0x60 [ 1191.355076] bdi_register_va.part.10+0xbb/0x9b0 [ 1191.359752] ? cgwb_kill+0x630/0x630 [ 1191.363474] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1191.369011] ? bdi_init+0x416/0x510 [ 1191.372650] ? wb_init+0x9e0/0x9e0 [ 1191.376193] ? bdi_alloc_node+0x67/0xe0 [ 1191.380167] ? bdi_alloc_node+0x67/0xe0 [ 1191.384139] ? rcu_read_lock_sched_held+0x108/0x120 [ 1191.389161] ? kmem_cache_alloc_node_trace+0x34e/0x770 [ 1191.394445] ? _raw_spin_unlock+0x22/0x30 [ 1191.398601] bdi_register_va+0x68/0x80 [ 1191.402493] super_setup_bdi_name+0x123/0x220 [ 1191.406994] ? kill_block_super+0x100/0x100 [ 1191.411428] ? kmem_cache_alloc_trace+0x616/0x780 [ 1191.416277] ? match_wildcard+0x3c0/0x3c0 [ 1191.420443] ? trace_hardirqs_on+0xd/0x10 [ 1191.424600] fuse_fill_super+0xe6e/0x1e20 [ 1191.428764] ? fuse_get_root_inode+0x190/0x190 [ 1191.433352] ? __alloc_pages_slowpath+0x2db0/0x2db0 [ 1191.438380] ? cap_capable+0x1f9/0x260 [ 1191.442283] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1191.447829] ? security_capable+0x99/0xc0 [ 1191.451994] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1191.457533] ? ns_capable_common+0x13f/0x170 [ 1191.461946] ? get_anon_bdev+0x2f0/0x2f0 [ 1191.466004] ? sget+0x113/0x150 [ 1191.469290] ? fuse_get_root_inode+0x190/0x190 [ 1191.473876] mount_nodev+0x6b/0x110 [ 1191.477501] fuse_mount+0x2c/0x40 [ 1191.480951] mount_fs+0xae/0x328 [ 1191.484326] vfs_kern_mount.part.34+0xd4/0x4d0 [ 1191.488914] ? may_umount+0xb0/0xb0 [ 1191.492546] ? _raw_read_unlock+0x22/0x30 [ 1191.496695] ? __get_fs_type+0x97/0xc0 [ 1191.500594] do_mount+0x564/0x3070 [ 1191.504143] ? copy_mount_string+0x40/0x40 [ 1191.508380] ? rcu_pm_notify+0xc0/0xc0 [ 1191.512285] ? copy_mount_options+0x5f/0x380 [ 1191.516697] ? rcu_read_lock_sched_held+0x108/0x120 [ 1191.521726] ? kmem_cache_alloc_trace+0x616/0x780 [ 1191.526577] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1191.532118] ? _copy_from_user+0xdf/0x150 [ 1191.536274] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1191.541816] ? copy_mount_options+0x285/0x380 [ 1191.546319] ksys_mount+0x12d/0x140 [ 1191.549950] __x64_sys_mount+0xbe/0x150 [ 1191.553962] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 1191.558996] do_syscall_64+0x1b1/0x800 [ 1191.562890] ? finish_task_switch+0x1ca/0x840 [ 1191.567391] ? syscall_return_slowpath+0x5c0/0x5c0 [ 1191.572327] ? syscall_return_slowpath+0x30f/0x5c0 [ 1191.577267] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 1191.582638] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1191.587491] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1191.592680] RIP: 0033:0x455a09 [ 1191.595867] RSP: 002b:00007f118944d808 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1191.603571] RAX: ffffffffffffffda RBX: 0000000000000016 RCX: 0000000000455a09 [ 1191.610841] RDX: 00000000004c1eb6 RSI: 0000000020000240 RDI: 00000000004de0c5 2018/05/26 13:24:31 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)="766574683100000000ffffffffffef00", 0x22b) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}, 0x10) 2018/05/26 13:24:31 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0xd00000000000000, 0x0, 0x0, 0x0, 0xc00]}, 0x2c) 2018/05/26 13:24:31 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty=0x18, [0x0, 0x0, 0x0, 0x0, 0x0, 0xa00000000000000]}, 0x10) 2018/05/26 13:24:31 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)="766574683100000000ffffffffffef00", 0x22b) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000000000]}, 0x10) 2018/05/26 13:24:31 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty=0x18, [0x0, 0x0, 0x0, 0x0, 0x0, 0xf4010000]}, 0x10) 2018/05/26 13:24:31 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0xc00]}, 0x2c) 2018/05/26 13:24:31 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)="766574683100000000ffffffffffef00", 0x22b) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000]}, 0x10) 2018/05/26 13:24:31 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty=0x18, [0x0, 0x0, 0x0, 0x0, 0x0, 0x5580]}, 0x10) [ 1191.618106] RBP: 0000000000000000 R08: 00007f118944d820 R09: 0000000000000000 [ 1191.625364] R10: 0000000048000000 R11: 0000000000000246 R12: 0000000000000000 [ 1191.632625] R13: 0000000020000240 R14: 0000000048000000 R15: 0000000000000000 2018/05/26 13:24:32 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0xc00]}, 0x2c) 2018/05/26 13:24:32 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)="766574683100000000ffffffffffef00", 0x22b) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x240]}, 0x10) 2018/05/26 13:24:32 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty=0x18, [0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff]}, 0x10) 2018/05/26 13:24:32 executing program 7 (fault-call:9 fault-nth:58): r0 = getpid() sched_setattr(r0, &(0x7f00000000c0), 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}}) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) syz_fuse_mount(&(0x7f0000000240)='./control\x00', 0x406000, 0x0, 0x0, 0x0, 0x48000000) close(r1) 2018/05/26 13:24:32 executing program 6: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00300]}, 0x2c) 2018/05/26 13:24:32 executing program 4: r0 = getpid() sched_setattr(r0, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x0, 0x4}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) getsockopt$inet_sctp_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000040)={0x0, 0x8001, 0x0, 0x1}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f00000001c0)={r3, 0x42, "3b237263684186d0b510fb3197fee2c85cbf36c5df5bac8640740a5c32d614c10ff2b30cd097f2e0b02dc25726ac0738110340289027512826f2b020b05dc4423da4"}, &(0x7f0000000100)=0x4a) unlink(&(0x7f0000f86000)='./control/file0\x00') syz_fuse_mount(&(0x7f0000000240)='./control\x00', 0x406000, 0x0, 0x0, 0x0, 0x0) syz_fuseblk_mount(&(0x7f0000000140)='./control\x00', &(0x7f0000000180)='./control/file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) close(r1) 2018/05/26 13:24:32 executing program 1: r0 = socket$inet(0x2, 0x5, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vcan0\x00', 0x10) sendmsg(r0, &(0x7f0000000480)={&(0x7f0000000140)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000380)="f0", 0x1}], 0x1}, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000a00)={@multicast1=0xe0000001, @local={0xac, 0x14, 0x14, 0xaa}}, 0xc) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000040)="84", 0x1}], 0x3, &(0x7f0000000540)}, 0x0) 2018/05/26 13:24:32 executing program 2: r0 = getpid() sched_setattr(r0, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x0, 0x4}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000ffb000/0x2000)=nil, 0x2000}, 0x1}) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000f86000)='./control/file0\x00') rmdir(&(0x7f00000000c0)='./control\x00') syz_fuse_mount(&(0x7f0000000240)='./control\x00', 0xb001, 0x0, 0x0, 0x0, 0x0) syz_fuseblk_mount(&(0x7f0000000140)='./control\x00', &(0x7f0000000180)='./control/file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) close(r1) 2018/05/26 13:24:32 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty=0x18, [0x0, 0x0, 0x0, 0x0, 0x0, 0xe803000000000000]}, 0x10) [ 1192.269091] FAULT_INJECTION: forcing a failure. [ 1192.269091] name failslab, interval 1, probability 0, space 0, times 0 [ 1192.280448] CPU: 1 PID: 3698 Comm: syz-executor7 Not tainted 4.17.0-rc6+ #68 [ 1192.287637] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1192.296990] Call Trace: [ 1192.299585] dump_stack+0x1b9/0x294 [ 1192.303224] ? dump_stack_print_info.cold.2+0x52/0x52 [ 1192.308419] ? __mutex_lock+0x7d9/0x17f0 [ 1192.312496] should_fail.cold.4+0xa/0x1a 2018/05/26 13:24:32 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)="766574683100000000ffffffffffef00", 0x22b) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f44080000000000]}, 0x10) [ 1192.316568] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1192.321684] ? kasan_kmalloc+0xc4/0xe0 [ 1192.325581] ? graph_lock+0x170/0x170 [ 1192.329402] ? find_held_lock+0x36/0x1c0 [ 1192.333473] ? __lock_is_held+0xb5/0x140 [ 1192.337552] ? check_same_owner+0x320/0x320 [ 1192.341882] ? kasan_check_write+0x14/0x20 [ 1192.346128] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 1192.351067] ? rcu_note_context_switch+0x710/0x710 [ 1192.356008] __should_failslab+0x124/0x180 [ 1192.360255] should_failslab+0x9/0x14 [ 1192.364069] kmem_cache_alloc+0x2af/0x760 [ 1192.368229] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 1192.373175] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 1192.378210] __kernfs_new_node+0xe7/0x580 [ 1192.382373] ? kernfs_dop_revalidate+0x3c0/0x3c0 [ 1192.387137] ? mutex_unlock+0xd/0x10 [ 1192.390855] ? kernfs_activate+0x20e/0x2a0 [ 1192.395097] ? kernfs_walk_and_get_ns+0x320/0x320 [ 1192.399950] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1192.405489] ? kernfs_link_sibling+0x1d2/0x3b0 [ 1192.410082] kernfs_new_node+0x80/0xf0 [ 1192.413976] __kernfs_create_file+0x4d/0x330 [ 1192.416042] net_ratelimit: 12 callbacks suppressed [ 1192.416046] TCP: out of memory -- consider tuning tcp_mem [ 1192.418389] sysfs_add_file_mode_ns+0x21a/0x560 [ 1192.418414] internal_create_group+0x282/0x970 [ 1192.418440] sysfs_create_groups+0x9b/0x150 [ 1192.418460] device_add+0x84d/0x16d0 [ 1192.418483] ? device_private_init+0x230/0x230 [ 1192.450742] ? kfree+0x1e9/0x260 [ 1192.454118] ? kfree_const+0x5e/0x70 [ 1192.457846] device_create_groups_vargs+0x1ff/0x270 [ 1192.462866] device_create_vargs+0x46/0x60 [ 1192.467107] bdi_register_va.part.10+0xbb/0x9b0 [ 1192.471784] ? cgwb_kill+0x630/0x630 [ 1192.475509] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1192.481050] ? bdi_init+0x416/0x510 [ 1192.484674] ? wb_init+0x9e0/0x9e0 [ 1192.488222] ? bdi_alloc_node+0x67/0xe0 [ 1192.492202] ? bdi_alloc_node+0x67/0xe0 [ 1192.496181] ? rcu_read_lock_sched_held+0x108/0x120 [ 1192.501203] ? kmem_cache_alloc_node_trace+0x34e/0x770 [ 1192.506486] ? _raw_spin_unlock+0x22/0x30 [ 1192.510649] bdi_register_va+0x68/0x80 [ 1192.514543] super_setup_bdi_name+0x123/0x220 [ 1192.519042] ? kill_block_super+0x100/0x100 [ 1192.523371] ? kmem_cache_alloc_trace+0x616/0x780 [ 1192.528215] ? match_wildcard+0x3c0/0x3c0 [ 1192.532367] ? trace_hardirqs_on+0xd/0x10 [ 1192.536525] fuse_fill_super+0xe6e/0x1e20 [ 1192.540685] ? fuse_get_root_inode+0x190/0x190 [ 1192.545275] ? __alloc_pages_slowpath+0x2db0/0x2db0 [ 1192.550299] ? kasan_check_read+0x11/0x20 [ 1192.554451] ? cap_capable+0x1f9/0x260 [ 1192.558350] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1192.563892] ? security_capable+0x99/0xc0 [ 1192.568046] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1192.573586] ? ns_capable_common+0x13f/0x170 [ 1192.577999] ? get_anon_bdev+0x2f0/0x2f0 [ 1192.582067] ? sget+0x113/0x150 [ 1192.585354] ? fuse_get_root_inode+0x190/0x190 [ 1192.589937] mount_nodev+0x6b/0x110 [ 1192.593495] TCP: out of memory -- consider tuning tcp_mem [ 1192.593564] fuse_mount+0x2c/0x40 [ 1192.600050] TCP: out of memory -- consider tuning tcp_mem [ 1192.602548] mount_fs+0xae/0x328 [ 1192.602569] vfs_kern_mount.part.34+0xd4/0x4d0 [ 1192.602586] ? may_umount+0xb0/0xb0 [ 1192.602601] ? _raw_read_unlock+0x22/0x30 [ 1192.602614] ? __get_fs_type+0x97/0xc0 [ 1192.602637] do_mount+0x564/0x3070 [ 1192.602656] ? copy_mount_string+0x40/0x40 [ 1192.602672] ? rcu_pm_notify+0xc0/0xc0 [ 1192.608325] TCP: out of memory -- consider tuning tcp_mem [ 1192.611547] ? copy_mount_options+0x5f/0x380 [ 1192.611559] ? rcu_read_lock_sched_held+0x108/0x120 [ 1192.611577] ? kmem_cache_alloc_trace+0x616/0x780 [ 1192.619553] TCP: out of memory -- consider tuning tcp_mem [ 1192.619747] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1192.619765] ? _copy_from_user+0xdf/0x150 [ 1192.619783] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1192.619799] ? copy_mount_options+0x285/0x380 [ 1192.684351] ksys_mount+0x12d/0x140 [ 1192.687988] __x64_sys_mount+0xbe/0x150 [ 1192.691974] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 1192.696996] do_syscall_64+0x1b1/0x800 [ 1192.700890] ? finish_task_switch+0x1ca/0x840 [ 1192.705390] ? syscall_return_slowpath+0x5c0/0x5c0 [ 1192.710322] ? syscall_return_slowpath+0x30f/0x5c0 [ 1192.712146] TCP: out of memory -- consider tuning tcp_mem [ 1192.715256] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 1192.715277] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1192.715298] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1192.715310] RIP: 0033:0x455a09 [ 1192.715317] RSP: 002b:00007f118944d808 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1192.715332] RAX: ffffffffffffffda RBX: 0000000000000016 RCX: 0000000000455a09 [ 1192.715341] RDX: 00000000004c1eb6 RSI: 0000000020000240 RDI: 00000000004de0c5 [ 1192.715352] RBP: 0000000000000000 R08: 00007f118944d820 R09: 0000000000000000 2018/05/26 13:24:32 executing program 6: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000]}, 0x2c) 2018/05/26 13:24:32 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)="766574683100000000ffffffffffef00", 0x22b) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80550000]}, 0x10) 2018/05/26 13:24:32 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty=0x18, [0x0, 0x0, 0x0, 0x0, 0x0, 0x8055000000000000]}, 0x10) 2018/05/26 13:24:32 executing program 2: r0 = getpid() sched_setattr(r0, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x0, 0x4}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000f86000)='./control/file0\x00') rmdir(&(0x7f00000000c0)='./control\x00') syz_fuseblk_mount(&(0x7f0000000140)='./control\x00', &(0x7f0000000180)='./control/file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) close(r1) 2018/05/26 13:24:32 executing program 6: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000]}, 0x2c) 2018/05/26 13:24:32 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)="766574683100000000ffffffffffef00", 0x22b) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000]}, 0x10) [ 1192.734910] TCP: out of memory -- consider tuning tcp_mem [ 1192.736220] R10: 0000000048000000 R11: 0000000000000246 R12: 0000000000000000 [ 1192.736230] R13: 0000000020000240 R14: 0000000048000000 R15: 0000000000000000 [ 1192.736375] TCP: out of memory -- consider tuning tcp_mem 2018/05/26 13:24:33 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x300, 0x0, 0x0, 0x0, 0xc00]}, 0x2c) 2018/05/26 13:24:33 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty=0x18, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000]}, 0x10) 2018/05/26 13:24:33 executing program 6: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa]}, 0x2c) 2018/05/26 13:24:33 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)="766574683100000000ffffffffffef00", 0x22b) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}, 0x10) 2018/05/26 13:24:33 executing program 7 (fault-call:9 fault-nth:59): r0 = getpid() sched_setattr(r0, &(0x7f00000000c0), 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}}) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) syz_fuse_mount(&(0x7f0000000240)='./control\x00', 0x406000, 0x0, 0x0, 0x0, 0x48000000) close(r1) [ 1192.874487] FAULT_INJECTION: forcing a failure. [ 1192.874487] name failslab, interval 1, probability 0, space 0, times 0 [ 1192.885837] CPU: 1 PID: 3732 Comm: syz-executor7 Not tainted 4.17.0-rc6+ #68 [ 1192.893034] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1192.902393] Call Trace: [ 1192.904998] dump_stack+0x1b9/0x294 [ 1192.908643] ? dump_stack_print_info.cold.2+0x52/0x52 [ 1192.913853] should_fail.cold.4+0xa/0x1a [ 1192.917929] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1192.923041] ? lock_release+0xa10/0xa10 [ 1192.927026] ? check_same_owner+0x320/0x320 [ 1192.931352] ? graph_lock+0x170/0x170 [ 1192.935166] ? rcu_note_context_switch+0x710/0x710 [ 1192.940101] ? find_held_lock+0x36/0x1c0 [ 1192.944175] ? find_held_lock+0x36/0x1c0 [ 1192.948245] ? __lock_is_held+0xb5/0x140 [ 1192.952320] ? check_same_owner+0x320/0x320 [ 1192.956660] ? rcu_note_context_switch+0x710/0x710 [ 1192.961613] __should_failslab+0x124/0x180 [ 1192.965859] should_failslab+0x9/0x14 [ 1192.969667] kmem_cache_alloc+0x2af/0x760 [ 1192.973828] ? kasan_check_write+0x14/0x20 [ 1192.978070] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 1192.983095] __kernfs_new_node+0xe7/0x580 [ 1192.987252] ? kernfs_dop_revalidate+0x3c0/0x3c0 [ 1192.992030] ? kasan_check_write+0x14/0x20 [ 1192.996276] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 1193.001210] ? graph_lock+0x170/0x170 [ 1193.005021] ? wait_for_completion+0x870/0x870 [ 1193.009626] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1193.015174] kernfs_new_node+0x80/0xf0 [ 1193.019071] __kernfs_create_file+0x4d/0x330 [ 1193.023490] sysfs_add_file_mode_ns+0x21a/0x560 [ 1193.028174] sysfs_add_file+0x4e/0x60 [ 1193.031986] sysfs_merge_group+0xfa/0x230 [ 1193.036147] dpm_sysfs_add+0x161/0x210 [ 1193.040040] device_add+0xa11/0x16d0 [ 1193.043763] ? device_private_init+0x230/0x230 [ 1193.048353] ? kfree+0x1e9/0x260 [ 1193.051732] ? kfree_const+0x5e/0x70 [ 1193.055459] device_create_groups_vargs+0x1ff/0x270 [ 1193.056291] TCP: out of memory -- consider tuning tcp_mem [ 1193.060477] device_create_vargs+0x46/0x60 [ 1193.060498] bdi_register_va.part.10+0xbb/0x9b0 [ 1193.060515] ? cgwb_kill+0x630/0x630 [ 1193.060533] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1193.060547] ? bdi_init+0x416/0x510 [ 1193.075962] TCP: out of memory -- consider tuning tcp_mem [ 1193.078644] ? wb_init+0x9e0/0x9e0 [ 1193.078661] ? bdi_alloc_node+0x67/0xe0 [ 1193.078674] ? bdi_alloc_node+0x67/0xe0 [ 1193.078691] ? rcu_read_lock_sched_held+0x108/0x120 [ 1193.078709] ? kmem_cache_alloc_node_trace+0x34e/0x770 [ 1193.078724] ? _raw_spin_unlock+0x22/0x30 [ 1193.078741] bdi_register_va+0x68/0x80 [ 1193.085748] sctp: sctp_transport_update_pmtu: Reported pmtu 72 too low, using default minimum of 512 [ 1193.087876] super_setup_bdi_name+0x123/0x220 [ 1193.087892] ? kill_block_super+0x100/0x100 [ 1193.087910] ? kmem_cache_alloc_trace+0x616/0x780 [ 1193.087926] ? match_wildcard+0x3c0/0x3c0 [ 1193.087946] ? trace_hardirqs_on+0xd/0x10 [ 1193.154226] fuse_fill_super+0xe6e/0x1e20 [ 1193.158363] ? fuse_get_root_inode+0x190/0x190 [ 1193.162933] ? __alloc_pages_slowpath+0x2db0/0x2db0 [ 1193.167934] ? kasan_check_read+0x11/0x20 [ 1193.172071] ? cap_capable+0x1f9/0x260 [ 1193.175944] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1193.181462] ? security_capable+0x99/0xc0 [ 1193.185600] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1193.191127] ? ns_capable_common+0x13f/0x170 [ 1193.195542] ? get_anon_bdev+0x2f0/0x2f0 [ 1193.199608] ? sget+0x113/0x150 [ 1193.202881] ? fuse_get_root_inode+0x190/0x190 [ 1193.207449] mount_nodev+0x6b/0x110 [ 1193.211065] fuse_mount+0x2c/0x40 [ 1193.214501] mount_fs+0xae/0x328 [ 1193.217863] vfs_kern_mount.part.34+0xd4/0x4d0 [ 1193.222449] ? may_umount+0xb0/0xb0 [ 1193.226071] ? _raw_read_unlock+0x22/0x30 [ 1193.230203] ? __get_fs_type+0x97/0xc0 [ 1193.234091] do_mount+0x564/0x3070 [ 1193.237636] ? copy_mount_string+0x40/0x40 [ 1193.241864] ? rcu_pm_notify+0xc0/0xc0 [ 1193.245742] ? copy_mount_options+0x5f/0x380 [ 1193.250134] ? rcu_read_lock_sched_held+0x108/0x120 [ 1193.255133] ? kmem_cache_alloc_trace+0x616/0x780 [ 1193.259959] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1193.265492] ? _copy_from_user+0xdf/0x150 [ 1193.269627] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1193.275145] ? copy_mount_options+0x285/0x380 [ 1193.279634] ksys_mount+0x12d/0x140 [ 1193.283246] __x64_sys_mount+0xbe/0x150 [ 1193.287204] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 1193.292206] do_syscall_64+0x1b1/0x800 [ 1193.296084] ? finish_task_switch+0x1ca/0x840 [ 1193.300567] ? syscall_return_slowpath+0x5c0/0x5c0 [ 1193.305516] ? syscall_return_slowpath+0x30f/0x5c0 [ 1193.310443] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 1193.315795] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1193.320627] entry_SYSCALL_64_after_hwframe+0x49/0xbe 2018/05/26 13:24:33 executing program 4: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x111000, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x50}) r1 = getpid() sched_setattr(r1, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x0, 0x4}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r3, &(0x7f00000001c0)=[{0x0, 0x1ff, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000f86000)='./control/file0\x00') syz_fuse_mount(&(0x7f0000000240)='./control\x00', 0x406000, 0x0, 0x0, 0x0, 0x0) syz_fuseblk_mount(&(0x7f0000000140)='./control\x00', &(0x7f0000000180)='./control/file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) close(r2) mknod$loop(&(0x7f0000000040)='./control/file1\x00', 0x100, 0x0) 2018/05/26 13:24:33 executing program 6: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600000000000000]}, 0x2c) 2018/05/26 13:24:33 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)="766574683100000000ffffffffffef00", 0x22b) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1600]}, 0x10) 2018/05/26 13:24:33 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0xc00]}, 0x2c) 2018/05/26 13:24:33 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty=0x18, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700]}, 0x10) 2018/05/26 13:24:33 executing program 1: r0 = socket$inet(0x2, 0x5, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vcan0\x00', 0x10) sendmsg(r0, &(0x7f0000000480)={&(0x7f0000000140)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000380)="f0", 0x1}], 0x1}, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000a00)={@multicast1=0xe0000001, @local={0xac, 0x14, 0x14, 0xaa}}, 0xc) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000040)="84", 0x1}], 0x34000, &(0x7f0000000540)}, 0x0) [ 1193.325798] RIP: 0033:0x455a09 [ 1193.328966] RSP: 002b:00007f118944d808 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1193.336663] RAX: ffffffffffffffda RBX: 0000000000000016 RCX: 0000000000455a09 [ 1193.343931] RDX: 00000000004c1eb6 RSI: 0000000020000240 RDI: 00000000004de0c5 [ 1193.351202] RBP: 0000000000000000 R08: 00007f118944d820 R09: 0000000000000000 [ 1193.358474] R10: 0000000048000000 R11: 0000000000000246 R12: 0000000000000000 [ 1193.365746] R13: 0000000020000240 R14: 0000000048000000 R15: 0000000000000000 2018/05/26 13:24:33 executing program 7 (fault-call:9 fault-nth:60): r0 = getpid() sched_setattr(r0, &(0x7f00000000c0), 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}}) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) syz_fuse_mount(&(0x7f0000000240)='./control\x00', 0x406000, 0x0, 0x0, 0x0, 0x48000000) close(r1) 2018/05/26 13:24:33 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)="766574683100000000ffffffffffef00", 0x22b) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x281400]}, 0x10) [ 1193.502268] FAULT_INJECTION: forcing a failure. [ 1193.502268] name failslab, interval 1, probability 0, space 0, times 0 [ 1193.513690] CPU: 1 PID: 3773 Comm: syz-executor7 Not tainted 4.17.0-rc6+ #68 [ 1193.520880] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1193.530235] Call Trace: [ 1193.532831] dump_stack+0x1b9/0x294 [ 1193.536477] ? dump_stack_print_info.cold.2+0x52/0x52 [ 1193.541671] ? __mutex_lock+0x7d9/0x17f0 [ 1193.545740] should_fail.cold.4+0xa/0x1a [ 1193.549809] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1193.554920] ? kasan_kmalloc+0xc4/0xe0 [ 1193.558819] ? graph_lock+0x170/0x170 [ 1193.562636] ? find_held_lock+0x36/0x1c0 [ 1193.566711] ? __lock_is_held+0xb5/0x140 [ 1193.570793] ? check_same_owner+0x320/0x320 [ 1193.575125] ? kasan_check_write+0x14/0x20 [ 1193.579369] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 1193.584311] ? rcu_note_context_switch+0x710/0x710 [ 1193.589250] __should_failslab+0x124/0x180 [ 1193.593497] should_failslab+0x9/0x14 [ 1193.597307] kmem_cache_alloc+0x2af/0x760 [ 1193.601464] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 1193.606407] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 1193.611439] __kernfs_new_node+0xe7/0x580 [ 1193.615598] ? kernfs_dop_revalidate+0x3c0/0x3c0 [ 1193.620362] ? mutex_unlock+0xd/0x10 [ 1193.624089] ? kernfs_activate+0x20e/0x2a0 [ 1193.628332] ? kernfs_walk_and_get_ns+0x320/0x320 [ 1193.633186] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1193.638729] ? kernfs_link_sibling+0x1d2/0x3b0 [ 