executing program 2: r0 = socket$inet(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e", 0x24}], 0x1, 0x0, 0x0, 0x3000000}, 0x0) [ 247.282623] ? cgroup_destroy_locked+0x7d0/0x7d0 [ 247.287389] kernfs_iop_mkdir+0x159/0x1e0 [ 247.291546] ? getname_flags+0xd0/0x5a0 [ 247.295530] vfs_mkdir+0x42e/0x6b0 [ 247.299089] do_mkdirat+0x266/0x2f0 [ 247.302728] ? __ia32_sys_mknod+0xb0/0xb0 [ 247.306892] ? do_syscall_64+0x92/0x800 [ 247.310878] __x64_sys_mkdir+0x5c/0x80 [ 247.314774] do_syscall_64+0x1b1/0x800 [ 247.318668] ? finish_task_switch+0x1ca/0x840 [ 247.323256] ? syscall_return_slowpath+0x5c0/0x5c0 [ 247.328191] ? syscall_return_slowpath+0x30f/0x5c0 [ 247.333129] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 247.338678] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 247.343534] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 247.348730] RIP: 0033:0x4559f9 [ 247.351913] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 247.371277] RSP: 002b:00007fa94af69c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 247.379006] RAX: ffffffffffffffda RBX: 00007fa94af6a6d4 RCX: 00000000004559f9 [ 247.386286] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000100 [ 247.393570] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 247.400846] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 247.408121] R13: 00000000004bae54 R14: 00000000004cead0 R15: 0000000000000034 [ 247.415558] cgroup: cgroup_addrm_files: failed to add max, err=-12 [ 247.849858] FAULT_INJECTION: forcing a failure. [ 247.849858] name failslab, interval 1, probability 0, space 0, times 0 [ 247.861204] CPU: 0 PID: 15601 Comm: syz-executor5 Not tainted 4.17.0+ #89 [ 247.868131] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 247.877472] Call Trace: [ 247.880060] dump_stack+0x1b9/0x294 [ 247.883683] ? dump_stack_print_info.cold.2+0x52/0x52 [ 247.888864] should_fail.cold.4+0xa/0x1a [ 247.892929] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 247.898037] ? print_usage_bug+0xc0/0xc0 [ 247.902085] ? graph_lock+0x170/0x170 [ 247.905885] ? find_held_lock+0x36/0x1c0 [ 247.909968] ? check_same_owner+0x320/0x320 [ 247.914296] ? print_usage_bug+0xc0/0xc0 [ 247.918368] ? rcu_note_context_switch+0x710/0x710 [ 247.923292] __should_failslab+0x124/0x180 [ 247.927520] should_failslab+0x9/0x14 [ 247.931315] kmem_cache_alloc_node+0x272/0x780 [ 247.935904] __alloc_skb+0x111/0x780 [ 247.939618] ? skb_scrub_packet+0x580/0x580 [ 247.943933] ? __lock_acquire+0x7f5/0x5140 [ 247.948178] ? debug_check_no_locks_freed+0x310/0x310 [ 247.953356] ? retint_kernel+0x10/0x10 [ 247.957233] ? __lock_acquire+0x7f5/0x5140 [ 247.961461] ? debug_check_no_locks_freed+0x310/0x310 [ 247.966656] alloc_skb_with_frags+0x137/0x760 [ 247.971138] ? debug_check_no_locks_freed+0x310/0x310 [ 247.976321] ? skb_complete_wifi_ack+0x1e0/0x1e0 [ 247.981073] ? rcu_report_qs_rnp+0x790/0x790 [ 247.985487] ? graph_lock+0x170/0x170 [ 247.989291] sock_alloc_send_pskb+0x87a/0xae0 [ 247.993787] ? _raw_spin_unlock+0x22/0x30 [ 247.997930] ? sock_wmalloc+0x1e0/0x1e0 [ 248.001893] ? check_same_owner+0x320/0x320 [ 248.006212] ? rcu_note_context_switch+0x710/0x710 [ 248.011146] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 248.016693] ? __might_sleep+0x95/0x190 [ 248.020672] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 248.026214] ? wait_for_unix_gc+0xce/0x190 [ 248.030451] ? unix_gc+0x1700/0x1700 [ 248.034173] ? find_held_lock+0x36/0x1c0 [ 248.038242] ? security_socket_getpeersec_dgram+0x95/0xc0 [ 248.043780] unix_stream_sendmsg+0x701/0xd20 [ 248.048178] ? unix_stream_sendpage+0xdb0/0xdb0 [ 248.052832] ? rcu_report_qs_rnp+0x790/0x790 [ 248.057228] ? security_socket_sendmsg+0x94/0xc0 [ 248.061964] ? unix_stream_sendpage+0xdb0/0xdb0 [ 248.066615] sock_sendmsg+0xd5/0x120 [ 248.070317] sock_write_iter+0x35a/0x5a0 [ 248.074362] ? sock_sendmsg+0x120/0x120 [ 248.078324] ? ucma_write+0x128/0x410 [ 248.082121] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 248.087638] ? iov_iter_init+0xc9/0x1f0 [ 248.091607] __vfs_write+0x64d/0x960 [ 248.095313] ? kernel_read+0x120/0x120 [ 248.099183] ? setup_sigcontext+0x7d0/0x7d0 [ 248.103499] ? rw_verify_area+0x118/0x360 [ 248.107644] vfs_write+0x1f8/0x560 [ 248.111170] ksys_write+0xf9/0x250 [ 248.114699] ? __ia32_sys_read+0xb0/0xb0 [ 248.118744] ? syscall_slow_exit_work+0x4f0/0x4f0 [ 248.123575] __x64_sys_write+0x73/0xb0 [ 248.127446] do_syscall_64+0x1b1/0x800 [ 248.131313] ? finish_task_switch+0x1ca/0x840 [ 248.135788] ? syscall_return_slowpath+0x5c0/0x5c0 [ 248.140697] ? syscall_return_slowpath+0x30f/0x5c0 [ 248.145613] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 248.150960] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 248.155788] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 248.160955] RIP: 0033:0x4559f9 [ 248.164121] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 248.183296] RSP: 002b:00007f48aed64c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 248.190986] RAX: ffffffffffffffda RBX: 00007f48aed656d4 RCX: 00000000004559f9 [ 248.198239] RDX: 0000000000000010 RSI: 0000000020000640 RDI: 0000000000000013 [ 248.205490] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 248.212739] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 248.219993] R13: 00000000004c2321 R14: 00000000004d3270 R15: 0000000000000000 00:15:19 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x10, 0x3, 0x6) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2832820200a0009000400001d85680c1ba3a20400ff7e280000001100ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 00:15:19 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f760070") sendmsg$nl_xfrm(r0, &(0x7f0000001440)={&(0x7f0000000000)={0x10, 0x4170000}, 0x349, &(0x7f0000001400)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x108, 0x0, 0x0, {{@in=@multicast1=0xe0000001, @in6=@mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x0, 0x0, 0x0, 0xa, 0xfffffff0, 0xf0ffffffffffff}}}, 0xb8}, 0x1}, 0x0) 00:15:19 executing program 2: r0 = socket$inet(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e", 0x24}], 0x1, 0x0, 0x0, 0x6}, 0x0) 00:15:19 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) write$rdma_cm(r1, &(0x7f0000000640)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f00000004c0)}}, 0x10) close(r1) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0x6e) listen(r4, 0x0) connect$unix(r3, &(0x7f0000932000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) tkill(r2, 0x1000000000016) 00:15:19 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[0xfeffffff], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) r2 = socket(0x11, 0x100000803, 0x0) r3 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={"6966623000faffffffffffffff00", 0x12}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'ifb0\x00', 0xa201}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x3, &(0x7f0000000080)={@dev={0xfe, 0x80}, 0x0, 0x0, 0x2}, 0x20) 00:15:19 executing program 4: pipe2(&(0x7f0000989000)={0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) mount(&(0x7f0000434ff8)='./file0\x00', &(0x7f0000abf000)='./file0\x00', &(0x7f0000f4c000)='jfs\x00', 0x1023402, 0x0) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000001200), 0x3000, &(0x7f0000001280)) unlink(&(0x7f00003b3000)='./file0\x00') dup2(r0, r1) 00:15:19 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) write$rdma_cm(r0, &(0x7f0000000640)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f00000004c0)}}, 0x10) close(r0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0x6e) listen(r3, 0x0) connect$unix(r2, &(0x7f0000932000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) tkill(r1, 0x1000000000016) 00:15:19 executing program 6 (fault-call:8 fault-nth:53): r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="295ed277a4200100360070") mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) rmdir(&(0x7f0000000340)='./file0//ile0\x00') r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) fstat(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r2) mkdir(&(0x7f0000000100)='./file0//ile0\x00', 0x0) 00:15:19 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x10, 0x3, 0x6) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa283002020100009000400001d85680c1ba3a20400ff7e280000001100ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 00:15:19 executing program 2: r0 = socket$inet(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e", 0x24}], 0x1, 0x0, 0x0, 0x5801000000000000}, 0x0) 00:15:19 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f760070") sendmsg$nl_xfrm(r0, &(0x7f0000001440)={&(0x7f0000000000)={0x10, 0x4170000}, 0x349, &(0x7f0000001400)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0xfffffff0, 0x0, {{@in=@multicast1=0xe0000001, @in6=@mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x0, 0x0, 0x0, 0xa, 0xfffffff0, 0xf0ffffffffffff}}}, 0xb8}, 0x1}, 0x0) [ 248.449343] FAULT_INJECTION: forcing a failure. [ 248.449343] name failslab, interval 1, probability 0, space 0, times 0 [ 248.460629] CPU: 0 PID: 15668 Comm: syz-executor6 Not tainted 4.17.0+ #89 [ 248.467564] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 248.476923] Call Trace: [ 248.479531] dump_stack+0x1b9/0x294 [ 248.483171] ? dump_stack_print_info.cold.2+0x52/0x52 [ 248.488379] should_fail.cold.4+0xa/0x1a [ 248.492450] ? __kmalloc_track_caller+0x14a/0x760 [ 248.497309] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 248.502420] ? cgroup_mkdir+0x876/0x1150 [ 248.506488] ? kernfs_iop_mkdir+0x159/0x1e0 [ 248.510815] ? vfs_mkdir+0x42e/0x6b0 [ 248.514536] ? do_mkdirat+0x266/0x2f0 [ 248.518345] ? __x64_sys_mkdir+0x5c/0x80 [ 248.522414] ? do_syscall_64+0x1b1/0x800 [ 248.526489] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 248.531859] ? graph_lock+0x170/0x170 [ 248.535666] ? find_held_lock+0x36/0x1c0 [ 248.539744] ? print_usage_bug+0xc0/0xc0 [ 248.543819] ? find_held_lock+0x36/0x1c0 00:15:19 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f760070") sendmsg$nl_xfrm(r0, &(0x7f0000001440)={&(0x7f0000000000)={0x10, 0x4170000}, 0x349, &(0x7f0000001400)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0xf0ffffff00000000, 0x0, {{@in=@multicast1=0xe0000001, @in6=@mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x0, 0x0, 0x0, 0xa, 0xfffffff0, 0xf0ffffffffffff}}}, 0xb8}, 0x1}, 0x0) 00:15:19 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x10, 0x3, 0x6) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0209000400001d85680c1ba3a20400ff7e280000001100ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) [ 248.547891] ? __lock_is_held+0xb5/0x140 [ 248.551968] ? check_same_owner+0x320/0x320 [ 248.556296] ? rcu_note_context_switch+0x710/0x710 [ 248.561228] ? rcu_read_lock_sched_held+0x108/0x120 [ 248.566265] __should_failslab+0x124/0x180 [ 248.570510] should_failslab+0x9/0x14 [ 248.574325] kmem_cache_alloc+0x2af/0x760 [ 248.578491] ? memcpy+0x45/0x50 [ 248.581773] ? kstrdup+0x59/0x70 [ 248.585150] __kernfs_new_node+0xe7/0x580 [ 248.589308] ? kernfs_dop_revalidate+0x3c0/0x3c0 [ 248.594068] ? pointer+0x930/0x930 00:15:19 executing program 2: r0 = socket$inet(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e", 0x24}], 0x1, 0x0, 0x0, 0x58010000}, 0x0) [ 248.597623] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 248.603171] ? snprintf+0xa5/0xd0 [ 248.606634] ? vsprintf+0x40/0x40 [ 248.610093] ? cgroup_kn_set_ugid+0x2cb/0x370 [ 248.614600] kernfs_new_node+0x80/0xf0 [ 248.618501] __kernfs_create_file+0x4d/0x330 [ 248.622918] cgroup_addrm_files+0x437/0xb20 [ 248.627251] ? cgroup_css.part.14+0x1f0/0x1f0 [ 248.631758] ? cpu_cgroup_css_alloc+0x30/0x30 [ 248.636276] ? __lock_is_held+0xb5/0x140 [ 248.640353] ? kasan_check_write+0x14/0x20 [ 248.644589] ? online_css+0x265/0x330 00:15:19 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f760070") sendmsg$nl_xfrm(r0, &(0x7f0000001440)={&(0x7f0000000000)={0x10, 0x4170000}, 0x349, &(0x7f0000001400)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0xa002000000000000, 0x0, {{@in=@multicast1=0xe0000001, @in6=@mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x0, 0x0, 0x0, 0xa, 0xfffffff0, 0xf0ffffffffffff}}}, 0xb8}, 0x1}, 0x0) [ 248.648395] css_populate_dir+0x1a9/0x470 [ 248.652558] cgroup_apply_control_enable+0x449/0xe80 [ 248.657672] ? cgroup_save_control+0x260/0x260 [ 248.662275] ? mutex_unlock+0xd/0x10 [ 248.665993] ? kernfs_setattr+0x39/0x40 [ 248.669968] ? cgroup_kn_set_ugid+0x2cb/0x370 [ 248.674466] ? cgroup_file_name+0x1f0/0x1f0 [ 248.678798] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 248.684363] ? css_populate_dir+0x2a1/0x470 [ 248.688689] cgroup_mkdir+0x876/0x1150 [ 248.692591] ? cgroup_destroy_locked+0x7d0/0x7d0 00:15:19 executing program 2: r0 = socket$inet(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e", 0x24}], 0x1, 0x0, 0x0, 0x34000}, 0x0) [ 248.697352] ? put_itimerspec64+0x310/0x310 [ 248.701683] ? set_nlink+0xaf/0x140 [ 248.705323] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 248.710867] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 248.716407] ? kernfs_get_active+0xb2/0x120 [ 248.720737] ? cgroup_destroy_locked+0x7d0/0x7d0 [ 248.725502] kernfs_iop_mkdir+0x159/0x1e0 [ 248.729652] ? getname_flags+0xd0/0x5a0 [ 248.733629] vfs_mkdir+0x42e/0x6b0 [ 248.737176] do_mkdirat+0x266/0x2f0 [ 248.740835] ? __ia32_sys_mknod+0xb0/0xb0 [ 248.744993] ? do_syscall_64+0x92/0x800 [ 248.748976] __x64_sys_mkdir+0x5c/0x80 [ 248.752871] do_syscall_64+0x1b1/0x800 [ 248.756768] ? syscall_return_slowpath+0x5c0/0x5c0 [ 248.761713] ? syscall_return_slowpath+0x30f/0x5c0 [ 248.766660] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 248.772049] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 248.776915] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 248.782116] RIP: 0033:0x4559f9 [ 248.785304] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 248.804684] RSP: 002b:00007fa94af69c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 248.812410] RAX: ffffffffffffffda RBX: 00007fa94af6a6d4 RCX: 00000000004559f9 [ 248.819684] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000100 [ 248.826966] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 248.834234] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 248.841501] R13: 00000000004bae54 R14: 00000000004cead0 R15: 0000000000000035 [ 248.849061] cgroup: cgroup_addrm_files: failed to add max, err=-12 00:15:20 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f760070") sendmsg$nl_xfrm(r0, &(0x7f0000001440)={&(0x7f0000000000)={0x10, 0x4170000}, 0x349, &(0x7f0000001400)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x9effffff00000000, 0x0, {{@in=@multicast1=0xe0000001, @in6=@mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x0, 0x0, 0x0, 0xa, 0xfffffff0, 0xf0ffffffffffff}}}, 0xb8}, 0x1}, 0x0) 00:15:20 executing program 2: r0 = socket$inet(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e", 0x24}], 0x1, 0x0, 0x0, 0xf00000000000000}, 0x0) 00:15:20 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[0xfeffffff], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) r2 = socket(0x11, 0x100000803, 0x0) r3 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={"6966623000faffffffffffffff00", 0x12}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'ifb0\x00', 0xa201}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x3a, &(0x7f0000000080)={@dev={0xfe, 0x80}, 0x0, 0x0, 0x2}, 0x20) 00:15:20 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x10, 0x3, 0x6) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0309000400001d85680c1ba3a20400ff7e280000001100ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 00:15:20 executing program 6 (fault-call:8 fault-nth:54): r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="295ed277a4200100360070") mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) rmdir(&(0x7f0000000340)='./file0//ile0\x00') r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) fstat(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r2) mkdir(&(0x7f0000000100)='./file0//ile0\x00', 0x0) 00:15:20 executing program 4: pipe2(&(0x7f0000989000)={0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) mount(&(0x7f0000434ff8)='./file0\x00', &(0x7f0000abf000)='./file0\x00', &(0x7f0000f4c000)='jfs\x00', 0x1023402, 0x0) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000001200), 0x3000, &(0x7f0000001280)) unlink(&(0x7f00003b3000)='./file0\x00') dup2(r0, r1) 00:15:20 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) write$rdma_cm(r0, &(0x7f0000000640)=@get_event={0xf, 0x8, 0xfa00, {&(0x7f00000004c0)}}, 0x10) close(r0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0x6e) listen(r3, 0x0) connect$unix(r2, &(0x7f0000932000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) tkill(r1, 0x1000000000016) 00:15:20 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) write$rdma_cm(r1, &(0x7f0000000640)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f00000004c0)}}, 0x10) close(r1) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0x6e) listen(r4, 0x0) connect$unix(r3, &(0x7f0000932000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) tkill(r2, 0x1000000000016) [ 249.435024] FAULT_INJECTION: forcing a failure. [ 249.435024] name failslab, interval 1, probability 0, space 0, times 0 [ 249.446651] CPU: 0 PID: 15725 Comm: syz-executor6 Not tainted 4.17.0+ #89 [ 249.453592] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 249.462953] Call Trace: [ 249.465578] dump_stack+0x1b9/0x294 [ 249.469226] ? dump_stack_print_info.cold.2+0x52/0x52 [ 249.474424] ? mutex_trylock+0x2a0/0x2a0 [ 249.478491] ? wait_for_completion+0x870/0x870 [ 249.483086] should_fail.cold.4+0xa/0x1a [ 249.487152] ? kernfs_iop_permission+0xb0/0xb0 [ 249.491741] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 249.496856] ? graph_lock+0x170/0x170 [ 249.500670] ? graph_lock+0x170/0x170 [ 249.504486] ? find_held_lock+0x36/0x1c0 [ 249.508564] ? __lock_is_held+0xb5/0x140 [ 249.512648] ? check_same_owner+0x320/0x320 [ 249.516973] ? cgroup_addrm_files+0x790/0xb20 [ 249.521479] ? rcu_note_context_switch+0x710/0x710 [ 249.526425] __should_failslab+0x124/0x180 [ 249.530670] should_failslab+0x9/0x14 [ 249.534474] kmem_cache_alloc_trace+0x2cb/0x780 [ 249.539161] blkcg_css_alloc+0xc8/0x710 [ 249.543148] ? blkcg_deactivate_policy+0x490/0x490 [ 249.548088] ? __lock_is_held+0xb5/0x140 [ 249.552170] cgroup_apply_control_enable+0x544/0xe80 [ 249.557290] ? cgroup_save_control+0x260/0x260 [ 249.561884] ? mutex_unlock+0xd/0x10 [ 249.565604] ? kernfs_setattr+0x39/0x40 [ 249.569590] ? cgroup_kn_set_ugid+0x2cb/0x370 [ 249.574123] ? cgroup_file_name+0x1f0/0x1f0 [ 249.578463] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 249.584009] ? css_populate_dir+0x2a1/0x470 [ 249.588348] cgroup_mkdir+0x876/0x1150 [ 249.592256] ? cgroup_destroy_locked+0x7d0/0x7d0 [ 249.597021] ? put_itimerspec64+0x310/0x310 [ 249.601355] ? set_nlink+0xaf/0x140 [ 249.604990] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 249.610540] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 249.616086] ? kernfs_get_active+0xb2/0x120 [ 249.620415] ? cgroup_destroy_locked+0x7d0/0x7d0 [ 249.625176] kernfs_iop_mkdir+0x159/0x1e0 [ 249.629327] ? getname_flags+0xd0/0x5a0 00:15:20 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x10, 0x3, 0x6) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0a09000400001d85680c1ba3a20400ff7e280000001100ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 00:15:20 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f760070") sendmsg$nl_xfrm(r0, &(0x7f0000001440)={&(0x7f0000000000)={0x10, 0x4170000}, 0x349, &(0x7f0000001400)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0xfffff000, 0x0, {{@in=@multicast1=0xe0000001, @in6=@mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x0, 0x0, 0x0, 0xa, 0xfffffff0, 0xf0ffffffffffff}}}, 0xb8}, 0x1}, 0x0) 00:15:20 executing program 2: r0 = socket$inet(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e", 0x24}], 0x1, 0x0, 0x0, 0x9}, 0x0) 00:15:20 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) write$rdma_cm(r0, &(0x7f0000000640)=@get_event={0x16, 0x8, 0xfa00, {&(0x7f00000004c0)}}, 0x10) close(r0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0x6e) listen(r3, 0x0) connect$unix(r2, &(0x7f0000932000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) tkill(r1, 0x1000000000016) 00:15:20 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f760070") sendmsg$nl_xfrm(r0, &(0x7f0000001440)={&(0x7f0000000000)={0x10, 0x4170000}, 0x349, &(0x7f0000001400)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x3, 0x0, {{@in=@multicast1=0xe0000001, @in6=@mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x0, 0x0, 0x0, 0xa, 0xfffffff0, 0xf0ffffffffffff}}}, 0xb8}, 0x1}, 0x0) [ 249.633310] vfs_mkdir+0x42e/0x6b0 [ 249.636862] do_mkdirat+0x266/0x2f0 [ 249.640489] ? __ia32_sys_mknod+0xb0/0xb0 [ 249.644644] ? do_syscall_64+0x92/0x800 [ 249.648653] __x64_sys_mkdir+0x5c/0x80 [ 249.652547] do_syscall_64+0x1b1/0x800 [ 249.656439] ? finish_task_switch+0x1ca/0x840 [ 249.660942] ? syscall_return_slowpath+0x5c0/0x5c0 [ 249.665882] ? syscall_return_slowpath+0x30f/0x5c0 [ 249.670818] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 249.676190] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 249.681045] entry_SYSCALL_64_after_hwframe+0x49/0xbe 00:15:20 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) write$rdma_cm(r0, &(0x7f0000000640)=@get_event={0xc, 0x20000650, 0xfa00, {&(0x7f00000004c0)}}, 0x10) close(r0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0x6e) listen(r3, 0x0) connect$unix(r2, &(0x7f0000932000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) tkill(r1, 0x1000000000016) 00:15:20 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f760070") sendmsg$nl_xfrm(r0, &(0x7f0000001440)={&(0x7f0000000000)={0x10, 0x4170000}, 0x349, &(0x7f0000001400)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0xf00000000000000, 0x0, {{@in=@multicast1=0xe0000001, @in6=@mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x0, 0x0, 0x0, 0xa, 0xfffffff0, 0xf0ffffffffffff}}}, 0xb8}, 0x1}, 0x0) [ 249.686236] RIP: 0033:0x4559f9 [ 249.689419] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 249.708810] RSP: 002b:00007fa94af69c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 249.716540] RAX: ffffffffffffffda RBX: 00007fa94af6a6d4 RCX: 00000000004559f9 [ 249.723814] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000100 00:15:20 executing program 2: r0 = socket$inet(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e", 0x24}], 0x1, 0x0, 0x0, 0x80ffffff00000000}, 0x0) 00:15:20 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x10, 0x3, 0x6) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0509000400001d85680c1ba3a20400ff7e280000001100ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) [ 249.731084] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 249.738359] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 249.745631] R13: 00000000004bae54 R14: 00000000004cead0 R15: 0000000000000036 00:15:20 executing program 2: r0 = socket$inet(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e", 0x24}], 0x1, 0x0, 0x0, 0xfcffffff00000000}, 0x0) 00:15:20 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[0xfeffffff], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) r2 = socket(0x11, 0x100000803, 0x0) r3 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={"6966623000faffffffffffffff00", 0x12}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'ifb0\x00', 0xa201}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x19, &(0x7f0000000080)={@dev={0xfe, 0x80}, 0x0, 0x0, 0x2}, 0x20) 00:15:20 executing program 6 (fault-call:8 fault-nth:55): r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="295ed277a4200100360070") mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) rmdir(&(0x7f0000000340)='./file0//ile0\x00') r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) fstat(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r2) mkdir(&(0x7f0000000100)='./file0//ile0\x00', 0x0) 00:15:20 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) write$rdma_cm(r0, &(0x7f0000000640)=@get_event={0xc, 0xf, 0xfa00, {&(0x7f00000004c0)}}, 0x10) close(r0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0x6e) listen(r3, 0x0) connect$unix(r2, &(0x7f0000932000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) tkill(r1, 0x1000000000016) [ 250.103861] FAULT_INJECTION: forcing a failure. [ 250.103861] name failslab, interval 1, probability 0, space 0, times 0 [ 250.115319] CPU: 0 PID: 15792 Comm: syz-executor6 Not tainted 4.17.0+ #89 [ 250.122255] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 250.131608] Call Trace: [ 250.134206] dump_stack+0x1b9/0x294 [ 250.137853] ? dump_stack_print_info.cold.2+0x52/0x52 [ 250.143060] ? mutex_trylock+0x2a0/0x2a0 [ 250.147120] ? wait_for_completion+0x870/0x870 [ 250.151714] should_fail.cold.4+0xa/0x1a [ 250.155772] ? kernfs_iop_permission+0xb0/0xb0 [ 250.160357] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 250.165461] ? graph_lock+0x170/0x170 [ 250.169263] ? graph_lock+0x170/0x170 [ 250.173074] ? find_held_lock+0x36/0x1c0 [ 250.177147] ? __lock_is_held+0xb5/0x140 [ 250.181220] ? check_same_owner+0x320/0x320 [ 250.185545] ? cgroup_addrm_files+0x790/0xb20 [ 250.190049] ? rcu_note_context_switch+0x710/0x710 [ 250.194978] __should_failslab+0x124/0x180 [ 250.199204] should_failslab+0x9/0x14 [ 250.202998] kmem_cache_alloc_trace+0x2cb/0x780 [ 250.207663] blkcg_css_alloc+0xc8/0x710 [ 250.211635] ? blkcg_deactivate_policy+0x490/0x490 [ 250.216583] ? __lock_is_held+0xb5/0x140 [ 250.220663] cgroup_apply_control_enable+0x544/0xe80 [ 250.225772] ? cgroup_save_control+0x260/0x260 [ 250.230354] ? mutex_unlock+0xd/0x10 [ 250.234071] ? kernfs_setattr+0x39/0x40 [ 250.238051] ? cgroup_kn_set_ugid+0x2cb/0x370 [ 250.242553] ? cgroup_file_name+0x1f0/0x1f0 [ 250.246877] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 250.252398] ? css_populate_dir+0x2a1/0x470 [ 250.256705] cgroup_mkdir+0x876/0x1150 [ 250.260580] ? cgroup_destroy_locked+0x7d0/0x7d0 [ 250.265319] ? put_itimerspec64+0x310/0x310 [ 250.269625] ? set_nlink+0xaf/0x140 [ 250.273236] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 250.278755] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 250.284273] ? kernfs_get_active+0xb2/0x120 [ 250.288575] ? cgroup_destroy_locked+0x7d0/0x7d0 [ 250.293320] kernfs_iop_mkdir+0x159/0x1e0 [ 250.297450] ? getname_flags+0xd0/0x5a0 [ 250.301404] vfs_mkdir+0x42e/0x6b0 [ 250.304930] do_mkdirat+0x266/0x2f0 [ 250.308555] ? __ia32_sys_mknod+0xb0/0xb0 [ 250.312688] ? do_syscall_64+0x92/0x800 [ 250.316647] __x64_sys_mkdir+0x5c/0x80 [ 250.320527] do_syscall_64+0x1b1/0x800 [ 250.324405] ? finish_task_switch+0x1ca/0x840 [ 250.328886] ? syscall_return_slowpath+0x5c0/0x5c0 [ 250.333797] ? syscall_return_slowpath+0x30f/0x5c0 [ 250.338727] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 250.344091] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 250.348925] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 250.354103] RIP: 0033:0x4559f9 [ 250.357279] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 250.376499] RSP: 002b:00007fa94af69c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 250.384761] RAX: ffffffffffffffda RBX: 00007fa94af6a6d4 RCX: 00000000004559f9 [ 250.392023] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000100 [ 250.399286] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 250.406564] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 250.413823] R13: 00000000004bae54 R14: 00000000004cead0 R15: 0000000000000037 00:15:21 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f760070") sendmsg$nl_xfrm(r0, &(0x7f0000001440)={&(0x7f0000000000)={0x10, 0x4170000}, 0x349, &(0x7f0000001400)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x2a0, 0x0, {{@in=@multicast1=0xe0000001, @in6=@mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x0, 0x0, 0x0, 0xa, 0xfffffff0, 0xf0ffffffffffff}}}, 0xb8}, 0x1}, 0x0) 00:15:21 executing program 2: r0 = socket$inet(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e", 0x24}], 0x1, 0x0, 0x0, 0x5801}, 0x0) 00:15:21 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x10, 0x3, 0x6) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0909000400001d85680c1ba3a20400ff7e280000001100ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 00:15:21 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) write$rdma_cm(r0, &(0x7f0000000640)=@get_event={0xc, 0x20000648, 0xfa00, {&(0x7f00000004c0)}}, 0x10) close(r0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0x6e) listen(r3, 0x0) connect$unix(r2, &(0x7f0000932000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) tkill(r1, 0x1000000000016) 00:15:21 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) write$rdma_cm(r1, &(0x7f0000000640)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f00000004c0)}}, 0x10) close(r1) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0x6e) listen(r4, 0x0) connect$unix(r3, &(0x7f0000932000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) tkill(r2, 0x1000000000016) 00:15:21 executing program 6 (fault-call:8 fault-nth:56): r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="295ed277a4200100360070") mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) rmdir(&(0x7f0000000340)='./file0//ile0\x00') r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) fstat(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r2) mkdir(&(0x7f0000000100)='./file0//ile0\x00', 0x0) 00:15:21 executing program 4: pipe2(&(0x7f0000989000)={0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) mount(&(0x7f0000434ff8)='./file0\x00', &(0x7f0000abf000)='./file0\x00', &(0x7f0000f4c000)='jfs\x00', 0x1023402, 0x0) syz_mount_image$vfat(&(0x7f0000000040)="76666174fd", &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000001200), 0x3000, &(0x7f0000001280)) unlink(&(0x7f00003b3000)='./file0\x00') dup2(r0, r1) 00:15:21 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[0xfeffffff], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) r2 = socket(0x11, 0x100000803, 0x0) r3 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={"6966623000faffffffffffffff00", 0x12}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'ifb0\x00', 0xa201}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x31, &(0x7f0000000080)={@dev={0xfe, 0x80}, 0x0, 0x0, 0x2}, 0x20) [ 250.745798] FAULT_INJECTION: forcing a failure. [ 250.745798] name failslab, interval 1, probability 0, space 0, times 0 [ 250.757118] CPU: 0 PID: 15825 Comm: syz-executor6 Not tainted 4.17.0+ #89 [ 250.764052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 250.773401] Call Trace: [ 250.775993] dump_stack+0x1b9/0x294 [ 250.779634] ? dump_stack_print_info.cold.2+0x52/0x52 [ 250.784839] ? __save_stack_trace+0x7e/0xd0 [ 250.789178] should_fail.cold.4+0xa/0x1a [ 250.793255] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 250.798363] ? save_stack+0x43/0xd0 [ 250.801992] ? kasan_kmalloc+0xc4/0xe0 [ 250.805880] ? kmem_cache_alloc_trace+0x152/0x780 [ 250.810723] ? cfq_cpd_alloc+0x5f/0xa0 [ 250.814608] ? blkcg_css_alloc+0x165/0x710 [ 250.818848] ? cgroup_apply_control_enable+0x544/0xe80 [ 250.824137] ? graph_lock+0x170/0x170 [ 250.827942] ? __x64_sys_mkdir+0x5c/0x80 [ 250.832014] ? do_syscall_64+0x1b1/0x800 [ 250.836087] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 250.841456] ? do_syscall_64+0x1b1/0x800 [ 250.845579] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 250.850950] ? find_held_lock+0x36/0x1c0 [ 250.855017] ? __lock_is_held+0xb5/0x140 [ 250.859094] ? check_same_owner+0x320/0x320 [ 250.863427] ? rcu_note_context_switch+0x710/0x710 [ 250.868377] __should_failslab+0x124/0x180 [ 250.872623] should_failslab+0x9/0x14 [ 250.876430] kmem_cache_alloc_trace+0x2cb/0x780 [ 250.881110] ? rcu_read_lock_sched_held+0x108/0x120 [ 250.886129] ? kmem_cache_alloc_trace+0x616/0x780 [ 250.890987] bfq_cpd_alloc+0x5f/0xa0 [ 250.894709] blkcg_css_alloc+0x165/0x710 [ 250.898782] ? bfq_pd_alloc+0xf0/0xf0 [ 250.902594] ? blkcg_deactivate_policy+0x490/0x490 [ 250.907535] ? __lock_is_held+0xb5/0x140 [ 250.911618] cgroup_apply_control_enable+0x544/0xe80 [ 250.916737] ? cgroup_save_control+0x260/0x260 [ 250.920543] netlink: 16 bytes leftover after parsing attributes in process `syz-executor7'. [ 250.921326] ? mutex_unlock+0xd/0x10 [ 250.921358] ? kernfs_setattr+0x39/0x40 [ 250.921379] ? cgroup_kn_set_ugid+0x2cb/0x370 [ 250.942001] ? cgroup_file_name+0x1f0/0x1f0 [ 250.946335] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 250.951876] ? css_populate_dir+0x2a1/0x470 [ 250.956206] cgroup_mkdir+0x876/0x1150 [ 250.960108] ? cgroup_destroy_locked+0x7d0/0x7d0 [ 250.964868] ? put_itimerspec64+0x310/0x310 [ 250.969195] ? set_nlink+0xaf/0x140 [ 250.972827] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 250.978378] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 250.983940] ? kernfs_get_active+0xb2/0x120 [ 250.988266] ? cgroup_destroy_locked+0x7d0/0x7d0 [ 250.993031] kernfs_iop_mkdir+0x159/0x1e0 [ 250.997182] ? getname_flags+0xd0/0x5a0 [ 251.001163] vfs_mkdir+0x42e/0x6b0 [ 251.004708] do_mkdirat+0x266/0x2f0 [ 251.008343] ? __ia32_sys_mknod+0xb0/0xb0 [ 251.012502] ? syscall_slow_exit_work+0x4f0/0x4f0 [ 251.017349] ? do_syscall_64+0x92/0x800 [ 251.021326] __x64_sys_mkdir+0x5c/0x80 [ 251.025214] do_syscall_64+0x1b1/0x800 [ 251.029106] ? finish_task_switch+0x1ca/0x840 [ 251.033603] ? syscall_return_slowpath+0x5c0/0x5c0 [ 251.038526] ? syscall_return_slowpath+0x30f/0x5c0 [ 251.043460] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 251.048834] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 251.053688] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 251.058876] RIP: 0033:0x4559f9 [ 251.062064] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 251.081414] RSP: 002b:00007fa94af69c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 251.089134] RAX: ffffffffffffffda RBX: 00007fa94af6a6d4 RCX: 00000000004559f9 00:15:21 executing program 2: r0 = socket$inet(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e", 0x24}], 0x1, 0x0, 0x0, 0x1000000}, 0x0) 00:15:21 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x10, 0x3, 0x6) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0003000400001d85680c1ba3a20400ff7e280000001100ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 00:15:21 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f760070") sendmsg$nl_xfrm(r0, &(0x7f0000001440)={&(0x7f0000000000)={0x10, 0x4170000}, 0x349, &(0x7f0000001400)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x4, 0x0, {{@in=@multicast1=0xe0000001, @in6=@mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x0, 0x0, 0x0, 0xa, 0xfffffff0, 0xf0ffffffffffff}}}, 0xb8}, 0x1}, 0x0) 00:15:21 executing program 2: r0 = socket$inet(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e", 0x24}], 0x1, 0x0, 0x0, 0x10000000}, 0x0) 00:15:21 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f760070") sendmsg$nl_xfrm(r0, &(0x7f0000001440)={&(0x7f0000000000)={0x10, 0x4170000}, 0x349, &(0x7f0000001400)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x300000000000000, 0x0, {{@in=@multicast1=0xe0000001, @in6=@mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x0, 0x0, 0x0, 0xa, 0xfffffff0, 0xf0ffffffffffff}}}, 0xb8}, 0x1}, 0x0) 00:15:21 executing program 2: r0 = socket$inet(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e", 0x24}], 0x1, 0x0, 0x0, 0x900}, 0x0) [ 251.096406] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000100 [ 251.103676] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 251.110950] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 251.118220] R13: 00000000004bae54 R14: 00000000004cead0 R15: 0000000000000038 00:15:22 executing program 6 (fault-call:8 fault-nth:57): r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="295ed277a4200100360070") mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) rmdir(&(0x7f0000000340)='./file0//ile0\x00') r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) fstat(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r2) mkdir(&(0x7f0000000100)='./file0//ile0\x00', 0x0) 00:15:22 executing program 2: r0 = socket$inet(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e", 0x24}], 0x1, 0x0, 0x0, 0x500}, 0x0) 00:15:22 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f760070") sendmsg$nl_xfrm(r0, &(0x7f0000001440)={&(0x7f0000000000)={0x10, 0x4170000}, 0x349, &(0x7f0000001400)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0xf0ffffff, 0x0, {{@in=@multicast1=0xe0000001, @in6=@mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x0, 0x0, 0x0, 0xa, 0xfffffff0, 0xf0ffffffffffff}}}, 0xb8}, 0x1}, 0x0) 00:15:22 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[0xfeffffff], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) r2 = socket(0x11, 0x100000803, 0x0) r3 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={"6966623000faffffffffffffff00", 0x12}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'ifb0\x00', 0xa201}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x16, &(0x7f0000000080)={@dev={0xfe, 0x80}, 0x0, 0x0, 0x2}, 0x20) 00:15:22 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x10, 0x3, 0x6) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a1009000400001d85680c1ba3a20400ff7e280000001100ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 00:15:22 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) write$rdma_cm(r0, &(0x7f0000000640)=@get_event={0xc, 0x8, 0xfa0e, {&(0x7f00000004c0)}}, 0x10) close(r0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0x6e) listen(r3, 0x0) connect$unix(r2, &(0x7f0000932000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) tkill(r1, 0x1000000000016) 00:15:22 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) write$rdma_cm(r1, &(0x7f0000000640)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f00000004c0)}}, 0x10) close(r1) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0x6e) listen(r4, 0x0) connect$unix(r3, &(0x7f0000932000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) tkill(r2, 0x1000000000016) 00:15:22 executing program 4: pipe2(&(0x7f0000989000)={0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) mount(&(0x7f0000434ff8)='./file0\x00', &(0x7f0000abf000)='./file0\x00', &(0x7f0000f4c000)='jfs\x00', 0x1023402, 0x0) syz_mount_image$vfat(&(0x7f0000000040)="7666617402", &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000001200), 0x3000, &(0x7f0000001280)) unlink(&(0x7f00003b3000)='./file0\x00') dup2(r0, r1) [ 251.826857] FAULT_INJECTION: forcing a failure. [ 251.826857] name failslab, interval 1, probability 0, space 0, times 0 [ 251.838208] CPU: 1 PID: 15898 Comm: syz-executor6 Not tainted 4.17.0+ #89 [ 251.845146] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 251.854506] Call Trace: [ 251.857114] dump_stack+0x1b9/0x294 [ 251.860767] ? dump_stack_print_info.cold.2+0x52/0x52 [ 251.865974] ? rcu_note_context_switch+0x710/0x710 [ 251.871451] should_fail.cold.4+0xa/0x1a [ 251.875536] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 251.880656] ? graph_lock+0x170/0x170 [ 251.884482] ? graph_lock+0x170/0x170 [ 251.888299] ? graph_lock+0x170/0x170 [ 251.892137] ? mutex_trylock+0x2a0/0x2a0 [ 251.896224] ? find_held_lock+0x36/0x1c0 [ 251.900301] ? __lock_is_held+0xb5/0x140 [ 251.904384] ? check_same_owner+0x320/0x320 [ 251.908721] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 251.913851] ? rcu_note_context_switch+0x710/0x710 [ 251.918799] __should_failslab+0x124/0x180 [ 251.923052] should_failslab+0x9/0x14 00:15:22 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x10, 0x3, 0x6) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0f09000400001d85680c1ba3a20400ff7e280000001100ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 00:15:22 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f760070") sendmsg$nl_xfrm(r0, &(0x7f0000001440)={&(0x7f0000000000)={0x10, 0x4170000}, 0x349, &(0x7f0000001400)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x3000000, 0x0, {{@in=@multicast1=0xe0000001, @in6=@mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x0, 0x0, 0x0, 0xa, 0xfffffff0, 0xf0ffffffffffff}}}, 0xb8}, 0x1}, 0x0) 00:15:22 executing program 2: r0 = socket$inet(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e", 0x24}], 0x1, 0x0, 0x0, 0x8}, 0x0) 00:15:22 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f760070") sendmsg$nl_xfrm(r0, &(0x7f0000001440)={&(0x7f0000000000)={0x10, 0x4170000}, 0x349, &(0x7f0000001400)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0xf00, 0x0, {{@in=@multicast1=0xe0000001, @in6=@mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x0, 0x0, 0x0, 0xa, 0xfffffff0, 0xf0ffffffffffff}}}, 0xb8}, 0x1}, 0x0) [ 251.926862] __kmalloc_track_caller+0x2c4/0x760 [ 251.931548] ? string+0x21d/0x2c0 [ 251.935014] ? kstrdup_const+0x66/0x80 [ 251.938922] kstrdup+0x39/0x70 [ 251.942125] kstrdup_const+0x66/0x80 [ 251.945854] __kernfs_new_node+0xa8/0x580 [ 251.950014] ? kernfs_dop_revalidate+0x3c0/0x3c0 [ 251.954780] ? pointer+0x930/0x930 [ 251.958331] ? graph_lock+0x170/0x170 [ 251.962145] ? snprintf+0xa5/0xd0 [ 251.965691] ? vsprintf+0x40/0x40 [ 251.969154] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 00:15:22 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x10, 0x3, 0x6) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0809000400001d85680c1ba3a20400ff7e280000001100ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) [ 251.974708] kernfs_new_node+0x80/0xf0 [ 251.978613] __kernfs_create_file+0x4d/0x330 [ 251.983041] cgroup_addrm_files+0x437/0xb20 [ 251.987378] ? cgroup_css.part.14+0x1f0/0x1f0 [ 251.991884] ? find_held_lock+0x36/0x1c0 [ 251.995977] ? __lock_is_held+0xb5/0x140 [ 252.000053] ? kasan_check_write+0x14/0x20 [ 252.004296] ? online_css+0x265/0x330 [ 252.008107] css_populate_dir+0x1a9/0x470 [ 252.012278] cgroup_apply_control_enable+0x449/0xe80 [ 252.017398] ? cgroup_save_control+0x260/0x260 [ 252.021992] ? mutex_unlock+0xd/0x10 [ 252.025709] ? kernfs_setattr+0x39/0x40 [ 252.029689] ? cgroup_kn_set_ugid+0x2cb/0x370 [ 252.034191] ? cgroup_file_name+0x1f0/0x1f0 [ 252.038522] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 252.044064] ? css_populate_dir+0x2a1/0x470 [ 252.048391] cgroup_mkdir+0x876/0x1150 [ 252.052305] ? cgroup_destroy_locked+0x7d0/0x7d0 [ 252.057067] ? put_itimerspec64+0x310/0x310 [ 252.061396] ? set_nlink+0xaf/0x140 [ 252.065027] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 252.070570] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 252.076116] ? kernfs_get_active+0xb2/0x120 [ 252.080439] ? cgroup_destroy_locked+0x7d0/0x7d0 [ 252.085191] kernfs_iop_mkdir+0x159/0x1e0 [ 252.089322] ? getname_flags+0xd0/0x5a0 [ 252.093289] vfs_mkdir+0x42e/0x6b0 [ 252.096833] do_mkdirat+0x266/0x2f0 [ 252.100450] ? __ia32_sys_mknod+0xb0/0xb0 [ 252.104593] ? do_syscall_64+0x92/0x800 [ 252.108561] __x64_sys_mkdir+0x5c/0x80 [ 252.112435] do_syscall_64+0x1b1/0x800 [ 252.116312] ? finish_task_switch+0x1ca/0x840 [ 252.120803] ? syscall_return_slowpath+0x5c0/0x5c0 [ 252.125714] ? syscall_return_slowpath+0x30f/0x5c0 [ 252.130640] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 252.135995] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 252.140843] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 252.146030] RIP: 0033:0x4559f9 [ 252.149212] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 252.168530] RSP: 002b:00007fa94af69c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 252.176232] RAX: ffffffffffffffda RBX: 00007fa94af6a6d4 RCX: 00000000004559f9 [ 252.183585] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000100 [ 252.190852] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 252.198121] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 252.205380] R13: 00000000004bae54 R14: 00000000004cead0 R15: 0000000000000039 [ 252.212830] cgroup: cgroup_addrm_files: failed to add stat, err=-12 00:15:23 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f760070") sendmsg$nl_xfrm(r0, &(0x7f0000001440)={&(0x7f0000000000)={0x10, 0x4170000}, 0x349, &(0x7f0000001400)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0xa002, 0x0, {{@in=@multicast1=0xe0000001, @in6=@mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x0, 0x0, 0x0, 0xa, 0xfffffff0, 0xf0ffffffffffff}}}, 0xb8}, 0x1}, 0x0) 00:15:23 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x10, 0x3, 0x6) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0b09000400001d85680c1ba3a20400ff7e280000001100ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 00:15:23 executing program 2: r0 = socket$inet(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e", 0x24}], 0x1, 0x0, 0x0, 0xfffffffffffff000}, 0x0) 00:15:23 executing program 6 (fault-call:8 fault-nth:58): r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="295ed277a4200100360070") mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) rmdir(&(0x7f0000000340)='./file0//ile0\x00') r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) fstat(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r2) mkdir(&(0x7f0000000100)='./file0//ile0\x00', 0x0) 00:15:23 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[0xfeffffff], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) r2 = socket(0x11, 0x100000803, 0x0) r3 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={"6966623000faffffffffffffff00", 0x12}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'ifb0\x00', 0xa201}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x23, &(0x7f0000000080)={@dev={0xfe, 0x80}, 0x0, 0x0, 0x2}, 0x20) 00:15:23 executing program 4: pipe2(&(0x7f0000989000)={0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) mount(&(0x7f0000434ff8)='./file0\x00', &(0x7f0000abf000)='./file0\x00', &(0x7f0000f4c000)='jfs\x00', 0x1023402, 0x0) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000001200), 0x3000, &(0x7f0000001280)) unlink(&(0x7f00003b3000)='./file0\x00') dup2(r0, r1) 00:15:23 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) write$rdma_cm(r1, &(0x7f0000000640)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f00000004c0)}}, 0x10) close(r1) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0x6e) listen(r4, 0x0) connect$unix(r3, &(0x7f0000932000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) tkill(r2, 0x1000000000016) 00:15:23 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) write$rdma_cm(r0, &(0x7f0000000640)=@get_event={0xc, 0x8, 0x143, {&(0x7f00000004c0)}}, 0x10) close(r0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0x6e) listen(r3, 0x0) connect$unix(r2, &(0x7f0000932000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) tkill(r1, 0x1000000000016) [ 252.836786] FAULT_INJECTION: forcing a failure. [ 252.836786] name failslab, interval 1, probability 0, space 0, times 0 [ 252.848104] CPU: 0 PID: 15955 Comm: syz-executor6 Not tainted 4.17.0+ #89 [ 252.855128] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 252.864485] Call Trace: [ 252.867090] dump_stack+0x1b9/0x294 [ 252.870736] ? dump_stack_print_info.cold.2+0x52/0x52 [ 252.875946] should_fail.cold.4+0xa/0x1a [ 252.880022] ? __kmalloc_track_caller+0x14a/0x760 [ 252.884883] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 252.889998] ? cgroup_mkdir+0x876/0x1150 [ 252.894064] ? kernfs_iop_mkdir+0x159/0x1e0 [ 252.898392] ? vfs_mkdir+0x42e/0x6b0 [ 252.902113] ? do_mkdirat+0x266/0x2f0 [ 252.905920] ? __x64_sys_mkdir+0x5c/0x80 [ 252.909990] ? do_syscall_64+0x1b1/0x800 [ 252.914063] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 252.919430] ? graph_lock+0x170/0x170 [ 252.923228] ? find_held_lock+0x36/0x1c0 [ 252.927304] ? print_usage_bug+0xc0/0xc0 [ 252.931379] ? find_held_lock+0x36/0x1c0 [ 252.935454] ? __lock_is_held+0xb5/0x140 [ 252.939531] ? check_same_owner+0x320/0x320 [ 252.943862] ? rcu_note_context_switch+0x710/0x710 [ 252.948799] ? rcu_read_lock_sched_held+0x108/0x120 [ 252.953825] __should_failslab+0x124/0x180 [ 252.958084] should_failslab+0x9/0x14 [ 252.961886] kmem_cache_alloc+0x2af/0x760 [ 252.966038] ? memcpy+0x45/0x50 [ 252.969324] ? kstrdup+0x59/0x70 [ 252.972698] __kernfs_new_node+0xe7/0x580 [ 252.976852] ? kernfs_dop_revalidate+0x3c0/0x3c0 [ 252.981617] ? pointer+0x930/0x930 [ 252.985273] ? graph_lock+0x170/0x170 [ 252.989093] ? snprintf+0xa5/0xd0 [ 252.992555] ? vsprintf+0x40/0x40 [ 252.996015] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 253.001598] kernfs_new_node+0x80/0xf0 [ 253.005502] __kernfs_create_file+0x4d/0x330 [ 253.009919] cgroup_addrm_files+0x437/0xb20 [ 253.014252] ? cgroup_css.part.14+0x1f0/0x1f0 [ 253.018750] ? find_held_lock+0x36/0x1c0 [ 253.022825] ? __lock_is_held+0xb5/0x140 [ 253.026897] ? kasan_check_write+0x14/0x20 [ 253.031144] ? online_css+0x265/0x330 [ 253.035045] css_populate_dir+0x1a9/0x470 [ 253.039200] cgroup_apply_control_enable+0x449/0xe80 [ 253.044320] ? cgroup_save_control+0x260/0x260 [ 253.048906] ? mutex_unlock+0xd/0x10 [ 253.052620] ? kernfs_setattr+0x39/0x40 [ 253.056598] ? cgroup_kn_set_ugid+0x2cb/0x370 [ 253.061098] ? cgroup_file_name+0x1f0/0x1f0 [ 253.065427] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 253.070966] ? css_populate_dir+0x2a1/0x470 [ 253.075301] cgroup_mkdir+0x876/0x1150 [ 253.079202] ? cgroup_destroy_locked+0x7d0/0x7d0 [ 253.083964] ? put_itimerspec64+0x310/0x310 [ 253.088300] ? set_nlink+0xaf/0x140 [ 253.091932] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 253.097477] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 253.103016] ? kernfs_get_active+0xb2/0x120 [ 253.107344] ? cgroup_destroy_locked+0x7d0/0x7d0 [ 253.112101] kernfs_iop_mkdir+0x159/0x1e0 [ 253.116247] ? getname_flags+0xd0/0x5a0 [ 253.120225] vfs_mkdir+0x42e/0x6b0 [ 253.123770] do_mkdirat+0x266/0x2f0 [ 253.127406] ? __ia32_sys_mknod+0xb0/0xb0 [ 253.131563] ? do_syscall_64+0x92/0x800 00:15:23 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x10, 0x3, 0x6) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0609000400001d85680c1ba3a20400ff7e280000001100ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 00:15:23 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f760070") sendmsg$nl_xfrm(r0, &(0x7f0000001440)={&(0x7f0000000000)={0x10, 0x4170000}, 0x349, &(0x7f0000001400)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x2, 0x0, {{@in=@multicast1=0xe0000001, @in6=@mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x0, 0x0, 0x0, 0xa, 0xfffffff0, 0xf0ffffffffffff}}}, 0xb8}, 0x1}, 0x0) 00:15:23 executing program 2: r0 = socket$inet(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e", 0x24}], 0x1, 0x0, 0x0, 0x600000000000000}, 0x0) 00:15:23 executing program 2: r0 = socket$inet(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e", 0x24}], 0x1, 0x0, 0x0, 0xf0ffffff}, 0x0) 00:15:23 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f760070") sendmsg$nl_xfrm(r0, &(0x7f0000001440)={&(0x7f0000000000)={0x10, 0x4170000}, 0x349, &(0x7f0000001400)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0xffffffffffffffff, 0x0, {{@in=@multicast1=0xe0000001, @in6=@mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x0, 0x0, 0x0, 0xa, 0xfffffff0, 0xf0ffffffffffff}}}, 0xb8}, 0x1}, 0x0) 00:15:23 executing program 2: r0 = socket$inet(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e", 0x24}], 0x1, 0x0, 0x0, 0xa000000}, 0x0) 00:15:23 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f760070") sendmsg$nl_xfrm(r0, &(0x7f0000001440)={&(0x7f0000000000)={0x10, 0x4170000}, 0x349, &(0x7f0000001400)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0xa0020000, 0x0, {{@in=@multicast1=0xe0000001, @in6=@mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x0, 0x0, 0x0, 0xa, 0xfffffff0, 0xf0ffffffffffff}}}, 0xb8}, 0x1}, 0x0) 00:15:23 executing program 2: r0 = socket$inet(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e", 0x24}], 0x1, 0x0, 0x0, 0xfffffffc}, 0x0) [ 253.135544] __x64_sys_mkdir+0x5c/0x80 [ 253.139435] do_syscall_64+0x1b1/0x800 [ 253.143326] ? finish_task_switch+0x1ca/0x840 [ 253.147828] ? syscall_return_slowpath+0x5c0/0x5c0 [ 253.152766] ? syscall_return_slowpath+0x30f/0x5c0 [ 253.157705] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 253.163077] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 253.167935] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 253.173123] RIP: 0033:0x4559f9 [ 253.176310] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 253.195657] RSP: 002b:00007fa94af69c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 253.203370] RAX: ffffffffffffffda RBX: 00007fa94af6a6d4 RCX: 00000000004559f9 [ 253.210630] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000100 [ 253.217890] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 253.225156] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 253.232418] R13: 00000000004bae54 R14: 00000000004cead0 R15: 000000000000003a [ 253.239884] cgroup: cgroup_addrm_files: failed to add stat, err=-12 00:15:24 executing program 4: pipe2(&(0x7f0000989000)={0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) mount(&(0x7f0000434ff8)='./file0\x00', &(0x7f0000abf000)='./file0\x00', &(0x7f0000f4c000)='jfs\x00', 0x1023402, 0x0) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000001200), 0x3000, &(0x7f0000001280)) unlink(&(0x7f00003b3000)='./file0\x00') dup2(r0, r1) 00:15:24 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f760070") sendmsg$nl_xfrm(r0, &(0x7f0000001440)={&(0x7f0000000000)={0x10, 0x4170000}, 0x349, &(0x7f0000001400)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0xffffff7f, 0x0, {{@in=@multicast1=0xe0000001, @in6=@mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x0, 0x0, 0x0, 0xa, 0xfffffff0, 0xf0ffffffffffff}}}, 0xb8}, 0x1}, 0x0) 00:15:24 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) write$rdma_cm(r0, &(0x7f0000000640)=@get_event={0xc, 0x8, 0xfa11, {&(0x7f00000004c0)}}, 0x10) close(r0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0x6e) listen(r3, 0x0) connect$unix(r2, &(0x7f0000932000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) tkill(r1, 0x1000000000016) 00:15:24 executing program 2: r0 = socket$inet(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e", 0x24}], 0x1, 0x0, 0x0, 0x200000000000000}, 0x0) 00:15:24 executing program 6 (fault-call:8 fault-nth:59): r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="295ed277a4200100360070") mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) rmdir(&(0x7f0000000340)='./file0//ile0\x00') r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) fstat(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r2) mkdir(&(0x7f0000000100)='./file0//ile0\x00', 0x0) 00:15:24 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x10, 0x3, 0x6) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a2809000400001d85680c1ba3a20400ff7e280000001100ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 00:15:24 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) write$rdma_cm(r1, &(0x7f0000000640)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f00000004c0)}}, 0x10) close(r1) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0x6e) listen(r4, 0x0) connect$unix(r3, &(0x7f0000932000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) tkill(r2, 0x1000000000016) 00:15:24 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[0xfeffffff], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) r2 = socket(0x11, 0x100000803, 0x0) r3 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={"6966623000faffffffffffffff00", 0x12}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'ifb0\x00', 0xa201}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x22, &(0x7f0000000080)={@dev={0xfe, 0x80}, 0x0, 0x0, 0x2}, 0x20) 00:15:24 executing program 2: r0 = socket$inet(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e", 0x24}], 0x1, 0x0, 0x0, 0x5000000}, 0x0) 00:15:24 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x10, 0x3, 0x6) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0010000400001d85680c1ba3a20400ff7e280000001100ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) [ 253.806133] FAULT_INJECTION: forcing a failure. [ 253.806133] name failslab, interval 1, probability 0, space 0, times 0 [ 253.817610] CPU: 0 PID: 16035 Comm: syz-executor6 Not tainted 4.17.0+ #89 [ 253.824539] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 253.833893] Call Trace: [ 253.836495] dump_stack+0x1b9/0x294 [ 253.840162] ? dump_stack_print_info.cold.2+0x52/0x52 [ 253.845362] ? check_same_owner+0x320/0x320 [ 253.849693] ? mutex_trylock+0x2a0/0x2a0 00:15:24 executing program 2: r0 = socket$inet(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e", 0x24}], 0x1, 0x0, 0x0, 0xf0}, 0x0) 00:15:24 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f760070") sendmsg$nl_xfrm(r0, &(0x7f0000001440)={&(0x7f0000000000)={0x10, 0x4170000}, 0x349, &(0x7f0000001400)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0xf0ffff, 0x0, {{@in=@multicast1=0xe0000001, @in6=@mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x0, 0x0, 0x0, 0xa, 0xfffffff0, 0xf0ffffffffffff}}}, 0xb8}, 0x1}, 0x0) [ 253.853763] should_fail.cold.4+0xa/0x1a [ 253.857831] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 253.862944] ? __mutex_lock+0x7d9/0x17f0 [ 253.867012] ? graph_lock+0x170/0x170 [ 253.870819] ? kernfs_setattr+0x20/0x40 [ 253.874808] ? graph_lock+0x170/0x170 [ 253.878626] ? find_held_lock+0x36/0x1c0 [ 253.882700] ? __lock_is_held+0xb5/0x140 [ 253.886776] ? check_same_owner+0x320/0x320 [ 253.891105] ? rcu_note_context_switch+0x710/0x710 [ 253.896043] ? lock_downgrade+0x8e0/0x8e0 [ 253.900206] __should_failslab+0x124/0x180 00:15:24 executing program 2: r0 = socket$inet(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e", 0x24}], 0x1, 0x0, 0x0, 0x2000000}, 0x0) 00:15:24 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f760070") sendmsg$nl_xfrm(r0, &(0x7f0000001440)={&(0x7f0000000000)={0x10, 0x4170000}, 0x349, &(0x7f0000001400)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0xf000, 0x0, {{@in=@multicast1=0xe0000001, @in6=@mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x0, 0x0, 0x0, 0xa, 0xfffffff0, 0xf0ffffffffffff}}}, 0xb8}, 0x1}, 0x0) [ 253.904453] should_failslab+0x9/0x14 [ 253.908260] kmem_cache_alloc_trace+0x2cb/0x780 [ 253.912932] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 253.917875] kernfs_iattrs.isra.4+0x123/0x4e0 [ 253.922371] ? ktime_get_real_ts64+0x361/0x510 [ 253.926985] ? kernfs_iop_permission+0xb0/0xb0 [ 253.931576] ? ktime_get_with_offset+0x4a0/0x4a0 [ 253.936347] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 253.941890] __kernfs_setattr+0x57/0x440 [ 253.945958] kernfs_setattr+0x2b/0x40 [ 253.949768] cgroup_kn_set_ugid+0x2c3/0x370 00:15:24 executing program 2: r0 = socket$inet(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e", 0x24}], 0x1, 0x0, 0x0, 0xb00}, 0x0) 00:15:24 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f760070") sendmsg$nl_xfrm(r0, &(0x7f0000001440)={&(0x7f0000000000)={0x10, 0x4170000}, 0x349, &(0x7f0000001400)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0xfffffffc, 0x0, {{@in=@multicast1=0xe0000001, @in6=@mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x0, 0x0, 0x0, 0xa, 0xfffffff0, 0xf0ffffffffffff}}}, 0xb8}, 0x1}, 0x0) [ 253.954096] ? cgroup_file_name+0x1f0/0x1f0 [ 253.958435] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 253.963983] ? __kernfs_create_file+0x29b/0x330 [ 253.968666] cgroup_addrm_files+0x465/0xb20 [ 253.973000] ? cgroup_css.part.14+0x1f0/0x1f0 [ 253.977503] ? find_held_lock+0x36/0x1c0 [ 253.981580] ? __lock_is_held+0xb5/0x140 [ 253.985645] ? kasan_check_write+0x14/0x20 [ 253.989875] ? online_css+0x265/0x330 [ 253.993680] css_populate_dir+0x1a9/0x470 [ 253.997837] cgroup_apply_control_enable+0x449/0xe80 [ 254.002952] ? cgroup_save_control+0x260/0x260 [ 254.007538] ? mutex_unlock+0xd/0x10 [ 254.011257] ? kernfs_setattr+0x39/0x40 [ 254.015244] ? cgroup_kn_set_ugid+0x2cb/0x370 [ 254.019747] ? cgroup_file_name+0x1f0/0x1f0 [ 254.024086] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 254.029622] ? css_populate_dir+0x2a1/0x470 [ 254.033950] cgroup_mkdir+0x876/0x1150 [ 254.037849] ? cgroup_destroy_locked+0x7d0/0x7d0 [ 254.042607] ? put_itimerspec64+0x310/0x310 [ 254.046935] ? set_nlink+0xaf/0x140 [ 254.050567] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 254.056110] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 254.061654] ? kernfs_get_active+0xb2/0x120 [ 254.065979] ? cgroup_destroy_locked+0x7d0/0x7d0 [ 254.070742] kernfs_iop_mkdir+0x159/0x1e0 [ 254.074893] ? getname_flags+0xd0/0x5a0 [ 254.078870] vfs_mkdir+0x42e/0x6b0 [ 254.082421] do_mkdirat+0x266/0x2f0 [ 254.086058] ? __ia32_sys_mknod+0xb0/0xb0 [ 254.090217] ? do_syscall_64+0x92/0x800 [ 254.094224] __x64_sys_mkdir+0x5c/0x80 [ 254.098117] do_syscall_64+0x1b1/0x800 [ 254.101999] ? finish_task_switch+0x1ca/0x840 [ 254.106484] ? syscall_return_slowpath+0x5c0/0x5c0 [ 254.111396] ? syscall_return_slowpath+0x30f/0x5c0 [ 254.116313] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 254.121672] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 254.126510] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 254.131685] RIP: 0033:0x4559f9 [ 254.134862] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 254.154161] RSP: 002b:00007fa94af69c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 254.161862] RAX: ffffffffffffffda RBX: 00007fa94af6a6d4 RCX: 00000000004559f9 [ 254.169115] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000100 [ 254.176374] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 254.183642] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 254.190900] R13: 00000000004bae54 R14: 00000000004cead0 R15: 000000000000003b [ 254.199204] cgroup: cgroup_addrm_files: failed to add stat, err=-12 00:15:25 executing program 2: r0 = socket$inet(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e", 0x24}], 0x1, 0x0, 0x0, 0xa}, 0x0) 00:15:25 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f760070") sendmsg$nl_xfrm(r0, &(0x7f0000001440)={&(0x7f0000000000)={0x10, 0x4170000}, 0x349, &(0x7f0000001400)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x1000000, 0x0, {{@in=@multicast1=0xe0000001, @in6=@mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x0, 0x0, 0x0, 0xa, 0xfffffff0, 0xf0ffffffffffff}}}, 0xb8}, 0x1}, 0x0) 00:15:25 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x10, 0x3, 0x6) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0003000400001d85680c1ba3a20400ff7e280000001100ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 00:15:25 executing program 6 (fault-call:8 fault-nth:60): r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="295ed277a4200100360070") mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) rmdir(&(0x7f0000000340)='./file0//ile0\x00') r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) fstat(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r2) mkdir(&(0x7f0000000100)='./file0//ile0\x00', 0x0) 00:15:25 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) write$rdma_cm(r1, &(0x7f0000000640)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f00000004c0)}}, 0x10) close(r1) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0x6e) listen(r4, 0x0) connect$unix(r3, &(0x7f0000932000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) tkill(r2, 0x1000000000016) 00:15:25 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[0xfeffffff], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) r2 = socket(0x11, 0x100000803, 0x0) r3 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={"6966623000faffffffffffffff00", 0x12}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'ifb0\x00', 0xa201}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x4a, &(0x7f0000000080)={@dev={0xfe, 0x80}, 0x0, 0x0, 0x2}, 0x20) 00:15:25 executing program 4: pipe2(&(0x7f0000989000)={0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) mount(&(0x7f0000434ff8)='./file0\x00', &(0x7f0000abf000)='./file0\x00', &(0x7f0000f4c000)='jfs\x00', 0x1023402, 0x0) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000001200), 0x3000, &(0x7f0000001280)) unlink(&(0x7f00003b3000)='./file0\x00') dup2(r0, r1) 00:15:25 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) write$rdma_cm(r0, &(0x7f0000000640)=@get_event={0xc, 0x8, 0xfa02, {&(0x7f00000004c0)}}, 0x10) close(r0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0x6e) listen(r3, 0x0) connect$unix(r2, &(0x7f0000932000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) tkill(r1, 0x1000000000016) [ 254.751588] netlink: 16 bytes leftover after parsing attributes in process `syz-executor7'. 