1193.643331] kernfs_new_node+0x80/0xf0 [ 1193.647228] __kernfs_create_file+0x4d/0x330 [ 1193.651648] sysfs_add_file_mode_ns+0x21a/0x560 [ 1193.656317] internal_create_group+0x282/0x970 [ 1193.660889] sysfs_create_groups+0x9b/0x150 [ 1193.665195] device_add+0x84d/0x16d0 [ 1193.668895] ? device_private_init+0x230/0x230 [ 1193.673462] ? kfree+0x1e9/0x260 [ 1193.676809] ? kfree_const+0x5e/0x70 [ 1193.680509] device_create_groups_vargs+0x1ff/0x270 [ 1193.685511] device_create_vargs+0x46/0x60 [ 1193.689729] bdi_register_va.part.10+0xbb/0x9b0 [ 1193.694383] ? cgwb_kill+0x630/0x630 [ 1193.698087] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1193.703605] ? bdi_init+0x416/0x510 [ 1193.707213] ? wb_init+0x9e0/0x9e0 [ 1193.710752] ? bdi_alloc_node+0x67/0xe0 [ 1193.714716] ? bdi_alloc_node+0x67/0xe0 [ 1193.718672] ? rcu_read_lock_sched_held+0x108/0x120 [ 1193.723673] ? kmem_cache_alloc_node_trace+0x34e/0x770 [ 1193.728932] ? _raw_spin_unlock+0x22/0x30 [ 1193.733071] bdi_register_va+0x68/0x80 [ 1193.736942] super_setup_bdi_name+0x123/0x220 [ 1193.741426] ? kill_block_super+0x100/0x100 [ 1193.745733] ? kmem_cache_alloc_trace+0x616/0x780 [ 1193.750569] ? match_wildcard+0x3c0/0x3c0 [ 1193.754704] ? trace_hardirqs_on+0xd/0x10 [ 1193.758848] fuse_fill_super+0xe6e/0x1e20 [ 1193.762986] ? fuse_get_root_inode+0x190/0x190 [ 1193.767559] ? __alloc_pages_slowpath+0x2db0/0x2db0 [ 1193.772577] ? kasan_check_read+0x11/0x20 [ 1193.776725] ? cap_capable+0x1f9/0x260 [ 1193.780609] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1193.786127] ? security_capable+0x99/0xc0 [ 1193.790259] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1193.795788] ? ns_capable_common+0x13f/0x170 [ 1193.800181] ? get_anon_bdev+0x2f0/0x2f0 [ 1193.804223] ? sget+0x113/0x150 [ 1193.807485] ? fuse_get_root_inode+0x190/0x190 [ 1193.812056] mount_nodev+0x6b/0x110 [ 1193.815687] fuse_mount+0x2c/0x40 [ 1193.819138] mount_fs+0xae/0x328 [ 1193.822498] vfs_kern_mount.part.34+0xd4/0x4d0 [ 1193.827071] ? may_umount+0xb0/0xb0 [ 1193.830684] ? _raw_read_unlock+0x22/0x30 [ 1193.834811] ? __get_fs_type+0x97/0xc0 [ 1193.838682] do_mount+0x564/0x3070 [ 1193.842206] ? do_raw_spin_unlock+0x9e/0x2e0 [ 1193.846596] ? copy_mount_string+0x40/0x40 [ 1193.850826] ? rcu_pm_notify+0xc0/0xc0 [ 1193.854702] ? copy_mount_options+0x5f/0x380 [ 1193.859090] ? rcu_read_lock_sched_held+0x108/0x120 [ 1193.864088] ? kmem_cache_alloc_trace+0x616/0x780 [ 1193.868917] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1193.874441] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1193.879964] ? copy_mount_options+0x285/0x380 [ 1193.884441] ksys_mount+0x12d/0x140 [ 1193.888057] __x64_sys_mount+0xbe/0x150 [ 1193.892019] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 1193.897052] do_syscall_64+0x1b1/0x800 [ 1193.900932] ? finish_task_switch+0x1ca/0x840 [ 1193.905412] ? syscall_return_slowpath+0x5c0/0x5c0 [ 1193.910322] ? syscall_return_slowpath+0x30f/0x5c0 [ 1193.915248] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 1193.920593] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1193.925431] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1193.930611] RIP: 0033:0x455a09 [ 1193.933782] RSP: 002b:00007f118944d808 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1193.941469] RAX: ffffffffffffffda RBX: 0000000000000016 RCX: 0000000000455a09 [ 1193.948721] RDX: 00000000004c1eb6 RSI: 0000000020000240 RDI: 00000000004de0c5 [ 1193.955969] RBP: 0000000000000000 R08: 00007f118944d820 R09: 0000000000000000 [ 1193.963219] R10: 0000000048000000 R11: 0000000000000246 R12: 0000000000000000 [ 1193.970468] R13: 0000000020000240 R14: 0000000048000000 R15: 0000000000000000 2018/05/26 13:24:34 executing program 1: r0 = socket$inet(0x2, 0x5, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vcan0\x00', 0x10) sendmsg(r0, &(0x7f0000000480)={&(0x7f0000000140)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000380)="f0", 0x1}], 0x1}, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000a00)={@multicast1=0xe0000001, @local={0xac, 0x14, 0x14, 0xaa}}, 0xc) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000040)="84", 0x1}], 0x4, &(0x7f0000000540)}, 0x0) 2018/05/26 13:24:34 executing program 7 (fault-call:9 fault-nth:61): r0 = getpid() sched_setattr(r0, &(0x7f00000000c0), 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}}) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) syz_fuse_mount(&(0x7f0000000240)='./control\x00', 0x406000, 0x0, 0x0, 0x0, 0x48000000) close(r1) 2018/05/26 13:24:34 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x240000, 0x0, 0x0, 0x0, 0xc00]}, 0x2c) 2018/05/26 13:24:34 executing program 6: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000]}, 0x2c) 2018/05/26 13:24:34 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)="766574683100000000ffffffffffef00", 0x22b) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa]}, 0x10) 2018/05/26 13:24:34 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty=0x18, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000]}, 0x10) 2018/05/26 13:24:34 executing program 2: r0 = getpid() sched_setattr(r0, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x0, 0x4}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000f86000)='./control/file0\x00') rmdir(&(0x7f00000000c0)='./control\x00') ioctl$KVM_SET_ONE_REG(r2, 0x4010aeac, &(0x7f00000001c0)={0x3, 0xff}) syz_fuse_mount(&(0x7f0000000240)='./control\x00', 0x406000, 0x0, 0x0, 0x0, 0x0) syz_fuseblk_mount(&(0x7f0000000140)='./control\x00', &(0x7f0000000180)='./control/file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) kexec_load(0xd62e000000000000, 0x1, &(0x7f0000000100)=[{&(0x7f0000000040)="4544b2101b02787a18d1517ef7da42fd0b08d72d9552acbb1ff135be14f08e1d7070837897bfa0ad074f125b922ec3b5ced7a1e227a584c13dad3c63a62a55c2b6ba438952f12e18d4eaf41e0e5d5d2819425fb76fa346cc1149e7bbf27f3b786f3a922389ebf105fe6dc213cbae6a51714da5e3d676e9bd8309003b651b4516", 0x80, 0xab, 0x9}], 0x150000) close(r1) 2018/05/26 13:24:34 executing program 4: r0 = getpid() sched_setattr(r0, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x0, 0x4}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) r1 = perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x8, 0xc80, 0x7fff, 0x3f, 0x0, 0x100000001, 0x22404, 0x4, 0xffffffff, 0x0, 0x4, 0x40, 0x10001, 0x1000, 0x4, 0xa, 0x5, 0x401, 0x8, 0x1, 0x6d, 0x7fff, 0x4, 0x4, 0x270cb8b5, 0x3, 0x539, 0xa52, 0x7f, 0x100000000, 0x10000, 0x6, 0x1000, 0x3, 0x5, 0xfff, 0x0, 0x0, 0x7, @perf_config_ext={0x8, 0x9}, 0x10000, 0x51cd, 0x1, 0x7, 0x400, 0x1ff8000000, 0x200}, r0, 0x3, 0xffffffffffffffff, 0xb) mmap(&(0x7f0000013000/0x4000)=nil, 0x4000, 0x1, 0x32, r1, 0x40000) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x1, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000380)={{{@in6=@mcast2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@local}}, &(0x7f0000000480)=0xe8) fstat(r1, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000540)={{{@in6=@mcast2={0xff, 0x2, [], 0x1}, @in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x4e21, 0x3ff, 0x4e22, 0x2, 0x2, 0xa0, 0x80, 0x0, r4, r5}, {0x5, 0x2, 0x1000, 0x1000, 0x1, 0x1, 0x5, 0x80}, {0x3ff, 0x90, 0xffffffffffff962c, 0x401}, 0x1, 0x6e6bb9, 0x2, 0x1, 0xa35c7dd4c758aed9}, {{@in6, 0x4d3, 0xff}, 0xa, @in6=@local={0xfe, 0x80, [], 0xaa}, 0x3501, 0x2, 0x3, 0x2, 0xfd, 0x9, 0x2}}, 0xe8) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r6 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) ioctl$KVM_SET_DEBUGREGS(r6, 0x4080aea2, &(0x7f0000000740)={[0x100000, 0x0, 0x1000, 0x4], 0x4, 0x20, 0xffffffff}) write$sndseq(r6, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) syz_mount_image$nfs(&(0x7f0000000280)='nfs\x00', &(0x7f00000002c0)='./control\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000000640)="748e5cca0fc7ce3be89da64a8d763576b2b748de273218b9daeff692cda3fb05fe97d89e7f020bc73e399e9b9772e6c530eec6be3bf580751ba67a121875f1645aa5bb3799d0b0e58ad1ce388ad770b5f3f60817ed60ba9cf360030bdafcaa5d4bcab13dbafd3858707c6ad3e724e27e1b72b8e98a01dfb19c99796c2bc87428e071683aa087732608af5ba724ff670029a888198ea1c71dcae1282eee5f8dac885e58b78e52405af20ca67060a02f064ab231db0987d690a08288eea663c47b0a767b913f25e15d", 0xc8, 0x8001}], 0x80, &(0x7f0000000340)='\x00') sched_getscheduler(r0) unlink(&(0x7f0000f86000)='./control/file0\x00') syz_fuse_mount(&(0x7f0000000240)='./control\x00', 0x406000, 0x0, 0x0, 0x0, 0x0) syz_fuseblk_mount(&(0x7f0000000140)='./control\x00', &(0x7f0000000180)='./control/file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bind(r6, &(0x7f0000000040)=@l2={0x1f, 0x80, {0x2, 0x8, 0x46c, 0x4, 0x81, 0x3}, 0x80000000, 0x2}, 0x80) close(r2) [ 1194.526111] FAULT_INJECTION: forcing a failure. [ 1194.526111] name failslab, interval 1, probability 0, space 0, times 0 [ 1194.537523] CPU: 1 PID: 3789 Comm: syz-executor7 Not tainted 4.17.0-rc6+ #68 [ 1194.544714] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1194.554073] Call Trace: [ 1194.556671] dump_stack+0x1b9/0x294 [ 1194.560307] ? dump_stack_print_info.cold.2+0x52/0x52 [ 1194.565516] should_fail.cold.4+0xa/0x1a [ 1194.569592] ? fault_create_debugfs_attr+0x1f0/0x1f0 2018/05/26 13:24:34 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)="766574683100000000ffffffffffef00", 0x22b) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff]}, 0x10) 2018/05/26 13:24:34 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x12000, 0x0, 0x0, 0x0, 0xc00]}, 0x2c) [ 1194.574707] ? graph_lock+0x170/0x170 [ 1194.578512] ? lock_downgrade+0x8e0/0x8e0 [ 1194.582670] ? find_held_lock+0x36/0x1c0 [ 1194.586745] ? __lock_is_held+0xb5/0x140 [ 1194.590825] ? check_same_owner+0x320/0x320 [ 1194.595151] ? wait_for_completion+0x870/0x870 [ 1194.599744] ? rcu_note_context_switch+0x710/0x710 [ 1194.604678] ? graph_lock+0x170/0x170 [ 1194.608490] __should_failslab+0x124/0x180 [ 1194.612735] should_failslab+0x9/0x14 [ 1194.616546] kmem_cache_alloc+0x2af/0x760 [ 1194.620709] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 1194.625739] __kernfs_new_node+0xe7/0x580 [ 1194.629899] ? kernfs_dop_revalidate+0x3c0/0x3c0 [ 1194.634665] ? kernfs_walk_and_get_ns+0x320/0x320 [ 1194.639525] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1194.645082] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1194.650631] ? kernfs_put+0x493/0x750 [ 1194.654443] ? kernfs_add_one+0x129/0x4d0 [ 1194.658605] ? kernfs_get+0x30/0x30 [ 1194.662245] kernfs_new_node+0x80/0xf0 [ 1194.666143] kernfs_create_dir_ns+0x3d/0x140 [ 1194.670558] internal_create_group+0x110/0x970 [ 1194.675147] ? internal_create_group+0x347/0x970 [ 1194.679918] sysfs_create_group+0x1f/0x30 [ 1194.684077] dpm_sysfs_add+0x26/0x210 [ 1194.687888] device_add+0xa11/0x16d0 [ 1194.691615] ? device_private_init+0x230/0x230 [ 1194.696203] ? kfree+0x1e9/0x260 [ 1194.699575] ? kfree_const+0x5e/0x70 [ 1194.703298] device_create_groups_vargs+0x1ff/0x270 [ 1194.708324] device_create_vargs+0x46/0x60 [ 1194.712566] bdi_register_va.part.10+0xbb/0x9b0 [ 1194.717240] ? cgwb_kill+0x630/0x630 [ 1194.720965] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1194.726506] ? bdi_init+0x416/0x510 [ 1194.730137] ? wb_init+0x9e0/0x9e0 [ 1194.733684] ? bdi_alloc_node+0x67/0xe0 [ 1194.737663] ? bdi_alloc_node+0x67/0xe0 [ 1194.741642] ? rcu_read_lock_sched_held+0x108/0x120 [ 1194.746664] ? kmem_cache_alloc_node_trace+0x34e/0x770 [ 1194.751944] ? _raw_spin_unlock+0x22/0x30 [ 1194.756101] bdi_register_va+0x68/0x80 [ 1194.759997] super_setup_bdi_name+0x123/0x220 [ 1194.764501] ? kill_block_super+0x100/0x100 [ 1194.768827] ? kmem_cache_alloc_trace+0x616/0x780 [ 1194.773679] ? match_wildcard+0x3c0/0x3c0 [ 1194.777831] ? trace_hardirqs_on+0xd/0x10 [ 1194.781995] fuse_fill_super+0xe6e/0x1e20 [ 1194.786157] ? fuse_get_root_inode+0x190/0x190 [ 1194.790744] ? __alloc_pages_slowpath+0x2db0/0x2db0 [ 1194.795762] ? retint_kernel+0x10/0x10 [ 1194.799661] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 1194.804685] ? cap_capable+0x1f9/0x260 [ 1194.808588] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1194.814130] ? security_capable+0x99/0xc0 [ 1194.818285] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1194.823827] ? ns_capable_common+0x13f/0x170 [ 1194.828249] ? get_anon_bdev+0x2f0/0x2f0 [ 1194.832317] ? sget+0x113/0x150 [ 1194.835606] ? fuse_get_root_inode+0x190/0x190 [ 1194.840190] mount_nodev+0x6b/0x110 [ 1194.843821] fuse_mount+0x2c/0x40 [ 1194.847276] mount_fs+0xae/0x328 [ 1194.850645] vfs_kern_mount.part.34+0xd4/0x4d0 [ 1194.855232] ? may_umount+0xb0/0xb0 [ 1194.858865] ? _raw_read_unlock+0x22/0x30 [ 1194.863014] ? __get_fs_type+0x97/0xc0 [ 1194.866905] do_mount+0x564/0x3070 [ 1194.870446] ? do_raw_spin_unlock+0x9e/0x2e0 [ 1194.874866] ? copy_mount_string+0x40/0x40 [ 1194.879107] ? rcu_pm_notify+0xc0/0xc0 [ 1194.883004] ? copy_mount_options+0x5f/0x380 [ 1194.887421] ? rcu_read_lock_sched_held+0x108/0x120 [ 1194.892457] ? kmem_cache_alloc_trace+0x616/0x780 [ 1194.897311] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1194.902860] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1194.908405] ? copy_mount_options+0x285/0x380 [ 1194.912903] ksys_mount+0x12d/0x140 [ 1194.916535] __x64_sys_mount+0xbe/0x150 [ 1194.920511] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 1194.925537] do_syscall_64+0x1b1/0x800 [ 1194.929428] ? syscall_slow_exit_work+0x4f0/0x4f0 [ 1194.934278] ? syscall_return_slowpath+0x5c0/0x5c0 [ 1194.939210] ? syscall_return_slowpath+0x30f/0x5c0 [ 1194.944147] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 1194.949521] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1194.954373] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1194.959560] RIP: 0033:0x455a09 [ 1194.962749] RSP: 002b:00007f118944d808 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1194.970463] RAX: ffffffffffffffda RBX: 0000000000000016 RCX: 0000000000455a09 2018/05/26 13:24:34 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty=0x18, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe00]}, 0x10) 2018/05/26 13:24:34 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty=0x18, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe803]}, 0x10) 2018/05/26 13:24:34 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)="766574683100000000ffffffffffef00", 0x22b) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00000000000000]}, 0x10) 2018/05/26 13:24:34 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x800000000000000, 0x0, 0x0, 0x0, 0xc00]}, 0x2c) 2018/05/26 13:24:35 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty=0x18, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000]}, 0x10) 2018/05/26 13:24:35 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)="766574683100000000ffffffffffef00", 0x22b) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4002000000000000]}, 0x10) [ 1194.977732] RDX: 00000000004c1eb6 RSI: 0000000020000240 RDI: 00000000004de0c5 [ 1194.985005] RBP: 0000000000000000 R08: 00007f118944d820 R09: 0000000000000000 [ 1194.992279] R10: 0000000048000000 R11: 0000000000000246 R12: 0000000000000000 [ 1194.999543] R13: 0000000020000240 R14: 0000000048000000 R15: 0000000000000000 [ 1195.314489] sctp: sctp_transport_update_pmtu: Reported pmtu 72 too low, using default minimum of 512 [ 1195.460627] sctp: sctp_transport_update_pmtu: Reported pmtu 72 too low, using default minimum of 512 2018/05/26 13:24:35 executing program 1: r0 = socket$inet(0x2, 0x5, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vcan0\x00', 0x10) sendmsg(r0, &(0x7f0000000480)={&(0x7f0000000140)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000380)="f0", 0x1}], 0x1}, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000a00)={@multicast1=0xe0000001, @local={0xac, 0x14, 0x14, 0xaa}}, 0xc) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000040)="84", 0x1}], 0xe, &(0x7f0000000540)}, 0x0) 2018/05/26 13:24:35 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x900000000000000, 0x0, 0x0, 0x0, 0xc00]}, 0x2c) 2018/05/26 13:24:35 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty=0x18, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe00000000000000]}, 0x10) 2018/05/26 13:24:35 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)="766574683100000000ffffffffffef00", 0x22b) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8a440800]}, 0x10) 2018/05/26 13:24:35 executing program 7 (fault-call:9 fault-nth:62): r0 = getpid() sched_setattr(r0, &(0x7f00000000c0), 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}}) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) syz_fuse_mount(&(0x7f0000000240)='./control\x00', 0x406000, 0x0, 0x0, 0x0, 0x48000000) close(r1) 2018/05/26 13:24:35 executing program 4: r0 = getpid() mkdir(&(0x7f0000000040)='./control\x00', 0xa) sched_setattr(r0, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x0, 0x4}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) mincore(&(0x7f0000011000/0x3000)=nil, 0x3000, &(0x7f0000000280)=""/232) r3 = syz_fuse_mount(&(0x7f0000000240)='./control\x00', 0x406000, 0x0, 0x0, 0x0, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f0000000100)=0xc) syz_fuseblk_mount(&(0x7f0000000140)='./control\x00', &(0x7f0000000180)='./control/file1\x00', 0x0, 0x0, r4, 0x0, 0x0, 0x0) close(r3) 2018/05/26 13:24:35 executing program 6: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800300]}, 0x2c) 2018/05/26 13:24:35 executing program 2: r0 = getpid() sched_setattr(r0, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x0, 0x4}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000f86000)='./control/file0\x00') rmdir(&(0x7f00000000c0)='./control\x00') syz_fuse_mount(&(0x7f0000000240)='./control\x00', 0x406000, 0x0, 0x0, 0x0, 0x0) syz_fuseblk_mount(&(0x7f0000000040)='./control\x00', &(0x7f0000000180)='./control/file1\x00', 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x1010010) close(r1) 2018/05/26 13:24:35 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty=0x18, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf4080b0000000000]}, 0x10) [ 1195.631894] FAULT_INJECTION: forcing a failure. [ 1195.631894] name failslab, interval 1, probability 0, space 0, times 0 [ 1195.643252] CPU: 1 PID: 3853 Comm: syz-executor7 Not tainted 4.17.0-rc6+ #68 [ 1195.650442] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1195.659794] Call Trace: [ 1195.662402] dump_stack+0x1b9/0x294 [ 1195.666047] ? dump_stack_print_info.cold.2+0x52/0x52 [ 1195.671252] should_fail.cold.4+0xa/0x1a [ 1195.675324] ? fault_create_debugfs_attr+0x1f0/0x1f0 2018/05/26 13:24:35 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0xc80300, 0x0, 0x0, 0x0, 0xc00]}, 0x2c) [ 1195.680439] ? lock_release+0xa10/0xa10 [ 1195.684425] ? check_same_owner+0x320/0x320 [ 1195.688757] ? graph_lock+0x170/0x170 [ 1195.692566] ? rcu_note_context_switch+0x710/0x710 [ 1195.697501] ? find_held_lock+0x36/0x1c0 [ 1195.701574] ? find_held_lock+0x36/0x1c0 [ 1195.705646] ? __lock_is_held+0xb5/0x140 [ 1195.709725] ? check_same_owner+0x320/0x320 [ 1195.714056] ? rcu_note_context_switch+0x710/0x710 [ 1195.718996] __should_failslab+0x124/0x180 [ 1195.723244] should_failslab+0x9/0x14 [ 1195.727049] kmem_cache_alloc+0x2af/0x760 [ 1195.731208] ? kasan_check_write+0x14/0x20 [ 1195.735453] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 1195.740478] __kernfs_new_node+0xe7/0x580 [ 1195.744633] ? kernfs_dop_revalidate+0x3c0/0x3c0 [ 1195.749407] ? kasan_check_write+0x14/0x20 [ 1195.753648] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 1195.758584] ? graph_lock+0x170/0x170 [ 1195.762404] ? wait_for_completion+0x870/0x870 [ 1195.767003] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1195.772548] kernfs_new_node+0x80/0xf0 [ 1195.776448] __kernfs_create_file+0x4d/0x330 [ 1195.780871] sysfs_add_file_mode_ns+0x21a/0x560 [ 1195.785554] sysfs_add_file+0x4e/0x60 [ 1195.789364] sysfs_merge_group+0xfa/0x230 [ 1195.793530] dpm_sysfs_add+0x161/0x210 [ 1195.797425] device_add+0xa11/0x16d0 [ 1195.801148] ? device_private_init+0x230/0x230 [ 1195.805731] ? kfree+0x1e9/0x260 [ 1195.809105] ? kfree_const+0x5e/0x70 [ 1195.812825] device_create_groups_vargs+0x1ff/0x270 [ 1195.817849] device_create_vargs+0x46/0x60 [ 1195.822087] bdi_register_va.part.10+0xbb/0x9b0 [ 1195.826754] ? cgwb_kill+0x630/0x630 [ 1195.830472] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1195.836008] ? bdi_init+0x416/0x510 [ 1195.839640] ? wb_init+0x9e0/0x9e0 [ 1195.843187] ? bdi_alloc_node+0x67/0xe0 [ 1195.847161] ? bdi_alloc_node+0x67/0xe0 [ 1195.851140] ? rcu_read_lock_sched_held+0x108/0x120 [ 1195.856158] ? kmem_cache_alloc_node_trace+0x34e/0x770 [ 1195.861441] ? _raw_spin_unlock+0x22/0x30 [ 1195.865595] bdi_register_va+0x68/0x80 [ 1195.869490] super_setup_bdi_name+0x123/0x220 [ 1195.873991] ? kill_block_super+0x100/0x100 [ 1195.878320] ? kmem_cache_alloc_trace+0x616/0x780 [ 1195.883169] ? match_wildcard+0x3c0/0x3c0 [ 1195.887322] ? trace_hardirqs_on+0xd/0x10 [ 1195.891496] fuse_fill_super+0xe6e/0x1e20 [ 1195.895657] ? fuse_get_root_inode+0x190/0x190 [ 1195.900248] ? __alloc_pages_slowpath+0x2db0/0x2db0 [ 1195.905271] ? kasan_check_read+0x11/0x20 [ 1195.909427] ? cap_capable+0x1f9/0x260 [ 1195.913323] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1195.918864] ? security_capable+0x99/0xc0 [ 1195.923020] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1195.928560] ? ns_capable_common+0x13f/0x170 [ 1195.932974] ? get_anon_bdev+0x2f0/0x2f0 [ 1195.937039] ? sget+0x113/0x150 [ 1195.940331] ? fuse_get_root_inode+0x190/0x190 [ 1195.944916] mount_nodev+0x6b/0x110 [ 1195.948551] fuse_mount+0x2c/0x40 [ 1195.952010] mount_fs+0xae/0x328 [ 1195.955390] vfs_kern_mount.part.34+0xd4/0x4d0 [ 1195.959985] ? may_umount+0xb0/0xb0 [ 1195.963615] ? _raw_read_unlock+0x22/0x30 [ 1195.967767] ? __get_fs_type+0x97/0xc0 [ 1195.971668] do_mount+0x564/0x3070 [ 1195.975214] ? do_raw_spin_unlock+0x9e/0x2e0 [ 1195.979633] ? copy_mount_string+0x40/0x40 [ 1195.983869] ? rcu_pm_notify+0xc0/0xc0 [ 1195.987772] ? copy_mount_options+0x5f/0x380 [ 1195.992189] ? rcu_read_lock_sched_held+0x108/0x120 [ 1195.997211] ? kmem_cache_alloc_trace+0x616/0x780 [ 1196.002065] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1196.007613] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1196.013152] ? copy_mount_options+0x285/0x380 [ 1196.017654] ksys_mount+0x12d/0x140 [ 1196.021290] __x64_sys_mount+0xbe/0x150 [ 1196.025267] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 1196.030289] do_syscall_64+0x1b1/0x800 [ 1196.034181] ? finish_task_switch+0x1ca/0x840 [ 1196.038680] ? syscall_return_slowpath+0x5c0/0x5c0 [ 1196.043619] ? syscall_return_slowpath+0x30f/0x5c0 [ 1196.048556] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 1196.053934] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1196.058790] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1196.063985] RIP: 0033:0x455a09 [ 1196.067174] RSP: 002b:00007f118944d808 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1196.074887] RAX: ffffffffffffffda RBX: 0000000000000016 RCX: 0000000000455a09 2018/05/26 13:24:35 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty=0x18, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000]}, 0x10) 2018/05/26 13:24:36 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)="766574683100000000ffffffffffef00", 0x22b) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000]}, 0x10) 2018/05/26 13:24:36 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty=0x18, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb08f4]}, 0x10) 2018/05/26 13:24:36 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x18000000, 0x0, 0x0, 0x0, 0xc00]}, 0x2c) 2018/05/26 13:24:36 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty=0x18, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700000000000000]}, 0x10) 2018/05/26 13:24:36 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xc00]}, 0x2c) [ 1196.082165] RDX: 00000000004c1eb6 RSI: 0000000020000240 RDI: 00000000004de0c5 [ 1196.089434] RBP: 0000000000000000 R08: 00007f118944d820 R09: 0000000000000000 [ 1196.096702] R10: 0000000048000000 R11: 0000000000000246 R12: 0000000000000000 [ 1196.103964] R13: 0000000020000240 R14: 0000000048000000 R15: 0000000000000000 2018/05/26 13:24:36 executing program 1: r0 = socket$inet(0x2, 0x5, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vcan0\x00', 0x10) sendmsg(r0, &(0x7f0000000480)={&(0x7f0000000140)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000380)="f0", 