00:15:25 executing program 2: r0 = socket$inet(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e", 0x24}], 0x1, 0x0, 0x0, 0x9effffff00000000}, 0x0) 00:15:25 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f760070") sendmsg$nl_xfrm(r0, &(0x7f0000001440)={&(0x7f0000000000)={0x10, 0x4170000}, 0x349, &(0x7f0000001400)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0xffffff9e, 0x0, {{@in=@multicast1=0xe0000001, @in6=@mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x0, 0x0, 0x0, 0xa, 0xfffffff0, 0xf0ffffffffffff}}}, 0xb8}, 0x1}, 0x0) [ 254.799523] FAULT_INJECTION: forcing a failure. [ 254.799523] name failslab, interval 1, probability 0, space 0, times 0 [ 254.810828] CPU: 1 PID: 16111 Comm: syz-executor6 Not tainted 4.17.0+ #89 [ 254.817757] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 254.827113] Call Trace: [ 254.829714] dump_stack+0x1b9/0x294 [ 254.833355] ? dump_stack_print_info.cold.2+0x52/0x52 [ 254.838566] should_fail.cold.4+0xa/0x1a [ 254.842644] ? __kmalloc_track_caller+0x14a/0x760 00:15:25 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x10, 0x3, 0x6) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009050400001d85680c1ba3a20400ff7e280000001100ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) [ 254.847502] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 254.852614] ? cgroup_mkdir+0x876/0x1150 [ 254.856688] ? kernfs_iop_mkdir+0x159/0x1e0 [ 254.861018] ? vfs_mkdir+0x42e/0x6b0 [ 254.864743] ? do_mkdirat+0x266/0x2f0 [ 254.868552] ? __x64_sys_mkdir+0x5c/0x80 [ 254.872621] ? do_syscall_64+0x1b1/0x800 [ 254.876699] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 254.882094] ? graph_lock+0x170/0x170 [ 254.885902] ? find_held_lock+0x36/0x1c0 [ 254.889974] ? print_usage_bug+0xc0/0xc0 [ 254.894050] ? find_held_lock+0x36/0x1c0 00:15:25 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f760070") sendmsg$nl_xfrm(r0, &(0x7f0000001440)={&(0x7f0000000000)={0x10, 0x4170000}, 0x349, &(0x7f0000001400)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0xfcffffff00000000, 0x0, {{@in=@multicast1=0xe0000001, @in6=@mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x0, 0x0, 0x0, 0xa, 0xfffffff0, 0xf0ffffffffffff}}}, 0xb8}, 0x1}, 0x0) [ 254.898124] ? __lock_is_held+0xb5/0x140 [ 254.902203] ? check_same_owner+0x320/0x320 [ 254.906534] ? rcu_note_context_switch+0x710/0x710 [ 254.911469] ? rcu_read_lock_sched_held+0x108/0x120 [ 254.916490] __should_failslab+0x124/0x180 [ 254.920738] should_failslab+0x9/0x14 [ 254.924545] kmem_cache_alloc+0x2af/0x760 [ 254.928702] ? memcpy+0x45/0x50 [ 254.931994] ? kstrdup+0x59/0x70 [ 254.935374] __kernfs_new_node+0xe7/0x580 [ 254.939533] ? kernfs_dop_revalidate+0x3c0/0x3c0 [ 254.944386] ? pointer+0x930/0x930 00:15:25 executing program 2: r0 = socket$inet(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e", 0x24}], 0x1, 0x0, 0x0, 0x100000000000000}, 0x0) [ 254.947937] ? graph_lock+0x170/0x170 [ 254.951758] ? snprintf+0xa5/0xd0 [ 254.955226] ? vsprintf+0x40/0x40 [ 254.958692] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 254.964243] kernfs_new_node+0x80/0xf0 [ 254.968142] __kernfs_create_file+0x4d/0x330 [ 254.972567] cgroup_addrm_files+0x437/0xb20 [ 254.976903] ? cgroup_css.part.14+0x1f0/0x1f0 [ 254.981407] ? find_held_lock+0x36/0x1c0 [ 254.985480] ? __lock_is_held+0xb5/0x140 [ 254.989550] ? kasan_check_write+0x14/0x20 [ 254.993785] ? online_css+0x265/0x330 00:15:25 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f760070") sendmsg$nl_xfrm(r0, &(0x7f0000001440)={&(0x7f0000000000)={0x10, 0x4170000}, 0x349, &(0x7f0000001400)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x100000000000000, 0x0, {{@in=@multicast1=0xe0000001, @in6=@mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x0, 0x0, 0x0, 0xa, 0xfffffff0, 0xf0ffffffffffff}}}, 0xb8}, 0x1}, 0x0) [ 254.997593] css_populate_dir+0x1a9/0x470 [ 255.001757] cgroup_apply_control_enable+0x449/0xe80 [ 255.006871] ? cgroup_save_control+0x260/0x260 [ 255.011460] ? mutex_unlock+0xd/0x10 [ 255.015177] ? kernfs_setattr+0x39/0x40 [ 255.019159] ? cgroup_kn_set_ugid+0x2cb/0x370 [ 255.023661] ? cgroup_file_name+0x1f0/0x1f0 [ 255.028003] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 255.033544] ? css_populate_dir+0x2a1/0x470 [ 255.037876] cgroup_mkdir+0x876/0x1150 [ 255.041780] ? cgroup_destroy_locked+0x7d0/0x7d0 [ 255.046538] ? put_itimerspec64+0x310/0x310 [ 255.050871] ? set_nlink+0xaf/0x140 [ 255.053292] netlink: 16 bytes leftover after parsing attributes in process `syz-executor7'. [ 255.054498] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 255.054517] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 255.054532] ? kernfs_get_active+0xb2/0x120 [ 255.054550] ? cgroup_destroy_locked+0x7d0/0x7d0 [ 255.083120] kernfs_iop_mkdir+0x159/0x1e0 [ 255.087272] ? getname_flags+0xd0/0x5a0 [ 255.091247] vfs_mkdir+0x42e/0x6b0 [ 255.094795] do_mkdirat+0x266/0x2f0 [ 255.098431] ? __ia32_sys_mknod+0xb0/0xb0 [ 255.102585] ? do_syscall_64+0x92/0x800 [ 255.106571] __x64_sys_mkdir+0x5c/0x80 [ 255.110464] do_syscall_64+0x1b1/0x800 [ 255.114357] ? syscall_return_slowpath+0x5c0/0x5c0 [ 255.119293] ? syscall_return_slowpath+0x30f/0x5c0 [ 255.124232] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 255.129609] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 255.134465] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 255.139654] RIP: 0033:0x4559f9 [ 255.142834] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 255.162178] RSP: 002b:00007fa94af69c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 255.169899] RAX: ffffffffffffffda RBX: 00007fa94af6a6d4 RCX: 00000000004559f9 [ 255.177171] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000100 [ 255.184441] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 255.191711] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 00:15:25 executing program 2: r0 = socket$inet(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e", 0x24}], 0x1, 0x0, 0x0, 0xa00000000000000}, 0x0) 00:15:25 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f760070") sendmsg$nl_xfrm(r0, &(0x7f0000001440)={&(0x7f0000000000)={0x10, 0x4170000}, 0x349, &(0x7f0000001400)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0xffffff7f00000000, 0x0, {{@in=@multicast1=0xe0000001, @in6=@mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x0, 0x0, 0x0, 0xa, 0xfffffff0, 0xf0ffffffffffff}}}, 0xb8}, 0x1}, 0x0) 00:15:25 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x10, 0x3, 0x6) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009060400001d85680c1ba3a20400ff7e280000001100ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) [ 255.198982] R13: 00000000004bae54 R14: 00000000004cead0 R15: 000000000000003c [ 255.203165] netlink: 16 bytes leftover after parsing attributes in process `syz-executor7'. [ 255.206482] cgroup: cgroup_addrm_files: failed to add stat, err=-12 00:15:26 executing program 2: r0 = socket$inet(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e", 0x24}], 0x1, 0x0, 0x0, 0xffffff7f00000000}, 0x0) 00:15:26 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f760070") sendmsg$nl_xfrm(r0, &(0x7f0000001440)={&(0x7f0000000000)={0x10, 0x4170000}, 0x349, &(0x7f0000001400)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x9effffff, 0x0, {{@in=@multicast1=0xe0000001, @in6=@mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x0, 0x0, 0x0, 0xa, 0xfffffff0, 0xf0ffffffffffff}}}, 0xb8}, 0x1}, 0x0) 00:15:26 executing program 6 (fault-call:8 fault-nth:61): r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="295ed277a4200100360070") mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) rmdir(&(0x7f0000000340)='./file0//ile0\x00') r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) fstat(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r2) mkdir(&(0x7f0000000100)='./file0//ile0\x00', 0x0) 00:15:26 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) write$rdma_cm(r0, &(0x7f0000000640)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f00000004c0)}}, 0x10) close(r0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0x6e) listen(r3, 0x0) connect$unix(r2, &(0x7f0000932000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) tkill(r1, 0x1000000000016) 00:15:26 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x10, 0x3, 0x6) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009100400001d85680c1ba3a20400ff7e280000001100ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 00:15:26 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[0xfeffffff], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) r2 = socket(0x11, 0x100000803, 0x0) r3 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={"6966623000faffffffffffffff00", 0x12}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'ifb0\x00', 0xa201}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x33, &(0x7f0000000080)={@dev={0xfe, 0x80}, 0x0, 0x0, 0x2}, 0x20) 00:15:26 executing program 4: pipe2(&(0x7f0000989000)={0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) mount(&(0x7f0000434ff8)='./file0\x00', &(0x7f0000abf000)='./file0\x00', &(0x7f0000f4c000)='jfs\x00', 0x1023402, 0x0) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000001200), 0x3000, &(0x7f0000001280)) unlink(&(0x7f00003b3000)='./file0\x00') dup2(r0, r1) 00:15:26 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) write$rdma_cm(r1, &(0x7f0000000640)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f00000004c0)}}, 0x10) close(r1) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0x6e) listen(r4, 0x0) connect$unix(r3, &(0x7f0000932000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) tkill(r2, 0x1000000000016) [ 255.790347] netlink: 16 bytes leftover after parsing attributes in process `syz-executor7'. [ 255.803363] FAULT_INJECTION: forcing a failure. [ 255.803363] name failslab, interval 1, probability 0, space 0, times 0 [ 255.814660] CPU: 0 PID: 16185 Comm: syz-executor6 Not tainted 4.17.0+ #89 [ 255.821592] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 255.830945] Call Trace: [ 255.833545] dump_stack+0x1b9/0x294 00:15:26 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x10, 0x3, 0x6) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000001100ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 00:15:26 executing program 2: r0 = socket$inet(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e", 0x24}], 0x1, 0x0, 0x0, 0x1000000000000}, 0x0) 00:15:26 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f760070") sendmsg$nl_xfrm(r0, &(0x7f0000001440)={&(0x7f0000000000)={0x10, 0x4170000}, 0x349, &(0x7f0000001400)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x300, 0x0, {{@in=@multicast1=0xe0000001, @in6=@mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x0, 0x0, 0x0, 0xa, 0xfffffff0, 0xf0ffffffffffff}}}, 0xb8}, 0x1}, 0x0) [ 255.837189] ? dump_stack_print_info.cold.2+0x52/0x52 [ 255.842393] ? __save_stack_trace+0x7e/0xd0 [ 255.846733] should_fail.cold.4+0xa/0x1a [ 255.850809] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 255.855924] ? graph_lock+0x170/0x170 [ 255.859730] ? graph_lock+0x170/0x170 [ 255.863546] ? find_held_lock+0x36/0x1c0 [ 255.867625] ? __lock_is_held+0xb5/0x140 [ 255.871705] ? check_same_owner+0x320/0x320 [ 255.876043] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 255.881069] ? rcu_note_context_switch+0x710/0x710 [ 255.886013] __should_failslab+0x124/0x180 [ 255.890258] should_failslab+0x9/0x14 [ 255.894066] __kmalloc_track_caller+0x2c4/0x760 [ 255.898749] ? string+0x21d/0x2c0 [ 255.902214] ? kstrdup_const+0x66/0x80 [ 255.906110] kstrdup+0x39/0x70 [ 255.909312] kstrdup_const+0x66/0x80 [ 255.913044] __kernfs_new_node+0xa8/0x580 [ 255.917203] ? kernfs_dop_revalidate+0x3c0/0x3c0 [ 255.921967] ? pointer+0x930/0x930 [ 255.925525] ? graph_lock+0x170/0x170 [ 255.929341] ? snprintf+0xa5/0xd0 [ 255.932807] ? vsprintf+0x40/0x40 [ 255.936266] ? cgroup_kn_set_ugid+0x2cb/0x370 00:15:26 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f760070") sendmsg$nl_xfrm(r0, &(0x7f0000001440)={&(0x7f0000000000)={0x10, 0x4170000}, 0x349, &(0x7f0000001400)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x200000000000000, 0x0, {{@in=@multicast1=0xe0000001, @in6=@mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x0, 0x0, 0x0, 0xa, 0xfffffff0, 0xf0ffffffffffff}}}, 0xb8}, 0x1}, 0x0) 00:15:26 executing program 2: r0 = socket$inet(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0) [ 255.940772] kernfs_new_node+0x80/0xf0 [ 255.944674] __kernfs_create_file+0x4d/0x330 [ 255.949094] cgroup_addrm_files+0x437/0xb20 [ 255.953428] ? cgroup_css.part.14+0x1f0/0x1f0 [ 255.957925] ? find_held_lock+0x36/0x1c0 [ 255.962003] ? __lock_is_held+0xb5/0x140 [ 255.966087] ? kasan_check_write+0x14/0x20 [ 255.970330] ? online_css+0x265/0x330 [ 255.974144] css_populate_dir+0x1a9/0x470 [ 255.978304] cgroup_apply_control_enable+0x449/0xe80 [ 255.983421] ? cgroup_save_control+0x260/0x260 00:15:26 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f760070") sendmsg$nl_xfrm(r0, &(0x7f0000001440)={&(0x7f0000000000)={0x10, 0x4170000}, 0x349, &(0x7f0000001400)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0xf0ffffffffffff, 0x0, {{@in=@multicast1=0xe0000001, @in6=@mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x0, 0x0, 0x0, 0xa, 0xfffffff0, 0xf0ffffffffffff}}}, 0xb8}, 0x1}, 0x0) 00:15:26 executing program 2: r0 = socket$inet(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0) [ 255.988008] ? mutex_unlock+0xd/0x10 [ 255.991728] ? kernfs_setattr+0x39/0x40 [ 255.995703] ? cgroup_kn_set_ugid+0x2cb/0x370 [ 256.000200] ? cgroup_file_name+0x1f0/0x1f0 [ 256.004532] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 256.010072] ? css_populate_dir+0x2a1/0x470 [ 256.014407] cgroup_mkdir+0x876/0x1150 [ 256.018307] ? cgroup_destroy_locked+0x7d0/0x7d0 [ 256.023155] ? put_itimerspec64+0x310/0x310 [ 256.027479] ? set_nlink+0xaf/0x140 [ 256.031110] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 256.036653] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 256.042196] ? kernfs_get_active+0xb2/0x120 [ 256.046519] ? cgroup_destroy_locked+0x7d0/0x7d0 [ 256.051283] kernfs_iop_mkdir+0x159/0x1e0 [ 256.055433] ? getname_flags+0xd0/0x5a0 [ 256.059411] vfs_mkdir+0x42e/0x6b0 [ 256.062957] do_mkdirat+0x266/0x2f0 [ 256.066589] ? __ia32_sys_mknod+0xb0/0xb0 [ 256.070747] ? do_syscall_64+0x92/0x800 [ 256.074737] __x64_sys_mkdir+0x5c/0x80 [ 256.078628] do_syscall_64+0x1b1/0x800 [ 256.082526] ? finish_task_switch+0x1ca/0x840 00:15:26 executing program 2: r0 = socket$inet(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0) [ 256.087040] ? syscall_return_slowpath+0x5c0/0x5c0 [ 256.091974] ? syscall_return_slowpath+0x30f/0x5c0 [ 256.096913] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 256.102285] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 256.107140] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 256.112331] RIP: 0033:0x4559f9 [ 256.115516] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 256.134867] RSP: 002b:00007fa94af69c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 256.142582] RAX: ffffffffffffffda RBX: 00007fa94af6a6d4 RCX: 00000000004559f9 [ 256.149851] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000100 [ 256.157128] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 256.164417] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 256.171685] R13: 00000000004bae54 R14: 00000000004cead0 R15: 000000000000003d [ 256.179138] cgroup: cgroup_addrm_files: failed to add max, err=-12 00:15:27 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f760070") sendmsg$nl_xfrm(r0, &(0x7f0000001440)={&(0x7f0000000000)={0x10, 0x4170000}, 0x349, &(0x7f0000001400)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0xfcffffff, 0x0, {{@in=@multicast1=0xe0000001, @in6=@mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x0, 0x0, 0x0, 0xa, 0xfffffff0, 0xf0ffffffffffff}}}, 0xb8}, 0x1}, 0x0) 00:15:27 executing program 2: r0 = socket$inet(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0) 00:15:27 executing program 6 (fault-call:8 fault-nth:62): r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="295ed277a4200100360070") mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) rmdir(&(0x7f0000000340)='./file0//ile0\x00') r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) fstat(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r2) mkdir(&(0x7f0000000100)='./file0//ile0\x00', 0x0) 00:15:27 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x10, 0x3, 0x6) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009280400001d85680c1ba3a20400ff7e280000001100ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 00:15:27 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[0xfeffffff], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) r2 = socket(0x11, 0x100000803, 0x0) r3 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={"6966623000faffffffffffffff00", 0x12}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'ifb0\x00', 0xa201}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x2e, &(0x7f0000000080)={@dev={0xfe, 0x80}, 0x0, 0x0, 0x2}, 0x20) 00:15:27 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) write$rdma_cm(r0, &(0x7f0000000640)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f00000004c0)}}, 0x10) close(r0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0x6e) listen(r3, 0x0) connect$unix(r2, &(0x7f0000932000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) tkill(r1, 0x1000000000016) 00:15:27 executing program 4: pipe2(&(0x7f0000989000)={0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) mount(&(0x7f0000434ff8)='./file0\x00', &(0x7f0000abf000)='./file0\x00', &(0x7f0000f4c000)='jfs\x00', 0x1023402, 0x0) syz_mount_image$vfat(&(0x7f0000000040)='vfath', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000001200), 0x3000, &(0x7f0000001280)) unlink(&(0x7f00003b3000)='./file0\x00') dup2(r0, r1) 00:15:27 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) write$rdma_cm(r1, &(0x7f0000000640)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f00000004c0)}}, 0x10) close(r1) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0x6e) listen(r4, 0x0) connect$unix(r3, &(0x7f0000932000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) tkill(r2, 0x1000000000016) [ 256.892714] netlink: 16 bytes leftover after parsing attributes in process `syz-executor7'. [ 256.905986] FAULT_INJECTION: forcing a failure. [ 256.905986] name failslab, interval 1, probability 0, space 0, times 0 [ 256.917370] CPU: 0 PID: 16246 Comm: syz-executor6 Not tainted 4.17.0+ #89 [ 256.924301] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 256.933649] Call Trace: [ 256.936248] dump_stack+0x1b9/0x294 00:15:27 executing program 2: r0 = socket$inet(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0) 00:15:27 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f760070") sendmsg$nl_xfrm(r0, &(0x7f0000001440)={&(0x7f0000000000)={0x10, 0x4170000}, 0x349, &(0x7f0000001400)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x2000000, 0x0, {{@in=@multicast1=0xe0000001, @in6=@mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x0, 0x0, 0x0, 0xa, 0xfffffff0, 0xf0ffffffffffff}}}, 0xb8}, 0x1}, 0x0) [ 256.939889] ? dump_stack_print_info.cold.2+0x52/0x52 [ 256.945089] ? check_same_owner+0x320/0x320 [ 256.949424] ? mutex_trylock+0x2a0/0x2a0 [ 256.953501] should_fail.cold.4+0xa/0x1a [ 256.957570] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 256.962674] ? __mutex_lock+0x7d9/0x17f0 [ 256.966746] ? graph_lock+0x170/0x170 [ 256.970559] ? kernfs_setattr+0x20/0x40 [ 256.974569] ? graph_lock+0x170/0x170 [ 256.978386] ? find_held_lock+0x36/0x1c0 [ 256.982458] ? __lock_is_held+0xb5/0x140 [ 256.986533] ? check_same_owner+0x320/0x320 00:15:27 executing program 2: r0 = socket$inet(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0) 00:15:27 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f760070") sendmsg$nl_xfrm(r0, &(0x7f0000001440)={&(0x7f0000000000)={0x10, 0x4170000}, 0x349, &(0x7f0000001400)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0xf, 0x0, {{@in=@multicast1=0xe0000001, @in6=@mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x0, 0x0, 0x0, 0xa, 0xfffffff0, 0xf0ffffffffffff}}}, 0xb8}, 0x1}, 0x0) [ 256.990859] ? rcu_note_context_switch+0x710/0x710 [ 256.995794] ? lock_downgrade+0x8e0/0x8e0 [ 256.999960] __should_failslab+0x124/0x180 [ 257.004205] should_failslab+0x9/0x14 [ 257.008017] kmem_cache_alloc_trace+0x2cb/0x780 [ 257.012697] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 257.017640] kernfs_iattrs.isra.4+0x123/0x4e0 [ 257.022145] ? ktime_get_real_ts64+0x361/0x510 [ 257.026738] ? kernfs_iop_permission+0xb0/0xb0 [ 257.031330] ? ktime_get_with_offset+0x4a0/0x4a0 [ 257.036103] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 00:15:27 executing program 2: r0 = socket$inet(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0) 00:15:27 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f760070") sendmsg$nl_xfrm(r0, &(0x7f0000001440)={&(0x7f0000000000)={0x10, 0x4170000}, 0x349, &(0x7f0000001400)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0xfffffffffffff000, 0x0, {{@in=@multicast1=0xe0000001, @in6=@mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x0, 0x0, 0x0, 0xa, 0xfffffff0, 0xf0ffffffffffff}}}, 0xb8}, 0x1}, 0x0) [ 257.041650] __kernfs_setattr+0x57/0x440 [ 257.045720] kernfs_setattr+0x2b/0x40 [ 257.049532] cgroup_kn_set_ugid+0x2c3/0x370 [ 257.053861] ? cgroup_file_name+0x1f0/0x1f0 [ 257.058207] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 257.063750] ? __kernfs_create_file+0x29b/0x330 [ 257.068432] cgroup_addrm_files+0x465/0xb20 [ 257.072767] ? cgroup_css.part.14+0x1f0/0x1f0 [ 257.077272] ? find_held_lock+0x36/0x1c0 [ 257.081352] ? __lock_is_held+0xb5/0x140 [ 257.085429] ? kasan_check_write+0x14/0x20 [ 257.089666] ? online_css+0x265/0x330 00:15:27 executing program 2: r0 = socket$inet(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0) [ 257.093468] css_populate_dir+0x1a9/0x470 [ 257.097628] cgroup_apply_control_enable+0x449/0xe80 [ 257.102738] ? cgroup_save_control+0x260/0x260 [ 257.107327] ? mutex_unlock+0xd/0x10 [ 257.111043] ? kernfs_setattr+0x39/0x40 [ 257.115020] ? cgroup_kn_set_ugid+0x2cb/0x370 [ 257.119524] ? cgroup_file_name+0x1f0/0x1f0 [ 257.123854] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 257.129391] ? css_populate_dir+0x2a1/0x470 [ 257.133719] cgroup_mkdir+0x876/0x1150 [ 257.137617] ? cgroup_destroy_locked+0x7d0/0x7d0 [ 257.142381] ? put_itimerspec64+0x310/0x310 [ 257.146716] ? set_nlink+0xaf/0x140 [ 257.150347] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 257.155889] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 257.161432] ? kernfs_get_active+0xb2/0x120 [ 257.165747] ? cgroup_destroy_locked+0x7d0/0x7d0 [ 257.170490] kernfs_iop_mkdir+0x159/0x1e0 [ 257.174618] ? getname_flags+0xd0/0x5a0 [ 257.178581] vfs_mkdir+0x42e/0x6b0 [ 257.182106] do_mkdirat+0x266/0x2f0 [ 257.185725] ? __ia32_sys_mknod+0xb0/0xb0 [ 257.189870] ? do_syscall_64+0x92/0x800 [ 257.193834] __x64_sys_mkdir+0x5c/0x80 [ 257.197702] do_syscall_64+0x1b1/0x800 [ 257.201570] ? syscall_slow_exit_work+0x4f0/0x4f0 [ 257.206393] ? syscall_return_slowpath+0x5c0/0x5c0 [ 257.211325] ? syscall_return_slowpath+0x30f/0x5c0 [ 257.216251] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 257.221610] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 257.226457] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 257.231656] RIP: 0033:0x4559f9 [ 257.234828] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 257.254037] RSP: 002b:00007fa94af69c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 257.261838] RAX: ffffffffffffffda RBX: 00007fa94af6a6d4 RCX: 00000000004559f9 [ 257.269091] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000100 [ 257.276359] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 257.283613] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 257.290869] R13: 00000000004bae54 R14: 00000000004cead0 R15: 000000000000003e [ 257.299222] cgroup: cgroup_addrm_files: failed to add max, err=-12 00:15:28 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f760070") sendmsg$nl_xfrm(r0, &(0x7f0000001440)={&(0x7f0000000000)={0x10, 0x4170000}, 0x349, &(0x7f0000001400)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x400000000000000, 0x0, {{@in=@multicast1=0xe0000001, @in6=@mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x0, 0x0, 0x0, 0xa, 0xfffffff0, 0xf0ffffffffffff}}}, 0xb8}, 0x1}, 0x0) 00:15:28 executing program 2: r0 = socket$inet(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0) 00:15:28 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x10, 0x3, 0x6) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a00090f0400001d85680c1ba3a20400ff7e280000001100ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 00:15:28 executing program 6 (fault-call:8 fault-nth:63): r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="295ed277a4200100360070") mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) rmdir(&(0x7f0000000340)='./file0//ile0\x00') r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) fstat(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r2) mkdir(&(0x7f0000000100)='./file0//ile0\x00', 0x0) 00:15:28 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) write$rdma_cm(r0, &(0x7f0000000640)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f00000004c0)}}, 0x10) close(r0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0x6e) listen(r3, 0x0) connect$unix(r2, &(0x7f0000932000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) tkill(r1, 0x1000000000016) 00:15:28 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[0xfeffffff], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) r2 = socket(0x11, 0x100000803, 0x0) r3 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={"6966623000faffffffffffffff00", 0x12}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'ifb0\x00', 0xa201}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x4e, &(0x7f0000000080)={@dev={0xfe, 0x80}, 0x0, 0x0, 0x2}, 0x20) 00:15:28 executing program 4: pipe2(&(0x7f0000989000)={0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) mount(&(0x7f0000434ff8)='./file0\x00', &(0x7f0000abf000)='./file0\x00', &(0x7f0000f4c000)='jfs\x00', 0x1023402, 0x0) syz_mount_image$vfat(&(0x7f0000000040)='vfatt', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000001200), 0x3000, &(0x7f0000001280)) unlink(&(0x7f00003b3000)='./file0\x00') dup2(r0, r1) 00:15:28 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) write$rdma_cm(r1, &(0x7f0000000640)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f00000004c0)}}, 0x10) close(r1) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0x6e) listen(r4, 0x0) connect$unix(r3, &(0x7f0000932000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) tkill(r2, 0x1000000000016) 00:15:28 executing program 2: r0 = socket$inet(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0) [ 257.898932] netlink: 16 bytes leftover after parsing attributes in process `syz-executor7'. [ 257.911332] FAULT_INJECTION: forcing a failure. [ 257.911332] name failslab, interval 1, probability 0, space 0, times 0 [ 257.922689] CPU: 0 PID: 16305 Comm: syz-executor6 Not tainted 4.17.0+ #89 [ 257.929619] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 257.938975] Call Trace: [ 257.941572] dump_stack+0x1b9/0x294 00:15:28 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x10, 0x3, 0x6) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a00090a0400001d85680c1ba3a20400ff7e280000001100ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) [ 257.945214] ? dump_stack_print_info.cold.2+0x52/0x52 [ 257.950416] ? __save_stack_trace+0x7e/0xd0 [ 257.954755] should_fail.cold.4+0xa/0x1a [ 257.958855] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 257.963969] ? graph_lock+0x170/0x170 [ 257.967777] ? graph_lock+0x170/0x170 [ 257.971589] ? find_held_lock+0x36/0x1c0 [ 257.975665] ? __lock_is_held+0xb5/0x140 [ 257.979746] ? check_same_owner+0x320/0x320 [ 257.984074] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 257.989099] ? rcu_note_context_switch+0x710/0x710 [ 257.994043] __should_failslab+0x124/0x180 00:15:28 executing program 2: r0 = socket$inet(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0) 00:15:28 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x10, 0x3, 0x6) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009090400001d85680c1ba3a20400ff7e280000001100ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) [ 257.997332] netlink: 16 bytes leftover after parsing attributes in process `syz-executor7'. [ 257.998290] should_failslab+0x9/0x14 [ 257.998307] __kmalloc_track_caller+0x2c4/0x760 [ 257.998325] ? string+0x21d/0x2c0 [ 257.998348] ? kstrdup_const+0x66/0x80 [ 258.022581] kstrdup+0x39/0x70 [ 258.025777] kstrdup_const+0x66/0x80 [ 258.029495] __kernfs_new_node+0xa8/0x580 [ 258.033651] ? kernfs_dop_revalidate+0x3c0/0x3c0 [ 258.038408] ? pointer+0x930/0x930 [ 258.041953] ? graph_lock+0x170/0x170 [ 258.045760] ? snprintf+0xa5/0xd0 [ 258.049221] ? vsprintf+0x40/0x40 [ 258.052689] ? cgroup_kn_set_ugid+0x2cb/0x370 [ 258.057192] kernfs_new_node+0x80/0xf0 [ 258.061089] __kernfs_create_file+0x4d/0x330 [ 258.065505] cgroup_addrm_files+0x437/0xb20 [ 258.068479] netlink: 16 bytes leftover after parsing attributes in process `syz-executor7'. [ 258.069866] ? cgroup_css.part.14+0x1f0/0x1f0 [ 258.069882] ? find_held_lock+0x36/0x1c0 [ 258.069908] ? __lock_is_held+0xb5/0x140 [ 258.090973] ? kasan_check_write+0x14/0x20 [ 258.095220] ? online_css+0x265/0x330 00:15:28 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x10, 0x3, 0x6) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a00090b0400001d85680c1ba3a20400ff7e280000001100ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 00:15:28 executing program 2: r0 = socket$inet(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0) [ 258.099021] css_populate_dir+0x1a9/0x470 [ 258.103177] cgroup_apply_control_enable+0x449/0xe80 [ 258.108287] ? cgroup_save_control+0x260/0x260 [ 258.112872] ? mutex_unlock+0xd/0x10 [ 258.116581] ? kernfs_setattr+0x39/0x40 [ 258.120550] ? cgroup_kn_set_ugid+0x2cb/0x370 [ 258.125046] ? cgroup_file_name+0x1f0/0x1f0 [ 258.129374] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 258.134910] ? css_populate_dir+0x2a1/0x470 [ 258.137612] netlink: 16 bytes leftover after parsing attributes in process `syz-executor7'. 00:15:28 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x10, 0x3, 0x6) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a00093eff00001d85680c1ba3a20400ff7e280000001100ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 00:15:28 executing program 2: r0 = socket$inet(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0) [ 258.139235] cgroup_mkdir+0x876/0x1150 [ 258.139260] ? cgroup_destroy_locked+0x7d0/0x7d0 [ 258.139277] ? put_itimerspec64+0x310/0x310 [ 258.139296] ? set_nlink+0xaf/0x140 [ 258.164299] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 258.169848] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 258.175389] ? kernfs_get_active+0xb2/0x120 [ 258.179713] ? cgroup_destroy_locked+0x7d0/0x7d0 [ 258.184471] kernfs_iop_mkdir+0x159/0x1e0 [ 258.188622] ? getname_flags+0xd0/0x5a0 [ 258.192597] vfs_mkdir+0x42e/0x6b0 [ 258.196141] do_mkdirat+0x266/0x2f0 [ 258.199776] ? __ia32_sys_mknod+0xb0/0xb0 [ 258.203931] ? do_syscall_64+0x92/0x800 [ 258.207913] __x64_sys_mkdir+0x5c/0x80 [ 258.211804] do_syscall_64+0x1b1/0x800 [ 258.213922] netlink: 16 bytes leftover after parsing attributes in process `syz-executor7'. [ 258.215695] ? finish_task_switch+0x1ca/0x840 [ 258.215715] ? syscall_return_slowpath+0x5c0/0x5c0 [ 258.215733] ? syscall_return_slowpath+0x30f/0x5c0 [ 258.215752] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 258.215770] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 258.248773] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 258.253982] RIP: 0033:0x4559f9 [ 258.257161] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 258.276517] RSP: 002b:00007fa94af69c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 258.284230] RAX: ffffffffffffffda RBX: 00007fa94af6a6d4 RCX: 00000000004559f9 [ 258.291498] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000100 [ 258.298773] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 258.306042] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 258.313309] R13: 00000000004bae54 R14: 00000000004cead0 R15: 000000000000003f [ 258.320824] cgroup: cgroup_addrm_files: failed to add weight, err=-12 00:15:29 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x10, 0x3, 0x6) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009020400001d85680c1ba3a20400ff7e280000001100ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 00:15:29 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) write$rdma_cm(r1, &(0x7f0000000640)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f00000004c0)}}, 0x10) close(r1) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0x6e) listen(r4, 0x0) connect$unix(r3, &(0x7f0000932000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) tkill(r2, 0x1000000000016) 00:15:29 executing program 6 (fault-call:8 fault-nth:64): r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="295ed277a4200100360070") mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) rmdir(&(0x7f0000000340)='./file0//ile0\x00') r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) fstat(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r2) mkdir(&(0x7f0000000100)='./file0//ile0\x00', 0x0) 00:15:29 executing program 2: r0 = socket$inet(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0) 00:15:29 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f760070") sendmsg$nl_xfrm(r0, &(0x7f0000001440)={&(0x7f0000000000)={0x10, 0x4170000}, 0x349, &(0x7f0000001400)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x4000000, 0x0, {{@in=@multicast1=0xe0000001, @in6=@mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x0, 0x0, 0x0, 0xa, 0xfffffff0, 0xf0ffffffffffff}}}, 0xb8}, 0x1}, 0x0) 00:15:29 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) write$rdma_cm(r0, &(0x7f0000000640)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f00000004c0)}}, 0x10) close(r0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0x6e) listen(r3, 0x0) connect$unix(r2, &(0x7f0000932000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) tkill(r1, 0x1000000000016) 00:15:29 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[0xfeffffff], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) r2 = socket(0x11, 0x100000803, 0x0) r3 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={"6966623000faffffffffffffff00", 0x12}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'ifb0\x00', 0xa201}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x49, &(0x7f0000000080)={@dev={0xfe, 0x80}, 0x0, 0x0, 0x2}, 0x20) 00:15:29 executing program 4: pipe2(&(0x7f0000989000)={0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) mount(&(0x7f0000434ff8)='./file0\x00', &(0x7f0000abf000)='./file0\x00', &(0x7f0000f4c000)='jfs\x00', 0x1023402, 0x0) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000001200), 0x3000, &(0x7f0000001280)) unlink(&(0x7f00003b3000)='./file0\x00') dup2(r0, r1) [ 259.311585] netlink: 16 bytes leftover after parsing attributes in process `syz-executor7'. [ 259.314988] FAULT_INJECTION: forcing a failure. [ 259.314988] name failslab, interval 1, probability 0, space 0, times 0 [ 259.331406] CPU: 0 PID: 16372 Comm: syz-executor6 Not tainted 4.17.0+ #89 [ 259.338333] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 259.347686] Call Trace: [ 259.350284] dump_stack+0x1b9/0x294 [ 259.353923] ? dump_stack_print_info.cold.2+0x52/0x52 00:15:30 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f760070") sendmsg$nl_xfrm(r0, &(0x7f0000001440)={&(0x7f0000000000)={0x10, 0x4170000}, 0x349, &(0x7f0000001400)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0xf000000, 0x0, {{@in=@multicast1=0xe0000001, @in6=@mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x0, 0x0, 0x0, 0xa, 0xfffffff0, 0xf0ffffffffffff}}}, 0xb8}, 0x1}, 0x0) 00:15:30 executing program 2: r0 = socket$inet(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0) 00:15:30 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x10, 0x3, 0x6) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009030400001d85680c1ba3a20400ff7e280000001100ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) [ 259.359119] ? __save_stack_trace+0x7e/0xd0 [ 259.363453] should_fail.cold.4+0xa/0x1a [ 259.367528] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 259.372643] ? graph_lock+0x170/0x170 [ 259.376448] ? graph_lock+0x170/0x170 [ 259.380262] ? find_held_lock+0x36/0x1c0 [ 259.384333] ? __lock_is_held+0xb5/0x140 [ 259.388415] ? check_same_owner+0x320/0x320 [ 259.392749] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 259.397773] ? rcu_note_context_switch+0x710/0x710 [ 259.402722] __should_failslab+0x124/0x180 [ 259.406970] should_failslab+0x9/0x14 [ 259.410780] __kmalloc_track_caller+0x2c4/0x760 [ 259.415457] ? string+0x21d/0x2c0 [ 259.418970] ? kstrdup_const+0x66/0x80 [ 259.422967] kstrdup+0x39/0x70 [ 259.426169] kstrdup_const+0x66/0x80 [ 259.429891] __kernfs_new_node+0xa8/0x580 [ 259.434050] ? kernfs_dop_revalidate+0x3c0/0x3c0 [ 259.438819] ? pointer+0x930/0x930 [ 259.442372] ? graph_lock+0x170/0x170 [ 259.446180] ? snprintf+0xa5/0xd0 [ 259.449635] ? vsprintf+0x40/0x40 [ 259.449681] netlink: 16 bytes leftover after parsing attributes in process `syz-executor7'. 00:15:30 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f760070") sendmsg$nl_xfrm(r0, &(0x7f0000001440)={&(0x7f0000000000)={0x10, 0x4170000}, 0x349, &(0x7f0000001400)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0xf0, 0x0, {{@in=@multicast1=0xe0000001, @in6=@mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x0, 0x0, 0x0, 0xa, 0xfffffff0, 0xf0ffffffffffff}}}, 0xb8}, 0x1}, 0x0) [ 259.453083] ? cgroup_kn_set_ugid+0x2cb/0x370 [ 259.453103] kernfs_new_node+0x80/0xf0 [ 259.453123] __kernfs_create_file+0x4d/0x330 [ 259.453141] cgroup_addrm_files+0x437/0xb20 [ 259.453164] ? cgroup_css.part.14+0x1f0/0x1f0 [ 259.453178] ? find_held_lock+0x36/0x1c0 [ 259.453206] ? __lock_is_held+0xb5/0x140 [ 259.491312] ? kasan_check_write+0x14/0x20 [ 259.495548] ? online_css+0x265/0x330 [ 259.499356] css_populate_dir+0x1a9/0x470 [ 259.503514] cgroup_apply_control_enable+0x449/0xe80 00:15:30 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x10, 0x3, 0x6) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009080400001d85680c1ba3a20400ff7e280000001100ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 00:15:30 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f760070") sendmsg$nl_xfrm(r0, &(0x7f0000001440)={&(0x7f0000000000)={0x10, 0x4170000}, 0x349, &(0x7f0000001400)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x0, 0xfcffffff, {{@in=@multicast1=0xe0000001, @in6=@mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x0, 0x0, 0x0, 0xa, 0xfffffff0, 0xf0ffffffffffff}}}, 0xb8}, 0x1}, 0x0) [ 259.508633] ? cgroup_save_control+0x260/0x260 [ 259.513220] ? mutex_unlock+0xd/0x10 [ 259.516935] ? kernfs_setattr+0x39/0x40 [ 259.520914] ? cgroup_kn_set_ugid+0x2cb/0x370 [ 259.525409] ? cgroup_file_name+0x1f0/0x1f0 [ 259.529745] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 259.535283] ? css_populate_dir+0x2a1/0x470 [ 259.539614] cgroup_mkdir+0x876/0x1150 [ 259.543520] ? cgroup_destroy_locked+0x7d0/0x7d0 [ 259.548283] ? put_itimerspec64+0x310/0x310 [ 259.552610] ? set_nlink+0xaf/0x140 [ 259.556242] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 259.561783] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 259.567322] ? kernfs_get_active+0xb2/0x120 [ 259.570191] netlink: 16 bytes leftover after parsing attributes in process `syz-executor7'. [ 259.571663] ? cgroup_destroy_locked+0x7d0/0x7d0 [ 259.571682] kernfs_iop_mkdir+0x159/0x1e0 [ 259.571711] ? getname_flags+0xd0/0x5a0 [ 259.571728] vfs_mkdir+0x42e/0x6b0 [ 259.571747] do_mkdirat+0x266/0x2f0 [ 259.571763] ? __ia32_sys_mknod+0xb0/0xb0 [ 259.571785] ? do_syscall_64+0x92/0x800 [ 259.608317] __x64_sys_mkdir+0x5c/0x80 00:15:30 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x10, 0x3, 0x6) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000001100ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) [ 259.612205] do_syscall_64+0x1b1/0x800 [ 259.616093] ? finish_task_switch+0x1ca/0x840 [ 259.620593] ? syscall_return_slowpath+0x5c0/0x5c0 [ 259.625534] ? syscall_return_slowpath+0x30f/0x5c0 [ 259.630468] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 259.635839] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 259.640697] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 259.645888] RIP: 0033:0x4559f9 00:15:30 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f760070") sendmsg$nl_xfrm(r0, &(0x7f0000001440)={&(0x7f0000000000)={0x10, 0x4170000}, 0x349, &(0x7f0000001400)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x0, 0xf0ffff, {{@in=@multicast1=0xe0000001, @in6=@mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x0, 0x0, 0x0, 0xa, 0xfffffff0, 0xf0ffffffffffff}}}, 0xb8}, 0x1}, 0x0) [ 259.649067] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 259.668426] RSP: 002b:00007fa94af69c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 259.676225] RAX: ffffffffffffffda RBX: 00007fa94af6a6d4 RCX: 00000000004559f9 [ 259.683491] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000100 [ 259.690760] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 259.698028] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 259.705296] R13: 00000000004bae54 R14: 00000000004cead0 R15: 0000000000000040 00:15:30 executing program 2: r0 = socket$inet(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0) [ 259.712770] cgroup: cgroup_addrm_files: failed to add weight, err=-12 00:15:30 executing program 6 (fault-call:8 fault-nth:65): r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="295ed277a4200100360070") mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) rmdir(&(0x7f0000000340)='./file0//ile0\x00') r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) fstat(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r2) mkdir(&(0x7f0000000100)='./file0//ile0\x00', 0x0) 00:15:30 executing program 2: r0 = socket$inet(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0) 00:15:30 executing program 2: r0 = socket$inet(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0) [ 260.031322] FAULT_INJECTION: forcing a failure. [ 260.031322] name failslab, interval 1, probability 0, space 0, times 0 [ 260.042611] CPU: 1 PID: 16427 Comm: syz-executor6 Not tainted 4.17.0+ #89 [ 260.049539] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 260.058896] Call Trace: [ 260.061496] dump_stack+0x1b9/0x294 [ 260.065137] ? dump_stack_print_info.cold.2+0x52/0x52 [ 260.070338] ? check_same_owner+0x320/0x320 [ 260.074674] ? mutex_trylock+0x2a0/0x2a0 [ 260.078742] should_fail.cold.4+0xa/0x1a [ 260.082792] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 260.087882] ? __mutex_lock+0x7d9/0x17f0 [ 260.091942] ? graph_lock+0x170/0x170 [ 260.095736] ? kernfs_setattr+0x20/0x40 [ 260.099707] ? graph_lock+0x170/0x170 [ 260.103501] ? find_held_lock+0x36/0x1c0 [ 260.107560] ? __lock_is_held+0xb5/0x140 [ 260.111610] ? check_same_owner+0x320/0x320 [ 260.115919] ? rcu_note_context_switch+0x710/0x710 [ 260.120836] ? lock_downgrade+0x8e0/0x8e0 [ 260.124973] __should_failslab+0x124/0x180 [ 260.129195] should_failslab+0x9/0x14 [ 260.132983] kmem_cache_alloc_trace+0x2cb/0x780 [ 260.137658] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 260.142590] kernfs_iattrs.isra.4+0x123/0x4e0 [ 260.147074] ? ktime_get_real_ts64+0x361/0x510 [ 260.151649] ? kernfs_iop_permission+0xb0/0xb0 [ 260.156242] ? ktime_get_with_offset+0x4a0/0x4a0 [ 260.160990] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 260.166522] __kernfs_setattr+0x57/0x440 [ 260.170580] kernfs_setattr+0x2b/0x40 [ 260.174373] cgroup_kn_set_ugid+0x2c3/0x370 [ 260.178676] ? cgroup_file_name+0x1f0/0x1f0 [ 260.182985] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 260.188510] ? __kernfs_create_file+0x29b/0x330 [ 260.193173] cgroup_addrm_files+0x465/0xb20 [ 260.197521] ? cgroup_css.part.14+0x1f0/0x1f0 [ 260.202022] ? find_held_lock+0x36/0x1c0 [ 260.206086] ? __lock_is_held+0xb5/0x140 [ 260.210141] ? kasan_check_write+0x14/0x20 [ 260.214356] ? online_css+0x265/0x330 [ 260.218244] css_populate_dir+0x1a9/0x470 [ 260.222381] cgroup_apply_control_enable+0x449/0xe80 [ 260.227480] ? cgroup_save_control+0x260/0x260 [ 260.232059] ? mutex_unlock+0xd/0x10 [ 260.235754] ? kernfs_setattr+0x39/0x40 [ 260.239710] ? cgroup_kn_set_ugid+0x2cb/0x370 [ 260.244186] ? cgroup_file_name+0x1f0/0x1f0 [ 260.248491] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 260.254012] ? css_populate_dir+0x2a1/0x470 [ 260.258329] cgroup_mkdir+0x876/0x1150 [ 260.262202] ? cgroup_destroy_locked+0x7d0/0x7d0 [ 260.266948] ? put_itimerspec64+0x310/0x310 [ 260.271263] ? set_nlink+0xaf/0x140 [ 260.274874] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 260.280393] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 260.285913] ? kernfs_get_active+0xb2/0x120 [ 260.290219] ? cgroup_destroy_locked+0x7d0/0x7d0 [ 260.294957] kernfs_iop_mkdir+0x159/0x1e0 [ 260.299095] ? getname_flags+0xd0/0x5a0 [ 260.303068] vfs_mkdir+0x42e/0x6b0 [ 260.306593] do_mkdirat+0x266/0x2f0 [ 260.310216] ? __ia32_sys_mknod+0xb0/0xb0 [ 260.314353] ? do_syscall_64+0x92/0x800 [ 260.318308] __x64_sys_mkdir+0x5c/0x80 [ 260.322178] do_syscall_64+0x1b1/0x800 [ 260.326057] ? finish_task_switch+0x1ca/0x840 [ 260.330541] ? syscall_return_slowpath+0x5c0/0x5c0 [ 260.335452] ? syscall_return_slowpath+0x30f/0x5c0 [ 260.340366] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 260.345741] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 260.350581] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 260.355760] RIP: 0033:0x4559f9 [ 260.358938] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 260.378212] RSP: 002b:00007fa94af69c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 260.385910] RAX: ffffffffffffffda RBX: 00007fa94af6a6d4 RCX: 00000000004559f9 [ 260.393170] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000100 [ 260.400428] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 260.407685] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 260.414937] R13: 00000000004bae54 R14: 00000000004cead0 R15: 0000000000000041 [ 260.422507] cgroup: cgroup_addrm_files: failed to add weight, err=-12 00:15:31 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x10, 0x3, 0x6) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a000900ff3e001d85680c1ba3a20400ff7e280000001100ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 00:15:31 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f760070") sendmsg$nl_xfrm(r0, &(0x7f0000001440)={&(0x7f0000000000)={0x10, 0x4170000}, 0x349, &(0x7f0000001400)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x0, 0xa002, {{@in=@multicast1=0xe0000001, @in6=@mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x0, 0x0, 0x0, 0xa, 0xfffffff0, 0xf0ffffffffffff}}}, 0xb8}, 0x1}, 0x0) 00:15:31 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[0xfeffffff], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) r2 = socket(0x11, 0x100000803, 0x0) r3 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={"6966623000faffffffffffffff00", 0x12}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'ifb0\x00', 0xa201}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x1c, &(0x7f0000000080)={@dev={0xfe, 0x80}, 0x0, 0x0, 0x2}, 0x20) 00:15:31 executing program 6 (fault-call:8 fault-nth:66): r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="295ed277a4200100360070") mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) rmdir(&(0x7f0000000340)='./file0//ile0\x00') r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) fstat(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r2) mkdir(&(0x7f0000000100)='./file0//ile0\x00', 0x0) 00:15:31 executing program 4: pipe2(&(0x7f0000989000)={0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) mount(&(0x7f0000434ff8)='./file0\x00', &(0x7f0000abf000)='./file0\x00', &(0x7f0000f4c000)='jfs\x00', 0x1023402, 0x0) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000001200), 0x3000, &(0x7f0000001280)) unlink(&(0x7f00003b3000)='./file0\x00') dup2(r0, r1) 00:15:31 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) write$rdma_cm(r0, &(0x7f0000000640)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f00000004c0)}}, 0x10) close(r0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0x6e) listen(r3, 0x0) connect$unix(r2, &(0x7f0000932000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) tkill(r1, 0x1000000000016) 00:15:31 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) write$rdma_cm(r1, &(0x7f0000000640)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f00000004c0)}}, 0x10) close(r1) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0x6e) listen(r4, 0x0) connect$unix(r3, &(0x7f0000932000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) tkill(r2, 0x1000000000016) 00:15:31 executing program 2: r0 = socket$inet(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0) 00:15:31 executing program 2: r0 = socket$inet(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0) [ 260.759514] FAULT_INJECTION: forcing a failure. [ 260.759514] name failslab, interval 1, probability 0, space 0, times 0 [ 260.770906] CPU: 0 PID: 16461 Comm: syz-executor6 Not tainted 4.17.0+ #89 [ 260.777841] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 260.787192] Call Trace: [ 260.789787] dump_stack+0x1b9/0x294 [ 260.793430] ? dump_stack_print_info.cold.2+0x52/0x52 [ 260.798642] ? __save_stack_trace+0x7e/0xd0 [ 260.802988] should_fail.cold.4+0xa/0x1a 00:15:31 executing program 2: r0 = socket$inet(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0) [ 260.807063] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 260.812174] ? graph_lock+0x170/0x170 [ 260.815980] ? graph_lock+0x170/0x170 [ 260.819798] ? find_held_lock+0x36/0x1c0 [ 260.823870] ? __lock_is_held+0xb5/0x140 [ 260.827950] ? check_same_owner+0x320/0x320 [ 260.832276] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 260.837322] ? rcu_note_context_switch+0x710/0x710 [ 260.842268] __should_failslab+0x124/0x180 [ 260.846512] should_failslab+0x9/0x14 [ 260.850316] __kmalloc_track_caller+0x2c4/0x760 [ 260.854990] ? string+0x21d/0x2c0 00:15:31 executing program 2: r0 = socket$inet(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0) 00:15:31 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f760070") sendmsg$nl_xfrm(r0, &(0x7f0000001440)={&(0x7f0000000000)={0x10, 0x4170000}, 0x349, &(0x7f0000001400)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x0, 0x100000000000000, {{@in=@multicast1=0xe0000001, @in6=@mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x0, 0x0, 0x0, 0xa, 0xfffffff0, 0xf0ffffffffffff}}}, 0xb8}, 0x1}, 0x0) [ 260.858449] ? kstrdup_const+0x66/0x80 [ 260.862345] kstrdup+0x39/0x70 [ 260.865543] kstrdup_const+0x66/0x80 [ 260.869262] __kernfs_new_node+0xa8/0x580 [ 260.873420] ? kernfs_dop_revalidate+0x3c0/0x3c0 [ 260.878186] ? pointer+0x930/0x930 [ 260.881735] ? graph_lock+0x170/0x170 [ 260.885552] ? snprintf+0xa5/0xd0 [ 260.889022] ? vsprintf+0x40/0x40 [ 260.892479] ? cgroup_kn_set_ugid+0x2cb/0x370 [ 260.896987] kernfs_new_node+0x80/0xf0 [ 260.900888] __kernfs_create_file+0x4d/0x330 [ 260.905310] cgroup_addrm_files+0x437/0xb20 [ 260.909650] ? cgroup_css.part.14+0x1f0/0x1f0 [ 260.914154] ? find_held_lock+0x36/0x1c0 [ 260.918237] ? __lock_is_held+0xb5/0x140 [ 260.922316] ? kasan_check_write+0x14/0x20 [ 260.926559] ? online_css+0x265/0x330 [ 260.930377] css_populate_dir+0x1a9/0x470 [ 260.934537] cgroup_apply_control_enable+0x449/0xe80 [ 260.939654] ? cgroup_save_control+0x260/0x260 [ 260.944244] ? mutex_unlock+0xd/0x10 [ 260.947962] ? kernfs_setattr+0x39/0x40 [ 260.951931] ? cgroup_kn_set_ugid+0x2cb/0x370 [ 260.956424] ? cgroup_file_name+0x1f0/0x1f0 [ 260.960757] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 260.966296] ? css_populate_dir+0x2a1/0x470 [ 260.970623] cgroup_mkdir+0x876/0x1150 [ 260.974522] ? cgroup_destroy_locked+0x7d0/0x7d0 [ 260.979283] ? put_itimerspec64+0x310/0x310 [ 260.983609] ? set_nlink+0xaf/0x140 [ 260.987235] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 260.992780] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 260.998316] ? kernfs_get_active+0xb2/0x120 [ 261.002643] ? cgroup_destroy_locked+0x7d0/0x7d0 [ 261.007404] kernfs_iop_mkdir+0x159/0x1e0 [ 261.011554] ? getname_flags+0xd0/0x5a0 [ 261.015542] vfs_mkdir+0x42e/0x6b0 [ 261.019088] do_mkdirat+0x266/0x2f0 [ 261.022708] ? __ia32_sys_mknod+0xb0/0xb0 [ 261.026851] ? do_syscall_64+0x92/0x800 [ 261.030810] __x64_sys_mkdir+0x5c/0x80 [ 261.034679] do_syscall_64+0x1b1/0x800 [ 261.038548] ? finish_task_switch+0x1ca/0x840 [ 261.043040] ? syscall_return_slowpath+0x5c0/0x5c0 [ 261.047952] ? syscall_return_slowpath+0x30f/0x5c0 [ 261.052869] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 261.058215] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 261.063054] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 261.068232] RIP: 0033:0x4559f9 [ 261.071398] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 261.090581] RSP: 002b:00007fa94af69c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 261.098276] RAX: ffffffffffffffda RBX: 00007fa94af6a6d4 RCX: 00000000004559f9 [ 261.105527] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000100 [ 261.112775] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 261.120032] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 261.127306] R13: 00000000004bae54 R14: 00000000004cead0 R15: 0000000000000042 [ 261.134716] cgroup: cgroup_addrm_files: failed to add bfq.weight, err=-12 00:15:32 executing program 2: r0 = socket$inet(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0) 00:15:32 executing program 4: pipe2(&(0x7f0000989000)={0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) mount(&(0x7f0000434ff8)='./file0\x00', &(0x7f0000abf000)='./file0\x00', &(0x7f0000f4c000)='jfs\x00', 0x1023402, 0x0) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000001200), 0x3000, &(0x7f0000001280)) unlink(&(0x7f00003b3000)='./file0\x00') dup2(r0, r1) 00:15:32 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f760070") sendmsg$nl_xfrm(r0, &(0x7f0000001440)={&(0x7f0000000000)={0x10, 0x4170000}, 0x349, &(0x7f0000001400)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x0, 0xa002000000000000, {{@in=@multicast1=0xe0000001, @in6=@mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x0, 0x0, 0x0, 0xa, 0xfffffff0, 0xf0ffffffffffff}}}, 0xb8}, 0x1}, 0x0) 00:15:32 executing program 6 (fault-call:8 fault-nth:67): r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="295ed277a4200100360070") mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) rmdir(&(0x7f0000000340)='./file0//ile0\x00') r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) fstat(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r2) mkdir(&(0x7f0000000100)='./file0//ile0\x00', 0x0) 00:15:32 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x10, 0x3, 0x6) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000405001d85680c1ba3a20400ff7e280000001100ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 00:15:32 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[0xfeffffff], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) r2 = socket(0x11, 0x100000803, 0x0) r3 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={"6966623000faffffffffffffff00", 0x12}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'ifb0\x00', 0xa201}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x1a, &(0x7f0000000080)={@dev={0xfe, 0x80}, 0x0, 0x0, 0x2}, 0x20) 00:15:32 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) write$rdma_cm(r0, &(0x7f0000000640)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f00000004c0)}}, 0x10) close(r0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0x6e) listen(r3, 0x0) connect$unix(r2, &(0x7f0000932000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) tkill(r1, 0x1000000000016) 00:15:32 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) write$rdma_cm(r1, &(0x7f0000000640)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f00000004c0)}}, 0x10) close(r1) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0x6e) listen(r4, 0x0) connect$unix(r3, &(0x7f0000932000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) tkill(r2, 0x1000000000016) 00:15:32 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x10, 0x3, 0x6) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a00090004000a1d85680c1ba3a20400ff7e280000001100ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 00:15:32 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f760070") sendmsg$nl_xfrm(r0, &(0x7f0000001440)={&(0x7f0000000000)={0x10, 0x4170000}, 0x349, &(0x7f0000001400)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x0, 0x3000000, {{@in=@multicast1=0xe0000001, @in6=@mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x0, 0x0, 0x0, 0xa, 0xfffffff0, 0xf0ffffffffffff}}}, 0xb8}, 0x1}, 0x0) 00:15:32 executing program 2: r0 = socket$inet(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0) [ 262.162202] FAULT_INJECTION: forcing a failure. [ 262.162202] name failslab, interval 1, probability 0, space 0, times 0 [ 262.173541] CPU: 0 PID: 16518 Comm: syz-executor6 Not tainted 4.17.0+ #89 [ 262.180478] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 262.189829] Call Trace: [ 262.192425] dump_stack+0x1b9/0x294 [ 262.196071] ? dump_stack_print_info.cold.2+0x52/0x52 [ 262.201282] should_fail.cold.4+0xa/0x1a [ 262.205355] ? __kmalloc_track_caller+0x14a/0x760 [ 262.210211] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 262.215328] ? cgroup_mkdir+0x876/0x1150 [ 262.219397] ? kernfs_iop_mkdir+0x159/0x1e0 [ 262.223724] ? vfs_mkdir+0x42e/0x6b0 [ 262.227440] ? do_mkdirat+0x266/0x2f0 [ 262.231251] ? __x64_sys_mkdir+0x5c/0x80 [ 262.235322] ? do_syscall_64+0x1b1/0x800 [ 262.239394] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 262.244766] ? graph_lock+0x170/0x170 [ 262.248574] ? find_held_lock+0x36/0x1c0 [ 262.252646] ? print_usage_bug+0xc0/0xc0 [ 262.256719] ? find_held_lock+0x36/0x1c0 00:15:32 executing program 2: r0 = socket$inet(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0) 00:15:32 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x10, 0x3, 0x6) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400281d85680c1ba3a20400ff7e280000001100ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) [ 262.260793] ? __lock_is_held+0xb5/0x140 [ 262.264870] ? check_same_owner+0x320/0x320 [ 262.269196] ? rcu_note_context_switch+0x710/0x710 [ 262.274132] ? rcu_read_lock_sched_held+0x108/0x120 [ 262.279156] __should_failslab+0x124/0x180 [ 262.283398] should_failslab+0x9/0x14 [ 262.287207] kmem_cache_alloc+0x2af/0x760 [ 262.291361] ? memcpy+0x45/0x50 [ 262.294650] ? kstrdup+0x59/0x70 [ 262.298089] __kernfs_new_node+0xe7/0x580 [ 262.302245] ? kernfs_dop_revalidate+0x3c0/0x3c0 [ 262.307008] ? pointer+0x930/0x930 00:15:33 executing program 2: r0 = socket$inet(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0) [ 262.310560] ? graph_lock+0x170/0x170 [ 262.314376] ? snprintf+0xa5/0xd0 [ 262.317837] ? vsprintf+0x40/0x40 [ 262.321382] ? cgroup_kn_set_ugid+0x2cb/0x370 [ 262.325891] kernfs_new_node+0x80/0xf0 [ 262.329792] __kernfs_create_file+0x4d/0x330 [ 262.334209] cgroup_addrm_files+0x437/0xb20 [ 262.338542] ? cgroup_css.part.14+0x1f0/0x1f0 [ 262.343043] ? find_held_lock+0x36/0x1c0 [ 262.347124] ? __lock_is_held+0xb5/0x140 [ 262.351203] ? kasan_check_write+0x14/0x20 [ 262.355443] ? online_css+0x265/0x330 00:15:33 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x10, 0x3, 0x6) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a00090004000b1d85680c1ba3a20400ff7e280000001100ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 00:15:33 executing program 2: r0 = socket$inet(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0) [ 262.359252] css_populate_dir+0x1a9/0x470 [ 262.363408] cgroup_apply_control_enable+0x449/0xe80 [ 262.368524] ? cgroup_save_control+0x260/0x260 [ 262.373110] ? mutex_unlock+0xd/0x10 [ 262.377335] ? kernfs_setattr+0x39/0x40 [ 262.381314] ? cgroup_kn_set_ugid+0x2cb/0x370 [ 262.385809] ? cgroup_file_name+0x1f0/0x1f0 [ 262.390143] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 262.395684] ? css_populate_dir+0x2a1/0x470 [ 262.400013] cgroup_mkdir+0x876/0x1150 [ 262.403912] ? cgroup_destroy_locked+0x7d0/0x7d0 [ 262.408671] ? put_itimerspec64+0x310/0x310 00:15:33 executing program 2: r0 = socket$inet(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0) [ 262.412996] ? set_nlink+0xaf/0x140 [ 262.416627] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 262.422172] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 262.427712] ? kernfs_get_active+0xb2/0x120 [ 262.432037] ? cgroup_destroy_locked+0x7d0/0x7d0 [ 262.436798] kernfs_iop_mkdir+0x159/0x1e0 [ 262.440950] ? getname_flags+0xd0/0x5a0 [ 262.444938] vfs_mkdir+0x42e/0x6b0 [ 262.448486] do_mkdirat+0x266/0x2f0 [ 262.452118] ? __ia32_sys_mknod+0xb0/0xb0 [ 262.456276] ? do_syscall_64+0x92/0x800 [ 262.460258] __x64_sys_mkdir+0x5c/0x80 [ 262.464149] do_syscall_64+0x1b1/0x800 [ 262.468040] ? finish_task_switch+0x1ca/0x840 [ 262.472540] ? syscall_return_slowpath+0x5c0/0x5c0 [ 262.477476] ? syscall_return_slowpath+0x30f/0x5c0 [ 262.482416] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 262.487795] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 262.492652] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 262.497838] RIP: 0033:0x4559f9 [ 262.501021] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 262.520387] RSP: 002b:00007fa94af69c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 262.528109] RAX: ffffffffffffffda RBX: 00007fa94af6a6d4 RCX: 00000000004559f9 [ 262.535378] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000100 [ 262.542646] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 262.549924] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 262.557182] R13: 00000000004bae54 R14: 00000000004cead0 R15: 0000000000000043 [ 262.564672] cgroup: cgroup_addrm_files: failed to add bfq.weight, err=-12 00:15:33 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x10, 0x3, 0x6) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400051d85680c1ba3a20400ff7e280000001100ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 00:15:33 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) write$rdma_cm(r0, &(0x7f0000000640)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f00000004c0)}}, 0x10) close(r0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0x6e) listen(r3, 0x0) connect$unix(r2, &(0x7f0000932000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) tkill(r1, 0x1000000000016) 00:15:33 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) write$rdma_cm(r1, &(0x7f0000000640)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f00000004c0)}}, 0x10) close(r1) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0x6e) listen(r4, 0x0) connect$unix(r3, &(0x7f0000932000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) tkill(r2, 0x1000000000016) 00:15:33 executing program 4: pipe2(&(0x7f0000989000)={0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) mount(&(0x7f0000434ff8)='./file0\x00', &(0x7f0000abf000)='./file0\x00', &(0x7f0000f4c000)='jfs\x00', 0x1023402, 0x0) syz_mount_image$vfat(&(0x7f0000000040)='vfatp', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000001200), 0x3000, &(0x7f0000001280)) unlink(&(0x7f00003b3000)='./file0\x00') dup2(r0, r1) 00:15:33 executing program 6 (fault-call:8 fault-nth:68): r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="295ed277a4200100360070") mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) rmdir(&(0x7f0000000340)='./file0//ile0\x00') r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) fstat(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r2) mkdir(&(0x7f0000000100)='./file0//ile0\x00', 0x0) 00:15:33 executing program 2: r0 = socket$inet(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0) 00:15:33 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f760070") sendmsg$nl_xfrm(r0, &(0x7f0000001440)={&(0x7f0000000000)={0x10, 0x4170000}, 0x349, &(0x7f0000001400)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x0, 0xa0020000, {{@in=@multicast1=0xe0000001, @in6=@mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x0, 0x0, 0x0, 0xa, 0xfffffff0, 0xf0ffffffffffff}}}, 0xb8}, 0x1}, 0x0) 00:15:33 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[0xfeffffff], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) r2 = socket(0x11, 0x100000803, 0x0) r3 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={"6966623000faffffffffffffff00", 0x12}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'ifb0\x00', 0xa201}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x2f, &(0x7f0000000080)={@dev={0xfe, 0x80}, 0x0, 0x0, 0x2}, 0x20) 00:15:33 executing program 2: r0 = socket$inet(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0) 00:15:33 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x10, 0x3, 0x6) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a00090004018a1d85680c1ba3a20400ff7e280000001100ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 00:15:33 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f760070") sendmsg$nl_xfrm(r0, &(0x7f0000001440)={&(0x7f0000000000)={0x10, 0x4170000}, 0x349, &(0x7f0000001400)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x0, 0x4000000, {{@in=@multicast1=0xe0000001, @in6=@mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x0, 0x0, 0x0, 0xa, 0xfffffff0, 0xf0ffffffffffff}}}, 0xb8}, 0x1}, 0x0) [ 263.176718] FAULT_INJECTION: forcing a failure. [ 263.176718] name failslab, interval 1, probability 0, space 0, times 0 [ 263.188086] CPU: 0 PID: 16597 Comm: syz-executor6 Not tainted 4.17.0+ #89 [ 263.195017] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 263.204380] Call Trace: [ 263.206984] dump_stack+0x1b9/0x294 [ 263.210632] ? dump_stack_print_info.cold.2+0x52/0x52 [ 263.215843] should_fail.cold.4+0xa/0x1a [ 263.219914] ? __kmalloc_track_caller+0x14a/0x760 [ 263.224776] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 263.229892] ? cgroup_mkdir+0x876/0x1150 [ 263.234047] ? kernfs_iop_mkdir+0x159/0x1e0 [ 263.238397] ? vfs_mkdir+0x42e/0x6b0 [ 263.242117] ? do_mkdirat+0x266/0x2f0 [ 263.245922] ? __x64_sys_mkdir+0x5c/0x80 [ 263.249993] ? do_syscall_64+0x1b1/0x800 [ 263.254062] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 263.259431] ? graph_lock+0x170/0x170 [ 263.263238] ? find_held_lock+0x36/0x1c0 [ 263.267311] ? print_usage_bug+0xc0/0xc0 [ 263.271406] ? find_held_lock+0x36/0x1c0 00:15:33 executing program 2: r0 = socket$inet(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0) 00:15:33 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x10, 0x3, 0x6) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000409001d85680c1ba3a20400ff7e280000001100ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 00:15:33 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f760070") sendmsg$nl_xfrm(r0, &(0x7f0000001440)={&(0x7f0000000000)={0x10, 0x4170000}, 0x349, &(0x7f0000001400)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x0, 0xf000, {{@in=@multicast1=0xe0000001, @in6=@mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x0, 0x0, 0x0, 0xa, 0xfffffff0, 0xf0ffffffffffff}}}, 0xb8}, 0x1}, 0x0) [ 263.275476] ? __lock_is_held+0xb5/0x140 [ 263.279550] ? check_same_owner+0x320/0x320 [ 263.283878] ? rcu_note_context_switch+0x710/0x710 [ 263.288816] ? rcu_read_lock_sched_held+0x108/0x120 [ 263.293845] __should_failslab+0x124/0x180 [ 263.298086] should_failslab+0x9/0x14 [ 263.301893] kmem_cache_alloc+0x2af/0x760 [ 263.306042] ? memcpy+0x45/0x50 [ 263.309326] ? kstrdup+0x59/0x70 [ 263.312705] __kernfs_new_node+0xe7/0x580 [ 263.316859] ? kernfs_dop_revalidate+0x3c0/0x3c0 [ 263.321623] ? pointer+0x930/0x930 [ 263.325175] ? graph_lock+0x170/0x170 [ 263.328989] ? snprintf+0xa5/0xd0 [ 263.332451] ? vsprintf+0x40/0x40 [ 263.335913] ? cgroup_kn_set_ugid+0x2cb/0x370 [ 263.340421] kernfs_new_node+0x80/0xf0 [ 263.344319] __kernfs_create_file+0x4d/0x330 [ 263.348739] cgroup_addrm_files+0x437/0xb20 [ 263.353074] ? cgroup_css.part.14+0x1f0/0x1f0 [ 263.357570] ? find_held_lock+0x36/0x1c0 [ 263.361645] ? __lock_is_held+0xb5/0x140 [ 263.365808] ? kasan_check_write+0x14/0x20 [ 263.370045] ? online_css+0x265/0x330 00:15:34 executing program 2: r0 = socket$inet(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0) [ 263.373853] css_populate_dir+0x1a9/0x470 [ 263.378016] cgroup_apply_control_enable+0x449/0xe80 [ 263.383134] ? cgroup_save_control+0x260/0x260 [ 263.387720] ? mutex_unlock+0xd/0x10 [ 263.391437] ? kernfs_setattr+0x39/0x40 [ 263.395413] ? cgroup_kn_set_ugid+0x2cb/0x370 [ 263.399910] ? cgroup_file_name+0x1f0/0x1f0 [ 263.404242] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 263.409778] ? css_populate_dir+0x2a1/0x470 [ 263.414115] cgroup_mkdir+0x876/0x1150 [ 263.418012] ? cgroup_destroy_locked+0x7d0/0x7d0 [ 263.423121] ? put_itimerspec64+0x310/0x310 [ 263.427444] ? set_nlink+0xaf/0x140 [ 263.431077] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 263.436624] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 263.442161] ? kernfs_get_active+0xb2/0x120 [ 263.446487] ? cgroup_destroy_locked+0x7d0/0x7d0 [ 263.451247] kernfs_iop_mkdir+0x159/0x1e0 [ 263.455397] ? getname_flags+0xd0/0x5a0 [ 263.459374] vfs_mkdir+0x42e/0x6b0 [ 263.462930] do_mkdirat+0x266/0x2f0 [ 263.466560] ? __ia32_sys_mknod+0xb0/0xb0 [ 263.470718] ? do_syscall_64+0x92/0x800 [ 263.474698] __x64_sys_mkdir+0x5c/0x80 [ 263.478590] do_syscall_64+0x1b1/0x800 [ 263.482482] ? finish_task_switch+0x1ca/0x840 [ 263.486982] ? syscall_return_slowpath+0x5c0/0x5c0 [ 263.491907] ? syscall_return_slowpath+0x30f/0x5c0 [ 263.496836] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 263.502212] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 263.507068] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 263.512254] RIP: 0033:0x4559f9 [ 263.515443] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 263.534798] RSP: 002b:00007fa94af69c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 263.542505] RAX: ffffffffffffffda RBX: 00007fa94af6a6d4 RCX: 00000000004559f9 [ 263.549770] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000100 [ 263.557031] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 263.564292] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 263.571554] R13: 00000000004bae54 R14: 00000000004cead0 R15: 0000000000000044 [ 263.578938] cgroup: cgroup_addrm_files: failed to add bfq.weight, err=-12 00:15:34 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f760070") sendmsg$nl_xfrm(r0, &(0x7f0000001440)={&(0x7f0000000000)={0x10, 0x4170000}, 0x349, &(0x7f0000001400)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x0, 0xf0, {{@in=@multicast1=0xe0000001, @in6=@mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x0, 0x0, 0x0, 0xa, 0xfffffff0, 0xf0ffffffffffff}}}, 0xb8}, 0x1}, 0x0) 00:15:34 executing program 2: r0 = socket$inet(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0) 00:15:34 executing program 6 (fault-call:8 fault-nth:69): r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="295ed277a4200100360070") mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) rmdir(&(0x7f0000000340)='./file0//ile0\x00') r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) fstat(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r2) mkdir(&(0x7f0000000100)='./file0//ile0\x00', 0x0) 00:15:34 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x10, 0x3, 0x6) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000428001d85680c1ba3a20400ff7e280000001100ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 00:15:34 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[0xfeffffff], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) r2 = socket(0x11, 0x100000803, 0x0) r3 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={"6966623000faffffffffffffff00", 0x12}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'ifb0\x00', 0xa201}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x37, &(0x7f0000000080)={@dev={0xfe, 0x80}, 0x0, 0x0, 0x2}, 0x20) 00:15:34 executing program 4: pipe2(&(0x7f0000989000)={0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) mount(&(0x7f0000434ff8)='./file0\x00', &(0x7f0000abf000)='./file0\x00', &(0x7f0000f4c000)='jfs\x00', 0x1023402, 0x0) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000001200), 0x3000, &(0x7f0000001280)) unlink(&(0x7f00003b3000)='./file0\x00') dup2(r0, r1) 00:15:34 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) write$rdma_cm(r1, &(0x7f0000000640)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f00000004c0)}}, 0x10) close(r1) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0x6e) listen(r4, 0x0) connect$unix(r3, &(0x7f0000932000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) tkill(r2, 0x1000000000016) 00:15:34 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) write$rdma_cm(r0, &(0x7f0000000640)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f00000004c0)}}, 0x10) close(r0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0x6e) listen(r3, 0x0) connect$unix(r2, &(0x7f0000932000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) tkill(r1, 0x1000000000016) 00:15:34 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x10, 0x3, 0x6) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000406001d85680c1ba3a20400ff7e280000001100ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) [ 264.158943] FAULT_INJECTION: forcing a failure. [ 264.158943] name failslab, interval 1, probability 0, space 0, times 0 [ 264.170291] CPU: 1 PID: 16669 Comm: syz-executor6 Not tainted 4.17.0+ #89 [ 264.177214] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 264.186560] Call Trace: [ 264.189156] dump_stack+0x1b9/0x294 [ 264.192846] ? dump_stack_print_info.cold.2+0x52/0x52 [ 264.198050] ? __save_stack_trace+0x7e/0xd0 [ 264.202383] should_fail.cold.4+0xa/0x1a 00:15:34 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x10, 0x3, 0x6) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000410001d85680c1ba3a20400ff7e280000001100ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) [ 264.206454] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 264.211572] ? graph_lock+0x170/0x170 [ 264.215378] ? graph_lock+0x170/0x170 [ 264.219189] ? find_held_lock+0x36/0x1c0 [ 264.223265] ? __lock_is_held+0xb5/0x140 [ 264.227344] ? check_same_owner+0x320/0x320 [ 264.231671] ? kvm_clock_read+0x25/0x30 [ 264.235650] ? rcu_note_context_switch+0x710/0x710 [ 264.240596] __should_failslab+0x124/0x180 [ 264.244840] should_failslab+0x9/0x14 [ 264.248652] __kmalloc+0x2c8/0x760 [ 264.252198] ? kasan_check_write+0x14/0x20 00:15:34 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x10, 0x3, 0x6) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a000900048a011d85680c1ba3a20400ff7e280000001100ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 00:15:34 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x10, 0x3, 0x6) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a00090004000f1d85680c1ba3a20400ff7e280000001100ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) [ 264.256440] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 264.261376] ? mem_cgroup_css_alloc+0x177/0x1a00 [ 264.266142] mem_cgroup_css_alloc+0x177/0x1a00 [ 264.270734] ? setup_cpu_cache+0x1c0/0x1c0 [ 264.274993] ? graph_lock+0x170/0x170 [ 264.278813] ? mutex_unlock+0xd/0x10 [ 264.282539] ? kernfs_setattr+0x39/0x40 [ 264.286526] ? cgroup_kn_set_ugid+0x2cb/0x370 [ 264.291027] ? cgroup_file_name+0x1f0/0x1f0 [ 264.295363] ? __lock_is_held+0xb5/0x140 [ 264.299439] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 264.305006] ? cgroup_addrm_files+0x790/0xb20 00:15:35 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x10, 0x3, 0x6) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a00090004f0001d85680c1ba3a20400ff7e280000001100ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) [ 264.309520] ? graph_lock+0x170/0x170 [ 264.313329] ? cgroup_css.part.14+0x1f0/0x1f0 [ 264.317838] ? find_held_lock+0x36/0x1c0 [ 264.321914] ? graph_lock+0x170/0x170 [ 264.325728] ? __lock_is_held+0xb5/0x140 [ 264.329813] ? __lock_is_held+0xb5/0x140 [ 264.333891] cgroup_apply_control_enable+0x544/0xe80 [ 264.339006] ? cgroup_save_control+0x260/0x260 [ 264.343592] ? mutex_unlock+0xd/0x10 [ 264.347309] ? kernfs_setattr+0x39/0x40 [ 264.351285] ? cgroup_kn_set_ugid+0x2cb/0x370 00:15:35 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x10, 0x3, 0x6) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a00090004003f1d85680c1ba3a20400ff7e280000001100ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) [ 264.355794] ? cgroup_file_name+0x1f0/0x1f0 [ 264.360122] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 264.365662] ? css_populate_dir+0x2a1/0x470 [ 264.369992] cgroup_mkdir+0x876/0x1150 [ 264.373890] ? cgroup_destroy_locked+0x7d0/0x7d0 [ 264.378650] ? put_itimerspec64+0x310/0x310 [ 264.382983] ? set_nlink+0xaf/0x140 [ 264.386618] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 264.392164] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 264.397704] ? kernfs_get_active+0xb2/0x120 [ 264.402090] ? cgroup_destroy_locked+0x7d0/0x7d0 00:15:35 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x10, 0x3, 0x6) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a000900040b001d85680c1ba3a20400ff7e280000001100ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) [ 264.406859] kernfs_iop_mkdir+0x159/0x1e0 [ 264.411010] ? getname_flags+0xd0/0x5a0 [ 264.414990] vfs_mkdir+0x42e/0x6b0 [ 264.418536] do_mkdirat+0x266/0x2f0 [ 264.422168] ? __ia32_sys_mknod+0xb0/0xb0 [ 264.426322] ? do_syscall_64+0x92/0x800 [ 264.430305] __x64_sys_mkdir+0x5c/0x80 [ 264.434196] do_syscall_64+0x1b1/0x800 [ 264.438087] ? finish_task_switch+0x1ca/0x840 [ 264.442588] ? syscall_return_slowpath+0x5c0/0x5c0 [ 264.447522] ? syscall_return_slowpath+0x30f/0x5c0 [ 264.452465] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 264.457839] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 264.462698] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 264.467885] RIP: 0033:0x4559f9 [ 264.471068] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 264.490443] RSP: 002b:00007fa94af69c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 264.498160] RAX: ffffffffffffffda RBX: 00007fa94af6a6d4 RCX: 00000000004559f9 [ 264.505427] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000100 [ 264.512691] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 264.519960] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 264.527233] R13: 00000000004bae54 R14: 00000000004cead0 R15: 0000000000000045 00:15:36 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x10, 0x3, 0x6) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400f01d85680c1ba3a20400ff7e280000001100ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 00:15:36 executing program 2: r0 = socket$inet(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0) 00:15:36 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f760070") sendmsg$nl_xfrm(r0, &(0x7f0000001440)={&(0x7f0000000000)={0x10, 0x4170000}, 0x349, &(0x7f0000001400)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x0, 0xf, {{@in=@multicast1=0xe0000001, @in6=@mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x0, 0x0, 0x0, 0xa, 0xfffffff0, 0xf0ffffffffffff}}}, 0xb8}, 0x1}, 0x0) 00:15:36 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[0xfeffffff], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) r2 = socket(0x11, 0x100000803, 0x0) r3 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={"6966623000faffffffffffffff00", 0x12}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'ifb0\x00', 0xa201}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x10, &(0x7f0000000080)={@dev={0xfe, 0x80}, 0x0, 0x0, 0x2}, 0x20) 00:15:36 executing program 6 (fault-call:8 fault-nth:70): r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="295ed277a4200100360070") mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) rmdir(&(0x7f0000000340)='./file0//ile0\x00') r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) fstat(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r2) mkdir(&(0x7f0000000100)='./file0//ile0\x00', 0x0) 00:15:36 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) write$rdma_cm(r0, &(0x7f0000000640)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f00000004c0)}}, 0x10) close(r0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0x6e) listen(r3, 0x0) connect$unix(r2, &(0x7f0000932000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) tkill(r1, 0x1000000000016) 00:15:36 executing program 4: pipe2(&(0x7f0000989000)={0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) mount(&(0x7f0000434ff8)='./file0\x00', &(0x7f0000abf000)='./file0\x00', &(0x7f0000f4c000)='jfs\x00', 0x1023402, 0x0) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000001200), 0x3000, &(0x7f0000001280)) unlink(&(0x7f00003b3000)='./file0\x00') dup2(r0, r1) 00:15:36 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) write$rdma_cm(r1, &(0x7f0000000640)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f00000004c0)}}, 0x10) close(r1) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0x6e) listen(r4, 0x0) connect$unix(r3, &(0x7f0000932000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) tkill(r2, 0x1000000000016) [ 265.560958] FAULT_INJECTION: forcing a failure. [ 265.560958] name failslab, interval 1, probability 0, space 0, times 0 [ 265.572293] CPU: 0 PID: 16746 Comm: syz-executor6 Not tainted 4.17.0+ #89 [ 265.579222] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 265.588660] Call Trace: [ 265.591263] dump_stack+0x1b9/0x294 [ 265.594909] ? dump_stack_print_info.cold.2+0x52/0x52 [ 265.600113] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 265.605156] should_fail.cold.4+0xa/0x1a [ 265.609229] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 265.614353] ? graph_lock+0x170/0x170 [ 265.618172] ? find_held_lock+0x36/0x1c0 [ 265.622250] ? __lock_is_held+0xb5/0x140 [ 265.626334] ? check_same_owner+0x320/0x320 [ 265.630665] ? rcu_note_context_switch+0x710/0x710 [ 265.635613] __should_failslab+0x124/0x180 [ 265.639858] should_failslab+0x9/0x14 [ 265.643667] kmem_cache_alloc_node_trace+0x26f/0x770 [ 265.648779] ? idr_alloc_u32+0x3d0/0x3d0 [ 265.652847] ? __mutex_unlock_slowpath+0x180/0x8a0 00:15:36 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x10, 0x3, 0x6) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400061d85680c1ba3a20400ff7e280000001100ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 00:15:36 executing program 2: r0 = socket$inet(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0) 00:15:36 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f760070") sendmsg$nl_xfrm(r0, &(0x7f0000001440)={&(0x7f0000000000)={0x10, 0x4170000}, 0x349, &(0x7f0000001400)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x0, 0xfffffffffffff000, {{@in=@multicast1=0xe0000001, @in6=@mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x0, 0x0, 0x0, 0xa, 0xfffffff0, 0xf0ffffffffffff}}}, 0xb8}, 0x1}, 0x0) 00:15:36 executing program 2: r0 = socket$inet(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0) [ 265.657787] mem_cgroup_css_alloc+0x3b5/0x1a00 [ 265.662382] ? setup_cpu_cache+0x1c0/0x1c0 [ 265.666632] ? graph_lock+0x170/0x170 [ 265.670440] ? mutex_unlock+0xd/0x10 [ 265.674165] ? kernfs_setattr+0x39/0x40 [ 265.678155] ? cgroup_kn_set_ugid+0x2cb/0x370 [ 265.682654] ? cgroup_file_name+0x1f0/0x1f0 [ 265.686992] ? __lock_is_held+0xb5/0x140 [ 265.691071] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 265.696615] ? cgroup_addrm_files+0x790/0xb20 [ 265.701120] ? graph_lock+0x170/0x170 [ 265.704929] ? cgroup_css.part.14+0x1f0/0x1f0 00:15:36 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x10, 0x3, 0x6) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000403001d85680c1ba3a20400ff7e280000001100ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 00:15:36 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f760070") sendmsg$nl_xfrm(r0, &(0x7f0000001440)={&(0x7f0000000000)={0x10, 0x4170000}, 0x349, &(0x7f0000001400)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x0, 0xfffff000, {{@in=@multicast1=0xe0000001, @in6=@mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x0, 0x0, 0x0, 0xa, 0xfffffff0, 0xf0ffffffffffff}}}, 0xb8}, 0x1}, 0x0) [ 265.709434] ? find_held_lock+0x36/0x1c0 [ 265.713508] ? graph_lock+0x170/0x170 [ 265.717317] ? __lock_is_held+0xb5/0x140 [ 265.721397] ? __lock_is_held+0xb5/0x140 [ 265.725479] cgroup_apply_control_enable+0x544/0xe80 [ 265.730598] ? cgroup_save_control+0x260/0x260 [ 265.735217] ? mutex_unlock+0xd/0x10 [ 265.738933] ? kernfs_setattr+0x39/0x40 [ 265.742914] ? cgroup_kn_set_ugid+0x2cb/0x370 [ 265.747413] ? cgroup_file_name+0x1f0/0x1f0 [ 265.751741] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 265.757285] ? css_populate_dir+0x2a1/0x470 00:15:36 executing program 2: r0 = socket$inet(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0) 00:15:36 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x10, 0x3, 0x6) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a000900040a001d85680c1ba3a20400ff7e280000001100ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) [ 265.761615] cgroup_mkdir+0x876/0x1150 [ 265.765515] ? cgroup_destroy_locked+0x7d0/0x7d0 [ 265.770275] ? put_itimerspec64+0x310/0x310 [ 265.774605] ? set_nlink+0xaf/0x140 [ 265.778235] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 265.783776] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 265.789318] ? kernfs_get_active+0xb2/0x120 [ 265.793645] ? cgroup_destroy_locked+0x7d0/0x7d0 [ 265.798405] kernfs_iop_mkdir+0x159/0x1e0 [ 265.802553] ? getname_flags+0xd0/0x5a0 [ 265.806528] vfs_mkdir+0x42e/0x6b0 [ 265.810074] do_mkdirat+0x266/0x2f0 [ 265.813710] ? __ia32_sys_mknod+0xb0/0xb0 [ 265.817867] ? do_syscall_64+0x92/0x800 [ 265.821853] __x64_sys_mkdir+0x5c/0x80 [ 265.825747] do_syscall_64+0x1b1/0x800 [ 265.829635] ? finish_task_switch+0x1ca/0x840 [ 265.834143] ? syscall_return_slowpath+0x5c0/0x5c0 [ 265.839084] ? syscall_return_slowpath+0x30f/0x5c0 [ 265.844030] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 265.849400] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 265.854256] entry_SYSCALL_64_after_hwframe+0x49/0xbe 00:15:36 executing program 2: r0 = socket$inet(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0) [ 265.859442] RIP: 0033:0x4559f9 [ 265.862624] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 265.881985] RSP: 002b:00007fa94af69c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 265.889699] RAX: ffffffffffffffda RBX: 00007fa94af6a6d4 RCX: 00000000004559f9 [ 265.896969] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000100 [ 265.904241] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 265.911507] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 265.918773] R13: 00000000004bae54 R14: 00000000004cead0 R15: 0000000000000046 00:15:37 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x10, 0x3, 0x6) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a000900040f001d85680c1ba3a20400ff7e280000001100ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 00:15:37 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) write$rdma_cm(r1, &(0x7f0000000640)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f00000004c0)}}, 0x10) close(r1) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0x6e) listen(r4, 0x0) connect$unix(r3, &(0x7f0000932000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) tkill(r2, 0x1000000000016) 00:15:37 executing program 2: r0 = socket$inet(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0) 00:15:37 executing program 6 (fault-call:8 fault-nth:71): r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="295ed277a4200100360070") mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) rmdir(&(0x7f0000000340)='./file0//ile0\x00') r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) fstat(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r2) mkdir(&(0x7f0000000100)='./file0//ile0\x00', 0x0) 00:15:37 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f760070") sendmsg$nl_xfrm(r0, &(0x7f0000001440)={&(0x7f0000000000)={0x10, 0x4170000}, 0x349, &(0x7f0000001400)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x0, 0x1000000, {{@in=@multicast1=0xe0000001, @in6=@mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x0, 0x0, 0x0, 0xa, 0xfffffff0, 0xf0ffffffffffff}}}, 0xb8}, 0x1}, 0x0) 00:15:37 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[0xfeffffff], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) r2 = socket(0x11, 0x100000803, 0x0) r3 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={"6966623000faffffffffffffff00", 0x12}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'ifb0\x00', 0xa201}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x2b, &(0x7f0000000080)={@dev={0xfe, 0x80}, 0x0, 0x0, 0x2}, 0x20) 00:15:37 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) write$rdma_cm(r0, &(0x7f0000000640)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f00000004c0)}}, 0x10) close(r0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0x6e) listen(r3, 0x0) connect$unix(r2, &(0x7f0000932000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) tkill(r1, 0x1000000000016) 00:15:37 executing program 4: pipe2(&(0x7f0000989000)={0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) mount(&(0x7f0000434ff8)='./file0\x00', &(0x7f0000abf000)='./file0\x00', &(0x7f0000f4c000)='jfs\x00', 0x1023402, 0x0) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000001200), 0x3000, &(0x7f0000001280)) unlink(&(0x7f00003b3000)='./file0\x00') dup2(r0, r1) 00:15:37 executing program 2: r0 = socket$inet(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0) [ 266.650247] FAULT_INJECTION: forcing a failure. [ 266.650247] name failslab, interval 1, probability 0, space 0, times 0 [ 266.661634] CPU: 0 PID: 16809 Comm: syz-executor6 Not tainted 4.17.0+ #89 [ 266.668566] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 266.677921] Call Trace: [ 266.680520] dump_stack+0x1b9/0x294 [ 266.684162] ? dump_stack_print_info.cold.2+0x52/0x52 [ 266.689365] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 266.694397] should_fail.cold.4+0xa/0x1a 00:15:37 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x10, 0x3, 0x6) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400091d85680c1ba3a20400ff7e280000001100ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 00:15:37 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f760070") sendmsg$nl_xfrm(r0, &(0x7f0000001440)={&(0x7f0000000000)={0x10, 0x4170000}, 0x349, &(0x7f0000001400)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x0, 0xf0ffffff, {{@in=@multicast1=0xe0000001, @in6=@mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x0, 0x0, 0x0, 0xa, 0xfffffff0, 0xf0ffffffffffff}}}, 0xb8}, 0x1}, 0x0) [ 266.698475] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 266.703589] ? graph_lock+0x170/0x170 [ 266.707403] ? find_held_lock+0x36/0x1c0 [ 266.711474] ? __lock_is_held+0xb5/0x140 [ 266.715557] ? check_same_owner+0x320/0x320 [ 266.719893] ? rcu_note_context_switch+0x710/0x710 [ 266.724833] __should_failslab+0x124/0x180 [ 266.729078] should_failslab+0x9/0x14 [ 266.732882] kmem_cache_alloc_node_trace+0x26f/0x770 [ 266.737992] ? idr_alloc_u32+0x3d0/0x3d0 [ 266.742076] mem_cgroup_css_alloc+0x3b5/0x1a00 [ 266.746665] ? setup_cpu_cache+0x1c0/0x1c0 00:15:37 executing program 2: r0 = socket$inet(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0) [ 266.750913] ? graph_lock+0x170/0x170 [ 266.754719] ? mutex_unlock+0xd/0x10 [ 266.758437] ? kernfs_setattr+0x39/0x40 [ 266.762416] ? cgroup_kn_set_ugid+0x2cb/0x370 [ 266.766921] ? cgroup_file_name+0x1f0/0x1f0 [ 266.771252] ? __lock_is_held+0xb5/0x140 [ 266.775327] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 266.780872] ? cgroup_addrm_files+0x790/0xb20 [ 266.785386] ? graph_lock+0x170/0x170 [ 266.789193] ? cgroup_css.part.14+0x1f0/0x1f0 [ 266.793702] ? lock_release+0x4d4/0xa10 00:15:37 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x10, 0x3, 0x6) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400031d85680c1ba3a20400ff7e280000001100ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 00:15:37 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f760070") sendmsg$nl_xfrm(r0, &(0x7f0000001440)={&(0x7f0000000000)={0x10, 0x4170000}, 0x349, &(0x7f0000001400)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x0, 0xfffffff0, {{@in=@multicast1=0xe0000001, @in6=@mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x0, 0x0, 0x0, 0xa, 0xfffffff0, 0xf0ffffffffffff}}}, 0xb8}, 0x1}, 0x0) [ 266.797689] ? graph_lock+0x170/0x170 [ 266.801495] ? __lock_is_held+0xb5/0x140 [ 266.805567] ? __lock_is_held+0xb5/0x140 [ 266.809645] cgroup_apply_control_enable+0x544/0xe80 [ 266.814763] ? cgroup_save_control+0x260/0x260 [ 266.819354] ? mutex_unlock+0xd/0x10 [ 266.823072] ? kernfs_setattr+0x39/0x40 [ 266.827051] ? cgroup_kn_set_ugid+0x2cb/0x370 [ 266.831545] ? cgroup_file_name+0x1f0/0x1f0 [ 266.835878] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 266.841414] ? css_populate_dir+0x2a1/0x470 [ 266.845737] cgroup_mkdir+0x876/0x1150 00:15:37 executing program 2: r0 = socket$inet(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0) [ 266.849638] ? cgroup_destroy_locked+0x7d0/0x7d0 [ 266.854402] ? put_itimerspec64+0x310/0x310 [ 266.858732] ? set_nlink+0xaf/0x140 [ 266.862364] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 266.867909] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 266.873451] ? kernfs_get_active+0xb2/0x120 [ 266.877775] ? cgroup_destroy_locked+0x7d0/0x7d0 [ 266.882533] kernfs_iop_mkdir+0x159/0x1e0 [ 266.886682] ? getname_flags+0xd0/0x5a0 [ 266.890667] vfs_mkdir+0x42e/0x6b0 [ 266.894216] do_mkdirat+0x266/0x2f0 00:15:37 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x10, 0x3, 0x6) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000408001d85680c1ba3a20400ff7e280000001100ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 00:15:37 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f760070") sendmsg$nl_xfrm(r0, &(0x7f0000001440)={&(0x7f0000000000)={0x10, 0x4170000}, 0x349, &(0x7f0000001400)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x0, 0xf0ffffffffffff, {{@in=@multicast1=0xe0000001, @in6=@mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x0, 0x0, 0x0, 0xa, 0xfffffff0, 0xf0ffffffffffff}}}, 0xb8}, 0x1}, 0x0) [ 266.897851] ? __ia32_sys_mknod+0xb0/0xb0 [ 266.902007] ? do_syscall_64+0x92/0x800 [ 266.906004] __x64_sys_mkdir+0x5c/0x80 [ 266.909902] do_syscall_64+0x1b1/0x800 [ 266.913790] ? finish_task_switch+0x1ca/0x840 [ 266.918294] ? syscall_return_slowpath+0x5c0/0x5c0 [ 266.923227] ? syscall_return_slowpath+0x30f/0x5c0 [ 266.928171] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 266.933538] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 266.938390] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 266.943579] RIP: 0033:0x4559f9 [ 266.946766] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 266.966095] RSP: 002b:00007fa94af69c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 266.973808] RAX: ffffffffffffffda RBX: 00007fa94af6a6d4 RCX: 00000000004559f9 [ 266.981080] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000100 [ 266.988349] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 266.995617] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 267.002894] R13: 00000000004bae54 R14: 00000000004cead0 R15: 0000000000000047 00:15:38 executing program 2: r0 = socket$inet(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0) 00:15:38 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x10, 0x3, 0x6) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000402001d85680c1ba3a20400ff7e280000001100ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 00:15:38 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[0xfeffffff], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) r2 = socket(0x11, 0x100000803, 0x0) r3 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={"6966623000faffffffffffffff00", 0x12}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'ifb0\x00', 0xa201}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x3c, &(0x7f0000000080)={@dev={0xfe, 0x80}, 0x0, 0x0, 0x2}, 0x20) 00:15:38 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f760070") sendmsg$nl_xfrm(r0, &(0x7f0000001440)={&(0x7f0000000000)={0x10, 0x4170000}, 0x349, &(0x7f0000001400)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x0, 0x9effffff00000000, {{@in=@multicast1=0xe0000001, @in6=@mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x0, 0x0, 0x0, 0xa, 0xfffffff0, 0xf0ffffffffffff}}}, 0xb8}, 0x1}, 0x0) 00:15:38 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) write$rdma_cm(r0, &(0x7f0000000640)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f00000004c0)}}, 0x10) close(r0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0x6e) listen(r3, 0x0) connect$unix(r2, &(0x7f0000932000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) tkill(r1, 0x1000000000016) 00:15:38 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) write$rdma_cm(r1, &(0x7f0000000640)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f00000004c0)}}, 0x10) close(r1) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0x6e) listen(r4, 0x0) connect$unix(r3, &(0x7f0000932000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) tkill(r2, 0x1000000000016) 00:15:38 executing program 4: pipe2(&(0x7f0000989000)={0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) mount(&(0x7f0000434ff8)='./file0\x00', &(0x7f0000abf000)='./file0\x00', &(0x7f0000f4c000)='jfs\x00', 0x1023402, 0x0) syz_mount_image$vfat(&(0x7f0000000040)="7666617403", &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000001200), 0x3000, &(0x7f0000001280)) unlink(&(0x7f00003b3000)='./file0\x00') dup2(r0, r1) 00:15:38 executing program 6 (fault-call:8 fault-nth:72): r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="295ed277a4200100360070") mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) rmdir(&(0x7f0000000340)='./file0//ile0\x00') r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) fstat(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r2) mkdir(&(0x7f0000000100)='./file0//ile0\x00', 0x0) 00:15:38 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x10, 0x3, 0x6) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400091d85680c1ba3a20400ff7e280000001100ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 00:15:38 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f760070") sendmsg$nl_xfrm(r0, &(0x7f0000001440)={&(0x7f0000000000)={0x10, 0x4170000}, 0x349, &(0x7f0000001400)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x0, 0xf0ffffff00000000, {{@in=@multicast1=0xe0000001, @in6=@mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x0, 0x0, 0x0, 0xa, 0xfffffff0, 0xf0ffffffffffff}}}, 0xb8}, 0x1}, 0x0) [ 267.648170] FAULT_INJECTION: forcing a failure. [ 267.648170] name failslab, interval 1, probability 0, space 0, times 0 [ 267.659518] CPU: 0 PID: 16881 Comm: syz-executor6 Not tainted 4.17.0+ #89 [ 267.666451] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 267.675804] Call Trace: [ 267.678408] dump_stack+0x1b9/0x294 [ 267.682053] ? dump_stack_print_info.cold.2+0x52/0x52 [ 267.687268] should_fail.cold.4+0xa/0x1a [ 267.691341] ? __kmalloc_track_caller+0x14a/0x760 00:15:38 executing program 2: r0 = socket$inet(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0) [ 267.696199] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 267.701311] ? cgroup_mkdir+0x876/0x1150 [ 267.705381] ? kernfs_iop_mkdir+0x159/0x1e0 [ 267.709705] ? vfs_mkdir+0x42e/0x6b0 [ 267.713419] ? do_mkdirat+0x266/0x2f0 [ 267.717222] ? __x64_sys_mkdir+0x5c/0x80 [ 267.721295] ? do_syscall_64+0x1b1/0x800 [ 267.725367] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 267.730739] ? graph_lock+0x170/0x170 [ 267.734547] ? find_held_lock+0x36/0x1c0 [ 267.738619] ? print_usage_bug+0xc0/0xc0 [ 267.742693] ? find_held_lock+0x36/0x1c0 [ 267.746761] ? __lock_is_held+0xb5/0x140 [ 267.750840] ? check_same_owner+0x320/0x320 [ 267.755170] ? rcu_note_context_switch+0x710/0x710 [ 267.760111] ? rcu_read_lock_sched_held+0x108/0x120 [ 267.765141] __should_failslab+0x124/0x180 [ 267.769387] should_failslab+0x9/0x14 [ 267.773197] kmem_cache_alloc+0x2af/0x760 [ 267.777355] ? memcpy+0x45/0x50 [ 267.780644] ? kstrdup+0x59/0x70 [ 267.784028] __kernfs_new_node+0xe7/0x580 [ 267.788188] ? kernfs_dop_revalidate+0x3c0/0x3c0 [ 267.792957] ? pointer+0x930/0x930 00:15:38 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f760070") sendmsg$nl_xfrm(r0, &(0x7f0000001440)={&(0x7f0000000000)={0x10, 0x4170000}, 0x349, &(0x7f0000001400)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x0, 0xffffff9e, {{@in=@multicast1=0xe0000001, @in6=@mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x0, 0x0, 0x0, 0xa, 0xfffffff0, 0xf0ffffffffffff}}}, 0xb8}, 0x1}, 0x0) [ 267.796512] ? graph_lock+0x170/0x170 [ 267.800324] ? snprintf+0xa5/0xd0 [ 267.803808] ? vsprintf+0x40/0x40 [ 267.807278] kernfs_new_node+0x80/0xf0 [ 267.811177] __kernfs_create_file+0x4d/0x330 [ 267.815596] cgroup_addrm_files+0x437/0xb20 [ 267.819924] ? rcu_is_watching+0x85/0x140 [ 267.824083] ? cgroup_css.part.14+0x1f0/0x1f0 [ 267.828592] ? find_held_lock+0x36/0x1c0 [ 267.832666] ? mem_cgroup_css_online+0x23e/0x300 [ 267.837430] ? mod_memcg_state+0x1a0/0x1a0 [ 267.841672] ? __lock_is_held+0xb5/0x140 00:15:38 executing program 2: r0 = socket$inet(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0) [ 267.845746] ? kasan_check_write+0x14/0x20 [ 267.849983] ? online_css+0x265/0x330 [ 267.853788] css_populate_dir+0x1a9/0x470 [ 267.857948] cgroup_apply_control_enable+0x449/0xe80 [ 267.863066] ? cgroup_save_control+0x260/0x260 [ 267.867655] ? mutex_unlock+0xd/0x10 [ 267.871366] ? kernfs_setattr+0x39/0x40 [ 267.875343] ? cgroup_kn_set_ugid+0x2cb/0x370 [ 267.879840] ? cgroup_file_name+0x1f0/0x1f0 [ 267.884170] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 267.889713] ? css_populate_dir+0x2a1/0x470 [ 267.894476] cgroup_mkdir+0x876/0x1150 00:15:38 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x10, 0x3, 0x6) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400081d85680c1ba3a20400ff7e280000001100ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 00:15:38 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f760070") sendmsg$nl_xfrm(r0, &(0x7f0000001440)={&(0x7f0000000000)={0x10, 0x4170000}, 0x349, &(0x7f0000001400)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x0, 0x200000000000000, {{@in=@multicast1=0xe0000001, @in6=@mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x0, 0x0, 0x0, 0xa, 0xfffffff0, 0xf0ffffffffffff}}}, 0xb8}, 0x1}, 0x0) [ 267.898374] ? cgroup_destroy_locked+0x7d0/0x7d0 [ 267.903133] ? put_itimerspec64+0x310/0x310 [ 267.907458] ? set_nlink+0xaf/0x140 [ 267.911092] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 267.916635] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 267.922176] ? kernfs_get_active+0xb2/0x120 [ 267.926503] ? cgroup_destroy_locked+0x7d0/0x7d0 [ 267.931262] kernfs_iop_mkdir+0x159/0x1e0 [ 267.935411] ? getname_flags+0xd0/0x5a0 [ 267.939387] vfs_mkdir+0x42e/0x6b0 [ 267.942942] do_mkdirat+0x266/0x2f0 [ 267.946574] ? __ia32_sys_mknod+0xb0/0xb0 [ 267.950731] ? do_syscall_64+0x92/0x800 [ 267.954710] __x64_sys_mkdir+0x5c/0x80 [ 267.958601] do_syscall_64+0x1b1/0x800 [ 267.962492] ? finish_task_switch+0x1ca/0x840 [ 267.966992] ? syscall_return_slowpath+0x5c0/0x5c0 [ 267.971930] ? syscall_return_slowpath+0x30f/0x5c0 [ 267.976869] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 267.982242] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 267.987096] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 267.992281] RIP: 0033:0x4559f9 [ 267.995467] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 268.014837] RSP: 002b:00007fa94af69c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 268.022555] RAX: ffffffffffffffda RBX: 00007fa94af6a6d4 RCX: 00000000004559f9 [ 268.029826] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000100 [ 268.037096] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 268.044361] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 268.051632] R13: 00000000004bae54 R14: 00000000004cead0 R15: 0000000000000048 [ 268.059106] cgroup: cgroup_addrm_files: failed to add current, err=-12 00:15:39 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x10, 0x3, 0x6) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400031d85680c1ba3a20400ff7e280000001100ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 00:15:39 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f760070") sendmsg$nl_xfrm(r0, &(0x7f0000001440)={&(0x7f0000000000)={0x10, 0x4170000}, 0x349, &(0x7f0000001400)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x0, 0x300000000000000, {{@in=@multicast1=0xe0000001, @in6=@mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x0, 0x0, 0x0, 0xa, 0xfffffff0, 0xf0ffffffffffff}}}, 0xb8}, 0x1}, 0x0) 00:15:39 executing program 2: r0 = socket$inet(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0) 00:15:39 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[0xfeffffff], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) r2 = socket(0x11, 0x100000803, 0x0) r3 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={"6966623000faffffffffffffff00", 0x12}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'ifb0\x00', 0xa201}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x36, &(0x7f0000000080)={@dev={0xfe, 0x80}, 0x0, 0x0, 0x2}, 0x20) 00:15:39 executing program 6 (fault-call:8 fault-nth:73): r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="295ed277a4200100360070") mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) rmdir(&(0x7f0000000340)='./file0//ile0\x00') r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) fstat(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r2) mkdir(&(0x7f0000000100)='./file0//ile0\x00', 0x0) 00:15:39 executing program 4: pipe2(&(0x7f0000989000)={0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) mount(&(0x7f0000434ff8)='./file0\x00', &(0x7f0000abf000)='./file0\x00', &(0x7f0000f4c000)='jfs\x00', 0x1023402, 0x0) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000001200), 0x3000, &(0x7f0000001280)) unlink(&(0x7f00003b3000)='./file0\x00') dup2(r0, r1) 00:15:39 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) write$rdma_cm(r0, &(0x7f0000000640)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f00000004c0)}}, 0x10) close(r0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0x6e) listen(r3, 0x0) connect$unix(r2, &(0x7f0000932000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) tkill(r1, 0x1000000000016) 00:15:39 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) write$rdma_cm(r1, &(0x7f0000000640)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f00000004c0)}}, 0x10) close(r1) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0x6e) listen(r4, 0x0) connect$unix(r3, &(0x7f0000932000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) tkill(r2, 0x1000000000016) [ 268.628179] FAULT_INJECTION: forcing a failure. [ 268.628179] name failslab, interval 1, probability 0, space 0, times 0 [ 268.639528] CPU: 0 PID: 16944 Comm: syz-executor6 Not tainted 4.17.0+ #89 [ 268.646465] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 268.655822] Call Trace: [ 268.658431] dump_stack+0x1b9/0x294 [ 268.662075] ? dump_stack_print_info.cold.2+0x52/0x52 [ 268.667285] should_fail.cold.4+0xa/0x1a [ 268.671388] ? __kmalloc_track_caller+0x14a/0x760 00:15:39 executing program 2: r0 = socket$inet(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0) 00:15:39 executing program 2: r0 = socket$inet(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0) [ 268.676245] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 268.681357] ? cgroup_mkdir+0x876/0x1150 [ 268.685427] ? kernfs_iop_mkdir+0x159/0x1e0 [ 268.689754] ? vfs_mkdir+0x42e/0x6b0 [ 268.693473] ? do_mkdirat+0x266/0x2f0 [ 268.697279] ? __x64_sys_mkdir+0x5c/0x80 [ 268.701343] ? do_syscall_64+0x1b1/0x800 [ 268.705413] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 268.710787] ? graph_lock+0x170/0x170 [ 268.714595] ? find_held_lock+0x36/0x1c0 [ 268.718665] ? print_usage_bug+0xc0/0xc0 [ 268.722730] ? find_held_lock+0x36/0x1c0 00:15:39 executing program 2: r0 = socket$inet(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0) [ 268.726801] ? __lock_is_held+0xb5/0x140 [ 268.730880] ? check_same_owner+0x320/0x320 [ 268.735211] ? rcu_note_context_switch+0x710/0x710 [ 268.740170] ? rcu_read_lock_sched_held+0x108/0x120 [ 268.745198] __should_failslab+0x124/0x180 [ 268.749442] should_failslab+0x9/0x14 [ 268.753251] kmem_cache_alloc+0x2af/0x760 [ 268.757406] ? memcpy+0x45/0x50 [ 268.760695] ? kstrdup+0x59/0x70 [ 268.764074] __kernfs_new_node+0xe7/0x580 [ 268.768232] ? kernfs_dop_revalidate+0x3c0/0x3c0 [ 268.772998] ? pointer+0x930/0x930 00:15:39 executing program 2: r0 = socket$inet(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0) [ 268.776554] ? graph_lock+0x170/0x170 [ 268.780376] ? snprintf+0xa5/0xd0 [ 268.783836] ? vsprintf+0x40/0x40 [ 268.787310] kernfs_new_node+0x80/0xf0 [ 268.791209] __kernfs_create_file+0x4d/0x330 [ 268.795632] cgroup_addrm_files+0x437/0xb20 [ 268.799969] ? rcu_is_watching+0x85/0x140 [ 268.804124] ? cgroup_css.part.14+0x1f0/0x1f0 [ 268.808620] ? find_held_lock+0x36/0x1c0 [ 268.812695] ? mem_cgroup_css_online+0x23e/0x300 [ 268.817455] ? mod_memcg_state+0x1a0/0x1a0 [ 268.821697] ? __lock_is_held+0xb5/0x140 00:15:39 executing program 2: r0 = socket$inet(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0) [ 268.825775] ? kasan_check_write+0x14/0x20 [ 268.830008] ? online_css+0x265/0x330 [ 268.833815] css_populate_dir+0x1a9/0x470 [ 268.837976] cgroup_apply_control_enable+0x449/0xe80 [ 268.843090] ? cgroup_save_control+0x260/0x260 [ 268.847679] ? mutex_unlock+0xd/0x10 [ 268.851395] ? kernfs_setattr+0x39/0x40 [ 268.855372] ? cgroup_kn_set_ugid+0x2cb/0x370 [ 268.859876] ? cgroup_file_name+0x1f0/0x1f0 [ 268.864211] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 268.869752] ? css_populate_dir+0x2a1/0x470 [ 268.874084] cgroup_mkdir+0x876/0x1150 00:15:39 executing program 2: r0 = socket$inet(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0) [ 268.877982] ? cgroup_destroy_locked+0x7d0/0x7d0 [ 268.882742] ? put_itimerspec64+0x310/0x310 [ 268.887070] ? set_nlink+0xaf/0x140 [ 268.890700] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 268.896246] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 268.901786] ? kernfs_get_active+0xb2/0x120 [ 268.906111] ? cgroup_destroy_locked+0x7d0/0x7d0 [ 268.910873] kernfs_iop_mkdir+0x159/0x1e0 [ 268.915023] ? getname_flags+0xd0/0x5a0 [ 268.918997] vfs_mkdir+0x42e/0x6b0 [ 268.922548] do_mkdirat+0x266/0x2f0 00:15:39 executing program 2: r0 = socket$inet(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0) [ 268.926190] ? __ia32_sys_mknod+0xb0/0xb0 [ 268.930344] ? do_syscall_64+0x92/0x800 [ 268.934322] __x64_sys_mkdir+0x5c/0x80 [ 268.938212] do_syscall_64+0x1b1/0x800 [ 268.942103] ? finish_task_switch+0x1ca/0x840 [ 268.946607] ? syscall_return_slowpath+0x5c0/0x5c0 [ 268.951542] ? syscall_return_slowpath+0x30f/0x5c0 [ 268.956484] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 268.961862] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 268.966714] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 268.971908] RIP: 0033:0x4559f9 [ 268.975089] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 268.994455] RSP: 002b:00007fa94af69c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 269.002170] RAX: ffffffffffffffda RBX: 00007fa94af6a6d4 RCX: 00000000004559f9 [ 269.009434] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000100 [ 269.016688] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 269.023948] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 269.031209] R13: 00000000004bae54 R14: 00000000004cead0 R15: 0000000000000049 [ 269.038783] cgroup: cgroup_addrm_files: failed to add current, err=-12 00:15:40 executing program 2: r0 = socket$inet(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0) 00:15:40 executing program 6 (fault-call:8 fault-nth:74): r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="295ed277a4200100360070") mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) rmdir(&(0x7f0000000340)='./file0//ile0\x00') r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) fstat(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r2) mkdir(&(0x7f0000000100)='./file0//ile0\x00', 0x0) 00:15:40 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f760070") sendmsg$nl_xfrm(r0, &(0x7f0000001440)={&(0x7f0000000000)={0x10, 0x4170000}, 0x349, &(0x7f0000001400)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x0, 0xf00, {{@in=@multicast1=0xe0000001, @in6=@mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x0, 0x0, 0x0, 0xa, 0xfffffff0, 0xf0ffffffffffff}}}, 0xb8}, 0x1}, 0x0) 00:15:40 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) write$rdma_cm(r0, &(0x7f0000000640)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f00000004c0)}}, 0x10) close(r0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0x6e) listen(r3, 0x0) connect$unix(r2, &(0x7f0000932000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) tkill(r1, 0x1000000000016) 00:15:40 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x10, 0x3, 0x6) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a00090004000f1d85680c1ba3a20400ff7e280000001100ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 00:15:40 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[0xfeffffff], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) r2 = socket(0x11, 0x100000803, 0x0) r3 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={"6966623000faffffffffffffff00", 0x12}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'ifb0\x00', 0xa201}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x13, &(0x7f0000000080)={@dev={0xfe, 0x80}, 0x0, 0x0, 0x2}, 0x20) 00:15:40 executing program 4: pipe2(&(0x7f0000989000)={0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) mount(&(0x7f0000434ff8)='./file0\x00', &(0x7f0000abf000)='./file0\x00', &(0x7f0000f4c000)='jfs\x00', 0x1023402, 0x0) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000001200), 0x3000, &(0x7f0000001280)) unlink(&(0x7f00003b3000)='./file0\x00') dup2(r0, r1) 00:15:40 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) write$rdma_cm(r1, &(0x7f0000000640)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f00000004c0)}}, 0x10) close(r1) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0x6e) listen(r4, 0x0) connect$unix(r3, &(0x7f0000932000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) tkill(r2, 0x1000000000016) [ 270.049462] FAULT_INJECTION: forcing a failure. [ 270.049462] name failslab, interval 1, probability 0, space 0, times 0 [ 270.060820] CPU: 0 PID: 17014 Comm: syz-executor6 Not tainted 4.17.0+ #89 [ 270.067755] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 270.077107] Call Trace: [ 270.079695] dump_stack+0x1b9/0x294 [ 270.083321] ? dump_stack_print_info.cold.2+0x52/0x52 [ 270.088506] ? check_same_owner+0x320/0x320 [ 270.092831] ? mutex_trylock+0x2a0/0x2a0 [ 270.096902] should_fail.cold.4+0xa/0x1a [ 270.100982] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 270.106086] ? __mutex_lock+0x7d9/0x17f0 [ 270.110150] ? graph_lock+0x170/0x170 [ 270.113945] ? kernfs_setattr+0x20/0x40 [ 270.117904] ? graph_lock+0x170/0x170 [ 270.121692] ? find_held_lock+0x36/0x1c0 [ 270.125740] ? __lock_is_held+0xb5/0x140 [ 270.129789] ? check_same_owner+0x320/0x320 [ 270.134092] ? rcu_note_context_switch+0x710/0x710 [ 270.139009] ? lock_downgrade+0x8e0/0x8e0 [ 270.143241] __should_failslab+0x124/0x180 [ 270.147463] should_failslab+0x9/0x14 [ 270.151252] kmem_cache_alloc_trace+0x2cb/0x780 [ 270.155904] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 270.160825] kernfs_iattrs.isra.4+0x123/0x4e0 [ 270.165332] ? ktime_get_real_ts64+0x361/0x510 [ 270.169924] ? kernfs_iop_permission+0xb0/0xb0 [ 270.174500] ? ktime_get_with_offset+0x4a0/0x4a0 [ 270.179254] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 270.184798] __kernfs_setattr+0x57/0x440 [ 270.188855] kernfs_setattr+0x2b/0x40 [ 270.192652] cgroup_kn_set_ugid+0x2c3/0x370 [ 270.196966] ? cgroup_file_name+0x1f0/0x1f0 [ 270.201281] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 270.206807] ? __kernfs_create_file+0x29b/0x330 [ 270.211458] cgroup_addrm_files+0x465/0xb20 [ 270.215774] ? rcu_is_watching+0x85/0x140 [ 270.219906] ? cgroup_css.part.14+0x1f0/0x1f0 [ 270.224390] ? find_held_lock+0x36/0x1c0 [ 270.228443] ? mem_cgroup_css_online+0x23e/0x300 [ 270.233184] ? mod_memcg_state+0x1a0/0x1a0 [ 270.237410] ? __lock_is_held+0xb5/0x140 [ 270.241478] ? kasan_check_write+0x14/0x20 [ 270.245709] ? online_css+0x265/0x330 [ 270.249515] css_populate_dir+0x1a9/0x470 [ 270.253648] cgroup_apply_control_enable+0x449/0xe80 [ 270.258746] ? cgroup_save_control+0x260/0x260 [ 270.263319] ? mutex_unlock+0xd/0x10 [ 270.267022] ? kernfs_setattr+0x39/0x40 [ 270.270996] ? cgroup_kn_set_ugid+0x2cb/0x370 [ 270.275481] ? cgroup_file_name+0x1f0/0x1f0 [ 270.279800] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 270.285326] ? css_populate_dir+0x2a1/0x470 [ 270.289647] cgroup_mkdir+0x876/0x1150 [ 270.293534] ? cgroup_destroy_locked+0x7d0/0x7d0 00:15:41 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x10, 0x3, 0x6) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400281d85680c1ba3a20400ff7e280000001100ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 00:15:41 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f760070") sendmsg$nl_xfrm(r0, &(0x7f0000001440)={&(0x7f0000000000)={0x10, 0x4170000}, 0x349, &(0x7f0000001400)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x0, 0x3, {{@in=@multicast1=0xe0000001, @in6=@mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x0, 0x0, 0x0, 0xa, 0xfffffff0, 0xf0ffffffffffff}}}, 0xb8}, 0x1}, 0x0) [ 270.298286] ? put_itimerspec64+0x310/0x310 [ 270.302611] ? set_nlink+0xaf/0x140 [ 270.306250] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 270.311786] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 270.317312] ? kernfs_get_active+0xb2/0x120 [ 270.321617] ? cgroup_destroy_locked+0x7d0/0x7d0 [ 270.326357] kernfs_iop_mkdir+0x159/0x1e0 [ 270.330502] ? getname_flags+0xd0/0x5a0 [ 270.334488] vfs_mkdir+0x42e/0x6b0 [ 270.338037] do_mkdirat+0x266/0x2f0 [ 270.341665] ? __ia32_sys_mknod+0xb0/0xb0 [ 270.345816] ? do_syscall_64+0x92/0x800 00:15:41 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x10, 0x3, 0x6) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a00090004000a1d85680c1ba3a20400ff7e280000001100ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 00:15:41 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f760070") sendmsg$nl_xfrm(r0, &(0x7f0000001440)={&(0x7f0000000000)={0x10, 0x4170000}, 0x349, &(0x7f0000001400)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x0, 0x2a0, {{@in=@multicast1=0xe0000001, @in6=@mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x0, 0x0, 0x0, 0xa, 0xfffffff0, 0xf0ffffffffffff}}}, 0xb8}, 0x1}, 0x0) [ 270.349800] __x64_sys_mkdir+0x5c/0x80 [ 270.353696] do_syscall_64+0x1b1/0x800 [ 270.357588] ? finish_task_switch+0x1ca/0x840 [ 270.362091] ? syscall_return_slowpath+0x5c0/0x5c0 [ 270.367025] ? syscall_return_slowpath+0x30f/0x5c0 [ 270.371974] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 270.377958] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 270.382816] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 270.388004] RIP: 0033:0x4559f9 [ 270.391186] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 270.410553] RSP: 002b:00007fa94af69c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 270.418279] RAX: ffffffffffffffda RBX: 00007fa94af6a6d4 RCX: 00000000004559f9 [ 270.425551] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000100 [ 270.432822] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 270.440092] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 00:15:41 executing program 2: r0 = socket$inet(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0) 00:15:41 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f760070") sendmsg$nl_xfrm(r0, &(0x7f0000001440)={&(0x7f0000000000)={0x10, 0x4170000}, 0x349, &(0x7f0000001400)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x0, 0x9effffff, {{@in=@multicast1=0xe0000001, @in6=@mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x0, 0x0, 0x0, 0xa, 0xfffffff0, 0xf0ffffffffffff}}}, 0xb8}, 0x1}, 0x0) 00:15:41 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x10, 0x3, 0x6) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a00090004000b1d85680c1ba3a20400ff7e280000001100ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) [ 270.447364] R13: 00000000004bae54 R14: 00000000004cead0 R15: 000000000000004a [ 270.464155] cgroup: cgroup_addrm_files: failed to add current, err=-12 00:15:41 executing program 6 (fault-call:8 fault-nth:75): r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="295ed277a4200100360070") mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) rmdir(&(0x7f0000000340)='./file0//ile0\x00') r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) fstat(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r2) mkdir(&(0x7f0000000100)='./file0//ile0\x00', 0x0) 00:15:41 executing program 2: r0 = socket$inet(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0) 00:15:41 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f760070") sendmsg$nl_xfrm(r0, &(0x7f0000001440)={&(0x7f0000000000)={0x10, 0x4170000}, 0x349, &(0x7f0000001400)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x0, 0xffffff7f, {{@in=@multicast1=0xe0000001, @in6=@mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x0, 0x0, 0x0, 0xa, 0xfffffff0, 0xf0ffffffffffff}}}, 0xb8}, 0x1}, 0x0) 00:15:41 executing program 2: r0 = socket$inet(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0) [ 270.818325] FAULT_INJECTION: forcing a failure. [ 270.818325] name failslab, interval 1, probability 0, space 0, times 0 [ 270.829697] CPU: 1 PID: 17057 Comm: syz-executor6 Not tainted 4.17.0+ #89 [ 270.836629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 270.845988] Call Trace: [ 270.848597] dump_stack+0x1b9/0x294 [ 270.852235] ? dump_stack_print_info.cold.2+0x52/0x52 [ 270.857456] ? check_same_owner+0x320/0x320 [ 270.861780] ? mutex_trylock+0x2a0/0x2a0 [ 270.865846] should_fail.cold.4+0xa/0x1a [ 270.869896] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 270.874989] ? __mutex_lock+0x7d9/0x17f0 [ 270.879051] ? graph_lock+0x170/0x170 [ 270.882854] ? kernfs_setattr+0x20/0x40 [ 270.886813] ? graph_lock+0x170/0x170 [ 270.890599] ? find_held_lock+0x36/0x1c0 [ 270.894650] ? __lock_is_held+0xb5/0x140 [ 270.898716] ? check_same_owner+0x320/0x320 [ 270.903034] ? rcu_note_context_switch+0x710/0x710 [ 270.908042] ? lock_downgrade+0x8e0/0x8e0 [ 270.912184] __should_failslab+0x124/0x180 [ 270.916404] should_failslab+0x9/0x14 [ 270.920199] kmem_cache_alloc_trace+0x2cb/0x780 [ 270.924949] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 270.929884] kernfs_iattrs.isra.4+0x123/0x4e0 [ 270.934370] ? ktime_get_real_ts64+0x361/0x510 [ 270.938941] ? kernfs_iop_permission+0xb0/0xb0 [ 270.943527] ? ktime_get_with_offset+0x4a0/0x4a0 [ 270.948276] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 270.953800] __kernfs_setattr+0x57/0x440 [ 270.957857] kernfs_setattr+0x2b/0x40 [ 270.961664] cgroup_kn_set_ugid+0x2c3/0x370 [ 270.965982] ? cgroup_file_name+0x1f0/0x1f0 [ 270.970302] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 270.975821] ? __kernfs_create_file+0x29b/0x330 [ 270.980474] cgroup_addrm_files+0x465/0xb20 [ 270.984779] ? rcu_is_watching+0x85/0x140 [ 270.988923] ? cgroup_css.part.14+0x1f0/0x1f0 [ 270.993420] ? find_held_lock+0x36/0x1c0 [ 270.997476] ? mem_cgroup_css_online+0x23e/0x300 [ 271.002228] ? mod_memcg_state+0x1a0/0x1a0 [ 271.006475] ? __lock_is_held+0xb5/0x140 [ 271.010532] ? kasan_check_write+0x14/0x20 [ 271.014748] ? online_css+0x265/0x330 [ 271.018544] css_populate_dir+0x1a9/0x470 [ 271.022692] cgroup_apply_control_enable+0x449/0xe80 [ 271.027799] ? cgroup_save_control+0x260/0x260 [ 271.032364] ? mutex_unlock+0xd/0x10 [ 271.036067] ? kernfs_setattr+0x39/0x40 [ 271.040050] ? cgroup_kn_set_ugid+0x2cb/0x370 [ 271.044537] ? cgroup_file_name+0x1f0/0x1f0 [ 271.048854] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 271.054376] ? css_populate_dir+0x2a1/0x470 [ 271.058684] cgroup_mkdir+0x876/0x1150 [ 271.062559] ? cgroup_destroy_locked+0x7d0/0x7d0 [ 271.067296] ? put_itimerspec64+0x310/0x310 [ 271.071600] ? set_nlink+0xaf/0x140 [ 271.075213] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 271.080735] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 271.086255] ? kernfs_get_active+0xb2/0x120 [ 271.090562] ? cgroup_destroy_locked+0x7d0/0x7d0 [ 271.095298] kernfs_iop_mkdir+0x159/0x1e0 [ 271.099445] ? getname_flags+0xd0/0x5a0 [ 271.103401] vfs_mkdir+0x42e/0x6b0 [ 271.106923] do_mkdirat+0x266/0x2f0 [ 271.110533] ? __ia32_sys_mknod+0xb0/0xb0 [ 271.114665] ? do_syscall_64+0x92/0x800 [ 271.118621] __x64_sys_mkdir+0x5c/0x80 [ 271.122492] do_syscall_64+0x1b1/0x800 [ 271.126363] ? finish_task_switch+0x1ca/0x840 [ 271.130841] ? syscall_return_slowpath+0x5c0/0x5c0 [ 271.135751] ? syscall_return_slowpath+0x30f/0x5c0 [ 271.140666] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 271.146024] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 271.150863] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 271.156039] RIP: 0033:0x4559f9 [ 271.159213] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 271.178419] RSP: 002b:00007fa94af69c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 271.186121] RAX: ffffffffffffffda RBX: 00007fa94af6a6d4 RCX: 00000000004559f9 [ 271.193378] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000100 [ 271.200636] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 271.208523] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 271.215775] R13: 00000000004bae54 R14: 00000000004cead0 R15: 000000000000004b [ 271.223452] cgroup: cgroup_addrm_files: failed to add current, err=-12 00:15:42 executing program 6 (fault-call:8 fault-nth:76): r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="295ed277a4200100360070") mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) rmdir(&(0x7f0000000340)='./file0//ile0\x00') r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) fstat(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r2) mkdir(&(0x7f0000000100)='./file0//ile0\x00', 0x0) 00:15:42 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) write$rdma_cm(r1, &(0x7f0000000640)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f00000004c0)}}, 0xfffffdef) close(r1) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0x6e) listen(r4, 0x0) connect$unix(r3, &(0x7f0000932000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) tkill(r2, 0x1000000000016) 00:15:42 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) write$rdma_cm(r0, &(0x7f0000000640)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f00000004c0)}}, 0x10) close(r0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0x6e) listen(r3, 0x0) connect$unix(r2, &(0x7f0000932000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) tkill(r1, 0x1000000000016) 00:15:42 executing program 2: r0 = socket$inet(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0) 00:15:42 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x10, 0x3, 0x6) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400051d85680c1ba3a20400ff7e280000001100ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 00:15:42 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[0xfeffffff], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) r2 = socket(0x11, 0x100000803, 0x0) r3 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={"6966623000faffffffffffffff00", 0x12}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'ifb0\x00', 0xa201}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x39, &(0x7f0000000080)={@dev={0xfe, 0x80}, 0x0, 0x0, 0x2}, 0x20) 00:15:42 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f760070") sendmsg$nl_xfrm(r0, &(0x7f0000001440)={&(0x7f0000000000)={0x10, 0x4170000}, 0x349, &(0x7f0000001400)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x0, 0xfffffffc, {{@in=@multicast1=0xe0000001, @in6=@mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x0, 0x0, 0x0, 0xa, 0xfffffff0, 0xf0ffffffffffff}}}, 0xb8}, 0x1}, 0x0) 00:15:42 executing program 4: pipe2(&(0x7f0000989000)={0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) mount(&(0x7f0000434ff8)='./file0\x00', &(0x7f0000abf000)='./file0\x00', &(0x7f0000f4c000)='jfs\x00', 0x1023402, 0x0) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000001200), 0x3000, &(0x7f0000001280)) unlink(&(0x7f00003b3000)='./file0\x00') dup2(r0, r1) [ 271.392585] FAULT_INJECTION: forcing a failure. [ 271.392585] name failslab, interval 1, probability 0, space 0, times 0 [ 271.403926] CPU: 1 PID: 17091 Comm: syz-executor6 Not tainted 4.17.0+ #89 [ 271.410858] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 271.420215] Call Trace: [ 271.422820] dump_stack+0x1b9/0x294 [ 271.426467] ? dump_stack_print_info.cold.2+0x52/0x52 [ 271.431673] ? check_same_owner+0x320/0x320 [ 271.436007] ? mutex_trylock+0x2a0/0x2a0 [ 271.440083] should_fail.cold.4+0xa/0x1a [ 271.444166] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 271.449264] ? __mutex_lock+0x7d9/0x17f0 [ 271.453312] ? graph_lock+0x170/0x170 [ 271.457103] ? kernfs_setattr+0x20/0x40 [ 271.461065] ? graph_lock+0x170/0x170 [ 271.464874] ? find_held_lock+0x36/0x1c0 [ 271.468920] ? __lock_is_held+0xb5/0x140 [ 271.472982] ? check_same_owner+0x320/0x320 [ 271.477304] ? rcu_note_context_switch+0x710/0x710 [ 271.482239] ? lock_downgrade+0x8e0/0x8e0 [ 271.486374] __should_failslab+0x124/0x180 [ 271.490596] should_failslab+0x9/0x14 [ 271.494388] kmem_cache_alloc_trace+0x2cb/0x780 [ 271.499049] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 271.503968] kernfs_iattrs.isra.4+0x123/0x4e0 [ 271.508451] ? ktime_get_real_ts64+0x361/0x510 [ 271.513029] ? kernfs_iop_permission+0xb0/0xb0 [ 271.517617] ? ktime_get_with_offset+0x4a0/0x4a0 [ 271.522368] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 271.527932] __kernfs_setattr+0x57/0x440 [ 271.531987] kernfs_setattr+0x2b/0x40 [ 271.535776] cgroup_kn_set_ugid+0x2c3/0x370 [ 271.540106] ? cgroup_file_name+0x1f0/0x1f0 [ 271.544436] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 271.549979] ? __kernfs_create_file+0x29b/0x330 [ 271.554731] cgroup_addrm_files+0x465/0xb20 [ 271.559070] ? cgroup_css.part.14+0x1f0/0x1f0 [ 271.563569] ? find_held_lock+0x36/0x1c0 [ 271.567619] ? mem_cgroup_css_online+0x23e/0x300 [ 271.572367] ? mod_memcg_state+0x1a0/0x1a0 [ 271.576604] ? __lock_is_held+0xb5/0x140 [ 271.580677] ? kasan_check_write+0x14/0x20 [ 271.584900] ? online_css+0x265/0x330 [ 271.588688] css_populate_dir+0x1a9/0x470 [ 271.592835] cgroup_apply_control_enable+0x449/0xe80 [ 271.597940] ? cgroup_save_control+0x260/0x260 [ 271.602521] ? mutex_unlock+0xd/0x10 [ 271.606232] ? kernfs_setattr+0x39/0x40 [ 271.610203] ? cgroup_kn_set_ugid+0x2cb/0x370 [ 271.614722] ? cgroup_file_name+0x1f0/0x1f0 [ 271.619049] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 271.624577] ? css_populate_dir+0x2a1/0x470 [ 271.628896] cgroup_mkdir+0x876/0x1150 [ 271.632795] ? cgroup_destroy_locked+0x7d0/0x7d0 [ 271.637543] ? put_itimerspec64+0x310/0x310 [ 271.641854] ? set_nlink+0xaf/0x140 [ 271.645465] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 271.650987] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 271.656509] ? kernfs_get_active+0xb2/0x120 [ 271.660819] ? cgroup_destroy_locked+0x7d0/0x7d0 [ 271.665573] kernfs_iop_mkdir+0x159/0x1e0 [ 271.669704] ? getname_flags+0xd0/0x5a0 [ 271.673674] vfs_mkdir+0x42e/0x6b0 [ 271.677219] do_mkdirat+0x266/0x2f0 [ 271.680835] ? __ia32_sys_mknod+0xb0/0xb0 [ 271.684969] ? do_syscall_64+0x92/0x800 [ 271.688927] __x64_sys_mkdir+0x5c/0x80 00:15:42 executing program 2: r0 = socket$inet(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0) 00:15:42 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x10, 0x3, 0x6) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400101d85680c1ba3a20400ff7e280000001100ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 00:15:42 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f760070") sendmsg$nl_xfrm(r0, &(0x7f0000001440)={&(0x7f0000000000)={0x10, 0x4170000}, 0x349, &(0x7f0000001400)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x0, 0xffffffffffffffff, {{@in=@multicast1=0xe0000001, @in6=@mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x0, 0x0, 0x0, 0xa, 0xfffffff0, 0xf0ffffffffffff}}}, 0xb8}, 0x1}, 0x0) [ 271.692795] do_syscall_64+0x1b1/0x800 [ 271.696670] ? finish_task_switch+0x1ca/0x840 [ 271.701170] ? syscall_return_slowpath+0x5c0/0x5c0 [ 271.706100] ? syscall_return_slowpath+0x30f/0x5c0 [ 271.711027] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 271.716385] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 271.721229] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 271.726418] RIP: 0033:0x4559f9 [ 271.729601] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 271.748970] RSP: 002b:00007fa94af69c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 271.756692] RAX: ffffffffffffffda RBX: 00007fa94af6a6d4 RCX: 00000000004559f9 [ 271.763952] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000100 [ 271.771208] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 271.778472] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 271.785752] R13: 00000000004bae54 R14: 00000000004cead0 R15: 000000000000004c 00:15:42 executing program 2: r0 = socket$inet(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0) 00:15:42 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x10, 0x3, 0x6) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400061d85680c1ba3a20400ff7e280000001100ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 00:15:42 executing program 6 (fault-call:8 fault-nth:77): r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="295ed277a4200100360070") mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) rmdir(&(0x7f0000000340)='./file0//ile0\x00') r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) fstat(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r2) mkdir(&(0x7f0000000100)='./file0//ile0\x00', 0x0) 00:15:42 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f760070") sendmsg$nl_xfrm(r0, &(0x7f0000001440)={&(0x7f0000000000)={0x10, 0x4170000}, 0x349, &(0x7f0000001400)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x0, 0xf00000000000000, {{@in=@multicast1=0xe0000001, @in6=@mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x0, 0x0, 0x0, 0xa, 0xfffffff0, 0xf0ffffffffffff}}}, 0xb8}, 0x1}, 0x0) [ 271.832780] cgroup: cgroup_addrm_files: failed to add low, err=-12 [ 271.930504] FAULT_INJECTION: forcing a failure. [ 271.930504] name failslab, interval 1, probability 0, space 0, times 0 [ 271.941880] CPU: 0 PID: 17127 Comm: syz-executor6 Not tainted 4.17.0+ #89 [ 271.948814] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 271.958168] Call Trace: [ 271.960766] dump_stack+0x1b9/0x294 [ 271.964406] ? dump_stack_print_info.cold.2+0x52/0x52 [ 271.969606] ? __save_stack_trace+0x7e/0xd0 [ 271.973936] should_fail.cold.4+0xa/0x1a [ 271.978003] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 271.983114] ? graph_lock+0x170/0x170 [ 271.986914] ? graph_lock+0x170/0x170 [ 271.990721] ? find_held_lock+0x36/0x1c0 [ 271.994784] ? __lock_is_held+0xb5/0x140 [ 271.998854] ? check_same_owner+0x320/0x320 [ 272.003184] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 272.008199] ? rcu_note_context_switch+0x710/0x710 [ 272.013133] __should_failslab+0x124/0x180 [ 272.017371] should_failslab+0x9/0x14 [ 272.021173] __kmalloc_track_caller+0x2c4/0x760 [ 272.025846] ? string+0x21d/0x2c0 [ 272.029302] ? kstrdup_const+0x66/0x80 [ 272.033188] kstrdup+0x39/0x70 [ 272.036381] kstrdup_const+0x66/0x80 [ 272.040097] __kernfs_new_node+0xa8/0x580 [ 272.044248] ? kernfs_dop_revalidate+0x3c0/0x3c0 [ 272.049003] ? pointer+0x930/0x930 [ 272.052551] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 272.058093] ? snprintf+0xa5/0xd0 [ 272.061549] ? vsprintf+0x40/0x40 [ 272.065001] ? cgroup_kn_set_ugid+0x2cb/0x370 [ 272.069505] kernfs_new_node+0x80/0xf0 [ 272.073401] __kernfs_create_file+0x4d/0x330 [ 272.077818] cgroup_addrm_files+0x437/0xb20 [ 272.082155] ? cgroup_css.part.14+0x1f0/0x1f0 [ 272.086659] ? find_held_lock+0x36/0x1c0 [ 272.090736] ? mem_cgroup_css_online+0x23e/0x300 [ 272.095500] ? mod_memcg_state+0x1a0/0x1a0 [ 272.099745] ? __lock_is_held+0xb5/0x140 [ 272.103816] ? kasan_check_write+0x14/0x20 [ 272.108047] ? online_css+0x265/0x330 [ 272.111849] css_populate_dir+0x1a9/0x470 [ 272.116000] cgroup_apply_control_enable+0x449/0xe80 [ 272.121110] ? cgroup_save_control+0x260/0x260 [ 272.125698] ? mutex_unlock+0xd/0x10 [ 272.129412] ? kernfs_setattr+0x39/0x40 [ 272.133387] ? cgroup_kn_set_ugid+0x2cb/0x370 [ 272.137879] ? cgroup_file_name+0x1f0/0x1f0 [ 272.142227] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 272.147775] ? css_populate_dir+0x2a1/0x470 [ 272.152115] cgroup_mkdir+0x876/0x1150 [ 272.156011] ? cgroup_destroy_locked+0x7d0/0x7d0 [ 272.160769] ? put_itimerspec64+0x310/0x310 [ 272.165092] ? set_nlink+0xaf/0x140 [ 272.168728] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 272.174266] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 272.179802] ? kernfs_get_active+0xb2/0x120 [ 272.184125] ? cgroup_destroy_locked+0x7d0/0x7d0 [ 272.188885] kernfs_iop_mkdir+0x159/0x1e0 [ 272.193056] ? getname_flags+0xd0/0x5a0 [ 272.197034] vfs_mkdir+0x42e/0x6b0 [ 272.200581] do_mkdirat+0x266/0x2f0 [ 272.204217] ? __ia32_sys_mknod+0xb0/0xb0 [ 272.208371] ? do_syscall_64+0x92/0x800 [ 272.212346] __x64_sys_mkdir+0x5c/0x80 [ 272.216233] do_syscall_64+0x1b1/0x800 [ 272.220124] ? finish_task_switch+0x1ca/0x840 [ 272.224632] ? syscall_return_slowpath+0x5c0/0x5c0 [ 272.229563] ? syscall_return_slowpath+0x30f/0x5c0 [ 272.234503] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 272.239881] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 272.244734] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 272.249924] RIP: 0033:0x4559f9 [ 272.253108] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 272.272463] RSP: 002b:00007fa94af69c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 272.280163] RAX: ffffffffffffffda RBX: 00007fa94af6a6d4 RCX: 00000000004559f9 [ 272.287414] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000100 [ 272.294671] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 272.301929] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 272.309189] R13: 00000000004bae54 R14: 00000000004cead0 R15: 000000000000004d [ 272.316739] cgroup: cgroup_addrm_files: failed to add high, err=-12 00:15:43 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x10, 0x3, 0x6) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400021d85680c1ba3a20400ff7e280000001100ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 00:15:43 executing program 2: r0 = socket$inet(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0) 00:15:43 executing program 4: pipe2(&(0x7f0000989000)={0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) mount(&(0x7f0000434ff8)='./file0\x00', &(0x7f0000abf000)='./file0\x00', &(0x7f0000f4c000)='jfs\x00', 0x1023402, 0x0) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000001200), 0x3000, &(0x7f0000001280)) unlink(&(0x7f00003b3000)='./file0\x00') dup2(r0, r1) 00:15:43 executing program 6 (fault-call:8 fault-nth:78): r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="295ed277a4200100360070") mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) rmdir(&(0x7f0000000340)='./file0//ile0\x00') r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) fstat(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r2) mkdir(&(0x7f0000000100)='./file0//ile0\x00', 0x0) 00:15:43 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f760070") sendmsg$nl_xfrm(r0, &(0x7f0000001440)={&(0x7f0000000000)={0x10, 0x4170000}, 0x349, &(0x7f0000001400)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x0, 0xfcffffff00000000, {{@in=@multicast1=0xe0000001, @in6=@mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x0, 0x0, 0x0, 0xa, 0xfffffff0, 0xf0ffffffffffff}}}, 0xb8}, 0x1}, 0x0) 00:15:43 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) write$rdma_cm(r1, &(0x7f0000000640)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f00000004c0)}}, 0x20000650) close(r1) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0x6e) listen(r4, 0x0) connect$unix(r3, &(0x7f0000932000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) tkill(r2, 0x1000000000016) 00:15:43 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) write$rdma_cm(r0, &(0x7f0000000640)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f00000004c0)}}, 0x10) close(r0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0x6e) listen(r3, 0x0) connect$unix(r2, &(0x7f0000932000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) tkill(r1, 0x1000000000016) 00:15:43 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[0xfeffffff], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) r2 = socket(0x11, 0x100000803, 0x0) r3 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={"6966623000faffffffffffffff00", 0x12}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'ifb0\x00', 0xa201}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x11, &(0x7f0000000080)={@dev={0xfe, 0x80}, 0x0, 0x0, 0x2}, 0x20) [ 272.470253] FAULT_INJECTION: forcing a failure. [ 272.470253] name failslab, interval 1, probability 0, space 0, times 0 [ 272.481541] CPU: 1 PID: 17164 Comm: syz-executor6 Not tainted 4.17.0+ #89 [ 272.488473] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 272.497829] Call Trace: [ 272.500429] dump_stack+0x1b9/0x294 [ 272.504071] ? dump_stack_print_info.cold.2+0x52/0x52 [ 272.509272] ? __save_stack_trace+0x7e/0xd0 [ 272.513610] should_fail.cold.4+0xa/0x1a [ 272.517688] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 272.522800] ? graph_lock+0x170/0x170 [ 272.526606] ? graph_lock+0x170/0x170 [ 272.530424] ? find_held_lock+0x36/0x1c0 [ 272.534507] ? __lock_is_held+0xb5/0x140 [ 272.538594] ? check_same_owner+0x320/0x320 [ 272.542922] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 272.547941] ? rcu_note_context_switch+0x710/0x710 [ 272.552881] __should_failslab+0x124/0x180 [ 272.557121] should_failslab+0x9/0x14 [ 272.560927] __kmalloc_track_caller+0x2c4/0x760 [ 272.565605] ? string+0x21d/0x2c0 [ 272.569066] ? kstrdup_const+0x66/0x80 [ 272.572963] kstrdup+0x39/0x70 [ 272.576167] kstrdup_const+0x66/0x80 [ 272.579889] __kernfs_new_node+0xa8/0x580 [ 272.584062] ? kernfs_dop_revalidate+0x3c0/0x3c0 [ 272.588824] ? pointer+0x930/0x930 [ 272.592381] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 272.597934] ? snprintf+0xa5/0xd0 [ 272.601404] ? vsprintf+0x40/0x40 [ 272.604864] ? cgroup_kn_set_ugid+0x2cb/0x370 [ 272.609370] kernfs_new_node+0x80/0xf0 [ 272.613268] __kernfs_create_file+0x4d/0x330 [ 272.617688] cgroup_addrm_files+0x437/0xb20 [ 272.622028] ? cgroup_css.part.14+0x1f0/0x1f0 [ 272.626528] ? find_held_lock+0x36/0x1c0 [ 272.630602] ? mem_cgroup_css_online+0x23e/0x300 [ 272.635370] ? mod_memcg_state+0x1a0/0x1a0 [ 272.639619] ? __lock_is_held+0xb5/0x140 [ 272.643689] ? kasan_check_write+0x14/0x20 [ 272.647926] ? online_css+0x265/0x330 [ 272.651735] css_populate_dir+0x1a9/0x470 [ 272.655916] cgroup_apply_control_enable+0x449/0xe80 [ 272.661038] ? cgroup_save_control+0x260/0x260 [ 272.665625] ? mutex_unlock+0xd/0x10 [ 272.669340] ? kernfs_setattr+0x39/0x40 [ 272.673317] ? cgroup_kn_set_ugid+0x2cb/0x370 [ 272.677818] ? cgroup_file_name+0x1f0/0x1f0 [ 272.682146] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 272.687685] ? css_populate_dir+0x2a1/0x470 [ 272.692019] cgroup_mkdir+0x876/0x1150 [ 272.695918] ? cgroup_destroy_locked+0x7d0/0x7d0 [ 272.700676] ? put_itimerspec64+0x310/0x310 [ 272.705008] ? set_nlink+0xaf/0x140 [ 272.708639] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 272.714181] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 272.719722] ? kernfs_get_active+0xb2/0x120 [ 272.724049] ? cgroup_destroy_locked+0x7d0/0x7d0 [ 272.728810] kernfs_iop_mkdir+0x159/0x1e0 [ 272.732973] ? getname_flags+0xd0/0x5a0 [ 272.736959] vfs_mkdir+0x42e/0x6b0 [ 272.740511] do_mkdirat+0x266/0x2f0 [ 272.744147] ? __ia32_sys_mknod+0xb0/0xb0 [ 272.748306] ? do_syscall_64+0x92/0x800 [ 272.752287] __x64_sys_mkdir+0x5c/0x80 [ 272.756184] do_syscall_64+0x1b1/0x800 [ 272.760079] ? finish_task_switch+0x1ca/0x840 [ 272.764588] ? syscall_return_slowpath+0x5c0/0x5c0 [ 272.769526] ? syscall_return_slowpath+0x30f/0x5c0 [ 272.774468] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 272.779843] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 272.784705] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 272.789892] RIP: 0033:0x4559f9 [ 272.793076] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 272.812435] RSP: 002b:00007fa94af69c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 00:15:43 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f760070") sendmsg$nl_xfrm(r0, &(0x7f0000001440)={&(0x7f0000000000)={0x10, 0x4170000}, 0x349, &(0x7f0000001400)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x0, 0xf000000, {{@in=@multicast1=0xe0000001, @in6=@mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x0, 0x0, 0x0, 0xa, 0xfffffff0, 0xf0ffffffffffff}}}, 0xb8}, 0x1}, 0x0) 00:15:43 executing program 2: r0 = socket$inet(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0) 00:15:43 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f760070") sendmsg$nl_xfrm(r0, &(0x7f0000001440)={&(0x7f0000000000)={0x10, 0x4170000}, 0x349, &(0x7f0000001400)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x0, 0x300, {{@in=@multicast1=0xe0000001, @in6=@mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x0, 0x0, 0x0, 0xa, 0xfffffff0, 0xf0ffffffffffff}}}, 0xb8}, 0x1}, 0x0) 00:15:43 executing program 2: r0 = socket$inet(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0) 00:15:43 executing program 2: r0 = socket$inet(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0) 00:15:43 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f760070") sendmsg$nl_xfrm(r0, &(0x7f0000001440)={&(0x7f0000000000)={0x10, 0x4170000}, 0x349, &(0x7f0000001400)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x0, 0x2, {{@in=@multicast1=0xe0000001, @in6=@mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x0, 0x0, 0x0, 0xa, 0xfffffff0, 0xf0ffffffffffff}}}, 0xb8}, 0x1}, 0x0) 00:15:43 executing program 2: r0 = socket$inet(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0) 00:15:43 executing program 2: r0 = socket$inet(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0) [ 272.820156] RAX: ffffffffffffffda RBX: 00007fa94af6a6d4 RCX: 00000000004559f9 [ 272.827434] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000100 [ 272.834722] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 272.842000] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 272.849274] R13: 00000000004bae54 R14: 00000000004cead0 R15: 000000000000004e [ 272.856758] cgroup: cgroup_addrm_files: failed to add high, err=-12 00:15:44 executing program 4: pipe2(&(0x7f0000989000)={0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) mount(&(0x7f0000434ff8)='./file0\x00', &(0x7f0000abf000)='./file0\x00', &(0x7f0000f4c000)='jfs\x00', 0x1023402, 0x0) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000001200), 0x3000, &(0x7f0000001280)) unlink(&(0x7f00003b3000)='./file0\x00') dup2(r0, r1) 00:15:44 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x10, 0x3, 0x6) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680b1ba3a20400ff7e280000001100ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 00:15:44 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[0xfeffffff], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) r2 = socket(0x11, 0x100000803, 0x0) r3 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={"6966623000faffffffffffffff00", 0x12}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'ifb0\x00', 0xa201}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x3b, &(0x7f0000000080)={@dev={0xfe, 0x80}, 0x0, 0x0, 0x2}, 0x20) 00:15:44 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f760070") sendmsg$nl_xfrm(r0, &(0x7f0000001440)={&(0x7f0000000000)={0x10, 0x4170000}, 0x349, &(0x7f0000001400)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x0, 0x4, {{@in=@multicast1=0xe0000001, @in6=@mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x0, 0x0, 0x0, 0xa, 0xfffffff0, 0xf0ffffffffffff}}}, 0xb8}, 0x1}, 0x0) 00:15:44 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) write$rdma_cm(r0, &(0x7f0000000640)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f00000004c0)}}, 0x10) close(r0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0x6e) listen(r3, 0x0) connect$unix(r2, &(0x7f0000932000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) tkill(r1, 0x1000000000016) 00:15:44 executing program 2: r0 = socket$inet(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0) 00:15:44 executing program 6 (fault-call:8 fault-nth:79): r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="295ed277a4200100360070") mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) rmdir(&(0x7f0000000340)='./file0//ile0\x00') r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) fstat(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r2) mkdir(&(0x7f0000000100)='./file0//ile0\x00', 0x0) 00:15:44 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) write$rdma_cm(r1, &(0x7f0000000640)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f00000004c0)}}, 0x7) close(r1) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0x6e) listen(r4, 0x0) connect$unix(r3, &(0x7f0000932000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) tkill(r2, 0x1000000000016) 00:15:44 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f760070") sendmsg$nl_xfrm(r0, &(0x7f0000001440)={&(0x7f0000000000)={0x10, 0x4170000}, 0x349, &(0x7f0000001400)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x0, 0x400000000000000, {{@in=@multicast1=0xe0000001, @in6=@mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x0, 0x0, 0x0, 0xa, 0xfffffff0, 0xf0ffffffffffff}}}, 0xb8}, 0x1}, 0x0) 00:15:44 executing program 2: r0 = socket$inet(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0) [ 273.534953] FAULT_INJECTION: forcing a failure. [ 273.534953] name failslab, interval 1, probability 0, space 0, times 0 [ 273.546250] CPU: 0 PID: 17235 Comm: syz-executor6 Not tainted 4.17.0+ #89 [ 273.553185] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 273.562542] Call Trace: [ 273.565144] dump_stack+0x1b9/0x294 [ 