0x1}], 0x1}, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000a00)={@multicast1=0xe0000001, @local={0xac, 0x14, 0x14, 0xaa}}, 0xc) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000040)="84", 0x1}], 0xffffff50, &(0x7f0000000540)}, 0x0) 2018/05/26 13:24:36 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty=0x18, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000]}, 0x10) 2018/05/26 13:24:36 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x7000000, 0x0, 0x0, 0x0, 0xc00]}, 0x2c) 2018/05/26 13:24:36 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)="766574683100000000ffffffffffef00", 0x22b) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8447b]}, 0x10) 2018/05/26 13:24:36 executing program 6: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000]}, 0x2c) 2018/05/26 13:24:36 executing program 7 (fault-call:9 fault-nth:63): r0 = getpid() sched_setattr(r0, &(0x7f00000000c0), 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}}) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) syz_fuse_mount(&(0x7f0000000240)='./control\x00', 0x406000, 0x0, 0x0, 0x0, 0x48000000) close(r1) 2018/05/26 13:24:36 executing program 4: r0 = getpid() sched_setattr(r0, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r2, 0xc05c5340, &(0x7f0000000040)={0x8, 0x8, 0x20, {0x0, 0x1c9c380}, 0x8}) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000f86000)='./control/file0\x00') syz_fuse_mount(&(0x7f0000000240)='./control\x00', 0x406000, 0x0, 0x0, 0x0, 0x0) syz_fuseblk_mount(&(0x7f0000000140)='./control\x00', &(0x7f0000000180)='./control/file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KDSKBLED(r2, 0x4b65, 0x4) close(r1) 2018/05/26 13:24:36 executing program 2: r0 = getpid() sched_setattr(r0, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x0, 0x4}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) r2 = accept$inet(0xffffffffffffff9c, &(0x7f0000000040)={0x0, 0x0, @rand_addr}, &(0x7f0000000080)=0x10) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000100)={0x0, @rand_addr, @remote}, &(0x7f00000001c0)=0xc) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r3, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000f86000)='./control/file0\x00') rmdir(&(0x7f00000000c0)='./control\x00') syz_fuse_mount(&(0x7f0000000240)='./control\x00', 0x406000, 0x0, 0x0, 0x0, 0x0) syz_fuseblk_mount(&(0x7f0000000140)='./control\x00', &(0x7f0000000180)='./control/file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) close(r1) lsetxattr(&(0x7f0000000200)='./control/file0\x00', &(0x7f0000000280)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], &(0x7f00000002c0)='\x00', 0x1, 0x2) 2018/05/26 13:24:36 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty=0x18, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8030000]}, 0x10) [ 1196.748279] FAULT_INJECTION: forcing a failure. [ 1196.748279] name failslab, interval 1, probability 0, space 0, times 0 [ 1196.759635] CPU: 1 PID: 3914 Comm: syz-executor7 Not tainted 4.17.0-rc6+ #68 [ 1196.766830] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1196.776186] Call Trace: [ 1196.778780] dump_stack+0x1b9/0x294 [ 1196.782421] ? dump_stack_print_info.cold.2+0x52/0x52 [ 1196.787621] ? __mutex_lock+0x7d9/0x17f0 [ 1196.791700] should_fail.cold.4+0xa/0x1a 2018/05/26 13:24:36 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)="766574683100000000ffffffffffef00", 0x22b) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1600000000000000]}, 0x10) [ 1196.795771] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1196.800888] ? kasan_kmalloc+0xc4/0xe0 [ 1196.804786] ? graph_lock+0x170/0x170 [ 1196.808601] ? find_held_lock+0x36/0x1c0 [ 1196.812675] ? __lock_is_held+0xb5/0x140 [ 1196.816754] ? check_same_owner+0x320/0x320 [ 1196.821083] ? kasan_check_write+0x14/0x20 [ 1196.825330] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 1196.830272] ? rcu_note_context_switch+0x710/0x710 [ 1196.835213] __should_failslab+0x124/0x180 [ 1196.839462] should_failslab+0x9/0x14 [ 1196.843268] kmem_cache_alloc+0x2af/0x760 [ 1196.847428] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 1196.852374] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 1196.857411] __kernfs_new_node+0xe7/0x580 [ 1196.861575] ? kernfs_dop_revalidate+0x3c0/0x3c0 [ 1196.866342] ? mutex_unlock+0xd/0x10 [ 1196.870062] ? kernfs_activate+0x20e/0x2a0 [ 1196.874309] ? kernfs_walk_and_get_ns+0x320/0x320 [ 1196.879163] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1196.884706] ? kernfs_link_sibling+0x1d2/0x3b0 [ 1196.889310] kernfs_new_node+0x80/0xf0 [ 1196.893207] __kernfs_create_file+0x4d/0x330 [ 1196.897627] sysfs_add_file_mode_ns+0x21a/0x560 [ 1196.902313] sysfs_add_file+0x4e/0x60 [ 1196.906124] sysfs_merge_group+0xfa/0x230 [ 1196.910284] dpm_sysfs_add+0x161/0x210 [ 1196.914182] device_add+0xa11/0x16d0 [ 1196.917898] ? device_private_init+0x230/0x230 [ 1196.922479] ? kfree+0x1e9/0x260 [ 1196.925854] ? kfree_const+0x5e/0x70 [ 1196.929577] device_create_groups_vargs+0x1ff/0x270 [ 1196.934599] device_create_vargs+0x46/0x60 [ 1196.938840] bdi_register_va.part.10+0xbb/0x9b0 [ 1196.943517] ? cgwb_kill+0x630/0x630 [ 1196.947237] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1196.952774] ? bdi_init+0x416/0x510 [ 1196.956403] ? wb_init+0x9e0/0x9e0 [ 1196.959944] ? bdi_alloc_node+0x67/0xe0 [ 1196.963922] ? bdi_alloc_node+0x67/0xe0 [ 1196.967906] ? rcu_read_lock_sched_held+0x108/0x120 [ 1196.972932] ? kmem_cache_alloc_node_trace+0x34e/0x770 [ 1196.978217] ? _raw_spin_unlock+0x22/0x30 [ 1196.982372] bdi_register_va+0x68/0x80 [ 1196.986269] super_setup_bdi_name+0x123/0x220 [ 1196.990775] ? kill_block_super+0x100/0x100 [ 1196.995102] ? kmem_cache_alloc_trace+0x616/0x780 [ 1196.999952] ? match_wildcard+0x3c0/0x3c0 [ 1197.004104] ? trace_hardirqs_on+0xd/0x10 [ 1197.008262] fuse_fill_super+0xe6e/0x1e20 [ 1197.012429] ? fuse_get_root_inode+0x190/0x190 [ 1197.017022] ? __alloc_pages_slowpath+0x2db0/0x2db0 [ 1197.022048] ? kasan_check_read+0x11/0x20 [ 1197.026200] ? cap_capable+0x1f9/0x260 [ 1197.030096] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1197.035638] ? security_capable+0x99/0xc0 [ 1197.039797] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1197.045340] ? ns_capable_common+0x13f/0x170 [ 1197.049758] ? get_anon_bdev+0x2f0/0x2f0 [ 1197.053819] ? sget+0x113/0x150 [ 1197.057103] ? fuse_get_root_inode+0x190/0x190 [ 1197.061687] mount_nodev+0x6b/0x110 [ 1197.065322] fuse_mount+0x2c/0x40 [ 1197.068779] mount_fs+0xae/0x328 [ 1197.072150] vfs_kern_mount.part.34+0xd4/0x4d0 [ 1197.076736] ? may_umount+0xb0/0xb0 [ 1197.080364] ? _raw_read_unlock+0x22/0x30 [ 1197.084513] ? __get_fs_type+0x97/0xc0 [ 1197.088410] do_mount+0x564/0x3070 [ 1197.091957] ? do_raw_spin_unlock+0x9e/0x2e0 [ 1197.096372] ? copy_mount_string+0x40/0x40 [ 1197.100605] ? rcu_pm_notify+0xc0/0xc0 [ 1197.104499] ? copy_mount_options+0x5f/0x380 [ 1197.108911] ? rcu_read_lock_sched_held+0x108/0x120 [ 1197.113935] ? kmem_cache_alloc_trace+0x616/0x780 [ 1197.118789] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1197.124333] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1197.129873] ? copy_mount_options+0x285/0x380 [ 1197.134382] ksys_mount+0x12d/0x140 [ 1197.138011] __x64_sys_mount+0xbe/0x150 [ 1197.141988] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 1197.147011] do_syscall_64+0x1b1/0x800 [ 1197.150905] ? finish_task_switch+0x1ca/0x840 [ 1197.155406] ? syscall_return_slowpath+0x5c0/0x5c0 [ 1197.160338] ? syscall_return_slowpath+0x30f/0x5c0 [ 1197.165279] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 1197.170654] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1197.175505] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1197.180691] RIP: 0033:0x455a09 [ 1197.183879] RSP: 002b:00007f118944d808 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1197.191587] RAX: ffffffffffffffda RBX: 0000000000000016 RCX: 0000000000455a09 2018/05/26 13:24:37 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x900, 0x0, 0x0, 0x0, 0xc00]}, 0x2c) 2018/05/26 13:24:37 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty=0x18, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12]}, 0x10) 2018/05/26 13:24:37 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)="766574683100000000ffffffffffef00", 0x22b) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c44080000000000]}, 0x10) 2018/05/26 13:24:37 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0xd000000, 0x0, 0x0, 0x0, 0xc00]}, 0x2c) 2018/05/26 13:24:37 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty=0x18, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff]}, 0x10) 2018/05/26 13:24:37 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)="766574683100000000ffffffffffef00", 0x22b) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfeffffff00000000]}, 0x10) [ 1197.198854] RDX: 00000000004c1eb6 RSI: 0000000020000240 RDI: 00000000004de0c5 [ 1197.206125] RBP: 0000000000000000 R08: 00007f118944d820 R09: 0000000000000000 [ 1197.213399] R10: 0000000048000000 R11: 0000000000000246 R12: 0000000000000000 [ 1197.220676] R13: 0000000020000240 R14: 0000000048000000 R15: 0000000000000000 2018/05/26 13:24:37 executing program 1: r0 = socket$inet(0x2, 0x5, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vcan0\x00', 0x10) sendmsg(r0, &(0x7f0000000480)={&(0x7f0000000140)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000380)="f0", 0x1}], 0x1}, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000a00)={@multicast1=0xe0000001, @local={0xac, 0x14, 0x14, 0xaa}}, 0xc) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000040)="84", 0x1}], 0x7592da1f, &(0x7f0000000540)}, 0x0) 2018/05/26 13:24:37 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)="766574683100000000ffffffffffef00", 0x22b) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11000000]}, 0x10) 2018/05/26 13:24:37 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty=0x18, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x34]}, 0x10) 2018/05/26 13:24:37 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0xf00, 0x0, 0x0, 0x0, 0xc00]}, 0x2c) 2018/05/26 13:24:37 executing program 7 (fault-call:9 fault-nth:64): r0 = getpid() sched_setattr(r0, &(0x7f00000000c0), 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}}) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) syz_fuse_mount(&(0x7f0000000240)='./control\x00', 0x406000, 0x0, 0x0, 0x0, 0x48000000) close(r1) 2018/05/26 13:24:37 executing program 6: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c000]}, 0x2c) 2018/05/26 13:24:37 executing program 2: r0 = getpid() sched_setattr(r0, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x0, 0x4}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000f86000)='./control/file0\x00') rmdir(&(0x7f00000000c0)='./control\x00') r3 = syz_fuse_mount(&(0x7f0000000240)='./control\x00', 0x406000, 0x0, 0x0, 0x0, 0x0) r4 = syz_fuseblk_mount(&(0x7f0000000140)='./control\x00', &(0x7f0000000180)='./control/file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) close(r1) stat(&(0x7f0000000100)='./control\x00', &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000bc0)='/dev/ptmx\x00', 0x4a8fb9b5c58ec, 0x0) stat(&(0x7f0000000840)='./control\x00', &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r2, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000980)='./control/file1\x00', &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = geteuid() r10 = getegid() sendmsg$netlink(r2, &(0x7f0000000b80)={&(0x7f0000000040)=@kern={0x10, 0x0, 0x0, 0x80108}, 0xc, &(0x7f0000000080)=[{&(0x7f0000000280)={0x300, 0x1a, 0x10, 0x70bd25, 0x25dfdbfd, "", [@nested={0x68, 0x4a, [@typed={0x8, 0x60, @str='@\x00'}, @generic="86d43e3c326c998e621e23d4fddbd650607c001b187349c7c3278573a79a262b63815e5ddf2a77b1072d821405aac5d5b7e9d20b", @generic="a08c6badefd0ff4e34ca294a2d101abf18c64e3374da99460ea4cab0c039d6005d85033760", @generic]}, @nested={0x21c, 0x67, [@generic="be35e9b283a40e5b8d5820839d0be1ea4c85019eefd1601d5af7f1aea965bf1e6ff3d5567eb60dd220917e7f9daff4a418e256fefe4ad69b11fb78bddfb5b864f41697c923813011b10b7e9c890a1ade907891fa2e3d02de2431ec4271ca424f1320278458c53e81e6040df6176f5e9f8a77384b713c8bdbf30c278c833f842c1d8716e357e232ee4eb2138beae3b63e20e8b3b5feeb6a7d0902d10398f957b48cc24801f8983e614b0d6c446f1ad3a7d033f0ff53516831cd7e13f2b646d3ccffb309f946e24b54b71c71cfb8942278b0fbabc44b73", @typed={0x8, 0x2a, @pid=r0}, @generic="65add33b7082cf8192bcc6cbc85ee38ebecece96342977c862efcf885a81226afcf4fb1e2e8a127b69e1bed5a388a37b1ea123cfeeef7c2f902f5b7788ad55691d955c0df3c05df156e4173a8fad14eb1e99b364d191e68692bc2e08016c74fe480ef5b46d904e4fdf33da3083c62706906151252d9456", @generic="5af765e6489c729c0b26805f1e1871f88782f90a6ca0909261f2c673f4d70ac744dc4e45251a0828704a11c1928f0fd32c8119cc3dc9cbb5d653699828fdb3d81b6ae08d73aab9322dbf78a6305642b23c9e3a8f7d606ac1b14581fda5b9afbec390a863ed0dabc4f8ca7db9cbd7ce095b4844a85381de26fc401bf3efa8cdd7236cf3e74a65a97e64c8025c9d002bb39935aa09e4b0b4981a6dc9d3a1f2558f989d1b28dae3aad742185ef850fd3b0989f6b4bd0380c7db1e72cf35b7958f6e8c83"]}, @nested={0x6c, 0x25, [@generic="291e612faaac52d6a0972eaf1c25b90e9065307d5d493377c5ac5770b3c257941de777d0e3192282ad07e7010757ae660c85c8e55dd59121b55eb1e5ee310e7ea2e282614ac9c504a294634ab58b407d8e0b464f053806dd8d31", @typed={0xc, 0x6d, @u64=0x7ff}]}]}, 0x300}, {&(0x7f00000001c0)={0x70, 0x14, 0x0, 0x70bd25, 0x25dfdbff, "", [@nested={0x5c, 0x5d, [@generic="77693795647910636478b7c8b4df9d2f31e80935cc333ee11ad2507b0a01e5e85ee5edb22b7696a233f2b1e623d2310f90818d21575d6454677a81fcc25a112ac274b592", @typed={0x14, 0x94, @ipv6}]}, @typed={0x4, 0x51}]}, 0x70}, {&(0x7f0000000580)={0x21c, 0x16, 0x1, 0x70bd27, 0x25dfdbfc, "", [@generic="dfdf66b935d7b3ba1eca3c4d6b691f9ef53ba14d2bfb45bb2dc236947beea4dd391ff70c", @nested={0x148, 0x50, [@generic, @typed={0x4, 0xc}, @generic="ddae3d0fd23efae9f71e2f2138f0713d76e931d4722281deb24df2fc27e473e4908841aac9e86ac6af9a2329450b3554df4e1905ba80d820152a506d51276f7ff4b4e0f97ccf3c3730f080df33e8ccf5fda8d3673dfeec30a0d119a1f6c66a7e3ca9b7a8f675c4587af24e460a8a1d613d9c90f5bc8a66067e694062570a451a7f4ccfe5e8abeb6eafca081e869439f9a2f3b053ddff13f0214b4ad6f26f655e882d562930e9d6364fdc91056c5a8947b22a0893590c8d46782d80f0e09a7ac7caf69a7b3eb3a725be41ed0aec07ed7994c1e00a", @generic="82bd9ecf7ed468d833f240e79030e5c8176d96106c0ed7934c9c2d375b0096adb3e868bc545ac175d56548ffba3e7ac748e357ee947262cbf05038d85c7001e8a63bcdbec64fe70c97f785799704f07fca122a129e539798353b25a6282199cb84e931482a1046138c02"]}, @generic="cea0deadb237e0ae1e3715a18d7356c27cdd1a05fc349214437d9e58357b36deae8d0424377d5e4ab008c50d3954b6710abcb8ea7d5b2864c7f0d91d2b6424369d5ada69505b5816aca96aa39ef705442abaf593511c61e5c4fa33c3b4993728bd1495776932aeaf4fa9381a3e255c87113a1fa36a8dbdabd7bcd693499813677946beb8bd0fcfb4e292819e99fc062bfcccd5fe83239655846d03b0d3a5"]}, 0x21c}], 0x3, &(0x7f0000000a40)=[@rights={0x28, 0x1, 0x1, [r1, r2, r4, r2, r1]}, @rights={0x30, 0x1, 0x1, [r4, r4, r3, r2, r3, r4, r3, r3]}, @rights={0x30, 0x1, 0x1, [r4, r2, r1, r2, r4, r3, r2, r4]}, @cred={0x20, 0x1, 0x2, r0, r5, r6}, @cred={0x20, 0x1, 0x2, r0, r7, r8}, @rights={0x38, 0x1, 0x1, [r3, r3, r1, r1, r4, r4, r2, r3, r2]}, @cred={0x20, 0x1, 0x2, r0, r9, r10}], 0x120, 0x8801}, 0x91) 2018/05/26 13:24:37 executing program 4: r0 = getpid() sched_setattr(r0, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x0, 0x4}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000013000/0x2000)=nil, 0x2000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000f86000)='./control/file0\x00') syz_fuse_mount(&(0x7f0000000240)='./control\x00', 0x406000, 0x0, 0x0, 0x0, 0x0) syz_fuseblk_mount(&(0x7f0000000140)='./control\x00', &(0x7f0000000180)='./control/file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) getsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000000040), &(0x7f0000000080)=0x4) [ 1197.834331] FAULT_INJECTION: forcing a failure. [ 1197.834331] name failslab, interval 1, probability 0, space 0, times 0 [ 1197.845691] CPU: 1 PID: 3977 Comm: syz-executor7 Not tainted 4.17.0-rc6+ #68 [ 1197.852880] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1197.856040] net_ratelimit: 14 callbacks suppressed [ 1197.856045] TCP: out of memory -- consider tuning tcp_mem [ 1197.862227] Call Trace: [ 1197.862255] dump_stack+0x1b9/0x294 [ 1197.862278] ? dump_stack_print_info.cold.2+0x52/0x52 2018/05/26 13:24:38 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)="766574683100000000ffffffffffef00", 0x22b) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84483]}, 0x10) 2018/05/26 13:24:38 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty=0x18, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe803000000000000]}, 0x10) [ 1197.884097] ? __mutex_lock+0x7d9/0x17f0 [ 1197.888172] should_fail.cold.4+0xa/0x1a [ 1197.892246] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1197.897368] ? kasan_kmalloc+0xc4/0xe0 [ 1197.901264] ? graph_lock+0x170/0x170 [ 1197.905075] ? find_held_lock+0x36/0x1c0 [ 1197.909147] ? __lock_is_held+0xb5/0x140 [ 1197.913233] ? check_same_owner+0x320/0x320 [ 1197.917559] ? kasan_check_write+0x14/0x20 [ 1197.921799] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 1197.926735] ? rcu_note_context_switch+0x710/0x710 [ 1197.931676] __should_failslab+0x124/0x180 [ 1197.935925] should_failslab+0x9/0x14 [ 1197.939743] kmem_cache_alloc+0x2af/0x760 [ 1197.943899] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 1197.948840] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 1197.953867] __kernfs_new_node+0xe7/0x580 [ 1197.958027] ? kernfs_dop_revalidate+0x3c0/0x3c0 [ 1197.962794] ? mutex_unlock+0xd/0x10 [ 1197.966509] ? kernfs_activate+0x20e/0x2a0 [ 1197.970750] ? kernfs_walk_and_get_ns+0x320/0x320 [ 1197.975604] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1197.981146] ? kernfs_link_sibling+0x1d2/0x3b0 [ 1197.985741] kernfs_new_node+0x80/0xf0 [ 1197.989642] __kernfs_create_file+0x4d/0x330 [ 1197.994061] sysfs_add_file_mode_ns+0x21a/0x560 [ 1197.998742] sysfs_add_file+0x4e/0x60 [ 1198.002547] sysfs_merge_group+0xfa/0x230 [ 1198.006701] dpm_sysfs_add+0x161/0x210 [ 1198.010590] device_add+0xa11/0x16d0 [ 1198.014310] ? device_private_init+0x230/0x230 [ 1198.018893] ? kfree+0x1e9/0x260 [ 1198.022269] ? kfree_const+0x5e/0x70 [ 1198.025990] device_create_groups_vargs+0x1ff/0x270 [ 1198.031014] device_create_vargs+0x46/0x60 [ 1198.035279] bdi_register_va.part.10+0xbb/0x9b0 [ 1198.039956] ? cgwb_kill+0x630/0x630 [ 1198.043680] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1198.049227] ? bdi_init+0x416/0x510 [ 1198.052856] ? wb_init+0x9e0/0x9e0 [ 1198.056401] ? bdi_alloc_node+0x67/0xe0 [ 1198.060377] ? bdi_alloc_node+0x67/0xe0 [ 1198.064357] ? rcu_read_lock_sched_held+0x108/0x120 [ 1198.069382] ? kmem_cache_alloc_node_trace+0x34e/0x770 [ 1198.074666] ? _raw_spin_unlock+0x22/0x30 [ 1198.078820] bdi_register_va+0x68/0x80 [ 1198.082716] super_setup_bdi_name+0x123/0x220 [ 1198.087222] ? kill_block_super+0x100/0x100 [ 1198.091553] ? kmem_cache_alloc_trace+0x616/0x780 [ 1198.096401] ? match_wildcard+0x3c0/0x3c0 [ 1198.100554] ? trace_hardirqs_on+0xd/0x10 [ 1198.104718] fuse_fill_super+0xe6e/0x1e20 [ 1198.108878] ? fuse_get_root_inode+0x190/0x190 [ 1198.113468] ? __alloc_pages_slowpath+0x2db0/0x2db0 [ 1198.118496] ? kasan_check_read+0x11/0x20 [ 1198.122652] ? cap_capable+0x1f9/0x260 [ 1198.126552] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1198.132096] ? security_capable+0x99/0xc0 [ 1198.136250] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1198.141790] ? ns_capable_common+0x13f/0x170 [ 1198.146212] ? get_anon_bdev+0x2f0/0x2f0 [ 1198.150278] ? sget+0x113/0x150 [ 1198.153568] ? fuse_get_root_inode+0x190/0x190 [ 1198.158154] mount_nodev+0x6b/0x110 [ 1198.161785] fuse_mount+0x2c/0x40 [ 1198.165246] mount_fs+0xae/0x328 [ 1198.168620] vfs_kern_mount.part.34+0xd4/0x4d0 [ 1198.173216] ? may_umount+0xb0/0xb0 [ 1198.176842] ? _raw_read_unlock+0x22/0x30 [ 1198.181001] ? __get_fs_type+0x97/0xc0 [ 1198.184893] do_mount+0x564/0x3070 [ 1198.188439] ? copy_mount_string+0x40/0x40 [ 1198.192682] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1198.197446] ? retint_kernel+0x10/0x10 [ 1198.201343] ? copy_mount_options+0x1f0/0x380 [ 1198.205842] ? __sanitizer_cov_trace_pc+0x38/0x50 [ 1198.210693] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1198.216231] ? copy_mount_options+0x285/0x380 [ 1198.220737] ksys_mount+0x12d/0x140 [ 1198.224366] __x64_sys_mount+0xbe/0x150 [ 1198.228343] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 1198.233370] do_syscall_64+0x1b1/0x800 [ 1198.237260] ? finish_task_switch+0x1ca/0x840 [ 1198.241755] ? syscall_return_slowpath+0x5c0/0x5c0 [ 1198.246686] ? syscall_return_slowpath+0x30f/0x5c0 [ 1198.252235] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 1198.257606] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1198.262468] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1198.267663] RIP: 0033:0x455a09 [ 1198.270848] RSP: 002b:00007f118944d808 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1198.278553] RAX: ffffffffffffffda RBX: 0000000000000016 RCX: 0000000000455a09 2018/05/26 13:24:38 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xc00]}, 0x2c) 2018/05/26 13:24:38 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty=0x18, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf401]}, 0x10) 2018/05/26 13:24:38 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)="766574683100000000ffffffffffef00", 0x22b) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84478]}, 0x10) 2018/05/26 13:24:38 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0xc00]}, 0x2c) 2018/05/26 13:24:38 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty=0x18, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, 0x10) 2018/05/26 13:24:38 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xc00]}, 0x2c) [ 1198.285823] RDX: 00000000004c1eb6 RSI: 0000000020000240 RDI: 00000000004de0c5 [ 1198.293088] RBP: 0000000000000000 R08: 00007f118944d820 R09: 0000000000000000 [ 1198.300353] R10: 0000000048000000 R11: 0000000000000246 R12: 0000000000000000 [ 1198.304040] TCP: out of memory -- consider tuning tcp_mem [ 1198.307618] R13: 0000000020000240 R14: 0000000048000000 R15: 0000000000000000 [ 1198.307708] TCP: out of memory -- consider tuning tcp_mem 2018/05/26 13:24:39 executing program 1: r0 = socket$inet(0x2, 0x5, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vcan0\x00', 0x10) sendmsg(r0, &(0x7f0000000480)={&(0x7f0000000140)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000380)="f0", 0x1}], 0x1}, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000a00)={@multicast1=0xe0000001, @local={0xac, 0x14, 0x14, 0xaa}}, 0xc) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000040)="84", 0x1}], 0x7, &(0x7f0000000540)}, 0x0) 2018/05/26 13:24:39 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty=0x18, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000]}, 0x10) 2018/05/26 13:24:39 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0xe8030000000000, 0x0, 0x0, 0x0, 0xc00]}, 0x2c) 2018/05/26 13:24:39 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)="766574683100000000ffffffffffef00", 0x22b) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000]}, 0x10) 2018/05/26 13:24:39 executing program 4: r0 = getpid() sched_setattr(r0, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x0, 0x4}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f0000000100)='./control/file1\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) ioctl$KDSETMODE(r2, 0x4b3a, 0x4) unlink(&(0x7f0000f86000)='./control/file0\x00') ioctl$SG_GET_VERSION_NUM(r2, 0x2282, &(0x7f0000000000)) syz_fuse_mount(&(0x7f0000000240)='./control\x00', 0x406000, 0x0, 0x0, 0x0, 0x0) syz_fuseblk_mount(&(0x7f0000000140)='./control\x00', &(0x7f0000000180)='./control/file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) close(r1) 2018/05/26 13:24:39 executing program 7 (fault-call:9 fault-nth:65): r0 = getpid() sched_setattr(r0, &(0x7f00000000c0), 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}}) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) syz_fuse_mount(&(0x7f0000000240)='./control\x00', 0x406000, 0x0, 0x0, 0x0, 0x48000000) close(r1) 2018/05/26 13:24:39 executing program 6: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00000000000000]}, 0x2c) 2018/05/26 13:24:39 executing program 2: r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000100)={0xffffffff, 0x1, 0x10}, 0xc) r1 = socket$vsock_stream(0x28, 0x1, 0x0) dup3(r0, r1, 0x80000) r2 = getpid() sched_setattr(r2, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x0, 0x4}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r4 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r4, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000f86000)='./control/file0\x00') rmdir(&(0x7f00000000c0)='./control\x00') syz_fuse_mount(&(0x7f0000000240)='./control\x00', 0x406000, 0x0, 0x0, 0x0, 0x0) syz_fuseblk_mount(&(0x7f0000000140)='./control\x00', &(0x7f0000000180)='./control/file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_XCRS(r4, 0x4188aea7, &(0x7f0000000040)={0x5, 0x7f, [{0x17d, 0x0, 0x80000001}, {0x1, 0x0, 0x1f60}, {0x2, 0x0, 0x400000000}, {0x1f, 0x0, 0xffffffffffffff14}, {0x7fffffff, 0x0, 0x7}]}) close(r3) [ 1198.997790] FAULT_INJECTION: forcing a failure. [ 1198.997790] name failslab, interval 1, probability 0, space 0, times 0 [ 1199.009152] CPU: 1 PID: 4042 Comm: syz-executor7 Not tainted 4.17.0-rc6+ #68 [ 1199.016343] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1199.025694] Call Trace: [ 1199.028297] dump_stack+0x1b9/0x294 [ 1199.031943] ? dump_stack_print_info.cold.2+0x52/0x52 [ 1199.037151] ? mutex_trylock+0x2a0/0x2a0 [ 1199.041227] should_fail.cold.4+0xa/0x1a [ 1199.045301] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1199.050421] ? graph_lock+0x170/0x170 [ 1199.054231] ? lock_downgrade+0x8e0/0x8e0 [ 1199.058387] ? kasan_check_write+0x14/0x20 [ 1199.062631] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 1199.067567] ? find_held_lock+0x36/0x1c0 [ 1199.071640] ? __lock_is_held+0xb5/0x140 [ 1199.075724] ? check_same_owner+0x320/0x320 [ 1199.080055] ? rcu_note_context_switch+0x710/0x710 [ 1199.084995] __should_failslab+0x124/0x180 [ 1199.089242] should_failslab+0x9/0x14 [ 1199.093052] kmem_cache_alloc_trace+0x2cb/0x780 [ 1199.097733] ? device_create_file+0x1e0/0x1e0 [ 1199.102231] kobject_uevent_env+0x20f/0xea0 [ 1199.106554] ? device_pm_add+0x221/0x340 [ 1199.110632] kobject_uevent+0x1f/0x30 [ 1199.114440] device_add+0xb01/0x16d0 [ 1199.118171] ? device_private_init+0x230/0x230 [ 1199.122764] ? kfree+0x1e9/0x260 [ 1199.126147] ? kfree_const+0x5e/0x70 [ 1199.129871] device_create_groups_vargs+0x1ff/0x270 [ 1199.134896] device_create_vargs+0x46/0x60 [ 1199.139147] bdi_register_va.part.10+0xbb/0x9b0 [ 1199.143836] ? cgwb_kill+0x630/0x630 [ 1199.147561] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1199.153104] ? bdi_init+0x416/0x510 [ 1199.156739] ? wb_init+0x9e0/0x9e0 [ 1199.160287] ? bdi_alloc_node+0x67/0xe0 [ 1199.164268] ? bdi_alloc_node+0x67/0xe0 [ 1199.168246] ? rcu_read_lock_sched_held+0x108/0x120 [ 1199.173266] ? kmem_cache_alloc_node_trace+0x34e/0x770 [ 1199.178547] ? _raw_spin_unlock+0x22/0x30 [ 1199.182703] bdi_register_va+0x68/0x80 [ 1199.186596] super_setup_bdi_name+0x123/0x220 [ 1199.191098] ? kill_block_super+0x100/0x100 [ 1199.195429] ? kmem_cache_alloc_trace+0x616/0x780 [ 1199.200274] ? match_wildcard+0x3c0/0x3c0 [ 1199.204424] ? trace_hardirqs_on+0xd/0x10 [ 1199.208589] fuse_fill_super+0xe6e/0x1e20 [ 1199.212754] ? fuse_get_root_inode+0x190/0x190 [ 1199.217342] ? __alloc_pages_slowpath+0x2db0/0x2db0 [ 1199.222366] ? kasan_check_read+0x11/0x20 [ 1199.226523] ? cap_capable+0x1f9/0x260 [ 1199.230421] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1199.235962] ? security_capable+0x99/0xc0 [ 1199.240128] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 2018/05/26 13:24:39 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty=0x18, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf4080b00]}, 0x10) 2018/05/26 13:24:39 executing program 6: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500]}, 0x2c) 2018/05/26 13:24:39 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty=0x18, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000]}, 0x10) 2018/05/26 13:24:39 executing program 6: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3a000]}, 0x2c) 2018/05/26 13:24:39 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty=0x18, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe000000]}, 0x10) 2018/05/26 13:24:39 executing program 6: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2400]}, 0x2c) 2018/05/26 13:24:39 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty=0x18, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000]}, 0x10) [ 1199.245669] ? ns_capable_common+0x13f/0x170 [ 1199.250086] ? get_anon_bdev+0x2f0/0x2f0 [ 1199.254159] ? sget+0x113/0x150 [ 1199.257444] ? fuse_get_root_inode+0x190/0x190 [ 1199.262028] mount_nodev+0x6b/0x110 [ 1199.265659] fuse_mount+0x2c/0x40 [ 1199.269120] mount_fs+0xae/0x328 [ 1199.272499] vfs_kern_mount.part.34+0xd4/0x4d0 [ 1199.277088] ? may_umount+0xb0/0xb0 [ 1199.280725] ? _raw_read_unlock+0x22/0x30 [ 1199.284872] ? __get_fs_type+0x97/0xc0 [ 1199.288763] do_mount+0x564/0x3070 [ 1199.292314] ? copy_mount_string+0x40/0x40 [ 1199.296555] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1199.301322] ? retint_kernel+0x10/0x10 [ 1199.305216] ? copy_mount_options+0x1e3/0x380 [ 1199.309716] ? write_comp_data+0x70/0x70 [ 1199.313779] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1199.316428] TCP: out of memory -- consider tuning tcp_mem [ 1199.319312] ? copy_mount_options+0x285/0x380 [ 1199.319332] ksys_mount+0x12d/0x140 [ 1199.319350] __x64_sys_mount+0xbe/0x150 [ 1199.319366] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 1199.319384] do_syscall_64+0x1b1/0x800 [ 1199.319403] ? finish_task_switch+0x1ca/0x840 [ 1199.350321] ? syscall_return_slowpath+0x5c0/0x5c0 [ 1199.351112] TCP: out of memory -- consider tuning tcp_mem [ 1199.355254] ? syscall_return_slowpath+0x30f/0x5c0 [ 1199.355276] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 1199.355297] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1199.355317] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1199.355327] RIP: 0033:0x455a09 [ 1199.355338] RSP: 002b:00007f118944d808 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1199.392015] RAX: ffffffffffffffda RBX: 0000000000000016 RCX: 0000000000455a09 2018/05/26 13:24:39 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty=0x18, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe]}, 0x10) [ 1199.399286] RDX: 00000000004c1eb6 RSI: 0000000020000240 RDI: 00000000004de0c5 [ 1199.406555] RBP: 0000000000000000 R08: 00007f118944d820 R09: 0000000000000000 [ 1199.413824] R10: 0000000048000000 R11: 0000000000000246 R12: 0000000000000000 [ 1199.421093] R13: 0000000020000240 R14: 0000000048000000 R15: 0000000000000000 2018/05/26 13:24:40 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty=0x18, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e8]}, 0x10) 2018/05/26 13:24:40 executing program 6: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x2c) 2018/05/26 13:24:40 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)="766574683100000000ffffffffffef00", 0x22b) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000]}, 0x10) 2018/05/26 13:24:40 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0xc00000000000000, 0x0, 0x0, 0x0, 0xc00]}, 0x2c) 2018/05/26 13:24:40 executing program 7 (fault-call:9 fault-nth:66): r0 = getpid() sched_setattr(r0, &(0x7f00000000c0), 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}}) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) syz_fuse_mount(&(0x7f0000000240)='./control\x00', 0x406000, 0x0, 0x0, 0x0, 0x48000000) close(r1) 2018/05/26 13:24:40 executing program 4: r0 = getpid() sched_setattr(r0, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x0, 0x4}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000f86000)='./control/file0\x00') ioctl$KVM_ARM_SET_DEVICE_ADDR(r2, 0x4010aeab, &(0x7f0000000040)={0x3, 0x2}) syz_fuse_mount(&(0x7f0000000240)='./control\x00', 0x406000, 0x0, 0x0, 0x0, 0x0) write$sndseq(r2, &(0x7f0000000080)=[{0x8, 0x1ff, 0x1, 0xc6, @time={0x0, 0x1c9c380}, {0x20, 0x8000}, {0x3, 0x9}, @raw8={"aa7db968dd747065926e5b9d"}}], 0x30) syz_fuseblk_mount(&(0x7f0000000140)='./control\x00', &(0x7f0000000180)='./control/file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) close(r1) 2018/05/26 13:24:40 executing program 2: r0 = getpid() sched_setattr(r0, &(0x7f00000000c0)={0x0, 0x2, 0x9eba90b68d5e0031, 0x0, 0x4, 0xfffffffffffffffe}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f0000000400)='./control/file0\x00', 0x2) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000f86000)='./control/file0\x00') get_thread_area(&(0x7f0000000040)={0x2, 0x20001000, 0x6000, 0x1, 0xfffffffffffff838, 0x100, 0x7, 0x2, 0x9, 0x68}) rmdir(&(0x7f00000000c0)='./control\x00') getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000280)={{{@in=@broadcast, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@rand_addr}}, &(0x7f0000000080)=0xe8) write$binfmt_script(r2, &(0x7f0000000440)={'#! ', './control/file1', [{0x20, '#wlan1vmnet0mime_type'}, {0x20, '}'}, {0x20, '*cgroup'}, {0x20, 'posix_acl_access%,keyring'}, {0x20}, {0x20, "a040"}], 0xa, "88a8bbd75910451fb3ed9e85dec515678451e1a6"}, 0x65) ioctl$DRM_IOCTL_GET_CLIENT(r2, 0xc0286405, &(0x7f0000000100)={0x4, 0x7, r0, 0x19ab95f8, r3, 0x5, 0xff}) syz_fuse_mount(&(0x7f0000000240)='./control\x00', 0x406000, 0x0, 0x0, 0x0, 0x0) syz_fuseblk_mount(&(0x7f0000000140)='./control\x00', &(0x7f0000000180)='./control/file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$key(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)={0x2, 0x14, 0x0, 0x9, 0xb, 0x0, 0x70bd29, 0x25dfdbff, [@sadb_x_kmaddress={0x7, 0x19, 0x0, @in={0x2, 0x4e23, @remote={0xac, 0x14, 0x14, 0xbb}}, @in6={0xa, 0x4e24, 0xffffffffffffff00, @ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0x14, 0xaa}}, 0x1010000}}, @sadb_ident={0x2, 0xa, 0x1000, 0x0, 0xf50}]}, 0x58}, 0x1}, 0x4000000) close(r1) 2018/05/26 13:24:40 executing program 1: r0 = socket$inet(0x2, 0x5, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vcan0\x00', 0x10) sendmsg(r0, &(0x7f0000000480)={&(0x7f0000000140)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000380)="f0", 0x1}], 0x1}, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000a00)={@multicast1=0xe0000001, @local={0xac, 0x14, 0x14, 0xaa}}, 0xc) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000040)="84", 0x1}], 0x7592da19, &(0x7f0000000540)}, 0x0) [ 1200.096044] TCP: out of memory -- consider tuning tcp_mem [ 1200.101092] FAULT_INJECTION: forcing a failure. [ 1200.101092] name failslab, interval 1, probability 0, space 0, times 0 [ 1200.101786] TCP: out of memory -- consider tuning tcp_mem [ 1200.112894] CPU: 1 PID: 4101 Comm: syz-executor7 Not tainted 4.17.0-rc6+ #68 [ 1200.112903] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1200.112911] Call Trace: [ 1200.137533] dump_stack+0x1b9/0x294 [ 1200.141174] ? dump_stack_print_info.cold.2+0x52/0x52 2018/05/26 13:24:40 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)="766574683100000000ffffffffffef00", 0x22b) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81440800]}, 0x10) [ 1200.146378] ? mutex_trylock+0x2a0/0x2a0 [ 1200.150454] should_fail.cold.4+0xa/0x1a [ 1200.154528] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1200.159648] ? graph_lock+0x170/0x170 [ 1200.163455] ? lock_downgrade+0x8e0/0x8e0 [ 1200.167608] ? kasan_check_write+0x14/0x20 [ 1200.171843] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 1200.176783] ? find_held_lock+0x36/0x1c0 [ 1200.180858] ? __lock_is_held+0xb5/0x140 [ 1200.184942] ? check_same_owner+0x320/0x320 [ 1200.189278] ? rcu_note_context_switch+0x710/0x710 [ 1200.194223] __should_failslab+0x124/0x180 [ 1200.198469] should_failslab+0x9/0x14 [ 1200.202280] kmem_cache_alloc_trace+0x2cb/0x780 [ 1200.206964] ? device_create_file+0x1e0/0x1e0 [ 1200.211467] kobject_uevent_env+0x20f/0xea0 [ 1200.215794] ? device_pm_add+0x221/0x340 [ 1200.219873] kobject_uevent+0x1f/0x30 [ 1200.223682] device_add+0xb01/0x16d0 [ 1200.227408] ? device_private_init+0x230/0x230 [ 1200.231983] ? kfree+0x1e9/0x260 [ 1200.235350] ? kfree_const+0x5e/0x70 [ 1200.239075] device_create_groups_vargs+0x1ff/0x270 [ 1200.244095] device_create_vargs+0x46/0x60 [ 1200.248334] bdi_register_va.part.10+0xbb/0x9b0 [ 1200.249473] TCP: out of memory -- consider tuning tcp_mem [ 1200.253561] ? cgwb_kill+0x630/0x630 [ 1200.253581] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1200.253594] ? bdi_init+0x416/0x510 [ 1200.253607] ? wb_init+0x9e0/0x9e0 [ 1200.253623] ? bdi_alloc_node+0x67/0xe0 [ 1200.253635] ? bdi_alloc_node+0x67/0xe0 [ 1200.253650] ? rcu_read_lock_sched_held+0x108/0x120 [ 1200.253665] ? kmem_cache_alloc_node_trace+0x34e/0x770 [ 1200.253682] ? _raw_spin_unlock+0x22/0x30 [ 1200.259616] TCP: out of memory -- consider tuning tcp_mem [ 1200.262903] bdi_register_va+0x68/0x80 [ 1200.262922] super_setup_bdi_name+0x123/0x220 [ 1200.262938] ? kill_block_super+0x100/0x100 [ 1200.262955] ? kmem_cache_alloc_trace+0x616/0x780 [ 1200.262973] ? match_wildcard+0x3c0/0x3c0 [ 1200.262989] ? trace_hardirqs_on+0xd/0x10 [ 1200.263011] fuse_fill_super+0xe6e/0x1e20 [ 1200.333274] ? fuse_get_root_inode+0x190/0x190 [ 1200.337850] ? __alloc_pages_slowpath+0x2db0/0x2db0 [ 1200.342865] ? kasan_check_read+0x11/0x20 [ 1200.347015] ? cap_capable+0x1f9/0x260 [ 1200.350902] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1200.356419] ? security_capable+0x99/0xc0 [ 1200.360553] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1200.366071] ? ns_capable_common+0x13f/0x170 [ 1200.370461] ? get_anon_bdev+0x2f0/0x2f0 [ 1200.374515] ? sget+0x113/0x150 [ 1200.377800] ? fuse_get_root_inode+0x190/0x190 [ 1200.382372] mount_nodev+0x6b/0x110 [ 1200.385986] fuse_mount+0x2c/0x40 [ 1200.389433] mount_fs+0xae/0x328 [ 1200.392783] vfs_kern_mount.part.34+0xd4/0x4d0 [ 1200.397354] ? may_umount+0xb0/0xb0 [ 1200.400972] ? _raw_read_unlock+0x22/0x30 [ 1200.405119] ? __get_fs_type+0x97/0xc0 [ 1200.408998] do_mount+0x564/0x3070 [ 1200.412533] ? do_raw_spin_unlock+0x9e/0x2e0 [ 1200.416925] ? copy_mount_string+0x40/0x40 [ 1200.421143] ? rcu_pm_notify+0xc0/0xc0 [ 1200.425022] ? copy_mount_options+0x5f/0x380 [ 1200.429422] ? rcu_read_lock_sched_held+0x108/0x120 [ 1200.434428] ? kmem_cache_alloc_trace+0x616/0x780 [ 1200.439260] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1200.444794] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1200.450315] ? copy_mount_options+0x285/0x380 [ 1200.454794] ksys_mount+0x12d/0x140 [ 1200.458405] __x64_sys_mount+0xbe/0x150 [ 1200.462371] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 1200.467392] do_syscall_64+0x1b1/0x800 [ 1200.471271] ? finish_task_switch+0x1ca/0x840 [ 1200.475749] ? syscall_return_slowpath+0x5c0/0x5c0 [ 1200.480663] ? syscall_return_slowpath+0x30f/0x5c0 [ 1200.485578] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 1200.490928] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1200.495764] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1200.500936] RIP: 0033:0x455a09 [ 1200.504110] RSP: 002b:00007f118944d808 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1200.511817] RAX: ffffffffffffffda RBX: 0000000000000016 RCX: 0000000000455a09 [ 1200.519081] RDX: 00000000004c1eb6 RSI: 0000000020000240 RDI: 00000000004de0c5 [ 1200.526338] RBP: 0000000000000000 R08: 00007f118944d820 R09: 0000000000000000 [ 1200.533589] R10: 0000000048000000 R11: 0000000000000246 R12: 0000000000000000 [ 1200.540849] R13: 0000000020000240 R14: 0000000048000000 R15: 0000000000000000 2018/05/26 13:24:41 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty=0x18, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1200]}, 0x10) 2018/05/26 13:24:41 executing program 6: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000]}, 0x2c) 2018/05/26 13:24:41 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)="766574683100000000ffffffffffef00", 0x22b) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89440800]}, 0x10) 2018/05/26 13:24:41 executing program 7 (fault-call:9 fault-nth:67): r0 = getpid() sched_setattr(r0, &(0x7f00000000c0), 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}}) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) syz_fuse_mount(&(0x7f0000000240)='./control\x00', 0x406000, 0x0, 0x0, 0x0, 0x48000000) close(r1) 2018/05/26 13:24:41 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0xc00, 0x0, 0x0, 0x0, 0xc00]}, 0x2c) 2018/05/26 13:24:41 executing program 1: r0 = socket$inet(0x2, 0x5, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vcan0\x00', 0x10) sendmsg(r0, &(0x7f0000000480)={&(0x7f0000000140)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000380)="f0", 0x1}], 0x1}, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000a00)={@multicast1=0xe0000001, @local={0xac, 0x14, 0x14, 0xaa}}, 0xc) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000040)="84", 0x1}], 0xa, &(0x7f0000000540)}, 0x0) 2018/05/26 13:24:41 executing program 4: r0 = getpid() sched_setattr(r0, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x0, 0x4}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000000100)='./control/file0\x00') sendmsg$key(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020f000312000025bd0900ffdbdf2505001a00ac141401000000000000000000000000fe8000000000000000000000000000161a00040002001300000000002cbd7000013500000500068000a000000a004e2308000200fe8000000000000000000000000000130100000000000000040003000400000000000000000000000300000000000000090000000000000000"], 0x90}, 0x1}, 0x20008804) syz_fuse_mount(&(0x7f0000000240)='./control\x00', 0x406000, 0x0, 0x0, 0x0, 0x0) syz_fuseblk_mount(&(0x7f0000000140)='./control\x00', &(0x7f0000000180)='./control/file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) close(r1) 2018/05/26 13:24:41 executing program 2: r0 = getpid() sched_setattr(r0, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x0, 0x4}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x40) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) tkill(r0, 0x1) rmdir(&(0x7f00000000c0)='./control\x00') syz_fuse_mount(&(0x7f0000000240)='./control\x00', 0x406000, 0x0, 0x0, 0x0, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r2, 0x28, 0x6, &(0x7f0000000200), 0x10) r3 = semget$private(0x0, 0x0, 0x26) semtimedop(r3, &(0x7f0000000380)=[{0x3, 0x9fb2, 0x1800}, {0x4, 0x100000000, 0x800}, {0x2, 0xfffffffffffffffe, 0x800}, {0x3, 0x80, 0x1800}], 0x4, &(0x7f00000003c0)={0x77359400}) syz_fuseblk_mount(&(0x7f0000000140)='./control\x00', &(0x7f0000000180)='./control/file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x20101, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@mcast2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@ipv4={[], [], @remote}}}, &(0x7f00000001c0)=0xe8) r5 = getgid() syz_fuse_mount(&(0x7f0000000100)='./control\x00', 0x1000, r4, r5, 0xfffffffeffffffff, 0x80) close(r1) [ 1201.165513] FAULT_INJECTION: forcing a failure. [ 1201.165513] name failslab, interval 1, probability 0, space 0, times 0 [ 1201.177450] CPU: 1 PID: 4135 Comm: syz-executor7 Not tainted 4.17.0-rc6+ #68 [ 1201.184045] TCP: out of memory -- consider tuning tcp_mem [ 1201.184639] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1201.199554] Call Trace: [ 1201.202156] dump_stack+0x1b9/0x294 [ 1201.205792] ? dump_stack_print_info.cold.2+0x52/0x52 [ 1201.210997] ? kobject_uevent_env+0x62e/0xea0 2018/05/26 13:24:41 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)="766574683100000000ffffffffffef00", 0x22b) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]}, 0x10) 2018/05/26 13:24:41 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty=0x18, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3400000000000000]}, 0x10) [ 1201.215502] should_fail.cold.4+0xa/0x1a [ 1201.219568] ? debug_check_no_locks_freed+0x310/0x310 [ 1201.224766] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1201.229877] ? __might_sleep+0x95/0x190 [ 1201.233865] ? graph_lock+0x170/0x170 [ 1201.237674] ? __mutex_lock+0x7d9/0x17f0 [ 1201.241745] ? unwind_get_return_address+0x61/0xa0 [ 1201.246687] ? find_held_lock+0x36/0x1c0 [ 1201.250761] ? __lock_is_held+0xb5/0x140 [ 1201.254843] ? check_same_owner+0x320/0x320 [ 1201.259176] ? rcu_note_context_switch+0x710/0x710 [ 1201.264116] ? put_dec+0xf0/0xf0 [ 1201.267493] ? format_decode+0x1a9/0xae0 [ 1201.271566] __should_failslab+0x124/0x180 [ 1201.275823] should_failslab+0x9/0x14 [ 1201.279643] kmem_cache_alloc_node+0x272/0x780 [ 1201.284245] __alloc_skb+0x111/0x780 [ 1201.287974] ? skb_scrub_packet+0x580/0x580 [ 1201.292301] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 1201.297504] ? netlink_has_listeners+0x2ff/0x4c0 [ 1201.302269] ? netlink_tap_init_net+0x3c0/0x3c0 [ 1201.306950] kobject_uevent_env+0x801/0xea0 [ 1201.311277] ? device_pm_add+0x221/0x340 [ 1201.315349] kobject_uevent+0x1f/0x30 [ 1201.319151] device_add+0xb01/0x16d0 [ 1201.322872] ? device_private_init+0x230/0x230 [ 1201.327458] ? kfree+0x1e9/0x260 [ 1201.330830] ? kfree_const+0x5e/0x70 [ 1201.334559] device_create_groups_vargs+0x1ff/0x270 [ 1201.339579] device_create_vargs+0x46/0x60 [ 1201.343817] bdi_register_va.part.10+0xbb/0x9b0 [ 1201.348488] ? cgwb_kill+0x630/0x630 [ 1201.352210] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1201.357750] ? bdi_init+0x416/0x510 [ 1201.361379] ? wb_init+0x9e0/0x9e0 [ 1201.364922] ? bdi_alloc_node+0x67/0xe0 [ 1201.368901] ? bdi_alloc_node+0x67/0xe0 [ 1201.372881] ? rcu_read_lock_sched_held+0x108/0x120 [ 1201.377897] ? kmem_cache_alloc_node_trace+0x34e/0x770 [ 1201.383178] ? _raw_spin_unlock+0x22/0x30 [ 1201.387334] bdi_register_va+0x68/0x80 [ 1201.391230] super_setup_bdi_name+0x123/0x220 [ 1201.395730] ? kill_block_super+0x100/0x100 [ 1201.400058] ? kmem_cache_alloc_trace+0x616/0x780 [ 1201.404908] ? match_wildcard+0x3c0/0x3c0 [ 1201.409060] ? trace_hardirqs_on+0xd/0x10 [ 1201.413216] fuse_fill_super+0xe6e/0x1e20 [ 1201.417377] ? fuse_get_root_inode+0x190/0x190 [ 1201.421970] ? __alloc_pages_slowpath+0x2db0/0x2db0 [ 1201.426997] ? kasan_check_read+0x11/0x20 [ 1201.431150] ? cap_capable+0x1f9/0x260 [ 1201.435047] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1201.440589] ? security_capable+0x99/0xc0 [ 1201.444744] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1201.450285] ? ns_capable_common+0x13f/0x170 [ 1201.454699] ? get_anon_bdev+0x2f0/0x2f0 [ 1201.458762] ? sget+0x113/0x150 [ 1201.462050] ? fuse_get_root_inode+0x190/0x190 [ 1201.466639] mount_nodev+0x6b/0x110 [ 1201.470276] fuse_mount+0x2c/0x40 [ 1201.473738] mount_fs+0xae/0x328 [ 1201.477109] vfs_kern_mount.part.34+0xd4/0x4d0 [ 1201.481699] ? may_umount+0xb0/0xb0 [ 1201.485332] ? _raw_read_unlock+0x22/0x30 [ 1201.489492] ? __get_fs_type+0x97/0xc0 [ 1201.493394] do_mount+0x564/0x3070 [ 1201.496942] ? copy_mount_string+0x40/0x40 [ 1201.501192] ? rcu_pm_notify+0xc0/0xc0 [ 1201.505092] ? copy_mount_options+0x5f/0x380 [ 1201.509508] ? rcu_read_lock_sched_held+0x108/0x120 [ 1201.514532] ? kmem_cache_alloc_trace+0x616/0x780 [ 1201.519383] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1201.524928] ? _copy_from_user+0xdf/0x150 [ 1201.529087] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1201.534624] ? copy_mount_options+0x285/0x380 [ 1201.539121] ksys_mount+0x12d/0x140 [ 1201.542755] __x64_sys_mount+0xbe/0x150 [ 1201.546735] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 1201.551754] do_syscall_64+0x1b1/0x800 [ 1201.555646] ? finish_task_switch+0x1ca/0x840 [ 1201.560140] ? syscall_return_slowpath+0x5c0/0x5c0 [ 1201.565072] ? syscall_return_slowpath+0x30f/0x5c0 [ 1201.570008] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 1201.575378] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1201.580235] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1201.585420] RIP: 0033:0x455a09 [ 1201.588606] RSP: 002b:00007f118944d808 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1201.596315] RAX: ffffffffffffffda RBX: 0000000000000016 RCX: 0000000000455a09 [ 1201.603585] RDX: 00000000004c1eb6 RSI: 0000000020000240 RDI: 00000000004de0c5 2018/05/26 13:24:41 executing program 6: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000]}, 0x2c) 2018/05/26 13:24:41 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)="766574683100000000ffffffffffef00", 0x22b) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8448a]}, 0x10) 2018/05/26 13:24:41 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty=0x18, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x142800]}, 