273.568791] ? dump_stack_print_info.cold.2+0x52/0x52 [ 273.574004] should_fail.cold.4+0xa/0x1a [ 273.578142] ? __kmalloc_track_caller+0x14a/0x760 [ 273.583001] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 273.588112] ? cgroup_mkdir+0x876/0x1150 [ 273.592181] ? kernfs_iop_mkdir+0x159/0x1e0 [ 273.596511] ? vfs_mkdir+0x42e/0x6b0 [ 273.600232] ? do_mkdirat+0x266/0x2f0 [ 273.604035] ? __x64_sys_mkdir+0x5c/0x80 [ 273.608105] ? do_syscall_64+0x1b1/0x800 [ 273.612178] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 273.617548] ? graph_lock+0x170/0x170 [ 273.621353] ? find_held_lock+0x36/0x1c0 [ 273.625425] ? print_usage_bug+0xc0/0xc0 [ 273.629501] ? find_held_lock+0x36/0x1c0 00:15:44 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x10, 0x3, 0x6) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d8568251ba3a20400ff7e280000001100ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 00:15:44 executing program 2: r0 = socket$inet(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0) 00:15:44 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f760070") sendmsg$nl_xfrm(r0, &(0x7f0000001440)={&(0x7f0000000000)={0x10, 0x4170000}, 0x349, &(0x7f0000001400)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x0, 0xffffff7f00000000, {{@in=@multicast1=0xe0000001, @in6=@mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x0, 0x0, 0x0, 0xa, 0xfffffff0, 0xf0ffffffffffff}}}, 0xb8}, 0x1}, 0x0) [ 273.633574] ? __lock_is_held+0xb5/0x140 [ 273.637647] ? check_same_owner+0x320/0x320 [ 273.641978] ? rcu_note_context_switch+0x710/0x710 [ 273.646918] ? rcu_read_lock_sched_held+0x108/0x120 [ 273.651946] __should_failslab+0x124/0x180 [ 273.656198] should_failslab+0x9/0x14 [ 273.660005] kmem_cache_alloc+0x2af/0x760 [ 273.664161] ? memcpy+0x45/0x50 [ 273.667450] ? kstrdup+0x59/0x70 [ 273.670841] __kernfs_new_node+0xe7/0x580 [ 273.675001] ? kernfs_dop_revalidate+0x3c0/0x3c0 [ 273.679770] ? pointer+0x930/0x930 [ 273.683330] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 273.688889] ? snprintf+0xa5/0xd0 [ 273.692355] ? vsprintf+0x40/0x40 [ 273.695818] ? cgroup_kn_set_ugid+0x2cb/0x370 [ 273.700326] kernfs_new_node+0x80/0xf0 [ 273.704223] __kernfs_create_file+0x4d/0x330 [ 273.708640] cgroup_addrm_files+0x437/0xb20 [ 273.712973] ? cgroup_css.part.14+0x1f0/0x1f0 [ 273.717473] ? find_held_lock+0x36/0x1c0 [ 273.721543] ? mem_cgroup_css_online+0x23e/0x300 [ 273.726310] ? mod_memcg_state+0x1a0/0x1a0 [ 273.730556] ? __lock_is_held+0xb5/0x140 00:15:44 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x10, 0x3, 0x6) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20300ff7e280000001100ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 00:15:44 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) write$rdma_cm(r1, &(0x7f0000000640)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f00000004c0)}}, 0xfffffffffffffdef) close(r1) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0x6e) listen(r4, 0x0) connect$unix(r3, &(0x7f0000932000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) tkill(r2, 0x1000000000016) [ 273.734660] ? kasan_check_write+0x14/0x20 [ 273.738896] ? online_css+0x265/0x330 [ 273.742706] css_populate_dir+0x1a9/0x470 [ 273.746865] cgroup_apply_control_enable+0x449/0xe80 [ 273.751984] ? cgroup_save_control+0x260/0x260 [ 273.756571] ? mutex_unlock+0xd/0x10 [ 273.760290] ? kernfs_setattr+0x39/0x40 [ 273.764271] ? cgroup_kn_set_ugid+0x2cb/0x370 [ 273.768771] ? cgroup_file_name+0x1f0/0x1f0 [ 273.773101] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 273.778640] ? css_populate_dir+0x2a1/0x470 00:15:44 executing program 2: r0 = socket$inet(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0) [ 273.782976] cgroup_mkdir+0x876/0x1150 [ 273.786869] ? cgroup_destroy_locked+0x7d0/0x7d0 [ 273.791636] ? put_itimerspec64+0x310/0x310 [ 273.795971] ? set_nlink+0xaf/0x140 [ 273.799602] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 273.805152] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 273.810693] ? kernfs_get_active+0xb2/0x120 [ 273.815020] ? cgroup_destroy_locked+0x7d0/0x7d0 [ 273.819785] kernfs_iop_mkdir+0x159/0x1e0 [ 273.823934] ? getname_flags+0xd0/0x5a0 [ 273.827908] vfs_mkdir+0x42e/0x6b0 [ 273.828646] netlink: 4 bytes leftover after parsing attributes in process `syz-executor7'. [ 273.831449] do_mkdirat+0x266/0x2f0 [ 273.831469] ? __ia32_sys_mknod+0xb0/0xb0 [ 273.831487] ? syscall_slow_exit_work+0x4f0/0x4f0 [ 273.831505] ? do_syscall_64+0x92/0x800 [ 273.831522] __x64_sys_mkdir+0x5c/0x80 [ 273.831538] do_syscall_64+0x1b1/0x800 [ 273.831558] ? finish_task_switch+0x1ca/0x840 [ 273.868715] ? syscall_return_slowpath+0x5c0/0x5c0 [ 273.873654] ? syscall_return_slowpath+0x30f/0x5c0 [ 273.878596] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 273.883969] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 273.888823] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 273.894022] RIP: 0033:0x4559f9 [ 273.897204] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 273.916520] RSP: 002b:00007fa94af69c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 273.924237] RAX: ffffffffffffffda RBX: 00007fa94af6a6d4 RCX: 00000000004559f9 [ 273.931513] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000100 [ 273.938780] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 273.946053] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 273.953324] R13: 00000000004bae54 R14: 00000000004cead0 R15: 000000000000004f [ 273.960822] cgroup: cgroup_addrm_files: failed to add high, err=-12 00:15:45 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x10, 0x3, 0x6) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a2ff3eff7e280000001100ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 00:15:45 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) write$rdma_cm(r1, &(0x7f0000000640)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f00000004c0)}}, 0xfdef) close(r1) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0x6e) listen(r4, 0x0) connect$unix(r3, &(0x7f0000932000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) tkill(r2, 0x1000000000016) 00:15:45 executing program 6 (fault-call:8 fault-nth:80): r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="295ed277a4200100360070") mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) rmdir(&(0x7f0000000340)='./file0//ile0\x00') r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) fstat(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r2) mkdir(&(0x7f0000000100)='./file0//ile0\x00', 0x0) 00:15:45 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) write$rdma_cm(r0, &(0x7f0000000640)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f00000004c0)}}, 0x10) close(r0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0x6e) listen(r3, 0x0) connect$unix(r2, &(0x7f0000932000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) tkill(r1, 0x1000000000016) 00:15:45 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[0xfeffffff], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) r2 = socket(0x11, 0x100000803, 0x0) r3 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={"6966623000faffffffffffffff00", 0x12}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'ifb0\x00', 0xa201}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x48, &(0x7f0000000080)={@dev={0xfe, 0x80}, 0x0, 0x0, 0x2}, 0x20) 00:15:45 executing program 4: pipe2(&(0x7f0000989000)={0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) mount(&(0x7f0000434ff8)='./file0\x00', &(0x7f0000abf000)='./file0\x00', &(0x7f0000f4c000)='jfs\x00', 0x1023402, 0x0) syz_mount_image$vfat(&(0x7f0000000040)="76666174ff", &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000001200), 0x3000, &(0x7f0000001280)) unlink(&(0x7f00003b3000)='./file0\x00') dup2(r0, r1) 00:15:45 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f760070") sendmsg$nl_xfrm(r0, &(0x7f0000001440)={&(0x7f0000000000)={0x10, 0x4170000}, 0x349, &(0x7f0000001400)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x0, 0x2000000, {{@in=@multicast1=0xe0000001, @in6=@mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x0, 0x0, 0x0, 0xa, 0xfffffff0, 0xf0ffffffffffff}}}, 0xb8}, 0x1}, 0x0) 00:15:45 executing program 2: r0 = socket$inet(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x6000000) [ 274.470082] netlink: 4 bytes leftover after parsing attributes in process `syz-executor7'. [ 274.487476] FAULT_INJECTION: forcing a failure. [ 274.487476] name failslab, interval 1, probability 0, space 0, times 0 [ 274.498860] CPU: 0 PID: 17304 Comm: syz-executor6 Not tainted 4.17.0+ #89 [ 274.505792] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 274.515147] Call Trace: 00:15:45 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x10, 0x3, 0x6) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a2040bff7e280000001100ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 00:15:45 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f760070") sendmsg$nl_xfrm(r0, &(0x7f0000001440)={&(0x7f0000000000)={0x10, 0x4170000}, 0x349, &(0x7f0000001400)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in6=@mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x0, 0x0, 0x0, 0xa, 0xfffffff0, 0xf0ffffffffffff}}}, 0xb8}, 0x1}, 0x0) 00:15:45 executing program 2: r0 = socket$inet(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x8000000) [ 274.517748] dump_stack+0x1b9/0x294 [ 274.521391] ? dump_stack_print_info.cold.2+0x52/0x52 [ 274.526591] ? check_same_owner+0x320/0x320 [ 274.530926] ? mutex_trylock+0x2a0/0x2a0 [ 274.535004] should_fail.cold.4+0xa/0x1a [ 274.539075] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 274.544182] ? __mutex_lock+0x7d9/0x17f0 [ 274.548247] ? graph_lock+0x170/0x170 [ 274.552057] ? kernfs_setattr+0x20/0x40 [ 274.556043] ? graph_lock+0x170/0x170 [ 274.559861] ? find_held_lock+0x36/0x1c0 [ 274.563941] ? __lock_is_held+0xb5/0x140 00:15:45 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f760070") sendmsg$nl_xfrm(r0, &(0x7f0000001440)={&(0x7f0000000000)={0x10, 0x4170000}, 0x349, &(0x7f0000001400)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x0, 0x0, {{@in=@multicast1=0xe0000003, @in6=@mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x0, 0x0, 0x0, 0xa, 0xfffffff0, 0xf0ffffffffffff}}}, 0xb8}, 0x1}, 0x0) [ 274.568018] ? check_same_owner+0x320/0x320 [ 274.572360] ? rcu_note_context_switch+0x710/0x710 [ 274.577295] ? lock_downgrade+0x8e0/0x8e0 [ 274.581456] __should_failslab+0x124/0x180 [ 274.585696] should_failslab+0x9/0x14 [ 274.589504] kmem_cache_alloc_trace+0x2cb/0x780 [ 274.594181] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 274.599128] kernfs_iattrs.isra.4+0x123/0x4e0 [ 274.601048] netlink: 4 bytes leftover after parsing attributes in process `syz-executor7'. [ 274.603630] ? ktime_get_real_ts64+0x361/0x510 00:15:45 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f760070") sendmsg$nl_xfrm(r0, &(0x7f0000001440)={&(0x7f0000000000)={0x10, 0x4170000}, 0x349, &(0x7f0000001400)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x0, 0x0, {{@in=@multicast1=0xe000000e, @in6=@mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x0, 0x0, 0x0, 0xa, 0xfffffff0, 0xf0ffffffffffff}}}, 0xb8}, 0x1}, 0x0) 00:15:45 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x10, 0x3, 0x6) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20405ff7e280000001100ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) [ 274.603651] ? kernfs_iop_permission+0xb0/0xb0 [ 274.603670] ? ktime_get_with_offset+0x4a0/0x4a0 [ 274.603697] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 274.603714] __kernfs_setattr+0x57/0x440 [ 274.603732] kernfs_setattr+0x2b/0x40 [ 274.603745] cgroup_kn_set_ugid+0x2c3/0x370 [ 274.603763] ? cgroup_file_name+0x1f0/0x1f0 [ 274.648033] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 274.653579] ? __kernfs_create_file+0x29b/0x330 [ 274.658260] cgroup_addrm_files+0x465/0xb20 [ 274.662594] ? cgroup_css.part.14+0x1f0/0x1f0 [ 274.667114] ? find_held_lock+0x36/0x1c0 [ 274.671183] ? mem_cgroup_css_online+0x23e/0x300 [ 274.675947] ? mod_memcg_state+0x1a0/0x1a0 [ 274.680193] ? __lock_is_held+0xb5/0x140 [ 274.684271] ? kasan_check_write+0x14/0x20 [ 274.688513] ? online_css+0x265/0x330 [ 274.692329] css_populate_dir+0x1a9/0x470 [ 274.696488] cgroup_apply_control_enable+0x449/0xe80 [ 274.701608] ? cgroup_save_control+0x260/0x260 [ 274.706197] ? mutex_unlock+0xd/0x10 [ 274.708208] netlink: 4 bytes leftover after parsing attributes in process `syz-executor7'. 00:15:45 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f760070") sendmsg$nl_xfrm(r0, &(0x7f0000001440)={&(0x7f0000000000)={0x10, 0x4170000}, 0x349, &(0x7f0000001400)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x0, 0x0, {{@in=@multicast1=0xe0001300, @in6=@mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x0, 0x0, 0x0, 0xa, 0xfffffff0, 0xf0ffffffffffff}}}, 0xb8}, 0x1}, 0x0) [ 274.709926] ? kernfs_setattr+0x39/0x40 [ 274.709944] ? cgroup_kn_set_ugid+0x2cb/0x370 [ 274.709958] ? cgroup_file_name+0x1f0/0x1f0 [ 274.709982] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 274.709996] ? css_populate_dir+0x2a1/0x470 [ 274.710016] cgroup_mkdir+0x876/0x1150 [ 274.710040] ? cgroup_destroy_locked+0x7d0/0x7d0 [ 274.710061] ? put_itimerspec64+0x310/0x310 [ 274.753970] ? set_nlink+0xaf/0x140 [ 274.757605] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 274.763149] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 00:15:45 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f760070") sendmsg$nl_xfrm(r0, &(0x7f0000001440)={&(0x7f0000000000)={0x10, 0x4170000}, 0x349, &(0x7f0000001400)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x0, 0x0, {{@in=@multicast1=0xe0000008, @in6=@mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x0, 0x0, 0x0, 0xa, 0xfffffff0, 0xf0ffffffffffff}}}, 0xb8}, 0x1}, 0x0) [ 274.768691] ? kernfs_get_active+0xb2/0x120 [ 274.773016] ? cgroup_destroy_locked+0x7d0/0x7d0 [ 274.777777] kernfs_iop_mkdir+0x159/0x1e0 [ 274.781929] ? getname_flags+0xd0/0x5a0 [ 274.785907] vfs_mkdir+0x42e/0x6b0 [ 274.789453] do_mkdirat+0x266/0x2f0 [ 274.793094] ? __ia32_sys_mknod+0xb0/0xb0 [ 274.797246] ? syscall_slow_exit_work+0x4f0/0x4f0 [ 274.802093] ? do_syscall_64+0x92/0x800 [ 274.806077] __x64_sys_mkdir+0x5c/0x80 [ 274.809988] do_syscall_64+0x1b1/0x800 [ 274.813875] ? finish_task_switch+0x1ca/0x840 [ 274.818440] ? syscall_return_slowpath+0x5c0/0x5c0 [ 274.823376] ? syscall_return_slowpath+0x30f/0x5c0 [ 274.828317] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 274.833691] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 274.838536] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 274.843717] RIP: 0033:0x4559f9 [ 274.846885] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 274.866087] RSP: 002b:00007fa94af69c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 274.873786] RAX: ffffffffffffffda RBX: 00007fa94af6a6d4 RCX: 00000000004559f9 [ 274.881056] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000100 [ 274.888314] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 274.895568] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 274.902826] R13: 00000000004bae54 R14: 00000000004cead0 R15: 0000000000000050 [ 274.915157] cgroup: cgroup_addrm_files: failed to add high, err=-12 00:15:46 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x10, 0x3, 0x6) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20409ff7e280000001100ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 00:15:46 executing program 2: r0 = socket$inet(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0xa00) 00:15:46 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f760070") sendmsg$nl_xfrm(r0, &(0x7f0000001440)={&(0x7f0000000000)={0x10, 0x4170000}, 0x349, &(0x7f0000001400)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x0, 0x0, {{@in=@multicast1=0xe0000001, @in6=@mcast2={0xff, 0x3, [], 0x1}, 0x0, 0x0, 0x0, 0x0, 0xa, 0xfffffff0, 0xf0ffffffffffff}}}, 0xb8}, 0x1}, 0x0) 00:15:46 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[0xfeffffff], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) r2 = socket(0x11, 0x100000803, 0x0) r3 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={"6966623000faffffffffffffff00", 0x12}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'ifb0\x00', 0xa201}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x35, &(0x7f0000000080)={@dev={0xfe, 0x80}, 0x0, 0x0, 0x2}, 0x20) 00:15:46 executing program 4: pipe2(&(0x7f0000989000)={0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) mount(&(0x7f0000434ff8)='./file0\x00', &(0x7f0000abf000)='./file0\x00', &(0x7f0000f4c000)='jfs\x00', 0x1023402, 0x0) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000001200), 0x3000, &(0x7f0000001280)) unlink(&(0x7f00003b3000)='./file0\x00') dup2(r0, r1) 00:15:46 executing program 6 (fault-call:8 fault-nth:81): r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="295ed277a4200100360070") mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) rmdir(&(0x7f0000000340)='./file0//ile0\x00') r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) fstat(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r2) mkdir(&(0x7f0000000100)='./file0//ile0\x00', 0x0) 00:15:46 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) write$rdma_cm(r1, &(0x7f0000000640)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f00000004c0)}}, 0xc0) close(r1) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0x6e) listen(r4, 0x0) connect$unix(r3, &(0x7f0000932000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) tkill(r2, 0x1000000000016) 00:15:46 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) write$rdma_cm(r0, &(0x7f0000000640)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f00000004c0)}}, 0x10) close(r0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0x6e) listen(r3, 0x0) connect$unix(r2, &(0x7f0000932000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) tkill(r1, 0x1000000000016) [ 275.899797] FAULT_INJECTION: forcing a failure. [ 275.899797] name failslab, interval 1, probability 0, space 0, times 0 [ 275.911084] CPU: 1 PID: 17375 Comm: syz-executor6 Not tainted 4.17.0+ #89 [ 275.918016] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 275.927375] Call Trace: [ 275.929983] dump_stack+0x1b9/0x294 [ 275.933638] ? dump_stack_print_info.cold.2+0x52/0x52 [ 275.938844] ? __save_stack_trace+0x7e/0xd0 [ 275.943198] should_fail.cold.4+0xa/0x1a [ 275.947275] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 275.952396] ? graph_lock+0x170/0x170 [ 275.956207] ? graph_lock+0x170/0x170 [ 275.960023] ? find_held_lock+0x36/0x1c0 [ 275.964103] ? __lock_is_held+0xb5/0x140 [ 275.968179] ? check_same_owner+0x320/0x320 [ 275.972507] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 275.977533] ? rcu_note_context_switch+0x710/0x710 [ 275.978590] netlink: 4 bytes leftover after parsing attributes in process `syz-executor7'. [ 275.982476] __should_failslab+0x124/0x180 [ 275.982496] should_failslab+0x9/0x14 [ 275.982510] __kmalloc_track_caller+0x2c4/0x760 [ 275.982529] ? string+0x21d/0x2c0 [ 276.007017] ? kstrdup_const+0x66/0x80 [ 276.010914] kstrdup+0x39/0x70 [ 276.014108] kstrdup_const+0x66/0x80 [ 276.017822] __kernfs_new_node+0xa8/0x580 [ 276.021981] ? kernfs_dop_revalidate+0x3c0/0x3c0 [ 276.026743] ? pointer+0x930/0x930 [ 276.030292] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 276.035841] ? snprintf+0xa5/0xd0 [ 276.039299] ? vsprintf+0x40/0x40 [ 276.042758] ? cgroup_kn_set_ugid+0x2cb/0x370 [ 276.047259] kernfs_new_node+0x80/0xf0 [ 276.051152] __kernfs_create_file+0x4d/0x330 [ 276.055570] cgroup_addrm_files+0x437/0xb20 [ 276.059898] ? cgroup_css.part.14+0x1f0/0x1f0 [ 276.064397] ? find_held_lock+0x36/0x1c0 [ 276.068472] ? mem_cgroup_css_online+0x23e/0x300 [ 276.073229] ? mod_memcg_state+0x1a0/0x1a0 [ 276.077469] ? __lock_is_held+0xb5/0x140 [ 276.081544] ? kasan_check_write+0x14/0x20 [ 276.085780] ? online_css+0x265/0x330 [ 276.089589] css_populate_dir+0x1a9/0x470 [ 276.093745] cgroup_apply_control_enable+0x449/0xe80 [ 276.098858] ? cgroup_save_control+0x260/0x260 [ 276.103447] ? mutex_unlock+0xd/0x10 [ 276.107158] ? kernfs_setattr+0x39/0x40 [ 276.111137] ? cgroup_kn_set_ugid+0x2cb/0x370 [ 276.115633] ? cgroup_file_name+0x1f0/0x1f0 [ 276.119964] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 276.125502] ? css_populate_dir+0x2a1/0x470 [ 276.129838] cgroup_mkdir+0x876/0x1150 [ 276.133739] ? cgroup_destroy_locked+0x7d0/0x7d0 [ 276.138503] ? put_itimerspec64+0x310/0x310 [ 276.139211] netlink: 4 bytes leftover after parsing attributes in process `syz-executor7'. [ 276.142825] ? set_nlink+0xaf/0x140 [ 276.142843] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 276.142862] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 276.142878] ? kernfs_get_active+0xb2/0x120 [ 276.142894] ? cgroup_destroy_locked+0x7d0/0x7d0 [ 276.142908] kernfs_iop_mkdir+0x159/0x1e0 [ 276.142927] ? getname_flags+0xd0/0x5a0 [ 276.183122] vfs_mkdir+0x42e/0x6b0 [ 276.186676] do_mkdirat+0x266/0x2f0 [ 276.190337] ? __ia32_sys_mknod+0xb0/0xb0 [ 276.194492] ? do_syscall_64+0x92/0x800 [ 276.198474] __x64_sys_mkdir+0x5c/0x80 [ 276.202368] do_syscall_64+0x1b1/0x800 [ 276.206264] ? finish_task_switch+0x1ca/0x840 [ 276.210765] ? syscall_return_slowpath+0x5c0/0x5c0 [ 276.215703] ? syscall_return_slowpath+0x30f/0x5c0 [ 276.220642] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 276.226016] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 276.230873] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 276.236067] RIP: 0033:0x4559f9 00:15:46 executing program 2: r0 = socket$inet(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0xf) 00:15:46 executing program 2: r0 = socket$inet(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x8) 00:15:46 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f760070") sendmsg$nl_xfrm(r0, &(0x7f0000001440)={&(0x7f0000000000)={0x10, 0x4170000}, 0x349, &(0x7f0000001400)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x0, 0x0, {{@in=@multicast1=0xe0000001, @in6=@mcast2={0xff, 0x4, [], 0x1}, 0x0, 0x0, 0x0, 0x0, 0xa, 0xfffffff0, 0xf0ffffffffffff}}}, 0xb8}, 0x1}, 0x0) 00:15:46 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x10, 0x3, 0x6) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20402ff7e280000001100ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 00:15:46 executing program 2: r0 = socket$inet(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x9) 00:15:46 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f760070") sendmsg$nl_xfrm(r0, &(0x7f0000001440)={&(0x7f0000000000)={0x10, 0x4170000}, 0x349, &(0x7f0000001400)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x0, 0x0, {{@in=@multicast1=0xe0000001, @in6=@mcast2={0xff, 0xe, [], 0x1}, 0x0, 0x0, 0x0, 0x0, 0xa, 0xfffffff0, 0xf0ffffffffffff}}}, 0xb8}, 0x1}, 0x0) 00:15:46 executing program 2: r0 = socket$inet(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x3f00000000000000) [ 276.239248] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 276.258624] RSP: 002b:00007fa94af69c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 276.266347] RAX: ffffffffffffffda RBX: 00007fa94af6a6d4 RCX: 00000000004559f9 [ 276.273617] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000100 [ 276.280885] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 276.288154] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 276.295422] R13: 00000000004bae54 R14: 00000000004cead0 R15: 0000000000000051 [ 276.302879] cgroup: cgroup_addrm_files: failed to add max, err=-12 00:15:47 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f760070") sendmsg$nl_xfrm(r0, &(0x7f0000001440)={&(0x7f0000000000)={0x10, 0x4170000}, 0x349, &(0x7f0000001400)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x0, 0x0, {{@in=@multicast1=0xe0000001, @in6=@mcast2={0xff, 0x2, [0x300], 0x1}, 0x0, 0x0, 0x0, 0x0, 0xa, 0xfffffff0, 0xf0ffffffffffff}}}, 0xb8}, 0x1}, 0x0) 00:15:47 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x10, 0x3, 0x6) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20403ff7e280000001100ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 00:15:47 executing program 2: r0 = socket$inet(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0xffffff7f00000000) 00:15:47 executing program 6 (fault-call:8 fault-nth:82): r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="295ed277a4200100360070") mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) rmdir(&(0x7f0000000340)='./file0//ile0\x00') r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) fstat(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r2) mkdir(&(0x7f0000000100)='./file0//ile0\x00', 0x0) 00:15:47 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) write$rdma_cm(r0, &(0x7f0000000640)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f00000004c0)}}, 0x10) close(r0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0x6e) listen(r3, 0x0) connect$unix(r2, &(0x7f0000932000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) tkill(r1, 0x1000000000016) 00:15:47 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[0xfeffffff], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) r2 = socket(0x11, 0x100000803, 0x0) r3 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={"6966623000faffffffffffffff00", 0x12}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'ifb0\x00', 0xa201}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x42, &(0x7f0000000080)={@dev={0xfe, 0x80}, 0x0, 0x0, 0x2}, 0x20) 00:15:47 executing program 4: pipe2(&(0x7f0000989000)={0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) mount(&(0x7f0000434ff8)='./file0\x00', &(0x7f0000abf000)='./file0\x00', &(0x7f0000f4c000)='jfs\x00', 0x1023402, 0x0) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000001200), 0x3000, &(0x7f0000001280)) unlink(&(0x7f00003b3000)='./file0\x00') dup2(r0, r1) 00:15:47 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) write$rdma_cm(r1, &(0x7f0000000640)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f00000004c0)}}, 0x10) close(r1) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0x6e) listen(r4, 0x0) r5 = msgget(0x0, 0x400) msgctl$IPC_INFO(r5, 0x3, &(0x7f0000000040)=""/214) connect$unix(r3, &(0x7f0000932000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) tkill(r2, 0x1000000000016) 00:15:48 executing program 2: r0 = socket$inet(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0xffffff80) 00:15:48 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f760070") sendmsg$nl_xfrm(r0, &(0x7f0000001440)={&(0x7f0000000000)={0x10, 0x4170000}, 0x349, &(0x7f0000001400)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x0, 0x0, {{@in=@multicast1=0xe0000001, @in6=@mcast2={0xff, 0x2, [0xa002], 0x1}, 0x0, 0x0, 0x0, 0x0, 0xa, 0xfffffff0, 0xf0ffffffffffff}}}, 0xb8}, 0x1}, 0x0) [ 277.330515] netlink: 4 bytes leftover after parsing attributes in process `syz-executor7'. [ 277.342863] FAULT_INJECTION: forcing a failure. [ 277.342863] name failslab, interval 1, probability 0, space 0, times 0 [ 277.354261] CPU: 1 PID: 17452 Comm: syz-executor6 Not tainted 4.17.0+ #89 [ 277.361195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 277.370552] Call Trace: [ 277.373161] dump_stack+0x1b9/0x294 00:15:48 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x10, 0x3, 0x6) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20428ff7e280000001100ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) [ 277.376808] ? dump_stack_print_info.cold.2+0x52/0x52 [ 277.382014] ? __save_stack_trace+0x7e/0xd0 [ 277.386359] should_fail.cold.4+0xa/0x1a [ 277.390446] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 277.395574] ? graph_lock+0x170/0x170 [ 277.399387] ? graph_lock+0x170/0x170 [ 277.403228] ? find_held_lock+0x36/0x1c0 [ 277.407307] ? __lock_is_held+0xb5/0x140 [ 277.411421] ? check_same_owner+0x320/0x320 [ 277.415754] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 277.420776] ? rcu_note_context_switch+0x710/0x710 [ 277.425726] __should_failslab+0x124/0x180 00:15:48 executing program 2: r0 = socket$inet(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x10) [ 277.429976] should_failslab+0x9/0x14 [ 277.433784] __kmalloc_track_caller+0x2c4/0x760 [ 277.437551] netlink: 4 bytes leftover after parsing attributes in process `syz-executor7'. [ 277.438453] ? string+0x21d/0x2c0 [ 277.438475] ? kstrdup_const+0x66/0x80 [ 277.438493] kstrdup+0x39/0x70 [ 277.438511] kstrdup_const+0x66/0x80 [ 277.438528] __kernfs_new_node+0xa8/0x580 [ 277.438546] ? kernfs_dop_revalidate+0x3c0/0x3c0 [ 277.470025] ? pointer+0x930/0x930 [ 277.473582] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 00:15:48 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f760070") sendmsg$nl_xfrm(r0, &(0x7f0000001440)={&(0x7f0000000000)={0x10, 0x4170000}, 0x349, &(0x7f0000001400)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x0, 0x0, {{@in=@multicast1=0xe0000001, @in6=@mcast2={0xff, 0x2, [0xfcffffff00000000], 0x1}, 0x0, 0x0, 0x0, 0x0, 0xa, 0xfffffff0, 0xf0ffffffffffff}}}, 0xb8}, 0x1}, 0x0) 00:15:48 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x10, 0x3, 0x6) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20406ff7e280000001100ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) [ 277.479189] ? snprintf+0xa5/0xd0 [ 277.482659] ? vsprintf+0x40/0x40 [ 277.486119] ? cgroup_kn_set_ugid+0x2cb/0x370 [ 277.490626] kernfs_new_node+0x80/0xf0 [ 277.494515] __kernfs_create_file+0x4d/0x330 [ 277.498923] cgroup_addrm_files+0x437/0xb20 [ 277.503255] ? cgroup_css.part.14+0x1f0/0x1f0 [ 277.507754] ? find_held_lock+0x36/0x1c0 [ 277.511825] ? mem_cgroup_css_online+0x23e/0x300 [ 277.516586] ? mod_memcg_state+0x1a0/0x1a0 [ 277.520841] ? __lock_is_held+0xb5/0x140 [ 277.524916] ? kasan_check_write+0x14/0x20 00:15:48 executing program 2: r0 = socket$inet(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x5801000000000000) [ 277.529159] ? online_css+0x265/0x330 [ 277.529752] netlink: 4 bytes leftover after parsing attributes in process `syz-executor7'. [ 277.532966] css_populate_dir+0x1a9/0x470 [ 277.532991] cgroup_apply_control_enable+0x449/0xe80 [ 277.533016] ? cgroup_save_control+0x260/0x260 [ 277.533034] ? mutex_unlock+0xd/0x10 [ 277.533049] ? kernfs_setattr+0x39/0x40 [ 277.533066] ? cgroup_kn_set_ugid+0x2cb/0x370 [ 277.567389] ? cgroup_file_name+0x1f0/0x1f0 [ 277.571737] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 277.577278] ? css_populate_dir+0x2a1/0x470 00:15:48 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f760070") sendmsg$nl_xfrm(r0, &(0x7f0000001440)={&(0x7f0000000000)={0x10, 0x4170000}, 0x349, &(0x7f0000001400)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x0, 0x0, {{@in=@multicast1=0xe0000001, @in6=@mcast2={0xff, 0x2, [0x100000000000000], 0x1}, 0x0, 0x0, 0x0, 0x0, 0xa, 0xfffffff0, 0xf0ffffffffffff}}}, 0xb8}, 0x1}, 0x0) 00:15:48 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x10, 0x3, 0x6) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20410ff7e280000001100ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) [ 277.581615] cgroup_mkdir+0x876/0x1150 [ 277.585512] ? cgroup_destroy_locked+0x7d0/0x7d0 [ 277.590276] ? put_itimerspec64+0x310/0x310 [ 277.594608] ? set_nlink+0xaf/0x140 [ 277.598271] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 277.603813] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 277.609350] ? kernfs_get_active+0xb2/0x120 [ 277.613675] ? cgroup_destroy_locked+0x7d0/0x7d0 [ 277.618435] kernfs_iop_mkdir+0x159/0x1e0 [ 277.622590] ? getname_flags+0xd0/0x5a0 [ 277.626573] vfs_mkdir+0x42e/0x6b0 [ 277.630123] do_mkdirat+0x266/0x2f0 [ 277.633759] ? __ia32_sys_mknod+0xb0/0xb0 [ 277.634053] netlink: 4 bytes leftover after parsing attributes in process `syz-executor7'. [ 277.637910] ? do_syscall_64+0x92/0x800 [ 277.637929] __x64_sys_mkdir+0x5c/0x80 [ 277.637946] do_syscall_64+0x1b1/0x800 [ 277.637962] ? finish_task_switch+0x1ca/0x840 [ 277.637977] ? syscall_return_slowpath+0x5c0/0x5c0 [ 277.637994] ? syscall_return_slowpath+0x30f/0x5c0 [ 277.638022] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 277.677774] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 277.682631] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 277.687821] RIP: 0033:0x4559f9 [ 277.691004] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 277.710374] RSP: 002b:00007fa94af69c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 277.718104] RAX: ffffffffffffffda RBX: 00007fa94af6a6d4 RCX: 00000000004559f9 [ 277.725379] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000100 [ 277.732653] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 277.739925] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 277.747201] R13: 00000000004bae54 R14: 00000000004cead0 R15: 0000000000000052 [ 277.754728] cgroup: cgroup_addrm_files: failed to add events, err=-12 00:15:48 executing program 2: r0 = socket$inet(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x900) 00:15:48 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f760070") sendmsg$nl_xfrm(r0, &(0x7f0000001440)={&(0x7f0000000000)={0x10, 0x4170000}, 0x349, &(0x7f0000001400)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x0, 0x0, {{@in=@multicast1=0xe0000001, @in6=@mcast2={0xff, 0x2, [0x9effffff00000000], 0x1}, 0x0, 0x0, 0x0, 0x0, 0xa, 0xfffffff0, 0xf0ffffffffffff}}}, 0xb8}, 0x1}, 0x0) 00:15:48 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x10, 0x3, 0x6) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a2040aff7e280000001100ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 00:15:48 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[0xfeffffff], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) r2 = socket(0x11, 0x100000803, 0x0) r3 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={"6966623000faffffffffffffff00", 0x12}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'ifb0\x00', 0xa201}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x17, &(0x7f0000000080)={@dev={0xfe, 0x80}, 0x0, 0x0, 0x2}, 0x20) 00:15:48 executing program 6 (fault-call:8 fault-nth:83): r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="295ed277a4200100360070") mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) rmdir(&(0x7f0000000340)='./file0//ile0\x00') r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) fstat(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r2) mkdir(&(0x7f0000000100)='./file0//ile0\x00', 0x0) 00:15:48 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) write$rdma_cm(r0, &(0x7f0000000640)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f00000004c0)}}, 0x10) close(r0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0x6e) listen(r3, 0x0) connect$unix(r2, &(0x7f0000932000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) tkill(r1, 0x1000000000016) 00:15:48 executing program 4: pipe2(&(0x7f0000989000)={0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) mount(&(0x7f0000434ff8)='./file0\x00', &(0x7f0000abf000)='./file0\x00', &(0x7f0000f4c000)='jfs\x00', 0x1023402, 0x0) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000001200), 0x3000, &(0x7f0000001280)) unlink(&(0x7f00003b3000)='./file0\x00') dup2(r0, r1) 00:15:48 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0x80404509, &(0x7f0000000080)=""/168) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) write$rdma_cm(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="0000d9b16d0f74c9", @ANYPTR=&(0x7f00000004c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00']], 0x10) close(r2) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) bind$unix(r5, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0x6e) listen(r5, 0x0) connect$unix(r4, &(0x7f0000932000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) tkill(r3, 0x1000000000016) 00:15:49 executing program 2: r0 = socket$inet(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0xfffffffffffff000) 00:15:49 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x10, 0x3, 0x6) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a2040fff7e280000001100ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) [ 278.309805] FAULT_INJECTION: forcing a failure. [ 278.309805] name failslab, interval 1, probability 0, space 0, times 0 [ 278.321114] CPU: 0 PID: 17516 Comm: syz-executor6 Not tainted 4.17.0+ #89 [ 278.329093] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 278.338470] Call Trace: [ 278.341070] dump_stack+0x1b9/0x294 [ 278.344716] ? dump_stack_print_info.cold.2+0x52/0x52 [ 278.349921] ? check_same_owner+0x320/0x320 [ 278.354254] ? mutex_trylock+0x2a0/0x2a0 00:15:49 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f760070") sendmsg$nl_xfrm(r0, &(0x7f0000001440)={&(0x7f0000000000)={0x10, 0x4170000}, 0x349, &(0x7f0000001400)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x0, 0x0, {{@in=@multicast1=0xe0000001, @in6=@mcast2={0xff, 0x2, [0x2000000], 0x1}, 0x0, 0x0, 0x0, 0x0, 0xa, 0xfffffff0, 0xf0ffffffffffff}}}, 0xb8}, 0x1}, 0x0) [ 278.358331] should_fail.cold.4+0xa/0x1a [ 278.362415] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 278.367526] ? __mutex_lock+0x7d9/0x17f0 [ 278.371598] ? graph_lock+0x170/0x170 [ 278.376333] ? kernfs_setattr+0x20/0x40 [ 278.380332] ? graph_lock+0x170/0x170 [ 278.384202] ? find_held_lock+0x36/0x1c0 [ 278.388282] ? __lock_is_held+0xb5/0x140 [ 278.392369] ? check_same_owner+0x320/0x320 [ 278.396703] ? rcu_note_context_switch+0x710/0x710 [ 278.401640] ? lock_downgrade+0x8e0/0x8e0 [ 278.405807] __should_failslab+0x124/0x180 00:15:49 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f760070") sendmsg$nl_xfrm(r0, &(0x7f0000001440)={&(0x7f0000000000)={0x10, 0x4170000}, 0x349, &(0x7f0000001400)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x0, 0x0, {{@in=@multicast1=0xe0000001, @in6=@mcast2={0xff, 0x2, [0xf0ffffff], 0x1}, 0x0, 0x0, 0x0, 0x0, 0xa, 0xfffffff0, 0xf0ffffffffffff}}}, 0xb8}, 0x1}, 0x0) 00:15:49 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f760070") sendmsg$nl_xfrm(r0, &(0x7f0000001440)={&(0x7f0000000000)={0x10, 0x4170000}, 0x349, &(0x7f0000001400)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x0, 0x0, {{@in=@multicast1=0xe0000001, @in6=@mcast2={0xff, 0x2, [0xffffff9e], 0x1}, 0x0, 0x0, 0x0, 0x0, 0xa, 0xfffffff0, 0xf0ffffffffffff}}}, 0xb8}, 0x1}, 0x0) [ 278.410077] should_failslab+0x9/0x14 [ 278.413884] kmem_cache_alloc_trace+0x2cb/0x780 [ 278.418572] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 278.423521] kernfs_iattrs.isra.4+0x123/0x4e0 [ 278.428025] ? ktime_get_real_ts64+0x361/0x510 [ 278.432615] ? kernfs_iop_permission+0xb0/0xb0 [ 278.437206] ? ktime_get_with_offset+0x4a0/0x4a0 [ 278.441983] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 278.447532] __kernfs_setattr+0x57/0x440 [ 278.451607] kernfs_setattr+0x2b/0x40 [ 278.455417] cgroup_kn_set_ugid+0x2c3/0x370 00:15:49 executing program 2: r0 = socket$inet(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0xffffff9e) [ 278.459748] ? cgroup_file_name+0x1f0/0x1f0 [ 278.464090] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 278.469637] ? __kernfs_create_file+0x29b/0x330 [ 278.474323] cgroup_addrm_files+0x465/0xb20 [ 278.478670] ? cgroup_css.part.14+0x1f0/0x1f0 [ 278.483168] ? find_held_lock+0x36/0x1c0 [ 278.487239] ? mem_cgroup_css_online+0x23e/0x300 [ 278.491999] ? mod_memcg_state+0x1a0/0x1a0 [ 278.496243] ? __lock_is_held+0xb5/0x140 [ 278.500315] ? kasan_check_write+0x14/0x20 [ 278.504553] ? online_css+0x265/0x330 00:15:49 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f760070") sendmsg$nl_xfrm(r0, &(0x7f0000001440)={&(0x7f0000000000)={0x10, 0x4170000}, 0x349, &(0x7f0000001400)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x0, 0x0, {{@in=@multicast1=0xe0000001, @in6=@mcast2={0xff, 0x2, [0xf], 0x1}, 0x0, 0x0, 0x0, 0x0, 0xa, 0xfffffff0, 0xf0ffffffffffff}}}, 0xb8}, 0x1}, 0x0) 00:15:49 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x10, 0x3, 0x6) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20408ff7e280000001100ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) [ 278.508359] css_populate_dir+0x1a9/0x470 [ 278.512513] cgroup_apply_control_enable+0x449/0xe80 [ 278.517625] ? cgroup_save_control+0x260/0x260 [ 278.522220] ? mutex_unlock+0xd/0x10 [ 278.525938] ? kernfs_setattr+0x39/0x40 [ 278.529922] ? cgroup_kn_set_ugid+0x2cb/0x370 [ 278.534426] ? cgroup_file_name+0x1f0/0x1f0 [ 278.538757] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 278.544297] ? css_populate_dir+0x2a1/0x470 [ 278.548630] cgroup_mkdir+0x876/0x1150 [ 278.552534] ? cgroup_destroy_locked+0x7d0/0x7d0 [ 278.557298] ? put_itimerspec64+0x310/0x310 [ 278.561629] ? set_nlink+0xaf/0x140 [ 278.565782] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 278.571331] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 278.576895] ? kernfs_get_active+0xb2/0x120 [ 278.581223] ? cgroup_destroy_locked+0x7d0/0x7d0 [ 278.585983] kernfs_iop_mkdir+0x159/0x1e0 [ 278.590140] ? getname_flags+0xd0/0x5a0 [ 278.594117] vfs_mkdir+0x42e/0x6b0 [ 278.597661] do_mkdirat+0x266/0x2f0 [ 278.601293] ? __ia32_sys_mknod+0xb0/0xb0 [ 278.605445] ? do_syscall_64+0x92/0x800 [ 278.609427] __x64_sys_mkdir+0x5c/0x80 [ 278.613321] do_syscall_64+0x1b1/0x800 [ 278.617209] ? finish_task_switch+0x1ca/0x840 [ 278.621710] ? syscall_return_slowpath+0x5c0/0x5c0 [ 278.626645] ? syscall_return_slowpath+0x30f/0x5c0 [ 278.631586] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 278.636971] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 278.641828] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 278.647016] RIP: 0033:0x4559f9 [ 278.650197] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 278.669545] RSP: 002b:00007fa94af69c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 278.677243] RAX: ffffffffffffffda RBX: 00007fa94af6a6d4 RCX: 00000000004559f9 [ 278.684496] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000100 [ 278.691761] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 278.699027] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 278.706287] R13: 00000000004bae54 R14: 00000000004cead0 R15: 0000000000000053 [ 278.722561] cgroup: cgroup_addrm_files: failed to add max, err=-12 00:15:50 executing program 2: r0 = socket$inet(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0xfcffffff00000000) 00:15:50 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x10, 0x3, 0x6) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e0f0000001100ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 00:15:50 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) write$rdma_cm(r1, &(0x7f0000000640)=ANY=[@ANYBLOB="0c000002080000fa", @ANYPTR=&(0x7f00000004c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00']], 0x10) close(r1) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000040)={'syz_tun\x00', {0x2, 0x4e22, @local={0xac, 0x14, 0x14, 0xaa}}}) bind$unix(r4, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0x6e) listen(r4, 0x0) connect$unix(r3, &(0x7f0000932000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) tkill(r2, 0x1000000000016) 00:15:50 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[0xfeffffff], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) r2 = socket(0x11, 0x100000803, 0x0) r3 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={"6966623000faffffffffffffff00", 0x12}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'ifb0\x00', 0xa201}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@dev={0xfe, 0x80, [0x2]}, 0x0, 0x0, 0x2}, 0x20) 00:15:50 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f760070") sendmsg$nl_xfrm(r0, &(0x7f0000001440)={&(0x7f0000000000)={0x10, 0x4170000}, 0x349, &(0x7f0000001400)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x0, 0x0, {{@in=@multicast1=0xe0000001, @in6=@mcast2={0xff, 0x2, [0xfffff000], 0x1}, 0x0, 0x0, 0x0, 0x0, 0xa, 0xfffffff0, 0xf0ffffffffffff}}}, 0xb8}, 0x1}, 0x0) 00:15:50 executing program 6 (fault-call:8 fault-nth:84): r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="295ed277a4200100360070") mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) rmdir(&(0x7f0000000340)='./file0//ile0\x00') r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) fstat(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r2) mkdir(&(0x7f0000000100)='./file0//ile0\x00', 0x0) 00:15:50 executing program 4: pipe2(&(0x7f0000989000)={0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) mount(&(0x7f0000434ff8)='./file0\x00', &(0x7f0000abf000)='./file0\x00', &(0x7f0000f4c000)='jfs\x00', 0x1023402, 0x0) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000001200), 0x3000, &(0x7f0000001280)) unlink(&(0x7f00003b3000)='./file0\x00') dup2(r0, r1) 00:15:50 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) write$rdma_cm(r0, &(0x7f0000000640)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f00000004c0)}}, 0x10) close(r0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0x6e) listen(r3, 0x0) connect$unix(r2, &(0x7f0000932000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) tkill(r1, 0x1000000000016) 00:15:50 executing program 2: r0 = socket$inet(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0xa00000000000000) [ 279.732717] FAULT_INJECTION: forcing a failure. [ 279.732717] name failslab, interval 1, probability 0, space 0, times 0 [ 279.744075] CPU: 1 PID: 17597 Comm: syz-executor6 Not tainted 4.17.0+ #89 [ 279.751010] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 279.760368] Call Trace: [ 279.762978] dump_stack+0x1b9/0x294 [ 279.766624] ? dump_stack_print_info.cold.2+0x52/0x52 [ 279.771823] ? check_same_owner+0x320/0x320 [ 279.776159] ? mutex_trylock+0x2a0/0x2a0 00:15:50 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x10, 0x3, 0x6) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e280300001100ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 00:15:50 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f760070") sendmsg$nl_xfrm(r0, &(0x7f0000001440)={&(0x7f0000000000)={0x10, 0x4170000}, 0x349, &(0x7f0000001400)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x0, 0x0, {{@in=@multicast1=0xe0000001, @in6=@mcast2={0xff, 0x2, [0xffffff7f00000000], 0x1}, 0x0, 0x0, 0x0, 0x0, 0xa, 0xfffffff0, 0xf0ffffffffffff}}}, 0xb8}, 0x1}, 0x0) 00:15:50 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f760070") sendmsg$nl_xfrm(r0, &(0x7f0000001440)={&(0x7f0000000000)={0x10, 0x4170000}, 0x349, &(0x7f0000001400)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x0, 0x0, {{@in=@multicast1=0xe0000001, @in6=@mcast2={0xff, 0x2, [0x4000000], 0x1}, 0x0, 0x0, 0x0, 0x0, 0xa, 0xfffffff0, 0xf0ffffffffffff}}}, 0xb8}, 0x1}, 0x0) [ 279.780240] should_fail.cold.4+0xa/0x1a [ 279.784316] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 279.789440] ? __mutex_lock+0x7d9/0x17f0 [ 279.793518] ? graph_lock+0x170/0x170 [ 279.797328] ? kernfs_setattr+0x20/0x40 [ 279.801321] ? graph_lock+0x170/0x170 [ 279.805141] ? find_held_lock+0x36/0x1c0 [ 279.809206] ? __lock_is_held+0xb5/0x140 [ 279.813281] ? check_same_owner+0x320/0x320 [ 279.817610] ? rcu_note_context_switch+0x710/0x710 [ 279.822547] ? lock_downgrade+0x8e0/0x8e0 [ 279.826701] __should_failslab+0x124/0x180 00:15:50 executing program 2: r0 = socket$inet(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0xa000000) [ 279.830938] should_failslab+0x9/0x14 [ 279.834748] kmem_cache_alloc_trace+0x2cb/0x780 [ 279.839425] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 279.844378] kernfs_iattrs.isra.4+0x123/0x4e0 [ 279.848881] ? ktime_get_real_ts64+0x361/0x510 [ 279.853472] ? kernfs_iop_permission+0xb0/0xb0 [ 279.858086] ? ktime_get_with_offset+0x4a0/0x4a0 [ 279.862857] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 279.868405] __kernfs_setattr+0x57/0x440 [ 279.872475] kernfs_setattr+0x2b/0x40 [ 279.876283] cgroup_kn_set_ugid+0x2c3/0x370 00:15:50 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f760070") sendmsg$nl_xfrm(r0, &(0x7f0000001440)={&(0x7f0000000000)={0x10, 0x4170000}, 0x349, &(0x7f0000001400)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x0, 0x0, {{@in=@multicast1=0xe0000001, @in6=@mcast2={0xff, 0x2, [0xf0ffff], 0x1}, 0x0, 0x0, 0x0, 0x0, 0xa, 0xfffffff0, 0xf0ffffffffffff}}}, 0xb8}, 0x1}, 0x0) 00:15:50 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x10, 0x3, 0x6) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e282800001100ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) [ 279.880612] ? cgroup_file_name+0x1f0/0x1f0 [ 279.884950] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 279.890494] ? __kernfs_create_file+0x29b/0x330 [ 279.895173] cgroup_addrm_files+0x465/0xb20 [ 279.899512] ? cgroup_css.part.14+0x1f0/0x1f0 [ 279.904013] ? find_held_lock+0x36/0x1c0 [ 279.908090] ? mem_cgroup_css_online+0x23e/0x300 [ 279.912848] ? mod_memcg_state+0x1a0/0x1a0 [ 279.917091] ? __lock_is_held+0xb5/0x140 [ 279.921161] ? kasan_check_write+0x14/0x20 [ 279.925395] ? online_css+0x265/0x330 [ 279.929194] css_populate_dir+0x1a9/0x470 [ 279.933354] cgroup_apply_control_enable+0x449/0xe80 [ 279.938468] ? cgroup_save_control+0x260/0x260 [ 279.943054] ? mutex_unlock+0xd/0x10 [ 279.946771] ? kernfs_setattr+0x39/0x40 [ 279.950749] ? cgroup_kn_set_ugid+0x2cb/0x370 [ 279.955248] ? cgroup_file_name+0x1f0/0x1f0 [ 279.959582] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 279.965122] ? css_populate_dir+0x2a1/0x470 [ 279.969451] cgroup_mkdir+0x876/0x1150 [ 279.973396] ? cgroup_destroy_locked+0x7d0/0x7d0 [ 279.978156] ? put_itimerspec64+0x310/0x310 [ 279.982481] ? set_nlink+0xaf/0x140 [ 279.986109] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 279.991651] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 279.997192] ? kernfs_get_active+0xb2/0x120 [ 280.001522] ? cgroup_destroy_locked+0x7d0/0x7d0 [ 280.006282] kernfs_iop_mkdir+0x159/0x1e0 [ 280.010436] ? getname_flags+0xd0/0x5a0 [ 280.014418] vfs_mkdir+0x42e/0x6b0 [ 280.017966] do_mkdirat+0x266/0x2f0 [ 280.021584] ? __ia32_sys_mknod+0xb0/0xb0 [ 280.025727] ? do_syscall_64+0x92/0x800 [ 280.029692] __x64_sys_mkdir+0x5c/0x80 [ 280.033562] do_syscall_64+0x1b1/0x800 [ 280.037441] ? finish_task_switch+0x1ca/0x840 [ 280.041955] ? syscall_return_slowpath+0x5c0/0x5c0 [ 280.046877] ? syscall_return_slowpath+0x30f/0x5c0 [ 280.051801] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 280.057159] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 280.062000] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 280.067191] RIP: 0033:0x4559f9 [ 280.070358] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 280.089547] RSP: 002b:00007fa94af69c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 280.097239] RAX: ffffffffffffffda RBX: 00007fa94af6a6d4 RCX: 00000000004559f9 [ 280.104501] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000100 [ 280.111762] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 280.119017] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 280.126286] R13: 00000000004bae54 R14: 00000000004cead0 R15: 0000000000000054 [ 280.134440] cgroup: cgroup_addrm_files: failed to add max, err=-12 00:15:51 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f760070") sendmsg$nl_xfrm(r0, &(0x7f0000001440)={&(0x7f0000000000)={0x10, 0x4170000}, 0x349, &(0x7f0000001400)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x0, 0x0, {{@in=@multicast1=0xe0000001, @in6=@mcast2={0xff, 0x2, [0xf0], 0x1}, 0x0, 0x0, 0x0, 0x0, 0xa, 0xfffffff0, 0xf0ffffffffffff}}}, 0xb8}, 0x1}, 0x0) 00:15:51 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) write$rdma_cm(r1, &(0x7f0000000640)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f00000004c0)}}, 0x10) close(r1) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0x6e) listen(r4, 0x0) connect$unix(r3, &(0x7f0000932000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) r5 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x408000) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r5, 0x404c534a, &(0x7f0000000080)={0x1f, 0x80, 0x7}) tkill(r2, 0x1000000000016) 00:15:51 executing program 6 (fault-call:8 fault-nth:85): r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="295ed277a4200100360070") mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) rmdir(&(0x7f0000000340)='./file0//ile0\x00') r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) fstat(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r2) mkdir(&(0x7f0000000100)='./file0//ile0\x00', 0x0) 00:15:51 executing program 2: r0 = socket$inet(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x3f00) 00:15:51 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x10, 0x3, 0x6) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e280f00001100ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 00:15:51 executing program 4: pipe2(&(0x7f0000989000)={0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) mount(&(0x7f0000434ff8)='./file0\x00', &(0x7f0000abf000)='./file0\x00', &(0x7f0000f4c000)='jfs\x00', 0x1023402, 0x0) syz_mount_image$vfat(&(0x7f0000000040)='vfatL', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000001200), 0x3000, &(0x7f0000001280)) unlink(&(0x7f00003b3000)='./file0\x00') dup2(r0, r1) 00:15:51 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[0xfeffffff], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) r2 = socket(0x11, 0x100000803, 0x0) r3 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={"6966623000faffffffffffffff00", 0x12}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'ifb0\x00', 0xa201}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@dev={0xfe, 0x80, [0x5]}, 0x0, 0x0, 0x2}, 0x20) 00:15:51 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) write$rdma_cm(r0, &(0x7f0000000640)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f00000004c0)}}, 0x10) close(r0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0x6e) listen(r3, 0x0) connect$unix(r2, &(0x7f0000932000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) tkill(r1, 0x1000000000016) [ 281.163873] FAULT_INJECTION: forcing a failure. [ 281.163873] name failslab, interval 1, probability 0, space 0, times 0 [ 281.175282] CPU: 0 PID: 17674 Comm: syz-executor6 Not tainted 4.17.0+ #89 [ 281.182218] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 281.191577] Call Trace: [ 281.194181] dump_stack+0x1b9/0x294 [ 281.197820] ? dump_stack_print_info.cold.2+0x52/0x52 [ 281.203023] ? check_same_owner+0x320/0x320 [ 281.207355] ? mutex_trylock+0x2a0/0x2a0 [ 281.211429] should_fail.cold.4+0xa/0x1a [ 281.215504] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 281.220617] ? __mutex_lock+0x7d9/0x17f0 [ 281.224688] ? graph_lock+0x170/0x170 [ 281.228512] ? kernfs_setattr+0x20/0x40 [ 281.232500] ? graph_lock+0x170/0x170 [ 281.236317] ? find_held_lock+0x36/0x1c0 [ 281.240394] ? __lock_is_held+0xb5/0x140 [ 281.244476] ? check_same_owner+0x320/0x320 [ 281.248807] ? rcu_note_context_switch+0x710/0x710 [ 281.253745] ? lock_downgrade+0x8e0/0x8e0 [ 281.257907] __should_failslab+0x124/0x180 [ 281.262150] should_failslab+0x9/0x14 [ 281.265956] kmem_cache_alloc_trace+0x2cb/0x780 [ 281.270632] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 281.275577] kernfs_iattrs.isra.4+0x123/0x4e0 [ 281.280081] ? ktime_get_real_ts64+0x361/0x510 [ 281.284678] ? kernfs_iop_permission+0xb0/0xb0 [ 281.289279] ? ktime_get_with_offset+0x4a0/0x4a0 [ 281.294054] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 281.299610] __kernfs_setattr+0x57/0x440 [ 281.303686] kernfs_setattr+0x2b/0x40 [ 281.307504] cgroup_kn_set_ugid+0x2c3/0x370 [ 281.311845] ? cgroup_file_name+0x1f0/0x1f0 [ 281.316193] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 281.321743] ? __kernfs_create_file+0x29b/0x330 [ 281.326522] cgroup_addrm_files+0x465/0xb20 [ 281.330855] ? cgroup_css.part.14+0x1f0/0x1f0 [ 281.335361] ? find_held_lock+0x36/0x1c0 [ 281.339434] ? mem_cgroup_css_online+0x23e/0x300 [ 281.344193] ? mod_memcg_state+0x1a0/0x1a0 [ 281.348435] ? __lock_is_held+0xb5/0x140 [ 281.352527] ? kasan_check_write+0x14/0x20 [ 281.356762] ? online_css+0x265/0x330 [ 281.360571] css_populate_dir+0x1a9/0x470 [ 281.364732] cgroup_apply_control_enable+0x449/0xe80 [ 281.371762] ? cgroup_save_control+0x260/0x260 [ 281.376351] ? mutex_unlock+0xd/0x10 [ 281.380066] ? kernfs_setattr+0x39/0x40 [ 281.384042] ? cgroup_kn_set_ugid+0x2cb/0x370 [ 281.388546] ? cgroup_file_name+0x1f0/0x1f0 [ 281.392888] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 281.398430] ? css_populate_dir+0x2a1/0x470 [ 281.402764] cgroup_mkdir+0x876/0x1150 [ 281.406664] ? cgroup_destroy_locked+0x7d0/0x7d0 00:15:51 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x10, 0x3, 0x6) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e280005001100ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 00:15:51 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f760070") sendmsg$nl_xfrm(r0, &(0x7f0000001440)={&(0x7f0000000000)={0x10, 0x4170000}, 0x349, &(0x7f0000001400)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x0, 0x0, {{@in=@multicast1=0xe0000001, @in6=@mcast2={0xff, 0x2, [0xf0ffffff00000000], 0x1}, 0x0, 0x0, 0x0, 0x0, 0xa, 0xfffffff0, 0xf0ffffffffffff}}}, 0xb8}, 0x1}, 0x0) 00:15:51 executing program 2: r0 = socket$inet(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x200000000000000) 00:15:51 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x10, 0x3, 0x6) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e280006001100ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 00:15:51 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f760070") sendmsg$nl_xfrm(r0, &(0x7f0000001440)={&(0x7f0000000000)={0x10, 0x4170000}, 0x349, &(0x7f0000001400)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x0, 0x0, {{@in=@multicast1=0xe0000001, @in6=@mcast2={0xff, 0x2, [0x200000000000000], 0x1}, 0x0, 0x0, 0x0, 0x0, 0xa, 0xfffffff0, 0xf0ffffffffffff}}}, 0xb8}, 0x1}, 0x0) 00:15:51 executing program 2: r0 = socket$inet(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x9effffff) 00:15:52 executing program 2: r0 = socket$inet(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x3f000000) 00:15:52 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x10, 0x3, 0x6) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e280000000f00ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 00:15:52 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f760070") sendmsg$nl_xfrm(r0, &(0x7f0000001440)={&(0x7f0000000000)={0x10, 0x4170000}, 0x349, &(0x7f0000001400)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x0, 0x0, {{@in=@multicast1=0xe0000001, @in6=@mcast2={0xff, 0x2, [0x300000000000000], 0x1}, 0x0, 0x0, 0x0, 0x0, 0xa, 0xfffffff0, 0xf0ffffffffffff}}}, 0xb8}, 0x1}, 0x0) [ 281.411426] ? put_itimerspec64+0x310/0x310 [ 281.415753] ? set_nlink+0xaf/0x140 [ 281.419382] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 281.424928] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 281.430466] ? kernfs_get_active+0xb2/0x120 [ 281.434795] ? cgroup_destroy_locked+0x7d0/0x7d0 [ 281.439556] kernfs_iop_mkdir+0x159/0x1e0 [ 281.443709] ? getname_flags+0xd0/0x5a0 [ 281.447693] vfs_mkdir+0x42e/0x6b0 [ 281.451241] do_mkdirat+0x266/0x2f0 [ 281.454864] ? __ia32_sys_mknod+0xb0/0xb0 [ 281.459008] ? do_syscall_64+0x92/0x800 [ 281.462974] __x64_sys_mkdir+0x5c/0x80 [ 281.466856] do_syscall_64+0x1b1/0x800 [ 281.470755] ? syscall_return_slowpath+0x5c0/0x5c0 [ 281.475689] ? syscall_return_slowpath+0x30f/0x5c0 [ 281.480624] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 281.485974] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 281.490811] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 281.495981] RIP: 0033:0x4559f9 [ 281.499151] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 281.518347] RSP: 002b:00007fa94af69c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 281.526062] RAX: ffffffffffffffda RBX: 00007fa94af6a6d4 RCX: 00000000004559f9 [ 281.533316] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000100 [ 281.540569] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 281.547841] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 281.555096] R13: 00000000004bae54 R14: 00000000004cead0 R15: 0000000000000055 [ 281.563797] cgroup: cgroup_addrm_files: failed to add events, err=-12 00:15:52 executing program 2: r0 = socket$inet(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x500) 00:15:52 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x10, 0x3, 0x6) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e280800001100ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 00:15:52 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f760070") sendmsg$nl_xfrm(r0, &(0x7f0000001440)={&(0x7f0000000000)={0x10, 0x4170000}, 0x349, &(0x7f0000001400)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x0, 0x0, {{@in=@multicast1=0xe0000001, @in6=@mcast2={0xff, 0x2, [0x1000000], 0x1}, 0x0, 0x0, 0x0, 0x0, 0xa, 0xfffffff0, 0xf0ffffffffffff}}}, 0xb8}, 0x1}, 0x0) 00:15:52 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) write$rdma_cm(r0, &(0x7f0000000640)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f00000004c0)}}, 0x10) close(r0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0x6e) listen(r3, 0x0) connect$unix(r2, &(0x7f0000932000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) tkill(r1, 0x1000000000016) 00:15:52 executing program 6 (fault-call:8 fault-nth:86): r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="295ed277a4200100360070") mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) rmdir(&(0x7f0000000340)='./file0//ile0\x00') r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) fstat(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r2) mkdir(&(0x7f0000000100)='./file0//ile0\x00', 0x0) 00:15:52 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[0xfeffffff], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) r2 = socket(0x11, 0x100000803, 0x0) r3 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={"6966623000faffffffffffffff00", 0x12}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'ifb0\x00', 0xa201}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@dev={0xfe, 0x80, [0x500000000000000]}, 0x0, 0x0, 0x2}, 0x20) 00:15:52 executing program 4: pipe2(&(0x7f0000989000)={0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) mount(&(0x7f0000434ff8)='./file0\x00', &(0x7f0000abf000)='./file0\x00', &(0x7f0000f4c000)='jfs\x00', 0x1023402, 0x0) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000001200), 0x3000, &(0x7f0000001280)) unlink(&(0x7f00003b3000)='./file0\x00') dup2(r0, r1) 00:15:52 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r3 = semget(0x3, 0x0, 0x2) semctl$SEM_STAT(r3, 0x3, 0x12, &(0x7f0000000040)=""/176) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) write$rdma_cm(r1, &(0x7f0000000640)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f00000004c0)}}, 0x10) close(r1) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) bind$unix(r5, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0x6e) listen(r5, 0x0) connect$unix(r4, &(0x7f0000932000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) tkill(r2, 0x1000000000016) [ 282.146794] FAULT_INJECTION: forcing a failure. [ 282.146794] name failslab, interval 1, probability 0, space 0, times 0 [ 282.158078] CPU: 0 PID: 17746 Comm: syz-executor6 Not tainted 4.17.0+ #89 [ 282.165007] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 282.174359] Call Trace: [ 282.176956] dump_stack+0x1b9/0x294 [ 282.180599] ? dump_stack_print_info.cold.2+0x52/0x52 [ 282.185803] ? __save_stack_trace+0x7e/0xd0 [ 282.190138] should_fail.cold.4+0xa/0x1a [ 282.194208] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 282.199322] ? __lock_acquire+0x7f5/0x5140 [ 282.203565] ? graph_lock+0x170/0x170 [ 282.207378] ? lock_downgrade+0x8e0/0x8e0 [ 282.211535] ? lock_downgrade+0x8e0/0x8e0 [ 282.215696] ? find_held_lock+0x36/0x1c0 [ 282.219767] ? __lock_is_held+0xb5/0x140 [ 282.223848] ? check_same_owner+0x320/0x320 [ 282.228179] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 282.233204] ? rcu_note_context_switch+0x710/0x710 [ 282.238147] __should_failslab+0x124/0x180 [ 282.242387] should_failslab+0x9/0x14 [ 282.246193] __kmalloc_track_caller+0x2c4/0x760 [ 282.250871] ? string+0x21d/0x2c0 [ 282.254332] ? kstrdup_const+0x66/0x80 [ 282.258227] kstrdup+0x39/0x70 [ 282.261431] kstrdup_const+0x66/0x80 [ 282.265152] __kernfs_new_node+0xa8/0x580 [ 282.269311] ? kernfs_dop_revalidate+0x3c0/0x3c0 [ 282.274077] ? pointer+0x930/0x930 [ 282.277639] ? snprintf+0xa5/0xd0 [ 282.281107] ? vsprintf+0x40/0x40 [ 282.284578] kernfs_new_node+0x80/0xf0 [ 282.288484] __kernfs_create_file+0x4d/0x330 [ 282.292904] cgroup_addrm_files+0x437/0xb20 00:15:52 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x10, 0x3, 0x6) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e280b00001100ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 00:15:52 executing program 2: r0 = socket$inet(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0xf0) 00:15:52 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f760070") sendmsg$nl_xfrm(r0, &(0x7f0000001440)={&(0x7f0000000000)={0x10, 0x4170000}, 0x349, &(0x7f0000001400)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x0, 0x0, {{@in=@multicast1=0xe0000001, @in6=@mcast2={0xff, 0x2, [0x9effffff], 0x1}, 0x0, 0x0, 0x0, 0x0, 0xa, 0xfffffff0, 0xf0ffffffffffff}}}, 0xb8}, 0x1}, 0x0) 00:15:52 executing program 2: r0 = socket$inet(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0xfffffffc) 00:15:52 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x10, 0x3, 0x6) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e288a01001100ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 00:15:52 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x10, 0x3, 0x6) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e28f000001100ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) [ 282.297243] ? cgroup_css.part.14+0x1f0/0x1f0 [ 282.301746] ? find_held_lock+0x36/0x1c0 [ 282.305822] ? mem_cgroup_css_online+0x23e/0x300 [ 282.310591] ? mod_memcg_state+0x1a0/0x1a0 [ 282.314838] ? __lock_is_held+0xb5/0x140 [ 282.318910] ? kasan_check_write+0x14/0x20 [ 282.323148] ? online_css+0x265/0x330 [ 282.326956] css_populate_dir+0x1a9/0x470 [ 282.331112] cgroup_apply_control_enable+0x449/0xe80 [ 282.336224] ? cgroup_save_control+0x260/0x260 [ 282.340919] ? mutex_unlock+0xd/0x10 00:15:53 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f760070") sendmsg$nl_xfrm(r0, &(0x7f0000001440)={&(0x7f0000000000)={0x10, 0x4170000}, 0x349, &(0x7f0000001400)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x0, 0x0, {{@in=@multicast1=0xe0000001, @in6=@mcast2={0xff, 0x2, [0x3], 0x1}, 0x0, 0x0, 0x0, 0x0, 0xa, 0xfffffff0, 0xf0ffffffffffff}}}, 0xb8}, 0x1}, 0x0) [ 282.344632] ? kernfs_setattr+0x39/0x40 [ 282.348614] ? cgroup_kn_set_ugid+0x2cb/0x370 [ 282.353110] ? cgroup_file_name+0x1f0/0x1f0 [ 282.357440] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 282.362977] ? css_populate_dir+0x2a1/0x470 [ 282.367308] cgroup_mkdir+0x876/0x1150 [ 282.371210] ? cgroup_destroy_locked+0x7d0/0x7d0 [ 282.376901] ? put_itimerspec64+0x310/0x310 [ 282.381234] ? set_nlink+0xaf/0x140 [ 282.384866] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 282.390439] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 282.395983] ? kernfs_get_active+0xb2/0x120 [ 282.400309] ? cgroup_destroy_locked+0x7d0/0x7d0 [ 282.405072] kernfs_iop_mkdir+0x159/0x1e0 [ 282.409223] ? getname_flags+0xd0/0x5a0 [ 282.413204] vfs_mkdir+0x42e/0x6b0 [ 282.416751] do_mkdirat+0x266/0x2f0 [ 282.420385] ? __ia32_sys_mknod+0xb0/0xb0 [ 282.424549] ? do_syscall_64+0x92/0x800 [ 282.428526] __x64_sys_mkdir+0x5c/0x80 [ 282.432416] do_syscall_64+0x1b1/0x800 [ 282.436307] ? finish_task_switch+0x1ca/0x840 [ 282.440805] ? syscall_return_slowpath+0x5c0/0x5c0 [ 282.445744] ? syscall_return_slowpath+0x30f/0x5c0 [ 282.450684] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 282.456060] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 282.460919] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 282.466115] RIP: 0033:0x4559f9 [ 282.469300] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 282.488662] RSP: 002b:00007fa94af69c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 282.496383] RAX: ffffffffffffffda RBX: 00007fa94af6a6d4 RCX: 00000000004559f9 [ 282.503672] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000100 [ 282.510954] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 282.518231] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 282.525495] R13: 00000000004bae54 R14: 00000000004cead0 R15: 0000000000000056 [ 282.532908] cgroup: cgroup_addrm_files: failed to add stat, err=-12 00:15:53 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x10, 0x3, 0x6) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e28003f001100ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 00:15:53 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f760070") sendmsg$nl_xfrm(r0, &(0x7f0000001440)={&(0x7f0000000000)={0x10, 0x4170000}, 0x349, &(0x7f0000001400)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x0, 0x0, {{@in=@multicast1=0xe0000001, @in6=@mcast2={0xff, 0x2, [0x4], 0x1}, 0x0, 0x0, 0x0, 0x0, 0xa, 0xfffffff0, 0xf0ffffffffffff}}}, 0xb8}, 0x1}, 0x0) 00:15:53 executing program 2: r0 = socket$inet(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x600000000000000) 00:15:53 executing program 6 (fault-call:8 fault-nth:87): r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="295ed277a4200100360070") mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) rmdir(&(0x7f0000000340)='./file0//ile0\x00') r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) fstat(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r2) mkdir(&(0x7f0000000100)='./file0//ile0\x00', 0x0) 00:15:53 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[0xfeffffff], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) r2 = socket(0x11, 0x100000803, 0x0) r3 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={"6966623000faffffffffffffff00", 0x12}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'ifb0\x00', 0xa201}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@dev={0xfe, 0x80, [0x1000000]}, 0x0, 0x0, 0x2}, 0x20) 00:15:53 executing program 4: pipe2(&(0x7f0000989000)={0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) mount(&(0x7f0000434ff8)='./file0\x00', &(0x7f0000abf000)='./file0\x00', &(0x7f0000f4c000)='jfs\x00', 0x1023402, 0x0) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000001200), 0x3000, &(0x7f0000001280)) unlink(&(0x7f00003b3000)='./file0\x00') dup2(r0, r1) 00:15:53 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) write$rdma_cm(r1, &(0x7f0000000640)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f00000004c0)}}, 0x10) close(r1) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0x6e) listen(r4, 0x0) connect$unix(r3, &(0x7f0000932000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) tkill(r2, 0x1000000000016) 00:15:53 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) write$rdma_cm(r0, &(0x7f0000000640)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f00000004c0)}}, 0x10) close(r0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0x6e) listen(r3, 0x0) connect$unix(r2, &(0x7f0000932000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) tkill(r1, 0x1000000000016) 00:15:53 executing program 2: r0 = socket$inet(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0xb00000000000000) 00:15:53 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x10, 0x3, 0x6) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e280900001100ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) [ 283.210129] FAULT_INJECTION: forcing a failure. [ 283.210129] name failslab, interval 1, probability 0, space 0, times 0 [ 283.221568] CPU: 1 PID: 17813 Comm: syz-executor6 Not tainted 4.17.0+ #89 [ 283.228545] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 283.237902] Call Trace: [ 283.240504] dump_stack+0x1b9/0x294 [ 283.244143] ? dump_stack_print_info.cold.2+0x52/0x52 [ 283.249358] should_fail.cold.4+0xa/0x1a [ 283.253431] ? __kmalloc_track_caller+0x14a/0x760 00:15:53 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f760070") sendmsg$nl_xfrm(r0, &(0x7f0000001440)={&(0x7f0000000000)={0x10, 0x4170000}, 0x349, &(0x7f0000001400)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x0, 0x0, {{@in=@multicast1=0xe0000001, @in6=@mcast2={0xff, 0x2, [0xfffffff0], 0x1}, 0x0, 0x0, 0x0, 0x0, 0xa, 0xfffffff0, 0xf0ffffffffffff}}}, 0xb8}, 0x1}, 0x0) [ 283.258288] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 283.263403] ? cgroup_mkdir+0x876/0x1150 [ 283.267475] ? kernfs_iop_mkdir+0x159/0x1e0 [ 283.271801] ? vfs_mkdir+0x42e/0x6b0 [ 283.275524] ? do_mkdirat+0x266/0x2f0 [ 283.279337] ? __x64_sys_mkdir+0x5c/0x80 [ 283.283408] ? do_syscall_64+0x1b1/0x800 [ 283.287483] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 283.292854] ? graph_lock+0x170/0x170 [ 283.296666] ? find_held_lock+0x36/0x1c0 [ 283.300739] ? print_usage_bug+0xc0/0xc0 [ 283.304813] ? find_held_lock+0x36/0x1c0 00:15:53 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x10, 0x3, 0x6) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e280600001100ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) [ 283.308883] ? __lock_is_held+0xb5/0x140 [ 283.312969] ? check_same_owner+0x320/0x320 [ 283.317304] ? rcu_note_context_switch+0x710/0x710 [ 283.322249] ? rcu_read_lock_sched_held+0x108/0x120 [ 283.327289] __should_failslab+0x124/0x180 [ 283.331540] should_failslab+0x9/0x14 [ 283.335359] kmem_cache_alloc+0x2af/0x760 [ 283.339521] ? memcpy+0x45/0x50 [ 283.342820] ? kstrdup+0x59/0x70 [ 283.346201] __kernfs_new_node+0xe7/0x580 [ 283.350453] ? kernfs_dop_revalidate+0x3c0/0x3c0 [ 283.355223] ? pointer+0x930/0x930 00:15:54 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f760070") sendmsg$nl_xfrm(r0, &(0x7f0000001440)={&(0x7f0000000000)={0x10, 0x4170000}, 0x349, &(0x7f0000001400)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x0, 0x0, {{@in=@multicast1=0xe0000001, @in6=@mcast2={0xff, 0x2, [0xa002000000000000], 0x1}, 0x0, 0x0, 0x0, 0x0, 0xa, 0xfffffff0, 0xf0ffffffffffff}}}, 0xb8}, 0x1}, 0x0) 00:15:54 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x10, 0x3, 0x6) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e281000001100ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) [ 283.358784] ? snprintf+0xa5/0xd0 [ 283.362251] ? vsprintf+0x40/0x40 [ 283.365718] kernfs_new_node+0x80/0xf0 [ 283.369618] __kernfs_create_file+0x4d/0x330 [ 283.374045] cgroup_addrm_files+0x437/0xb20 [ 283.378401] ? cgroup_css.part.14+0x1f0/0x1f0 [ 283.382905] ? find_held_lock+0x36/0x1c0 [ 283.387025] ? mem_cgroup_css_online+0x23e/0x300 [ 283.391798] ? mod_memcg_state+0x1a0/0x1a0 [ 283.396053] ? __lock_is_held+0xb5/0x140 [ 283.400137] ? kasan_check_write+0x14/0x20 [ 283.404386] ? online_css+0x265/0x330 00:15:54 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f760070") sendmsg$nl_xfrm(r0, &(0x7f0000001440)={&(0x7f0000000000)={0x10, 0x4170000}, 0x349, &(0x7f0000001400)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x0, 0x0, {{@in=@multicast1=0xe0000001, @in6=@mcast2={0xff, 0x2, [0xfcffffff], 0x1}, 0x0, 0x0, 0x0, 0x0, 0xa, 0xfffffff0, 0xf0ffffffffffff}}}, 0xb8}, 0x1}, 0x0) 00:15:54 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x10, 0x3, 0x6) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e280028001100ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) [ 283.408204] css_populate_dir+0x1a9/0x470 [ 283.412369] cgroup_apply_control_enable+0x449/0xe80 [ 283.417490] ? cgroup_save_control+0x260/0x260 [ 283.422079] ? mutex_unlock+0xd/0x10 [ 283.425793] ? kernfs_setattr+0x39/0x40 [ 283.429771] ? cgroup_kn_set_ugid+0x2cb/0x370 [ 283.434270] ? cgroup_file_name+0x1f0/0x1f0 [ 283.438604] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 283.444144] ? css_populate_dir+0x2a1/0x470 [ 283.448479] cgroup_mkdir+0x876/0x1150 [ 283.452373] ? cgroup_destroy_locked+0x7d0/0x7d0 [ 283.457139] ? put_itimerspec64+0x310/0x310 [ 283.461471] ? set_nlink+0xaf/0x140 [ 283.465112] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 283.470671] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 283.476218] ? kernfs_get_active+0xb2/0x120 [ 283.480548] ? cgroup_destroy_locked+0x7d0/0x7d0 [ 283.485318] kernfs_iop_mkdir+0x159/0x1e0 [ 283.489470] ? getname_flags+0xd0/0x5a0 [ 283.493452] vfs_mkdir+0x42e/0x6b0 [ 283.497002] do_mkdirat+0x266/0x2f0 [ 283.500640] ? __ia32_sys_mknod+0xb0/0xb0 [ 283.504794] ? do_syscall_64+0x92/0x800 [ 283.508772] __x64_sys_mkdir+0x5c/0x80 [ 283.512667] do_syscall_64+0x1b1/0x800 [ 283.516556] ? finish_task_switch+0x1ca/0x840 [ 283.521058] ? syscall_return_slowpath+0x5c0/0x5c0 [ 283.525998] ? syscall_return_slowpath+0x30f/0x5c0 [ 283.530939] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 283.536315] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 283.541173] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 283.546366] RIP: 0033:0x4559f9 [ 283.549549] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 283.568926] RSP: 002b:00007fa94af69c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 283.576648] RAX: ffffffffffffffda RBX: 00007fa94af6a6d4 RCX: 00000000004559f9 [ 283.583931] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000100 [ 283.591205] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 283.598482] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 283.605757] R13: 00000000004bae54 R14: 00000000004cead0 R15: 0000000000000057 [ 283.613216] cgroup: cgroup_addrm_files: failed to add stat, err=-12 00:15:54 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f760070") sendmsg$nl_xfrm(r0, &(0x7f0000001440)={&(0x7f0000000000)={0x10, 0x4170000}, 0x349, &(0x7f0000001400)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x0, 0x0, {{@in=@multicast1=0xe0000001, @in6=@mcast2={0xff, 0x2, [0xa0020000], 0x1}, 0x0, 0x0, 0x0, 0x0, 0xa, 0xfffffff0, 0xf0ffffffffffff}}}, 0xb8}, 0x1}, 0x0) 00:15:54 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x10, 0x3, 0x6) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e28000f001100ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 00:15:54 executing program 2: r0 = socket$inet(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0xf000000) 00:15:54 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[0xfeffffff], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) r2 = socket(0x11, 0x100000803, 0x0) r3 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={"6966623000faffffffffffffff00", 0x12}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'ifb0\x00', 0xa201}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@dev={0xfe, 0x80, [0x2000000]}, 0x0, 0x0, 0x2}, 0x20) 00:15:54 executing program 6 (fault-call:8 fault-nth:88): r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="295ed277a4200100360070") mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) rmdir(&(0x7f0000000340)='./file0//ile0\x00') r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) fstat(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r2) mkdir(&(0x7f0000000100)='./file0//ile0\x00', 0x0) 00:15:54 executing program 4: pipe2(&(0x7f0000989000)={0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) mount(&(0x7f0000434ff8)='./file0\x00', &(0x7f0000abf000)='./file0\x00', &(0x7f0000f4c000)='jfs\x00', 0x1023402, 0x0) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000001200), 0x3000, &(0x7f0000001280)) unlink(&(0x7f00003b3000)='./file0\x00') dup2(r0, r1) 00:15:54 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) write$rdma_cm(r0, &(0x7f0000000640)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f00000004c0)}}, 0x10) close(r0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0x6e) listen(r3, 0x0) connect$unix(r2, &(0x7f0000932000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) tkill(r1, 0x1000000000016) 00:15:54 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) write$rdma_cm(r1, &(0x7f0000000640)=ANY=[@ANYBLOB="0c000000080000fa", @ANYPTR=&(0x7f0000000740)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000bf00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007623749f95a270e400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"]], 0x10) close(r1) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0x6e) r5 = syz_open_dev$adsp(&(0x7f00000000c0)='/dev/adsp#\x00', 0xffffffffffffffff, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@mcast1, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@mcast1}}, &(0x7f0000000200)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@remote, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@ipv4}}, &(0x7f0000000240)=0xe8) setsockopt$inet_IP_IPSEC_POLICY(r5, 0x0, 0x10, &(0x7f00000003c0)={{{@in6=@loopback={0x0, 0x1}, @in6, 0x4e21, 0x5, 0x4e21, 0xffffffff, 0xa, 0x20, 0x20, 0xbf, r6, r7}, {0x6207, 0x7, 0x2d, 0x81, 0x3, 0x7ff, 0x100000001, 0x7fffffff}, {0x3, 0x9, 0x3, 0x5}, 0x3, 0x6e6bbe, 0x0, 0x0, 0x0, 0x3}, {{@in=@dev={0xac, 0x14, 0x14, 0x16}, 0x4d2, 0x2b}, 0xa, @in=@dev={0xac, 0x14, 0x14, 0xa}, 0x0, 0x0, 0x2, 0x1000, 0x3f66, 0x100, 0x8}}, 0xe8) r8 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x0, 0x40000) connect$pptp(r8, &(0x7f0000000080)={0x18, 0x2, {0x3, @loopback=0x7f000001}}, 0x1e) listen(r4, 0x0) connect$unix(r3, &(0x7f0000932000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) tkill(r2, 0x1000000000016) ioctl$VT_GETMODE(r5, 0x5601, &(0x7f0000000700)) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r8, 0x4008ae48, &(0x7f00000006c0)) creat(&(0x7f0000000680)="e91f7189591e9233614b00", 0x182) 00:15:54 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x10, 0x3, 0x6) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 00:15:54 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f760070") sendmsg$nl_xfrm(r0, &(0x7f0000001440)={&(0x7f0000000000)={0x10, 0x4170000}, 0x349, &(0x7f0000001400)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x0, 0x0, {{@in=@multicast1=0xe0000001, @in6=@mcast2={0xff, 0x2, [0xffffff7f], 0x1}, 0x0, 0x0, 0x0, 0x0, 0xa, 0xfffffff0, 0xf0ffffffffffff}}}, 0xb8}, 0x1}, 0x0) 00:15:54 executing program 2: r0 = socket$inet(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x5801) [ 284.194563] FAULT_INJECTION: forcing a failure. [ 284.194563] name failslab, interval 1, probability 0, space 0, times 0 [ 284.205921] CPU: 1 PID: 17893 Comm: syz-executor6 Not tainted 4.17.0+ #89 [ 284.212899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 284.222268] Call Trace: [ 284.224870] dump_stack+0x1b9/0x294 [ 284.228522] ? dump_stack_print_info.cold.2+0x52/0x52 [ 284.233728] ? check_same_owner+0x320/0x320 [ 284.238059] ? mutex_trylock+0x2a0/0x2a0 00:15:54 executing program 2: r0 = socket$inet(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x2) [ 284.242137] should_fail.cold.4+0xa/0x1a [ 284.246213] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 284.251331] ? __mutex_lock+0x7d9/0x17f0 [ 284.255403] ? graph_lock+0x170/0x170 [ 284.259213] ? kernfs_setattr+0x20/0x40 [ 284.263199] ? graph_lock+0x170/0x170 [ 284.267019] ? find_held_lock+0x36/0x1c0 [ 284.271093] ? __lock_is_held+0xb5/0x140 [ 284.275173] ? check_same_owner+0x320/0x320 [ 284.279514] ? rcu_note_context_switch+0x710/0x710 [ 284.284462] ? lock_downgrade+0x8e0/0x8e0 [ 284.288628] __should_failslab+0x124/0x180 00:15:54 executing program 2: r0 = socket$inet(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x3) [ 284.292879] should_failslab+0x9/0x14 [ 284.296696] kmem_cache_alloc_trace+0x2cb/0x780 [ 284.301386] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 284.306341] kernfs_iattrs.isra.4+0x123/0x4e0 [ 284.310844] ? ktime_get_real_ts64+0x361/0x510 [ 284.315434] ? kernfs_iop_permission+0xb0/0xb0 [ 284.320031] ? ktime_get_with_offset+0x4a0/0x4a0 [ 284.324805] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 284.330361] __kernfs_setattr+0x57/0x440 [ 284.334435] kernfs_setattr+0x2b/0x40 [ 284.338245] cgroup_kn_set_ugid+0x2c3/0x370 00:15:55 executing program 2: r0 = socket$inet(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x800000000000000) 00:15:55 executing program 2: r0 = socket$inet(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x10000000) [ 284.342574] ? cgroup_file_name+0x1f0/0x1f0 [ 284.346920] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 284.352469] ? __kernfs_create_file+0x29b/0x330 [ 284.357157] cgroup_addrm_files+0x465/0xb20 [ 284.361501] ? cgroup_css.part.14+0x1f0/0x1f0 [ 284.366007] ? find_held_lock+0x36/0x1c0 [ 284.370083] ? mem_cgroup_css_online+0x23e/0x300 [ 284.374848] ? mod_memcg_state+0x1a0/0x1a0 [ 284.379090] ? __lock_is_held+0xb5/0x140 [ 284.383162] ? kasan_check_write+0x14/0x20 [ 284.387398] ? online_css+0x265/0x330 [ 284.391210] css_populate_dir+0x1a9/0x470 [ 284.395376] cgroup_apply_control_enable+0x449/0xe80 [ 284.400493] ? cgroup_save_control+0x260/0x260 [ 284.405083] ? mutex_unlock+0xd/0x10 [ 284.408804] ? kernfs_setattr+0x39/0x40 [ 284.412783] ? cgroup_kn_set_ugid+0x2cb/0x370 [ 284.417279] ? cgroup_file_name+0x1f0/0x1f0 [ 284.421607] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 284.427145] ? css_populate_dir+0x2a1/0x470 [ 284.431463] cgroup_mkdir+0x876/0x1150 [ 284.435342] ? cgroup_destroy_locked+0x7d0/0x7d0 [ 284.440096] ? put_itimerspec64+0x310/0x310 [ 284.444418] ? set_nlink+0xaf/0x140 [ 284.448046] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 284.453576] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 284.459097] ? kernfs_get_active+0xb2/0x120 [ 284.463400] ? cgroup_destroy_locked+0x7d0/0x7d0 [ 284.468139] kernfs_iop_mkdir+0x159/0x1e0 [ 284.472269] ? getname_flags+0xd0/0x5a0 [ 284.476249] vfs_mkdir+0x42e/0x6b0 [ 284.479789] do_mkdirat+0x266/0x2f0 [ 284.483403] ? __ia32_sys_mknod+0xb0/0xb0 [ 284.487545] ? do_syscall_64+0x92/0x800 [ 284.491508] __x64_sys_mkdir+0x5c/0x80 [ 284.495394] do_syscall_64+0x1b1/0x800 [ 284.499275] ? finish_task_switch+0x1ca/0x840 [ 284.503764] ? syscall_return_slowpath+0x5c0/0x5c0 [ 284.508696] ? syscall_return_slowpath+0x30f/0x5c0 [ 284.513646] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 284.519013] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 284.523856] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 284.529033] RIP: 0033:0x4559f9 [ 284.532219] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 284.551500] RSP: 002b:00007fa94af69c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 284.559193] RAX: ffffffffffffffda RBX: 00007fa94af6a6d4 RCX: 00000000004559f9 [ 284.566455] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000100 [ 284.573717] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 284.580983] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 284.588247] R13: 00000000004bae54 R14: 00000000004cead0 R15: 0000000000000058 [ 284.597863] cgroup: cgroup_addrm_files: failed to add stat, err=-12 [ 284.622551] nla_parse: 3 callbacks suppressed [ 284.622559] netlink: 24 bytes leftover after parsing attributes in process `syz-executor7'. 00:15:55 executing program 2: r0 = socket$inet(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0xffffff7f) 00:15:55 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r2 = gettid() timer_create(0x2, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) write$rdma_cm(r1, &(0x7f0000000640)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f00000004c0)}}, 0x10) close(r1) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = accept$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, @dev}, &(0x7f0000000080)=0x10) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r5, 0x84, 0x79, &(0x7f00000000c0)=0x7c11, 0x247) bind$unix(r4, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0x6e) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000100), 0x4) listen(r4, 0x0) open(&(0x7f0000000140)="e91f7189591e9233614b00", 0x20000, 0x0) connect$unix(r3, &(0x7f0000932000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) tkill(r2, 0x1000000000016) 00:15:55 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f760070") sendmsg$nl_xfrm(r0, &(0x7f0000001440)={&(0x7f0000000000)={0x10, 0x4170000}, 0x349, &(0x7f0000001400)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x0, 0x0, {{@in=@multicast1=0xe0000001, @in6=@mcast2={0xff, 0x2, [0xf00], 0x1}, 0x0, 0x0, 0x0, 0x0, 0xa, 0xfffffff0, 0xf0ffffffffffff}}}, 0xb8}, 0x1}, 0x0) 00:15:55 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x10, 0x3, 0x6) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e2800f0001100ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 00:15:55 executing program 6 (fault-call:8 fault-nth:89): r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="295ed277a4200100360070") mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) rmdir(&(0x7f0000000340)='./file0//ile0\x00') r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) fstat(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r2) mkdir(&(0x7f0000000100)='./file0//ile0\x00', 0x0) 00:15:55 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) write$rdma_cm(r0, &(0x7f0000000640)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f00000004c0)}}, 0x10) close(r0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0x6e) listen(r3, 0x0) connect$unix(r2, &(0x7f0000932000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) tkill(r1, 0x1000000000016) 00:15:55 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[0xfeffffff], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) r2 = socket(0x11, 0x100000803, 0x0) r3 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={"6966623000faffffffffffffff00", 0x12}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'ifb0\x00', 0xa201}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@dev={0xfe, 0x80, [0x5000000]}, 0x0, 0x0, 0x2}, 0x20) 00:15:55 executing program 4: pipe2(&(0x7f0000989000)={0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) mount(&(0x7f0000434ff8)='./file0\x00', &(0x7f0000abf000)='./file0\x00', &(0x7f0000f4c000)='jfs\x00', 0x1023402, 0x0) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000001200), 0x3000, &(0x7f0000001280)) unlink(&(0x7f00003b3000)='./file0\x00') dup2(r0, r1) 00:15:55 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f760070") sendmsg$nl_xfrm(r0, &(0x7f0000001440)={&(0x7f0000000000)={0x10, 0x4170000}, 0x349, &(0x7f0000001400)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x0, 0x0, {{@in=@multicast1=0xe0000001, @in6=@mcast2={0xff, 0x2, [0xfffffffc], 0x1}, 0x0, 0x0, 0x0, 0x0, 0xa, 0xfffffff0, 0xf0ffffffffffff}}}, 0xb8}, 0x1}, 0x0) 00:15:55 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x10, 0x3, 0x6) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e280500001100ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) [ 285.253391] FAULT_INJECTION: forcing a failure. [ 285.253391] name failslab, interval 1, probability 0, space 0, times 0 [ 285.264770] CPU: 1 PID: 17946 Comm: syz-executor6 Not tainted 4.17.0+ #89 [ 285.271704] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 285.281061] Call Trace: [ 285.283664] dump_stack+0x1b9/0x294 [ 285.287308] ? dump_stack_print_info.cold.2+0x52/0x52 [ 285.292507] ? check_same_owner+0x320/0x320 [ 285.296842] ? mutex_trylock+0x2a0/0x2a0 00:15:55 executing program 2: r0 = socket$inet(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x34000) 00:15:56 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x10, 0x3, 0x6) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e280009001100ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) [ 285.300917] should_fail.cold.4+0xa/0x1a [ 285.304987] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 285.310099] ? __mutex_lock+0x7d9/0x17f0 [ 285.314170] ? graph_lock+0x170/0x170 [ 285.317979] ? kernfs_setattr+0x20/0x40 [ 285.321963] ? graph_lock+0x170/0x170 [ 285.325777] ? find_held_lock+0x36/0x1c0 [ 285.329856] ? __lock_is_held+0xb5/0x140 [ 285.333932] ? check_same_owner+0x320/0x320 [ 285.338265] ? rcu_note_context_switch+0x710/0x710 [ 285.343201] ? lock_downgrade+0x8e0/0x8e0 [ 285.347362] __should_failslab+0x124/0x180 00:15:56 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x10, 0x3, 0x6) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e28018a001100ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) [ 285.351609] should_failslab+0x9/0x14 [ 285.355415] kmem_cache_alloc_trace+0x2cb/0x780 [ 285.360095] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 285.365101] kernfs_iattrs.isra.4+0x123/0x4e0 [ 285.369603] ? ktime_get_real_ts64+0x361/0x510 [ 285.374200] ? kernfs_iop_permission+0xb0/0xb0 [ 285.378840] ? ktime_get_with_offset+0x4a0/0x4a0 [ 285.383610] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 285.389160] __kernfs_setattr+0x57/0x440 [ 285.393228] kernfs_setattr+0x2b/0x40 [ 285.397039] cgroup_kn_set_ugid+0x2c3/0x370 00:15:56 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f760070") sendmsg$nl_xfrm(r0, &(0x7f0000001440)={&(0x7f0000000000)={0x10, 0x4170000}, 0x349, &(0x7f0000001400)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x0, 0x0, {{@in=@multicast1=0xe0000001, @in6=@mcast2={0xff, 0x2, [0xfffffffffffff000], 0x1}, 0x0, 0x0, 0x0, 0x0, 0xa, 0xfffffff0, 0xf0ffffffffffff}}}, 0xb8}, 0x1}, 0x0) 00:15:56 executing program 2: r0 = socket$inet(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x1000000) [ 285.401370] ? cgroup_file_name+0x1f0/0x1f0 [ 285.405736] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 285.411283] ? __kernfs_create_file+0x29b/0x330 [ 285.415966] cgroup_addrm_files+0x465/0xb20 [ 285.420303] ? cgroup_css.part.14+0x1f0/0x1f0 [ 285.424837] ? find_held_lock+0x36/0x1c0 [ 285.428909] ? mem_cgroup_css_online+0x23e/0x300 [ 285.433670] ? mod_memcg_state+0x1a0/0x1a0 [ 285.437916] ? __lock_is_held+0xb5/0x140 [ 285.441994] ? kasan_check_write+0x14/0x20 [ 285.446230] ? online_css+0x265/0x330 [ 285.450061] css_populate_dir+0x1a9/0x470 00:15:56 executing program 2: r0 = socket$inet(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0xfcffffff) 00:15:56 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f760070") sendmsg$nl_xfrm(r0, &(0x7f0000001440)={&(0x7f0000000000)={0x10, 0x4170000}, 0x349, &(0x7f0000001400)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x0, 0x0, {{@in=@multicast1=0xe0000001, @in6=@mcast2={0xff, 0x2, [0xf0ffffffffffff], 0x1}, 0x0, 0x0, 0x0, 0x0, 0xa, 0xfffffff0, 0xf0ffffffffffff}}}, 0xb8}, 0x1}, 0x0) [ 285.454223] cgroup_apply_control_enable+0x449/0xe80 [ 285.459350] ? cgroup_save_control+0x260/0x260 [ 285.463939] ? mutex_unlock+0xd/0x10 [ 285.467652] ? kernfs_setattr+0x39/0x40 [ 285.471627] ? cgroup_kn_set_ugid+0x2cb/0x370 [ 285.476123] ? cgroup_file_name+0x1f0/0x1f0 [ 285.480462] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 285.486006] ? css_populate_dir+0x2a1/0x470 [ 285.490346] cgroup_mkdir+0x876/0x1150 [ 285.494245] ? cgroup_destroy_locked+0x7d0/0x7d0 [ 285.499180] ? put_itimerspec64+0x310/0x310 [ 285.503507] ? set_nlink+0xaf/0x140 [ 285.507143] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 285.512684] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 285.518224] ? kernfs_get_active+0xb2/0x120 [ 285.522550] ? cgroup_destroy_locked+0x7d0/0x7d0 [ 285.527309] kernfs_iop_mkdir+0x159/0x1e0 [ 285.531458] ? getname_flags+0xd0/0x5a0 [ 285.535439] vfs_mkdir+0x42e/0x6b0 [ 285.538989] do_mkdirat+0x266/0x2f0 [ 285.542634] ? __ia32_sys_mknod+0xb0/0xb0 [ 285.546794] ? do_syscall_64+0x92/0x800 [ 285.550781] __x64_sys_mkdir+0x5c/0x80 [ 285.554679] do_syscall_64+0x1b1/0x800 [ 285.558566] ? finish_task_switch+0x1ca/0x840 [ 285.563070] ? syscall_return_slowpath+0x5c0/0x5c0 [ 285.568007] ? syscall_return_slowpath+0x30f/0x5c0 [ 285.572951] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 285.578339] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 285.583191] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 285.588385] RIP: 0033:0x4559f9 [ 285.591565] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 285.610757] RSP: 002b:00007fa94af69c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 285.618469] RAX: ffffffffffffffda RBX: 00007fa94af6a6d4 RCX: 00000000004559f9 [ 285.625729] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000100 [ 285.633013] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 285.640282] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 285.647545] R13: 00000000004bae54 R14: 00000000004cead0 R15: 0000000000000059 [ 285.655848] cgroup: cgroup_addrm_files: failed to add stat, err=-12 00:15:57 executing program 2: r0 = socket$inet(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x58010000) 00:15:57 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f760070") sendmsg$nl_xfrm(r0, &(0x7f0000001440)={&(0x7f0000000000)={0x10, 0x4170000}, 0x349, &(0x7f0000001400)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x0, 0x0, {{@in=@multicast1=0xe0000001, @in6=@mcast2={0xff, 0x2, [0xf000000], 0x1}, 0x0, 0x0, 0x0, 0x0, 0xa, 0xfffffff0, 0xf0ffffffffffff}}}, 0xb8}, 0x1}, 0x0) 00:15:57 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x10, 0x3, 0x6) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e28000b001100ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 00:15:57 executing program 6 (fault-call:8 fault-nth:90): r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="295ed277a4200100360070") mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) rmdir(&(0x7f0000000340)='./file0//ile0\x00') r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) fstat(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r2) mkdir(&(0x7f0000000100)='./file0//ile0\x00', 0x0) 00:15:57 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) write$rdma_cm(r0, &(0x7f0000000640)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f00000004c0)}}, 0x10) close(r0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0x6e) listen(r3, 0x0) connect$unix(r2, &(0x7f0000932000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) tkill(r1, 0x1000000000016) 00:15:57 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[0xfeffffff], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) r2 = socket(0x11, 0x100000803, 0x0) r3 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={"6966623000faffffffffffffff00", 0x12}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'ifb0\x00', 0xa201}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@dev={0xfe, 0x80, [0x500]}, 0x0, 0x0, 0x2}, 0x20) 00:15:57 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) write$rdma_cm(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="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", @ANYPTR=&(0x7f00000004c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00']], 0x10) close(r1) r2 = socket$unix(0x1, 0x4001, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0x6e) listen(r3, 0x0) connect$unix(r2, &(0x7f0000932000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) 00:15:57 executing program 4: pipe2(&(0x7f0000989000)={0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) mount(&(0x7f0000434ff8)='./file0\x00', &(0x7f0000abf000)='./file0\x00', &(0x7f0000f4c000)='jfs\x00', 0x1023402, 0x0) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000001200), 0x3000, &(0x7f0000001280)) unlink(&(0x7f00003b3000)='./file0\x00') dup2(r0, r1) [ 286.614923] FAULT_INJECTION: forcing a failure. [ 286.614923] name failslab, interval 1, probability 0, space 0, times 0 [ 286.626280] CPU: 1 PID: 18020 Comm: syz-executor6 Not tainted 4.17.0+ #89 [ 286.633222] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 286.642584] Call Trace: [ 286.645190] dump_stack+0x1b9/0x294 [ 286.648836] ? dump_stack_print_info.cold.2+0x52/0x52 [ 286.654046] ? __save_stack_trace+0x7e/0xd0 [ 286.658454] should_fail.cold.4+0xa/0x1a [ 286.662534] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 286.667654] ? graph_lock+0x170/0x170 [ 286.671463] ? graph_lock+0x170/0x170 [ 286.675280] ? find_held_lock+0x36/0x1c0 [ 286.679361] ? __lock_is_held+0xb5/0x140 [ 286.683443] ? check_same_owner+0x320/0x320 [ 286.687779] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 286.692802] ? rcu_note_context_switch+0x710/0x710 [ 286.697745] __should_failslab+0x124/0x180 [ 286.702003] should_failslab+0x9/0x14 [ 286.705813] __kmalloc_track_caller+0x2c4/0x760 [ 286.710491] ? string+0x21d/0x2c0 [ 286.713954] ? kstrdup_const+0x66/0x80 [ 286.717851] kstrdup+0x39/0x70 [ 286.721054] kstrdup_const+0x66/0x80 [ 286.724779] __kernfs_new_node+0xa8/0x580 [ 286.728940] ? kernfs_dop_revalidate+0x3c0/0x3c0 [ 286.733737] ? pointer+0x930/0x930 [ 286.737293] ? graph_lock+0x170/0x170 [ 286.741111] ? snprintf+0xa5/0xd0 [ 286.744574] ? vsprintf+0x40/0x40 [ 286.748036] ? cgroup_kn_set_ugid+0x2cb/0x370 [ 286.752545] kernfs_new_node+0x80/0xf0 [ 286.756450] __kernfs_create_file+0x4d/0x330 [ 286.760868] cgroup_addrm_files+0x437/0xb20 [ 286.765211] ? cgroup_css.part.14+0x1f0/0x1f0 [ 286.769723] ? find_held_lock+0x36/0x1c0 [ 286.773803] ? mem_cgroup_css_online+0x23e/0x300 [ 286.778572] ? mod_memcg_state+0x1a0/0x1a0 [ 286.782821] ? __lock_is_held+0xb5/0x140 [ 286.786899] ? kasan_check_write+0x14/0x20 [ 286.791140] ? online_css+0x265/0x330 [ 286.794960] css_populate_dir+0x1a9/0x470 [ 286.799126] cgroup_apply_control_enable+0x449/0xe80 [ 286.804246] ? cgroup_save_control+0x260/0x260 [ 286.808840] ? mutex_unlock+0xd/0x10 [ 286.812561] ? kernfs_setattr+0x39/0x40 [ 286.816546] ? cgroup_kn_set_ugid+0x2cb/0x370 [ 286.821046] ? cgroup_file_name+0x1f0/0x1f0 [ 286.825385] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 286.830926] ? css_populate_dir+0x2a1/0x470 [ 286.835261] cgroup_mkdir+0x876/0x1150 [ 286.839158] ? cgroup_destroy_locked+0x7d0/0x7d0 [ 286.844094] ? put_itimerspec64+0x310/0x310 [ 286.848429] ? set_nlink+0xaf/0x140 [ 286.852062] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 286.857605] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 286.863146] ? kernfs_get_active+0xb2/0x120 [ 286.867474] ? cgroup_destroy_locked+0x7d0/0x7d0 [ 286.872235] kernfs_iop_mkdir+0x159/0x1e0 [ 286.876383] ? getname_flags+0xd0/0x5a0 [ 286.880360] vfs_mkdir+0x42e/0x6b0 [ 286.883909] do_mkdirat+0x266/0x2f0 [ 286.887544] ? __ia32_sys_mknod+0xb0/0xb0 [ 286.891711] ? syscall_slow_exit_work+0x4f0/0x4f0 [ 286.896559] ? do_syscall_64+0x92/0x800 [ 286.900540] __x64_sys_mkdir+0x5c/0x80 [ 286.904433] do_syscall_64+0x1b1/0x800 [ 286.908320] ? finish_task_switch+0x1ca/0x840 [ 286.912819] ? syscall_return_slowpath+0x5c0/0x5c0 [ 286.917752] ? syscall_return_slowpath+0x30f/0x5c0 [ 286.922697] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 286.928073] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 286.932930] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 286.938143] RIP: 0033:0x4559f9 [ 286.941326] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00:15:57 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) write$rdma_cm(r1, &(0x7f0000000640)=ANY=[@ANYBLOB="0c000000080000fa", @ANYPTR=&(0x7f00000004c0)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"]], 0x10) close(r1) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0x6e) listen(r4, 0x0) connect$unix(r3, &(0x7f0000932000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) tkill(r2, 0x1000000000016) 00:15:57 executing program 2: r0 = socket$inet(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x300) 00:15:57 executing program 2: r0 = socket$inet(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x9000000) 00:15:57 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f760070") sendmsg$nl_xfrm(r0, &(0x7f0000001440)={&(0x7f0000000000)={0x10, 0x4170000}, 0x349, &(0x7f0000001400)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x0, 0x0, {{@in=@multicast1=0xe0000001, @in6=@mcast2={0xff, 0x2, [0xf000], 0x1}, 0x0, 0x0, 0x0, 0x0, 0xa, 0xfffffff0, 0xf0ffffffffffff}}}, 0xb8}, 0x1}, 0x0) 00:15:57 executing program 2: r0 = socket$inet(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0xf0ffff) 00:15:57 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f760070") sendmsg$nl_xfrm(r0, &(0x7f0000001440)={&(0x7f0000000000)={0x10, 0x4170000}, 0x349, &(0x7f0000001400)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x0, 0x0, {{@in=@multicast1=0xe0000001, @in6=@mcast2={0xff, 0x2, [0x2], 0x1}, 0x0, 0x0, 0x0, 0x0, 0xa, 0xfffffff0, 0xf0ffffffffffff}}}, 0xb8}, 0x1}, 0x0) 00:15:57 executing program 2: r0 = socket$inet(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0xf0ffffff) 00:15:57 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f760070") sendmsg$nl_xfrm(r0, &(0x7f0000001440)={&(0x7f0000000000)={0x10, 0x4170000}, 0x349, &(0x7f0000001400)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x0, 0x0, {{@in=@multicast1=0xe0000001, @in6=@mcast2={0xff, 0x2, [0xffffffffffffffff], 0x1}, 0x0, 0x0, 0x0, 0x0, 0xa, 0xfffffff0, 0xf0ffffffffffff}}}, 0xb8}, 0x1}, 0x0) [ 286.960704] RSP: 002b:00007fa94af69c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 286.968417] RAX: ffffffffffffffda RBX: 00007fa94af6a6d4 RCX: 00000000004559f9 [ 286.975688] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000100 [ 286.982955] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 286.990228] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 286.997497] R13: 00000000004bae54 R14: 00000000004cead0 R15: 000000000000005a [ 287.005077] cgroup: cgroup_addrm_files: failed to add swap.current, err=-12 00:15:57 executing program 6 (fault-call:8 fault-nth:91): r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="295ed277a4200100360070") mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) rmdir(&(0x7f0000000340)='./file0//ile0\x00') r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) fstat(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r2) mkdir(&(0x7f0000000100)='./file0//ile0\x00', 0x0) [ 287.265440] FAULT_INJECTION: forcing a failure. [ 287.265440] name failslab, interval 1, probability 0, space 0, times 0 [ 287.276892] CPU: 0 PID: 18073 Comm: syz-executor6 Not tainted 4.17.0+ #89 [ 287.283831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 287.293189] Call Trace: [ 287.295796] dump_stack+0x1b9/0x294 [ 287.299444] ? dump_stack_print_info.cold.2+0x52/0x52 [ 287.304655] should_fail.cold.4+0xa/0x1a [ 287.308721] ? __kmalloc_track_caller+0x14a/0x760 [ 287.313579] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 287.318695] ? cgroup_mkdir+0x876/0x1150 [ 287.322763] ? kernfs_iop_mkdir+0x159/0x1e0 [ 287.327090] ? vfs_mkdir+0x42e/0x6b0 [ 287.330819] ? do_mkdirat+0x266/0x2f0 [ 287.334666] ? __x64_sys_mkdir+0x5c/0x80 [ 287.338739] ? do_syscall_64+0x1b1/0x800 [ 287.342815] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 287.348196] ? graph_lock+0x170/0x170 [ 287.352003] ? find_held_lock+0x36/0x1c0 [ 287.356078] ? print_usage_bug+0xc0/0xc0 [ 287.360155] ? find_held_lock+0x36/0x1c0 [ 287.364214] ? __lock_is_held+0xb5/0x140 [ 287.368273] ? check_same_owner+0x320/0x320 [ 287.372582] ? rcu_note_context_switch+0x710/0x710 [ 287.377514] ? rcu_read_lock_sched_held+0x108/0x120 [ 287.382537] __should_failslab+0x124/0x180 [ 287.386772] should_failslab+0x9/0x14 [ 287.390566] kmem_cache_alloc+0x2af/0x760 [ 287.394708] ? memcpy+0x45/0x50 [ 287.397971] ? kstrdup+0x59/0x70 [ 287.401324] __kernfs_new_node+0xe7/0x580 [ 287.405474] ? kernfs_dop_revalidate+0x3c0/0x3c0 [ 287.410234] ? pointer+0x930/0x930 [ 287.413771] ? graph_lock+0x170/0x170 [ 287.417558] ? snprintf+0xa5/0xd0 [ 287.421011] ? vsprintf+0x40/0x40 [ 287.424461] ? cgroup_kn_set_ugid+0x2cb/0x370 [ 287.428958] kernfs_new_node+0x80/0xf0 [ 287.432858] __kernfs_create_file+0x4d/0x330 [ 287.437276] cgroup_addrm_files+0x437/0xb20 [ 287.441592] ? cgroup_css.part.14+0x1f0/0x1f0 [ 287.446091] ? find_held_lock+0x36/0x1c0 [ 287.450156] ? mem_cgroup_css_online+0x23e/0x300 [ 287.454918] ? mod_memcg_state+0x1a0/0x1a0 [ 287.459156] ? __lock_is_held+0xb5/0x140 [ 287.463209] ? kasan_check_write+0x14/0x20 [ 287.467426] ? online_css+0x265/0x330 [ 287.471213] css_populate_dir+0x1a9/0x470 [ 287.475349] cgroup_apply_control_enable+0x449/0xe80 [ 287.480441] ? cgroup_save_control+0x260/0x260 [ 287.485008] ? mutex_unlock+0xd/0x10 [ 287.488714] ? kernfs_setattr+0x39/0x40 [ 287.492671] ? cgroup_kn_set_ugid+0x2cb/0x370 [ 287.497147] ? cgroup_file_name+0x1f0/0x1f0 [ 287.501453] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 287.506968] ? css_populate_dir+0x2a1/0x470 [ 287.511285] cgroup_mkdir+0x876/0x1150 [ 287.515161] ? cgroup_destroy_locked+0x7d0/0x7d0 [ 287.519904] ? put_itimerspec64+0x310/0x310 [ 287.524211] ? set_nlink+0xaf/0x140 [ 287.527825] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 287.533346] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 287.538863] ? kernfs_get_active+0xb2/0x120 [ 287.543178] ? cgroup_destroy_locked+0x7d0/0x7d0 [ 287.547933] kernfs_iop_mkdir+0x159/0x1e0 [ 287.552061] ? getname_flags+0xd0/0x5a0 [ 287.556025] vfs_mkdir+0x42e/0x6b0 [ 287.559554] do_mkdirat+0x266/0x2f0 [ 287.563166] ? __ia32_sys_mknod+0xb0/0xb0 [ 287.567301] ? do_syscall_64+0x92/0x800 [ 287.571267] __x64_sys_mkdir+0x5c/0x80 [ 287.575139] do_syscall_64+0x1b1/0x800 [ 287.579021] ? finish_task_switch+0x1ca/0x840 [ 287.583511] ? syscall_return_slowpath+0x5c0/0x5c0 [ 287.588421] ? syscall_return_slowpath+0x30f/0x5c0 [ 287.593351] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 287.598719] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 287.603562] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 287.608733] RIP: 0033:0x4559f9 [ 287.611905] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 287.632717] RSP: 002b:00007fa94af69c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 287.640409] RAX: ffffffffffffffda RBX: 00007fa94af6a6d4 RCX: 00000000004559f9 [ 287.647672] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000100 [ 287.654940] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 287.662212] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 287.669472] R13: 00000000004bae54 R14: 00000000004cead0 R15: 000000000000005b [ 287.676980] cgroup: cgroup_addrm_files: failed to add swap.current, err=-12 [ 287.680284] FAULT_FLAG_ALLOW_RETRY missing 30 [ 287.689198] CPU: 1 PID: 18027 Comm: syz-executor4 Not tainted 4.17.0+ #89 [ 287.696124] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 287.705473] Call Trace: [ 287.708071] dump_stack+0x1b9/0x294 [ 287.711714] ? dump_stack_print_info.cold.2+0x52/0x52 [ 287.716911] ? kasan_check_write+0x14/0x20 [ 287.721150] ? do_raw_spin_lock+0xc1/0x200 [ 287.725398] handle_userfault.cold.32+0x44/0x5a [ 287.730091] ? userfaultfd_ioctl+0x4d10/0x4d10 [ 287.734686] ? debug_check_no_locks_freed+0x310/0x310 [ 287.739895] ? debug_check_no_locks_freed+0x310/0x310 [ 287.745098] ? print_usage_bug+0xc0/0xc0 [ 287.749179] ? print_usage_bug+0xc0/0xc0 [ 287.753255] ? set_next_entity+0x2ae/0xaf0 [ 287.757498] ? dequeue_entity+0x3f8/0x15c0 [ 287.761746] ? rcu_read_lock_sched_held+0x108/0x120 [ 287.766775] ? __lock_acquire+0x7f5/0x5140 [ 287.771004] ? graph_lock+0x170/0x170 [ 287.774808] ? find_held_lock+0x36/0x1c0 [ 287.778862] ? lock_downgrade+0x8e0/0x8e0 [ 287.782996] ? kasan_check_read+0x11/0x20 [ 287.787144] ? do_raw_spin_unlock+0x9e/0x2e0 [ 287.791550] ? do_raw_spin_trylock+0x1b0/0x1b0 [ 287.796129] ? kasan_check_write+0x14/0x20 [ 287.800354] ? do_raw_spin_lock+0xc1/0x200 [ 287.804581] __handle_mm_fault+0x38d8/0x4310 [ 287.809002] ? vm_insert_mixed_mkwrite+0x40/0x40 [ 287.813760] ? graph_lock+0x170/0x170 [ 287.817562] ? print_usage_bug+0xc0/0xc0 [ 287.821633] ? find_held_lock+0x36/0x1c0 [ 287.825702] ? lock_downgrade+0x8e0/0x8e0 [ 287.829871] ? handle_mm_fault+0x8c0/0xc70 [ 287.834117] handle_mm_fault+0x53a/0xc70 [ 287.838185] ? __handle_mm_fault+0x4310/0x4310 [ 287.842764] ? find_vma+0x34/0x190 [ 287.846293] __do_page_fault+0x60b/0xe40 [ 287.850349] ? mm_fault_error+0x380/0x380 [ 287.854479] ? ext4_xattr_get+0x15a/0xad0 [ 287.858612] ? rcu_note_context_switch+0x710/0x710 [ 287.863523] do_page_fault+0xee/0x8a7 [ 287.867304] ? graph_lock+0x170/0x170 [ 287.871085] ? vmalloc_sync_all+0x30/0x30 [ 287.875215] ? debug_check_no_locks_freed+0x310/0x310 [ 287.880390] ? lock_downgrade+0x8e0/0x8e0 [ 287.884524] ? ext4_xattr_ibody_get+0xff/0x620 [ 287.889093] ? print_usage_bug+0xc0/0xc0 [ 287.893137] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 287.897963] page_fault+0x1e/0x30 [ 287.901401] RIP: 0010:iov_iter_fault_in_readable+0x1bf/0x460 [ 287.907171] Code: ff ff ff 76 17 eb 3f e8 3f 72 23 fe 49 81 c4 00 10 00 00 4c 39 a5 30 ff ff ff 72 32 e8 2a 72 23 fe 0f 1f 00 0f ae e8 45 31 ed <41> 8a 14 24 0f 1f 00 31 ff 44 89 ee 88 95 58 ff ff ff e8 1a 73 23 [ 287.926370] RSP: 0018:ffff8801b266f688 EFLAGS: 00010246 [ 287.931715] RAX: 0000000000040000 RBX: 1ffff100364cded3 RCX: ffffc900050c5000 [ 287.938964] RDX: 00000000000000db RSI: ffffffff8356c8c6 RDI: 0000000000000005 [ 287.946219] RBP: ffff8801b266f760 R08: ffff88017dbe8680 R09: 0000000000000006 [ 287.953473] R10: ffff88017dbe8680 R11: 0000000000000000 R12: 0000000020011fd2 [ 287.960732] R13: 0000000000000000 R14: 0000000000000030 R15: ffff8801b266fbc8 [ 287.967993] ? iov_iter_fault_in_readable+0x1b6/0x460 [ 287.973180] ? iov_iter_fault_in_readable+0x1b6/0x460 [ 287.978354] ? copy_page_from_iter+0x880/0x880 [ 287.982927] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 287.987933] ? ktime_get_coarse_real_ts64+0x23b/0x390 [ 287.993104] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 287.998624] ? timespec_trunc+0xe7/0x170 [ 288.002668] ? put_itimerspec64+0x310/0x310 [ 288.006976] generic_perform_write+0x213/0x6a0 [ 288.011546] ? add_page_wait_queue+0x2a0/0x2a0 [ 288.016106] ? file_update_time+0xdc/0x640 [ 288.020323] ? current_time+0x180/0x180 [ 288.024281] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 288.029277] ? generic_write_checks+0x37d/0x5b0 [ 288.033924] ? page_endio+0x610/0x610 [ 288.037724] ? down_write_trylock+0xd4/0x150 [ 288.042119] __generic_file_write_iter+0x26e/0x630 [ 288.047046] ext4_file_write_iter+0x388/0x1420 [ 288.051610] ? kasan_check_read+0x11/0x20 [ 288.055741] ? rcu_is_watching+0x85/0x140 [ 288.059872] ? ext4_file_mmap+0x410/0x410 [ 288.064007] ? __fget+0x40c/0x650 [ 288.067453] ? expand_files.part.8+0x9a0/0x9a0 [ 288.072025] ? graph_lock+0x170/0x170 [ 288.075814] ? kmem_cache_free+0x86/0x2d0 [ 288.079951] ? putname+0xf2/0x130 [ 288.083385] ? do_sys_open+0x554/0x740 [ 288.087251] ? __x64_sys_creat+0x61/0x80 [ 288.091297] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 288.096650] ? kasan_check_read+0x11/0x20 [ 288.100782] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 288.106562] ? iov_iter_init+0xc9/0x1f0 [ 288.110523] __vfs_write+0x64d/0x960 [ 288.114231] ? kernel_read+0x120/0x120 [ 288.118105] ? __lock_is_held+0xb5/0x140 [ 288.122152] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 288.127668] ? __sb_start_write+0x17f/0x300 [ 288.131980] vfs_write+0x1f8/0x560 [ 288.135503] ksys_write+0xf9/0x250 [ 288.139044] ? __ia32_sys_read+0xb0/0xb0 [ 288.143088] ? filp_open+0x80/0x80 [ 288.146610] ? ksys_ioctl+0x81/0xd0 [ 288.150217] __x64_sys_write+0x73/0xb0 [ 288.154092] do_syscall_64+0x1b1/0x800 [ 288.157962] ? syscall_slow_exit_work+0x4f0/0x4f0 [ 288.162785] ? syscall_return_slowpath+0x5c0/0x5c0 [ 288.167693] ? syscall_return_slowpath+0x30f/0x5c0 [ 288.172615] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 288.177963] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 288.183052] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 288.188221] RIP: 0033:0x4559f9 [ 288.191388] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 288.210568] RSP: 002b:00007efeac13ac68 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 00:15:58 executing program 2: r0 = socket$inet(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0xfffffff0) 00:15:58 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x10, 0x3, 0x6) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e280003001100ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 00:15:58 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[0xfeffffff], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) r2 = socket(0x11, 0x100000803, 0x0) r3 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={"6966623000faffffffffffffff00", 0x12}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'ifb0\x00', 0xa201}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@dev={0xfe, 0x80, [0xfffffff5]}, 0x0, 0x0, 0x2}, 0x20) 00:15:58 executing program 4: pipe2(&(0x7f0000989000)={0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) mount(&(0x7f0000434ff8)='./file0\x00', &(0x7f0000abf000)='./file0\x00', &(0x7f0000f4c000)='jfs\x00', 0x1023402, 0x0) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000001200), 0x3000, &(0x7f0000001280)) unlink(&(0x7f00003b3000)='./file0\x00') dup2(r0, r1) 00:15:58 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) write$rdma_cm(r0, &(0x7f0000000640)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f00000004c0)}}, 0x10) close(r0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0x6e) listen(r3, 0x0) connect$unix(r2, &(0x7f0000932000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) tkill(r1, 0x1000000000016) 00:15:58 executing program 6 (fault-call:8 fault-nth:92): r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="295ed277a4200100360070") mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) rmdir(&(0x7f0000000340)='./file0//ile0\x00') r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) fstat(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r2) mkdir(&(0x7f0000000100)='./file0//ile0\x00', 0x0) 00:15:58 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f760070") sendmsg$nl_xfrm(r0, &(0x7f0000001440)={&(0x7f0000000000)={0x10, 0x4170000}, 0x349, &(0x7f0000001400)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x0, 0x0, {{@in=@multicast1=0xe0000001, @in6=@mcast2={0xff, 0x2, [0x3000000], 0x1}, 0x0, 0x0, 0x0, 0x0, 0xa, 0xfffffff0, 0xf0ffffffffffff}}}, 0xb8}, 0x1}, 0x0) 00:15:58 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r2 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x60000000000, 0x0) setsockopt$bt_BT_SECURITY(r2, 0x112, 0x4, &(0x7f0000000080)={0x7, 0x80000000}, 0x2) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) write$rdma_cm(r1, &(0x7f0000000640)=ANY=[@ANYBLOB="0c000000080000fa", @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000013e98888e9bdbf2f916d5affd59c8347dac10bf2908e1180cd43ece0df77367ee99bde8d882e6675a97e16779917c2385aea158a7fdc30da8d3056c2f91c5697b4b9b00918d2c026078a92affeadfd2112a6dbf948aa7fa2e382b239be8fd24b9b36ab4310941c3e000000000000"]], 0x10) close(r1) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) bind$unix(r5, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0x6e) listen(r5, 0x0) connect$unix(r4, &(0x7f0000932000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) tkill(r3, 0x1000000000016) [ 288.218255] RAX: ffffffffffffffda RBX: 00007efeac13b6d4 RCX: 00000000004559f9 [ 288.225506] RDX: 0000000000000030 RSI: 0000000020011fd2 RDI: 0000000000000016 [ 288.232753] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 288.240010] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 288.247277] R13: 00000000004c23b1 R14: 00000000004d3318 R15: 0000000000000000 00:15:59 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f760070") sendmsg$nl_xfrm(r0, &(0x7f0000001440)={&(0x7f0000000000)={0x10, 0x4170000}, 0x349, &(0x7f0000001400)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x0, 0x0, {{@in=@multicast1=0xe0000001, @in6=@mcast2={0xff, 0x2, [0x2a0], 0x1}, 0x0, 0x0, 0x0, 0x0, 0xa, 0xfffffff0, 0xf0ffffffffffff}}}, 0xb8}, 0x1}, 0x0) 00:15:59 executing program 2: r0 = socket$inet(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x40030000000000) [ 288.338843] FAULT_INJECTION: forcing a failure. [ 288.338843] name failslab, interval 1, probability 0, space 0, times 0 [ 288.350296] CPU: 1 PID: 18110 Comm: syz-executor6 Not tainted 4.17.0+ #89 [ 288.357248] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 288.366602] Call Trace: [ 288.369206] dump_stack+0x1b9/0x294 [ 288.372853] ? dump_stack_print_info.cold.2+0x52/0x52 [ 288.378063] ? check_same_owner+0x320/0x320 [ 288.382404] ? mutex_trylock+0x2a0/0x2a0 00:15:59 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x10, 0x3, 0x6) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e280200001100ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) [ 288.386486] should_fail.cold.4+0xa/0x1a [ 288.390572] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 288.395684] ? __mutex_lock+0x7d9/0x17f0 [ 288.399755] ? graph_lock+0x170/0x170 [ 288.403568] ? kernfs_setattr+0x20/0x40 [ 288.407562] ? graph_lock+0x170/0x170 [ 288.411377] ? find_held_lock+0x36/0x1c0 [ 288.415451] ? __lock_is_held+0xb5/0x140 [ 288.419531] ? check_same_owner+0x320/0x320 [ 288.423870] ? rcu_note_context_switch+0x710/0x710 [ 288.428808] ? lock_downgrade+0x8e0/0x8e0 [ 288.432969] __should_failslab+0x124/0x180 00:15:59 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x10, 0x3, 0x6) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e280a00001100ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 00:15:59 executing program 2: r0 = socket$inet(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0xfffff000) [ 288.437221] should_failslab+0x9/0x14 [ 288.441030] kmem_cache_alloc_trace+0x2cb/0x780 [ 288.445703] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 288.450650] kernfs_iattrs.isra.4+0x123/0x4e0 [ 288.455158] ? ktime_get_real_ts64+0x361/0x510 [ 288.459749] ? kernfs_iop_permission+0xb0/0xb0 [ 288.464344] ? ktime_get_with_offset+0x4a0/0x4a0 [ 288.469119] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 288.474672] __kernfs_setattr+0x57/0x440 [ 288.478748] kernfs_setattr+0x2b/0x40 [ 288.482565] cgroup_kn_set_ugid+0x2c3/0x370 00:15:59 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x10, 0x3, 0x6) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e28000a001100ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 00:15:59 executing program 2: r0 = socket$inet(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x80ffffff) [ 288.486901] ? cgroup_file_name+0x1f0/0x1f0 [ 288.491239] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 288.496785] ? __kernfs_create_file+0x29b/0x330 [ 288.501468] cgroup_addrm_files+0x465/0xb20 [ 288.505814] ? cgroup_css.part.14+0x1f0/0x1f0 [ 288.510313] ? find_held_lock+0x36/0x1c0 [ 288.514385] ? mem_cgroup_css_online+0x23e/0x300 [ 288.519143] ? mod_memcg_state+0x1a0/0x1a0 [ 288.523382] ? __lock_is_held+0xb5/0x140 [ 288.527454] ? kasan_check_write+0x14/0x20 [ 288.531691] ? online_css+0x265/0x330 [ 288.535499] css_populate_dir+0x1a9/0x470 [ 288.539660] cgroup_apply_control_enable+0x449/0xe80 [ 288.544777] ? cgroup_save_control+0x260/0x260 [ 288.549364] ? mutex_unlock+0xd/0x10 [ 288.553080] ? kernfs_setattr+0x39/0x40 [ 288.557058] ? cgroup_kn_set_ugid+0x2cb/0x370 [ 288.561675] ? cgroup_file_name+0x1f0/0x1f0 [ 288.566008] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 288.571635] ? css_populate_dir+0x2a1/0x470 [ 288.576137] cgroup_mkdir+0x876/0x1150 [ 288.580032] ? cgroup_destroy_locked+0x7d0/0x7d0 [ 288.584793] ? put_itimerspec64+0x310/0x310 [ 288.589118] ? set_nlink+0xaf/0x140 [ 288.592749] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 288.598291] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 288.603830] ? kernfs_get_active+0xb2/0x120 [ 288.608154] ? cgroup_destroy_locked+0x7d0/0x7d0 [ 288.612912] kernfs_iop_mkdir+0x159/0x1e0 [ 288.617056] ? getname_flags+0xd0/0x5a0 [ 288.621025] vfs_mkdir+0x42e/0x6b0 [ 288.624558] do_mkdirat+0x266/0x2f0 [ 288.628173] ? __ia32_sys_mknod+0xb0/0xb0 [ 288.632307] ? do_syscall_64+0x92/0x800 [ 288.636272] __x64_sys_mkdir+0x5c/0x80 [ 288.640161] do_syscall_64+0x1b1/0x800 [ 288.644043] ? syscall_return_slowpath+0x5c0/0x5c0 [ 288.648973] ? syscall_return_slowpath+0x30f/0x5c0 [ 288.653911] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 288.659277] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 288.664127] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 288.669303] RIP: 0033:0x4559f9 [ 288.672473] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 288.691661] RSP: 002b:00007fa94af69c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 288.699374] RAX: ffffffffffffffda RBX: 00007fa94af6a6d4 RCX: 00000000004559f9 [ 288.706640] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000100 [ 288.713897] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 288.721159] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 288.728417] R13: 00000000004bae54 R14: 00000000004cead0 R15: 000000000000005c [ 288.740458] cgroup: cgroup_addrm_files: failed to add swap.current, err=-12 00:15:59 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x10, 0x3, 0x6) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e2800f0001100ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 00:15:59 executing program 6 (fault-call:8 fault-nth:93): r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="295ed277a4200100360070") mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) rmdir(&(0x7f0000000340)='./file0//ile0\x00') r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) fstat(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r2) mkdir(&(0x7f0000000100)='./file0//ile0\x00', 0x0) 00:16:00 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0xfffffffffffffffd, 0x8080) write$binfmt_elf64(r0, &(0x7f0000000680)={{0x7f, 0x45, 0x4c, 0x46, 0x896e, 0x7, 0x3ff, 0x101, 0x0, 0x3, 0x6, 0x8, 0x187, 0x40, 0x32b, 0x7, 0x101, 0x38, 0x1, 0x3, 0xffffffffffff8001, 0x2}, [{0x7, 0x7, 0x0, 0xcf4, 0x9, 0x5, 0x800000, 0x3}], "80093914c6234d0222ca3752a54c01bc73ff4c052644d8d88b719be529a97805bb722ac32155d1ab8b9f7d87751b1ab8f76a238ce125d1e266988a372728610615f1f9f9d8e066d979d50c79febf14a1a9db45da659e23f63f1c84c3b37930dcdec9c28b63a5827f2b0ec01e0d3f5960e184569e425b866bc255adfcd2c2703578690d048146dda0b77d3d89fd58b1349d59653e7020558f60ac783f81d5a578994e92f9", [[], [], [], [], []]}, 0x61c) ioctl$KDDISABIO(r1, 0x4b37) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={&(0x7f0000ffc000/0x3000)=nil, 0x3000}) write$rdma_cm(r2, &(0x7f0000000640)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f00000004c0)}}, 0x10) close(r2) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) bind$unix(r5, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0x6e) listen(r5, 0x0) connect$unix(r4, &(0x7f0000932000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) tkill(r3, 0x1000000000016) 00:15:59 executing program 2: r0 = socket$inet(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x2000000) 00:15:59 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f760070") sendmsg$nl_xfrm(r0, &(0x7f0000001440)={&(0x7f0000000000)={0x10, 0x4170000}, 0x349, &(0x7f0000001400)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x0, 0x0, {{@in=@multicast1=0xe0000001, @in6=@mcast2={0xff, 0x2, [0xf00000000000000], 0x1}, 0x0, 0x0, 0x0, 0x0, 0xa, 0xfffffff0, 0xf0ffffffffffff}}}, 0xb8}, 0x1}, 0x0) 00:15:59 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) write$rdma_cm(r0, &(0x7f0000000640)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f00000004c0)}}, 0x10) close(r0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0x6e) listen(r3, 0x0) connect$unix(r2, &(0x7f0000932000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) tkill(r1, 0x1000000000016) 00:15:59 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[0xfeffffff], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) r2 = socket(0x11, 0x100000803, 0x0) r3 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={"6966623000faffffffffffffff00", 0x12}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'ifb0\x00', 0xa201}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@dev={0xfe, 0x80, [0xf5ffffff00000000]}, 0x0, 0x0, 0x2}, 0x20) 00:15:59 executing program 4: pipe2(&(0x7f0000989000)={0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) mount(&(0x7f0000434ff8)='./file0\x00', &(0x7f0000abf000)='./file0\x00', &(0x7f0000f4c000)='jfs\x00', 0x1023402, 0x0) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000001200), 0x3000, &(0x7f0000001280)) unlink(&(0x7f00003b3000)='./file0\x00') dup2(r0, r1) [ 289.381904] FAULT_INJECTION: forcing a failure. [ 289.381904] name failslab, interval 1, probability 0, space 0, times 0 [ 289.393275] CPU: 0 PID: 18172 Comm: syz-executor6 Not tainted 4.17.0+ #89 [ 289.400297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 289.409654] Call Trace: [ 289.412256] dump_stack+0x1b9/0x294 [ 289.415905] ? dump_stack_print_info.cold.2+0x52/0x52 [ 289.421149] should_fail.cold.4+0xa/0x1a [ 289.425220] ? __kmalloc_track_caller+0x14a/0x760 [ 289.430074] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 289.435184] ? cgroup_mkdir+0x876/0x1150 [ 289.439252] ? kernfs_iop_mkdir+0x159/0x1e0 [ 289.443584] ? vfs_mkdir+0x42e/0x6b0 [ 289.447304] ? do_mkdirat+0x266/0x2f0 [ 289.451114] ? __x64_sys_mkdir+0x5c/0x80 [ 289.455183] ? do_syscall_64+0x1b1/0x800 [ 289.459256] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 289.464661] ? graph_lock+0x170/0x170 [ 289.468475] ? find_held_lock+0x36/0x1c0 [ 289.472561] ? print_usage_bug+0xc0/0xc0 [ 289.476641] ? find_held_lock+0x36/0x1c0 [ 289.480722] ? __lock_is_held+0xb5/0x140 [ 289.484802] ? check_same_owner+0x320/0x320 [ 289.489131] ? rcu_note_context_switch+0x710/0x710 [ 289.494074] ? rcu_read_lock_sched_held+0x108/0x120 [ 289.499106] __should_failslab+0x124/0x180 [ 289.503352] should_failslab+0x9/0x14 [ 289.507157] kmem_cache_alloc+0x2af/0x760 [ 289.511308] ? memcpy+0x45/0x50 [ 289.514599] ? kstrdup+0x59/0x70 [ 289.517978] __kernfs_new_node+0xe7/0x580 [ 289.522139] ? kernfs_dop_revalidate+0x3c0/0x3c0 [ 289.526909] ? pointer+0x930/0x930 [ 289.530463] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 289.536014] ? snprintf+0xa5/0xd0 [ 289.539476] ? vsprintf+0x40/0x40 [ 289.542943] ? cgroup_kn_set_ugid+0x2cb/0x370 [ 289.547455] kernfs_new_node+0x80/0xf0 [ 289.551348] __kernfs_create_file+0x4d/0x330 [ 289.555759] cgroup_addrm_files+0x437/0xb20 [ 289.560087] ? cgroup_css.part.14+0x1f0/0x1f0 [ 289.564583] ? find_held_lock+0x36/0x1c0 [ 289.568661] ? mem_cgroup_css_online+0x23e/0x300 [ 289.573423] ? mod_memcg_state+0x1a0/0x1a0 [ 289.577669] ? __lock_is_held+0xb5/0x140 [ 289.581748] ? kasan_check_write+0x14/0x20 [ 289.585989] ? online_css+0x265/0x330 [ 289.589795] css_populate_dir+0x1a9/0x470 [ 289.593961] cgroup_apply_control_enable+0x449/0xe80 [ 289.599081] ? cgroup_save_control+0x260/0x260 [ 289.603672] ? mutex_unlock+0xd/0x10 [ 289.607388] ? kernfs_setattr+0x39/0x40 [ 289.611368] ? cgroup_kn_set_ugid+0x2cb/0x370 [ 289.615868] ? cgroup_file_name+0x1f0/0x1f0 [ 289.620202] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 289.625744] ? css_populate_dir+0x2a1/0x470 00:16:00 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f760070") sendmsg$nl_xfrm(r0, &(0x7f0000001440)={&(0x7f0000000000)={0x10, 0x4170000}, 0x349, &(0x7f0000001400)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x0, 0x0, {{@in=@multicast1=0xe0000001, @in6=@mcast2={0xff, 0x2, [0x400000000000000], 0x1}, 0x0, 0x0, 0x0, 0x0, 0xa, 0xfffffff0, 0xf0ffffffffffff}}}, 0xb8}, 0x1}, 0x0) 00:16:00 executing program 2: r0 = socket$inet(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0xf000) 00:16:00 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x10, 0x3, 0x6) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e280003001100ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 00:16:00 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x10, 0x3, 0x6) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e28000a001100ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 00:16:00 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f760070") sendmsg$nl_xfrm(r0, &(0x7f0000001440)={&(0x7f0000000000)={0x10, 0x4170000}, 0x349, &(0x7f0000001400)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x0, 0x0, {{@in=@multicast1=0xe0000001, @in6=@mcast2={0xff, 0x2, [0x0, 0xfffffff0], 0x1}, 0x0, 0x0, 0x0, 0x0, 0xa, 0xfffffff0, 0xf0ffffffffffff}}}, 0xb8}, 0x1}, 0x0) 00:16:00 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x10, 0x3, 0x6) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e280008001100ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 00:16:00 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x10, 0x3, 0x6) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e280009001100ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 00:16:00 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f760070") sendmsg$nl_xfrm(r0, &(0x7f0000001440)={&(0x7f0000000000)={0x10, 0x4170000}, 0x349, &(0x7f0000001400)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x0, 0x0, {{@in=@multicast1=0xe0000001, @in6=@mcast2={0xff, 0x2, [0x0, 0xf], 0x1}, 0x0, 0x0, 0x0, 0x0, 0xa, 0xfffffff0, 0xf0ffffffffffff}}}, 0xb8}, 0x1}, 0x0) [ 289.630077] cgroup_mkdir+0x876/0x1150 [ 289.633978] ? cgroup_destroy_locked+0x7d0/0x7d0 [ 289.638742] ? put_itimerspec64+0x310/0x310 [ 289.643069] ? set_nlink+0xaf/0x140 [ 289.646698] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 289.652242] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 289.657962] ? kernfs_get_active+0xb2/0x120 [ 289.662295] ? cgroup_destroy_locked+0x7d0/0x7d0 [ 289.667062] kernfs_iop_mkdir+0x159/0x1e0 [ 289.671221] ? getname_flags+0xd0/0x5a0 [ 289.675209] vfs_mkdir+0x42e/0x6b0 [ 289.678761] do_mkdirat+0x266/0x2f0 [ 289.682397] ? __ia32_sys_mknod+0xb0/0xb0 [ 289.686556] ? do_syscall_64+0x92/0x800 [ 289.690534] __x64_sys_mkdir+0x5c/0x80 [ 289.694427] do_syscall_64+0x1b1/0x800 [ 289.698326] ? finish_task_switch+0x1ca/0x840 [ 289.702826] ? syscall_return_slowpath+0x5c0/0x5c0 [ 289.707764] ? syscall_return_slowpath+0x30f/0x5c0 [ 289.712703] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 289.718077] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 289.722945] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 289.728132] RIP: 0033:0x4559f9 [ 289.731317] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 289.750848] RSP: 002b:00007fa94af69c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 289.758561] RAX: ffffffffffffffda RBX: 00007fa94af6a6d4 RCX: 00000000004559f9 [ 289.765816] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000100 [ 289.773078] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 289.780337] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 289.787596] R13: 00000000004bae54 R14: 00000000004cead0 R15: 000000000000005d [ 289.795217] cgroup: cgroup_addrm_files: failed to add swap.max, err=-12 00:16:01 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x10, 0x3, 0x6) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e280000031100ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 00:16:01 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f760070") sendmsg$nl_xfrm(r0, &(0x7f0000001440)={&(0x7f0000000000)={0x10, 0x4170000}, 0x349, &(0x7f0000001400)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x0, 0x0, {{@in=@multicast1=0xe0000001, @in6=@mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000], 0x1}, 0x0, 0x0, 0x0, 0x0, 0xa, 0xfffffff0, 0xf0ffffffffffff}}}, 0xb8}, 0x1}, 0x0) 00:16:01 executing program 2: r0 = socket$inet(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0xf00) 00:16:01 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[0xfeffffff], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) r2 = socket(0x11, 0x100000803, 0x0) r3 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={"6966623000faffffffffffffff00", 0x12}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'ifb0\x00', 0xa201}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@dev={0xfe, 0x80, [0x10000000000]}, 0x0, 0x0, 0x2}, 0x20) 00:16:01 executing program 4: pipe2(&(0x7f0000989000)={0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) mount(&(0x7f0000434ff8)='./file0\x00', &(0x7f0000abf000)='./file0\x00', &(0x7f0000f4c000)='jfs\x00', 0x1023402, 0x0) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000001200), 0x3000, &(0x7f0000001280)) unlink(&(0x7f00003b3000)='./file0\x00') dup2(r0, r1) 00:16:01 executing program 6 (fault-call:8 fault-nth:94): r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="295ed277a4200100360070") mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) rmdir(&(0x7f0000000340)='./file0//ile0\x00') r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) fstat(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r2) mkdir(&(0x7f0000000100)='./file0//ile0\x00', 0x0) 00:16:01 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) write$rdma_cm(r0, &(0x7f0000000640)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f00000004c0)}}, 0x10) close(r0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0x6e) listen(r3, 0x0) connect$unix(r2, &(0x7f0000932000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) tkill(r1, 0x1000000000016) 00:16:01 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x8400, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0x1) ioctl$EVIOCGUNIQ(r3, 0x80404508, &(0x7f0000000080)=""/252) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) write$rdma_cm(r1, &(0x7f0000000640)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f00000004c0)}}, 0x10) close(r1) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) bind$unix(r5, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0x6e) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000180)={0x0, 0x3}, &(0x7f00000001c0)=0x8) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3, 0x12, r0, 0x0) setsockopt$inet_sctp_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000200)={r6, 0x40, 0x8, 0x8, 0xe82d, 0xfffffffffffffff9}, 0x14) listen(r5, 0x0) connect$unix(r4, &(0x7f0000932000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) tkill(r2, 0x40000007) [ 290.822688] FAULT_INJECTION: forcing a failure. [ 290.822688] name failslab, interval 1, probability 0, space 0, times 0 [ 290.834022] CPU: 0 PID: 18247 Comm: syz-executor6 Not tainted 4.17.0+ #89 [ 290.840950] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 290.850400] Call Trace: [ 290.853098] dump_stack+0x1b9/0x294 [ 290.856738] ? dump_stack_print_info.cold.2+0x52/0x52 [ 290.861937] ? wait_for_completion+0x870/0x870 [ 290.866527] ? mutex_unlock+0xd/0x10 00:16:01 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x10, 0x3, 0x6) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e280000281100ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 00:16:01 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f760070") sendmsg$nl_xfrm(r0, &(0x7f0000001440)={&(0x7f0000000000)={0x10, 0x4170000}, 0x349, &(0x7f0000001400)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x0, 0x0, {{@in=@multicast1=0xe0000001, @in6=@mcast2={0xff, 0x2, [0x0, 0xf0ffffffffffff], 0x1}, 0x0, 0x0, 0x0, 0x0, 0xa, 0xfffffff0, 0xf0ffffffffffff}}}, 0xb8}, 0x1}, 0x0) 00:16:01 executing program 2: r0 = socket$inet(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0xb) [ 290.870257] should_fail.cold.4+0xa/0x1a [ 290.874329] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 290.879427] ? graph_lock+0x170/0x170 [ 290.883227] ? find_held_lock+0x36/0x1c0 [ 290.887300] ? __lock_is_held+0xb5/0x140 [ 290.891377] ? check_same_owner+0x320/0x320 [ 290.895704] ? rcu_note_context_switch+0x710/0x710 [ 290.900637] ? graph_lock+0x170/0x170 [ 290.904453] __should_failslab+0x124/0x180 [ 290.908696] should_failslab+0x9/0x14 [ 290.912504] kmem_cache_alloc_trace+0x2cb/0x780 [ 290.917202] ? mod_memcg_state+0x1a0/0x1a0 00:16:01 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f760070") sendmsg$nl_xfrm(r0, &(0x7f0000001440)={&(0x7f0000000000)={0x10, 0x4170000}, 0x349, &(0x7f0000001400)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x0, 0x0, {{@in=@multicast1=0xe0000001, @in6=@mcast2={0xff, 0x2, [0x0, 0xfcffffff00000000], 0x1}, 0x0, 0x0, 0x0, 0x0, 0xa, 0xfffffff0, 0xf0ffffffffffff}}}, 0xb8}, 0x1}, 0x0) [ 290.921440] ? graph_lock+0x170/0x170 [ 290.925251] pids_css_alloc+0xb2/0x250 [ 290.929147] ? pids_cancel_attach+0x3a0/0x3a0 [ 290.933666] ? __lock_is_held+0xb5/0x140 [ 290.937771] cgroup_apply_control_enable+0x544/0xe80 [ 290.942912] ? cgroup_save_control+0x260/0x260 [ 290.947505] ? mutex_unlock+0xd/0x10 [ 290.951227] ? kernfs_setattr+0x39/0x40 [ 290.955211] ? cgroup_kn_set_ugid+0x2cb/0x370 [ 290.959714] ? cgroup_file_name+0x1f0/0x1f0 [ 290.964051] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 00:16:01 executing program 2: r0 = socket$inet(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x6) [ 290.969600] ? css_populate_dir+0x2a1/0x470 [ 290.973932] cgroup_mkdir+0x876/0x1150 [ 290.977957] ? cgroup_destroy_locked+0x7d0/0x7d0 [ 290.982725] ? put_itimerspec64+0x310/0x310 [ 290.987058] ? set_nlink+0xaf/0x140 [ 290.990692] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 290.996237] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 291.001773] ? kernfs_get_active+0xb2/0x120 [ 291.006104] ? cgroup_destroy_locked+0x7d0/0x7d0 [ 291.010869] kernfs_iop_mkdir+0x159/0x1e0 [ 291.015019] ? getname_flags+0xd0/0x5a0 [ 291.018999] vfs_mkdir+0x42e/0x6b0 00:16:01 executing program 2: r0 = socket$inet(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x1000000000000000) 00:16:01 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f760070") sendmsg$nl_xfrm(r0, &(0x7f0000001440)={&(0x7f0000000000)={0x10, 0x4170000}, 0x349, &(0x7f0000001400)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x0, 0x0, {{@in=@multicast1=0xe0000001, @in6=@mcast2={0xff, 0x2, [0x0, 0x100000000000000], 0x1}, 0x0, 0x0, 0x0, 0x0, 0xa, 0xfffffff0, 0xf0ffffffffffff}}}, 0xb8}, 0x1}, 0x0) [ 291.022548] do_mkdirat+0x266/0x2f0 [ 291.026184] ? __ia32_sys_mknod+0xb0/0xb0 [ 291.030338] ? syscall_slow_exit_work+0x4f0/0x4f0 [ 291.035187] ? do_syscall_64+0x92/0x800 [ 291.039165] __x64_sys_mkdir+0x5c/0x80 [ 291.043058] do_syscall_64+0x1b1/0x800 [ 291.046946] ? finish_task_switch+0x1ca/0x840 [ 291.051445] ? syscall_return_slowpath+0x5c0/0x5c0 [ 291.056379] ? syscall_return_slowpath+0x30f/0x5c0 [ 291.061404] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 291.066774] ? trace_hardirqs_off_thunk+0x1a/0x1c 00:16:01 executing program 2: r0 = socket$inet(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0xb000000) [ 291.071636] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 291.076825] RIP: 0033:0x4559f9 [ 291.080023] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 291.099419] RSP: 002b:00007fa94af69c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 291.107140] RAX: ffffffffffffffda RBX: 00007fa94af6a6d4 RCX: 00000000004559f9 [ 291.114419] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000100 00:16:01 executing program 2: r0 = socket$inet(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x5000000) [ 291.121698] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 291.128978] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 291.136259] R13: 00000000004bae54 R14: 00000000004cead0 R15: 000000000000005e 00:16:02 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f760070") sendmsg$nl_xfrm(r0, &(0x7f0000001440)={&(0x7f0000000000)={0x10, 0x4170000}, 0x349, &(0x7f0000001400)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x0, 0x0, {{@in=@multicast1=0xe0000001, @in6=@mcast2={0xff, 0x2, [0x0, 0xfffff000], 0x1}, 0x0, 0x0, 0x0, 0x0, 0xa, 0xfffffff0, 0xf0ffffffffffff}}}, 0xb8}, 0x1}, 0x0) 00:16:02 executing program 6 (fault-call:8 fault-nth:95): r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="295ed277a4200100360070") mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) rmdir(&(0x7f0000000340)='./file0//ile0\x00') r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) fstat(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r2) mkdir(&(0x7f0000000100)='./file0//ile0\x00', 0x0) 00:16:02 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) write$rdma_cm(r1, &(0x7f0000000640)=ANY=[@ANYBLOB="0c000000080000fa", @ANYPTR=&(0x7f0000000040)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000c10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000006c0c1a6a69ff0f0390faf2ba93344ae5eac8a4d9478458f7c283aff98fab52a128e5baca005d52395da69cec12e3dc11d65bebd1e20ca75fc66631a91d371039473b9023f33f6f89d6dc1e26bd22bf5a112a6d80175311b44abddd101e6ad119c39a63e6b18ce55f42e88174f3752a7bc59603653038db240d8ca48fed8935c1a742e877865fe8e2111fe4eb"]], 0x10) close(r1) r3 = socket$unix(0x1, 0x1, 0x0) tkill(r2, 0x9) r4 = socket$unix(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0x6e) lstat(&(0x7f00000002c0)="e91f7189591e9233614b00", &(0x7f0000000300)) syz_open_dev$adsp(&(0x7f0000000240)='/dev/adsp#\x00', 