0x10) 2018/05/26 13:24:41 executing program 6: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5207]}, 0x2c) 2018/05/26 13:24:41 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)="766574683100000000ffffffffffef00", 0x22b) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5580]}, 0x10) 2018/05/26 13:24:41 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty=0x18, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8055]}, 0x10) 2018/05/26 13:24:41 executing program 6: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, 0x2c) 2018/05/26 13:24:41 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty=0x18, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1100]}, 0x10) 2018/05/26 13:24:41 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)="766574683100000000ffffffffffef00", 0x22b) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8944080000000000]}, 0x10) [ 1201.610855] RBP: 0000000000000000 R08: 00007f118944d820 R09: 0000000000000000 [ 1201.618126] R10: 0000000048000000 R11: 0000000000000246 R12: 0000000000000000 [ 1201.625394] R13: 0000000020000240 R14: 0000000048000000 R15: 0000000000000000 2018/05/26 13:24:41 executing program 7 (fault-call:9 fault-nth:68): r0 = getpid() sched_setattr(r0, &(0x7f00000000c0), 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}}) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) syz_fuse_mount(&(0x7f0000000240)='./control\x00', 0x406000, 0x0, 0x0, 0x0, 0x48000000) close(r1) 2018/05/26 13:24:41 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty=0x18, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5580]}, 0x10) [ 1201.788362] FAULT_INJECTION: forcing a failure. [ 1201.788362] name failslab, interval 1, probability 0, space 0, times 0 [ 1201.799769] CPU: 1 PID: 4192 Comm: syz-executor7 Not tainted 4.17.0-rc6+ #68 [ 1201.806953] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1201.816297] Call Trace: [ 1201.818881] dump_stack+0x1b9/0x294 [ 1201.822498] ? dump_stack_print_info.cold.2+0x52/0x52 [ 1201.827674] ? is_bpf_text_address+0xd7/0x170 [ 1201.832158] ? kernel_text_address+0x79/0xf0 [ 1201.836555] ? __unwind_start+0x166/0x330 [ 1201.840700] should_fail.cold.4+0xa/0x1a [ 1201.844758] ? __save_stack_trace+0x7e/0xd0 [ 1201.849080] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1201.854182] ? graph_lock+0x170/0x170 [ 1201.857970] ? save_stack+0x43/0xd0 [ 1201.861580] ? kasan_kmalloc+0xc4/0xe0 [ 1201.865453] ? kasan_slab_alloc+0x12/0x20 [ 1201.869590] ? find_held_lock+0x36/0x1c0 [ 1201.873635] ? __lock_is_held+0xb5/0x140 [ 1201.877703] ? check_same_owner+0x320/0x320 [ 1201.882021] ? rcu_note_context_switch+0x710/0x710 [ 1201.886943] __should_failslab+0x124/0x180 [ 1201.891166] should_failslab+0x9/0x14 [ 1201.894951] kmem_cache_alloc_node_trace+0x26f/0x770 [ 1201.900056] __kmalloc_node_track_caller+0x33/0x70 [ 1201.904973] __kmalloc_reserve.isra.38+0x3a/0xe0 [ 1201.909717] __alloc_skb+0x14d/0x780 [ 1201.913426] ? skb_scrub_packet+0x580/0x580 [ 1201.917752] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 1201.922941] ? netlink_has_listeners+0x2ff/0x4c0 [ 1201.927683] ? netlink_tap_init_net+0x3c0/0x3c0 [ 1201.932359] kobject_uevent_env+0x801/0xea0 [ 1201.936684] ? device_pm_add+0x221/0x340 [ 1201.940756] kobject_uevent+0x1f/0x30 [ 1201.944560] device_add+0xb01/0x16d0 [ 1201.948280] ? device_private_init+0x230/0x230 [ 1201.952863] ? kfree+0x1e9/0x260 [ 1201.956238] ? kfree_const+0x5e/0x70 [ 1201.959939] device_create_groups_vargs+0x1ff/0x270 [ 1201.961483] sctp: sctp_transport_update_pmtu: Reported pmtu 72 too low, using default minimum of 512 [ 1201.964947] device_create_vargs+0x46/0x60 [ 1201.964967] bdi_register_va.part.10+0xbb/0x9b0 [ 1201.964984] ? cgwb_kill+0x630/0x630 [ 1201.965003] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1201.965016] ? bdi_init+0x416/0x510 [ 1201.965029] ? wb_init+0x9e0/0x9e0 [ 1201.965044] ? bdi_alloc_node+0x67/0xe0 [ 1201.965054] ? bdi_alloc_node+0x67/0xe0 [ 1201.965071] ? rcu_read_lock_sched_held+0x108/0x120 [ 1202.012371] ? kmem_cache_alloc_node_trace+0x34e/0x770 [ 1202.017631] ? _raw_spin_unlock+0x22/0x30 [ 1202.021764] bdi_register_va+0x68/0x80 [ 1202.025636] super_setup_bdi_name+0x123/0x220 [ 1202.030116] ? kill_block_super+0x100/0x100 [ 1202.034419] ? kmem_cache_alloc_trace+0x616/0x780 [ 1202.039248] ? match_wildcard+0x3c0/0x3c0 [ 1202.043380] ? trace_hardirqs_on+0xd/0x10 [ 1202.047518] fuse_fill_super+0xe6e/0x1e20 [ 1202.051662] ? fuse_get_root_inode+0x190/0x190 [ 1202.056238] ? __alloc_pages_slowpath+0x2db0/0x2db0 [ 1202.061240] ? kasan_check_read+0x11/0x20 [ 1202.065381] ? cap_capable+0x1f9/0x260 [ 1202.069265] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1202.074798] ? security_capable+0x99/0xc0 [ 1202.078931] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1202.084453] ? ns_capable_common+0x13f/0x170 [ 1202.088847] ? get_anon_bdev+0x2f0/0x2f0 [ 1202.092896] ? sget+0x113/0x150 [ 1202.096181] ? fuse_get_root_inode+0x190/0x190 [ 1202.100750] mount_nodev+0x6b/0x110 [ 1202.104360] fuse_mount+0x2c/0x40 [ 1202.107793] mount_fs+0xae/0x328 [ 1202.111150] vfs_kern_mount.part.34+0xd4/0x4d0 [ 1202.113111] sctp: sctp_transport_update_pmtu: Reported pmtu 72 too low, using default minimum of 512 [ 1202.115722] ? may_umount+0xb0/0xb0 [ 1202.115738] ? _raw_read_unlock+0x22/0x30 [ 1202.115751] ? __get_fs_type+0x97/0xc0 [ 1202.115771] do_mount+0x564/0x3070 [ 1202.115789] ? copy_mount_string+0x40/0x40 [ 1202.115807] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 1202.149375] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1202.154120] ? retint_kernel+0x10/0x10 [ 1202.157996] ? copy_mount_options+0x1d9/0x380 [ 1202.162478] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1202.167997] ? copy_mount_options+0x285/0x380 [ 1202.172484] ksys_mount+0x12d/0x140 [ 1202.176095] __x64_sys_mount+0xbe/0x150 [ 1202.180060] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 1202.185070] do_syscall_64+0x1b1/0x800 [ 1202.188941] ? syscall_slow_exit_work+0x4f0/0x4f0 [ 1202.193765] ? syscall_return_slowpath+0x5c0/0x5c0 [ 1202.198675] ? syscall_return_slowpath+0x30f/0x5c0 [ 1202.203592] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 1202.208941] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1202.213769] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1202.218937] RIP: 0033:0x455a09 [ 1202.222109] RSP: 002b:00007f118944d808 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1202.229810] RAX: ffffffffffffffda RBX: 0000000000000016 RCX: 0000000000455a09 2018/05/26 13:24:42 executing program 2: r0 = getpid() sched_setattr(r0, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x0, 0x4}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r2, 0xc1105518, &(0x7f0000000340)={{0x368, 0x2, 0x1, 0x401, "659b980316755c6bd36e58b5745f4189467c16497233a948022a00281f740b5793fe3e801ae68c51e6e9d8ed", 0x7}, 0x0, 0x0, 0x4, r0, 0x2, 0xff, "437219b35dc3d4e5538c4905a4f6b05bd20b55d2f2de884d1545dbd2a9802dfb900aef53fe2ea020fa798f8416d0f5745faa474e623fbfa5a43720d01eacd030", &(0x7f0000000300)='ppp0\x00', 0x5, [], [0x8, 0x1000, 0x3f, 0x1]}) unlink(&(0x7f0000f86000)='./control/file0\x00') rmdir(&(0x7f00000000c0)='./control\x00') getresuid(&(0x7f00000001c0), &(0x7f0000000200)=0x0, &(0x7f0000000240)) fstat(r2, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuseblk_mount(&(0x7f0000000080)='./control/file2\x00', &(0x7f0000000100)='./control/file0/file0\x00', 0x3000, r3, r4, 0xfffffffffffffbff, 0x1000, 0x804048) syz_fuse_mount(&(0x7f0000000040)='./control\x00', 0x406000, 0x0, 0x0, 0x0, 0x0) syz_fuseblk_mount(&(0x7f0000000140)='./control\x00', &(0x7f0000000180)='./control/file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) close(r1) 2018/05/26 13:24:42 executing program 1: r0 = socket$inet(0x2, 0x5, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vcan0\x00', 0x10) sendmsg(r0, &(0x7f0000000480)={&(0x7f0000000140)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000380)="f0", 0x1}], 0x1}, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000a00)={@multicast1=0xe0000001, @local={0xac, 0x14, 0x14, 0xaa}}, 0xc) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000040)="84", 0x1}], 0xfffffdef, &(0x7f0000000540)}, 0x0) 2018/05/26 13:24:42 executing program 6: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38000]}, 0x2c) 2018/05/26 13:24:42 executing program 7 (fault-call:9 fault-nth:69): r0 = getpid() sched_setattr(r0, &(0x7f00000000c0), 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}}) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) syz_fuse_mount(&(0x7f0000000240)='./control\x00', 0x406000, 0x0, 0x0, 0x0, 0x48000000) close(r1) 2018/05/26 13:24:42 executing program 4: r0 = getpid() sched_setattr(r0, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x0, 0x4}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = socket(0x11, 0x100000803, 0x0) r2 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x20000000002) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000140)={"6966623000faffffffffffffff00", 0x12}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'ifb0\x00', 0xa201}) setsockopt$inet_sctp_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000001580)={0x8, 0x9, 0x98f8, 0x6000, 0x9c72, 0x1, 0x8, 0x8, 0x20, 0x6}, 0xb) io_setup(0x469, &(0x7f0000000180)=0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000200)='scalable\x00', 0x9) io_submit(r3, 0x1, &(0x7f00000016c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000100)}]) r4 = userfaultfd(0x0) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f00000015c0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r5 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) syz_mount_image$xfs(&(0x7f0000000100)='xfs\x00', &(0x7f00000001c0)='./control\x00', 0x8, 0x4, &(0x7f0000001500)=[{&(0x7f0000000280)="cdc4f34709dc2b8d4e50adc4beefb8a88551d1a69ed72c7ddf313ead9104e1ffdc393bc05fd193692a381ce64d171f85a351aa8b6450f9f616797bfeb0f0a4f9d64e2a54c14dc1d3122c75940b18ab5a4fc83374b2410e011b2b0c543ed7d405bff6263c31020ab918dc81366d87e8a3a52117cb6032ab76f6e19fe4fc8c76fc3c49904d9bc3368574b08ed17f4b8b9c6b1614", 0x93, 0x7}, {&(0x7f0000000340)="075f2bddff4d2c23ab328436af39530918d92826f5d911fc6b0e721bd40ef7b983aec5a721ba53417c7cc92e277990a837cb4be51264e11745082bb480266747f6ad5aee0836d2f8ae7d3a80af139ef035e9f08f0730faa40a1b8c43d6d8a5380fc6cc9371369e75ff4842b9a390f4e054464a62fc79e9759be2c594474fb79d8bb943cbe478e1c9ae81de9edb2d34dca00c32f78753fef7928b222d3cd3c51a32de3699f895d8ed80c61af1f6bf5594776c8794ca0cc06b4b154398f9cae076100ca7bae0f5bcdb258cd25f109e151a", 0xd0, 0x9d}, {&(0x7f0000000440)="8bc474df92256d043e98176dfbd2487902bb6ef715b241ad2db45b0a2a388a84814913a613b6a9fcfca0a55b4f575dd4f070f623faa7612e4ba4f24ff38e0e77a341411a6c609434896c32556e4f79478d7b1b2c17cbb6ab283719faeb4f8e38a5554182452b276aaa84fd644d04fa0ea81ba41c1f134a3288158f643b80341ac92d988aab226221cac521c2e4e0b7c4d153d864", 0x94, 0x5}, {&(0x7f0000000500)="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", 0x1000, 0x5fa}], 0x800, &(0x7f0000001700)=ANY=[@ANYBLOB="6e6f757569642c6c6f676465763d2e2f63a4da42ef439101596f6e74726b6c2f666b6c65000262696f730200653d317f392d2d2c00acfb42de0ee379efd39a1ee56aea5eabb95ff643511116b4c083ef30028ec746f8909527a0e2821b50180163bb2b1b"]) write$sndseq(r5, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000f86000)='./control/file0\x00') ioctl$sock_bt_bnep_BNEPGETCONNINFO(r5, 0x800442d3, &(0x7f0000000080)={0x100, 0xd2e, 0x9, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x12}, 'bond0\x00'}) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r5, 0x84, 0x7, &(0x7f0000000040)={0x6}, 0x4) syz_fuse_mount(&(0x7f0000000240)='./control\x00', 0x406000, 0x0, 0x0, 0x0, 0x0) getsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f0000001600)=0x3, &(0x7f0000001640)=0x2) syz_fuseblk_mount(&(0x7f0000000140)='./control\x00', &(0x7f0000000180)='./control/file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) close(r4) 2018/05/26 13:24:42 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x700, 0x0, 0x0, 0x0, 0xc00]}, 0x2c) 2018/05/26 13:24:42 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)="766574683100000000ffffffffffef00", 0x22b) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50000]}, 0x10) 2018/05/26 13:24:42 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty=0x18, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x281400]}, 0x10) [ 1202.237077] RDX: 00000000004c1eb6 RSI: 0000000020000240 RDI: 00000000004de0c5 [ 1202.244346] RBP: 0000000000000000 R08: 00007f118944d820 R09: 0000000000000000 [ 1202.252161] R10: 0000000048000000 R11: 0000000000000246 R12: 0000000000000000 [ 1202.259416] R13: 0000000020000240 R14: 0000000048000000 R15: 0000000000000000 [ 1202.383731] XFS (loop4): Invalid device [./c¤ÚBïC‘Yontrkl/fkle], error=-2 [ 1202.411934] FAULT_INJECTION: forcing a failure. [ 1202.411934] name failslab, interval 1, probability 0, space 0, times 0 [ 1202.423288] CPU: 1 PID: 4217 Comm: syz-executor7 Not tainted 4.17.0-rc6+ #68 2018/05/26 13:24:42 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xc00]}, 0x2c) 2018/05/26 13:24:42 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty=0x18, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11]}, 0x10) [ 1202.430480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1202.439830] Call Trace: [ 1202.442434] dump_stack+0x1b9/0x294 [ 1202.446076] ? dump_stack_print_info.cold.2+0x52/0x52 [ 1202.451274] ? kobject_uevent_env+0x62e/0xea0 [ 1202.455785] should_fail.cold.4+0xa/0x1a [ 1202.459867] ? debug_check_no_locks_freed+0x310/0x310 [ 1202.465075] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1202.470190] ? __might_sleep+0x95/0x190 [ 1202.474170] ? graph_lock+0x170/0x170 [ 1202.477982] ? __mutex_lock+0x7d9/0x17f0 [ 1202.482051] ? unwind_get_return_address+0x61/0xa0 [ 1202.486993] ? find_held_lock+0x36/0x1c0 [ 1202.491063] ? __lock_is_held+0xb5/0x140 [ 1202.495148] ? check_same_owner+0x320/0x320 [ 1202.499478] ? rcu_note_context_switch+0x710/0x710 [ 1202.504414] ? put_dec+0xf0/0xf0 [ 1202.507789] ? format_decode+0x1a9/0xae0 [ 1202.511854] __should_failslab+0x124/0x180 [ 1202.516099] should_failslab+0x9/0x14 [ 1202.519906] kmem_cache_alloc_node+0x272/0x780 [ 1202.524504] __alloc_skb+0x111/0x780 [ 1202.528231] ? skb_scrub_packet+0x580/0x580 [ 1202.532565] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 1202.537777] ? netlink_has_listeners+0x2ff/0x4c0 [ 1202.542546] ? netlink_tap_init_net+0x3c0/0x3c0 [ 1202.547229] kobject_uevent_env+0x801/0xea0 [ 1202.551564] ? device_pm_add+0x221/0x340 [ 1202.555647] kobject_uevent+0x1f/0x30 [ 1202.559461] device_add+0xb01/0x16d0 [ 1202.563200] ? device_private_init+0x230/0x230 [ 1202.567789] ? kfree+0x1e9/0x260 [ 1202.571162] ? kfree_const+0x5e/0x70 [ 1202.574891] device_create_groups_vargs+0x1ff/0x270 [ 1202.579913] device_create_vargs+0x46/0x60 [ 1202.584157] bdi_register_va.part.10+0xbb/0x9b0 [ 1202.588828] ? cgwb_kill+0x630/0x630 [ 1202.592556] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1202.598094] ? bdi_init+0x416/0x510 [ 1202.601723] ? wb_init+0x9e0/0x9e0 [ 1202.605267] ? bdi_alloc_node+0x67/0xe0 [ 1202.609242] ? bdi_alloc_node+0x67/0xe0 [ 1202.613221] ? rcu_read_lock_sched_held+0x108/0x120 [ 1202.618242] ? kmem_cache_alloc_node_trace+0x34e/0x770 [ 1202.623526] ? _raw_spin_unlock+0x22/0x30 [ 1202.627687] bdi_register_va+0x68/0x80 [ 1202.631585] super_setup_bdi_name+0x123/0x220 [ 1202.636086] ? kill_block_super+0x100/0x100 [ 1202.640414] ? kmem_cache_alloc_trace+0x616/0x780 [ 1202.645259] ? match_wildcard+0x3c0/0x3c0 [ 1202.649411] ? trace_hardirqs_on+0xd/0x10 [ 1202.653569] fuse_fill_super+0xe6e/0x1e20 [ 1202.657725] ? fuse_get_root_inode+0x190/0x190 [ 1202.662295] ? __alloc_pages_slowpath+0x2db0/0x2db0 [ 1202.667298] ? kasan_check_read+0x11/0x20 [ 1202.671430] ? cap_capable+0x1f9/0x260 [ 1202.675316] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1202.680842] ? security_capable+0x99/0xc0 [ 1202.684989] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1202.690529] ? ns_capable_common+0x13f/0x170 [ 1202.694943] ? get_anon_bdev+0x2f0/0x2f0 [ 1202.698991] ? sget+0x113/0x150 [ 1202.702256] ? fuse_get_root_inode+0x190/0x190 [ 1202.706821] mount_nodev+0x6b/0x110 [ 1202.710440] fuse_mount+0x2c/0x40 [ 1202.713885] mount_fs+0xae/0x328 [ 1202.717234] vfs_kern_mount.part.34+0xd4/0x4d0 [ 1202.721805] ? may_umount+0xb0/0xb0 [ 1202.725426] ? _raw_read_unlock+0x22/0x30 [ 1202.729563] ? __get_fs_type+0x97/0xc0 [ 1202.733440] do_mount+0x564/0x3070 [ 1202.736962] ? do_raw_spin_unlock+0x9e/0x2e0 [ 1202.741362] ? copy_mount_string+0x40/0x40 [ 1202.745580] ? rcu_pm_notify+0xc0/0xc0 [ 1202.749470] ? copy_mount_options+0x5f/0x380 [ 1202.753884] ? rcu_read_lock_sched_held+0x108/0x120 [ 1202.758893] ? kmem_cache_alloc_trace+0x616/0x780 [ 1202.763728] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1202.769274] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1202.774810] ? copy_mount_options+0x285/0x380 [ 1202.779298] ksys_mount+0x12d/0x140 [ 1202.782908] __x64_sys_mount+0xbe/0x150 [ 1202.786878] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 1202.791890] do_syscall_64+0x1b1/0x800 [ 1202.795767] ? syscall_slow_exit_work+0x4f0/0x4f0 [ 1202.800595] ? syscall_return_slowpath+0x5c0/0x5c0 [ 1202.805508] ? syscall_return_slowpath+0x30f/0x5c0 [ 1202.810423] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 1202.815781] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1202.820617] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1202.825791] RIP: 0033:0x455a09 2018/05/26 13:24:42 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)="766574683100000000ffffffffffef00", 0x22b) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7844080000000000]}, 0x10) 2018/05/26 13:24:42 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty=0x18, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x120000]}, 0x10) [ 1202.828958] RSP: 002b:00007f118944d808 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1202.836649] RAX: ffffffffffffffda RBX: 0000000000000016 RCX: 0000000000455a09 [ 1202.843897] RDX: 00000000004c1eb6 RSI: 0000000020000240 RDI: 00000000004de0c5 [ 1202.851152] RBP: 0000000000000000 R08: 00007f118944d820 R09: 0000000000000000 [ 1202.858410] R10: 0000000048000000 R11: 0000000000000246 R12: 0000000000000000 [ 1202.865669] R13: 0000000020000240 R14: 0000000048000000 R15: 0000000000000000 [ 1203.239958] XFS (loop4): Invalid device [./c¤ÚBïC‘Yontrkl/fkle], error=-2 2018/05/26 13:24:43 executing program 6: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb00000000000000]}, 0x2c) 2018/05/26 13:24:43 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty=0x18, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40020000]}, 0x10) 2018/05/26 13:24:43 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0xc00]}, 0x2c) 2018/05/26 13:24:43 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)="766574683100000000ffffffffffef00", 0x22b) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11]}, 0x10) 2018/05/26 13:24:43 executing program 7 (fault-call:9 fault-nth:70): r0 = getpid() sched_setattr(r0, &(0x7f00000000c0), 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}}) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) syz_fuse_mount(&(0x7f0000000240)='./control\x00', 0x406000, 0x0, 0x0, 0x0, 0x48000000) close(r1) 2018/05/26 13:24:43 executing program 4: r0 = getpid() sched_setattr(r0, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x0, 0x4}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x800) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x1f1) unlink(&(0x7f0000000440)='./control/file0\x00') accept4$ax25(r2, &(0x7f0000000240), &(0x7f00000003c0)=0x10, 0x810d4b5bf9b1cd51) r3 = getegid() getresuid(&(0x7f0000000040), &(0x7f0000000080), &(0x7f0000000100)) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000280)={{{@in=@broadcast, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @broadcast}}, 0x0, @in6}}, &(0x7f0000000380)=0xe8) syz_fuse_mount(&(0x7f0000000400)='./control/file0\x00', 0x406000, r4, r3, 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000200)) syz_fuseblk_mount(&(0x7f0000000140)='./control\x00', &(0x7f0000000180)='./control/file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r2, 0x84, 0x16, &(0x7f00000001c0)=ANY=[@ANYRES16=r4], 0x1) close(r1) 2018/05/26 13:24:43 executing program 1: r0 = socket$inet(0x2, 0x5, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vcan0\x00', 0x10) sendmsg(r0, &(0x7f0000000480)={&(0x7f0000000140)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000380)="f0", 0x1}], 0x1}, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000a00)={@multicast1=0xe0000001, @local={0xac, 0x14, 0x14, 0xaa}}, 0xc) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000040)="84", 0x1}], 0x386, &(0x7f0000000540)}, 0x0) 2018/05/26 13:24:43 executing program 2: r0 = getpid() sched_setattr(r0, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x0, 0x4}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000f86000)='./control/file0\x00') sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x80000001) rmdir(&(0x7f00000000c0)='./control\x00') r3 = syz_fuse_mount(&(0x7f0000000240)='./control\x00', 0x406000, 0x0, 0x0, 0x0, 0x0) syz_fuseblk_mount(&(0x7f0000000140)='./control\x00', &(0x7f0000000180)='./control/file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) close(r1) tkill(r0, 0x10a) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000080)={0xa0000000}) [ 1203.464796] FAULT_INJECTION: forcing a failure. [ 1203.464796] name failslab, interval 1, probability 0, space 0, times 0 [ 1203.476805] CPU: 0 PID: 4269 Comm: syz-executor7 Not tainted 4.17.0-rc6+ #68 [ 1203.483953] net_ratelimit: 9 callbacks suppressed [ 1203.483958] TCP: out of memory -- consider tuning tcp_mem [ 1203.484002] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1203.490802] TCP: out of memory -- consider tuning tcp_mem [ 1203.494376] Call Trace: [ 1203.494403] dump_stack+0x1b9/0x294 [ 1203.494425] ? dump_stack_print_info.cold.2+0x52/0x52 [ 1203.494440] ? __lock_is_held+0xb5/0x140 [ 1203.494462] ? __account_cfs_rq_runtime+0x600/0x600 [ 1203.529736] should_fail.cold.4+0xa/0x1a [ 1203.533806] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1203.538916] ? update_load_avg+0x2570/0x2570 [ 1203.543343] ? graph_lock+0x170/0x170 [ 1203.547154] ? find_held_lock+0x36/0x1c0 [ 1203.551224] ? __lock_is_held+0xb5/0x140 [ 1203.555319] ? check_same_owner+0x320/0x320 [ 1203.559651] ? rcu_note_context_switch+0x710/0x710 2018/05/26 13:24:43 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x3c800, 0x0, 0x0, 0x0, 0xc00]}, 0x2c) 2018/05/26 13:24:43 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)="766574683100000000ffffffffffef00", 0x22b) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18]}, 0x10) [ 1203.564582] __should_failslab+0x124/0x180 [ 1203.568819] should_failslab+0x9/0x14 [ 1203.572626] kmem_cache_alloc+0x2af/0x760 [ 1203.576782] ? _raw_spin_unlock_irq+0x27/0x70 [ 1203.581283] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 1203.586321] __d_alloc+0xc0/0xd30 [ 1203.589786] ? shrink_dcache_for_umount+0x290/0x290 [ 1203.594806] ? preempt_notifier_register+0x1e0/0x1e0 [ 1203.599924] ? debug_check_no_locks_freed+0x310/0x310 [ 1203.603998] TCP: out of memory -- consider tuning tcp_mem [ 1203.605116] ? __schedule+0x809/0x1e30 2018/05/26 13:24:43 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc00]}, 0x2c) 2018/05/26 13:24:43 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)="766574683100000000ffffffffffef00", 0x22b) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8447c]}, 0x10) [ 1203.605145] d_alloc+0x8e/0x370 [ 1203.605160] ? print_usage_bug+0xc0/0xc0 [ 1203.605174] ? __d_alloc+0xd30/0xd30 [ 1203.605198] d_alloc_parallel+0x152/0x1e80 [ 1203.605209] ? kobject_uevent+0x1f/0x30 [ 1203.605224] ? graph_lock+0x170/0x170 [ 1203.622797] TCP: out of memory -- consider tuning tcp_mem [ 1203.625640] ? __lock_acquire+0x7f5/0x5140 [ 1203.625662] ? __d_lookup_rcu+0xa80/0xa80 [ 1203.625676] ? print_usage_bug+0xc0/0xc0 [ 1203.625691] ? find_held_lock+0x36/0x1c0 [ 1203.625714] ? lock_downgrade+0x8e0/0x8e0 [ 1203.625738] ? mark_held_locks+0xc9/0x160 [ 1203.625759] ? __raw_spin_lock_init+0x1c/0x100 [ 1203.672523] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 1203.677551] ? __lockdep_init_map+0x105/0x590 [ 