0x1ff, 0xc002) listen(r4, 0x0) connect$unix(r3, &(0x7f0000932000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) tkill(r2, 0x1000000000016) 00:16:02 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x10, 0x3, 0x6) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e280000091100ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 00:16:02 executing program 2: r0 = socket$inet(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x400300) 00:16:02 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) write$rdma_cm(r0, &(0x7f0000000640)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f00000004c0)}}, 0x10) close(r0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0x6e) listen(r3, 0x0) connect$unix(r2, &(0x7f0000932000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) tkill(r1, 0x1000000000016) 00:16:02 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[0xfeffffff], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) r2 = socket(0x11, 0x100000803, 0x0) r3 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={"6966623000faffffffffffffff00", 0x12}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'ifb0\x00', 0xa201}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@dev={0xfe, 0x80, [0x100000000000000]}, 0x0, 0x0, 0x2}, 0x20) 00:16:02 executing program 4: pipe2(&(0x7f0000989000)={0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) mount(&(0x7f0000434ff8)='./file0\x00', &(0x7f0000abf000)='./file0\x00', &(0x7f0000f4c000)='jfs\x00', 0x1023402, 0x0) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000001200), 0x3000, &(0x7f0000001280)) unlink(&(0x7f00003b3000)='./file0\x00') dup2(r0, r1) 00:16:02 executing program 2: r0 = socket$inet(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x5) 00:16:02 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x10, 0x3, 0x6) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e280010001100ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 00:16:02 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f760070") sendmsg$nl_xfrm(r0, &(0x7f0000001440)={&(0x7f0000000000)={0x10, 0x4170000}, 0x349, &(0x7f0000001400)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x0, 0x0, {{@in=@multicast1=0xe0000001, @in6=@mcast2={0xff, 0x2, [0x0, 0x3], 0x1}, 0x0, 0x0, 0x0, 0x0, 0xa, 0xfffffff0, 0xf0ffffffffffff}}}, 0xb8}, 0x1}, 0x0) [ 292.204994] FAULT_INJECTION: forcing a failure. [ 292.204994] name failslab, interval 1, probability 0, space 0, times 0 [ 292.216388] CPU: 0 PID: 18339 Comm: syz-executor6 Not tainted 4.17.0+ #89 [ 292.223320] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 292.232680] Call Trace: [ 292.235286] dump_stack+0x1b9/0x294 [ 292.238926] ? dump_stack_print_info.cold.2+0x52/0x52 [ 292.244134] should_fail.cold.4+0xa/0x1a [ 292.248204] ? __kmalloc_track_caller+0x14a/0x760 00:16:02 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x10, 0x3, 0x6) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e280002001100ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 00:16:02 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f760070") sendmsg$nl_xfrm(r0, &(0x7f0000001440)={&(0x7f0000000000)={0x10, 0x4170000}, 0x349, &(0x7f0000001400)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x0, 0x0, {{@in=@multicast1=0xe0000001, @in6=@mcast2={0xff, 0x2, [0x0, 0xa0020000], 0x1}, 0x0, 0x0, 0x0, 0x0, 0xa, 0xfffffff0, 0xf0ffffffffffff}}}, 0xb8}, 0x1}, 0x0) [ 292.253057] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 292.258171] ? cgroup_mkdir+0x876/0x1150 [ 292.262242] ? kernfs_iop_mkdir+0x159/0x1e0 [ 292.266570] ? vfs_mkdir+0x42e/0x6b0 [ 292.270292] ? do_mkdirat+0x266/0x2f0 [ 292.274096] ? __x64_sys_mkdir+0x5c/0x80 [ 292.278166] ? do_syscall_64+0x1b1/0x800 [ 292.282233] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 292.287602] ? graph_lock+0x170/0x170 [ 292.291401] ? find_held_lock+0x36/0x1c0 [ 292.295469] ? print_usage_bug+0xc0/0xc0 [ 292.299542] ? find_held_lock+0x36/0x1c0 00:16:02 executing program 2: r0 = socket$inet(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0xa) [ 292.303615] ? __lock_is_held+0xb5/0x140 [ 292.307703] ? check_same_owner+0x320/0x320 [ 292.312039] ? rcu_note_context_switch+0x710/0x710 [ 292.316983] ? rcu_read_lock_sched_held+0x108/0x120 [ 292.322011] __should_failslab+0x124/0x180 [ 292.326254] should_failslab+0x9/0x14 [ 292.330060] kmem_cache_alloc+0x2af/0x760 [ 292.334211] ? memcpy+0x45/0x50 [ 292.337498] ? kstrdup+0x59/0x70 [ 292.340882] __kernfs_new_node+0xe7/0x580 [ 292.345040] ? kernfs_dop_revalidate+0x3c0/0x3c0 [ 292.349802] ? pointer+0x930/0x930 00:16:03 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x10, 0x3, 0x6) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e28000f001100ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 00:16:03 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f760070") sendmsg$nl_xfrm(r0, &(0x7f0000001440)={&(0x7f0000000000)={0x10, 0x4170000}, 0x349, &(0x7f0000001400)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x0, 0x0, {{@in=@multicast1=0xe0000001, @in6=@mcast2={0xff, 0x2, [0x0, 0xffffff9e], 0x1}, 0x0, 0x0, 0x0, 0x0, 0xa, 0xfffffff0, 0xf0ffffffffffff}}}, 0xb8}, 0x1}, 0x0) [ 292.353357] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 292.358908] ? snprintf+0xa5/0xd0 [ 292.362370] ? vsprintf+0x40/0x40 [ 292.365830] ? cgroup_kn_set_ugid+0x2cb/0x370 [ 292.370338] kernfs_new_node+0x80/0xf0 [ 292.374908] __kernfs_create_file+0x4d/0x330 [ 292.379325] cgroup_addrm_files+0x437/0xb20 [ 292.383661] ? cgroup_css.part.14+0x1f0/0x1f0 [ 292.388166] ? find_held_lock+0x36/0x1c0 [ 292.392238] ? mem_cgroup_css_online+0x23e/0x300 [ 292.396997] ? mod_memcg_state+0x1a0/0x1a0 [ 292.401244] ? __lock_is_held+0xb5/0x140 [ 292.405322] ? kasan_check_write+0x14/0x20 [ 292.409560] ? online_css+0x265/0x330 [ 292.413368] css_populate_dir+0x1a9/0x470 [ 292.417530] cgroup_apply_control_enable+0x449/0xe80 [ 292.422646] ? cgroup_save_control+0x260/0x260 [ 292.427260] ? mutex_unlock+0xd/0x10 [ 292.430977] ? kernfs_setattr+0x39/0x40 [ 292.434955] ? cgroup_kn_set_ugid+0x2cb/0x370 [ 292.439460] ? cgroup_file_name+0x1f0/0x1f0 [ 292.443795] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 292.449334] ? css_populate_dir+0x2a1/0x470 [ 292.453670] cgroup_mkdir+0x876/0x1150 [ 292.457575] ? cgroup_destroy_locked+0x7d0/0x7d0 [ 292.462337] ? put_itimerspec64+0x310/0x310 [ 292.466670] ? set_nlink+0xaf/0x140 [ 292.470300] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 292.475843] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 292.481383] ? kernfs_get_active+0xb2/0x120 [ 292.485710] ? cgroup_destroy_locked+0x7d0/0x7d0 [ 292.490467] kernfs_iop_mkdir+0x159/0x1e0 [ 292.494616] ? getname_flags+0xd0/0x5a0 [ 292.498596] vfs_mkdir+0x42e/0x6b0 [ 292.502143] do_mkdirat+0x266/0x2f0 [ 292.505780] ? __ia32_sys_mknod+0xb0/0xb0 [ 292.509935] ? do_syscall_64+0x92/0x800 [ 292.513915] __x64_sys_mkdir+0x5c/0x80 [ 292.517810] do_syscall_64+0x1b1/0x800 [ 292.521705] ? syscall_slow_exit_work+0x4f0/0x4f0 [ 292.526556] ? syscall_return_slowpath+0x5c0/0x5c0 [ 292.531488] ? syscall_return_slowpath+0x30f/0x5c0 [ 292.536431] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 292.541804] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 292.546664] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 292.551850] RIP: 0033:0x4559f9 [ 292.555041] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 292.574412] RSP: 002b:00007fa94af69c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 292.582109] RAX: ffffffffffffffda RBX: 00007fa94af6a6d4 RCX: 00000000004559f9 [ 292.589369] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000100 [ 292.596630] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 292.603884] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 292.611133] R13: 00000000004bae54 R14: 00000000004cead0 R15: 000000000000005f [ 292.618737] cgroup: cgroup_addrm_files: failed to add swap.max, err=-12 00:16:03 executing program 2: r0 = socket$inet(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x9effffff00000000) 00:16:03 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x10, 0x3, 0x6) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e28000b001100ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 00:16:03 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f760070") sendmsg$nl_xfrm(r0, &(0x7f0000001440)={&(0x7f0000000000)={0x10, 0x4170000}, 0x349, &(0x7f0000001400)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x0, 0x0, {{@in=@multicast1=0xe0000001, @in6=@mcast2={0xff, 0x2, [0x0, 0x400000000000000], 0x1}, 0x0, 0x0, 0x0, 0x0, 0xa, 0xfffffff0, 0xf0ffffffffffff}}}, 0xb8}, 0x1}, 0x0) 00:16:03 executing program 6 (fault-call:8 fault-nth:96): r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="295ed277a4200100360070") mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) rmdir(&(0x7f0000000340)='./file0//ile0\x00') r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) fstat(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r2) mkdir(&(0x7f0000000100)='./file0//ile0\x00', 0x0) 00:16:03 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[0xfeffffff], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) r2 = socket(0x11, 0x100000803, 0x0) r3 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={"6966623000faffffffffffffff00", 0x12}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'ifb0\x00', 0xa201}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@dev={0xfe, 0x80, [0x200000000000000]}, 0x0, 0x0, 0x2}, 0x20) 00:16:03 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) write$rdma_cm(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="0c000000080000fad5ba09b071f7dc4bbe0000000000c8000099141a3d20d4b43b9bb94f62a92d5b503dd1db45a6c06685ae41fb260836a0579bd17e8509f6a71b65d7846d578288304f013a7899d1aa3d60a81c93c74373239772fe0d704d6d275873931916d0c308597130a9406a404036c2b3003630680c218b4cea1558a1c9719989e4e9c3bee2ddbb917577b85be5b354ece8c958b1c39e57715153a7625dbdd05561cef4d3677365e17f433e4ac4e3c571bca5d5094f649da8ee29601120d7235432b6c0b0808be836619998fcc78a9d1cf41e2632bbcfedad03832d1ea3b81b0c44ec5174915d52f965eb06413c3a9aa1c7", @ANYPTR=&(0x7f00000004c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00']], 0x10) close(r1) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0x6e) listen(r4, 0x0) connect$unix(r3, &(0x7f0000000180)=@file={0x1, "e91f7189591e9233614b00"}, 0x6e) tkill(r2, 0x1000000000016) 00:16:03 executing program 4: pipe2(&(0x7f0000989000)={0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) mount(&(0x7f0000434ff8)='./file0\x00', &(0x7f0000abf000)='./file0\x00', &(0x7f0000f4c000)='jfs\x00', 0x1023402, 0x0) syz_mount_image$vfat(&(0x7f0000000040)="76666174ff", &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000001200), 0x3000, &(0x7f0000001280)) unlink(&(0x7f00003b3000)='./file0\x00') dup2(r0, r1) 00:16:03 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) write$rdma_cm(r0, &(0x7f0000000640)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f00000004c0)}}, 0xfdef) close(r0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0x6e) listen(r3, 0x0) connect$unix(r2, &(0x7f0000932000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) tkill(r1, 0x1000000000016) [ 293.268179] FAULT_INJECTION: forcing a failure. [ 293.268179] name failslab, interval 1, probability 0, space 0, times 0 [ 293.279464] CPU: 1 PID: 18385 Comm: syz-executor6 Not tainted 4.17.0+ #89 [ 293.286394] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 293.295751] Call Trace: [ 293.298355] dump_stack+0x1b9/0x294 [ 293.302007] ? dump_stack_print_info.cold.2+0x52/0x52 [ 293.307214] ? wait_for_completion+0x870/0x870 [ 293.311807] ? mutex_unlock+0xd/0x10 [ 293.315535] should_fail.cold.4+0xa/0x1a [ 293.319613] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 293.324738] ? graph_lock+0x170/0x170 [ 293.328573] ? find_held_lock+0x36/0x1c0 [ 293.332652] ? __lock_is_held+0xb5/0x140 [ 293.336736] ? check_same_owner+0x320/0x320 [ 293.341071] ? rcu_note_context_switch+0x710/0x710 [ 293.346104] ? graph_lock+0x170/0x170 [ 293.349915] __should_failslab+0x124/0x180 [ 293.354160] should_failslab+0x9/0x14 [ 293.357971] kmem_cache_alloc_trace+0x2cb/0x780 [ 293.362647] ? mod_memcg_state+0x1a0/0x1a0 [ 293.366890] ? graph_lock+0x170/0x170 [ 293.370701] pids_css_alloc+0xb2/0x250 [ 293.374595] ? pids_cancel_attach+0x3a0/0x3a0 [ 293.379112] ? __lock_is_held+0xb5/0x140 [ 293.383195] cgroup_apply_control_enable+0x544/0xe80 [ 293.388319] ? cgroup_save_control+0x260/0x260 [ 293.392915] ? mutex_unlock+0xd/0x10 [ 293.396636] ? kernfs_setattr+0x39/0x40 [ 293.400619] ? cgroup_kn_set_ugid+0x2cb/0x370 [ 293.405123] ? cgroup_file_name+0x1f0/0x1f0 [ 293.409462] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 293.415006] ? css_populate_dir+0x2a1/0x470 [ 293.419342] cgroup_mkdir+0x876/0x1150 [ 293.423245] ? cgroup_destroy_locked+0x7d0/0x7d0 [ 293.428010] ? put_itimerspec64+0x310/0x310 [ 293.432345] ? set_nlink+0xaf/0x140 [ 293.435986] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 293.441532] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 293.447081] ? kernfs_get_active+0xb2/0x120 [ 293.451406] ? cgroup_destroy_locked+0x7d0/0x7d0 [ 293.456169] kernfs_iop_mkdir+0x159/0x1e0 [ 293.460321] ? getname_flags+0xd0/0x5a0 [ 293.464302] vfs_mkdir+0x42e/0x6b0 [ 293.467848] do_mkdirat+0x266/0x2f0 [ 293.471575] ? __ia32_sys_mknod+0xb0/0xb0 [ 293.475740] ? do_syscall_64+0x92/0x800 [ 293.479718] __x64_sys_mkdir+0x5c/0x80 [ 293.483617] do_syscall_64+0x1b1/0x800 [ 293.487507] ? finish_task_switch+0x1ca/0x840 [ 293.492005] ? syscall_return_slowpath+0x5c0/0x5c0 [ 293.496937] ? syscall_return_slowpath+0x30f/0x5c0 [ 293.501877] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 293.507252] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 293.512108] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 293.517294] RIP: 0033:0x4559f9 [ 293.520476] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 293.539822] RSP: 002b:00007fa94af69c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 293.547536] RAX: ffffffffffffffda RBX: 00007fa94af6a6d4 RCX: 00000000004559f9 [ 293.554809] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000100 [ 293.562091] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 00:16:04 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f760070") sendmsg$nl_xfrm(r0, &(0x7f0000001440)={&(0x7f0000000000)={0x10, 0x4170000}, 0x349, &(0x7f0000001400)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x0, 0x0, {{@in=@multicast1=0xe0000001, @in6=@mcast2={0xff, 0x2, [0x0, 0x2000000], 0x1}, 0x0, 0x0, 0x0, 0x0, 0xa, 0xfffffff0, 0xf0ffffffffffff}}}, 0xb8}, 0x1}, 0x0) 00:16:04 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x10, 0x3, 0x6) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e28008a011100ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 00:16:04 executing program 2: r0 = socket$inet(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x100000000000000) 00:16:04 executing program 2: r0 = socket$inet(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x300000000000000) 00:16:04 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f760070") sendmsg$nl_xfrm(r0, &(0x7f0000001440)={&(0x7f0000000000)={0x10, 0x4170000}, 0x349, &(0x7f0000001400)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x0, 0x0, {{@in=@multicast1=0xe0000001, @in6=@mcast2={0xff, 0x2, [0x0, 0x3000000], 0x1}, 0x0, 0x0, 0x0, 0x0, 0xa, 0xfffffff0, 0xf0ffffffffffff}}}, 0xb8}, 0x1}, 0x0) 00:16:04 executing program 2: r0 = socket$inet(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x158) 00:16:04 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f760070") sendmsg$nl_xfrm(r0, &(0x7f0000001440)={&(0x7f0000000000)={0x10, 0x4170000}, 0x349, &(0x7f0000001400)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x0, 0x0, {{@in=@multicast1=0xe0000001, @in6=@mcast2={0xff, 0x2, [0x0, 0xa002], 0x1}, 0x0, 0x0, 0x0, 0x0, 0xa, 0xfffffff0, 0xf0ffffffffffff}}}, 0xb8}, 0x1}, 0x0) [ 293.569365] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 293.576728] R13: 00000000004bae54 R14: 00000000004cead0 R15: 0000000000000060 00:16:04 executing program 2: r0 = socket$inet(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x80ffffff00000000) 00:16:04 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x10, 0x3, 0x6) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e280000f01100ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 00:16:04 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f760070") sendmsg$nl_xfrm(r0, &(0x7f0000001440)={&(0x7f0000000000)={0x10, 0x4170000}, 0x349, &(0x7f0000001400)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x0, 0x0, {{@in=@multicast1=0xe0000001, @in6=@mcast2={0xff, 0x2, [0x0, 0x300], 0x1}, 0x0, 0x0, 0x0, 0x0, 0xa, 0xfffffff0, 0xf0ffffffffffff}}}, 0xb8}, 0x1}, 0x0) 00:16:04 executing program 6 (fault-call:8 fault-nth:97): r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="295ed277a4200100360070") mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) rmdir(&(0x7f0000000340)='./file0//ile0\x00') r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) fstat(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r2) mkdir(&(0x7f0000000100)='./file0//ile0\x00', 0x0) 00:16:04 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[0xfeffffff], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) r2 = socket(0x11, 0x100000803, 0x0) r3 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={"6966623000faffffffffffffff00", 0x12}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'ifb0\x00', 0xa201}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@dev={0xfe, 0x80, [0xf5ffffff]}, 0x0, 0x0, 0x2}, 0x20) 00:16:04 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r2 = gettid() r3 = dup3(r1, r1, 0x80000) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r3, 0x800442d2, &(0x7f0000000200)={0x7, &(0x7f00000003c0)=[{0x0, 0x0, 0x0, @random}, {0x0, 0x0, 0x0, @random}, {0x0, 0x0, 0x0, @local}, {}, {0x0, 0x0, 0x0, @random}, {0x0, 0x0, 0x0, @broadcast}, {0x0, 0x0, 0x0, @random}]}) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) write$rdma_cm(r1, &(0x7f0000000640)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f00000004c0)}}, 0x10) close(r1) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) bind$unix(r5, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0x6e) listen(r5, 0x0) connect$unix(r4, &(0x7f0000932000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) tkill(r2, 0x1000000000016) 00:16:04 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) write$rdma_cm(r0, &(0x7f0000000640)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f00000004c0)}}, 0xc0) close(r0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0x6e) listen(r3, 0x0) connect$unix(r2, &(0x7f0000932000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) tkill(r1, 0x1000000000016) 00:16:04 executing program 4: pipe2(&(0x7f0000989000)={0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) mount(&(0x7f0000434ff8)='./file0\x00', &(0x7f0000abf000)='./file0\x00', &(0x7f0000f4c000)='jfs\x00', 0x1023402, 0x0) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000001200), 0x3000, &(0x7f0000001280)) unlink(&(0x7f00003b3000)='./file0\x00') dup2(r0, r1) [ 294.289467] FAULT_INJECTION: forcing a failure. [ 294.289467] name failslab, interval 1, probability 0, space 0, times 0 [ 294.300827] CPU: 0 PID: 18465 Comm: syz-executor6 Not tainted 4.17.0+ #89 [ 294.307762] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 294.317121] Call Trace: [ 294.319729] dump_stack+0x1b9/0x294 [ 294.323376] ? dump_stack_print_info.cold.2+0x52/0x52 [ 294.328579] ? rcu_note_context_switch+0x710/0x710 [ 294.333530] should_fail.cold.4+0xa/0x1a [ 294.337608] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 294.342719] ? graph_lock+0x170/0x170 [ 294.346537] ? graph_lock+0x170/0x170 [ 294.350347] ? mutex_trylock+0x2a0/0x2a0 [ 294.354422] ? find_held_lock+0x36/0x1c0 [ 294.358502] ? __lock_is_held+0xb5/0x140 [ 294.362583] ? check_same_owner+0x320/0x320 [ 294.366912] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 294.371934] ? rcu_note_context_switch+0x710/0x710 [ 294.377639] __should_failslab+0x124/0x180 [ 294.381884] should_failslab+0x9/0x14 00:16:05 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x10, 0x3, 0x6) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e2800000f1100ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 00:16:05 executing program 2: r0 = socket$inet(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x900000000000000) 00:16:05 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f760070") sendmsg$nl_xfrm(r0, &(0x7f0000001440)={&(0x7f0000000000)={0x10, 0x4170000}, 0x349, &(0x7f0000001400)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x0, 0x0, {{@in=@multicast1=0xe0000001, @in6=@mcast2={0xff, 0x2, [0x0, 0x2a0], 0x1}, 0x0, 0x0, 0x0, 0x0, 0xa, 0xfffffff0, 0xf0ffffffffffff}}}, 0xb8}, 0x1}, 0x0) [ 294.385688] __kmalloc_track_caller+0x2c4/0x760 [ 294.390364] ? string+0x21d/0x2c0 [ 294.393832] ? kstrdup_const+0x66/0x80 [ 294.397728] kstrdup+0x39/0x70 [ 294.400926] kstrdup_const+0x66/0x80 [ 294.404650] __kernfs_new_node+0xa8/0x580 [ 294.408810] ? kernfs_dop_revalidate+0x3c0/0x3c0 [ 294.413571] ? pointer+0x930/0x930 [ 294.417119] ? graph_lock+0x170/0x170 [ 294.420930] ? snprintf+0xa5/0xd0 [ 294.424388] ? vsprintf+0x40/0x40 [ 294.427851] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 294.433402] kernfs_new_node+0x80/0xf0 00:16:05 executing program 2: r0 = socket$inet(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x600) 00:16:05 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x10, 0x3, 0x6) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e2800000b1100ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) [ 294.437307] __kernfs_create_file+0x4d/0x330 [ 294.441728] cgroup_addrm_files+0x437/0xb20 [ 294.446064] ? cgroup_css.part.14+0x1f0/0x1f0 [ 294.450665] ? find_held_lock+0x36/0x1c0 [ 294.454747] ? __lock_is_held+0xb5/0x140 [ 294.458826] ? kasan_check_write+0x14/0x20 [ 294.463064] ? online_css+0x265/0x330 [ 294.466873] css_populate_dir+0x1a9/0x470 [ 294.471029] cgroup_apply_control_enable+0x449/0xe80 [ 294.476140] ? cgroup_save_control+0x260/0x260 [ 294.480732] ? mutex_unlock+0xd/0x10 [ 294.484449] ? kernfs_setattr+0x39/0x40 [ 294.488427] ? cgroup_kn_set_ugid+0x2cb/0x370 [ 294.492925] ? cgroup_file_name+0x1f0/0x1f0 [ 294.497257] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 294.502794] ? css_populate_dir+0x2a1/0x470 [ 294.507125] cgroup_mkdir+0x876/0x1150 [ 294.511024] ? cgroup_destroy_locked+0x7d0/0x7d0 [ 294.515782] ? put_itimerspec64+0x310/0x310 [ 294.520113] ? set_nlink+0xaf/0x140 [ 294.523746] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 294.529290] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 294.534829] ? kernfs_get_active+0xb2/0x120 00:16:05 executing program 2: r0 = socket$inet(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x3000000) 00:16:05 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x10, 0x3, 0x6) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e2800003f1100ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) [ 294.539152] ? cgroup_destroy_locked+0x7d0/0x7d0 [ 294.543915] kernfs_iop_mkdir+0x159/0x1e0 [ 294.548069] ? getname_flags+0xd0/0x5a0 [ 294.552051] vfs_mkdir+0x42e/0x6b0 [ 294.555600] do_mkdirat+0x266/0x2f0 [ 294.559230] ? __ia32_sys_mknod+0xb0/0xb0 [ 294.563386] ? do_syscall_64+0x92/0x800 [ 294.567368] __x64_sys_mkdir+0x5c/0x80 [ 294.571259] do_syscall_64+0x1b1/0x800 [ 294.575147] ? finish_task_switch+0x1ca/0x840 [ 294.579648] ? syscall_return_slowpath+0x5c0/0x5c0 [ 294.584587] ? syscall_return_slowpath+0x30f/0x5c0 [ 294.589530] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 294.594905] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 294.599761] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 294.604953] RIP: 0033:0x4559f9 [ 294.608135] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 294.627505] RSP: 002b:00007fa94af69c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 00:16:05 executing program 2: r0 = socket$inet(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0xb00) [ 294.635221] RAX: ffffffffffffffda RBX: 00007fa94af6a6d4 RCX: 00000000004559f9 [ 294.642493] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000100 [ 294.649795] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 294.657067] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 294.664339] R13: 00000000004bae54 R14: 00000000004cead0 R15: 0000000000000061 [ 294.671798] cgroup: cgroup_addrm_files: failed to add max, err=-12 00:16:06 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x10, 0x3, 0x6) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e280006001100ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 00:16:06 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f760070") sendmsg$nl_xfrm(r0, &(0x7f0000001440)={&(0x7f0000000000)={0x10, 0x4170000}, 0x349, &(0x7f0000001400)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x0, 0x0, {{@in=@multicast1=0xe0000001, @in6=@mcast2={0xff, 0x2, [0x0, 0x4000000], 0x1}, 0x0, 0x0, 0x0, 0x0, 0xa, 0xfffffff0, 0xf0ffffffffffff}}}, 0xb8}, 0x1}, 0x0) 00:16:06 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[0xfeffffff], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) r2 = socket(0x11, 0x100000803, 0x0) r3 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={"6966623000faffffffffffffff00", 0x12}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'ifb0\x00', 0xa201}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@dev={0xfe, 0x80, [0x0, 0x2]}, 0x0, 0x0, 0x2}, 0x20) 00:16:06 executing program 6 (fault-call:8 fault-nth:98): r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="295ed277a4200100360070") mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) rmdir(&(0x7f0000000340)='./file0//ile0\x00') r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) fstat(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r2) mkdir(&(0x7f0000000100)='./file0//ile0\x00', 0x0) 00:16:06 executing program 2: r0 = socket$inet(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0xf0ffffff00000000) 00:16:06 executing program 4: pipe2(&(0x7f0000989000)={0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) mount(&(0x7f0000434ff8)='./file0\x00', &(0x7f0000abf000)='./file0\x00', &(0x7f0000f4c000)='jfs\x00', 0x1023402, 0x0) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000001200), 0x3000, &(0x7f0000001280)) unlink(&(0x7f00003b3000)='./file0\x00') dup2(r0, r1) 00:16:06 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) write$rdma_cm(r0, &(0x7f0000000640)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f00000004c0)}}, 0xfffffdef) close(r0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0x6e) listen(r3, 0x0) connect$unix(r2, &(0x7f0000932000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) tkill(r1, 0x1000000000016) 00:16:06 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffff9c, 0x84, 0x9, &(0x7f0000000140)={0x0, @in6={{0xa, 0x4e22, 0x8, @mcast1={0xff, 0x1, [], 0x1}, 0x7}}, 0x20, 0x80000001, 0x3, 0x5, 0x41}, &(0x7f0000000200)=0x98) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000240)={r2, 0xe59}, &(0x7f0000000480)=0x8) getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000040)={0x0, 0x8001}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f00000000c0)={r3, 0x800}, 0x8) r4 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) write$rdma_cm(r1, &(0x7f0000000640)=ANY=[@ANYBLOB="0c000000080000fa", @ANYPTR=&(0x7f00000002c0)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a64fd094b2135fece6241c21b32403fe719e3070b5ed7b9a12607d04bf5ade1da64f134131793dd0992ded63eaea89073c4067ddeddaed13edb0443d939bec7c61e91055544006c86d4d3e885d27d742a8109a66c7375c5d5352b10b714906160bffb2edf3a73003bf79ef3"]], 0x10) close(r0) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) bind$unix(r6, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0x6e) prctl$setendian(0x14, 0x0) listen(r6, 0x0) connect$unix(r5, &(0x7f0000932000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) tkill(r4, 0x1000000000016) ioctl$KDGKBMETA(r1, 0x4b62, &(0x7f00000004c0)) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rfkill\x00', 0x101000, 0x0) [ 295.432691] FAULT_INJECTION: forcing a failure. [ 295.432691] name failslab, interval 1, probability 0, space 0, times 0 [ 295.443985] CPU: 1 PID: 18532 Comm: syz-executor6 Not tainted 4.17.0+ #89 [ 295.450922] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 295.460279] Call Trace: [ 295.462881] dump_stack+0x1b9/0x294 [ 295.466534] ? dump_stack_print_info.cold.2+0x52/0x52 [ 295.471740] ? check_same_owner+0x320/0x320 [ 295.476075] ? mutex_trylock+0x2a0/0x2a0 [ 295.480149] should_fail.cold.4+0xa/0x1a [ 295.484219] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 295.489328] ? __mutex_lock+0x7d9/0x17f0 [ 295.493399] ? graph_lock+0x170/0x170 [ 295.497203] ? kernfs_setattr+0x20/0x40 [ 295.501186] ? graph_lock+0x170/0x170 [ 295.505000] ? find_held_lock+0x36/0x1c0 [ 295.509069] ? __lock_is_held+0xb5/0x140 [ 295.513142] ? check_same_owner+0x320/0x320 [ 295.517468] ? rcu_note_context_switch+0x710/0x710 [ 295.522401] ? lock_downgrade+0x8e0/0x8e0 [ 295.526565] __should_failslab+0x124/0x180 00:16:06 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x10, 0x3, 0x6) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e280028001100ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 00:16:06 executing program 2: r0 = socket$inet(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x500000000000000) 00:16:06 executing program 2: r0 = socket$inet(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x1000000000000) 00:16:06 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f760070") sendmsg$nl_xfrm(r0, &(0x7f0000001440)={&(0x7f0000000000)={0x10, 0x4170000}, 0x349, &(0x7f0000001400)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x0, 0x0, {{@in=@multicast1=0xe0000001, @in6=@mcast2={0xff, 0x2, [0x0, 0xffffff7f], 0x1}, 0x0, 0x0, 0x0, 0x0, 0xa, 0xfffffff0, 0xf0ffffffffffff}}}, 0xb8}, 0x1}, 0x0) 00:16:06 executing program 2: r0 = socket$inet(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0xf00000000000000) [ 295.530810] should_failslab+0x9/0x14 [ 295.534617] kmem_cache_alloc_trace+0x2cb/0x780 [ 295.539292] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 295.544240] kernfs_iattrs.isra.4+0x123/0x4e0 [ 295.548739] ? ktime_get_real_ts64+0x361/0x510 [ 295.553327] ? kernfs_iop_permission+0xb0/0xb0 [ 295.557924] ? ktime_get_with_offset+0x4a0/0x4a0 [ 295.562698] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 295.568245] __kernfs_setattr+0x57/0x440 [ 295.572316] kernfs_setattr+0x2b/0x40 [ 295.576132] cgroup_kn_set_ugid+0x2c3/0x370 00:16:06 executing program 2: r0 = socket$inet(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0xf0ffffffffffff) [ 295.580471] ? cgroup_file_name+0x1f0/0x1f0 [ 295.584830] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 295.590378] ? __kernfs_create_file+0x29b/0x330 [ 295.595076] cgroup_addrm_files+0x465/0xb20 [ 295.599415] ? cgroup_css.part.14+0x1f0/0x1f0 [ 295.603928] ? find_held_lock+0x36/0x1c0 [ 295.608005] ? __lock_is_held+0xb5/0x140 [ 295.612076] ? kasan_check_write+0x14/0x20 [ 295.616310] ? online_css+0x265/0x330 [ 295.620116] css_populate_dir+0x1a9/0x470 [ 295.624275] cgroup_apply_control_enable+0x449/0xe80 00:16:06 executing program 2: r0 = socket$inet(0x10, 0x3, 0x6) r1 = fcntl$dupfd(r0, 0x406, r0) ioctl$IOC_PR_PREEMPT(r1, 0x401870cb, &(0x7f0000000000)={0x404, 0x81, 0x24, 0x1}) exit(0x79a1) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="3b147ea4e537cd49d462f36d9d9995125fdbc6f82a60633c77d3ec87fac7762aa58cf16da022b83c84d43c0ad691eb9f0ea0c420a6835beed21d9eb4b84db526208908d41046b96ce387a832177af44a35b2f83cc15ff1b66d7d77c0add8956625fa2833a1cf5f61e681f3be9f00423ded4f16786725d48679dae5156ebc5bb0ee1b369e841af832ff50807fe3d18284785c21817842b2cd0a3d13cd9e93"}, {&(0x7f0000000080)="a09b6f2103ea4eab86b2630f1f12e6561c4d4ac3630e4ec367c3619634b12815e7071c7e41b39b42c93a83ba7dc6c3608ee543b308a0e0"}], 0x0, 0x0, 0x2ba}, 0x20000000) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000100)={0x6}, 0x4) [ 295.629389] ? cgroup_save_control+0x260/0x260 [ 295.633980] ? mutex_unlock+0xd/0x10 [ 295.637697] ? kernfs_setattr+0x39/0x40 [ 295.641694] ? cgroup_kn_set_ugid+0x2cb/0x370 [ 295.646189] ? cgroup_file_name+0x1f0/0x1f0 [ 295.650521] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 295.656061] ? css_populate_dir+0x2a1/0x470 [ 295.660414] cgroup_mkdir+0x876/0x1150 [ 295.664312] ? cgroup_destroy_locked+0x7d0/0x7d0 [ 295.669071] ? put_itimerspec64+0x310/0x310 [ 295.673388] ? set_nlink+0xaf/0x140 [ 295.677003] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 295.682545] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 295.688080] ? kernfs_get_active+0xb2/0x120 [ 295.692406] ? cgroup_destroy_locked+0x7d0/0x7d0 [ 295.697168] kernfs_iop_mkdir+0x159/0x1e0 [ 295.701317] ? getname_flags+0xd0/0x5a0 [ 295.705294] vfs_mkdir+0x42e/0x6b0 [ 295.708841] do_mkdirat+0x266/0x2f0 [ 295.712476] ? __ia32_sys_mknod+0xb0/0xb0 [ 295.716632] ? do_syscall_64+0x92/0x800 [ 295.720608] __x64_sys_mkdir+0x5c/0x80 [ 295.724497] do_syscall_64+0x1b1/0x800 [ 295.728383] ? finish_task_switch+0x1ca/0x840 [ 295.732876] ? syscall_return_slowpath+0x5c0/0x5c0 [ 295.737798] ? syscall_return_slowpath+0x30f/0x5c0 [ 295.742725] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 295.748093] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 295.752943] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 295.758133] RIP: 0033:0x4559f9 [ 295.761310] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 295.780618] RSP: 002b:00007fa94af69c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 295.788322] RAX: ffffffffffffffda RBX: 00007fa94af6a6d4 RCX: 00000000004559f9 [ 295.795583] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000100 [ 295.802843] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 295.810113] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 295.817387] R13: 00000000004bae54 R14: 00000000004cead0 R15: 0000000000000062 [ 295.826563] cgroup: cgroup_addrm_files: failed to add max, err=-12 00:16:06 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f760070") sendmsg$nl_xfrm(r0, &(0x7f0000001440)={&(0x7f0000000000)={0x10, 0x4170000}, 0x349, &(0x7f0000001400)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x0, 0x0, {{@in=@multicast1=0xe0000001, @in6=@mcast2={0xff, 0x2, [0x0, 0x9effffff00000000], 0x1}, 0x0, 0x0, 0x0, 0x0, 0xa, 0xfffffff0, 0xf0ffffffffffff}}}, 0xb8}, 0x1}, 0x0) 00:16:06 executing program 6 (fault-call:8 fault-nth:99): r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="295ed277a4200100360070") mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) rmdir(&(0x7f0000000340)='./file0//ile0\x00') r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) fstat(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r2) mkdir(&(0x7f0000000100)='./file0//ile0\x00', 0x0) 00:16:06 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x10, 0x3, 0x6) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e280005001100ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) [ 296.155270] FAULT_INJECTION: forcing a failure. [ 296.155270] name failslab, interval 1, probability 0, space 0, times 0 [ 296.166686] CPU: 0 PID: 18577 Comm: syz-executor6 Not tainted 4.17.0+ #89 [ 296.173622] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 296.182979] Call Trace: [ 296.185580] dump_stack+0x1b9/0x294 [ 296.189228] ? dump_stack_print_info.cold.2+0x52/0x52 [ 296.194414] ? __save_stack_trace+0x7e/0xd0 [ 296.198740] should_fail.cold.4+0xa/0x1a [ 296.202795] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 296.207886] ? graph_lock+0x170/0x170 [ 296.211674] ? graph_lock+0x170/0x170 [ 296.215463] ? find_held_lock+0x36/0x1c0 [ 296.219531] ? __lock_is_held+0xb5/0x140 [ 296.223593] ? check_same_owner+0x320/0x320 [ 296.227901] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 296.232902] ? rcu_note_context_switch+0x710/0x710 [ 296.237836] __should_failslab+0x124/0x180 [ 296.242066] should_failslab+0x9/0x14 [ 296.245856] __kmalloc_track_caller+0x2c4/0x760 [ 296.250511] ? string+0x21d/0x2c0 [ 296.253963] ? kstrdup_const+0x66/0x80 [ 296.257857] kstrdup+0x39/0x70 [ 296.261040] kstrdup_const+0x66/0x80 [ 296.264747] __kernfs_new_node+0xa8/0x580 [ 296.268880] ? kernfs_dop_revalidate+0x3c0/0x3c0 [ 296.273620] ? pointer+0x930/0x930 [ 296.277157] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 296.282693] ? snprintf+0xa5/0xd0 [ 296.286138] ? vsprintf+0x40/0x40 [ 296.289574] ? cgroup_kn_set_ugid+0x2cb/0x370 [ 296.294058] kernfs_new_node+0x80/0xf0 [ 296.297931] __kernfs_create_file+0x4d/0x330 [ 296.302330] cgroup_addrm_files+0x437/0xb20 [ 296.306640] ? cgroup_css.part.14+0x1f0/0x1f0 [ 296.311118] ? find_held_lock+0x36/0x1c0 [ 296.315176] ? __lock_is_held+0xb5/0x140 [ 296.319226] ? kasan_check_write+0x14/0x20 [ 296.323448] ? online_css+0x265/0x330 [ 296.327242] css_populate_dir+0x1a9/0x470 [ 296.331383] cgroup_apply_control_enable+0x449/0xe80 [ 296.336486] ? cgroup_save_control+0x260/0x260 [ 296.341058] ? mutex_unlock+0xd/0x10 [ 296.344759] ? kernfs_setattr+0x39/0x40 [ 296.348718] ? cgroup_kn_set_ugid+0x2cb/0x370 [ 296.353204] ? cgroup_file_name+0x1f0/0x1f0 [ 296.357521] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 296.363049] ? css_populate_dir+0x2a1/0x470 [ 296.367366] cgroup_mkdir+0x876/0x1150 [ 296.371244] ? cgroup_destroy_locked+0x7d0/0x7d0 [ 296.376481] ? put_itimerspec64+0x310/0x310 [ 296.380798] ? set_nlink+0xaf/0x140 [ 296.384427] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 296.389971] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 296.395510] ? kernfs_get_active+0xb2/0x120 [ 296.399831] ? cgroup_destroy_locked+0x7d0/0x7d0 [ 296.404586] kernfs_iop_mkdir+0x159/0x1e0 [ 296.408728] ? getname_flags+0xd0/0x5a0 [ 296.412698] vfs_mkdir+0x42e/0x6b0 [ 296.416221] do_mkdirat+0x266/0x2f0 [ 296.419842] ? __ia32_sys_mknod+0xb0/0xb0 [ 296.423983] ? do_syscall_64+0x92/0x800 [ 296.427944] __x64_sys_mkdir+0x5c/0x80 [ 296.431822] do_syscall_64+0x1b1/0x800 [ 296.435710] ? syscall_return_slowpath+0x5c0/0x5c0 [ 296.440630] ? syscall_return_slowpath+0x30f/0x5c0 [ 296.445563] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 296.450917] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 296.455767] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 296.460946] RIP: 0033:0x4559f9 [ 296.464117] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 296.483344] RSP: 002b:00007fa94af69c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 296.491048] RAX: ffffffffffffffda RBX: 00007fa94af6a6d4 RCX: 00000000004559f9 [ 296.498316] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000100 00:16:07 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[0xfeffffff], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) r2 = socket(0x11, 0x100000803, 0x0) r3 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={"6966623000faffffffffffffff00", 0x12}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'ifb0\x00', 0xa201}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@dev={0xfe, 0x80, [0x0, 0x100000000000000]}, 0x0, 0x0, 0x2}, 0x20) 00:16:07 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f760070") sendmsg$nl_xfrm(r0, &(0x7f0000001440)={&(0x7f0000000000)={0x10, 0x4170000}, 0x349, &(0x7f0000001400)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x0, 0x0, {{@in=@multicast1=0xe0000001, @in6=@mcast2={0xff, 0x2, [0x0, 0xffffff7f00000000], 0x1}, 0x0, 0x0, 0x0, 0x0, 0xa, 0xfffffff0, 0xf0ffffffffffff}}}, 0xb8}, 0x1}, 0x0) 00:16:07 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x10, 0x3, 0x6) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e2800018a1100ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) [ 296.505570] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 296.512823] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 296.520084] R13: 00000000004bae54 R14: 00000000004cead0 R15: 0000000000000063 [ 296.527566] cgroup: cgroup_addrm_files: failed to add current, err=-12 00:16:07 executing program 4: pipe2(&(0x7f0000989000)={0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) mount(&(0x7f0000434ff8)='./file0\x00', &(0x7f0000abf000)='./file0\x00', &(0x7f0000f4c000)='jfs\x00', 0x1023402, 0x0) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000001200), 0x3000, &(0x7f0000001280)) unlink(&(0x7f00003b3000)='./file0\x00') dup2(r0, r1) 00:16:07 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) write$rdma_cm(r0, &(0x7f0000000640)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f00000004c0)}}, 0x20000650) close(r0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0x6e) listen(r3, 0x0) connect$unix(r2, &(0x7f0000932000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) tkill(r1, 0x1000000000016) 00:16:07 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) write$rdma_cm(r1, &(0x7f0000000640)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f00000004c0)}}, 0x10) close(r1) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0x6e) listen(r4, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuset.effective_mems\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000100)="e91f7189591e9233614b00", 0x0, 0x12) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r5, 0x4040534e, &(0x7f0000000080)={0x100, @time={0x0, 0x989680}, 0x4, {0x20, 0x5}, 0xbb7, 0x3, 0x2}) connect$unix(r3, &(0x7f0000932000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) tkill(r2, 0x1000000000016) 00:16:07 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="295ed277a4200100360070") mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) rmdir(&(0x7f0000000340)='./file0//ile0\x00') r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) fstat(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r2) mkdir(&(0x7f0000000100)='./file0//ile0\x00', 0x0) 00:16:07 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x10, 0x3, 0x6) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e2800000a1100ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 00:16:08 executing program 2: r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x20400, 0x0) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000080)={0x1000000000000000, 0x7ff, 0x9, 0x100000000, 0x401, 0x9}) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0) 00:16:08 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f760070") sendmsg$nl_xfrm(r0, &(0x7f0000001440)={&(0x7f0000000000)={0x10, 0x4170000}, 0x349, &(0x7f0000001400)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x0, 0x0, {{@in=@multicast1=0xe0000001, @in6=@mcast2={0xff, 0x2, [0x0, 0xf00], 0x1}, 0x0, 0x0, 0x0, 0x0, 0xa, 0xfffffff0, 0xf0ffffffffffff}}}, 0xb8}, 0x1}, 0x0) 00:16:08 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[0xfeffffff], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) r2 = socket(0x11, 0x100000803, 0x0) r3 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={"6966623000faffffffffffffff00", 0x12}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'ifb0\x00', 0xa201}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@dev={0xfe, 0x80, [0x0, 0x2000000]}, 0x0, 0x0, 0x2}, 0x20) 00:16:08 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x10, 0x3, 0x6) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e280000051100ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 00:16:08 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) write$rdma_cm(r1, &(0x7f0000000640)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f00000004c0)}}, 0x10) close(r1) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$sock_linger(r4, 0x1, 0xd, &(0x7f0000000480), &(0x7f0000000680)=0x8) r5 = socket$unix(0x1, 0x1, 0x0) bind$unix(r5, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0x6e) listen(r5, 0x0) connect$unix(r3, &(0x7f0000932000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) tkill(r2, 0x1000000000016) 00:16:08 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="295ed277a4200100360070") mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) rmdir(&(0x7f0000000340)='./file0//ile0\x00') r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) fstat(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r2) mkdir(&(0x7f0000000100)='%/file0//ile0\x00', 0x0) 00:16:08 executing program 4: pipe2(&(0x7f0000989000)={0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) mount(&(0x7f0000434ff8)='./file0\x00', &(0x7f0000abf000)='./file0\x00', &(0x7f0000f4c000)='jfs\x00', 0x1023402, 0x0) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000001200), 0x3000, &(0x7f0000001280)) unlink(&(0x7f00003b3000)='./file0\x00') dup2(r0, r1) 00:16:08 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) write$rdma_cm(r0, &(0x7f0000000640)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f00000004c0)}}, 0x7) close(r0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0x6e) listen(r3, 0x0) connect$unix(r2, &(0x7f0000932000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) tkill(r1, 0x1000000000016) 00:16:08 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x10, 0x3, 0x6) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e280000061100ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 00:16:08 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="295ed277a4200100360070") mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) rmdir(&(0x7f0000000340)='./file0//ile0\x00') r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) fstat(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r2) mkdir(&(0x7f0000000100)='//file0//ile0\x00', 0x0) 00:16:08 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f760070") sendmsg$nl_xfrm(r0, &(0x7f0000001440)={&(0x7f0000000000)={0x10, 0x4170000}, 0x349, &(0x7f0000001400)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x0, 0x0, {{@in=@multicast1=0xe0000001, @in6=@mcast2={0xff, 0x2, [0x0, 0xf0], 0x1}, 0x0, 0x0, 0x0, 0x0, 0xa, 0xfffffff0, 0xf0ffffffffffff}}}, 0xb8}, 0x1}, 0x0) 00:16:08 executing program 2: r0 = socket$inet(0x10, 0x5, 0x4) r1 = getpgrp(0x0) ptrace$peek(0x1, r1, &(0x7f0000000000)) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000040)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0) fcntl$addseals(r0, 0x409, 0x2) 00:16:08 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x10, 0x3, 0x6) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e280000101100ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 00:16:08 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) write$rdma_cm(r0, &(0x7f0000000640)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f00000004c0)}}, 0xfffffffffffffdef) close(r0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0x6e) listen(r3, 0x0) connect$unix(r2, &(0x7f0000932000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) tkill(r1, 0x1000000000016) 00:16:08 executing program 2: r0 = socket$inet(0x10, 0x3, 0x6) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000340)={0x5, [0x306, 0x80000001, 0x400, 0x800, 0x883d]}, &(0x7f0000000380)=0xe) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f00000001c0)={@loopback, @dev, 0x0}, &(0x7f0000000200)=0xc) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x48000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=@getqdisc={0x28, 0x26, 0x200, 0x70bd26, 0x25dfdbfb, {0x0, r2, {0xffff, 0xc}, {0x6, 0xd}, {0xffff, 0xfffb}}, [{0x4, 0xa}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000040}, 0x24008010) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000140)={0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000180)=0x20) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r1, 0x84, 0x78, &(0x7f0000000300)=r3, 0x4) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0) 00:16:08 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000140)={0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@local, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}}}, &(0x7f0000000280)=0xe8) lstat(&(0x7f0000000400)="e91f7189591e9233614b00", &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$netlink(r0, &(0x7f0000002900)={0x0, 0x0, &(0x7f0000002880)=[{&(0x7f0000000080)={0x88, 0x1c, 0x0, 0x70bd2c, 0x25dfdbfb, "", [@typed={0x4, 0x34}, @generic="d2ffd87b57ac2bc83f641d090eedbe68a3893c91fab25f2bb711e4e9a9758c4099228a282e2702510b", @generic="c96fa2cceb40eeda99be4650d9d24176480720e3ee9f504ee225146f1eef40cfbbc4229ea2bfe99a13e7aa31cef5975c7abc31533356c23135dcaaf33f7aaab36c", @typed={0x8, 0x1d, @ipv4=@local={0xac, 0x14, 0x14, 0xaa}}]}, 0x88}, {&(0x7f0000000680)={0x215c, 0x2e, 0x100, 0x70bd29, 0x25dfdbfb, "", [@nested={0x214c, 0x12, [@generic="3e8590bd0ba4441e357537d8081051b4bf9fdb393a3db2a75405fe4563fcc1e910c73a5aeeed71bd750705889dc7057b3dfacc77cc25cd8a542504e317e2e3c00075369a6b74750d85d02bb1ecbfde7b7dfbc7eee1a8e47f4af62a1a1253075f0efcf98ac1bacd0156c905529825b0029a31a6d24fec7fec880530b5e9bbbd1f5d14b9bdb5234fcb598111479a71c5e164d039b8728d71b275a9c26ce791d94fdb60e68e0f438d3a5ec301737a81d529221bae6eb93845630abd4fcdb799995287d391ae5d", @generic="829cfb0ecbe8e3342c8dc493cb863f4d7fb87667bac78082c7d842493ecb139b7135b396b69afc93a56f3f656444adce8866230df2d01057d0ff0567b4099ef8f910ddb18c16fd546b3b6ee2a3cd39605e4e588fdec9eed66c80c800306bcd0375cdd256ff63b6bc8b", @generic="b35a61f12f7f5275fba425eb31f66c447af8", @generic="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", @typed={0x8, 0x88, @u32=0x1}, @generic="007b7ec07ea1d54fc4d515cf65232ca4873d7ad206f75d7aa3e563f58fbe60e65fb2da83fae55c3791517850f3feb35cae2942f1cfff095ee03361a54fd380bdb48c1294238740f85f9bf643b12726012978f90ad4375a7485d637838e56efb7514f7e6971fbcc5bb2ca6bff43d591dd0321bc0c5bc9e96ddc37cd6b10c91faec8a763103905dd7c6dede72e813b3b039b37cf8eb81413919a1329eec9a179afec51ba8dbb4a671fdda33a79448400f004fad4c8c3d559b90f26ff69f422b1567d0c86710623ac86239a12cfae0cd7560e10a0dc0c52a473688899e475f29b4503372e9fe754f326a66bd7637988169e1588831680126920336f514c63ab04023a92de470a18a544e592b7fa37beee35c1fcec32047199ef53c7fd69510152ef5f243f349c9f9b19337f9f44a7686f1822fbabaf64cf380c2627496fe0e9e7781e57c77fd9d178d822d195803c76e2f2e0b0ba140660feb02888f009a6c6742d59ed10c8727af0c218a238c9201f6fd7107b2ceedbb0dfde47cf041bc7db96610aab9fe724688f805933414c5c0289eaa0d71d56bcc4956486ff4ece37148fcd5c4dbd90f628f65345d6966a358c8b41ca65ef6bc88aff86722d9dcb4b9f78c955fe2449a1e1e9fff3a5529ec8ad5914c712ca2c2475135e62ec8120bcf269fc7cf54a523e116cd9e3aa2bab99547c24ba633842848c18f4e41ca46d0e9b280682f90d9756710ca048a5db19bcb2728e6596cfdddc4d622ad71cdc42d7143ec493b718ff58c45a60dac731cdfdf5bf3acdefe969a566be6e98e6dfaa71a39b8608fff592a84f77913d45c84676d95f3af859400e30ec2ba3d1e4442b06c2f1e26e5e7038b5dcb0c2863d58552cd36bfb6bd3c016c0d0f493a77c97c7878006ce8aebfe26d438e87030bf20f81a7a38458b4c9d6fe62dc670b3bad8911fddc03e76b26c40defdbcf4007c4200f55e16b946565891c7519c7b2a7d5a25c12444dd9048ce606795e5b250dd2ce0a0dc7c7bea120a80128b4fc636c1116367e75c22bb2b22043102f1814c491b035cf7f604334c84026651a207ec0d99f44c1203697574f1f38cecabf6981e95e8f10f8b2c0156c2d06db02b1bc7470ecf3b6d08f09bec07d50089d386c4e9eb8b4faf6a4cd433932451fc38c2e874aca7bf983bc371fc8fd1be988d64da6f4a59328842b00e8c1576a41270aa008f922cf17adc99cdd7a04b26d530103688de7ce9f4f7b2df5a9075aa4fcc048a84a7a9577fc3ca20ab075cb55be9271246c13f30f79828c9369a63f50d440f977a2f00e202f3579d52cb76405f06e842493a150702cfa0ee31c673a1dcade47df085e9c6698c6fa6561fca0bb813b51d62467a4430fc5458bc36aa1146732c8255f9f3bc373d87278af92fe8a20ba8f9780e6d65f1d2fcfad882dfc8c76777809a185217ebc45352f1dc7b2b5ca4e8dd8278cf80d853cdce64e0b97d8c721e2435e9e0886ad8e12b259f63b257af1ec11ae5d77d9582d00266182b4b13e73572460aa77db8abe7411f85d136bed51c6d131f45fb3cbcf526a93e135dd78d71817edc59f45b8ec4aa1b246ce8b0b3b84fdca94ede6409422f9cb47d9989ff082c13cbb69027b88b6af75ae83a05afa6cbbc51a59f16b990ba0914acc374ca810ef2f133e2cb7da128bfc843b26c9e825460c1a5da413debb0de61fc636b03d7cd877441d7f8e53eff5f6a7c50529f3422d646b2bc3265f742676ddf9a004bbb32b529cefa4afe864057e30ae2fab6a4eca24d136ef47dc9d3c4f9e05daf12bf63d10a2e4a263048ae661960dc85bc67f4c39a0db02da40aa9aa82a4ccc7d8cf6538a739f3c5b5e3169dc4474f633ec2fb50168abd05e5c3f336a6b2ee011de6e0d27d4dbed9b73dfb256a4a2e3c94337f8e49669f74bddf34c622ec22d8c5c22907076b58fea5316a189dcaff09cd25901767ce688087901a6cec911d13cc7b005eabe4bce655a42f3672b5066c0fc4f1179e1a65fb738dbefd1cace573c7981a7863113ddad92b8c49dbd24550d9a4f1584b23bb247c8c2e3e356d5623179f11e68cb320b6da0ac3512a87d1947c3a60ab035e35cfabc4988fd514cb1c5629b8ca809e327ffd86a249c3233b84285e01f3f55ac59373c8bddabad81727094e1f1ca32f15614b1a1b9f3b3a3f639855089de611301ac71e7a75dabb3c8a6a3a587aad61773c9c4b61c9748e5ce07df631acb2ec6af01a0ea04c47d68dc390c118f544d2c1fb8c0c4eed658f54faaa165fee40e33f90d5b1167e04321295b415ce97e0605163c70fd110414d49c7c1a345a2d68844abcc73954ad11a567228f15b79f8ef384162b3b6bad09ee8cc328e96e535287a3fb7570b4862bdc8eea2810afcbf1cd311e3b5ad44cf526abb8f35ac3abd5f4dfacf00d4ca5d38aad3c15a23ceb1407e4ae926a852aa1d1e0adb677bba356a172af90aa777cfc311d19ca94d2b619485ee5a15bbf378101a7bc322e6096f20b4eb10b78fb7f6869705063651f326d72543359c87861e6d45b6a95eaee0c27d70524dfcf97c9b9fa5433b65dc7cdebe0a1558c67ee4f22a0ddcbe8c109f2c6993dd34deb2cea80f8fa89bafab5b7aad3769775a6583572ad044677c646509b3c63fc45fd148cdc33e67b90de7691c8b096fd9841830dee1b8cefda9d968a5918df66e71b953b50e15219627dbeddcca4dfa8fe2115a91217e953424427104b5f41e0455e95c6dbe9f05b312611333f402327cb37d759391fa5d22221054625e9091f1177bcf31f12b307db93cb4a6165ef32b391872955c4277f951728b9d1ac106da039394e4c731eb85dbc5269ff2516cce2841192cd63020968ec0ec45c790f97c1913d89f5e83e213dd9a491badfa8e169c016a8a3cd771aaf78f9d16e1fca1cf64dabdf374905d55ba453b93e2344b5d104e23046d33227d9b11e0db148db6d9f15653f9bd4764057657913d5ee99063d72876f2e493b7079da2a0b54041aa323435205c6f51da93879807951f141259e0fe0d820d26d7bcc2abce7a4da6d08e53faf2eb1b6b2208562386ca1cce2a42d03a2ee211ee9217c8d38ed947ba6709302f58311fe40e564d198743c6b0812b53424febc2b9491b1201a1f77385d8e4933181a8a527ae73f0baf0b4b4c257a0c228bc1c7ab9ecd4c35b133ceac12a67c184ea8decce6b6954cb6a7bd55b23ba90be6333cc9463791cc1fa4f193108c4da70a4d7f5c4d2a2a18b800919d973ae295de22a0a191217bf1858a869a7ca8feb675ea3340f98cccec641de952ce5c877b684da127f6bc4d0757aa5ab0c2d5604881ee6153ed0cbcbc673746003e7cc95e5cf6313380a86eb80c7b1f24afa48f38f1ffd8aea99ee5890c978db837646b9ba538da225fa3842675a840672620f535c9aac2751623d983f898c8562ff970c38ec1df9f72aaf19f650f05dfa0309f59fe33d71ba8941c3234d3c10b032c26fb4878302634b8abab2233a0a0575e0fc9b10122a297357037b1e2d01e25e5cfcc30f63607324584c595f8242ab31c95a16deca319b4f13afb037dd8ae5510d781c150b0b81038facc6cf1f70f36079a3ed2c22d3d24776da2ff5ee514baebb414f0335d153e6f5b2f5edde99aacb8b2af98ed4563b97cb5473be6e065cd304a75efdbbe6ac08ea3e59635b9f9c06e95b0c9a4c0bfd054789f7156df618db55981eb5f41636d45f8cb80c3a05598000df6e842de6f54ce821359c75ac816197495e1a5bd4fb94917df6a7aa757c52da2076aec81dff7bb57d7dfb3db852cf735e766107e049cefe4e781a9e1a3b3cf0ed6031aa645efda006ab33afd9ee5dda316b91c7d129c126e464d98e7dbbe267f78f10f7d4dcf7d223c248424f1d5e55df0a1d1e3902e63502d1f66bd3d271b257efaf2bce827c7b7bd2237c516ced010389f9efb9c4b318e63e897e98f2ee813dd14d34ef19d850a8330a95d0f11fb3bcf3d9eedb1ded59777c276873293041edc3f7a95c80c6d7afa3a9a2a0f14b8db4e716088e430f5a2767b0a83031c4958892ebe98a51165db5a8d539b6c25697a8be3f67e16f76210984472e9fffdcb5c63cf5aab8e9d875ea0cc126147808a95ec2998f47f90c0c0079de051d76104dfea8024f6a6dc76357bfd43cd65b45ca91a551c04889c34b2af822a64ae5a9d3fb7c5c7746b0159ac5c1ed7aa20108d2d5bcc344e26ee5e921ce5d26f9d336506a51691bb26a171ab7addcb411f4019c224b1db31dce15393a7e464eb4b12db1b279b6456f9b3f7e758c5e7cced2697eea430ca923f8319671ccc280765475e2a0e7c76aaa4206763b347a992fcbb45d35c5544f983ba49303cc6d149a45d11c4ecc0503174f74f0d596a9284bd2862c05fd26581d81d812300e25ec4ed1baa5a492b248a4dd56bf0b5e453b8d813f3cb19d9ef66a8ee0c22385c8452c163cfa84d4e0123928e55051fe72987a4dbb1e05ca72c7fe9fde8a6ad8ea5ad0df0432a3ed97efcbdfc56180bee8e562f07ab8abfc63e8fb735706bcbb1a74d9dd45a0d72cf25dbd4dd14d42406619be253b41f2b07073ad1a0fa152d1fcf2d42202e7405ae9aa392f57061ebe4309a75b6a7faf84ac3d1746fc95115e58523164cf2213d0143ab2988493b635bbffa184248b281481978f3d9a8df78f2a78b80bc356de1bed700720993842a47b9c6ed32ea74e32af98936b69eada14c2f8541232acec46bc292c8f0ec7554b0ebd32f99bb1266cea3e05fd8476c2cb027cfbbc85dd1bb528f5da9afc54e5538a76583bd3be2f9d816b0c57f63dfd94dddd2d7b037c0effd28d0f42df89f52d1b99364ccaf8ed5dc2bc2f27825dcd7866e6c2aa8fa8e2fd74cf47c4768d2d147a8b4c1b6db819b9f62532da3aecc8316719162686034a96e5ee3a11d00dae91f4d0362f74ed5f1793d3cc336edad1896e05189bdb027ee75b295d8690f9ad13f7106bddcc61aad9ea31a4463c5780fdc3607fb8a86927b1d317abdfa95354e59b2fae762f61c864915cc476e3af8cd8dc06e54a582007858bc747a4d85f4ee50acd79c0dd9813a25fd0dfec09bb069fcb7570a52499f8b74d6103ab862198b7c9d4ec56ae54f809fad9f741c849469b9ac36f5fab4d2bddb159da457cf9022047d14f643b7021275e4bed0c316d21a7d301cace1e73a5f6072cae12cd3172782e0da8e2d83941634e6ac9b4d5e2556342b6df086819c4f361da0ba41757f376a1b1b949d795a50855915020d7a69c5300c95d07c1114acc019a038999454a0d6cf49b556337a0e88d4f7c1bd4f49377d721e7722af9c23f29cdfbb184bfd84422e953d3bae0cdf0ae59c83b10fbd1986ec8ef70106f4e41c8b51069a7bc1669e22551fa7054658b9acf8b03e5660f6e59740cf317068dbbc14eaa95c326eff2f29b2b208b4ad178f839e257452a304bd8dfef7ca81df3fc4d990036f328794aa873d1da25d41da5f565a7ff40977ff00afa38bc79c1250d44ac717cd57f7e029a3b4793ead461ac74409774d274892d9800dc12bb1a8b0e98656c874573129c4342d5f9756da5548e9b9718fca8463570831fdb8fc580fe8c7bfad77b2b2e642074b07ab98e85af3167d8901ada23f6f39c6e3e27f34acefd302b4d75bcf927c9590530c5f1aecc370ef2f9c697d928eb9a709ed2713673769c925ba5ca22ae110d6db16b175784fb59f47e0f51383f2ae594e27b9cde41c0f61e3ec93e104c23bae45c282a284466fb8f4a556fed7d82f94cd7fdbbea4b79d5e05b1194f8033f90a381e1761d"]}]}, 0x215c}, {&(0x7f00000002c0)={0x118, 0x29, 0x1, 0x70bd2c, 0x25dfdbfb, "", [@nested={0x14, 0x54, [@typed={0x8, 0x2, @pid=r1}, @typed={0x8, 0x26, @uid=r2}]}, @generic="59ed73bce56fd3215993fa12c0b9abcebdebdf775276424b13de12b3e8fa926e24f3b691471d39945f10095dd9ce2f87cf7ad784bdc220c2c6c92790d45bc7e46b37090cac558a1cfa6bc74200aaaf481aa81aeb3d5cbb9663cd28942723a46be7b6f8e520c02b39100835947c49d814d585dd3f51683efb2d6565f015d5cb300ab85f07fd0cd503c8d9f0e42f6c7721a533d31116f5e56591111581c2a66e73f62adf6a84298fa07d5a721d4faf0f9ea4779bf5f0b550a40bcf242703cd7ba3b647ee8a4007d848d8d3474addf1e8f1fbe0866a91d06e238badf14bb4cd2a2b94bf933e5b86f8a4dd0862fb229ccdaad820"]}, 0x118}, {&(0x7f0000002800)={0x20, 0x5, 0x402, 0x70bd2b, 0x25dfdbfb, "", [@typed={0x8, 0x44, @uid=r3}, @typed={0x8, 0x9, @ipv4=@dev={0xac, 0x14, 0x14, 0x15}}]}, 0x20}, {&(0x7f0000002840)={0x1c, 0x2f, 0x800, 0x70bd29, 0x25dfdbfb, "", [@typed={0xc, 0x19, @u64=0x3}]}, 0x1c}], 0x5, 0x0, 0x0, 0x40}, 0x8000) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r5 = gettid() timer_create(0xfffffffffffffffc, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) write$rdma_cm(r4, &(0x7f0000000640)=ANY=[@ANYBLOB="0c000200080000fa", @ANYPTR=&(0x7f00000004c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00']], 0x10) close(r4) socket$unix(0x1, 0x1, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) bind$unix(r6, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0x6e) listen(r6, 0x0) connect$unix(r6, &(0x7f0000932000)=@abs={0x0, 0x0, 0x4e24}, 0xfffffffffffffdeb) tkill(r5, 0x1000000000016) 00:16:08 executing program 2: r0 = socket$inet(0x10, 0x3, 0x1000) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000280)='/dev/rtc0\x00', 0x238000, 0x0) sendto$ax25(r1, &(0x7f00000002c0)="14c1e3afa46fe3a75500f13070f9c710e374daccb249847ca904d1fa074ea6e7b2e4119be9e41bfaadfe587fa400b09ca7ce4c804c77d4196544779c26dd14fdd571aee8423fd1c4f0cb4da0949ad36c6d17f0e90720d48d6a6460eade6f6496f47a300efdc7c9eeb7b2bebf0cd586a4acdb70f47ce0c875301d1644d8be6c16c97a9c89e05b6b77fa881ccf277dce89c14f183b73c6390a21bcddac2ef068ef2ed9535da7160416e8a4d7cf91123fca98feaa7b30915bac36cbe21b3f0c754cb74957e6f7bd7789c1b40dad65a40b04329e51a3", 0xd4, 0x20040080, 0x0, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f00000001c0)={0x0, 0x5}, &(0x7f0000000200)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f0000000240)={r2, 0x3}, 0x8) recvfrom$inet(r0, &(0x7f0000000040)=""/71, 0x47, 0x40010020, &(0x7f00000000c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x19}}, 0x10) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000003c0)="24000000248007031dfffd946fa2800220200a0009000400001d85680c1ba3a20400ff7e", 0x24}], 0x1, 0x0, 0xfffffffffffffff6, 0x2}, 0x0) truncate(&(0x7f0000000000)='./file0\x00', 0x4) setsockopt$inet_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f0000000140)={0x303, 0x33}, 0x4) 00:16:08 executing program 2: r0 = socket$inet(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e", 0x24}], 0x1, 0x0, 0x0, 0x4}, 0x4) 00:16:08 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[0xfeffffff], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) r2 = socket(0x11, 0x100000803, 0x0) r3 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={"6966623000faffffffffffffff00", 0x12}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'ifb0\x00', 0xa201}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@dev={0xfe, 0x80, [0x0, 0x500000000000000]}, 0x0, 0x0, 0x2}, 0x20) 00:16:08 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x10, 0x3, 0x6) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e280000000f00ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 00:16:09 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) write$rdma_cm(r1, &(0x7f0000000640)=ANY=[@ANYBLOB="0c000000080000fa", @ANYPTR=&(0x7f00000004c0)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003456deeb1d8b71e0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"]], 0x10) close(r1) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0x1ea) listen(r4, 0x0) connect$unix(r3, &(0x7f0000932000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) tkill(r2, 0x1000000000016) 00:16:09 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f760070") sendmsg$nl_xfrm(r0, &(0x7f0000001440)={&(0x7f0000000000)={0x10, 0x4170000}, 0x349, &(0x7f0000001400)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x0, 0x0, {{@in=@multicast1=0xe0000001, @in6=@mcast2={0xff, 0x2, [0x0, 0xf0ffffff00000000], 0x1}, 0x0, 0x0, 0x0, 0x0, 0xa, 0xfffffff0, 0xf0ffffffffffff}}}, 0xb8}, 0x1}, 0x0) 00:16:09 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) write$rdma_cm(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="0c6e81a783c37de3936452260008520020", @ANYPTR=&(0x7f00000004c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00']], 0x10) close(r0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0x6e) tkill(r1, 0x4) listen(r3, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)="e91f7189591e9233614b00", 0x80, 0x102) getsockopt$inet6_tcp_int(r4, 0x6, 0x3f, &(0x7f00000000c0), &(0x7f0000000100)=0x4) connect$unix(r2, &(0x7f0000932000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) tkill(r1, 0x1000000000016) 00:16:09 executing program 4: pipe2(&(0x7f0000989000)={0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) mount(&(0x7f0000434ff8)='./file0\x00', &(0x7f0000abf000)='./file0\x00', &(0x7f0000f4c000)='jfs\x00', 0x1023402, 0x0) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000001200), 0x3000, &(0x7f0000001280)) unlink(&(0x7f00003b3000)='./file0\x00') dup2(r0, r1) 00:16:09 executing program 2: r0 = socket$inet(0x10, 0x806, 0x81) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0) 00:16:09 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="295ed277a4200100360070") mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) rmdir(&(0x7f0000000340)='./file0//ile0\x00') r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) fstat(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r2) mkdir(&(0x7f0000000100)='./.ile0//ile0\x00', 0x0) 00:16:09 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x10, 0x3, 0x6) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 00:16:09 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[0xfeffffff], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) r2 = socket(0x11, 0x100000803, 0x0) r3 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={"6966623000faffffffffffffff00", 0x12}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'ifb0\x00', 0xa201}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@dev={0xfe, 0x80, [0x0, 0xf5ffffff00000000]}, 0x0, 0x0, 0x2}, 0x20) 00:16:09 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="295ed277a4200100360070") mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) rmdir(&(0x7f0000000340)='./file0//ile0\x00') r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) fstat(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r2) mkdir(&(0x7f0000000100)='.//ile0//ile0\x00', 0x0) 00:16:09 executing program 2: r0 = socket$inet(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0) r1 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x7, 0x2) ioctl$VT_RESIZE(r1, 0x5609, &(0x7f0000000080)={0x8000, 0xee, 0x8}) ioctl$SG_SET_KEEP_ORPHAN(r1, 0x2287, &(0x7f00000000c0)=0x3ff) 00:16:09 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f760070") sendmsg$nl_xfrm(r0, &(0x7f0000001440)={&(0x7f0000000000)={0x10, 0x4170000}, 0x349, &(0x7f0000001400)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x0, 0x0, {{@in=@multicast1=0xe0000001, @in6=@mcast2={0xff, 0x2, [0x0, 0xfffffffc], 0x1}, 0x0, 0x0, 0x0, 0x0, 0xa, 0xfffffff0, 0xf0ffffffffffff}}}, 0xb8}, 0x1}, 0x0) [ 299.133531] netlink: 24 bytes leftover after parsing attributes in process `syz-executor7'. 00:16:09 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x10, 0x3, 0x6) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e280000281100ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 00:16:09 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) write$rdma_cm(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="0c000000080000fa", @ANYPTR=&(0x7f0000000040)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000031000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d5a8dcf75370fbbb2388b0f6e6215f01aed21f58b8f551f5a0a4b5bdb166446732ad8eff8bcc8c76882c0f7b2c784b5400000000000000000000"]], 0x10) close(r0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0x6e) listen(r2, 0x0) connect$unix(r2, &(0x7f0000932000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) tkill(r1, 0x1000000000016) 00:16:09 executing program 2: r0 = socket$inet(0x10, 0x3, 0x6) recvfrom(r0, &(0x7f0000000040), 0x0, 0x10000, 0x0, 0x0) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0) 00:16:10 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[0xfeffffff], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) r2 = socket(0x11, 0x100000803, 0x0) r3 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={"6966623000faffffffffffffff00", 0x12}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'ifb0\x00', 0xa201}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@dev={0xfe, 0x80, [0x0, 0x10000000000]}, 0x0, 0x0, 0x2}, 0x20) 00:16:10 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x10, 0x3, 0x6) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e2800000f1100ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 00:16:11 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r2 = accept(r0, &(0x7f0000000040)=@alg, &(0x7f00000000c0)=0x80) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000100)={0x0}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000180)={r3, 0x1000, 0x7fff, 0x1, 0xfff, 0x1}, &(0x7f00000001c0)=0x14) r4 = gettid() syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) write$rdma_cm(r1, &(0x7f0000000640)=ANY=[@ANYBLOB="e373247da850e603", @ANYPTR=&(0x7f00000004c0)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000cd5b4f449d34204a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"]], 0x10) close(r1) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) bind$unix(r6, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0x6e) listen(r6, 0x0) connect$unix(r5, &(0x7f0000932000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000200)=[{0xf, 0xfffffffffffffff7}, {0x2, 0x5}, {0xe, 0x3}, {0x2, 0x6}, {0x2, 0x100000000}, {0x0, 0x8001}, {0xb, 0x238}, {0x3, 0x2a9c}, {0x4, 0x9f}], 0x9) tkill(r4, 0x1000000000016) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f00000002c0)=[@in={0x2, 0x4e23}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, @in6={0xa, 0x4e20, 0x3, @ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0x14, 0xaa}}, 0x1}, @in6={0xa, 0x4e21, 0x1, @mcast1={0xff, 0x1, [], 0x1}, 0x8}, @in6={0xa, 0x4e21, 0x300, @mcast2={0xff, 0x2, [], 0x1}, 0x1}, @in6={0xa, 0x4e24, 0xfffffffffffffff9, @mcast2={0xff, 0x2, [], 0x1}, 0x5}, @in={0x2, 0x4e20, @loopback=0x7f000001}], 0xa0) 00:16:11 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f760070") sendmsg$nl_xfrm(r0, &(0x7f0000001440)={&(0x7f0000000000)={0x10, 0x4170000}, 0x349, &(0x7f0000001400)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x0, 0x0, {{@in=@multicast1=0xe0000001, @in6=@mcast2={0xff, 0x2, [0x0, 0x300000000000000], 0x1}, 0x0, 0x0, 0x0, 0x0, 0xa, 0xfffffff0, 0xf0ffffffffffff}}}, 0xb8}, 0x1}, 0x0) 00:16:11 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[0xfeffffff], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) r2 = socket(0x11, 0x100000803, 0x0) r3 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={"6966623000faffffffffffffff00", 0x12}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'ifb0\x00', 0xa201}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@dev={0xfe, 0x80, [0x0, 0xf5ffffff]}, 0x0, 0x0, 0x2}, 0x20) 00:16:11 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="295ed277a4200100360070") mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) rmdir(&(0x7f0000000340)='./file0//ile0\x00') r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) fstat(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r2) mkdir(&(0x7f0000000100)='./f.le0//ile0\x00', 0x0) 00:16:11 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x10, 0x3, 0x6) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e2800000b1100ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 00:16:11 executing program 2: open$dir(&(0x7f0000000040)='./file0\x00', 0x10000, 0x72) r0 = socket$inet(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0) 00:16:11 executing program 4: pipe2(&(0x7f0000989000)={0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) mount(&(0x7f0000434ff8)='./file0\x00', &(0x7f0000abf000)='./file0\x00', &(0x7f0000f4c000)='jfs\x00', 0x1023402, 0x0) syz_mount_image$vfat(&(0x7f0000000040)="76666174f0", &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000001200), 0x3000, &(0x7f0000001280)) unlink(&(0x7f00003b3000)='./file0\x00') dup2(r0, r1) 00:16:11 executing program 5: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/autofs\x00', 0x200, 0x0) ioctl$ASHMEM_GET_PROT_MASK(r0, 0x7706, &(0x7f0000000400)) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x100000000000000, @thr={&(0x7f0000000180)="36b2c88177de65239f93ded3eae6be9a388f5a3587deae7132b3d087e849cc8d2135e063c1fe7609d29f7a6a098ea15b192214acb4f0923e56f37ed3381358918e84d271fefd712c9436f6cbee5b65968f91add8b80df267a49ef08b88b99eefde5222e978e7e848a57a32fa06cced998ec0a08f85302a7b1650ed7e4f653f4c18517340947c505ee2befd309047e655f559c9808b6b6aff2932b6d2bb17b68f045853ffc096321f23b517fd3977", &(0x7f0000000240)="3687a9861e142afcd0984f8e0f3758ea14df97cc5b3b061a2b7e3274601a5ec56846220861d0cf0616e1939e1012bc301b4647e4f200829efb5e1ddb3c5aaf88ab590d55192e3494359e558cab15d7a79a70639ffd29ea05c5d120cf96d4982163ef37328db9f8b8b3f328f2fb33e750dcd853bc3bf7026da15c44b0ff89ca4b56347f74cf655331cd0cf72d788f01232ce756bcbcb27f2fcfa0b3f425c91176fa00f353fc536d7d3ced4858ccc672322afcf1fcb2"}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) write$rdma_cm(r1, &(0x7f0000000640)=ANY=[@ANYBLOB="ffffff7f00000000", @ANYPTR=&(0x7f00000004c0)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"]], 0x10) close(r1) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) accept4$inet(r3, 0x0, &(0x7f00000000c0), 0x80800) bind$unix(r4, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0x6e) r5 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x80, 0x0) ioctl$KDGETMODE(r5, 0x4b3b, &(0x7f0000000080)) listen(r4, 0x0) connect$unix(r3, &(0x7f0000000740)=@file={0x1, "e91f7189591e9233614b00"}, 0x6e) recvfrom$llc(r5, &(0x7f0000000680)=""/172, 0xac, 0x1, &(0x7f0000000440)={0x1a, 0x206, 0x1ff, 0x6, 0x1, 0x8, @random="86d5cb49d4a1"}, 0x10) tkill(r2, 0x1000000000016) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, &(0x7f0000000300)={0x0, 0x2, 0x30}, &(0x7f0000000340)=0xc) setsockopt$inet_sctp6_SCTP_CONTEXT(r5, 0x84, 0x11, &(0x7f0000000380)={r6, 0x7}, 0x8) 00:16:11 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f760070") sendmsg$nl_xfrm(r0, &(0x7f0000001440)={&(0x7f0000000000)={0x10, 0x4170000}, 0x349, &(0x7f0000001400)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x0, 0x0, {{@in=@multicast1=0xe0000001, @in6=@mcast2={0xff, 0x2, [0x0, 0xf000], 0x1}, 0x0, 0x0, 0x0, 0x0, 0xa, 0xfffffff0, 0xf0ffffffffffff}}}, 0xb8}, 0x1}, 0x0) 00:16:11 executing program 2: r0 = socket$inet(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x42) ioctl$EVIOCSABS0(r1, 0x401845c0, &(0x7f0000000080)={0xfffffffffffffff7, 0x8001, 0x9, 0xff, 0x4, 0x9}) ioctl$TCSETAF(r1, 0x5408, &(0x7f00000000c0)={0xfffffffffffffffc, 0x5, 0x2, 0x1, 0x5, 0x0, 0x80000001, 0x0, 0x1}) r2 = mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000005, 0x100010, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000300)={0x44, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0163404003000000000000003b0b0000000000000000000011000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000140)=ANY=[@ANYBLOB='O*hs\n\x00\x00\x00', @ANYRES64=r2, @ANYBLOB="0100000000000000"], @ANYPTR=&(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x9e, 0x0, &(0x7f0000000240)="dca97f385d152e8f56ec06900a2f0a6f6649d8f49b313a01711b9ccd8fa63828fd82c4cc911bfe2dede459680c51ffded0f236802474c708f41f733177e1018586664d946d151662497479c1ddf0cfecd93178524516b265c16a96c93138e6df70a3d002c8079faa6edc7e04309c315c81403b246238d2bd158c8173d88200d70c5aa2f17be62b4d7c6f0739df831a47579d900db1db66b56439771916a3"}) accept(r0, &(0x7f0000000340)=@nfc_llcp, &(0x7f00000003c0)=0x80) 00:16:11 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x10, 0x3, 0x6) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e280000061100ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 00:16:11 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="295ed277a4200100360070") mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) rmdir(&(0x7f0000000340)='./file0//ile0\x00') r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) fstat(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r2) mkdir(&(0x7f0000000100)='./f/le0//ile0\x00', 0x0) 00:16:11 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) write$rdma_cm(r0, &(0x7f0000000640)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f00000004c0)}}, 0x10) close(r0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0x6e) listen(r3, 0x0) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0x0, 0x0) getsockname$netrom(r4, &(0x7f00000000c0), &(0x7f0000000100)=0x10) r5 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x7, 0x2000) setsockopt$IP_VS_SO_SET_FLUSH(r5, 0x0, 0x485, 0x0, 0x0) connect$unix(r2, &(0x7f0000932000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) tkill(r1, 0x1000000000016) 00:16:12 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x6, &(0x7f0000000640)="025cc8000200008f760470406d34dde6b9cb2c371c8a908a4b2ba2ebe6cc00260b3984466fcf3b0497b3cbda0ffaaea01c5a853f447ca57522562432b891fe5fa411cd883742cc15e3b3f9c373aa92470dee821fd12b0d90d4d25abd8d1e132b") r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r2 = gettid() bpf$OBJ_GET_PROG(0x7, &(0x7f0000000440)={&(0x7f0000000080)="e91f7189591e9233614b00", 0x0, 0x10}, 0x10) timer_create(0x6, &(0x7f00000002c0)={0x0, 0x6, 0x6, @thr={&(0x7f00000000c0)="557e239afb73eebd8057369da36ae4c3ec8d9a47474ec14c534e83e9a203a1d4b8470a11fce159a26b2257418d7ab5657f9b25de898e5bee5fb9d70141364bf87d5c92c0092cd3fef7c0772c81d5758083e38171f659c32e13946cef21e568157f7fb617ae20e2fdd19ef49f53d7ee7c12be79504217bbf1859bad7351544f285de3d767db32eacc8eabd76afdea3ec6f9", &(0x7f0000000180)="da65856aa2cf0a8e728c10c7b1081eab2c80c3f379108dc76956c8e83795153c9255714cb154a05a9755478f634ca753a1883cfcef4167abf0dbdf2c0f66f26d7956ddc41ac2e448c0fce3645a5ecca23ca85e26370722365d98ab66a89a6017010229b5ec0bb2e599f1f5ce1e144f2749d97b7dc6c7b374dad5ed74c83ab80409bef28a2180098274e2a32e441546c8460929602fb7670d47d78a95e3bd96672fcd222d7599d4cb2e3db83936ea2587356245391b6fbc1c4c8adc941d7390382d91507c4c4bec"}}, &(0x7f0000000300)=0x0) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) timer_settime(r3, 0x1, &(0x7f0000000380)={{r4, r5+30000000}}, &(0x7f00000003c0)) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) write$rdma_cm(r1, &(0x7f0000000700)=ANY=[@ANYBLOB="0000080000fa0000b4307120442dfbcc67433a6f292ad8c7a0f788c98ba6190c100bc1f6a06230416a3a9fc837114193bc46494695f7b3164201b43883dedbedb2e1092828be53da067570f3482e5ff5714cf8f0f7d021e53f0784021adacc267450c7d20078cfd4c66e964e3b502996eb50380f1eebee2f69ed239dcc6f70a2f8051193ea81003a63db123ef3c4610b6cbb895acb07cd6c9c006775e69b1336aa288f084d846ba1742b7acdc1eb87e1e76a9fe8", @ANYPTR=&(0x7f00000004c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00']], 0x10) close(r1) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) bind$unix(r7, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0x6e) listen(r7, 0x0) connect$unix(r6, &(0x7f0000932000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) tkill(r2, 0x1000000000016) 00:16:12 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[0xfeffffff], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) r2 = socket(0x11, 0x100000803, 0x0) r3 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={"6966623000faffffffffffffff00", 0x12}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'ifb0\x00', 0xa201}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@dev={0xfe, 0x80, [0x0, 0x1000000]}, 0x0, 0x0, 0x2}, 0x20) 00:16:12 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f760070") sendmsg$nl_xfrm(r0, &(0x7f0000001440)={&(0x7f0000000000)={0x10, 0x4170000}, 0x349, &(0x7f0000001400)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x0, 0x0, {{@in=@multicast1=0xe0000001, @in6=@mcast2={0xff, 0x2, [0x0, 0x4], 0x1}, 0x0, 0x0, 0x0, 0x0, 0xa, 0xfffffff0, 0xf0ffffffffffff}}}, 0xb8}, 0x1}, 0x0) 00:16:12 executing program 2: r0 = fcntl$getown(0xffffffffffffffff, 0x9) r1 = gettid() r2 = dup2(0xffffffffffffffff, 0xffffffffffffff9c) r3 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/zero\x00', 0x8000, 0x0) r4 = signalfd(0xffffffffffffffff, &(0x7f0000000200)={0x4}, 0x8) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, r2, &(0x7f0000000240)={r3, r4, 0x9}) r5 = socket$inet(0x10, 0x3, 0x9) sendmsg(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0) ioctl$sock_inet_SIOCDELRT(r5, 0x890c, &(0x7f0000000080)={0x9, {0x2, 0x4e22, @local={0xac, 0x14, 0x14, 0xaa}}, {0x2, 0x6, @rand_addr=0x38}, {0x2, 0x4e21, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x8, 0x0, 0x3, 0x1, 0xb7, &(0x7f0000000040)='bridge0\x00', 0x4, 0x401, 0x29}) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r5, 0x84, 0x16, &(0x7f0000000280)=ANY=[@ANYBLOB="0747d1a843000044cfef5da75777fb72f80040db09"], &(0x7f0000000180)=0x12) 00:16:12 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="295ed277a4200100360070") mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) rmdir(&(0x7f0000000340)='./file0//ile0\x00') r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) fstat(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r2) mkdir(&(0x7f0000000100)='./file0///le0\x00', 0x0) 00:16:12 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x10, 0x3, 0x6) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e2800000a1100ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 00:16:12 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) write$rdma_cm(r0, &(0x7f0000000040)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f00000004c0)}}, 0x10) close(r0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0x6e) listen(r3, 0x0) connect$unix(r2, &(0x7f0000932000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r3, 0x2) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x40000, 0x0) ioctl$TCSETAF(r4, 0x5408, &(0x7f00000000c0)={0x0, 0x3, 0x7, 0x6, 0x3, 0x7, 0xfffc000000000000, 0xfffffffffffffff7, 0x20, 0xb659}) tkill(r1, 0x1000000000016) 00:16:12 executing program 4: pipe2(&(0x7f0000989000)={0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) mount(&(0x7f0000434ff8)='./file0\x00', &(0x7f0000abf000)='./file0\x00', &(0x7f0000f4c000)='jfs\x00', 0x1023402, 0x0) syz_mount_image$vfat(&(0x7f0000000040)='vfatl', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000001200), 0x3000, &(0x7f0000001280)) unlink(&(0x7f00003b3000)='./file0\x00') dup2(r0, r1) 00:16:13 executing program 2: r0 = socket$inet(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e", 0x24}], 0x1, 0x0, 0x33a}, 0x0) epoll_pwait(0xffffffffffffffff, &(0x7f0000000040)=[{}, {}, {}, {}], 0x4, 0x9, &(0x7f0000000080)={0x2}, 0x8) 00:16:13 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x10, 0x3, 0x6) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e280000051100ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 00:16:13 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x300, 0x0) ioctl$EVIOCRMFF(r2, 0x40044581, &(0x7f0000000080)=0x5) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) write$rdma_cm(r1, &(0x7f0000000640)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f00000004c0)}}, 0x10) close(r1) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) bind$unix(r5, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0x6e) ioctl$DRM_IOCTL_AGP_ALLOC(r4, 0xc0206434, &(0x7f00000000c0)={0x77, 0x0, 0x0, 0x8}) ioctl$DRM_IOCTL_SG_ALLOC(r0, 0xc0106438, &(0x7f0000000100)={0x2, r6}) listen(r5, 0x0) connect$unix(r4, &(0x7f0000932000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) tkill(r3, 0x1000000000016) 00:16:13 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f760070") sendmsg$nl_xfrm(r0, &(0x7f0000001440)={&(0x7f0000000000)={0x10, 0x4170000}, 0x349, &(0x7f0000001400)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x0, 0x0, {{@in=@multicast1=0xe0000001, @in6=@mcast2={0xff, 0x2, [0x0, 0xf000000], 0x1}, 0x0, 0x0, 0x0, 0x0, 0xa, 0xfffffff0, 0xf0ffffffffffff}}}, 0xb8}, 0x1}, 0x0) 00:16:13 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="295ed277a4200100360070") mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) rmdir(&(0x7f0000000340)='./file0//ile0\x00') r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) fstat(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r2) mkdir(&(0x7f0000000100)='./file0//.le0\x00', 0x0) 00:16:13 executing program 4: pipe2(&(0x7f0000989000)={0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) mount(&(0x7f0000434ff8)='./file0\x00', &(0x7f0000abf000)='./file0\x00', &(0x7f0000f4c000)='jfs\x00', 0x1023402, 0x0) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000001200), 0x3000, &(0x7f0000001280)) unlink(&(0x7f00003b3000)='./file0\x00') dup2(r0, r1) 00:16:13 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[0xfeffffff], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) r2 = socket(0x11, 0x100000803, 0x0) r3 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={"6966623000faffffffffffffff00", 0x12}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'ifb0\x00', 0xa201}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@dev={0xfe, 0x80, [0x0, 0x5]}, 0x0, 0x0, 0x2}, 0x20) 00:16:13 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) write$rdma_cm(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="2400000019005185d357e1a158b1897fd859553b95731ef9ca1cbeb3d9d94b57b46c4c9a37d1da93a78fbc746937cc284424ff477f286c405ffcd21549a2bed8599c4f0ba5e9f545a4399f932a85e1fa45f2f82bc5df8995b23b918ed30de7f9ecc36051d4470a580b273f080f3acc76ed598b5bc61f206403393c06afa3fce54578f9cff5f34f8ff9f211dbdf432e80272754ae91c501ba6f725d5474fe94e0db375f2b1a29003a0dbc6726db3d8415416d71ddcddf07ba4c7cf040c2a3a66b2a4e00000000000000", @ANYPTR=&(0x7f00000004c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00']], 0x10) close(r0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0x6e) listen(r3, 0x0) connect$unix(r2, &(0x7f0000932000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) tkill(r1, 0x1000000000016) 00:16:13 executing program 2: r0 = socket$inet(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x3f, @multicast2=0xe0000002, 0x4e23, 0x1, 'lblc\x00', 0xe, 0x3, 0x56}, 0x2c) 00:16:13 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x10, 0x3, 0x6) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e280000081100ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 00:16:13 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f760070") sendmsg$nl_xfrm(r0, &(0x7f0000001440)={&(0x7f0000000000)={0x10, 0x4170000}, 0x349, &(0x7f0000001400)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x0, 0x0, {{@in=@multicast1=0xe0000001, @in6=@mcast2={0xff, 0x2, [0x0, 0xf0ffff], 0x1}, 0x0, 0x0, 0x0, 0x0, 0xa, 0xfffffff0, 0xf0ffffffffffff}}}, 0xb8}, 0x1}, 0x0) 00:16:13 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="295ed277a4200100360070") mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) rmdir(&(0x7f0000000340)='./file0//ile0\x00') r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) fstat(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r2) mkdir(&(0x7f0000000100)="2e2f66696c65302f2f696c65300e", 0x0) 00:16:13 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) set_thread_area(&(0x7f00000000c0)={0x3, 0x20000800, 0x4000, 0x702c, 0x1, 0x2, 0x3, 0x53, 0x800, 0x7}) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) write$rdma_cm(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="0c000000080000fa", @ANYPTR=&(0x7f0000000280)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000bf0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000097460127ba64"]], 0x10) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x80000, 0x0) ioctl$SG_GET_KEEP_ORPHAN(r2, 0x2288, &(0x7f0000000240)) close(r0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0x6e) setsockopt$inet_buf(r2, 0x0, 0x2f, &(0x7f0000000100)="fd58797a138e5a7332700dab91e719b38859c364cc2c1c1932f85516b479a3ea24e70757d212590457001cecf8ed49e6a5e827c3529c0e94a8fa98a6fc39c842ebdd5d45eadb40f4eef9cfeeb00895af15f7d4ccfb7c066fc60eb72b81161bbf031ea87a972235181d95e75b671f1a49678ad2c6118bcaffce9b3ec7f0dffe0d5f64ee7541e28690f9320c4cbf1989e450dda782101f71f93b4b19875a6a93ff621d013a391fb45834df3479b8ed0a790399d98a5fae1e822f45053884c2ff1d03a6238f1c159dc08f338a5d0cf834b78181ec0a87ae71da6d6752e25534fb7c250e4ce5929f05", 0xe7) listen(r3, 0x7ff) connect$unix(r3, &(0x7f0000932000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) tkill(r1, 0x1000000000016) fcntl$getownex(r0, 0x10, &(0x7f0000000040)) 00:16:13 executing program 2: r0 = socket$inet(0x10, 0x2b8465c12f66c8d9, 0x6) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0) 00:16:13 executing program 2: r0 = socket$inet(0x10, 0x3, 0xffffffffffffffff) getsockname(r0, &(0x7f0000000080)=@pppol2tp={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @remote}}}, &(0x7f0000000180)=0x80) setsockopt$inet6_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f00000001c0)={0x303, 0x33}, 0x1) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/mixer\x00', 0x80000, 0x0) timerfd_settime(r2, 0x1, &(0x7f0000000200)={{0x0, 0x989680}}, &(0x7f0000000240)) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000040)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e", 0x24}], 0x1, 0x0, 0x0, 0x40}, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000000)) 00:16:13 executing program 2: r0 = socket$inet(0x10, 0x3, 0x4) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e", 0xfffffffffffffd27}], 0x1}, 0x0) 00:16:13 executing program 2: r0 = socket$inet(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0) 00:16:13 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r3 = socket$kcm(0x29, 0x5, 0x0) ioctl(r3, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") sendmsg(r1, &(0x7f0000000340)={&(0x7f00000002c0)=@un=@abs, 0x80, &(0x7f0000000180), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000000000001000000010000001300000000000000"], 0x18}, 0x0) bind$unix(r2, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) close(r0) connect$unix(r1, &(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x4c) r4 = socket$inet(0x10, 0x3, 0x6) sendmsg(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0) rmdir(&(0x7f00000000c0)='./file1\x00') 00:16:14 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) write$rdma_cm(r0, &(0x7f0000000640)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f00000004c0)}}, 0x10) close(r0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0x6e) listen(r3, 0x0) connect$unix(r2, &(0x7f0000932000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) fcntl$getown(r3, 0x9) tkill(r1, 0x1000000000016) 00:16:14 executing program 2: r0 = socket$inet(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='yeah\x00', 0x5) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000040)=0x0) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000080)=r1) 00:16:14 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="4000001accee6e8b464de0") r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) write$rdma_cm(r1, &(0x7f0000000640)=ANY=[@ANYBLOB="0c86775d3e157100", @ANYPTR=&(0x7f00000004c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00']], 0x10) close(r1) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0x6e) listen(r4, 0x0) connect$unix(r3, &(0x7f0000932000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) tkill(r2, 0x1000000000016) 00:16:14 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x10, 0x3, 0x6) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e280000091100ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 00:16:14 executing program 4: pipe2(&(0x7f0000989000)={0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) mount(&(0x7f0000434ff8)='./file0\x00', &(0x7f0000abf000)='./file0\x00', &(0x7f0000f4c000)='jfs\x00', 0x1023402, 0x0) syz_mount_image$vfat(&(0x7f0000000040)="76666174ff", &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000001200), 0x3000, &(0x7f0000001280)) unlink(&(0x7f00003b3000)='./file0\x00') dup2(r0, r1) 00:16:14 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[0xfeffffff], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) r2 = socket(0x11, 0x100000803, 0x0) r3 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={"6966623000faffffffffffffff00", 0x12}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'ifb0\x00', 0xa201}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@dev={0xfe, 0x80, [0x0, 0xfffffff5]}, 0x0, 0x0, 0x2}, 0x20) 00:16:14 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f760070") sendmsg$nl_xfrm(r0, &(0x7f0000001440)={&(0x7f0000000000)={0x10, 0x4170000}, 0x349, &(0x7f0000001400)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x0, 0x0, {{@in=@multicast1=0xe0000001, @in6=@mcast2={0xff, 0x2, [0x0, 0xf0ffffff], 0x1}, 0x0, 0x0, 0x0, 0x0, 0xa, 0xfffffff0, 0xf0ffffffffffff}}}, 0xb8}, 0x1}, 0x0) 00:16:14 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="295ed277a4200100360070") mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) rmdir(&(0x7f0000000340)='./file0//ile0\x00') r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) fstat(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r2) mkdir(&(0x7f0000000100)="2e2f66696c65302f2f696c65300e", 0x0) 00:16:14 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f760070") sendmsg$nl_xfrm(r0, &(0x7f0000001440)={&(0x7f0000000000)={0x10, 0x4170000}, 0x349, &(0x7f0000001400)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x0, 0x0, {{@in=@multicast1=0xe0000001, @in6=@mcast2={0xff, 0x2, [0x0, 0xa002000000000000], 0x1}, 0x0, 0x0, 0x0, 0x0, 0xa, 0xfffffff0, 0xf0ffffffffffff}}}, 0xb8}, 0x1}, 0x0) 00:16:14 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x10, 0x3, 0x6) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e280000021100ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 00:16:14 executing program 2: r0 = socket$inet(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0) r1 = syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0x5, 0x62000) mq_notify(r1, &(0x7f0000000280)={0x0, 0x1a, 0x1, @thr={&(0x7f0000000180)="418df4b3bcbc6b369a3c26c07c9bbae07a244bfd91223f26b19f312570aea8767b70b0fb7a6bcb6555cad849ec27949b09a51190733cf78712f1523615bd9f917674d462187aeef3ba16e1d361f6c31f910bd4c9294c4ec5ba3194fbb09dc6cfcf9a4866510ec3ae923283d56616c277d31885cb80bfacf5d6b4d470e555c537345ae80c3a6643b4fa070d6087e5c114fdf5d375331399c66af05bddbf8e08cb0e4078649e3fb52b9e6fd1899a9a4a6be1f42db954f145662a4a46fbb63e4630b92c79146ee0092224a374f7baf03bce0ef7f16abe40a03a", &(0x7f0000000080)="473ba19757086b46c3d24d64fa5c86959c2aff5c75442b973ee43f52b31127e25d91"}}) tee(r0, r0, 0x1, 0xa) getsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f00000000c0)={@broadcast, @multicast2, @multicast1}, &(0x7f0000000140)=0xffffffffffffffb7) 00:16:14 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="295ed277a4200100360070") mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) rmdir(&(0x7f0000000340)='./file0//ile0\x00') r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) fstat(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r2) mkdir(&(0x7f0000000100)="2e2f66696c65302f2f696c653090", 0x0) 00:16:14 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) socketpair$inet6_sctp(0xa, 0x1, 0x84, &(0x7f0000000040)) write$rdma_cm(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1a5fd5263a7dfb15026515d99cf415a23395fc91ec4300184025406760189a322dc302ba5c982a73f4e9f7694b67fd24c421b6afa05cf68b397fc90250c161dcebc3fb9efc3b21799e2ca28d319ae0e7511f35ef8355f94b945926b52bf9602b50e01263fcf97a4152d3c94cb000ed2f49d9376f66c42de5533192b667994373464da13ecc2246dcb1a826847cfb10200f3bf428a1d03e7e83c2f0ed1f450bb9c2b9201b701ecc93d413dc406721376c354a4c703b001ce53c11768e5e9f07a9e7359444ebaf9d813a108f76b71433e8fdc482fa3dfee7f605bf", @ANYPTR=&(0x7f00000004c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00']], 0x10) close(r1) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0x6e) listen(r4, 0x0) connect$unix(r3, &(0x7f0000932000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) tkill(r2, 0x1000000000016) 00:16:14 executing program 2: r0 = socket$inet(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0xfffffffffffffffe) 00:16:14 executing program 2: r0 = socket$inet(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000040)={0x0, 0x7fff, 0x9, 0xffffffff, 0x3, 0x9, 0x864, 0x2, {0x0, @in6={{0xa, 0x4e23, 0x7, @empty, 0x8}}, 0x40, 0x1, 0x0, 0x0, 0x80000001}}, &(0x7f0000000140)=0xb0) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f00000001c0)) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000180)=@sack_info={r1, 0x100000001, 0x4eb}, 0xc) 00:16:14 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x18d) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_DEL_SERVICE(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0xc0, r1, 0x20, 0x70bd2b, 0x25dfdbff, {0x3}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1f0}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffffffff}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, [@IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x1, 0x20}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x7, 0x20}}]}, @IPVS_CMD_ATTR_DEST={0x60, 0x2, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x1}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@remote={0xac, 0x14, 0x14, 0xbb}}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x40}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x6}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x3}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x2}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xdc96}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}]}, 0xc0}, 0x1, 0x0, 0x0, 0x4040080}, 0x20040000) r2 = socket$inet(0x10, 0x3, 0x6) sendmsg(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0) 00:16:15 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="295ed277a4200100360070") mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) rmdir(&(0x7f0000000340)='./file0//ile0\x00') r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) fstat(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r2) mkdir(&(0x7f0000000100)="2e2f66696c65302f2f696c653098", 0x0) 00:16:15 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x10, 0x3, 0x6) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e280000031100ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 00:16:15 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f760070") sendmsg$nl_xfrm(r0, &(0x7f0000001440)={&(0x7f0000000000)={0x10, 0x4170000}, 0x349, &(0x7f0000001400)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x0, 0x0, {{@in=@multicast1=0xe0000001, @in6=@mcast2={0xff, 0x2, [0x0, 0x1000000], 0x1}, 0x0, 0x0, 0x0, 0x0, 0xa, 0xfffffff0, 0xf0ffffffffffff}}}, 0xb8}, 0x1}, 0x0) 00:16:15 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[0xfeffffff], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) r2 = socket(0x11, 0x100000803, 0x0) r3 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={"6966623000faffffffffffffff00", 0x12}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'ifb0\x00', 0xa201}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@dev={0xfe, 0x80, [0x0, 0x200000000000000]}, 0x0, 0x0, 0x2}, 0x20) 00:16:15 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r2 = syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x0, 0x10000) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r2, 0xc0505510, &(0x7f0000000300)={0x5, 0x5, 0x638002b1, 0x10001, &(0x7f00000001c0)=[{}, {}, {}, {}, {}]}) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) write$rdma_cm(r0, &(0x7f0000000640)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f00000004c0)}}, 0x10) close(r0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0x6e) listen(r4, 0x0) connect$unix(r3, &(0x7f0000932000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) r5 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000100)='/dev/urandom\x00', 0x8000, 0x0) ioctl$EVIOCSFF(r5, 0x40304580, &(0x7f0000000140)={0x57, 0x80, 0x17, {0xe80, 0x3ff}, {0x3, 0x8}, @const={0x0, {0xc34, 0x7, 0x8, 0x1}}}) tkill(r1, 0x1000000000016) perf_event_open(&(0x7f0000000080)={0x4, 0x70, 0x100, 0x6, 0x80000000, 0x5, 0x0, 0x101, 0x0, 0xc, 0xfffffffffffffeff, 0x1000, 0x6, 0x0, 0x401, 0x9, 0x400, 0x8, 0x1, 0xfff, 0x7, 0x5, 0x0, 0x1, 0x9, 0x9, 0x4, 0x1, 0x76, 0x3, 0x80, 0x0, 0xffffffff00000000, 0x3, 0xfffffffffffffff9, 0x3, 0x1, 0x800, 0x0, 0x10001, 0x2, @perf_bp={&(0x7f0000000040), 0xa}, 0x1000, 0x2d9d, 0x5, 0x2, 0x8, 0x401, 0x1}, r1, 0x0, r3, 0x8) 00:16:15 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$inet_smc(0x2b, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) getsockopt$inet_buf(r1, 0x0, 0x4, &(0x7f0000000080)=""/144, &(0x7f0000000140)=0x90) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) write$rdma_cm(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="0c000000080000fa", @ANYPTR=&(0x7f00000004c0)=ANY=[@ANYBLOB="000000000000000000dc7410873c106f2873da783661655600000000000000000000000000000000000000000000000000000000000000000000000000002d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000018000000000000000000000000000000000000000000"]], 0x10) close(r2) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vcs\x00', 0x0, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r4, 0xc028ae92, &(0x7f00000001c0)={0x3, 0x1}) r5 = socket$unix(0x1, 0x1, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0x6e) listen(0xffffffffffffffff, 0x0) connect$unix(r5, &(0x7f0000932000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) tkill(r3, 0x1000000000016) 00:16:15 executing program 4: pipe2(&(0x7f0000989000)={0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) mount(&(0x7f0000434ff8)='./file0\x00', &(0x7f0000abf000)='./file0\x00', &(0x7f0000f4c000)='jfs\x00', 0x1023402, 0x0) syz_mount_image$vfat(&(0x7f0000000040)="76666174ff", &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000001200), 0x3000, &(0x7f0000001280)) unlink(&(0x7f00003b3000)='./file0\x00') dup2(r0, r1) 00:16:15 executing program 2: r0 = socket$inet(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x0, 0x0) sendto$llc(r1, &(0x7f0000000180)="487cb6e193c12fd6db9420f8910bb11d2dc3489eefb55f5410182d2642d113507af4ae599d0311620209655e1c98d8b3196771feea505362fa1f957176ae84d19f9003ced9668171c9a9b1b9246881a438f5b28b8fdfa10309f6142da7ba26c999a47d462d056141dbced087a2a02eb8c35c5bb5b3c27ab7bf630e58121531e1e130bfa541ec8160853d10fcdb8c26c9e72b8c755e6920c731b85f64da6faac0a2ed0f6485799b015068c04cc8c4ba2b985be44ae38724ad7724adc482f6545a36e1a6c35b262c98cdaa9ee8fb2fc76848fd18d016e0d23fef79c236", 0xdc, 0x24000000, &(0x7f0000000280)={0x1a, 0x12f, 0x191b, 0x1911823f, 0x4, 0x2}, 0x10) getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000080)=@assoc_value={0x0, 0x4}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000140)={r2, 0x46}, 0x8) setsockopt$packet_buf(r1, 0x107, 0x6, &(0x7f00000002c0)="2bcb829cf84de8c980136629feca88eb17d76118b5a92df32e0b5df3b824aaf7838571045ca5c7210867db1fb7bdaa8b1e99ceb0f5368435073a587b95bc1bcefb266555eefd27301759b12208f44fd27598addafc929ec2716c941ca088ff876a76bca674e319595d8a8c9049dcfc8c7a741a0cfc86610a21947d64b4210176f3a4dd4f134fc78e60f8b4445cce7de5b642f18dc116262abfa296cee8fa34200d", 0xa1) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8000400}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0xa0, r3, 0x410, 0x70bd28, 0x25dfdbff, {0xb}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2=0xe0000002}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0xb87c}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback={0x0, 0x1}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x6}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x3}]}, @IPVS_CMD_ATTR_DEST={0x30, 0x2, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@dev={0xfe, 0x80, [], 0x1a}}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x40}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) 00:16:15 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="295ed277a4200100360070") mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) rmdir(&(0x7f0000000340)='./file0//ile0\x00') r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) fstat(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r2) mkdir(&(0x7f0000000100)="2e2f66696c65302f2f696c653092", 0x0) 00:16:15 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x10, 0x3, 0x6) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e280000000f00ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 00:16:15 executing program 2: r0 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x7ff, 0x111040) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000001c0)={0x0, @multicast1}, &(0x7f0000000200)=0xc) r1 = socket$inet(0x10, 0xffffffffffffffff, 0x6) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @dev, @multicast1}, &(0x7f0000000080)=0xc) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0) unshare(0x10010000) bind(r1, &(0x7f0000000140)=@pppoe={0x18, 0x0, {0x3, @random="34c31172fc61", 'nr0\x00'}}, 0x80) 00:16:15 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f760070") sendmsg$nl_xfrm(r0, &(0x7f0000001440)={&(0x7f0000000000)={0x10, 0x4170000}, 0x349, &(0x7f0000001400)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x0, 0x0, {{@in=@multicast1=0xe0000001, @in6=@mcast2={0xff, 0x2, [0x0, 0x2], 0x1}, 0x0, 0x0, 0x0, 0x0, 0xa, 0xfffffff0, 0xf0ffffffffffff}}}, 0xb8}, 0x1}, 0x0) 00:16:15 executing program 2: r0 = socket$inet(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e", 0x2}], 0x1}, 0x0) 00:16:15 executing program 2: r0 = socket$inet(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000040)={0xf001, 0x8000}) 00:16:15 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000000180)='/dev/usbmon#\x00', 0xfffffffffffffff7, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x101000, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000280)={0x0, 0x1000, "e72b203d522962e4b29ec8e4594e89194c9f33294c0999d8b754c52343adab1908eed063363809418cbadf9772e3c470a050df52161afe543c6c94447bbdb38a50230cd94bae0b1f1320f6b5af144d40ed18da63ec814dcc24f6a22271df87357a9cbf669669e86814e1f10ab98e8cc1ac3ed43d9e1fa014ebc2b27285e0faa966e3f1b9fd63031ceb16faa36007e15e9acf52340764a32612f310822d8cc1b22f772b0c45fb1df42d19e08ab32c59c12b4538cd040274ff281ce6627ecb7b80d8550876920b1a264af94d95cf1df97c3c8a113d2bcc391f42296809dbc012b46128e1d92c4aed7341683032c6657ceaee4b211af4f2a57f5b93e4d3c61dcad6525af59d4b196f5f7455baf731f8a5c11d212f41bc640250f4523f4185a5aeccda73b62d58b66ed785b7c99602f6eb0a3b18acb68f0a526e52214fb59df52766dd531f9cea4ed305b79dd7f91cfb03650f180ec00d0fbf7e1c74dd4cf1df976c60af3ce5323c4e8bbae6219a245cf447fa80df3f4b2eff1fc23a4e782a620dd4392334377d48d0ee0f618e79f08cfc167be8b30b0901a729eb3b7020f379c4e2df4d99cc8d84b624308889f378c444ec0601f1f46cad88946f7b2cfa335b7f3a0bdb530d921c62bc3d8095cbd7c6273ddd14eeb757ad803e7c100a4127662968d6bc4c1911d4f975edd3c934b467c5ca3cd69ef3fcec58f99b634ed87bc682567bb0fc21a16c760bfb0189b79b42cc9d61c8b3bb54c1df443ad81208924f90f9f14f8af9ca8475f50e1bd2b3fb166bd0465182e01d095b69fb70cf7afba8eb49e6f92d76dadca377a40ce3e25bad531ee91f5f55dc33ba929eac7ee2ea97e2eb91305561e970f3721ce458379a7bf8e30b93d889eecc1506e080096447d075fc36cae31678556f8bd9a1d1c15ceed2ad2419754a517c9c0d5ba4a60937a3174d3a88c1feb91421bb4ae1f1203540b9b1fbb9b1854ddb51db1bd2abfad3fffabf89c567885e54169d756086e689c01c2b79e019f12c33304d7eeff31bacd26f8e21cfcdec1a5bc96c5577b36a4909c4c43829f1547db5fa0c68fd56f6c1751af44168e3e4ee19e086137bee0104d487ad9cb37d0124166c9e28e264088216c3a4f3693e46c66ee8293e876ee1258bcbcd83038cb5c603a4b81e7725ad740dcaccf9272aae2b0a7d9cd22ca296df7792d99408142269805cff0a89dfaaff2683a678debdab6f4b922fe858a4b0db9058ff0cc07112c5ecc0e8c45c26dedc4848d356c1c0313f5da49bbda9170c5b32dab114e2817220cbc4c2ac29576eb68354b00144b56099258153aa339dc3053a0926654849cf0e79923d30282ee3ffccac1961379ee3c29c660cc23d6ccf57c847f43f6805b3b65d74d8d7c4d9b0489794564eae179739fd2140af0d69e4a7a8e9ea76d4dad7edc284b5a8c698a6e30eeba311d1f57ed834d92a94f2f1cebb056120f5335c4f9177ad50024076215c830f9389efc00f1d86d2a91fbdad3bceaa54a1b8e12196f447ad653948c996474ff4a18ad01c9d89bf78928be7abd91439d707a3981b269b8403180020041d5c62ce0d89902ab68fe08c570094407aedcbc3e46e2c9a126c4e8fcc08fa6136ff6c894a4e96ba3b963be1ce04971021f547198e25d8a2de3b9ac69f0b8c2412b5467cc1ab42585c4fc34269ce900bb21c0aa13ed06099919354b820002916885be7259a56bba9334002ecaf21895fc85ef8b0b8ac3ac08db0d7a2468dcca1b39fccc57dbe227f7e0926e94e79a985369f1b44b970c4f86913d60b7de45616a087bef5237338d394eb0f7dce9799e6cde79cbfe65dc25743592a0ff5fd40edc5ceb5c5eae65dbcbaa4a71423b18826ffe179af8873a2e0ec424ed3519913d9590e3d38757086cd3cf1bdb302dcedb2129f0c132ccb7b24995284cce18fe1dd6c4e2e2e196f867c09407c0a1793ee2209f2e40f6ac106924eccfb7fb439659cc391b070b64ead7261815578cd5477dc86c2ca3a0d4dda4c803e3bf300452a44842fc01413b64f87cee8b83799cbae22038a481f11cabf64c2ddabc34cf3ae3b0ad9a0b01a1d8e0b08dd2684a079a4daf118b3e7325ac7cd6f1f00eab10b48673c11a6cc06796d6b00ea54725ff0a4d8fde67a7ed95f4095a049cde99677d0173bb9f4cb46fe2524928f9529b5b0821a1cdb90e55a6bbc07e10d7e4caef6c57ce69a93b6211dfca61adfc036d232690f448d15a90553eb1172181980ece78a396f9676d0fe368b391aea648e835e02f78102f728af4a4b5dbbfe75735bc8759496208aaf24fec0fafdce2caf61d381b09872b04e234cccd60e80edcc0c5709107f8c017798598116afd59fa59e72e7a06a6de55228986f4466a82ebab1161d0d24d5b66cc4dd6978d540b7cd7ee7f10358bd06c8b7abd1762252ecd037bad0cb7e655855a9a2f576f3a26902c3e0332929d69d851f46b7a078566df38c9bdadbda5da2fe36c8140363aa01cfef481b6a5c832a35f1df1c4ba69ab1f37eeb14b68e44633c291cb89ce4648c36b726838334465b329ca697b7b7e647b52adfc60a7504012b3c1515ef47e4fa2d6e37568edbdf4a4b635bde8956f18106c49ed31daf1153926827d36a1a980167f9956dc0d98adb3040c22ff44cf0f5e272d975a37f40f71a9be81edf49ca7c440af5ae437b33e0700ce755045328dd21aca1c0467e4e379b358108877ab695117d957e09f2f93c89eb3b3a6e59fda9f03eb24b41aea7a65bc2af66ab35245b30979fc930ac30e9e238400203cb5a0c995c60c45d5287ec20383d28dbb69e5d036426dcd9bd6275c217b0344442ef211e3c287df7bad94654d3ccb91921cecf3b470378619da497af4b101495429e9e0115198ca0991d983deb4166ea345ed14abf2c0d1741d6637406e9807a7a8f27d92966628e5cd4f6754f2ab29f95dd6ae82fcfb9b82229eb338504e3850f48ceab39b79f929f82ab51c5d0c7de74ab64e0f66877d1042a8f2cf2a9bd73b3e88197dec9ada97acd56212e66e6c183e11aab93f5f4917e1025528657f000edc7172a3bd07294dd0fe9028e088e70e3145fb05316b105d493f73def21927b9f933681f808cfed9f69ca3abf76745458be8c2c4f41a9cc43a6cf56a50d0d22aaab97b7f80c335f5136e00de1f83a00d1f7096e6dde105dd003d6106d0414365ba46b695b6e375c66beda0e1c98c6e319e294c09024c9e764a02b6fed421020c15088815165119c3653115c8db588ead5f96c1de9071de55e9fe54fe9bdb7893d202f090490f88c7d992c0d16fc5f741de392ebba5d8f8b64f95915bc07cb2bf602d1f78309aa9415c42721fb9a0746301118bef35521fc16cab79d30e21c6d79269fe3cc0a1f05156766b948aa46a1d73f1f39be614de1efd6fff2c8c61e9ea8cb97448a5aff69967f3b61689b4738e4e7f58662915e4d74285b4c5d6d92e561651a234f2733611627256064c28bad14a1fb2f1666c9a8787b9a0bfcef6bc1444ea0ff06c4e4290c3bc06a3ec3ed56ed27f0a2aca74faf9232a7ecf537fd8e28af19b60f2d248eab089f0b91768b8fecf1b5e9ffd9772955a248c649560720e1c2d3d373db65788e0bfbee1f53ee46441d8020201a96bdcd2036499d90b95344e193c87dad64706c4ac01d8d11986e279a249330e169b5eff25c43bd4b40a2633f01cf1337544a65ab4e2de27520ecf9c53d18fbfb6a4738ad747332102f49e5ce132ed780f5ba19ae08a3df96cc50cc4a715f0fda2260dc79dc6da2c925c030ff18499f21efa9b6e64c4f1d7b65b37c13b3c6144412219281b2c1654b215680b2932f3d0124fed01f79211c254b0790c646118bc6f8378ba554180a22363f959639d9f9c3104475cf9cc971e3b0efa25ff934f4fa566339328e46c22ec3da1e05522b731e3c2dbe7c3436f583a7e1a287606cccc032f922a3458e2c24f12b232372aef1cfc7179320dc073cbeab60de6def22141da8a91e5e61a1fc2c7699f2dcd5792c547ae8f4ad2d1742d7908b4b4e4f00a78e0b3573435a2d21a147f41392048001673dd074ca0079dc842f5984f80091f3dd1eb9ea911b3b70f395e23c82468e7e0c98a19b4a0a0128bbfb044351ebfc35f565535afefdf160961f0a70fc5475ef07669ffa0886f369023e42a3c3ead2a72fac54a310fc0856e8a75cb54d0b37d0bed828e6baa3ae5b6d925167997187845efd3ac888bda9033992c42d2fa9121babcc0e9ff25f9dc250c30e7eb5cff83b46a4ff1a75c2658f908259ba3aa4838ef363ece27594f7e20966a7c2138bb4bdd26cb05519c892a388680946bdaaaf94ff2249214804aa51b8d205cc1e528815bb7740922d2bd9f7a87ff0ae7f6cf5e7f946b5e5dfc8a065e98263c0e27f81217b030c1a9c99234e3f66b93a64045f2ecb1db73d124eeca3ad3034e5c87b045979919372bd904ad0e3a4101c57cc736d5955acc5e67f3a8e5e3ada00bda266a915ca65c1d194a792e20e3fe6d61a68a99a65d29e1a1b8b03f80547a5958f855759bd5692574b433ea9a4a282a592fd09fc791200f13ddf7d77d5a121f36606323a0611d65b2dd6bf8bb6781f7ac749077a1816e8d02b9c40cf895f0f9e8eb9ec3e0ca8877b5f0267e710f40d97fe6f192bf05ae666c4e0e0f544fe6c6e00b8c8a115f66e9536fa42035fe75a5543c8b5e1d03cd0cf3ae5b7ef8ff8cf8cce36768d37adef76600ecc88f7689c06f84c4b2500ed102ff79cbda797224fa7b461f03e5c80e773258bce28c3a068120ef2a05da8c1884fd38fa6f52109409bd0d02060c53f5a82a17b1095d9535757776dd3219125b34ec5cc087b43837e0b7ae0901602740a26887c6705f72cb7d637cfbb23fdbe12efe9d67f236d5a8d35d7c1f7b5cfd915f8473d2c4bec18daa91591ed9529322093d027c76d03299a823785db28b564a31b2dadd2135a12236782e513cbdca15ce05d5691bb8ffaca0a76fd3e6ccd7314e6c28c3360dafa5c64147dc153dd07b00e6ec904a52ab4b7f76aa59fc680946ae26f1bc88751fa4c77a6d076a1cafcb112449267d554c781cbdcc727b21c98c48d793d1e4ab3bc28799eeae2429bd79f4e13225e8f96751d6cfe3493f0241a62d394862d3f01525cf32b4354542a3ff57c6a089435d086b4f4c6cbc40c0dfedb51e276170ffe67c7eb4a64d042aae7885f2cf333e29ba572aae08c294b622352de28bc74876bf203eb0161d9d7cbe753d3c6ed65e969b70e3657584abe30185bac123716e5dca8be9195058d146c0cec64e4ebeb5d7fd2e155ae6f0b7f299befb0dda00b6c7e1f8066f5a5de30d57a4b2356bb0b0dee5bcfc6ce2bfadd309e73f087ef38a0fa75d1e5732097a33f6c8d3071c58439a77f8fece96bd77fa9705efc52ad73a947ad594af574a218d88086a8c1ed939d2872edb37ed90b7db2a057dee8041d1e4e74414814e44140c90569ef2ab90da7aac35ab6328b28eeeb2353ff507a0a6e84a30d1cdc175f844b0b8127b3747b713e6ec05cabf3e46a4b99d52c76ad0bf41d2adcf7bd7cad9548decd15369966a608cef49521c0f207ef995de86df87b2a4a37ab6af72bb129387253497be5640caabb99b74cf19f3657b35a795e9516298ad1ca1c29f8b5f37fb9672e3bb92d37ef1c438f62b5665354c78e8edff580c4b0d72958c381909ca4ddeab47de61c4feffd2bfa4786bbe1a5e0a1d39fbdc10339a6310695894ef89b428e5dc70612a5fa88aba8a66bd5667d5464d56e9e1071518129a57dd70100b1ca032f231a1a"}, &(0x7f00000012c0)=0x1008) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000001380)={0x4}, 0x4) setsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000001300)={r2, 0xa9a3, 0xfffffffffffffff9, 0x4, 0x6}, 0x14) connect$l2tp(r0, &(0x7f0000000200)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x4, 0x0, 0x3, 0x4, {0xa, 0x4e24, 0x80000001, @empty, 0x7}}}, 0x32) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cuse\x00', 0x101000, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000240)=r1, 0x4) setsockopt$inet_tcp_int(r3, 0x6, 0x1b, &(0x7f0000000140)=0x1, 0x4) r4 = memfd_create(&(0x7f0000000040)='posix_acl_access\x00', 0x1) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r4, 0x894b, &(0x7f0000000080)) r5 = socket$inet(0x10, 0x3, 0x6) sendmsg(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e", 0x24}], 0x1, 0x0, 0xffffffffffffff10}, 0x0) 00:16:15 executing program 2: r0 = socket$inet(0x10, 0x3, 0xd) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0) getresuid(&(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000140)=0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000180)={{{@in6=@loopback, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@broadcast}}, &(0x7f0000000280)=0xe8) r3 = getegid() stat(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000940)='/dev/vsock\x00', 0x0, 0x0) getresuid(&(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000480)) ioctl$BLKRRPART(r5, 0x125f, 0x0) getsockopt$bt_BT_SECURITY(r5, 0x112, 0x4, &(0x7f0000000980), 0x2) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000008c0)=@broute={'broute\x00', 0x20, 0x3, 0x540, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000380], 0x0, &(0x7f0000000040), &(0x7f00000009c0)=ANY=[@ANYBLOB="0000000000000000000000000004000000000000000000000000000000ffffffff01000000150000002000000088a876657468315f746f5f7465616d000000766574683100000000000000000000007465616d5f736c6176655f3000000000735c7a5f74756e000000000000000000ffffffffffffff00ff0000ffaaaaaaaaaabbff0000000028010000780100006f776e657200000000000000000000000000000000000098e5f1c499c6e9357300000000000000000018000000000000000000000000000000000000", @ANYRES32=r1, @ANYRES32=r2, @ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="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"]}, 0x5b5) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r5, 0x84, 0x65, &(0x7f0000000380)=[@in={0x2, 0x4e22, @rand_addr=0x6}, @in={0x2, 0x4e22, @multicast1=0xe0000001}, @in6={0xa, 0x4e24, 0x6, @mcast2={0xff, 0x2, [], 0x1}}, @in6={0xa, 0x4e22, 0x20, @dev={0xfe, 0x80, [], 0x1c}, 0x26}, @in6={0xa, 0x4e22, 0x1, @mcast2={0xff, 0x2, [], 0x1}, 0x401}], 0x74) [ 305.060841] Unknown ioctl 4703 [ 305.080111] Unknown ioctl 4703 00:16:15 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[0xfeffffff], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) r2 = socket(0x11, 0x100000803, 0x0) r3 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={"6966623000faffffffffffffff00", 0x12}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'ifb0\x00', 0xa201}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@dev={0xfe, 0x80, [0x0, 0x5000000]}, 0x0, 0x0, 0x2}, 0x20) 00:16:15 executing program 2: r0 = socket$inet(0x10, 0x3, 0x6) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/backup_only\x00', 0x2, 0x0) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f0000000200)=0x7ff) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0) 00:16:16 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x10, 0x3, 0x6) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 00:16:16 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="295ed277a4200100360070") mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) rmdir(&(0x7f0000000340)='./file0//ile0\x00') r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) fstat(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r2) mkdir(&(0x7f0000000100)='./file0//ile0\x00', 0x0) 00:16:16 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f760070") sendmsg$nl_xfrm(r0, &(0x7f0000001440)={&(0x7f0000000000)={0x10, 0x4170000}, 0x349, &(0x7f0000001400)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x0, 0x0, {{@in=@multicast1=0xe0000001, @in6=@mcast2={0xff, 0x2, [0x0, 0xf00000000000000], 0x1}, 0x0, 0x0, 0x0, 0x0, 0xa, 0xfffffff0, 0xf0ffffffffffff}}}, 0xb8}, 0x1}, 0x0) 00:16:16 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[0xfeffffff], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) r2 = socket(0x11, 0x100000803, 0x0) r3 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={"6966623000faffffffffffffff00", 0x12}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'ifb0\x00', 0xa201}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@dev={0xfe, 0x80, [0x0, 0x500]}, 0x0, 0x0, 0x2}, 0x20) 00:16:16 executing program 2: r0 = socket$inet(0x10, 0x0, 0x5) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x2080, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000240)={{0x0, @local={0xac, 0x14, 0x14, 0xaa}, 0x4e21, 0x3, 'wrr\x00', 0xe, 0x7, 0x45}, {@broadcast=0xffffffff, 0x4e20, 0x2000, 0x1d34d0cf, 0x480000000000, 0x5}}, 0x44) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000080)=0x1400, 0x4) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0) ioctl$LOOP_GET_STATUS64(r1, 0x4c05, &(0x7f0000000140)) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f00000000c0)=@req3={0x400000, 0x3f, 0xfff, 0x1f, 0xfffffffffffffffc, 0x20, 0x2}, 0x1c) setsockopt$RDS_GET_MR_FOR_DEST(r1, 0x114, 0x7, &(0x7f0000000380)={@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e20, @rand_addr=0xff}, 0x1, 0x1, 0x0, 0x4}}, {&(0x7f00000002c0)=""/85, 0x55}, &(0x7f0000000340), 0x10}, 0xa0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000480)='IPVS\x00') sendmsg$IPVS_CMD_GET_INFO(r1, &(0x7f00000005c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)=ANY=[@ANYBLOB="ac000064", @ANYRES16=r2, @ANYBLOB="00002dbd7000fbdbdf250f000000080006000600000008000600ffffffff480002000800070006000000080002004e24000014000100fe80000000000000000000000000001d0800070004000000080002004e220000080008000080000008000b000a000000080006000800000028000100080004004e220000080002000600000008000800ff0f00000c000700180000001000000008000500080000000800060001000000"], 0xac}, 0x1, 0x0, 0x0, 0x10}, 0xc000) 00:16:16 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)=0x0) timer_settime(r2, 0x400000000003, &(0x7f0000000100)={{0x0, 0x1c9c380}}, &(0x7f0000000080)) write$rdma_cm(r0, &(0x7f0000000640)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f00000004c0)}}, 0x10) close(r0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x20000, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffff9c, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xf}}}, 0x7e11e9df, 0x800, 0xe305, 0x80, 0x2}, &(0x7f00000000c0)=0x98) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000200)={r4, 0x2}, &(0x7f0000000240)=0x8) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) bind$unix(r6, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0x6e) listen(r6, 0x0) connect$unix(r5, &(0x7f0000932000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) tkill(r1, 0x1000000000016) 00:16:16 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) socket$unix(0x1, 0x2, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) write$rdma_cm(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="0c000000080000fad051d51218f7363d623925b84e14bb76f5520b3e60816cfa3cbfe7973dd8df8d2bbed151179e2a0febb29a24b4aa9b9315962ea78106b23a83f76ebef4720b9211c78f9de6f07266b485106a5cffb936ef578dfbbf13c13c1c195f0c0a61845444ff0300000000000047a15320e1101124c7ce4fd82e6ec6cfcbfdb62b6b7e767566f35258ffe3e42b50bf786f9442078a76310962b4f76f99b940e50c1d362b62d57c2cd679978734ede65170f89b", @ANYPTR=&(0x7f00000004c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00']], 0x10) close(r1) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0x6e) listen(r4, 0x0) connect$unix(r3, &(0x7f0000932000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) tkill(r2, 0x1000000000016) r5 = accept4(r0, 0x0, &(0x7f0000000040), 0x80800) setsockopt$inet_udp_encap(r5, 0x11, 0x64, &(0x7f0000000080)=0x2, 0x4) 00:16:16 executing program 4: pipe2(&(0x7f0000989000)={0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) mount(&(0x7f0000434ff8)='./file0\x00', &(0x7f0000abf000)='./file0\x00', &(0x7f0000f4c000)='jfs\x00', 0x1023402, 0x0) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f00000000c0)='//file0\x00', 0x0, 0x0, &(0x7f0000001200), 0x3000, &(0x7f0000001280)) unlink(&(0x7f00003b3000)='./file0\x00') dup2(r0, r1) 00:16:16 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f760070") sendmsg$nl_xfrm(r0, &(0x7f0000001440)={&(0x7f0000000000)={0x10, 0x4170000}, 0x349, &(0x7f0000001400)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x0, 0x0, {{@in=@multicast1=0xe0000001, @in6=@mcast2={0xff, 0x2, [0x0, 0x200000000000000], 0x1}, 0x0, 0x0, 0x0, 0x0, 0xa, 0xfffffff0, 0xf0ffffffffffff}}}, 0xb8}, 0x1}, 0x0) [ 305.750818] netlink: 24 bytes leftover after parsing attributes in process `syz-executor7'. 00:16:16 executing program 2: r0 = socket$inet(0x10, 0x3, 0x6) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x8000, 0x0) getpeername$ipx(r1, &(0x7f0000000080), &(0x7f00000000c0)=0x10) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)}, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r1, 0x800442d3, &(0x7f0000000140)={0x9721, 0x9, 0xd828, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], 'dummy0\x00'}) 00:16:16 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="295ed277a4200100360070") mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) rmdir(&(0x7f0000000340)='./file0//ile0\x00') r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) fstat(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r2) mkdir(&(0x7f0000000100)='./file0//ile0\x00', 0x0) 00:16:16 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x10, 0x3, 0x6) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e280000001110ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 00:16:16 executing program 2: r0 = socket$inet(0x10, 0x3, 0x6) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000140)={{{@in=@remote, @in=@remote}}, {{@in6=@remote}, 0x0, @in6=@ipv4}}, &(0x7f0000000040)=0xe8) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0) 00:16:16 executing program 2: r0 = socket$inet(0x10, 0x3, 0x6) dup2(r0, r0) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x88000, 0x0) ioctl$TIOCCONS(r1, 0x541d) 00:16:16 executing program 2: r0 = socket$inet(0x10, 0x6, 0x6) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x149880, 0x0) accept$netrom(r1, &(0x7f0000000080), &(0x7f00000000c0)=0x10) 00:16:16 executing program 2: r0 = socket$bt_bnep(0x1f, 0x3, 0x4) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0), 0x0, 0x0, 0x24c, 0x800000}, 0x0) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000000)=@generic={0x8, 0x9, 0x7}) 00:16:16 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCADDDLCI(r0, 0x8980, &(0x7f0000000040)={'gretap0\x00', 0x1}) r1 = socket$inet(0x10, 0x3, 0x6) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0) r2 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x3f, 0x280000) accept4$packet(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000140)=0x14, 0x800) 00:16:16 executing program 2: r0 = socket$inet(0x10, 0x2, 0x6) socketpair(0xa, 0x802, 0x8001, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000002480)={0x0, 0x8}, &(0x7f00000024c0)=0x8) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0) preadv(r0, &(0x7f0000001280)=[{&(0x7f0000000140)=""/226, 0xe2}, {&(0x7f0000000240)=""/4096, 0x1000}, {&(0x7f0000000040)}, {&(0x7f0000000080)=""/98, 0x62}, {&(0x7f0000001240)=""/57, 0x39}], 0x5, 0x0) r3 = dup3(r0, r0, 0x80000) getsockopt$IP_VS_SO_GET_VERSION(r2, 0x0, 0x480, &(0x7f0000002500), &(0x7f0000002540)=0x40) ioctl$KVM_PPC_GET_SMMU_INFO(r3, 0x8250aea6, &(0x7f0000001300)=""/205) accept4$ipx(r1, &(0x7f0000001400), &(0x7f0000001440)=0x10, 0x80000) 00:16:16 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[0xfeffffff], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) r2 = socket(0x11, 0x100000803, 0x0) r3 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={"6966623000faffffffffffffff00", 0x12}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'ifb0\x00', 0xa201}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@dev={0xfe, 0x80, [0x0, 0x0, 0xf5ffffff00000000]}, 0x0, 0x0, 0x2}, 0x20) 00:16:16 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f760070") sendmsg$nl_xfrm(r0, &(0x7f0000001440)={&(0x7f0000000000)={0x10, 0x4170000}, 0x349, &(0x7f0000001400)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x0, 0x0, {{@in=@multicast1=0xe0000001, @in6=@mcast2={0xff, 0x2, [0x0, 0x9effffff], 0x1}, 0x0, 0x0, 0x0, 0x0, 0xa, 0xfffffff0, 0xf0ffffffffffff}}}, 0xb8}, 0x1}, 0x0) 00:16:16 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x10, 0x3, 0x6) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e280000001106ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 00:16:17 executing program 4: pipe2(&(0x7f0000989000)={0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) mount(&(0x7f0000434ff8)='./file0\x00', &(0x7f0000abf000)='./file0\x00', &(0x7f0000f4c000)='jfs\x00', 0x1023402, 0x0) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f00000000c0)='./.ile0\x00', 0x0, 0x0, &(0x7f0000001200), 0x3000, &(0x7f0000001280)) unlink(&(0x7f00003b3000)='./file0\x00') dup2(r0, r1) 00:16:17 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="295ed277a4200100360070") mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) rmdir(&(0x7f0000000340)='./file0//ile0\x00') r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) fstat(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r2) mkdir(&(0x7f0000000100)="2e2f66696c65302f2f696c6530ff", 0x0) 00:16:17 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) write$rdma_cm(r0, &(0x7f0000000640)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f00000004c0)}}, 0x10) close(r0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0x6e) listen(r3, 0x0) connect$unix(r2, &(0x7f0000932000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) r4 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x9, 0x20000) getsockopt$inet6_dccp_int(r4, 0x21, 0xb, &(0x7f0000000080), &(0x7f00000000c0)=0x4) tkill(r1, 0x1000000000016) 00:16:17 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) write$rdma_cm(r1, &(0x7f0000000640)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f00000004c0)}}, 0x10) close(r1) r3 = socket$unix(0x1, 0x2, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0x6e) listen(r4, 0x0) connect$unix(r3, &(0x7f0000932000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) tkill(r2, 0x1000000000016) 00:16:17 executing program 2: r0 = socket$inet(0x10, 0x3, 0x6) setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x0, 0x48a, &(0x7f0000000040)={0xfffffffffffffffa, 0x0, 0xffffffffffff1e5f}, 0xc) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000140)={'filter\x00', 0x7, 0x4, 0x478, 0x140, 0x0, 0x140, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000080), {[{{@arp={@empty, @broadcast=0xffffffff, 0xffffffff, 0xffffffff, @mac, {[0xff, 0xff, 0x0, 0x0, 0x0, 0xff]}, @empty, {[0xff, 0x0, 0x0, 0xff, 0xff, 0xff]}, 0x100000001, 0x2, 0x7, 0xbfb, 0xff, 0x3f, 'bridge_slave_1\x00', 'bridge_slave_0\x00', {0xff}, {0xff}, 0x0, 0x2}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @dev={0xac, 0x14, 0x14, 0x19}, @broadcast=0xffffffff, 0x0, 0x1}}}, {{@uncond, 0xf0, 0x130}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x4, 0x7, 0x1f}}}, {{@uncond, 0xf0, 0x120}, @unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x5, 0x6, 0x1efe4cf24000, 0x1}}}], {{[], 0xc0, 0xe8}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x4c8) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0) 00:16:17 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f760070") sendmsg$nl_xfrm(r0, &(0x7f0000001440)={&(0x7f0000000000)={0x10, 0x4170000}, 0x349, &(0x7f0000001400)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x0, 0x0, {{@in=@multicast1=0xe0000001, @in6=@mcast2={0xff, 0x2, [0x0, 0xfcffffff], 0x1}, 0x0, 0x0, 0x0, 0x0, 0xa, 0xfffffff0, 0xf0ffffffffffff}}}, 0xb8}, 0x1}, 0x0) 00:16:17 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x10, 0x3, 0x6) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e280000001102ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 00:16:17 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[0xfeffffff], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) r2 = socket(0x11, 0x100000803, 0x0) r3 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={"6966623000faffffffffffffff00", 0x12}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'ifb0\x00', 0xa201}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@dev={0xfe, 0x80, [0x0, 0x0, 0x200000000000000]}, 0x0, 0x0, 0x2}, 0x20) 00:16:17 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x10, 0x3, 0x6) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e280000001105ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 00:16:17 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f760070") sendmsg$nl_xfrm(r0, &(0x7f0000001440)={&(0x7f0000000000)={0x10, 0x4170000}, 0x349, &(0x7f0000001400)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x0, 0x0, {{@in=@multicast1=0xe0000001, @in6=@mcast2={0xff, 0x2, [0x0, 0xffffffffffffffff], 0x1}, 0x0, 0x0, 0x0, 0x0, 0xa, 0xfffffff0, 0xf0ffffffffffff}}}, 0xb8}, 0x1}, 0x0) 00:16:17 executing program 2: r0 = socket$inet(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/if_inet6\x00') setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0x7, &(0x7f0000000080)={0xfffffffffffffff9, 0x2, 0x200, 0x9}, 0x10) 00:16:17 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="295ed277a4200100360070") mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) rmdir(&(0x7f0000000340)='./file0//ile0\x00') r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) fstat(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r2) mkdir(&(0x7f0000000100)='./file0//ile0\b', 0x0) 00:16:17 executing program 2: r0 = socket$inet(0x10, 0x3, 0x6) r1 = syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0xf29, 0x202042) ioctl$BLKPBSZGET(r1, 0x127b, &(0x7f0000000080)) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0) 00:16:18 executing program 2: r0 = socket$inet(0x10, 0x3, 0x6) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000040)={0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000080)=0x28) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000140)={r1, 0x72, "9ec6b2f05190e1cafba55810f1900c459092e1a6cbae2d6456d58696be0a5a95f0fc8260507451de0f8e524bf604d6abc00ec7fddbcc0d6ed6919f6e078cde2b08e5f653524cef6497fcb8036fdc09e7a3caeddd4dfba5ffbe9cbdf23c104d2cca5fbd3132650a6ac6950d67e156d062ef98"}, &(0x7f00000000c0)=0x7a) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0) 00:16:18 executing program 2: r0 = socket$inet(0x10, 0x10003, 0x7fb) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0) 00:16:18 executing program 2: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/self/net/pfkey\x00', 0x101000, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, &(0x7f0000000400)={0x2, 0x2, 0x7fffffff, 0x80000001, 0x0}, &(0x7f0000000440)=0x10) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000480)={r1, 0x4}, 0x8) r2 = socket$inet(0x10, 0x7, 0x1fb) accept(r2, &(0x7f0000000300)=@rc, &(0x7f0000000380)=0x80) sendmsg(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000080)=ANY=[@ANYBLOB="793847b9", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f00000000c0)=0x18) inotify_init() r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000280)='/dev/dsp\x00', 0x101000, 0x0) ioctl$KVM_SET_GSI_ROUTING(r0, 0x4008ae6a, &(0x7f00000004c0)={0x1, 0x0, [{0x9, 0x2, 0x0, 0x0, @msi={0x9, 0x1, 0x4ad}}]}) setsockopt$netlink_NETLINK_PKTINFO(r3, 0x10e, 0x3, &(0x7f00000002c0)=0x3e, 0x4) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000140)={r1, 0x2}, &(0x7f0000000180)=0xffffffffffffffd2) ioctl$sock_inet_SIOCDELRT(r2, 0x890c, &(0x7f0000000200)={0x7ff, {0x2, 0x4e20, @broadcast=0xffffffff}, {0x2, 0x4e20, @remote={0xac, 0x14, 0x14, 0xbb}}, {0x2, 0x4e21}, 0x20, 0x7, 0x5, 0x65ae, 0x40, &(0x7f00000001c0)='dummy0\x00', 0x19c, 0xc08, 0x80000001}) socketpair$inet_sctp(0x2, 0x5, 0x84, &(0x7f0000000040)) 00:16:18 executing program 4: pipe2(&(0x7f0000989000)={0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) mount(&(0x7f0000434ff8)='./file0\x00', &(0x7f0000abf000)='./file0\x00', &(0x7f0000f4c000)='jfs\x00', 0x1023402, 0x0) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f00000000c0)='.//ile0\x00', 0x0, 0x0, &(0x7f0000001200), 0x3000, &(0x7f0000001280)) unlink(&(0x7f00003b3000)='./file0\x00') dup2(r0, r1) 00:16:18 executing program 2: r0 = socket$inet(0x10, 0x3, 0x6) r1 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x2, 0x40) ioctl$DRM_IOCTL_WAIT_VBLANK(r1, 0xc018643a, &(0x7f00000000c0)={0x4000001, 0x9, 0xc}) sendmsg(r0, &(0x7f0000000080)={0x0, 0xfffffffffffffd69, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e", 0x24}], 0x0, 0x0, 0x0, 0x2}, 0xfffffffffffffffd) 00:16:19 executing program 4: pipe2(&(0x7f0000989000)={0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) mount(&(0x7f0000434ff8)='./file0\x00', &(0x7f0000abf000)='./file0\x00', &(0x7f0000f4c000)='jfs\x00', 0x1023402, 0x0) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f00000000c0)='./fi#e0\x00', 0x0, 0x0, &(0x7f0000001200), 0x3000, &(0x7f0000001280)) unlink(&(0x7f00003b3000)='./file0\x00') dup2(r0, r1) 00:16:19 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) write$rdma_cm(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="0c000000080000fa", @ANYPTR=&(0x7f00000004c0)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"]], 0x10) close(r0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0x6e) listen(r3, 0x0) connect$unix(r2, &(0x7f0000932000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) tkill(r1, 0x1000000000016) 00:16:19 executing program 2: r0 = socket$inet(0x10, 0x3, 0x6) recvfrom(r0, &(0x7f0000000480)=""/221, 0xdd, 0x12002, &(0x7f0000000580)=@ipx={0x4, 0x779, 0x0, "28e5abb56fd5", 0x1}, 0x80) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000040)="d39326ce8a84a68bb7ba15b6f7e1f2592b701fa5dcb7e4d804", 0x19}, {&(0x7f0000000080)="aec6601391cebc010e6902bcc95482b42848b995a73b68692dbbff6f42def58d79fab107d301ee3a3e2460977f1892c84eb668b8b9e69019ad6d9d2cf62021c3877eb1634d2fb8c023e0860388f6f0c04b030bba2394a4e23123f3", 0x5b}, {&(0x7f0000000140)="9daac909790170b8b76456468f60483122e7cb08", 0x14}, {&(0x7f0000000180)="7960bd0fb373d6f9336231deaad2eec513d71941823470826dc63b1071f7a6a679241d6e8c279f9c0e2929a8c9ad3f3a306958bfa45aca5b04e454a2c2e3a52c35dc5e1cba735b130a07ff104b8ff6e7c73cfad75c27fd060158dba68aeba55563b1238292c2ab7ca30137a74b2fc66013b3802e913fb93a59b0e12710512c48d9a8b360dbbe7f3c43c33d5e5c24334f791de0097cb82d7ecfd55e58991862da734583ddb6e2714b1d4a701f21d556b730fda76bb06903e50f470078487b2283a4d0ff2921", 0xc5}, {&(0x7f0000000280)="1f0b0c033da803756166c481b6e73ad43b476e61d265c34a9b2d413fafcf76e9a405db7d10717c05df38b3b630c07299d8f3999a31ae27bd0013fa5bf9d0b36e326ff356a5af5773ec050abbcfbf5e62bccd285b589f2a02d7e961d1a814a156a2a8fb97ee0dcb7acd1d37fbc4e910b7641c8728d2c28008607740791761e3a9c333b05cdc7df0f57510a4928041c3306731c2149cad6eebfa92f16c37042c09c33971609368588b0360942c162fe894f9b34c1f625e4fe3fb7d1fca270a67f34ddc6a908b94c1140c8308137eceee15e4c94a8841ee53cec9e72f3871ac09776d783c17a0e95aed0fa07e537c5f396e68dc99", 0xf3}, {&(0x7f0000000380)="40fc0282bc6e9ab5b0071fe90d30925cd94f591d9d786425f7ab3299aac3c718f49fe468bb9134a15cc4f1b8144b46bd812b245d2cfbfe41be3978a56e595e3238b9359b87741c1f5e7b71081ad28e28aba9d9c4d314e99538f41305b187861ff466bf2ba5ec9bd57d2dfc8fb2ee4a1edf1ddb6624191a91cbf4285a", 0x7c}], 0x6, 0x0, 0x0, 0x100000000}, 0x0) r1 = msgget(0x1, 0x481) r2 = getuid() stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000700)='./file0\x00', &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000007c0)=0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000800)={0x0, 0x0}) msgctl$IPC_SET(r1, 0x1, &(0x7f0000000840)={{0x7, r2, r3, r4, r5, 0x40, 0x81}, 0x9, 0x2, 0x1000, 0x1, 0x9c39, 0x3, r6, r7}) 00:16:19 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f760070") sendmsg$nl_xfrm(r0, &(0x7f0000001440)={&(0x7f0000000000)={0x10, 0x4170000}, 0x349, &(0x7f0000001400)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x0, 0x0, {{@in=@multicast1=0xe0000001, @in6=@mcast2={0xff, 0x2, [0x0, 0x0, 0xfcffffff], 0x1}, 0x0, 0x0, 0x0, 0x0, 0xa, 0xfffffff0, 0xf0ffffffffffff}}}, 0xb8}, 0x1}, 0x0) 00:16:19 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[0xfeffffff], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) r2 = socket(0x11, 0x100000803, 0x0) r3 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={"6966623000faffffffffffffff00", 0x12}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'ifb0\x00', 0xa201}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@dev={0xfe, 0x80, [0x0, 0x0, 0x2000000]}, 0x0, 0x0, 0x2}, 0x20) 00:16:19 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x80400, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(r3, 0x4010ae94, &(0x7f0000000080)={0x3, 0x7}) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) write$rdma_cm(r1, &(0x7f0000000640)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f00000004c0)}}, 0x10) close(r1) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) bind$unix(r5, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0x6e) listen(r5, 0x0) connect$unix(r4, &(0x7f0000932000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) tkill(r2, 0x1000000000016) 00:16:19 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="295ed277a4200100360070") mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) rmdir(&(0x7f0000000340)='./file0//ile0\x00') r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) fstat(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r2) mkdir(&(0x7f0000000100)='./file0//ile0\x00', 0x0) 00:16:19 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x10, 0x3, 0x6) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e280000001108ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 00:16:19 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="295ed277a4200100360070") mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) rmdir(&(0x7f0000000340)='./file0//ile0\x00') r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) fstat(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r2) mkdir(&(0x7f0000000100)='./file0//ile0\x00', 0x0) 00:16:19 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x10, 0x3, 0x6) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e280000001128ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 00:16:19 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f760070") sendmsg$nl_xfrm(r0, &(0x7f0000001440)={&(0x7f0000000000)={0x10, 0x4170000}, 0x349, &(0x7f0000001400)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x0, 0x0, {{@in=@multicast1=0xe0000001, @in6=@mcast2={0xff, 0x2, [0x0, 0x0, 0xa002], 0x1}, 0x0, 0x0, 0x0, 0x0, 0xa, 0xfffffff0, 0xf0ffffffffffff}}}, 0xb8}, 0x1}, 0x0) 00:16:19 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="295ed277a4200100360070") mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) rmdir(&(0x7f0000000340)='./file0//ile0\x00') r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) fstat(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r2) mkdir(&(0x7f0000000100)='./file0//ile0\x00', 0x0) 00:16:20 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[0xfeffffff], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) r2 = socket(0x11, 0x100000803, 0x0) r3 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={"6966623000faffffffffffffff00", 0x12}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'ifb0\x00', 0xa201}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@dev={0xfe, 0x80, [0x0, 0x0, 0x5000000]}, 0x0, 0x0, 0x2}, 0x20) 00:16:20 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f760070") sendmsg$nl_xfrm(r0, &(0x7f0000001440)={&(0x7f0000000000)={0x10, 0x4170000}, 0x349, &(0x7f0000001400)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x0, 0x0, {{@in=@multicast1=0xe0000001, @in6=@mcast2={0xff, 0x2, [0x0, 0x0, 0xf], 0x1}, 0x0, 0x0, 0x0, 0x0, 0xa, 0xfffffff0, 0xf0ffffffffffff}}}, 0xb8}, 0x1}, 0x0) 00:16:20 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x10, 0x3, 0x6) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e280000001109ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 00:16:20 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="295ed277a4200100360070") mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) rmdir(&(0x7f0000000340)='./file0//ile0\x00') r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) fstat(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r2) mkdir(&(0x7f0000000100)='./file0//ile0\x00', 0x0) 00:16:20 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f760070") sendmsg$nl_xfrm(r0, &(0x7f0000001440)={&(0x7f0000000000)={0x10, 0x4170000}, 0x349, &(0x7f0000001400)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x0, 0x0, {{@in=@multicast1=0xe0000001, @in6=@mcast2={0xff, 0x2, [0x0, 0x0, 0xfffffffffffff000], 0x1}, 0x0, 0x0, 0x0, 0x0, 0xa, 0xfffffff0, 0xf0ffffffffffff}}}, 0xb8}, 0x1}, 0x0) 00:16:20 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x10, 0x3, 0x6) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e28000000110bffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 00:16:20 executing program 4: pipe2(&(0x7f0000989000)={0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) mount(&(0x7f0000434ff8)='./file0\x00', &(0x7f0000abf000)='./file0\x00', &(0x7f0000f4c000)='jfs\x00', 0x1023402, 0x0) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f00000000c0)='./fi*e0\x00', 0x0, 0x0, &(0x7f0000001200), 0x3000, &(0x7f0000001280)) unlink(&(0x7f00003b3000)='./file0\x00') dup2(r0, r1) 00:16:20 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="295ed277a4200100360070") mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) rmdir(&(0x7f0000000340)='./file0//ile0\x00') r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) fstat(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r2) mkdir(&(0x7f0000000100)="2e2f66696c65302f2f696c65300e", 0x0) 00:16:20 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[0xfeffffff], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) r2 = socket(0x11, 0x100000803, 0x0) r3 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={"6966623000faffffffffffffff00", 0x12}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'ifb0\x00', 0xa201}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@dev={0xfe, 0x80, [0x0, 0x0, 0x2]}, 0x0, 0x0, 0x2}, 0x20) 00:16:20 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='ip6gretap0\x00', 0x10) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)=0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) write$rdma_cm(r1, &(0x7f0000000640)=ANY=[@ANYBLOB="0c000000081200fa", @ANYPTR=&(0x7f00000004c0)=ANY=[@ANYBLOB="00000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f9ffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"]], 0x10) close(r1) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) timer_settime(r3, 0x0, &(0x7f0000000080)={{}, {r4, r5+10000000}}, &(0x7f00000000c0)) r6 = socket$unix(0x1, 0x2, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) bind$unix(r7, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0x6e) listen(r7, 