1203.682055] ? __lockdep_init_map+0x105/0x590 [ 1203.686558] ? lockdep_init_map+0x9/0x10 [ 1203.690635] ? __init_waitqueue_head+0x96/0x140 [ 1203.695315] ? init_wait_entry+0x1b0/0x1b0 [ 1203.699557] ? d_alloc_parallel+0x1e80/0x1e80 [ 1203.704060] ? lock_release+0xa10/0xa10 [ 1203.708039] ? graph_lock+0x170/0x170 [ 1203.711846] __lookup_slow+0x1e6/0x540 2018/05/26 13:24:43 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x500, 0x0, 0x0, 0x0, 0xc00]}, 0x2c) 2018/05/26 13:24:43 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)="766574683100000000ffffffffffef00", 0x22b) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8044080000000000]}, 0x10) [ 1203.715733] ? vfs_unlink+0x510/0x510 [ 1203.719542] ? d_lookup+0x219/0x330 [ 1203.723188] lookup_one_len+0x1c7/0x210 [ 1203.726530] TCP: out of memory -- consider tuning tcp_mem [ 1203.727163] ? lookup_one_len_unlocked+0xf0/0xf0 [ 1203.727183] ? down_write+0x87/0x120 [ 1203.727199] ? start_creating+0xb1/0x200 [ 1203.727215] ? down_read+0x1b0/0x1b0 [ 1203.727229] ? mntput+0x74/0xa0 [ 1203.727243] ? simple_pin_fs+0xa4/0x190 [ 1203.727260] start_creating+0xc6/0x200 [ 1203.727283] debugfs_create_dir+0x23/0x3c0 [ 1203.743631] TCP: out of memory -- consider tuning tcp_mem [ 1203.745293] bdi_register_va.part.10+0x318/0x9b0 [ 1203.745310] ? cgwb_kill+0x630/0x630 [ 1203.745330] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1203.745343] ? bdi_init+0x416/0x510 [ 1203.745356] ? wb_init+0x9e0/0x9e0 [ 1203.745372] ? bdi_alloc_node+0x67/0xe0 [ 1203.745382] ? bdi_alloc_node+0x67/0xe0 [ 1203.745399] ? rcu_read_lock_sched_held+0x108/0x120 [ 1203.804326] ? kmem_cache_alloc_node_trace+0x34e/0x770 [ 1203.809613] ? _raw_spin_unlock+0x22/0x30 [ 1203.813770] bdi_register_va+0x68/0x80 [ 1203.817665] super_setup_bdi_name+0x123/0x220 [ 1203.822172] ? kill_block_super+0x100/0x100 [ 1203.826497] ? kmem_cache_alloc_trace+0x616/0x780 [ 1203.831345] ? match_wildcard+0x3c0/0x3c0 [ 1203.835504] fuse_fill_super+0xe6e/0x1e20 [ 1203.839663] ? fuse_get_root_inode+0x190/0x190 [ 1203.844255] ? __alloc_pages_slowpath+0x2db0/0x2db0 [ 1203.849290] ? kasan_check_read+0x11/0x20 [ 1203.853079] TCP: out of memory -- consider tuning tcp_mem [ 1203.853441] ? cap_capable+0x1f9/0x260 2018/05/26 13:24:44 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0xc00]}, 0x2c) 2018/05/26 13:24:44 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)="766574683100000000ffffffffffef00", 0x22b) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8144080000000000]}, 0x10) [ 1203.853466] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1203.853481] ? security_capable+0x99/0xc0 [ 1203.853501] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1203.853515] ? ns_capable_common+0x13f/0x170 [ 1203.853532] ? get_anon_bdev+0x2f0/0x2f0 [ 1203.868092] TCP: out of memory -- consider tuning tcp_mem [ 1203.868450] ? sget+0x113/0x150 [ 1203.868468] ? fuse_get_root_inode+0x190/0x190 [ 1203.868484] mount_nodev+0x6b/0x110 [ 1203.903547] fuse_mount+0x2c/0x40 [ 1203.907017] mount_fs+0xae/0x328 [ 1203.910398] vfs_kern_mount.part.34+0xd4/0x4d0 [ 1203.914988] ? may_umount+0xb0/0xb0 [ 1203.918618] ? _raw_read_unlock+0x22/0x30 [ 1203.922770] ? __get_fs_type+0x97/0xc0 [ 1203.926669] do_mount+0x564/0x3070 [ 1203.930217] ? copy_mount_string+0x40/0x40 [ 1203.934460] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 1203.939492] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1203.944283] ? retint_kernel+0x10/0x10 [ 1203.948185] ? copy_mount_options+0x1f0/0x380 [ 1203.952681] ? copy_mount_options+0x1fa/0x380 [ 1203.957180] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1203.962719] ? copy_mount_options+0x285/0x380 [ 1203.967223] ksys_mount+0x12d/0x140 [ 1203.970858] __x64_sys_mount+0xbe/0x150 [ 1203.974839] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 1203.977068] TCP: out of memory -- consider tuning tcp_mem [ 1203.979858] do_syscall_64+0x1b1/0x800 [ 1203.979874] ? syscall_slow_exit_work+0x4f0/0x4f0 [ 1203.979892] ? syscall_return_slowpath+0x5c0/0x5c0 [ 1203.979909] ? syscall_return_slowpath+0x30f/0x5c0 [ 1203.979930] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 1203.979949] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1203.979966] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1204.001287] TCP: out of memory -- consider tuning tcp_mem [ 1204.004005] RIP: 0033:0x455a09 [ 1204.004014] RSP: 002b:00007f118944d808 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1204.004030] RAX: ffffffffffffffda RBX: 0000000000000016 RCX: 0000000000455a09 [ 1204.004039] RDX: 00000000004c1eb6 RSI: 0000000020000240 RDI: 00000000004de0c5 [ 1204.004047] RBP: 0000000000000000 R08: 00007f118944d820 R09: 0000000000000000 [ 1204.004056] R10: 0000000048000000 R11: 0000000000000246 R12: 0000000000000000 [ 1204.004065] R13: 0000000020000240 R14: 0000000048000000 R15: 0000000000000000 2018/05/26 13:24:44 executing program 6: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0030000000000]}, 0x2c) 2018/05/26 13:24:44 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x880300, 0x0, 0x0, 0x0, 0xc00]}, 0x2c) 2018/05/26 13:24:44 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)="766574683100000000ffffffffffef00", 0x22b) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1800000000000000]}, 0x10) 2018/05/26 13:24:44 executing program 7 (fault-call:9 fault-nth:71): r0 = getpid() sched_setattr(r0, &(0x7f00000000c0), 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}}) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) syz_fuse_mount(&(0x7f0000000240)='./control\x00', 0x406000, 0x0, 0x0, 0x0, 0x48000000) close(r1) 2018/05/26 13:24:44 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty=0x18, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00]}, 0x10) [ 1204.185705] FAULT_INJECTION: forcing a failure. [ 1204.185705] name failslab, interval 1, probability 0, space 0, times 0 [ 1204.197169] CPU: 1 PID: 4311 Comm: syz-executor7 Not tainted 4.17.0-rc6+ #68 [ 1204.204364] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1204.213719] Call Trace: [ 1204.216330] dump_stack+0x1b9/0x294 [ 1204.219973] ? dump_stack_print_info.cold.2+0x52/0x52 [ 1204.225173] ? d_add+0x605/0xa10 [ 1204.228550] ? lock_downgrade+0x8e0/0x8e0 [ 1204.232712] should_fail.cold.4+0xa/0x1a [ 1204.236786] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1204.241900] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 1204.246925] ? graph_lock+0x170/0x170 [ 1204.251364] ? __lockdep_init_map+0x105/0x590 [ 1204.255878] ? find_held_lock+0x36/0x1c0 [ 1204.259954] ? __lock_is_held+0xb5/0x140 [ 1204.264035] ? check_same_owner+0x320/0x320 [ 1204.268372] ? rcu_note_context_switch+0x710/0x710 [ 1204.273298] __should_failslab+0x124/0x180 [ 1204.277523] should_failslab+0x9/0x14 [ 1204.281313] kmem_cache_alloc+0x2af/0x760 [ 1204.285451] alloc_inode+0xb2/0x190 [ 1204.289061] new_inode_pseudo+0x69/0x1a0 [ 1204.293109] ? prune_icache_sb+0x1a0/0x1a0 [ 1204.297329] ? down_read+0x1b0/0x1b0 [ 1204.301031] ? mntput+0x74/0xa0 [ 1204.304297] new_inode+0x1c/0x40 [ 1204.307649] debugfs_get_inode+0x19/0x120 [ 1204.311791] debugfs_create_dir+0x75/0x3c0 [ 1204.316014] bdi_register_va.part.10+0x318/0x9b0 [ 1204.320761] ? cgwb_kill+0x630/0x630 [ 1204.324461] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1204.329980] ? bdi_init+0x416/0x510 [ 1204.333589] ? wb_init+0x9e0/0x9e0 [ 1204.337111] ? bdi_alloc_node+0x67/0xe0 [ 1204.341067] ? bdi_alloc_node+0x67/0xe0 [ 1204.345041] ? rcu_read_lock_sched_held+0x108/0x120 [ 1204.350042] ? kmem_cache_alloc_node_trace+0x34e/0x770 [ 1204.355307] ? _raw_spin_unlock+0x22/0x30 [ 1204.359441] bdi_register_va+0x68/0x80 [ 1204.363316] super_setup_bdi_name+0x123/0x220 [ 1204.367803] ? kill_block_super+0x100/0x100 [ 1204.372128] ? kmem_cache_alloc_trace+0x616/0x780 [ 1204.376978] ? match_wildcard+0x3c0/0x3c0 [ 1204.381128] ? trace_hardirqs_on+0xd/0x10 [ 1204.385296] fuse_fill_super+0xe6e/0x1e20 [ 1204.389453] ? fuse_get_root_inode+0x190/0x190 [ 1204.394046] ? __alloc_pages_slowpath+0x2db0/0x2db0 [ 1204.399071] ? kasan_check_read+0x11/0x20 [ 1204.403223] ? cap_capable+0x1f9/0x260 [ 1204.407123] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1204.412665] ? security_capable+0x99/0xc0 [ 1204.416822] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1204.422362] ? ns_capable_common+0x13f/0x170 [ 1204.426764] ? get_anon_bdev+0x2f0/0x2f0 [ 1204.430820] ? sget+0x113/0x150 [ 1204.434109] ? fuse_get_root_inode+0x190/0x190 [ 1204.438682] mount_nodev+0x6b/0x110 [ 1204.442292] fuse_mount+0x2c/0x40 [ 1204.445734] mount_fs+0xae/0x328 [ 1204.449086] vfs_kern_mount.part.34+0xd4/0x4d0 [ 1204.453650] ? may_umount+0xb0/0xb0 [ 1204.457268] ? _raw_read_unlock+0x22/0x30 [ 1204.461405] ? __get_fs_type+0x97/0xc0 [ 1204.465291] do_mount+0x564/0x3070 [ 1204.468820] ? copy_mount_string+0x40/0x40 [ 1204.473041] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 1204.478052] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1204.482818] ? retint_kernel+0x10/0x10 [ 1204.486721] ? copy_mount_options+0x1a1/0x380 [ 1204.491220] ? copy_mount_options+0x1a4/0x380 [ 1204.495730] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1204.501274] ? copy_mount_options+0x285/0x380 [ 1204.505780] ksys_mount+0x12d/0x140 [ 1204.509413] __x64_sys_mount+0xbe/0x150 [ 1204.513401] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 1204.518416] do_syscall_64+0x1b1/0x800 [ 1204.522292] ? finish_task_switch+0x1ca/0x840 [ 1204.526777] ? syscall_return_slowpath+0x5c0/0x5c0 [ 1204.531692] ? syscall_return_slowpath+0x30f/0x5c0 [ 1204.536613] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 1204.541976] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1204.546807] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1204.551977] RIP: 0033:0x455a09 [ 1204.555146] RSP: 002b:00007f118944d808 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1204.562835] RAX: ffffffffffffffda RBX: 0000000000000016 RCX: 0000000000455a09 [ 1204.570087] RDX: 00000000004c1eb6 RSI: 0000000020000240 RDI: 00000000004de0c5 [ 1204.577338] RBP: 0000000000000000 R08: 00007f118944d820 R09: 0000000000000000 [ 1204.584588] R10: 0000000048000000 R11: 0000000000000246 R12: 0000000000000000 [ 1204.591842] R13: 0000000020000240 R14: 0000000048000000 R15: 0000000000000000 2018/05/26 13:24:44 executing program 1: r0 = socket$inet(0x2, 0x5, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vcan0\x00', 0x10) sendmsg(r0, &(0x7f0000000480)={&(0x7f0000000140)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000380)="f0", 0x1}], 0x1}, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000a00)={@multicast1=0xe0000001, @local={0xac, 0x14, 0x14, 0xaa}}, 0xc) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000040)="84", 0x1}], 0xaa00, &(0x7f0000000540)}, 0x0) 2018/05/26 13:24:44 executing program 2: r0 = getpid() sched_setattr(r0, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x80000000000000}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) fstat(0xffffffffffffff9c, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setfsuid(r1) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1000000, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x81}) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000400)='/dev/snapshot\x00', 0x4200, 0x0) clock_gettime(0x0, &(0x7f0000000440)={0x0, 0x0}) write$sndseq(r3, &(0x7f0000000480)=[{0x2, 0x0, 0x5, 0x100000000000000, @tick=0x4, {0x3, 0x7}, {0x1, 0xfffffffeffffffff}, @addr={0x572, 0x80000001}}, {0x1ff, 0x5, 0x100000000, 0x4, @time={r4, r5+30000000}, {0x0, 0xffffffffffffffe0}, {0x9018, 0xd9}, @raw32={[0x7, 0xffffffffffffffff, 0x1]}}, {0x1e, 0x2, 0x4, 0x8, @time={0x77359400}, {0x3, 0x3}, {0xee, 0x9}, @connect={{0xfffffffffffffffb, 0x8}, {0x9, 0xfff}}}, {0x100000001, 0x1, 0xc91, 0x16, @time={0x77359400}, {0x3}, {0xb1, 0x7}, @addr={0x1ff}}], 0xc0) r6 = syz_open_dev$vcsn(&(0x7f0000000300)='/dev/vcs#\x00', 0x31, 0x80000) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000340)={0x0, 0x1}, &(0x7f0000000380)=0x8) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r6, 0x84, 0x75, &(0x7f00000003c0)={r7}, 0x8) r8 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) getpeername$unix(r8, &(0x7f0000000280), &(0x7f0000000080)=0x6e) write$sndseq(r8, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000f86000)='./control/file0\x00') socket$nl_route(0x10, 0x3, 0x0) ioctl$SG_GET_LOW_DMA(r8, 0x227a, &(0x7f0000000040)) rmdir(&(0x7f0000000100)='./control/file0\x00') syz_fuse_mount(&(0x7f0000000240)='./control\x00', 0x406000, 0x0, 0x0, 0x0, 0x0) syz_fuseblk_mount(&(0x7f0000000140)='./control\x00', &(0x7f0000000180)='./control/file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) close(r2) 2018/05/26 13:24:44 executing program 7 (fault-call:9 fault-nth:72): r0 = getpid() sched_setattr(r0, &(0x7f00000000c0), 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}}) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) syz_fuse_mount(&(0x7f0000000240)='./control\x00', 0x406000, 0x0, 0x0, 0x0, 0x48000000) close(r1) 2018/05/26 13:24:44 executing program 6: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe000000]}, 0x2c) 2018/05/26 13:24:44 executing program 4: r0 = getpid() sched_setattr(r0, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x0, 0x4}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@ipv4, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@rand_addr}}, &(0x7f0000000100)=0xe8) r4 = getegid() fchown(r2, r3, r4) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) write$sndseq(r1, &(0x7f00000001c0)=[{0x8, 0x48, 0x1, 0x8d, @time={r5, r6+10000000}, {0x8, 0xbd}, {0x7f, 0x401}, @raw32={[0xffffffffffffffe7, 0x0, 0x80]}}, {0x53d67b5c, 0x80000000, 0x8, 0x2, @tick=0x5, {0x4, 0x4}, {0x28, 0x80000000}, @control={0xffff, 0x3, 0x80}}], 0x208) unlink(&(0x7f0000f86000)='./control/file0\x00') syz_fuse_mount(&(0x7f0000000240)='./control\x00', 0x406000, 0x0, 0x0, 0x0, 0x0) syz_fuseblk_mount(&(0x7f0000000140)='./control\x00', &(0x7f0000000180)='./control/file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) close(r1) 2018/05/26 13:24:44 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0xc00]}, 0x2c) 2018/05/26 13:24:44 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty=0x18, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12000000000000]}, 0x10) 2018/05/26 13:24:44 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)="766574683100000000ffffffffffef00", 0x22b) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000]}, 0x10) 2018/05/26 13:24:44 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty=0x18, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14280000000000]}, 0x10) [ 1204.752981] FAULT_INJECTION: forcing a failure. [ 1204.752981] name failslab, interval 1, probability 0, space 0, times 0 [ 1204.764433] CPU: 1 PID: 4345 Comm: syz-executor7 Not tainted 4.17.0-rc6+ #68 [ 1204.771624] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1204.780978] Call Trace: [ 1204.783574] dump_stack+0x1b9/0x294 [ 1204.787219] ? dump_stack_print_info.cold.2+0x52/0x52 [ 1204.792414] ? lock_downgrade+0x8e0/0x8e0 [ 1204.796576] should_fail.cold.4+0xa/0x1a [ 1204.800659] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1204.805794] ? graph_lock+0x170/0x170 [ 1204.809602] ? kernel_text_address+0x79/0xf0 [ 1204.814023] ? __unwind_start+0x166/0x330 [ 1204.818178] ? __kernel_text_address+0xd/0x40 [ 1204.822685] ? find_held_lock+0x36/0x1c0 [ 1204.826754] ? __lock_is_held+0xb5/0x140 [ 1204.830813] ? check_same_owner+0x320/0x320 [ 1204.835123] ? device_create_groups_vargs+0x1ff/0x270 [ 1204.840295] ? device_create_vargs+0x46/0x60 [ 1204.844695] ? bdi_register_va.part.10+0xbb/0x9b0 [ 1204.849525] ? rcu_note_context_switch+0x710/0x710 [ 1204.854442] ? mount_nodev+0x6b/0x110 [ 1204.858229] ? fuse_mount+0x2c/0x40 [ 1204.861843] ? mount_fs+0xae/0x328 [ 1204.865395] __should_failslab+0x124/0x180 [ 1204.869619] should_failslab+0x9/0x14 [ 1204.873406] kmem_cache_alloc+0x2af/0x760 [ 1204.877547] skb_clone+0x1ed/0x4f0 [ 1204.881075] ? refcount_add_not_zero+0x2b0/0x320 [ 1204.885817] ? skb_split+0x11d0/0x11d0 [ 1204.889696] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 1204.894702] ? netlink_trim+0x1b2/0x370 [ 1204.898665] ? netlink_skb_destructor+0x210/0x210 2018/05/26 13:24:45 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty=0x18, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf4010000]}, 0x10) [ 1204.903498] ? cleanup_uevent_env+0x40/0x40 [ 1204.907812] netlink_broadcast_filtered+0x1024/0x1580 [ 1204.912995] ? __netlink_sendskb+0xd0/0xd0 [ 1204.917227] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1204.922762] ? refcount_inc_not_zero+0x1dd/0x2d0 [ 1204.927529] ? refcount_add_not_zero+0x320/0x320 [ 1204.932300] ? cleanup_uevent_env+0x40/0x40 [ 1204.936630] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 1204.941649] kobject_uevent_env+0x6e4/0xea0 [ 1204.945973] ? device_pm_add+0x221/0x340 [ 1204.950059] kobject_uevent+0x1f/0x30 [ 1204.953863] device_add+0xb01/0x16d0 [ 1204.957598] ? device_private_init+0x230/0x230 [ 1204.962192] ? kfree+0x1e9/0x260 [ 1204.965567] ? kfree_const+0x5e/0x70 [ 1204.969289] device_create_groups_vargs+0x1ff/0x270 [ 1204.974315] device_create_vargs+0x46/0x60 [ 1204.978557] bdi_register_va.part.10+0xbb/0x9b0 [ 1204.983230] ? cgwb_kill+0x630/0x630 [ 1204.986948] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1204.992485] ? bdi_init+0x416/0x510 [ 1204.996112] ? wb_init+0x9e0/0x9e0 [ 1204.999656] ? bdi_alloc_node+0x67/0xe0 [ 1205.003636] ? bdi_alloc_node+0x67/0xe0 [ 1205.007615] ? rcu_read_lock_sched_held+0x108/0x120 [ 1205.012626] ? kmem_cache_alloc_node_trace+0x34e/0x770 [ 1205.017904] ? _raw_spin_unlock+0x22/0x30 [ 1205.022062] bdi_register_va+0x68/0x80 [ 1205.025955] super_setup_bdi_name+0x123/0x220 [ 1205.030455] ? kill_block_super+0x100/0x100 [ 1205.034785] ? kmem_cache_alloc_trace+0x616/0x780 [ 1205.039632] ? match_wildcard+0x3c0/0x3c0 [ 1205.043782] ? trace_hardirqs_on+0xd/0x10 [ 1205.047939] fuse_fill_super+0xe6e/0x1e20 [ 1205.052100] ? fuse_get_root_inode+0x190/0x190 [ 1205.056707] ? __alloc_pages_slowpath+0x2db0/0x2db0 [ 1205.061732] ? kasan_check_read+0x11/0x20 [ 1205.065883] ? cap_capable+0x1f9/0x260 [ 1205.069776] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1205.075318] ? security_capable+0x99/0xc0 [ 1205.079477] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1205.085019] ? ns_capable_common+0x13f/0x170 [ 1205.089440] ? get_anon_bdev+0x2f0/0x2f0 [ 1205.093513] ? sget+0x113/0x150 [ 1205.096790] ? fuse_get_root_inode+0x190/0x190 [ 1205.101375] mount_nodev+0x6b/0x110 [ 1205.105005] fuse_mount+0x2c/0x40 [ 1205.108467] mount_fs+0xae/0x328 [ 1205.111845] vfs_kern_mount.part.34+0xd4/0x4d0 [ 1205.116428] ? may_umount+0xb0/0xb0 [ 1205.120058] ? _raw_read_unlock+0x22/0x30 [ 1205.124212] ? __get_fs_type+0x97/0xc0 [ 1205.128105] do_mount+0x564/0x3070 [ 1205.131649] ? copy_mount_string+0x40/0x40 [ 1205.135891] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1205.140653] ? retint_kernel+0x10/0x10 [ 1205.144554] ? copy_mount_options+0x213/0x380 [ 1205.149061] ? __sanitizer_cov_trace_pc+0x1a/0x50 [ 1205.153915] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1205.159458] ? copy_mount_options+0x285/0x380 [ 1205.163965] ksys_mount+0x12d/0x140 [ 1205.167602] __x64_sys_mount+0xbe/0x150 [ 1205.171579] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 1205.176603] do_syscall_64+0x1b1/0x800 [ 1205.180494] ? syscall_slow_exit_work+0x4f0/0x4f0 [ 1205.185343] ? syscall_return_slowpath+0x5c0/0x5c0 [ 1205.190276] ? syscall_return_slowpath+0x30f/0x5c0 [ 1205.195213] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 1205.200585] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1205.205440] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1205.210633] RIP: 0033:0x455a09 [ 1205.213825] RSP: 002b:00007f118944d808 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1205.221532] RAX: ffffffffffffffda RBX: 0000000000000016 RCX: 0000000000455a09 [ 1205.228785] RDX: 00000000004c1eb6 RSI: 0000000020000240 RDI: 00000000004de0c5 [ 1205.236044] RBP: 0000000000000000 R08: 00007f118944d820 R09: 0000000000000000 [ 1205.243305] R10: 0000000048000000 R11: 0000000000000246 R12: 0000000000000000 2018/05/26 13:24:45 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)="766574683100000000ffffffffffef00", 0x22b) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x16000000]}, 0x10) 2018/05/26 13:24:45 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0xc000, 0x0, 0x0, 0x0, 0xc00]}, 0x2c) 2018/05/26 13:24:45 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty=0x18, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}, 0x10) 2018/05/26 13:24:45 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty=0x18, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11000000]}, 0x10) 2018/05/26 13:24:45 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty=0x18, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4002]}, 0x10) 2018/05/26 13:24:45 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x9000000, 0x0, 0x0, 0x0, 0xc00]}, 0x2c) [ 1205.250563] R13: 0000000020000240 R14: 0000000048000000 R15: 0000000000000000 2018/05/26 13:24:45 executing program 2: r0 = getpid() sched_setattr(r0, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x0, 0x4}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) ptrace$setregset(0x4205, r0, 0x201, &(0x7f0000000080)={&(0x7f0000000040)="b448703a38e1b8c755297153dbdf3899ed30b0d6db0faf6dd12cb37c38a550cbd034ad0cad26b6b865acc6349c36720426b723fd92", 0x35}) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000f86000)='./control/file0\x00') rmdir(&(0x7f00000000c0)='./control\x00') syz_fuse_mount(&(0x7f0000000240)='./control\x00', 0x406000, 0x0, 0x0, 0x0, 0x0) syz_fuseblk_mount(&(0x7f0000000140)='./control\x00', &(0x7f0000000180)='./control/file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) close(r1) 2018/05/26 13:24:45 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty=0x18, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf401000000000000]}, 0x10) 2018/05/26 13:24:45 executing program 4: r0 = getpid() sched_setattr(r0, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x0, 0x4}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1000000, 0x36, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f0000000200)='./control/file1/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) time(&(0x7f0000000040)) getsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000080), 0x10) unlink(&(0x7f0000f86000)='./control/file0\x00') syz_fuse_mount(&(0x7f0000000240)='./control\x00', 0x406000, 0x0, 0x0, 0x0, 0x0) syz_fuseblk_mount(&(0x7f0000000140)='./control\x00', &(0x7f0000000180)='./control/file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)) close(r1) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000100)=0x3ff, 0x4) 2018/05/26 13:24:45 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)="766574683100000000ffffffffffef00", 0x22b) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x73440800]}, 0x10) 2018/05/26 13:24:45 executing program 1: r0 = socket$inet(0x2, 0x5, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vcan0\x00', 0x10) sendmsg(r0, &(0x7f0000000480)={&(0x7f0000000140)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000380)="f0", 0x1}], 0x1}, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000a00)={@multicast1=0xe0000001, @local={0xac, 0x14, 0x14, 0xaa}}, 0xc) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000040)="84", 0x1}], 0xaa, &(0x7f0000000540)}, 0x0) 2018/05/26 13:24:45 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0xd00, 0x0, 0x0, 0x0, 0xc00]}, 0x2c) 2018/05/26 13:24:45 executing program 6: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600300]}, 0x2c) 2018/05/26 13:24:45 executing program 7 (fault-call:9 fault-nth:73): r0 = getpid() sched_setattr(r0, &(0x7f00000000c0), 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}}) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) syz_fuse_mount(&(0x7f0000000240)='./control\x00', 0x406000, 0x0, 0x0, 0x0, 0x48000000) close(r1) [ 1205.912456] FAULT_INJECTION: forcing a failure. [ 1205.912456] name failslab, interval 1, probability 0, space 0, times 0 [ 1205.923781] CPU: 1 PID: 4398 Comm: syz-executor7 Not tainted 4.17.0-rc6+ #68 [ 1205.930965] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1205.940309] Call Trace: [ 1205.942903] dump_stack+0x1b9/0x294 [ 1205.946538] ? dump_stack_print_info.cold.2+0x52/0x52 [ 1205.951731] ? debug_check_no_locks_freed+0x310/0x310 [ 1205.956925] should_fail.cold.4+0xa/0x1a [ 1205.960988] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1205.966094] ? graph_lock+0x170/0x170 [ 1205.969892] ? print_usage_bug+0xc0/0xc0 [ 1205.973957] ? find_held_lock+0x36/0x1c0 [ 1205.978023] ? __lock_is_held+0xb5/0x140 [ 1205.982097] ? check_same_owner+0x320/0x320 [ 1205.986421] ? rcu_note_context_switch+0x710/0x710 [ 1205.991358] __should_failslab+0x124/0x180 [ 1205.995598] should_failslab+0x9/0x14 [ 1205.999402] kmem_cache_alloc+0x2af/0x760 [ 1206.003546] ? find_held_lock+0x36/0x1c0 [ 1206.007672] __d_alloc+0xc0/0xd30 [ 1206.011131] ? shrink_dcache_for_umount+0x290/0x290 [ 1206.016150] ? __lock_acquire+0x7f5/0x5140 [ 1206.020385] ? rcu_is_watching+0x85/0x140 [ 1206.024542] ? debug_check_no_locks_freed+0x310/0x310 [ 1206.029736] ? graph_lock+0x170/0x170 [ 1206.033537] ? find_held_lock+0x36/0x1c0 [ 1206.037609] d_alloc+0x8e/0x370 [ 1206.040889] ? print_usage_bug+0xc0/0xc0 [ 1206.044948] ? __d_alloc+0xd30/0xd30 [ 1206.048674] d_alloc_parallel+0x152/0x1e80 [ 1206.052909] ? kobject_uevent+0x1f/0x30 [ 1206.056886] ? graph_lock+0x170/0x170 [ 1206.060692] ? __lock_acquire+0x7f5/0x5140 [ 1206.064930] ? __d_lookup_rcu+0xa80/0xa80 [ 1206.069080] ? print_usage_bug+0xc0/0xc0 [ 1206.073138] ? find_held_lock+0x36/0x1c0 [ 1206.077205] ? lock_downgrade+0x8e0/0x8e0 [ 1206.081357] ? mark_held_locks+0xc9/0x160 [ 1206.085511] ? __raw_spin_lock_init+0x1c/0x100 [ 1206.090094] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 1206.095110] ? __lockdep_init_map+0x105/0x590 [ 1206.099613] ? __lockdep_init_map+0x105/0x590 [ 1206.104112] ? lockdep_init_map+0x9/0x10 [ 1206.108175] ? __init_waitqueue_head+0x96/0x140 [ 1206.112842] ? init_wait_entry+0x1b0/0x1b0 [ 1206.117078] ? d_alloc_parallel+0x1e80/0x1e80 [ 1206.121572] ? lock_release+0xa10/0xa10 [ 1206.125545] ? graph_lock+0x170/0x170 [ 1206.129350] __lookup_slow+0x1e6/0x540 [ 1206.133236] ? vfs_unlink+0x510/0x510 [ 1206.137039] ? d_lookup+0x219/0x330 [ 1206.140680] lookup_one_len+0x1c7/0x210 [ 1206.144656] ? lookup_one_len_unlocked+0xf0/0xf0 [ 1206.149412] ? down_write+0x87/0x120 [ 1206.153126] ? start_creating+0xb1/0x200 [ 1206.157184] ? down_read+0x1b0/0x1b0 [ 1206.160895] ? mntput+0x74/0xa0 [ 1206.164172] ? simple_pin_fs+0xa4/0x190 [ 1206.168147] start_creating+0xc6/0x200 [ 1206.172037] debugfs_create_dir+0x23/0x3c0 [ 1206.176278] bdi_register_va.part.10+0x318/0x9b0 [ 1206.181033] ? cgwb_kill+0x630/0x630 [ 1206.184749] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1206.190313] ? bdi_init+0x416/0x510 [ 1206.194007] ? wb_init+0x9e0/0x9e0 [ 1206.197548] ? bdi_alloc_node+0x67/0xe0 [ 1206.201519] ? bdi_alloc_node+0x67/0xe0 [ 1206.205495] ? rcu_read_lock_sched_held+0x108/0x120 [ 1206.210510] ? kmem_cache_alloc_node_trace+0x34e/0x770 [ 1206.215786] ? _raw_spin_unlock+0x22/0x30 [ 1206.219936] bdi_register_va+0x68/0x80 [ 1206.223823] super_setup_bdi_name+0x123/0x220 [ 1206.228321] ? kill_block_super+0x100/0x100 [ 1206.232642] ? kmem_cache_alloc_trace+0x616/0x780 [ 1206.237489] ? match_wildcard+0x3c0/0x3c0 [ 1206.241636] ? trace_hardirqs_on+0xd/0x10 [ 1206.245795] fuse_fill_super+0xe6e/0x1e20 [ 1206.250547] ? fuse_get_root_inode+0x190/0x190 [ 1206.255150] ? __alloc_pages_slowpath+0x2db0/0x2db0 [ 1206.260172] ? kasan_check_read+0x11/0x20 [ 1206.264325] ? cap_capable+0x1f9/0x260 [ 1206.268222] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1206.273762] ? security_capable+0x99/0xc0 [ 1206.277913] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1206.283450] ? ns_capable_common+0x13f/0x170 [ 1206.287859] ? get_anon_bdev+0x2f0/0x2f0 [ 1206.291918] ? sget+0x113/0x150 [ 1206.295199] ? fuse_get_root_inode+0x190/0x190 [ 1206.299779] mount_nodev+0x6b/0x110 [ 1206.303409] fuse_mount+0x2c/0x40 [ 1206.306863] mount_fs+0xae/0x328 [ 1206.310232] vfs_kern_mount.part.34+0xd4/0x4d0 [ 1206.314815] ? may_umount+0xb0/0xb0 [ 1206.318440] ? _raw_read_unlock+0x22/0x30 [ 1206.322592] ? __get_fs_type+0x97/0xc0 [ 1206.326487] do_mount+0x564/0x3070 [ 1206.330026] ? interrupt_entry+0xb1/0xf0 [ 1206.334091] ? copy_mount_string+0x40/0x40 [ 1206.338326] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1206.343087] ? retint_kernel+0x10/0x10 [ 1206.346979] ? copy_mount_options+0x213/0x380 [ 1206.351477] ? __sanitizer_cov_trace_pc+0x14/0x50 [ 1206.356321] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1206.361855] ? copy_mount_options+0x285/0x380 [ 1206.366352] ksys_mount+0x12d/0x140 [ 1206.369980] __x64_sys_mount+0xbe/0x150 [ 1206.373952] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 1206.378968] do_syscall_64+0x1b1/0x800 [ 1206.382858] ? syscall_slow_exit_work+0x4f0/0x4f0 [ 1206.387698] ? syscall_return_slowpath+0x5c0/0x5c0 [ 1206.392627] ? syscall_return_slowpath+0x30f/0x5c0 [ 1206.397573] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 1206.402943] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1206.407790] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1206.412975] RIP: 0033:0x455a09 [ 1206.416161] RSP: 002b:00007f118944d808 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1206.423869] RAX: ffffffffffffffda RBX: 0000000000000016 RCX: 0000000000455a09 [ 1206.431135] RDX: 00000000004c1eb6 RSI: 0000000020000240 RDI: 00000000004de0c5 [ 1206.438401] RBP: 0000000000000000 R08: 00007f118944d820 R09: 0000000000000000 [ 1206.445664] R10: 0000000048000000 R11: 0000000000000246 R12: 0000000000000000 [ 1206.452931] R13: 0000000020000240 R14: 0000000048000000 R15: 0000000000000000 2018/05/26 13:24:47 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty=0x18, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80550000]}, 0x10) 2018/05/26 13:24:47 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)="766574683100000000ffffffffffef00", 0x22b) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b440800]}, 0x10) 2018/05/26 13:24:47 executing program 4: r0 = getpid() sched_setattr(r0, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x0, 0x4}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f00000001c0)='./control/file0\x00') syz_fuse_mount(&(0x7f0000000240)='./control\x00', 0x406000, 0x0, 0x0, 0x0, 0x0) syz_fuseblk_mount(&(0x7f0000000140)='./control\x00', &(0x7f0000000180)='./control/file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) close(r1) 2018/05/26 13:24:47 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x10000000000, 0x0, 0x0, 0x0, 0xc00]}, 0x2c) 2018/05/26 13:24:47 executing program 6: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000]}, 0x2c) 2018/05/26 13:24:47 executing program 1: r0 = socket$inet(0x2, 0x5, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vcan0\x00', 0x10) sendmsg(r0, &(0x7f0000000480)={&(0x7f0000000140)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000380)="f0", 0x1}], 0x1}, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000a00)={@multicast1=0xe0000001, @local={0xac, 0x14, 0x14, 0xaa}}, 0xc) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000040)="84", 0x1}], 0x33c00, &(0x7f0000000540)}, 0x0) 2018/05/26 13:24:47 executing program 7 (fault-call:9 fault-nth:74): r0 = getpid() sched_setattr(r0, &(0x7f00000000c0), 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}}) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) syz_fuse_mount(&(0x7f0000000240)='./control\x00', 0x406000, 0x0, 0x0, 0x0, 0x48000000) close(r1) 2018/05/26 13:24:47 executing program 2: r0 = getpid() sched_setattr(r0, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x0, 0x4}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000f86000)='./control/file0\x00') rmdir(&(0x7f00000000c0)='./control\x00') syz_fuse_mount(&(0x7f0000000240)='./control\x00', 0x406000, 0x0, 0x0, 0x0, 0x0) syz_fuseblk_mount(&(0x7f0000000140)='./control\x00', &(0x7f0000000180)='./control/file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) close(r1) [ 1206.937255] FAULT_INJECTION: forcing a failure. [ 1206.937255] name failslab, interval 1, probability 0, space 0, times 0 [ 1206.948618] CPU: 1 PID: 4425 Comm: syz-executor7 Not tainted 4.17.0-rc6+ #68 [ 1206.955804] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1206.965159] Call Trace: [ 1206.967755] dump_stack+0x1b9/0x294 [ 1206.971397] ? dump_stack_print_info.cold.2+0x52/0x52 [ 1206.976596] ? d_add+0x605/0xa10 [ 1206.979966] ? lock_downgrade+0x8e0/0x8e0 [ 1206.984125] should_fail.cold.4+0xa/0x1a [ 1206.988196] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1206.993309] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 1206.998341] ? graph_lock+0x170/0x170 [ 1207.002145] ? __lockdep_init_map+0x105/0x590 [ 1207.006651] ? find_held_lock+0x36/0x1c0 [ 1207.010722] ? __lock_is_held+0xb5/0x140 [ 1207.014804] ? check_same_owner+0x320/0x320 [ 1207.019136] ? rcu_note_context_switch+0x710/0x710 [ 1207.024076] __should_failslab+0x124/0x180 [ 1207.028318] should_failslab+0x9/0x14 [ 1207.032126] kmem_cache_alloc+0x2af/0x760 [ 1207.036289] alloc_inode+0xb2/0x190 [ 1207.039925] new_inode_pseudo+0x69/0x1a0 [ 1207.043992] ? prune_icache_sb+0x1a0/0x1a0 [ 1207.048233] ? down_read+0x1b0/0x1b0 [ 1207.051950] ? mntput+0x74/0xa0 [ 1207.055242] new_inode+0x1c/0x40 [ 1207.058616] debugfs_get_inode+0x19/0x120 [ 1207.062772] debugfs_create_dir+0x75/0x3c0 [ 1207.067019] bdi_register_va.part.10+0x318/0x9b0 [ 1207.071780] ? cgwb_kill+0x630/0x630 [ 1207.075502] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1207.081044] ? bdi_init+0x416/0x510 [ 1207.084674] ? wb_init+0x9e0/0x9e0 [ 1207.088219] ? bdi_alloc_node+0x67/0xe0 [ 1207.092194] ? bdi_alloc_node+0x67/0xe0 [ 1207.096179] ? rcu_read_lock_sched_held+0x108/0x120 [ 1207.101204] ? kmem_cache_alloc_node_trace+0x34e/0x770 [ 1207.106487] ? _raw_spin_unlock+0x22/0x30 [ 1207.110646] bdi_register_va+0x68/0x80 [ 1207.114539] super_setup_bdi_name+0x123/0x220 [ 1207.119035] ? kill_block_super+0x100/0x100 [ 1207.123358] ? kmem_cache_alloc_trace+0x616/0x780 [ 1207.128198] ? match_wildcard+0x3c0/0x3c0 [ 1207.132347] ? trace_hardirqs_on+0xd/0x10 [ 1207.136499] fuse_fill_super+0xe6e/0x1e20 [ 1207.140677] ? fuse_get_root_inode+0x190/0x190 [ 1207.145259] ? __alloc_pages_slowpath+0x2db0/0x2db0 [ 1207.150277] ? kasan_check_read+0x11/0x20 [ 1207.154425] ? cap_capable+0x1f9/0x260 [ 1207.158322] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1207.163859] ? security_capable+0x99/0xc0 [ 1207.168008] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1207.173542] ? ns_capable_common+0x13f/0x170 [ 1207.177954] ? get_anon_bdev+0x2f0/0x2f0 [ 1207.182015] ? sget+0x113/0x150 [ 1207.185296] ? fuse_get_root_inode+0x190/0x190 [ 1207.189874] mount_nodev+0x6b/0x110 [ 1207.193504] fuse_mount+0x2c/0x40 [ 1207.196961] mount_fs+0xae/0x328 [ 1207.200329] vfs_kern_mount.part.34+0xd4/0x4d0 [ 1207.204911] ? may_umount+0xb0/0xb0 [ 1207.208540] ? _raw_read_unlock+0x22/0x30 [ 1207.212683] ? __get_fs_type+0x97/0xc0 [ 1207.216573] do_mount+0x564/0x3070 [ 1207.220120] ? copy_mount_string+0x40/0x40 [ 1207.224353] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 1207.229370] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1207.234131] ? retint_kernel+0x10/0x10 [ 1207.238025] ? copy_mount_options+0x1f0/0x380 [ 1207.242525] ? copy_mount_options+0x1fa/0x380 [ 1207.247018] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1207.252557] ? copy_mount_options+0x285/0x380 [ 1207.257052] ksys_mount+0x12d/0x140 [ 1207.260679] __x64_sys_mount+0xbe/0x150 [ 1207.264650] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 1207.269668] do_syscall_64+0x1b1/0x800 [ 1207.273558] ? finish_task_switch+0x1ca/0x840 [ 1207.278053] ? syscall_return_slowpath+0x5c0/0x5c0 [ 1207.282987] ? syscall_return_slowpath+0x30f/0x5c0 [ 1207.287916] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 1207.293283] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1207.298133] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1207.303319] RIP: 0033:0x455a09 [ 1207.306505] RSP: 002b:00007f118944d808 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1207.314215] RAX: ffffffffffffffda RBX: 0000000000000016 RCX: 0000000000455a09 [ 1207.321480] RDX: 00000000004c1eb6 RSI: 0000000020000240 RDI: 00000000004de0c5 [ 1207.328748] RBP: 0000000000000000 R08: 00007f118944d820 R09: 0000000000000000 2018/05/26 13:24:47 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty=0x18, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x240]}, 0x10) 2018/05/26 13:24:47 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty=0x18, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00000000000000]}, 0x10) [ 1207.336011] R10: 0000000048000000 R11: 0000000000000246 R12: 0000000000000000 [ 1207.343276] R13: 0000000020000240 R14: 0000000048000000 R15: 0000000000000000 2018/05/26 13:24:48 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty=0x18, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1100000000000000]}, 0x10) 2018/05/26 13:24:48 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)="766574683100000000ffffffffffef00", 0x22b) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1800]}, 0x10) 2018/05/26 13:24:48 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x1100000000000000, 0x0, 0x0, 0x0, 0xc00]}, 0x2c) 2018/05/26 13:24:48 executing program 6: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd000000]}, 0x2c) 2018/05/26 13:24:48 executing program 1: r0 = socket$inet(0x2, 0x5, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vcan0\x00', 0x10) sendmsg(r0, &(0x7f0000000480)={&(0x7f0000000140)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000380)="f0", 0x1}], 0x1}, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000a00)={@multicast1=0xe0000001, @local={0xac, 0x14, 0x14, 0xaa}}, 0xc) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000040)="84", 0x1}], 0xffffffe0, &(0x7f0000000540)}, 0x0) 2018/05/26 13:24:48 executing program 4: r0 = getpid() r1 = syz_open_dev$midi(&(0x7f0000000080)='/dev/midi#\x00', 0x6, 0x2) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f00000001c0)=""/109) sched_setattr(r0, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x0, 0x4}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000040)={0x1f}, 0xc) r3 = userfaultfd(0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000040)={0xaa}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r4 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r4, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000f86000)='./control/file0\x00') syz_fuse_mount(&(0x7f0000000240)='./control\x00', 0x406003, 0x0, 0x0, 0x0, 0x0) syz_fuseblk_mount(&(0x7f0000000140)='./control\x00', &(0x7f0000000180)='./control/file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) close(r3) 2018/05/26 13:24:48 executing program 2: r0 = getpid() sched_setattr(r0, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x0, 0x4}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000f86000)='./control/file0\x00') mmap(&(0x7f0000011000/0x4000)=nil, 0x4000, 0x0, 0xa0150, r2, 0x0) rmdir(&(0x7f00000000c0)='./control\x00') syz_fuse_mount(&(0x7f0000000240)='./control\x00', 0x406000, 0x0, 0x0, 0x0, 0x0) syz_fuseblk_mount(&(0x7f0000000140)='./control\x00', &(0x7f0000000180)='./control/file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) close(r1) 2018/05/26 13:24:48 executing program 7 (fault-call:9 fault-nth:75): r0 = getpid() sched_setattr(r0, &(0x7f00000000c0), 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}}) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) syz_fuse_mount(&(0x7f0000000240)='./control\x00', 0x406000, 0x0, 0x0, 0x0, 0x48000000) close(r1) [ 1208.072253] FAULT_INJECTION: forcing a failure. [ 1208.072253] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1208.084121] CPU: 0 PID: 4461 Comm: syz-executor7 Not tainted 4.17.0-rc6+ #68 [ 1208.091312] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1208.100662] Call Trace: [ 1208.103252] dump_stack+0x1b9/0x294 [ 1208.106886] ? dump_stack_print_info.cold.2+0x52/0x52 [ 1208.112078] ? zap_class+0x720/0x720 [ 1208.115797] should_fail.cold.4+0xa/0x1a [ 1208.119861] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1208.124985] ? find_held_lock+0x36/0x1c0 [ 1208.129052] ? graph_lock+0x170/0x170 [ 1208.132856] ? lock_acquire+0x1dc/0x520 [ 1208.136831] ? lock_downgrade+0x8e0/0x8e0 [ 1208.140983] ? find_held_lock+0x36/0x1c0 [ 1208.145065] __alloc_pages_nodemask+0x34e/0xd70 [ 1208.149743] ? __alloc_pages_slowpath+0x2db0/0x2db0 [ 1208.154774] ? rcu_read_unlock+0x35/0x70 [ 1208.158838] ? __lock_is_held+0xb5/0x140 [ 1208.162911] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1208.168455] ? find_first_bit+0xbe/0x100 [ 1208.172525] cache_grow_begin+0x6e/0x6c0 [ 1208.176588] ? cpuset_slab_spread_node+0xba/0x180 [ 1208.181433] ? alternate_node_alloc.part.44+0x70/0x80 [ 1208.186628] kmem_cache_alloc+0x689/0x760 [ 1208.190787] alloc_inode+0xb2/0x190 [ 1208.194420] new_inode_pseudo+0x69/0x1a0 [ 1208.198484] ? prune_icache_sb+0x1a0/0x1a0 [ 1208.202720] ? down_read+0x1b0/0x1b0 [ 1208.206431] ? mntput+0x74/0xa0 [ 1208.209720] new_inode+0x1c/0x40 [ 1208.213089] debugfs_get_inode+0x19/0x120 [ 1208.217241] __debugfs_create_file+0xb5/0x400 [ 1208.221745] debugfs_create_file+0x57/0x70 [ 1208.225992] bdi_register_va.part.10+0x365/0x9b0 [ 1208.230755] ? cgwb_kill+0x630/0x630 [ 1208.234472] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1208.240011] ? bdi_init+0x416/0x510 [ 1208.243640] ? wb_init+0x9e0/0x9e0 [ 1208.247185] ? bdi_alloc_node+0x67/0xe0 [ 1208.251169] ? bdi_alloc_node+0x67/0xe0 [ 1208.255147] ? rcu_read_lock_sched_held+0x108/0x120 [ 1208.260167] ? kmem_cache_alloc_node_trace+0x34e/0x770 [ 1208.265454] ? _raw_spin_unlock+0x22/0x30 2018/05/26 13:24:48 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0xc00]}, 0x2c) [ 1208.269616] bdi_register_va+0x68/0x80 [ 1208.273510] super_setup_bdi_name+0x123/0x220 [ 1208.278014] ? kill_block_super+0x100/0x100 [ 1208.282343] ? kmem_cache_alloc_trace+0x616/0x780 [ 1208.287192] ? match_wildcard+0x3c0/0x3c0 [ 1208.291345] ? trace_hardirqs_on+0xd/0x10 [ 1208.295501] fuse_fill_super+0xe6e/0x1e20 [ 1208.299656] ? fuse_get_root_inode+0x190/0x190 [ 1208.304239] ? __alloc_pages_slowpath+0x2db0/0x2db0 [ 1208.309264] ? kasan_check_read+0x11/0x20 [ 1208.313417] ? cap_capable+0x1f9/0x260 [ 1208.317327] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1208.322875] ? security_capable+0x99/0xc0 [ 1208.327039] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1208.332583] ? ns_capable_common+0x13f/0x170 [ 1208.337004] ? get_anon_bdev+0x2f0/0x2f0 [ 1208.341065] ? sget+0x113/0x150 [ 1208.344354] ? fuse_get_root_inode+0x190/0x190 [ 1208.348947] mount_nodev+0x6b/0x110 [ 1208.352579] fuse_mount+0x2c/0x40 [ 1208.356036] mount_fs+0xae/0x328 [ 1208.359412] vfs_kern_mount.part.34+0xd4/0x4d0 [ 1208.363997] ? may_umount+0xb0/0xb0 [ 1208.367626] ? _raw_read_unlock+0x22/0x30 2018/05/26 13:24:48 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x702000000000000, 0x0, 0x0, 0x0, 0xc00]}, 0x2c) [ 1208.371772] ? __get_fs_type+0x97/0xc0 [ 1208.375671] do_mount+0x564/0x3070 [ 1208.379223] ? copy_mount_string+0x40/0x40 [ 1208.383469] ? rcu_pm_notify+0xc0/0xc0 [ 1208.387369] ? copy_mount_options+0x5f/0x380 [ 1208.391778] ? rcu_read_lock_sched_held+0x108/0x120 [ 1208.396801] ? kmem_cache_alloc_trace+0x616/0x780 [ 1208.401659] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1208.407211] ? _copy_from_user+0xdf/0x150 [ 1208.411375] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1208.416920] ? copy_mount_options+0x285/0x380 2018/05/26 13:24:48 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x300000000000000, 0x0, 0x0, 0x0, 0xc00]}, 0x2c) [ 1208.421424] ksys_mount+0x12d/0x140 [ 1208.425060] __x64_sys_mount+0xbe/0x150 [ 1208.429042] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 1208.434066] do_syscall_64+0x1b1/0x800 [ 1208.437960] ? finish_task_switch+0x1ca/0x840 [ 1208.442458] ? syscall_return_slowpath+0x5c0/0x5c0 [ 1208.447394] ? syscall_return_slowpath+0x30f/0x5c0 [ 1208.452330] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 1208.457701] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1208.462562] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1208.467751] RIP: 0033:0x455a09 [ 1208.470941] RSP: 002b:00007f118944d808 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1208.478655] RAX: ffffffffffffffda RBX: 0000000000000016 RCX: 0000000000455a09 [ 1208.485937] RDX: 00000000004c1eb6 RSI: 0000000020000240 RDI: 00000000004de0c5 [ 1208.493210] RBP: 0000000000000000 R08: 00007f118944d820 R09: 0000000000000000 [ 1208.500483] R10: 0000000048000000 R11: 0000000000000246 R12: 0000000000000000 [ 1208.507753] R13: 0000000020000240 R14: 0000000048000000 R15: 0000000000000000 [ 1208.515229] net_ratelimit: 8 callbacks suppressed 2018/05/26 13:24:48 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)="766574683100000000ffffffffffef00", 0x22b) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1100]}, 0x10) 2018/05/26 13:24:48 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty=0x18, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x10) [ 1208.515234] TCP: out of memory -- consider tuning tcp_mem 2018/05/26 13:24:48 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x5000000, 0x0, 0x0, 0x0, 0xc00]}, 0x2c) 2018/05/26 13:24:48 executing program 6: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10]}, 0x2c) 2018/05/26 13:24:48 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)="766574683100000000ffffffffffef00", 0x22b) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84480]}, 0x10) [ 1208.608055] TCP: out of memory -- consider tuning tcp_mem 2018/05/26 13:24:48 executing program 7 (fault-call:9 fault-nth:76): r0 = getpid() sched_setattr(r0, &(0x7f00000000c0), 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}}) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) syz_fuse_mount(&(0x7f0000000240)='./control\x00', 0x406000, 0x0, 0x0, 0x0, 0x48000000) close(r1) 2018/05/26 13:24:48 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0xc00]}, 0x2c) 2018/05/26 13:24:48 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty=0x18, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x34000000]}, 0x10) 2018/05/26 13:24:48 executing program 6: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc0030000000000]}, 0x2c) [ 1208.754356] FAULT_INJECTION: forcing a failure. [ 1208.754356] name failslab, interval 1, probability 0, space 0, times 0 [ 1208.765694] CPU: 0 PID: 4505 Comm: syz-executor7 Not tainted 4.17.0-rc6+ #68 [ 1208.772884] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1208.782242] Call Trace: [ 1208.784843] dump_stack+0x1b9/0x294 [ 1208.788486] ? dump_stack_print_info.cold.2+0x52/0x52 [ 1208.793687] ? __save_stack_trace+0x7e/0xd0 [ 1208.798027] should_fail.cold.4+0xa/0x1a [ 1208.802100] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1208.807215] ? save_stack+0x43/0xd0 [ 1208.810850] ? kasan_kmalloc+0xc4/0xe0 [ 1208.814748] ? kasan_slab_alloc+0x12/0x20 [ 1208.818904] ? kmem_cache_alloc+0x12e/0x760 [ 1208.823231] ? fuse_alloc_inode+0x96/0x4f0 [ 1208.827472] ? alloc_inode+0x63/0x190 [ 1208.831274] ? iget5_locked+0x20e/0x570 [ 1208.835258] ? graph_lock+0x170/0x170 [ 1208.839069] ? print_usage_bug+0xc0/0xc0 [ 1208.843130] ? vfs_kern_mount.part.34+0xd4/0x4d0 [ 1208.847889] ? do_mount+0x564/0x3070 [ 1208.851605] ? ksys_mount+0x12d/0x140 [ 1208.855404] ? __x64_sys_mount+0xbe/0x150 [ 1208.859559] ? find_held_lock+0x36/0x1c0 [ 1208.863632] ? __lock_is_held+0xb5/0x140 [ 1208.867718] ? check_same_owner+0x320/0x320 [ 1208.872042] ? __mutex_init+0x1ef/0x280 [ 1208.876023] ? rcu_note_context_switch+0x710/0x710 [ 1208.880960] ? __ia32_sys_membarrier+0x150/0x150 [ 1208.885726] __should_failslab+0x124/0x180 [ 1208.889968] should_failslab+0x9/0x14 [ 1208.893775] kmem_cache_alloc_trace+0x2cb/0x780 [ 1208.898449] ? init_wait_entry+0x1b0/0x1b0 [ 1208.902690] ? find_held_lock+0x36/0x1c0 [ 1208.906765] fuse_alloc_inode+0x3ae/0x4f0 [ 1208.910917] ? fuse_dev_alloc+0x4e0/0x4e0 [ 1208.915068] ? lock_downgrade+0x8e0/0x8e0 [ 1208.919227] ? kasan_check_read+0x11/0x20 [ 1208.923376] ? do_raw_spin_unlock+0x9e/0x2e0 [ 1208.927793] ? do_raw_spin_trylock+0x1b0/0x1b0 [ 1208.932383] ? kasan_check_write+0x14/0x20 [ 1208.936622] ? find_inode.isra.19+0xc3/0x1d0 [ 1208.941037] ? fuse_dev_alloc+0x4e0/0x4e0 [ 1208.945193] alloc_inode+0x63/0x190 [ 1208.948825] iget5_locked+0x20e/0x570 [ 1208.952625] ? fuse_inode_eq+0x80/0x80 [ 1208.956519] ? fuse_init_file_inode+0x70/0x70 [ 1208.961029] ? inode_lru_isolate+0x580/0x580 [ 1208.965441] ? cgwb_kill+0x630/0x630 [ 1208.969162] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1208.974700] ? print_usage_bug+0xc0/0xc0 [ 1208.978771] fuse_iget+0x1cc/0x820 [ 1208.982324] ? fuse_change_attributes+0x810/0x810 [ 1208.987170] ? _raw_spin_unlock+0x22/0x30 [ 1208.991327] fuse_get_root_inode+0x121/0x190 [ 1208.995739] ? fuse_iget+0x820/0x820 [ 1208.999463] ? _raw_spin_unlock_bh+0x30/0x40 [ 1209.003877] ? bdi_set_max_ratio+0x112/0x150 [ 1209.008289] fuse_fill_super+0x11e0/0x1e20 [ 1209.012533] ? fuse_get_root_inode+0x190/0x190 [ 1209.017120] ? __alloc_pages_slowpath+0x2db0/0x2db0 [ 1209.022148] ? kasan_check_read+0x11/0x20 [ 1209.026304] ? cap_capable+0x1f9/0x260 [ 1209.030203] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1209.035740] ? security_capable+0x99/0xc0 [ 1209.039901] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1209.045444] ? ns_capable_common+0x13f/0x170 [ 1209.049857] ? get_anon_bdev+0x2f0/0x2f0 [ 1209.053926] ? sget+0x113/0x150 [ 1209.057211] ? fuse_get_root_inode+0x190/0x190 [ 1209.061798] mount_nodev+0x6b/0x110 [ 1209.065434] fuse_mount+0x2c/0x40 [ 1209.068897] mount_fs+0xae/0x328 [ 1209.072273] vfs_kern_mount.part.34+0xd4/0x4d0 [ 1209.076862] ? may_umount+0xb0/0xb0 [ 1209.080497] ? _raw_read_unlock+0x22/0x30 [ 1209.084650] ? __get_fs_type+0x97/0xc0 [ 1209.088550] do_mount+0x564/0x3070 [ 1209.092099] ? copy_mount_string+0x40/0x40 [ 1209.096337] ? rcu_pm_notify+0xc0/0xc0 [ 1209.100239] ? copy_mount_options+0x5f/0x380 [ 1209.104652] ? rcu_read_lock_sched_held+0x108/0x120 [ 1209.109674] ? kmem_cache_alloc_trace+0x616/0x780 [ 1209.114525] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1209.120068] ? _copy_from_user+0xdf/0x150 [ 1209.124225] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1209.129762] ? copy_mount_options+0x285/0x380 [ 1209.134264] ksys_mount+0x12d/0x140 [ 1209.137901] __x64_sys_mount+0xbe/0x150 [ 1209.141882] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 1209.146904] do_syscall_64+0x1b1/0x800 [ 1209.150791] ? finish_task_switch+0x1ca/0x840 [ 1209.155290] ? syscall_return_slowpath+0x5c0/0x5c0 [ 1209.160224] ? syscall_return_slowpath+0x30f/0x5c0 [ 1209.165162] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 1209.170534] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1209.175389] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1209.180579] RIP: 0033:0x455a09 [ 1209.183770] RSP: 002b:00007f118944d808 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1209.191489] RAX: ffffffffffffffda RBX: 0000000000000016 RCX: 0000000000455a09 [ 1209.198756] RDX: 00000000004c1eb6 RSI: 0000000020000240 RDI: 00000000004de0c5 [ 1209.206027] RBP: 0000000000000000 R08: 00007f118944d820 R09: 0000000000000000 [ 1209.213296] R10: 0000000048000000 R11: 0000000000000246 R12: 0000000000000000 [ 1209.220563] R13: 0000000020000240 R14: 0000000048000000 R15: 0000000000000000 2018/05/26 13:24:49 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)="766574683100000000ffffffffffef00", 0x22b) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84472]}, 0x10) 2018/05/26 13:24:49 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x702, 0x0, 0x0, 0xc00]}, 0x2c) 2018/05/26 13:24:49 executing program 6: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00300]}, 0x2c) 2018/05/26 13:24:49 executing program 4: r0 = getpid() sched_setattr(r0, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x0, 0x4}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x5) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000f86000)='./control/file0\x00') syz_fuse_mount(&(0x7f0000000240)='./control\x00', 0x406000, 0x0, 0x0, 0x0, 0x0) syz_fuseblk_mount(&(0x7f0000000140)='./control\x00', &(0x7f0000000180)='./control/file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) close(r1) 2018/05/26 13:24:49 executing program 2: r0 = getpid() sched_setattr(r0, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x0, 0x4}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000000600)='/dev/snd/pcmC#D#c\x00', 0x1, 0x101) ioctl$SNDRV_TIMER_IOCTL_STATUS(r1, 0x80605414, &(0x7f0000000640)=""/16) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = creat(&(0x7f0000000780)='./control/file0\x00', 0x40) write$sndseq(r3, &(0x7f0000000740)=[{0x1000, 0x8000, 0x6, 0x0, @tick=0xfffffffffffffffe, {0x9, 0x6}, {0x200, 0xffff}, @quote={{0x3931, 0x8000}, 0x2}}], 0x30) unlink(&(0x7f0000f86000)='./control/file0\x00') rmdir(&(0x7f00000000c0)='./control\x00') syz_fuse_mount(&(0x7f0000000240)='./control\x00', 0x406000, 0x0, 0x0, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000840)='/dev/sequencer\x00', 0x200, 0x0) perf_event_open(&(0x7f00000007c0)={0x2, 0x70, 0x7fff, 0x6, 0x1, 0x4, 0x0, 0x0, 0x40000, 0x4, 0x8, 0xe, 0x49a1, 0x7fff, 0x7f, 0x8, 0x1, 0xffffffffffffff01, 0x200, 0x1, 0x8, 0x4, 0x3ff, 0x69b, 0xdc, 0x5, 0x9fc, 0x76a6, 0x7, 0x9f, 0x2, 0x7, 0x6, 0xf4f2, 0x9b31, 0x7, 0x5, 0x7fffffff, 0x0, 0x3c, 0x1, @perf_bp={&(0x7f0000000000), 0x1}, 0x0, 0x800, 0x3, 0x7, 0x5, 0x6, 0x8}, r0, 0x8, r3, 0x8) syz_fuseblk_mount(&(0x7f0000000140)='./control\x00', &(0x7f0000000180)='./control/file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$rds(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x2, 0x4e22, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000280)=""/211, 0xd3}, {&(0x7f0000000380)=""/161, 0xa1}, {&(0x7f0000000440)=""/141, 0x8d}, {&(0x7f0000000500)=""/248, 0xf8}], 0x4, 0x0, 0x0, 0x800}, 0x48000) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @remote}, &(0x7f0000000080)=0xc) close(r2) rt_sigtimedwait(&(0x7f0000000680)={0x400}, &(0x7f00000006c0), &(0x7f0000000700)={0x0, 0x989680}, 0x8) 2018/05/26 13:24:49 executing program 1: r0 = socket$inet(0x2, 0x5, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vcan0\x00', 0x10) sendmsg(r0, &(0x7f0000000480)={&(0x7f0000000140)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000380)="f0", 0x1}], 0x1}, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000a00)={@multicast1=0xe0000001, @local={0xac, 0x14, 0x14, 0xaa}}, 0xc) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000040)="84", 0x1}], 0xffffffffffffff50, &(0x7f0000000540)}, 0x0) 2018/05/26 13:24:49 executing program 7 (fault-call:9 fault-nth:77): r0 = getpid() sched_setattr(r0, &(0x7f00000000c0), 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}}) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) syz_fuse_mount(&(0x7f0000000240)='./control\x00', 0x406000, 0x0, 0x0, 0x0, 0x48000000) close(r1) 2018/05/26 13:24:49 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty=0x18, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f4]}, 0x10) [ 1209.446566] FAULT_INJECTION: forcing a failure. [ 1209.446566] name failslab, interval 1, probability 0, space 0, times 0 [ 1209.457956] CPU: 0 PID: 4533 Comm: syz-executor7 Not tainted 4.17.0-rc6+ #68 [ 1209.465144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1209.474502] Call Trace: [ 1209.475632] TCP: out of memory -- consider tuning tcp_mem [ 1209.477099] dump_stack+0x1b9/0x294 [ 1209.477121] ? dump_stack_print_info.cold.2+0x52/0x52 [ 1209.477140] ? __save_stack_trace+0x7e/0xd0 [ 1209.477163] should_fail.cold.4+0xa/0x1a [ 1209.477182] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1209.496149] TCP: out of memory -- consider tuning tcp_mem [ 1209.499852] ? save_stack+0x43/0xd0 [ 1209.499869] ? kasan_kmalloc+0xc4/0xe0 [ 1209.499883] ? kasan_slab_alloc+0x12/0x20 [ 1209.499901] ? kmem_cache_alloc+0x12e/0x760 [ 1209.526430] ? fuse_alloc_inode+0x96/0x4f0 [ 1209.530669] ? alloc_inode+0x63/0x190 [ 1209.534466] ? iget5_locked+0x20e/0x570 [ 1209.538442] ? graph_lock+0x170/0x170 [ 1209.542245] ? print_usage_bug+0xc0/0xc0 2018/05/26 13:24:49 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)="766574683100000000ffffffffffef00", 0x22b) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7744080000000000]}, 0x10) 2018/05/26 13:24:49 executing program 6: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700]}, 0x2c) [ 1209.546308] ? vfs_kern_mount.part.34+0xd4/0x4d0 [ 1209.551068] ? do_mount+0x564/0x3070 [ 1209.554786] ? ksys_mount+0x12d/0x140 [ 1209.558587] ? __x64_sys_mount+0xbe/0x150 [ 1209.562742] ? find_held_lock+0x36/0x1c0 [ 1209.566812] ? __lock_is_held+0xb5/0x140 [ 1209.570894] ? check_same_owner+0x320/0x320 [ 1209.575223] ? __mutex_init+0x1ef/0x280 [ 1209.579208] ? rcu_note_context_switch+0x710/0x710 [ 1209.584143] ? __ia32_sys_membarrier+0x150/0x150 [ 1209.588907] __should_failslab+0x124/0x180 [ 1209.593152] should_failslab+0x9/0x14 [ 1209.596960] kmem_cache_alloc_trace+0x2cb/0x780 [ 1209.601644] ? init_wait_entry+0x1b0/0x1b0 [ 1209.605882] ? find_held_lock+0x36/0x1c0 [ 1209.609952] fuse_alloc_inode+0x3ae/0x4f0 [ 1209.614103] ? fuse_dev_alloc+0x4e0/0x4e0 [ 1209.618256] ? lock_downgrade+0x8e0/0x8e0 [ 1209.622415] ? kasan_check_read+0x11/0x20 [ 1209.626565] ? do_raw_spin_unlock+0x9e/0x2e0 [ 1209.630981] ? do_raw_spin_trylock+0x1b0/0x1b0 [ 1209.635575] ? kasan_check_write+0x14/0x20 [ 1209.639816] ? find_inode.isra.19+0xc3/0x1d0 2018/05/26 13:24:49 executing program 6: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}, 0x2c) [ 1209.644230] ? fuse_dev_alloc+0x4e0/0x4e0 [ 1209.648382] alloc_inode+0x63/0x190 [ 1209.652014] iget5_locked+0x20e/0x570 [ 1209.655816] ? fuse_inode_eq+0x80/0x80 [ 1209.659708] ? fuse_init_file_inode+0x70/0x70 [ 1209.664205] ? inode_lru_isolate+0x580/0x580 [ 1209.668615] ? cgwb_kill+0x630/0x630 [ 1209.672333] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1209.677879] ? print_usage_bug+0xc0/0xc0 [ 1209.681948] fuse_iget+0x1cc/0x820 [ 1209.685500] ? fuse_change_attributes+0x810/0x810 [ 1209.690346] ? _raw_spin_unlock+0x22/0x30 [ 1209.694505] fuse_get_root_inode+0x121/0x190 [ 1209.698916] ? fuse_iget+0x820/0x820 [ 1209.702636] ? _raw_spin_unlock_bh+0x30/0x40 [ 1209.707054] ? bdi_set_max_ratio+0x112/0x150 [ 1209.711472] fuse_fill_super+0x11e0/0x1e20 [ 1209.715710] ? fuse_get_root_inode+0x190/0x190 [ 1209.720298] ? __alloc_pages_slowpath+0x2db0/0x2db0 [ 1209.725321] ? kasan_check_read+0x11/0x20 [ 1209.729477] ? cap_capable+0x1f9/0x260 [ 1209.733374] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1209.738915] ? security_capable+0x99/0xc0 2018/05/26 13:24:49 executing program 6: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x7ffe, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe00000000000000]}, 0x2c) [ 1209.743070] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1209.748608] ? ns_capable_common+0x13f/0x170 [ 1209.753021] ? get_anon_bdev+0x2f0/0x2f0 [ 1209.757082] ? sget+0x113/0x150 [ 1209.760361] ? fuse_get_root_inode+0x190/0x190 [ 1209.764947] mount_nodev+0x6b/0x110 [ 1209.768583] fuse_mount+0x2c/0x40 [ 1209.772042] mount_fs+0xae/0x328 [ 1209.775417] vfs_kern_mount.part.34+0xd4/0x4d0 [ 1209.780004] ? may_umount+0xb0/0xb0 [ 1209.783633] ? _raw_read_unlock+0x22/0x30 [ 1209.787783] ? __get_fs_type+0x97/0xc0 [ 1209.791683] do_mount+0x564/0x3070 [ 1209.795234] ? copy_mount_string+0x40/0x40 [ 1209.799475] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1209.804326] ? retint_kernel+0x10/0x10 [ 1209.808218] ? copy_mount_options+0x1e3/0x380 [ 1209.812720] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1209.818267] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1209.823817] ? copy_mount_options+0x285/0x380 [ 1209.828324] ksys_mount+0x12d/0x140 [ 1209.831957] __x64_sys_mount+0xbe/0x150 [ 1209.835935] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 1209.840955] do_syscall_64+0x1b1/0x800 [ 1209.844843] ? finish_task_switch+0x1ca/0x840 [ 1209.849344] ? syscall_return_slowpath+0x5c0/0x5c0 [ 1209.854276] ? syscall_return_slowpath+0x30f/0x5c0 [ 1209.859210] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 1209.864607] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1209.869460] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1209.874646] RIP: 0033:0x455a09 [ 1209.877834] RSP: 002b:00007f118944d808 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1209.885543] RAX: ffffffffffffffda RBX: 0000000000000016 RCX: 0000000000455a09 [ 1209.888033] TCP: out of memory -- consider tuning tcp_mem [ 1209.892811] RDX: 00000000004c1eb6 RSI: 0000000020000240 RDI: 00000000004de0c5 [ 1209.892821] RBP: 0000000000000000 R08: 00007f118944d820 R09: 0000000000000000 [ 1209.892830] R10: 0000000048000000 R11: 0000000000000246 R12: 0000000000000000 [ 1209.892839] R13: 0000000020000240 R14: 0000000048000000 R15: 0000000000000000 [ 1209.893106] TCP: out of memory -- consider tuning tcp_mem [ 1209.959823] ================================================================== [ 1209.967243] BUG: KASAN: use-after-free in __lock_acquire+0x3888/0x5140 [ 1209.973908] Read of size 8 at addr ffff8801804f8c08 by task syz-executor7/4533 [ 1209.981258] [ 1209.982891] CPU: 0 PID: 4533 Comm: syz-executor7 Not tainted 4.17.0-rc6+ #68 [ 1209.990067] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1209.999414] Call Trace: [ 1210.002010] dump_stack+0x1b9/0x294 [ 1210.005641] ? dump_stack_print_info.cold.2+0x52/0x52 [ 1210.010827] ? printk+0x9e/0xba [ 1210.014109] ? kmsg_dump_rewind_nolock+0xe4/0xe4 [ 1210.018869] ? kasan_check_write+0x14/0x20 [ 1210.023105] print_address_description+0x6c/0x20b [ 1210.027946] ? __lock_acquire+0x3888/0x5140 [ 1210.032265] kasan_report.cold.7+0x242/0x2fe [ 1210.036678] __asan_report_load8_noabort+0x14/0x20 [ 1210.041601] __lock_acquire+0x3888/0x5140 [ 1210.045748] ? lock_downgrade+0x8e0/0x8e0 [ 1210.049894] ? kasan_check_read+0x11/0x20 [ 1210.054120] ? rcu_is_watching+0x85/0x140 [ 1210.058265] ? debug_check_no_locks_freed+0x310/0x310 [ 1210.063456] ? is_bpf_text_address+0xd7/0x170 [ 1210.067948] ? kernel_text_address+0x79/0xf0 [ 1210.072352] ? __unwind_start+0x166/0x330 [ 1210.076492] ? __kernel_text_address+0xd/0x40 [ 1210.080985] ? unwind_get_return_address+0x61/0xa0 [ 1210.085913] ? __save_stack_trace+0x7e/0xd0 [ 1210.090235] ? save_stack+0xa9/0xd0 [ 1210.093859] ? save_stack+0x43/0xd0 [ 1210.097481] ? __kasan_slab_free+0x11a/0x170 [ 1210.101888] ? kasan_slab_free+0xe/0x10 [ 1210.105856] ? kfree+0xd9/0x260 [ 1210.109130] ? unregister_shrinker+0x216/0x3a0 [ 1210.113709] ? deactivate_locked_super+0x70/0x100 [ 1210.118549] ? mount_nodev+0xfa/0x110 [ 1210.122345] ? fuse_mount+0x2c/0x40 [ 1210.125967] ? mount_fs+0xae/0x328 [ 1210.129501] ? vfs_kern_mount.part.34+0xd4/0x4d0 [ 1210.134251] ? do_mount+0x564/0x3070 [ 1210.137957] ? ksys_mount+0x12d/0x140 [ 1210.141754] ? graph_lock+0x170/0x170 [ 1210.145554] ? kasan_check_read+0x11/0x20 [ 1210.149699] ? do_raw_spin_unlock+0x9e/0x2e0 [ 1210.154103] ? do_raw_spin_trylock+0x1b0/0x1b0 [ 1210.158679] ? print_usage_bug+0xc0/0xc0 [ 1210.162734] ? kasan_check_write+0x14/0x20 [ 1210.166964] ? do_raw_spin_lock+0xc1/0x200 [ 1210.171196] lock_acquire+0x1dc/0x520 [ 1210.174994] ? fuse_kill_sb_anon+0x50/0xb0 [ 1210.179234] ? lock_release+0xa10/0xa10 [ 1210.183204] ? check_same_owner+0x320/0x320 [ 1210.187516] ? quarantine_put+0xeb/0x190 [ 1210.191571] ? rcu_note_context_switch+0x710/0x710 [ 1210.196496] ? __might_sleep+0x95/0x190 [ 1210.200466] down_write+0x87/0x120 [ 1210.204004] ? fuse_kill_sb_anon+0x50/0xb0 [ 1210.208236] ? down_read+0x1b0/0x1b0 [ 1210.211951] ? perf_trace_mm_vmscan_writepage+0x750/0x750 [ 1210.217484] fuse_kill_sb_anon+0x50/0xb0 [ 1210.221545] deactivate_locked_super+0x97/0x100 [ 1210.226207] ? fuse_get_root_inode+0x190/0x190 [ 1210.230790] mount_nodev+0xfa/0x110 [ 1210.234412] fuse_mount+0x2c/0x40 [ 1210.237860] mount_fs+0xae/0x328 [ 1210.241226] vfs_kern_mount.part.34+0xd4/0x4d0 [ 1210.245812] ? may_umount+0xb0/0xb0 [ 1210.249437] ? _raw_read_unlock+0x22/0x30 [ 1210.253580] ? __get_fs_type+0x97/0xc0 [ 1210.257462] do_mount+0x564/0x3070 [ 1210.260998] ? copy_mount_string+0x40/0x40 [ 1210.265228] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1210.269987] ? retint_kernel+0x10/0x10 [ 1210.273874] ? copy_mount_options+0x1e3/0x380 [ 1210.278373] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1210.283910] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1210.289442] ? copy_mount_options+0x285/0x380 [ 1210.293935] ksys_mount+0x12d/0x140 [ 1210.297562] __x64_sys_mount+0xbe/0x150 [ 1210.301534] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 1210.306546] do_syscall_64+0x1b1/0x800 [ 1210.310428] ? finish_task_switch+0x1ca/0x840 [ 1210.314917] ? syscall_return_slowpath+0x5c0/0x5c0 [ 1210.319841] ? syscall_return_slowpath+0x30f/0x5c0 [ 1210.324767] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 1210.330135] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1210.334974] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1210.340155] RIP: 0033:0x455a09 [ 1210.343339] RSP: 002b:00007f118944d808 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1210.351039] RAX: ffffffffffffffda RBX: 0000000000000016 RCX: 0000000000455a09 [ 1210.358302] RDX: 00000000004c1eb6 RSI: 0000000020000240 RDI: 00000000004de0c5 [ 1210.365568] RBP: 0000000000000000 R08: 00007f118944d820 R09: 0000000000000000 [ 1210.372833] R10: 0000000048000000 R11: 0000000000000246 R12: 0000000000000000 [ 1210.380099] R13: 0000000020000240 R14: 0000000048000000 R15: 0000000000000000 [ 1210.387361] [ 1210.388982] Allocated by task 4533: [ 1210.392608] save_stack+0x43/0xd0 [ 1210.396058] kasan_kmalloc+0xc4/0xe0 [ 1210.399779] kmem_cache_alloc_trace+0x152/0x780 [ 1210.404440] fuse_fill_super+0xc92/0x1e20 [ 1210.408580] mount_nodev+0x6b/0x110 [ 1210.412202] fuse_mount+0x2c/0x40 [ 1210.415653] mount_fs+0xae/0x328 [ 1210.419014] vfs_kern_mount.part.34+0xd4/0x4d0 [ 1210.423588] do_mount+0x564/0x3070 [ 1210.427123] ksys_mount+0x12d/0x140 [ 1210.430742] __x64_sys_mount+0xbe/0x150 [ 1210.434716] do_syscall_64+0x1b1/0x800 [ 1210.438600] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1210.443779] [ 1210.445407] Freed by task 4536: [ 1210.448684] save_stack+0x43/0xd0 [ 1210.452134] __kasan_slab_free+0x11a/0x170 [ 1210.456368] kasan_slab_free+0xe/0x10 [ 1210.460161] kfree+0xd9/0x260 [ 1210.463262] rcu_process_callbacks+0xa69/0x15f0 [ 1210.467928] __do_softirq+0x2e0/0xaf5 [ 1210.471716] [ 1210.473341] The buggy address belongs to the object at ffff8801804f8940 [ 1210.473341] which belongs to the cache kmalloc-1024 of size 1024 [ 1210.486171] The buggy address is located 712 bytes inside of [ 1210.486171] 1024-byte region [ffff8801804f8940, ffff8801804f8d40) [ 1210.498120] The buggy address belongs to the page: [ 1210.503046] page:ffffea0006013e00 count:1 mapcount:0 mapping:ffff8801804f8040 index:0x0 compound_mapcount: 0 [ 1210.513011] flags: 0x2fffc0000008100(slab|head) [ 1210.517677] raw: 02fffc0000008100 ffff8801804f8040 0000000000000000 0000000100000007 [ 1210.525557] raw: ffffea0006ab6020 ffffea000702bd20 ffff8801da800ac0 0000000000000000 [ 1210.533425] page dumped because: kasan: bad access detected [ 1210.539119] [ 1210.540732] Memory state around the buggy address: [ 1210.545661] ffff8801804f8b00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1210.553011] ffff8801804f8b80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1210.560362] >ffff8801804f8c00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1210.567709] ^ [ 1210.571327] ffff8801804f8c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1210.578681] ffff8801804f8d00: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 1210.586024] ================================================================== [ 1210.593369] Disabling lock debugging due to kernel taint [ 1210.598806] Kernel panic - not syncing: panic_on_warn set ... [ 1210.598806] [ 1210.606165] CPU: 0 PID: 4533 Comm: syz-executor7 Tainted: G B 4.17.0-rc6+ #68 [ 1210.614728] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1210.624075] Call Trace: [ 1210.626660] dump_stack+0x1b9/0x294 [ 1210.630286] ? dump_stack_print_info.cold.2+0x52/0x52 [ 1210.635471] ? lock_downgrade+0x8e0/0x8e0 [ 1210.639610] ? vprintk_default+0x28/0x30 [ 1210.643664] ? __lock_acquire+0x37f0/0x5140 [ 1210.647978] panic+0x22f/0x4de [ 1210.651166] ? add_taint.cold.5+0x16/0x16 [ 1210.655313] ? add_taint.cold.5+0x5/0x16 [ 1210.659370] ? do_raw_spin_unlock+0x9e/0x2e0 [ 1210.663776] ? __lock_acquire+0x3888/0x5140 [ 1210.668090] kasan_end_report+0x47/0x4f [ 1210.672058] kasan_report.cold.7+0x76/0x2fe [ 1210.676375] __asan_report_load8_noabort+0x14/0x20 [ 1210.681295] __lock_acquire+0x3888/0x5140 [ 1210.685435] ? lock_downgrade+0x8e0/0x8e0 [ 1210.689577] ? kasan_check_read+0x11/0x20 [ 1210.693720] ? rcu_is_watching+0x85/0x140 [ 1210.697869] ? debug_check_no_locks_freed+0x310/0x310 [ 1210.703055] ? is_bpf_text_address+0xd7/0x170 [ 1210.707547] ? kernel_text_address+0x79/0xf0 [ 1210.711949] ? __unwind_start+0x166/0x330 [ 1210.716088] ? __kernel_text_address+0xd/0x40 [ 1210.720583] ? unwind_get_return_address+0x61/0xa0 [ 1210.725506] ? __save_stack_trace+0x7e/0xd0 [ 1210.729826] ? save_stack+0xa9/0xd0 [ 1210.733445] ? save_stack+0x43/0xd0 [ 1210.737064] ? __kasan_slab_free+0x11a/0x170 [ 1210.741465] ? kasan_slab_free+0xe/0x10 [ 1210.745431] ? kfree+0xd9/0x260 [ 1210.748702] ? unregister_shrinker+0x216/0x3a0 [ 1210.753280] ? deactivate_locked_super+0x70/0x100 [ 1210.758115] ? mount_nodev+0xfa/0x110 [ 1210.761905] ? fuse_mount+0x2c/0x40 [ 1210.765523] ? mount_fs+0xae/0x328 [ 1210.769055] ? vfs_kern_mount.part.34+0xd4/0x4d0 [ 1210.773805] ? do_mount+0x564/0x3070 [ 1210.777512] ? ksys_mount+0x12d/0x140 [ 1210.781307] ? graph_lock+0x170/0x170 [ 1210.785102] ? kasan_check_read+0x11/0x20 [ 1210.789241] ? do_raw_spin_unlock+0x9e/0x2e0 [ 1210.793644] ? do_raw_spin_trylock+0x1b0/0x1b0 [ 1210.798219] ? print_usage_bug+0xc0/0xc0 [ 1210.802273] ? kasan_check_write+0x14/0x20 [ 1210.806512] ? do_raw_spin_lock+0xc1/0x200 [ 1210.810743] lock_acquire+0x1dc/0x520 [ 1210.814539] ? fuse_kill_sb_anon+0x50/0xb0 [ 1210.818773] ? lock_release+0xa10/0xa10 [ 1210.822746] ? check_same_owner+0x320/0x320 [ 1210.827061] ? quarantine_put+0xeb/0x190 [ 1210.831116] ? rcu_note_context_switch+0x710/0x710 [ 1210.836040] ? __might_sleep+0x95/0x190 [ 1210.840010] down_write+0x87/0x120 [ 1210.843544] ? fuse_kill_sb_anon+0x50/0xb0 [ 1210.847773] ? down_read+0x1b0/0x1b0 [ 1210.851483] ? perf_trace_mm_vmscan_writepage+0x750/0x750 [ 1210.857011] fuse_kill_sb_anon+0x50/0xb0 [ 1210.861069] deactivate_locked_super+0x97/0x100 [ 1210.865734] ? fuse_get_root_inode+0x190/0x190 [ 1210.870310] mount_nodev+0xfa/0x110 [ 1210.873928] fuse_mount+0x2c/0x40 [ 1210.877377] mount_fs+0xae/0x328 [ 1210.880750] vfs_kern_mount.part.34+0xd4/0x4d0 [ 1210.885327] ? may_umount+0xb0/0xb0 [ 1210.888944] ? _raw_read_unlock+0x22/0x30 [ 1210.893081] ? __get_fs_type+0x97/0xc0 [ 1210.896960] do_mount+0x564/0x3070 [ 1210.900495] ? copy_mount_string+0x40/0x40 [ 1210.904728] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1210.909479] ? retint_kernel+0x10/0x10 [ 1210.913361] ? copy_mount_options+0x1e3/0x380 [ 1210.917851] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1210.923383] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1210.928913] ? copy_mount_options+0x285/0x380 [ 1210.933399] ksys_mount+0x12d/0x140 [ 1210.937019] __x64_sys_mount+0xbe/0x150 [ 1210.940986] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 1210.945993] do_syscall_64+0x1b1/0x800 [ 1210.949871] ? finish_task_switch+0x1ca/0x840 [ 1210.954363] ? syscall_return_slowpath+0x5c0/0x5c0 [ 1210.959285] ? syscall_return_slowpath+0x30f/0x5c0 [ 1210.964210] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 1210.969568] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1210.974402] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1210.979579] RIP: 0033:0x455a09 [ 1210.982759] RSP: 002b:00007f118944d808 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1210.990470] RAX: ffffffffffffffda RBX: 0000000000000016 RCX: 0000000000455a09 [ 1210.997733] RDX: 00000000004c1eb6 RSI: 0000000020000240 RDI: 00000000004de0c5 [ 1211.004992] RBP: 0000000000000000 R08: 00007f118944d820 R09: 0000000000000000 [ 1211.012250] R10: 0000000048000000 R11: 0000000000000246 R12: 0000000000000000 [ 1211.019510] R13: 0000000020000240 R14: 0000000048000000 R15: 0000000000000000 [ 1211.027202] Dumping ftrace buffer: [ 1211.030732] (ftrace buffer empty) [ 1211.034414] Kernel Offset: disabled [ 1211.038016] Rebooting in 86400 seconds..