0x0) connect$unix(r6, &(0x7f0000932000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) tkill(r2, 0x1000000000016) 00:16:20 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) write$rdma_cm(r0, &(0x7f0000000640)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f00000004c0)}}, 0x10) close(r0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0x6e) listen(r3, 0x0) connect$unix(r2, &(0x7f0000932000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) tkill(r1, 0x1000000000016) 00:16:20 executing program 2: r0 = socket$inet(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)}, 0x0) 00:16:20 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="295ed277a4200100360070") mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) rmdir(&(0x7f0000000340)='./file0//ile0\x00') r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) fstat(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r2) mkdir(&(0x7f0000000100)="2e2f66696c65302f2f696c65300e", 0x0) 00:16:20 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x10, 0x3, 0x6) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e280000001103ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 00:16:21 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x10, 0x3, 0x6) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e28000000110fffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 00:16:21 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f760070") sendmsg$nl_xfrm(r0, &(0x7f0000001440)={&(0x7f0000000000)={0x10, 0x4170000}, 0x349, &(0x7f0000001400)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x0, 0x0, {{@in=@multicast1=0xe0000001, @in6=@mcast2={0xff, 0x2, [0x0, 0x0, 0xf00000000000000], 0x1}, 0x0, 0x0, 0x0, 0x0, 0xa, 0xfffffff0, 0xf0ffffffffffff}}}, 0xb8}, 0x1}, 0x0) 00:16:21 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="295ed277a4200100360070") mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) rmdir(&(0x7f0000000340)='./file0//ile0\x00') r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) fstat(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r2) mkdir(&(0x7f0000000100)="2e2f66696c65302f2f696c65300e", 0x0) 00:16:21 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) write$rdma_cm(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="f1e68d3d25abb7e2376cc0ed6971aa03c4a18671e63e93f1d09d29e179b32de5e7d04fafa5d98142d66a62c032f735b3a9b47e23a965e7", @ANYPTR=&(0x7f00000004c0)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e8ffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"]], 0x10) close(r0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0x6e) r4 = semget$private(0x0, 0x3, 0x20) semctl$SEM_INFO(r4, 0x1, 0x13, &(0x7f0000000040)=""/250) listen(r3, 0x0) connect$unix(r2, &(0x7f0000932000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) tkill(r1, 0x1000000000016) 00:16:21 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[0xfeffffff], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) r2 = socket(0x11, 0x100000803, 0x0) r3 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={"6966623000faffffffffffffff00", 0x12}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'ifb0\x00', 0xa201}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@dev={0xfe, 0x80, [0x0, 0x0, 0x5]}, 0x0, 0x0, 0x2}, 0x20) 00:16:21 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) write$rdma_cm(r1, &(0x7f0000000640)=ANY=[@ANYBLOB="0c000000080000fa", @ANYPTR=&(0x7f0000000040)=ANY=[@ANYBLOB="00000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f80000000000000080000000000000000000000000000000000000000000000000000000b7e46600000000000000000001000000000000000000000000000000000000323f37ec00000000000000000000000000000000000000000000000000000000000002000000000000000000000000000014000000000000a0965b1c2a70c0486c1f000000000000000000000000000000000000"]], 0x10) close(r1) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0x6e) listen(r4, 0x0) connect$unix(r3, &(0x7f0000932000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) tkill(r2, 0x1000000000016) 00:16:21 executing program 4: pipe2(&(0x7f0000989000)={0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) mount(&(0x7f0000434ff8)='./file0\x00', &(0x7f0000abf000)='./file0\x00', &(0x7f0000f4c000)='jfs\x00', 0x1023402, 0x0) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f00000000c0)='./fi+e0\x00', 0x0, 0x0, &(0x7f0000001200), 0x3000, &(0x7f0000001280)) unlink(&(0x7f00003b3000)='./file0\x00') dup2(r0, r1) 00:16:21 executing program 2: r0 = socket$inet(0x10, 0x3, 0x6) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x292000, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r1, 0xc0505510, &(0x7f00000003c0)={0xd456, 0x2, 0x3, 0x1, &(0x7f0000000340)=[{}, {}]}) r2 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x100) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000140)={{{@in6, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}}}, &(0x7f00000000c0)=0xe8) r4 = geteuid() setsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000240)={{{@in=@remote={0xac, 0x14, 0x14, 0xbb}, @in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x4e20, 0x2e, 0x4e21, 0x8001, 0xa, 0x20, 0xa0, 0x3b, r3, r4}, {0xffffffff7fffffff, 0x5e5, 0x3, 0x20, 0xfffffffffffffca9, 0x2, 0x3, 0xe916}, {0x7, 0x7, 0x6, 0x9e9}, 0x200, 0x6e6bb0, 0x3, 0x1, 0x1}, {{@in=@loopback=0x7f000001, 0x4d3, 0x33}, 0xa, @in6=@mcast1={0xff, 0x1, [], 0x1}, 0x3502, 0x4, 0x2, 0x7, 0x6, 0x2, 0xffffffff}}, 0xe8) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0) 00:16:21 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x10, 0x3, 0x6) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e28000000110affffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 00:16:21 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="295ed277a4200100360070") mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) rmdir(&(0x7f0000000340)='./file0//ile0\x00') r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) fstat(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r2) mkdir(&(0x7f0000000100)="2e2f66696c65302f2f696c653086", 0x0) 00:16:21 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f760070") sendmsg$nl_xfrm(r0, &(0x7f0000001440)={&(0x7f0000000000)={0x10, 0x4170000}, 0x349, &(0x7f0000001400)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x0, 0x0, {{@in=@multicast1=0xe0000001, @in6=@mcast2={0xff, 0x2, [0x0, 0x0, 0xa002000000000000], 0x1}, 0x0, 0x0, 0x0, 0x0, 0xa, 0xfffffff0, 0xf0ffffffffffff}}}, 0xb8}, 0x1}, 0x0) 00:16:21 executing program 2: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x40000, 0x0) ioctl$SG_EMULATED_HOST(r0, 0x2203, &(0x7f00000000c0)) ioctl$TCGETS(r0, 0x5401, &(0x7f0000000140)) r1 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x2000, 0x0) r2 = socket$inet(0x10, 0x800000003, 0x6) sendmsg(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0) ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r1, 0x800455d1, &(0x7f0000000040)) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000200)={r0, 0x28, &(0x7f0000000180)}, 0x10) 00:16:21 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x400, 0x0) ioctl$SG_SCSI_RESET(r2, 0x2284, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) write$rdma_cm(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0c000000080000fab2b140038aee66fe39f42fba15bd0a27b0efa446ae6965a3edeca7b8cd8cab158452bfcf5a1df3611c1e4fdcc12b59644b396d7d9f4b2142d8e66a0f49aae1b0e88ea5e35bfe0721821f636beefe3559f741a0416e1543e08a667fefba97a941b98ea9fa8b1c5e315044b59a73742a9b5005a7aa3599c87fa62eed92e73eb486aa45156b358374f71c858f4d4cacb98b93ed8c4b791ec708bc5a10bc45ca3b2b3e5ca228c47504dc149e903a6ab54b4fae519937d9a57cd036cb59e48d6cf367f13c8bd38656", @ANYPTR=&(0x7f00000004c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00']], 0x10) close(r0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$BLKIOOPT(r4, 0x1279, &(0x7f0000000080)) bind$unix(r4, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0x6e) listen(r4, 0x0) connect$unix(r3, &(0x7f0000932000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) tkill(r1, 0x1000000000016) 00:16:21 executing program 2: r0 = socket$inet(0x10, 0x3, 0x6) r1 = msgget(0x1, 0x2) r2 = syz_open_dev$sndpcmc(&(0x7f0000000140)='/dev/snd/pcmC#D#c\x00', 0x5, 0x202840) msgsnd(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0xa8, 0x800) setsockopt$ax25_buf(r2, 0x101, 0x19, &(0x7f0000000180)="b1340310daf5eae93cda6b8aea7566d70750ab06cf137418d295f4172c9992f38147c23e03c05f6b1987b321c3174b5e4f09456241b990ec87b845a78cf3a7f9efeaf4cd923bafdb508266ebdc1c1ec2513d98be59b869972dfa1b992d4ae17a768773296b7b602a4dfdd425a28789bc30dc6ee6c88cd359b70b0a273df5ce1263dd8e4efbdfc94a8140296298bad9c7ea2a837144393574cf0a5c647e85b70591d751e8c1ee206e1caecc9787ef3aad65dcbce891be9e0baf05e670de0ccb3b8c", 0xc1) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0) mincore(&(0x7f0000ffc000/0x3000)=nil, 0x3000, &(0x7f0000000040)=""/169) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000002c0)=0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000500)=0x0) r5 = fcntl$getown(r2, 0x9) getresuid(&(0x7f0000002140)=0x0, &(0x7f0000002180), &(0x7f00000021c0)) r7 = getgid() r8 = getpgrp(0x0) fstat(r0, &(0x7f0000002200)={0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000002280), &(0x7f00000022c0)=0x0, &(0x7f0000002300)) r11 = fcntl$getown(r2, 0x9) socketpair(0x10, 0x7, 0xfffffffffffffff9, &(0x7f0000002540)) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000002340)={0x0, 0x0}, &(0x7f0000002380)=0xc) stat(&(0x7f00000023c0)='./file0\x00', &(0x7f0000002400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$netlink(r2, &(0x7f0000002500)={&(0x7f0000000280)=@kern={0x10, 0x0, 0x0, 0x4820}, 0xc, &(0x7f0000002100)=[{&(0x7f00000004c0)=ANY=[@ANYBLOB='0YP\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r3, @ANYBLOB="180037002f6465762f736e642f70636d4323442363000000"], 0x30}, {&(0x7f0000000540)={0x1308, 0x11, 0x100, 0x70bd27, 0x25dfdbfd, "", [@typed={0x8, 0x3b, @fd=r2}, @nested={0x1c4, 0x16, [@typed={0x8c, 0x19, @binary="196d7050d46c3e0e77a74e13a140c77993b3816d3e31d27bc26ef9ab025dca2cb36dfa8e9848554df7a4d6da4581ba732410cae646587ecfb4830dd393abd8446ea8fef6f1c1ea75728a6de5b4373d9caaccfcc3c50f94b8c961a4e09b3191d17b99252fd6a9002aa1974007a52d4636e0d7602104daa1367ae25164987c6e727189b49b5e97"}, @generic="4d43aefade078dd9cadfc0a2b74aeb6af69d72dec1512b465db1b66e7cf15be34d60da1486e7326905bf79caa8962b12dd6b4f13f28ef2ab35936c", @generic="ef95ace9bb80dba7e03322287e1be67371224dd3c8598946756e3811a86fa40106dd6cc439e1391e6318f4cef9269ff21ee523f33ea2a249768c89a98990cf0e587ab3af307d6bbcf39e4606024356b3014d7a67ad7ebac87b9a56cacdcb8e3b18dd04278a988a160fd43f61a18888334a1a8adf85b69604215e002ce9a89896178e0d3c776bc1a6f4de9bf2df7067495d9fde06cd0f023412c24d54867ff6eb039e91ee7839523d9bf9b88ef3423a868e789d770a52276e6f9979913ae9ee0525a8be1b87d86886cbd6f00e6ba1ef6fb262fc3b641c178dd32560ba1a6e089306d4fcb43b7d8ec7379b24697df1fb5d415c93ce5da146d966"]}, @nested={0x74, 0x3b, [@generic="4dac90e2e8d9f4f764f3709a61b12df260a2c0ff7c47027c394812feb65c032cf2d154b69759a62714575cdce10fd31c5f83cdcfac62", @generic="741074e70f7c99d92042bf34ef1f821ed91f397db75736340b7c0919906081960aa5d31d43f8fd88bb45988526becedfbacdca4da0f3a55a3a"]}, @generic="4e5fa35d7c476e4245f4c298a25581baf4a6560c79b34a73d69e6a47bf624eebc74caf76c004edf1a80ed77bc8c544ba93b75171ad71983df1d6047ef009f347273c98877e334e78bd8c0d9a927f635fd79267beb9a9b592af33b1acf573d4e7002d8b65e13cd0e2f09b5ab338a021237f2a03c05c6879dc506d0f6043d1c1544026f125fed89d9b748be77cb93d847bf51f7331c31346a5c49779a9bf35447d467054729f", @typed={0x8, 0x22, @fd=r2}, @typed={0x8, 0x36, @pid=r4}, @generic="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"]}, 0x1308}, {&(0x7f0000001880)={0x6f0, 0x33, 0xc, 0x70bd2c, 0x25dfdbfe, "", [@nested={0x7c, 0x24, [@typed={0x4c, 0x6a, @binary="4bd7c7474143b980d178fcb20fbd2269caac71b784554df1851a649bda0439034b98ebca1a95afd32a7eb2d89c62745bd85847e3148b8846fa7f8d186e6bf2676c8a7f8ec32fd4"}, @generic="af5360bc0e6150dd2b6648144ff811a72239dee5b69a0dc633a3ceada1de63aa937a832cd98aaeb7460a59"]}, @generic="36a998a25b83d204f33ea2b19436628f438a7d1bea819e74dc72c5bb3a5e22f9e066f646b04683a618305cd03dc491767cd11a04c3a34290737e2af8ba4cc0cf1324f37701aa50ffe1364fc63034689eb9158e3c5aa2b2d46cda9637e278cd8afdaec01778dee21e0875677033f105b0b9e371c8ab9a37e9745f5b46f0a86ab8af92b7d5c57f84eaf871bb411c8918b5e7", @typed={0x4, 0x2}, @nested={0x248, 0x7e, [@typed={0x8, 0x93, @u32=0x2}, @generic="e0ee2cf17fb4cea81f3849b81df8ba1441525d22f85b316341f0655311ecf5fe173639e9df89b93315a6cd9b4b68632901d5c408fa80a104496646b33b79eb670e4a9bfa0bbf961ed081754ecea7efa318207869a04065d9112669b8695c489582e75c2d945acb884ea0bc3dce4ab58d22b18923b351e47a8e0d5519f8c1abeee1214ba5b537147288059b580cff6d031774dd8a17b6bb07de83f3b2e9c63117a9a49e898b8ac1", @typed={0x14, 0x51, @ipv6}, @typed={0x8, 0x18, @fd=r0}, @generic="7aca0c3f8ff65c66c8e95a97a1aa62481daf03c1db44f77fe501994c633068e3a1b20acf726c44c29d793c1107cdefd9c6c070bfa824ada8b821e7077eebc1efc475881d8c27a9d2e8465f112ee03fb88c93bfa9480f5e7a91fa32db8c62e24795f7b2f97947fe2726c8664e2a935e8210b026cbfced96784597fe78214b6aa07079", @generic="523aec6017d654efa1119534e5d6d92bcda4acf300a643511873f8d0b08355f0625720e84681cbb487ea53e6ac221efb5c3066e7ec22aa729b8301664e1999f8c9861ffd3b329f91a57b2e12d95806c113676945ec878399dda22394d0220f0e2270b99c4a8c22b5e9ae98dd2c3d1ef7fb8e0ae5770c66cbd602e5d5a49e4adf6847d1c357322a8c11abcbb3d69b4a03206cd937e2ee1e3be33ad5c748a8be0e9b140aa4d9799af6b3304a1af0783a04da0afed82cb696b4b9a25bb35cf7533875aeaa57783860e5600aca642be6bc0f92d863b5590f0aab65c9b418e7daaf51b3c80d0c48d0f85a104ddbb85139cf8292fce6443c4bba"]}, @typed={0x18, 0x8b, @str='/dev/snd/pcmC#D#c\x00'}, @nested={0x8c, 0x8e, [@generic="f5f3e22b8e8b7d34decd0314e8b37ef864165cc9ecbbbb85a476", @typed={0x8, 0x19, @ipv4=@local={0xac, 0x14, 0x14, 0xaa}}, @generic="7fe2eac0d3326f665634a229ccb250504bab47608cfce7ef1ee25e0f395a76279aaddb417639d17077d74388b537eddb2b9bb9550cc3d536fb2034", @generic="f89221a59c45db2c37f8c66c97b8cbd9302c9a887c5f2598268918d8edbe60ca8403", @typed={0x8, 0x70, @ipv4=@loopback=0x7f000001}]}, @nested={0x194, 0x10, [@generic="918ec6f46a0a90449b51bad5a4b11139cb3604ef5476ee24bc1c813ec2dd3da129d30f96d0bdc66599e38595716b75b26bf8a04d10f1b0b50daee7631ba8b5f44932ad0fa6953329c3f4ee8ec220ab3bc7549a60814e538859182f7e7d849bed609ce6908ac3297112c8f10a49ba1bb2c4c8db288aa0b95d73965997d392fc8e57dea857fcc7471d68eb0b8da2245b2e9508ee7398246613416dd084", @typed={0x8, 0x75, @str='&\x00'}, @generic="e7701d4a6f5130ca163bbf71755b0fab9c447cef7cb6dd312d430fb225bc472a275e7854756fa4c347a98ff02c884f55f3239dfea0b8fcdb9e350c7ec673b1c081e15e0cbb9bfd2495c787dc702adaf1ac213a7302b16dbae9cfd9d355950f8c12d30d4b2b10808cbf7af3332fe713c3a90dc7d61b7bfbba42c427a1f226dc0cbda6e8fa9667c9fa49d81065975c31bc6e961f4530833b2f2c94efe375300cd9b7510853d78788418ce75a0d0fdf07fd258546c52dc61617030d2ab5cc8c75d0bc119b0bf35ec9eaa98a7bdd2c1df006c9ad8a277e3537954b1f2728ae417183e3b05665ebf128f522586a43"]}, @generic="71a7ed2b7b4d2abf538ea67cfe7a957822ed57723abd2b0f36194ac5aba86e953907dc63ff75feddaefff508c3855e0e8ea4005bd9b9687199b6d1b9a4a2509f2fc1082523874aab24a5316963239ceea589964d6ab1f1094886e696987bae63d0a3dff1986732c397d27008fd15419a51c9efaaf0aaf08c9856a325e5972bcc0bad465f366e23a3a2325cc0ce6066dfda3041c693b04ca89543bf244c3919aff5e5aa6448c51b6bea05f63561e682473f8f7852e42b67d32d66dc55b5d1f234bc7649e0ce4841", @generic="283815e3b4911937f1bc4ab5813d043cc02aacf38e6ab371e5e4aba2c41b9050436d01729e8866b935a62a748f27e84a59cd0e8cc9e927772de3047491865c1ee54c59d2677d72ad6e42c5dbce7912dbe7bfab7cf719140f4ef458cb48ef38a72c12b7b6f229b0ebcba43f28009e970b738b615a59f00b1cfbdf0431b530b9b61ebdc53245"]}, 0x6f0}, {&(0x7f0000001f80)={0x150, 0x3c, 0x400, 0x70bd2b, 0x25dfdbff, "", [@typed={0xc, 0x0, @str='eth1\x00'}, @generic="e17e5825ed369645de26a68821badc65554ba2df56f369259bd4a613e7ea4bc14cec57afbcd3fdce40664bac2747cb4f3deac0ebda31d743b620e4c24000b18cd2a58bc074f360caeb55959822bdfd3fb0ab4ae07f468f83940bdfc8ce5294785b68fcf7783a26fec8d8c6b03c7fc864611cd2d09b275a59e07b136bbe646860a8045da35af6fcd87ad6adafbe547c3a3d43", @generic="a1788080ba8cfdd2134379f35b38d965a3f8f3346f8cf2e67c20059c8b38f2c8d625ab59e7b6943399c323093fd4a7f9f25e75f222756095eab6339b3aa2cbdcd4bb7360caf559ab521121626222f9b61de889d25f3e5673fcb8b4e51acf5f9fc5a95b8e6ee7dd99d3c5a54877d53462a227a4c0a060c745fccfdb5567dd67b49136f21e988f1821d88c950af79c410e17fc8f48221f52378d1cb5246f884655456a"]}, 0x150}], 0x4, &(0x7f0000002480)=[@rights={0x18, 0x1, 0x1, [r0, r0]}, @cred={0x20, 0x1, 0x2, r5, r6, r7}, @cred={0x20, 0x1, 0x2, r8, r9, r10}, @cred={0x20, 0x1, 0x2, r11, r12, r13}], 0x78}, 0x20000040) 00:16:22 executing program 2: r0 = socket$inet(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0) socketpair$inet6_dccp(0xa, 0x6, 0x0, &(0x7f0000000040)) 00:16:22 executing program 2: r0 = socket$inet(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0) ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000000080)='bridge0\x00') syz_extract_tcp_res$synack(&(0x7f0000000040), 0x1, 0x0) 00:16:22 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[0xfeffffff], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) r2 = socket(0x11, 0x100000803, 0x0) r3 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={"6966623000faffffffffffffff00", 0x12}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'ifb0\x00', 0xa201}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@dev={0xfe, 0x80, [0x0, 0x0, 0xfffffff5]}, 0x0, 0x0, 0x2}, 0x20) 00:16:22 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x10, 0x3, 0x6) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e280000001100ffffba16a0aa1c1009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 00:16:22 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f760070") sendmsg$nl_xfrm(r0, &(0x7f0000001440)={&(0x7f0000000000)={0x10, 0x4170000}, 0x349, &(0x7f0000001400)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x0, 0x0, {{@in=@multicast1=0xe0000001, @in6=@mcast2={0xff, 0x2, [0x0, 0x0, 0x100000000000000], 0x1}, 0x0, 0x0, 0x0, 0x0, 0xa, 0xfffffff0, 0xf0ffffffffffff}}}, 0xb8}, 0x1}, 0x0) 00:16:22 executing program 2: r0 = dup3(0xffffffffffffff9c, 0xffffffffffffffff, 0x80000) ioctl$DRM_IOCTL_CONTROL(r0, 0x40086414, &(0x7f0000000040)={0x0, 0x7fffffff}) r1 = socket$inet(0x10, 0x3, 0x6) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r0, 0x81785501, &(0x7f0000000140)=""/91) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc0405519, &(0x7f0000000080)={0x5, 0x4, 0x6ff, 0x7, 'syz1\x00', 0x962f}) 00:16:22 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="295ed277a4200100360070") mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) rmdir(&(0x7f0000000340)='./file0//ile0\x00') r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) fstat(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r2) mkdir(&(0x7f0000000100)="2e2f66696c65302f2f696c653093", 0x0) 00:16:22 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x10, 0x3, 0x6) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e280000001100ffffba16a0aa1c0209b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 00:16:22 executing program 1: r0 = socket(0x8, 0x80006, 0x7ee) setsockopt$packet_buf(r0, 0x107, 0x5, &(0x7f0000000040)="3b7389da092c4b04ccf372ebac84fd06b2e701151a68c1ebd92ada10d9672f43b85d6d2bd00ea21e3b31f76d29aa2a17f6506d7c83fad6b3566a5b663856a91de9782e58b1bb41753c2263d18929c2ee7b06d3ac9b512fb9fa31cfb4f7781d0570f6e8abcf9de11131161c72", 0x6c) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) write$rdma_cm(r2, &(0x7f0000000640)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f00000004c0)}}, 0x10) close(r2) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) bind$unix(r5, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0x6e) listen(r5, 0x0) connect$unix(r4, &(0x7f0000932000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) tkill(r3, 0x8) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x8002, 0x0) ioctl$DRM_IOCTL_SET_MASTER(r6, 0x641e) 00:16:22 executing program 2: r0 = socket$inet(0x10, 0x3, 0x4) getsockopt$inet_int(r0, 0x0, 0x18, &(0x7f0000000440), &(0x7f0000000400)=0x4) r1 = creat(&(0x7f0000000140)='./file0\x00', 0x2) getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000180)={0x0, 0x5, 0x4, 0x5437, 0x2, 0x4}, &(0x7f00000001c0)=0x14) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f00000002c0)={r2, 0xd920}, 0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000000200)={r2, @in={{0x2, 0x4e24, @local={0xac, 0x14, 0x14, 0xaa}}}, 0x1, 0xfffffffffffffff9, 0x1, 0xfffffffffffffc00, 0x81}, &(0x7f00000003c0)=0x98) bind$nfc_llcp(r1, &(0x7f0000000300)={0x27, 0x0, 0x2, 0x1, 0x8, 0x1, "2f436457c09adca01434895480029854dac0995a6d856aeee970d965091731a663f142c35fee594936e915840b95e07b9da22e44ede0eca9f911e3fa59ac7d", 0xb}, 0x60) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000380)={r3, 0x3}, 0x8) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000040)={'mangle\x00'}, &(0x7f00000000c0)=0x54) 00:16:22 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) write$rdma_cm(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="0c000000080000fa", @ANYPTR=&(0x7f0000000040)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8200cc8a5ae"]], 0x10) fcntl$setsig(r0, 0xa, 0x2f) close(r0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0x6e) listen(r3, 0x0) connect$unix(r2, &(0x7f0000932000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) tkill(r1, 0x1000000000016) 00:16:22 executing program 4: pipe2(&(0x7f0000989000)={0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) mount(&(0x7f0000434ff8)='./file0\x00', &(0x7f0000abf000)='./file0\x00', &(0x7f0000f4c000)='jfs\x00', 0x1023402, 0x0) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f00000000c0)='./fi-e0\x00', 0x0, 0x0, &(0x7f0000001200), 0x3000, &(0x7f0000001280)) unlink(&(0x7f00003b3000)='./file0\x00') dup2(r0, r1) 00:16:22 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="295ed277a4200100360070") mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) rmdir(&(0x7f0000000340)='./file0//ile0\x00') r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) fstat(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r2) mkdir(&(0x7f0000000100)="2e2f66696c65302f2f696c6530ff", 0x0) 00:16:22 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f760070") sendmsg$nl_xfrm(r0, &(0x7f0000001440)={&(0x7f0000000000)={0x10, 0x4170000}, 0x349, &(0x7f0000001400)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x0, 0x0, {{@in=@multicast1=0xe0000001, @in6=@mcast2={0xff, 0x2, [0x0, 0x0, 0xf0ffffffffffff], 0x1}, 0x0, 0x0, 0x0, 0x0, 0xa, 0xfffffff0, 0xf0ffffffffffff}}}, 0xb8}, 0x1}, 0x0) 00:16:22 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x10, 0x3, 0x6) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e280000001100ffffba16a0aa1c0a09b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 00:16:22 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[0xfeffffff], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) r2 = socket(0x11, 0x100000803, 0x0) r3 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={"6966623000faffffffffffffff00", 0x12}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'ifb0\x00', 0xa201}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@dev={0xfe, 0x80, [0x0, 0x0, 0x500000000000000]}, 0x0, 0x0, 0x2}, 0x20) 00:16:23 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="295ed277a4200100360070") mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) rmdir(&(0x7f0000000340)='./file0//ile0\x00') r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) fstat(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r2) mkdir(&(0x7f0000000100)='./file0//ile0\x00', 0x0) 00:16:23 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x10, 0x3, 0x6) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e280000001100ffffba16a0aa1c2809b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 00:16:23 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f760070") sendmsg$nl_xfrm(r0, &(0x7f0000001440)={&(0x7f0000000000)={0x10, 0x4170000}, 0x349, &(0x7f0000001400)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x0, 0x0, {{@in=@multicast1=0xe0000001, @in6=@mcast2={0xff, 0x2, [0x0, 0x0, 0xffffff7f00000000], 0x1}, 0x0, 0x0, 0x0, 0x0, 0xa, 0xfffffff0, 0xf0ffffffffffff}}}, 0xb8}, 0x1}, 0x0) 00:16:23 executing program 2: r0 = socket$inet(0x10, 0x3, 0x6) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x8c80, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x131218}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x94, r2, 0x400, 0x70bd2a, 0x25dfdbfc, {0x9}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x90fc}, @IPVS_CMD_ATTR_DEST={0x60, 0x2, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xffffffff}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e23}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@multicast1=0xe0000001}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x835f}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x4}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xffffffffffffffc1}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x71}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2700000}]}, 0x94}, 0x1, 0x0, 0x0, 0x45}, 0x4000) creat(&(0x7f00000002c0)='./file0\x00', 0x2) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0) openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x28080, 0x0) 00:16:23 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x5, 0x400) getsockopt$ARPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x63, &(0x7f0000000080)={'NETMAP\x00'}, &(0x7f00000000c0)=0x1e) r1 = socket$inet(0x10, 0x5, 0x6) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0) 00:16:23 executing program 2: r0 = socket$inet(0x10, 0x3, 0x6) r1 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0xfff, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r1, 0x800448d3, &(0x7f0000000140)={{0xfffffffffffffffd, 0x3, 0x9, 0xffffffffffff5f4a, 0x401, 0x7}, 0x3, 0x3f, 0x2, 0x9, 0xfffffffffffffff9, "63b9c045d41dff9987790dcffa0315447fb4adfb5d972952dd21939458625c5cd151831a6734a59944b8f055be0f3a8a73d203fba71a291ad19c749f50d2400da42ce2bfa1bc22b1dd11e65730ae6148f3419bdbc62727c1946bf85b0674fa299ca66007af7be92190afce2858f0971c10c2697995a665b86f2a36d496ef840a"}) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0) 00:16:23 executing program 2: r0 = socket$inet(0x10, 0x3, 0x6) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000040)={{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, {0x307}, 0x28, {0x2, 0x4e20}, 'erspan0\x00'}) r1 = accept4(r0, 0x0, &(0x7f00000000c0), 0x80000) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') getsockname$packet(0xffffffffffffff9c, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000000200)=0x14) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'vcan0\x00', r3}) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000004c0)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@broadcast}}, &(0x7f00000005c0)=0xe8) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000740)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000700)={&(0x7f0000000600)={0xd8, r2, 0x0, 0x70bd2d, 0x25dfdbfc, {0x1}, [{{0x8, 0x1, r3}, {0xbc, 0x2, [{0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4}}, {0x8, 0x6, r4}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x8588}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8, 0x3, 0xb}, {0x8, 0x4, 0x80000001}}, {0x8, 0x6, r5}}}]}}]}, 0xd8}, 0x1, 0x0, 0x0, 0x24000080}, 0x800) getsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f0000000280)=""/179, &(0x7f0000000340)=0xb3) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0) 00:16:23 executing program 2: r0 = socket$inet(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000040)={0x0, 0xffffffff, 0xa, [0x401, 0x5, 0x8, 0x6eed, 0x5, 0x2, 0x2, 0x1, 0x6, 0xa8d7]}, &(0x7f0000000080)=0x1c) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000140)={r1, @in6={{0xa, 0x4e24, 0x6, @ipv4={[], [0xff, 0xff], @rand_addr=0x8c}, 0x8}}}, 0x84) 00:16:23 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) write$rdma_cm(r1, &(0x7f0000000640)=ANY=[@ANYBLOB="0c080000080000fa", @ANYPTR=&(0x7f00000004c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00']], 0x10) socketpair(0x9, 0x7, 0x5, &(0x7f0000000040)={0xffffffffffffffff}) connect$pptp(r3, &(0x7f0000000080)={0x18, 0x2, {0x2, @remote={0xac, 0x14, 0x14, 0xbb}}}, 0x1e) close(r1) r4 = socket$unix(0x1, 0x1, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0x6e) listen(0xffffffffffffffff, 0x0) connect$unix(r4, &(0x7f0000932000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) io_setup(0x4, &(0x7f00000000c0)=0x0) io_cancel(r5, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x9, r1, &(0x7f0000000100)="93769ef91ce88ea6a5d29fdd1cd072055bf3f34ee0ff5c23b62f832429560975ea891ebee5aa08cce294a37c0e2fa86a5a453e3debbe0538417d3e3e17b0a371970d551595295508b39b0d4bf0ac26f2aac27d51cbc5bb19262ed2473cfdad601f8b619ed6ef306365c24beefa7b3f48", 0x70, 0x6f8c, 0x0, 0x0, r3}, &(0x7f00000001c0)) tkill(r2, 0x1000000000016) 00:16:23 executing program 2: sendmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x78, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e", 0x11}], 0x1}, 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x4000, 0x0) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000180)) 00:16:23 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) write$rdma_cm(r0, &(0x7f0000000640)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f00000004c0)}}, 0x10) close(r0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0x6e) listen(r3, 0x0) connect$unix(r2, &(0x7f0000932000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) tkill(r1, 0x1000000000016) 00:16:23 executing program 4: pipe2(&(0x7f0000989000)={0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) mount(&(0x7f0000434ff8)='./file0\x00', &(0x7f0000abf000)='./file0\x00', &(0x7f0000f4c000)='jfs\x00', 0x1023402, 0x0) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f00000000c0)='./fi.e0\x00', 0x0, 0x0, &(0x7f0000001200), 0x3000, &(0x7f0000001280)) unlink(&(0x7f00003b3000)='./file0\x00') dup2(r0, r1) 00:16:23 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x10, 0x3, 0x6) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e280000001100ffffba16a0aa1c0f09b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 00:16:23 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[0xfeffffff], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) r2 = socket(0x11, 0x100000803, 0x0) r3 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={"6966623000faffffffffffffff00", 0x12}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'ifb0\x00', 0xa201}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@dev={0xfe, 0x80, [0x0, 0x0, 0x1000000]}, 0x0, 0x0, 0x2}, 0x20) 00:16:23 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f760070") sendmsg$nl_xfrm(r0, &(0x7f0000001440)={&(0x7f0000000000)={0x10, 0x4170000}, 0x349, &(0x7f0000001400)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x0, 0x0, {{@in=@multicast1=0xe0000001, @in6=@mcast2={0xff, 0x2, [0x0, 0x0, 0xf0ffffff], 0x1}, 0x0, 0x0, 0x0, 0x0, 0xa, 0xfffffff0, 0xf0ffffffffffff}}}, 0xb8}, 0x1}, 0x0) 00:16:23 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="295ed277a4200100360070") mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) rmdir(&(0x7f0000000340)='./file0//ile0\x00') r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) fstat(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r2) mkdir(&(0x7f0000000100)='./file0//ile0\x00', 0x0) 00:16:24 executing program 2: r0 = socket$inet(0x10, 0x3, 0x6) clock_gettime(0x0, &(0x7f0000002900)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000002880)=[{{0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000000080)=""/37, 0x25}, {&(0x7f0000000140)=""/4096, 0x1000}, {&(0x7f0000001140)=""/213, 0xd5}, {&(0x7f0000001240)=""/116, 0x74}, {&(0x7f00000012c0)=""/218, 0xda}, {&(0x7f00000000c0)=""/42, 0x2a}, {&(0x7f00000013c0)=""/121, 0x79}], 0x7, &(0x7f00000014c0)=""/83, 0x53, 0x3}, 0x8}, {{&(0x7f0000001540)=@hci, 0x80, &(0x7f0000002740)=[{&(0x7f00000015c0)=""/90, 0x5a}, {&(0x7f0000001640)=""/11, 0xb}, {&(0x7f0000001680)=""/105, 0x69}, {&(0x7f0000001700)=""/4096, 0x1000}, {&(0x7f0000002700)=""/58, 0x3a}], 0x5, &(0x7f00000027c0)=""/183, 0xb7, 0x7}, 0x4}], 0x2, 0x40, &(0x7f0000002940)={r1, r2+10000000}) sendmsg(r0, &(0x7f0000000100)={0x0, 0xffffffffffffffcd, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0) r3 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x9, 0x1) ioctl$DRM_IOCTL_IRQ_BUSID(r3, 0xc0106403, &(0x7f0000002a40)={0xfd4, 0x100, 0x1, 0x8f}) getsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000002980), &(0x7f00000029c0)=0x4) setsockopt$inet_mreqsrc(r0, 0x0, 0x0, &(0x7f0000002a00)={@multicast1=0xe0000001}, 0xc) 00:16:24 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f760070") sendmsg$nl_xfrm(r0, &(0x7f0000001440)={&(0x7f0000000000)={0x10, 0x4170000}, 0x349, &(0x7f0000001400)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x0, 0x0, {{@in=@multicast1=0xe0000001, @in6=@mcast2={0xff, 0x2, [0x0, 0x0, 0xf000], 0x1}, 0x0, 0x0, 0x0, 0x0, 0xa, 0xfffffff0, 0xf0ffffffffffff}}}, 0xb8}, 0x1}, 0x0) 00:16:24 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x10, 0x3, 0x6) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e280000001100ffffba16a0aa1c0509b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 00:16:24 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="295ed277a4200100360070") mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) rmdir(&(0x7f0000000340)='./file0//ile0\x00') r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) fstat(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r2) mkdir(&(0x7f0000000100)='./file0//ile0\x00', 0x0) 00:16:24 executing program 2: r0 = socket$inet(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x101000, 0x0) ioctl$EVIOCGLED(r1, 0x80404519, &(0x7f0000000180)=""/4096) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) accept4$vsock_stream(r2, &(0x7f00000000c0)={0x28, 0x0, 0x2711, @hyper}, 0x10, 0x80000) accept4$vsock_stream(r2, &(0x7f0000000080)={0x28, 0x0, 0x2711, @hyper}, 0x10, 0x80800) 00:16:24 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) write$rdma_cm(r1, &(0x7f0000000640)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f00000004c0)}}, 0x10) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) mq_timedsend(r3, &(0x7f0000000680)="5eb872d1c2c90511aa9b5928930b27d19beb7db7100c68063d66bee8b9cea82bcb5e514732ca19cbb0f95efa7ab6c140099a8888967fafe58dfb8c761332f389087a4c54aa5722807b4b4ddef333bfa64e5429859d5b6615d4dba33f279af3da0ebdbad283abb7ba39a5275d91cc9a4dcf37dc8e4a5b05e17cc13170d711d7ca383d7588fe04266dcf96fded781426179894456a4544cd1d64c385447e64065eb51397725955b09305b32034eed951b92b7d23c9f0d71cc22abd03e0c267058f87414919fbec5141700575365706d050ce030b2e1ff89d1260ca3a90b0c717e26c66eccd3da0af11608a294360cda144586c02c29e6f629bcf5870921594dde29ab52cfde9c3f394ec2537e84d6d34792ac5f1c87adfb27e3f024d146a094849356d75a67aff886ed9e9020f1873c9d9fa7f56ca64373b10b45bc8fcdc8ce8d85d7c01ed3c6558df8f29469c8e0108e05c8dc129740195b202564bda1493c706f2505ed063bc7ea1d43e23dd980b06770bbc53bcfbcde48bee355cc3dcab8ad1a3d398ba609c642072772eebd039f88fbe06e4fc020fd34effc8c0b07ecb97affc7a3935e3b16ad87b9e12f113a82f28531d33a293b8722b4aa2fc80af84d036a49c109967e9f40550d162d580a084d6028d9c3d0d4acc509e93bba4ba7b30275a43ed954ddedd481b2cadce332dd5478bd7c0310c7b8c6e1699cba7819ee551e8c9041017b4048bf1d80b0ba0618489088c60ef7a3a8fb950054c65ba94a931278ae47c2a19b6a1afa3670f5f5903c3897dad0fa4a35dfd7db588e4d732f1250255ef8173a29967af38cf3e9e8d2f30dcb03badeb81e401927da0017a9dcf6798ce5e83f27a123f4d5b7fdee53b6562f26f076eddcbc3bb089226dcac4136d1d65d048587149994854c30d77a9eeb946b2c5c2f3a0f81f11bffee411dc4c2000a0b5b8e54248f4f994da7b4e43e71e50326ffd7904ac73eb41edd398c07823ee50ef0b64e4b72abd071008e4c49d1a06e802a5bf56dca70c682413ae7576abc1377159a4134b89be79c8034b8e093c9bc9fad33da1afb420ba0712b32398b8a5a22491987bc0f912237cdba80d25811ce0b93f4e734762f48f5b9ce73a5f10bcb52a65cdbcc7cffbec63ca36c8be5783433b90375c72b166ce93318d6773b7029754bebaf54b4be87a7f8e8b27876499105178df0d53e69bf1fcae5d27c70c9e509ad2470df15d027ca66ed6eaf17fa2c8997d963a4f952429a6fe9e72e859acf6716816e653a9da50aa13f4f751a31512c2768bcc2254ef04e490c63637748106d1a989492ee101b629c7c4326a51e8ecb34cf90e9d691a5e427bb48ab45633562f763940fec9b7cd7fc7644927f8efb39cbeb8432d760e02d35dd39d61a7474073b8bf75a8d3de7f56d1273dfe729c3f77417aa1582b764a84cffff508f9043f6d491e544f276e01e9285d46262dfa88ec5ddd2f9e859341eb77d3e5109fcaddfa5fbdedb39c600abca3a6ff77cf398678fb3a6a81c1a937a6af71f9cb33fbb22c807e15210464319b86745abbfc647eaa758673cc2cb57534e798797ca5e1395152f41f4602f42cb2b6a475606785646f8285eff9866d67330208217e03e851106c1f21946a8f6a9a9cf42eaf20e187d76ba25cb62b7522eef7971419a1c8640ad9b0b562ad486c08ce79a939354f94b1a05197894818ebb63161a128d3dedec4f264aa32923ed25c30df6ad0e37d33dd0d42f57cbf42da3b4a9b87a6455ecffbe52001dc75cad1105b07c256a86a1d037769a794ca93dd6378ad736e0f1341e86c83b3a651c040b5c313d713593b643cd65dcac83a795be571e8c57a047ee9845142844a5b8cb34ad04c60ff1777dd83b9a68a94b004842e5b191dab38f6bad02d0e75f4404b613ae23d7b26570de6956a321dd951ce7b445eaa0d13619e990042e1476cde403250ecf4be0a9986aa68afc63b824a924fc999e103862d1cafda2d4f4daff572c13179cac689015713e147b891d30b2922ac280467e5b1c846469250eda89ea5f4a17a1f1e88a2c229ece9e7049c0e9f451a55e640a5c795da76f8be42f49bb4bf4a9d1c6310dbac784c6b2cb43f66bbe5c0eaa3b7b48de9ee9bf3e3969f471ffcfe2041ed2abb68113687b15256bb8abf61e6913f36e7bf3bb69cb098989670bd9527ab17c556ebd68ee16b212cc0a012bc7a5dc82d56af5ada66175c847007e92359cb10be59b81b983c947ffa485e60111e6dbe084667fb96332f5f5e733f6b655599178037687e0c5ace56a16a9ac0313ae736742a866b3fb3be81454753a793a194d03b1dea8af6dd628fccf0203bba24d2154dd56780fa168d89d7e2454ef3608958d2cfb3959b0497d11f592d1970a363860a74b373a45f6ce9a6474cb4a91082c0644a2062bbcd062d1a6e13eaec39e39bc479dc237cd1093d17902b41fbcecb56b83b3c056cfcd8b7c961f2e7c152be9a67092cbce46b8cc11ecec15682b50952e8a605b14a4e40a9b21469fee485445b9ef32f62fae73d13ffaf27837deb8fca74767c60dc183449d0b18236ff06d8d3eba425b0c8e39b9db36b92fc539bd52ebbaa9a7c681d6b841bd75a3323bed171561d19b3f0c84e70f5c5297ebb18d0c45662636b62ffeab419f24092e412c8f716a37950ea801e74a871bb509345020a9fbf8eb3319d8e76bbbe9349298c671ed4a9f76edc3961acdb59a36b0bf685d13cc5a2fb3aa0a12239ec76739a1c7e2491c98a83b2a98a8c116aca680bbe2e89ed086b58dde67d363b64b29113532d962202e330b5ad14630b6a9064c7d0f7fe254b1444c3431c8b77a9efe4ebdcd25183d4db0622bc4a88ad4c2324518c29379bbe2d1e049d0d5fdc47f16d7e872cff14a0fc4c43ab3be94858191b68f3a3ccfe611d0c5cd1fbd9229ef441e9642c35921a50e3599a5b28d59560dcc40b69f9bf881c721be5a7caf47f4163e7074399ac958926605bb3fadb2bc4586375abfc3cbe2e503ba21aa52c70748b554c5817ac15ae2a082388835a9aafe5ca9f2a9e4df279f83245b13b45589477cae11d3f513f1a692948fa12f6b397b692e49d25789cc58fab70b96bf539b9b48979a49e2794c1393e59f00f957947ebc923240e5bfa4786ee81003bf6ac2afb92f2e4a2a46363ab1c8c67b27d9f0c5632b82358a40c8dda1e182cd1532b965a8999e645c39cdc1e6b50ccf47dcce8e3557535a521376a761aca8d69d1ca65a3c7c51223bc5f31d17d6186a3a7190c9a7df14781393513a80959c846475c32f5455c9f6836da8499ed560f03794de0e010b4cad460ce1fcde03242249ac87d323f82a5d0f2dc34f0ed98b6b699c5c5c418f06a2c3fb256d374b105661f352ab8dda7c14aff5c21194778c61a445403f266d516dc9e28768a323c6d6934ecc19efca373063263b332ebcde36496d854f803a00fc8e9fbbb728684dd05fa50f6cb756465f3329250b657f9e1af311ea874dd6a3e0b008b002439191e19f1e61c3bfe822a4ab1d55b2216fd05b8bdb20cbe40a4fd84523326a538ab03236110d825e2a9c70802ab7b6a138fc4f83b0686a2411f7b131b768806bf0c7306d0e430730fc399c77eabcb2d2fa546aec49c226151f64eff3c17b81fb7ea97b20859aa1ffd9b9779842c75c9552dbcc3a0e7b10ac64d4ab4b35b2f47dcf9d186ad6932cccce3064eb94bd4427a3abaff70bdfcdebe58ca419f1fea399deaf8830e8b23445b45ef7edd2bfeaa7ea0aa4dce384083bc8174cfac0c688dfb4351e8a93895ed56931aa8e6ff1bc0148d6532fea5b985aa569d229e5ee5cf288398e7d3d83c4bff5739bc5e63122bde3a8fa821cea96a31116092b160e29c68629f1e1fa599fdb12571ea10aea50847c19c78b491cbe6cb1920684d2bcd9d77c8284b115229c7af6dd45ec36cac5ffe22be09e708d76b1a8fcf3fa4c83b16daccebba21e4cb102bf5ad92a7dcbfb660bf0c087018cff9a623d1f5c1c622a9ae2fe14d5aff97c5644698f352afc2d4ac1f9d155104bfdcc810f44b8611f683d1720f1fef47324aa4bc831e418f698a98a9ee4f43865c88320298277613c1ff0d07949cb9d661c493c08c76a0c0f157ab149e9fac1b25a145a2d728b3e0d407f436e6f1aa012d95e04bf9bbaa209645d40a46db369a28a69211777b7706bcfc0256b1f00b7bd7f91850278ffed34fc367ef4a32bda9ac553c5983796eb54696dcd3a0aeed5c778702026c5feee28a3a052e8ce36213a800d2c7f210029728d734b52ad1657630b88a3e2f52dbf06eb96b6b2ccf13764a3d67bf26be4a7eef22d4cb28a85addc44cdf707301c1f57e8300cc6c1cd8ca59987a5a00ae1db800e8df8ec8fdfe9c44ce8bc06e83cb1cf83996b3e89eff57bde86a61caeb368944fb7fbf330e26293a92868f28f6f6f17c1a03966a3a1675f9835a1fdfae94d99628871ba0bf3384095c5bdbca06c34130e19453a66938ec47b3bae2cfc89e68e0a94232d696f9462b134cdd1c5b4529aa2925a10a97d95b1bf3e32af0bd16c978734fb580f4347966f599a86020c74b493726cd4622bdf85a9651d291c6afe91cedae507248bdd0edf79b1bd850a56d5fb53777217ed72dd0241886d2086c5760757d6717362bf800fe93ed70e90f1e673d6499e829772f0beb1f1750bdb1b1bf973cf45300975fb24984a16b85216c9abd6d64635a670438056e40033462b481e6f5afda8bc272b81acdfc34214cc2b058aa7bf77d9fba731fd7bc38abbf98aa6ff1cefef9f1192f5d463eb08e57d2d9332e3db91a06fd94451245cecdbf221846d6ff509c2ed1861578f7a2877b449ff6d7832420d8038dbf703dc19bdcf5eaef117590f158d0a1ac0a53d62268513d8cb8ef5827abb922f3343128927d4bbd8b9b24b0e9ef1ba5b0a06649424c7054011d2e04d48a8101a8f821cfe634894a563ecb5a0ff91fbcfe56de4942979130b8023cf01e53e382239a62348c31796543fc2e68cb7ff4c3b06002428c38f29d447fb4324dc0449e93100b68e7ffbc0a69942689f3a54f18143b46a75f9101752776873700ba43a4eea3081aca3a67f377910e0340a6ee9b4a17ca9ff226fcee970572833c9f6a839ae2c00c36b875a9f50dd54d5cf3c072fd4e071f04ac2e4215db2e8e12604b56970c7cfd0b0d3705be0e56e613f7cb4a63b5955780c33db52913431c3956887a007f79a5c03f7c3d7f75a08112bd2cc2198feec19ca8c53f8192fa14805906b90c0dd54f1cabad5cbd3bfbed7e40d65ba9825d281f93e955b122056ed76fd89effd08014de2bd298db2ccded386883ed5d74c2389327757adeb9e52492fc30d377d126a6e7ab784a82fad8d3f9548f06cf00b6cd89b5eba29af4f6b642268bf8a6eb60bf5945a175dcfa00b876c7274a383b802c303348f33126ea5937ebffd569e6dd0d5738adef2387f8cff4e1a83b400a7b68b0279a2d3afec27cda7e8702a3d0e9d30c4987625c0e1ca8af249069178853a90b551fa31e8ef60eb48bffab9204aec4c0c66bc57f1a2e3f15621284db3878022e77a7f4631271a15d183fd0b8a3c8d9ca455514aac8edceeebc1e9337fcb39af282efd4e7eb7d2e10dd204ca9c5b89a81255335314081e415a97863ff4ace5396ef84e07afaf515e47bd52b7dff412ae741ac302cb082918db8f5fe07f783078012bbd9606e40eec54be6435d9b465e058912548c544ae68d639decddcbb7490f48e905036243007fa287823b0039493ac563674dcfb5e0a55dcc4ca91d24a30bc999b", 0x1000, 0x9, &(0x7f0000000080)) close(r1) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) bind$unix(r6, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0x6e) listen(r6, 0x0) connect$unix(r5, &(0x7f0000932000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) tkill(r2, 0x1000000000016) ioctl$PIO_FONTRESET(r4, 0x4b6d, 0x0) 00:16:24 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x10, 0x3, 0x6) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e280000001100ffffba16a0aa1c0b09b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 00:16:24 executing program 2: r0 = socket$inet(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e", 0x24}], 0x165}, 0x800) r1 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x2, 0x101000) ioctl$EVIOCGNAME(r1, 0x80404506, &(0x7f00000000c0)=""/21) 00:16:24 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[0xfeffffff], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) r2 = socket(0x11, 0x100000803, 0x0) r3 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={"6966623000faffffffffffffff00", 0x12}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'ifb0\x00', 0xa201}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@dev={0xfe, 0x80, [0x0, 0x0, 0x500]}, 0x0, 0x0, 0x2}, 0x20) 00:16:24 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="295ed277a4200100360070") mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) rmdir(&(0x7f0000000340)='./file0//ile0\x00') r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) fstat(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r2) mkdir(&(0x7f0000000100)="2e2f66696c65302f2f696c65300e", 0x0) 00:16:24 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f760070") sendmsg$nl_xfrm(r0, &(0x7f0000001440)={&(0x7f0000000000)={0x10, 0x4170000}, 0x349, &(0x7f0000001400)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x0, 0x0, {{@in=@multicast1=0xe0000001, @in6=@mcast2={0xff, 0x2, [0x0, 0x0, 0x4000000], 0x1}, 0x0, 0x0, 0x0, 0x0, 0xa, 0xfffffff0, 0xf0ffffffffffff}}}, 0xb8}, 0x1}, 0x0) 00:16:24 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) write$rdma_cm(r0, &(0x7f0000000640)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f00000004c0)}}, 0x10) close(r0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0x6e) listen(r3, 0x0) connect$unix(r2, &(0x7f0000932000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) write$cgroup_pid(r2, &(0x7f0000000040)={[0x33]}, 0x1) tkill(r1, 0x1000000000016) 00:16:24 executing program 4: pipe2(&(0x7f0000989000)={0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) mount(&(0x7f0000434ff8)='./file0\x00', &(0x7f0000abf000)='./file0\x00', &(0x7f0000f4c000)='jfs\x00', 0x1023402, 0x0) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f00000000c0)='./fi/e0\x00', 0x0, 0x0, &(0x7f0000001200), 0x3000, &(0x7f0000001280)) unlink(&(0x7f00003b3000)='./file0\x00') dup2(r0, r1) 00:16:25 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="295ed277a4200100360070") mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) rmdir(&(0x7f0000000340)='./file0//ile0\x00') r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) fstat(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r2) mkdir(&(0x7f0000000100)="2e2f66696c65302f2f696c653095", 0x0) 00:16:25 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x10, 0x3, 0x6) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e280000001100ffffba16a0aa1c0609b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 00:16:25 executing program 2: r0 = socket$inet(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000080)={{0x7f, @multicast2=0xe0000002, 0x4e22, 0x3, 'lc\x00', 0x4, 0x800, 0x56}, {@local={0xac, 0x14, 0x14, 0xaa}, 0x4e24, 0x10000, 0x40, 0x0, 0xff}}, 0x44) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000000140)={{0x7, 0x8}, 'port0\x00', 0x4, 0x2be05c4a996bfa4d, 0x1ff, 0x49, 0x2b, 0x8, 0x0, 0x0, 0x1, 0x7}) 00:16:25 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f760070") sendmsg$nl_xfrm(r0, &(0x7f0000001440)={&(0x7f0000000000)={0x10, 0x4170000}, 0x349, &(0x7f0000001400)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x0, 0x0, {{@in=@multicast1=0xe0000001, @in6=@mcast2={0xff, 0x2, [0x0, 0x0, 0xf0], 0x1}, 0x0, 0x0, 0x0, 0x0, 0xa, 0xfffffff0, 0xf0ffffffffffff}}}, 0xb8}, 0x1}, 0x0) 00:16:25 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) recvfrom$inet6(r0, &(0x7f0000000140)=""/232, 0xe8, 0x100, &(0x7f0000000040)={0xa, 0x4e22, 0x7, @empty, 0x7}, 0x1c) r1 = socket$inet(0x10, 0x800000000000000b, 0x80000000) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000240)="4207efdcb4817afa08a4cddd8985b280de1fad47972e1593e962599bb2635715f1d59983b978f345ce2629d440e65cd25e3915c228592615e472d47315922140191d8738248910102453c24a4ca4ad7f1ede865e68c39f717fe25bad9277ed40eefb163daaf9b35709a4763c3e8014eb67b909f37ce8508cd39dc272510c7a6f24a774b2023ca390c57093ba1d", 0x8d}, {&(0x7f0000000080)="c7cbc84a3828c685d459a914e2de65f83c7bb84bcd0eb44b7206fe7c2bd9f817feb1c76fcb597a10458310c99fee0a10467f175b61ace8d19e33501c151d571fcdfe29a9e46a0904a7623cc516f46f0d42d0c5cb0683f03be621616e004d3e0f888143b57d9fb5321e2f", 0x6a}, {&(0x7f0000000300)="676799c5f0e0c573b1e86b3edc87bc893b7e9ea45098aec167650224ef0286ed2c2bcc6bbb97c595ff34fa8aa8139ab6912c6b513c67b650f24f559ec024d8e496d549e1e5bd18bee9d2be1fe199bf8ae09acd3e05a6f18d9d7fa5f7c221047894a5279f29a1b8387ff903e78572125b6cc3e7d35a100593c5435d28b308614511542359ab9c3867fa415db144e8e00845a2d0e692ba6b268b6e7b1cb34d90fe33444877e7df8ca9f3d9ff13957f8b2879b3e1f67c46b7286f057bca631de3d48f8f5f3b438bda6f2da79872ccddb3e837160af69fd9b195f7faba62e12d2c137674aab990cc6e178720", 0xea}, {&(0x7f0000000400)="c2998202a7817b5c25ec92d00094e10d3304027129c7ac78c4ac256efa44cf0e8b0d6157150e805f60a6f23b730eff44877b9c9281791932ab1127f99c5367e9b5bbb32ef0f46be3168d4f49a44cfeef7b45bf069e6a830b3c8595ea546af18bc5c4099c7ee8f5572db7139d", 0x6c}, {&(0x7f0000000480)="e61823b9a6398800c05a810d95cd411ef99f0067efe1021957a77d484fffd0ad0e96d0e8ccad0ecf1bfcc42faa884c3d36a2f7da323686f7b1f6b7e5b2fa9054687296b7bd531ed7c31000b041a34b147e8b400610da4bd8f2c895c566ea12b778709378da39bbf0a122e5775cf4d269b8d3d307931f130fa44aa2fc94ceec16f72446699f263943907a1a464e6498339e4b2752c1e7306adf71845816a7404da55cc66cad65e00d79b8d7dd3760deb4df541432802d4b22dfaa2a8c1cf1c7745514919bd700451f1fc6de770254e85ce09d78d797b2afd998e630d5bb0b63a5580f4cf281c9226002ad", 0xe0}], 0x5}, 0x0) 00:16:26 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f760070") sendmsg$nl_xfrm(r0, &(0x7f0000001440)={&(0x7f0000000000)={0x10, 0x4170000}, 0x349, &(0x7f0000001400)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x0, 0x0, {{@in=@multicast1=0xe0000001, @in6=@mcast2={0xff, 0x2, [0x0, 0x0, 0xfffffff0], 0x1}, 0x0, 0x0, 0x0, 0x0, 0xa, 0xfffffff0, 0xf0ffffffffffff}}}, 0xb8}, 0x1}, 0x0) 00:16:26 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x10, 0x3, 0x6) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e280000001100ffffba16a0aa1c0003b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 00:16:26 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="295ed277a4200100360070") mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) rmdir(&(0x7f0000000340)='./file0//ile0\x00') r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) fstat(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r2) mkdir(&(0x7f0000000100)="2e2f66696c65302f2f696c65308c", 0x0) 00:16:26 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) write$rdma_cm(r1, &(0x7f0000000640)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f00000004c0)}}, 0x10) close(r1) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0x6e) listen(r4, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) ioctl$KVM_ASSIGN_PCI_DEVICE(r5, 0x8040ae69, &(0x7f0000000080)={0x4, 0x400, 0x92b1, 0x2, 0x5}) connect$unix(r3, &(0x7f0000932000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) tkill(r2, 0x1000000000016) 00:16:26 executing program 4: pipe2(&(0x7f0000989000)={0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) mount(&(0x7f0000434ff8)='./file0\x00', &(0x7f0000abf000)='./file0\x00', &(0x7f0000f4c000)='jfs\x00', 0x1023402, 0x0) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f00000000c0)='./fi0e0\x00', 0x0, 0x0, &(0x7f0000001200), 0x3000, &(0x7f0000001280)) unlink(&(0x7f00003b3000)='./file0\x00') dup2(r0, r1) 00:16:26 executing program 2: r0 = socket$inet(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0) keyctl$set_reqkey_keyring(0xe, 0xffffffffffffffff) 00:16:26 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[0xfeffffff], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) r2 = socket(0x11, 0x100000803, 0x0) r3 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={"6966623000faffffffffffffff00", 0x12}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'ifb0\x00', 0xa201}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@dev={0xfe, 0x80, [0x0, 0x0, 0x10000000000]}, 0x0, 0x0, 0x2}, 0x20) 00:16:26 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)=0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) write$rdma_cm(r0, &(0x7f0000000640)=ANY=[@ANYRES32=r2, @ANYPTR=&(0x7f00000004c0)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000016000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"]], 0xc) close(r0) r3 = socket$unix(0x1, 0x1, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f00000000c0)=0xc) fstat(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) getresuid(&(0x7f0000000380), &(0x7f00000003c0), &(0x7f0000000400)=0x0) fstat(r0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000b80)={{{@in6=@remote, @in6=@ipv4={[], [], @loopback}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@local}}, &(0x7f0000000600)=0xe8) lstat(&(0x7f0000000c80)='./file0\x00', &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000d80)={0x0, 0x0}, &(0x7f0000000dc0)=0xc) getgroups(0x3, &(0x7f0000000e00)=[0x0, 0xffffffffffffffff, 0x0]) sendmsg$netlink(r3, &(0x7f0000000e80)={&(0x7f0000000040)=@proc={0x10, 0x0, 0x25dfdbfb, 0x83000220}, 0xc, &(0x7f0000000d40)=[{&(0x7f0000000680)={0x4f4, 0x1c, 0x200, 0x70bd25, 0x25dfdbff, "", [@nested={0x1b8, 0x72, [@generic="197ce0d6009ca45bcc0927efc732c05858f741ed61ec64e765e2b7466a467ab3511b87301d62e816db9b59", @generic="aef2884048c080fdab3d5351f542258b1d56e4f7c3bb1ccad793e17aba865e325a8790063c1b5e913354965749bb53f92ba534eec86b575b74de9e805faa8fd53d7a6f3d26572486edb55a5e1e0779298efe7289fe5541583089daa3b15e5e7baa491c5071d341bc7e8fb7371daaf5a032bd0ac4c327f723751c69eaf960bcc15b8d541da5b73beba57b", @generic="8aac90a5717b63a779b7fa35963f214b8b5db4d5c3c65e5dfb0138c0011e0a7787cd341ef477038944230c4b9c734fe45271b0e4cd", @generic="8c4083559d4f55ea4e7490cc2b4df4edb7d050426d22c05aae122233ae87188401591fff104aca3e80e709d202c66d3a2177c86c53a2fd8bf8fff9ef753f6e79b8806118838950c6f4318f3258282209c866aeea3d2492057ced6ba1898b676cbad7a15924df8e3345194bbfa601afce44d8b9a2ef99619274f9af9b5469a9f2a57ff5ebae4854ccaf58e16f755314baf78defdfd142c75285f8b6b46185c837ba79e638b95dd3c3bd2603297a1977c09995eb601238ec19f92106e250e84c39a5e7a9e10eabc4"]}, @nested={0x1c, 0x8d, [@typed={0x14, 0x44, @ipv6=@loopback={0x0, 0x1}}, @typed={0x4, 0x8c}]}, @nested={0x154, 0x20, [@generic="9bc964", @typed={0x8, 0x4, @u32=0x7fffffff}, @typed={0x4}, @generic="54d7c5b4b60a511f27f2fb0a023b0a9a83656b5c43d15ea3a584e0c9919f284d7daae883fa94d26d2567a35ac45b6e2f8cdfe9ea1dfe617b496a92dfbf42ef421473", @typed={0x8, 0x5c, @uid=r4}, @typed={0x8, 0x13, @uid=r5}, @generic="70f1da1008680cc749a235553906d4f8b59cd43af4382c332338097811160c99594884548451791a34175921f0818bba8055931f2bc83ff66981a76cf34dac163eb1b890005c877f8f0b6e5bff012e5c0070a19d7f9b70edb9033a7de9abc174dad83c07e799cd2545132d9c821e7c294c525d0f4e822b809be91b44f1c9df33cc3d14b8b11252839ad065850022b2990de064f0ecbf1aa5f18a6172445b7bcd82ce6cb20537d14abccef1c81118942501037fe10251a14757f431b6b718884a70afabc76610f7e17f71325a9b02cb232411f6d36214e03f98fec2eead200b89d01254ebc4e131aac010d1cfbc"]}, @generic="d28a6d978c578b46f16c8665044adc6a84d86415f99d9042055d49a8f7aa", @nested={0x1c, 0x12, [@typed={0x8, 0x4f, @pid=r1}, @generic, @typed={0x8, 0x39, @fd=r3}, @typed={0x8, 0x54, @u32=0x7}]}, @typed={0x14, 0x95, @ipv6=@mcast2={0xff, 0x2, [], 0x1}}, @nested={0x120, 0x7e, [@generic="6f768271ba672f8c5e6db3b40b8932339e0d463c1292b6ed20532af908d153a0ac9995a10decf2faae94636db4e33d4bd319c78005e2fb619221fd47", @typed={0xe0, 0x77, @binary="12ab7e19ffd9f54a7e3545ac55b4485dd5f54fd93418fbd665fb1e1575aecf94837dcbb56cb8a745c9d8e0200237303d48fc80bfcde648aff97fe0f106d0d9111071ed5735165eb279f8fe3f327ccb1c5627ce7cb5102b6c14a11ae10ba2b254fe37b5a409f0daf080fad7b701d22832297067cd1d22ee4867a65926330cedc9689d6163ff09902deb462247839a3532040070de2c7382c3c0af7a6ca5033f335ad6f105a3602663d44c11c6c6cf0680cba878d5892a01fab0167e7b12079a415fa093b3547208b1f4ce10672c1e46f45c68b99190ecbe849a"}]}, @nested={0x44, 0x36, [@generic="8742522ac1d42c671aeb342d17bb3aa5fee51520d68bf7ea58783896e357e812b109b6c1f92a694ae46d842459ad1c6cd30313723329f7b9872e", @typed={0x4, 0x83}]}, @typed={0x8, 0x2d, @ipv4=@dev={0xac, 0x14, 0x14, 0x1f}}]}, 0x4f4}, {&(0x7f0000000ec0)=ANY=[@ANYBLOB="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"], 0x200}, {&(0x7f00000057c0)=ANY=[@ANYBLOB="c42600001a00000428bd7000fbdbdf2508005c00", @ANYRES32=r0, @ANYBLOB="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", @ANYRES32=r6, @ANYBLOB="040082000000000000000001000000000000000008a0a1c9f0356be180038d9d9daa94297d8b2c69875cc3076a24e828c22368574f5ab2e77ba6863cc7a03e18d9e11a0f2b4c11b4d2e88b1674b9696147446b0596b7", @ANYRES32=r0, @ANYBLOB="00002d26f6ad38cb31bc90b958ca944e858e275a162480dcd7a03c16f0cd45b70a6dc36d393b4453454e898da5f8db22d8d09a9283f01a1e96449bb5eb40bb5f94f4c1aec232701df96b6675f734197f45eed9175e138cfa3367ff0a7b01e0cc9392280baaac2b130fbf2ac30bd71506bd8506f27be1c2f9ad2e0498bb294dc7aac750868d8b429a94852ea9158bcd0521692965368858531e550951e35af64c5859b71669fad0cc8dca0f68a718a0b1c71bbb1ee8fe44543b19f30ba5a591cb39a83a5418fe6a7f08008300", @ANYRES32=r1, @ANYBLOB="70008e0092fc8fdd7551c37b8d3abff4ba8ada960cb94530dba7ae967184fe0e2ec0e3879d797e18a66c47c40a59ac546c1ec9b08528b7ecce64565e99a8b789a2e0fad57913ebd714fc9c99dd212976b68a369d65e35f3fe95c0d9f08cdaf64b66c05bf4317a0477108ca12721b0000a40118009faf727071bf4a7126d1bdfb33763c00f278dd4971b20a85182d1a75807159e5ea83ba243d4db4a7dd25732827c0e40b49eb1c30b9828e2446d6d5ba08916608ef86875bfe0d17e0703f1ffb0c44171dd9a5e832a7d24cc750e7c9f62c880cad3cbd1f7d7ccab9ccf85cbc6b79035ef99e2c73229fe9b808002500", @ANYRES32=r7, @ANYBLOB="e910f6d03b1ad53211ea0ccf55c426f75c62c99b6dc94c67b1078dee33846d7399a332868d73806dbd7673f11c967c9f4b4baee38e00ff3d4a240856100af265c5e5a056ffafdebc6440f3f7c1cee6b2c396c7fdf50e74ee70e013ead2c63cca53f3da681b3b809d140b1843732d3ed832f00c2fb913c20dd6a8243e99ca88e4ca4efd72f911234482b7fde5a1b7abed4fd85d7ba303256a3507c35355b7c13ecec674690ede1301a06adde0dddf7bb4ff423f413c2fffc58087357560725c20a3dba3a71f058746f8e96d37103e517e77db60a6716c28a00b334591b32e3800407577e8d09117e6b841ad264a24b9ff65397d3d1a08004c00", @ANYRES32=r8, @ANYBLOB="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", @ANYRES32=r9, @ANYBLOB="251f010fc642999338570fa529e6d97f1d533d940392d9523158a2c0ffb372f5860f1594ff859906518f9ea6bd5b83885e6cc40558307941e2248f615469e36ca7115bdb3dbb15ccb0678b3a23c1f648fdacce33c21e9249beed81dfeb8d0db39b1857eac016038f92bab49c9ccc35592b5f33f0c7577c4b193077ccaf17bed5058afdf23ebfe2bc79d2c1b4dfb3f9144aceb5bba5e8fa9ff0b6ba958f333b9354072fcbfdafdee49a6a05c8c598ecd0442784080011007f000001000000"], 0x26c4}], 0x3, &(0x7f0000000e40)=[@cred={0x20, 0x1, 0x2, r1, r10, r11}], 0x20, 0x51}, 0x4011) r12 = socket$unix(0x1, 0x1, 0x0) bind$unix(r12, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0x6e) listen(r12, 0x0) connect$unix(r3, &(0x7f0000932000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) tkill(r1, 0x1000000000016) 00:16:26 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="295ed277a4200100360070") mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) rmdir(&(0x7f0000000340)='./file0//ile0\x00') r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) fstat(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r2) mkdir(&(0x7f0000000100)='./file0//ile0\x00', 0x0) 00:16:26 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x10, 0x3, 0x6) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e280000001100ffffba16a0aa1c0809b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 00:16:26 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f760070") sendmsg$nl_xfrm(r0, &(0x7f0000001440)={&(0x7f0000000000)={0x10, 0x4170000}, 0x349, &(0x7f0000001400)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x0, 0x0, {{@in=@multicast1=0xe0000001, @in6=@mcast2={0xff, 0x2, [0x0, 0x0, 0x400000000000000], 0x1}, 0x0, 0x0, 0x0, 0x0, 0xa, 0xfffffff0, 0xf0ffffffffffff}}}, 0xb8}, 0x1}, 0x0) 00:16:26 executing program 2: r0 = socket$inet(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0) socket$can_raw(0x1d, 0x3, 0x1) 00:16:26 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="295ed277a4200100360070") mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) rmdir(&(0x7f0000000340)='./file0//ile0\x00') r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) fstat(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r2) mkdir(&(0x7f0000000100)='./file0//ile0\x00', 0x0) 00:16:26 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x33, 0x0, @thr={&(0x7f0000000080), &(0x7f0000000680)="8b09344970744746bdc61c3f4767dc02b1231d5eede31fc0834d597c71db3a3d3988822bbc6aca7c8a92012e1dd5af670774534c928319dc1845dd2373a40658b3bb17c9e4a40eda6a2b555822524f8b79ef93c084380fb89f4badcabf31acc97e0250cbcc3f4b4a71f6e70cb12b4e9fe02d586c6876baeaf54eedb964e93d66a9857d0f47fa3e9cb588598e98de7f0c4699fdbeaa5d0d55b5c18f75fab85cdd36cc830fbd12d9a54e9c501c8ab08ca0c0850df5ca59fac28fe61da6f0b3bc1fb840ab1fc71eeb309f6d42c587b63da7ecf28dfd57c7dc45a485083ab4034286ff1195eb1943b8d74a7d55070d9597b7301092911d0c0d3ba150b9e4acb1a5bd17d4aab7caad54fe08ceffb7741a00687fcac81706e94608fb9d7a1654923691bd570c17fede9ad9551281950fc5e36a083638601056d4d0444f2beeff61fc34237156588b3a97709d4984f00f5743a299e013d5139c917a0daa42845438ad88b3101244b631b6346a228b9476ca4fa4850dc2185b5fa5db587b5923621ec0fe10873d087575e8ac5eb312bfa16c11c96556891c828555580820a96683b86b4d8a30a5b9737a6f40a85a36f3c4c728955239f77ba65fff4e6b8cf912a4aec20aaa99e8f62be6ffbfd07871e22dc85f8a8d8c435032727089fc2151fb2692ed10621109b3b39dd674ed3f00a44354a50c76347d766b1dd15574f5127f8498c21c3f8cd39afb42f536fec4b80f3306638c39bd5ae67e6aeb6dd8eae90ee2c02bb43a6756df8cc053a84f3f087fac0b5e8508172790e253492ca14e6c7b146f0c32e796c4b2b3975c88bef4a2b134898809875ef0ea7d1376b55895e898667ae4cfacce2a84495be34f412ae989eb313a5fabd16eff28d5f13a82c49ffd70b107882d08397f8225db2f6e59a976f91286c77364d3d08c8e5100f13bd78664a7c5c5847d1f6ec19060bf845d79ccb8d244e53d1df129f283330e8c5525f5247090a698a205c3baf1aa71445399aa3df34da2380306516de5d1f50ebe31d5cc6a2e08100a9c8a4b700f261255b0eadaa69e33aa5fd0b410c0f38c357db4fb5c9f31dcd8fa433b8945c31ff2c5119c2f103982a14d829ef4f505841c1c6ba9c2f0261ccde5dc21056a9a8bda1aaf70c51f6818a7c865aea76805f72d587abd83ef915d979e0241d49a2b94a9f6557a11ab273c427927e1bfc1d3fed978d84e62d9479fdd3216ba97d2127f83574c5cb366e3639a75e5306d9063deedbb403d1b21c3f8b6b7e86cdec2ae464c035aaec3541b10bf656849d657f61f7f9a47a9d8f546aa39c9bd5f0a23ffee49752be7dea74a5ea59852330a520b6d69c6e2ce04655af7f54f61a75aa8b79e3117ea9bc0741516b45abb61225fcd02ec9e77fcc9fef15e2a750c7bc655912fa9207dd342dd33935f9a271e10a0c81747bcbc33a246f329644f19432e7f019be66c7079c285358416cf75ea9b89932eacebd7b64af11be41b8a43ae84f4b5d5fc8efe9871227ab3a910360f9476f497ac2c16d603b32fca2ab07b194c7ddcf3362efcbe1128fb089114156e5ea5efa089bb75d913d3c767c916142223b4f8d2c392870c55c666805c38199524823fea696c662f1cdf1b1ecaf05571f1c038b21ef63bec497aa7cb0fdd48cbc027ee5095b97f6e1dcf8602a684181ce132e0b414224b7b3260ffcd0829b43a7381d95784310e9162c276f62dd01c9c8eeea24c975350cdff3fc406c8634f897c4ce33962d0155b4cc8fc421eedd93e87fe8f3c5b9614700e50c665c2fd45980a1856836a80a7e17a07a2b8117e08e8af705f4c74c0887406e62b314656780bc6628e8df00c6295ea532cce271b932fdc45fad882459615a9989453e722dbb19355e9c3932e63ca039f2a8bbe459b817fa39c07ec5d16f17ca2e6da29fa658cda3f0a1270eb29595d4304d302d54f9fb321c4e1659b57a5ea4d5669b44cb40918293814ee2e3b4afc7be23366395a1effbf0e190519dd2b4e84f7c2e7309ffcdaf6b8650b99b3bedcdbd73e6a121e1c65ebbc9746ea349119450bc97cce65d7deb531b92ced70ad557affdd001fe44b0c86005daed08ec2f84526106c12018a2cf1cc9008d8916cefc2377abeb1d02d4c2b932f3dbc7ed8af68d8bca88737af957d1e0fd7a33fed6654faff2f805d50bb0907a0f995678688c566485164b2133abbdec913568e8dda61de2180a8fdd3b47d00c0a5daa82209ff69e028e27cb68fa947e776f94160149bf7bec8f39ea206258492e41101a6a837338925e563ab2147bae3c3a890b83770cb4b29433d930cdbdaf17ee064ecde93c71aa378bfeb28475070cd3d52a296053171f3f8fa39fdcdfe35a2ecc7ac6c772f8b439c48ee94f456bb451bf0e0de7e4f21736249eb7ab7e9ee940757c4e7d7e4685380817cc1558b4653bcc44764e1acd5df91f1898bd687f44bb3f9c674bbfa5b1519b409ce4c706aca1500aba11364f101c184f24b64a4eb8643c5dae6968e4758067c90553a7b28e9bc2b9ca7356a7f40c0a319e275313231221f724d65220329e3bad1d195618bd20827c949ffbc93196d004001dd07761c63248dcc9f67a684cf327a1f97b76290ba35f5ea054287ce022003b41fe6a37e8b694fb0da01b9bc0e8ba8bb5ca9ee128bf27cae4bf045082dcd131c81942fa44c1d979f63a111a1a24e03f59a69cbfde1754f3f0a61ee3637a79b302320d2b66352fc3a2a591994cfa98e8fe790926306b7ca4c9702edd1df1dc79131fb43185b0c6c82c558791bd8ee232b84ca59dabe61b507ecabe73ea31f359e8637f1e1aa61af95bb4b6021949a09b2c4eb752386fdf64156ee60956f38b3c8dc657684a7414e3099d64b21a0be5fe903cab0853902a1b6bdd5f95a7623e27c11d2c2131d4d45e2b3ffe64da59782ce132f5d1fa2d074ec4d4322220d2ec757d2f2105c60ca1f0f6f1028a61bf82d32ce6e104eadcf144f041a255855fd7ea6b2c7f41f0f93e55dc3c1ea0e06b2b680d22ebd47be79d0a4aada3039195f47b2c2fda2847a127b41149441a9ba4008cefa4ba88632d9f7f87d8422ba9e750281f65b0ea5a5037e4ea8eb8ad1b3ed3745780b97cbf7c4679831e9220d3272afb4147975a465ad6002802128d2358a3f0f4c15bfeba81444dc4d1081bc596cfbff0575493a3faa4049cf074f5ffd8e487deef7052e334df8b5c72c3f581cce98d7b1fa8e62ea336a6e71e232fcdd5ecda71f97ab9174881fcc7fbb49ae6b8c3817d3f25fb7dcfeea789a262879dcf3e5380757257ed865b2278e88de773e2f235955087a1019684430e7a9583bd616fd13c83cbc255c0b6c33736012ea2b0e4392d7b9f4541388b5abde4c722cd5e552b821dbb0b04bac3b1ac74302abb21f942bb10460e06630c636c6ae0414f4eb30dc134ecfabab435b7bfda8aeafaafb41e6d671680baac0a696602409f1ec1995993958ebc9db9aee84912fba8cf2b7a2562c1b8a223547744199eba53099da2d0c5d028c0196e15bacf2c52955a048a7c1a47bb90b093fb3a77e5fb1240a5d629568d0732aaf8ee94baabd3d860799be6c9dc0ad68813087220ee0c00f01aa5d7f68445e951ab58001715eb3121aa5effea362b0069ee10ae525f8d7229d8fb7bce12dcc1d199206d6248164cb9912916b6ff939d0e087fb6d72efaa731248e2e744ca2b010e0faa9b1e473ec8738adfda793ec16466ab3b0609be81b2a88bf7475d873f2e56b53e7380d7a6e950b761648be3eecefe908eee1aae91a84234eda85a0f2402b0db1d1379e8d01242bc4202cf23ab2f76cb53ca8b254fc9a7d72e1054e6bf15dbbf10aab1867c5eef6abf48612d78fb5dc0f8b2467b3ec03fa8377485e963489b06ec1f1cca25bf8fe08df0090087061312227041336fe496a816a10c4c01ece50138312ca019509a0ddf58f07776192e2edd9236358ff1743edf3678348ca52ce8c8b90b30eef381b15f71f8dde8c3427ab701229931e89d59b43c14624e581be3be58f6a7b4318e988ebd322b670bc759dbd5de73e1625ae28f806374276d1dd83cc29ab147c742aa2094e1d32c1534787e1b7d51441b274032fe7225d036ec8677bac2536ced3fe0a2cb39bc3f1b2c402ed899a95183dc35f069bbb162c634b0b71d77f926d0d7658e42b0d51f3d6af50b04bdd224a72940d00a3f8b48073ae3ffc62b9d107ad7eb6905c9483ad39e916aeef623b252444123e12311dec3a898dbbff54826f0dfd3d4e979e5cac979623cb2cd20de19aac0bda03fd8ab334a6f8d1f18efe319e0d88eed137457acad8c9898553592066a30a718b1dc4152b41cb26ec2f0c281a816950b520257c2eda12a61a4b16187cdafbebc7485de7fa49e27aac74cefd131441b58b7ce6e5798cf8a3cb8a8cbbf8ef12df78ea655179ab1a486931cf9e8fc184f2c4011dda99da5fb4ba25bc149729f2a88d93f6846cbb579ef7931645fc0173fd661222c6e17f76b9db39976097cf79d84f805d958ae3217525afd75ea956ea16062f581434e2f1e2a0c226c3818ba4dd30cdbd62e4d15902a4cfb9a9832081a494800efafb375e90885ad50b805cf32c78d09779188dc04ebc69d0c020aa5a5afc512e0dc543787f56e87f06925cd7c2ff99ee77aa59676b59b9e3221d6ecc28cc4ea0822fe9d39194567b98af00ee8e3d4d28a336bbd36491ed2938170297808452ad89f13accff9ea00b10129e08b1af5b54af3c8d9c1472bc970f1685a9fc7bcfc8cf291c60e68dd3631857a48e628a5b8bb5458d100b6ddd1f865cc6d491e6f04bf84457743dbbb220d6e27db4fc761cdb60a92655e077b904e42fbd1112266c103abc183b69c88ab1a01b975535338b07b4752d64f624468ca04a10ab5d0b05f11a1b28908f5c63b5fcfcd24ee04d58a629f1b8bf1b8db54e9aee3394e2fa639f10ba6cb300d7c9117c2d965078c6f1836db352a30ac5cf29a9099a89a6c83cc25a4d2b7b59e951720e938fa0f616027d9158d0b54ffee9457c8cfb30f2c0418db5270b09a3387bf465b61a6f601180cf24205fe6465b755e290765a14b22c0ea628c4d6ac2d6cd124d7c3940a9c1a24ee8037ee6cc54111f191d5feca05ffbf7fc355048c8f6709e31ab126fbdea0682fd6611fe62758c14f115e0935f99cfd6568e0f16956ec70d762957385fbfbb05773a0f8e606cc7ea3b584bce7a2c9b88fa4acbcc602b8dd181cf1b98d86a84541a749e82d7de9787d4b45d4ce0a22a7081416dd13070a0f2759f6cf0143760577ab5256109b11c0245be81c512f16b333ff4516d694149d9e5b4e0dc2276f0f80bdc020bbaa3fe0f0d8d9193b69ae9b874ed3a1c8e445d2fb1688372c92725d25d3d7e90a109b0a01b657d95a7156e26b2744ab3561215bcd70831c861c08db46296700dae72f225878647cf03f0208bca5b8ef06e912080ee860a922a1bba3a02f05c9c272cb79d42f7d6943d0aefa0042b7bfe4da4c327b165e512dc3a3e73a2459ccb9272d9a2ab90774b2bfc9a88a2e749a382c8e114b401f46ec09cc2730d125163a87287ff1488c0e7ccb25d34f6a206ff1d1067d7fcd9610d6dc5813ab577d6d03f2cc28cf817791804a823437d26e57510bb41afef8942bfc73c3ddfb61e51694f0d90375f4c73fee7048368abc239631ccbd1f2e4b3738e3b2fcccbdc664a31d522563df992c5f3028e972ba424077bc445659e1aa4d2c6d73192ae2d92422030c4c10d79d203d07dcf283fed75ddfdfd04bfbdaceda46de2ffcb98186b2366411b60b0a"}}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) write$rdma_cm(r0, &(0x7f0000000640)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f00000004c0)}}, 0x10) close(r0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000001ac0)='/dev/dsp\x00', 0x0, 0x0) getsockopt$inet_mreqn(0xffffffffffffff9c, 0x0, 0x24, &(0x7f0000001d80)={@multicast2, @multicast2, 0x0}, &(0x7f0000001dc0)=0xc) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000001e00)={r4, 0x1, 0x6, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x1e}}, 0x10) r5 = socket$unix(0x1, 0x1, 0x0) bind$unix(r5, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0x6e) listen(r5, 0x0) connect$unix(r2, &(0x7f0000932000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x0, 0x0) setsockopt$netrom_NETROM_T4(r6, 0x103, 0x6, &(0x7f00000000c0)=0x3, 0x4) lstat(&(0x7f0000000100)="e91f7189591e9233614b00", &(0x7f0000000140)) tkill(r1, 0x1000000000016) 00:16:26 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = gettid() timer_create(0x7, &(0x7f0000044000)={0x0, 0x2a, 0x0, @thr={&(0x7f0000000040)="eb2b75f4e330b8c69d88cb79ae546658bf6cf9ba3cd6b8a70db0424d37691fbd4b18d5b7fade87b79298cde136d7c220debd8d870293b41e5bf0cb03618ba2bae684fe218563af553a846de12f3c147e675189870c22a8a2abb0db30633fec5a084f3d79d38860a37e33c212f89059016bbdd5b4bcb8a255be69440f202d7dd51e20675990f0550b473e6781665d0e6ca6f823b8bdd7fc31ce15312a0627694af55a3239ca3de080332b810dba18434ba3eed3f1c0a0f96bf28cd6960052faf219e4", &(0x7f0000000140)="bc710aca9aa7dba37bca2e6ac3ddfb32c016e3efd7871d72fefebff762d304680da5fd885b7c7aa9c0bacb39527b8ff96c158223104a2804119168310d5b93c8b46c2653e75f3a3710bfbb8efacede71c1a0f61c6abbdbf0dc8eed93b8ef94e3"}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) write$rdma_cm(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0c0011000019f20e75", @ANYPTR=&(0x7f00000004c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00']], 0x10) close(r0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0x6e) listen(r3, 0x0) connect$unix(r2, &(0x7f0000932000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) tkill(r1, 0x1000000000016) 00:16:26 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) write$rdma_cm(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0900000008000082d125ce56189efcb3fa", @ANYPTR=&(0x7f00000004c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00']], 0x10) close(r0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0x6e) listen(r3, 0x0) connect$unix(r2, &(0x7f0000932000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) r4 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x7, 0x72400) ioctl$sock_bt_cmtp_CMTPGETCONNINFO(r4, 0x800443d3, &(0x7f0000000080)={{0x6, 0x80000001, 0x5, 0x40, 0x84, 0x9}, 0x1, 0xf3, 0x1f}) tkill(r1, 0x1000000000016) 00:16:26 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) write$rdma_cm(r0, &(0x7f0000000640)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f00000004c0)}}, 0x10) close(r0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0x6e) close(r2) listen(r3, 0x0) connect$unix(r2, &(0x7f0000932000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) tkill(r1, 0x1000000000016) 00:16:27 executing program 2: r0 = socket$inet(0x10, 0x3, 0x6) getsockopt$sock_int(r0, 0x1, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4) 00:16:27 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f760070") sendmsg$nl_xfrm(r0, &(0x7f0000001440)={&(0x7f0000000000)={0x10, 0x4170000}, 0x349, &(0x7f0000001400)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x0, 0x0, {{@in=@multicast1=0xe0000001, @in6=@mcast2={0xff, 0x2, [0x0, 0x0, 0x9effffff00000000], 0x1}, 0x0, 0x0, 0x0, 0x0, 0xa, 0xfffffff0, 0xf0ffffffffffff}}}, 0xb8}, 0x1}, 0x0) 00:16:27 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x10, 0x3, 0x6) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e280000001100ffffba16a0aa1c0909b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 00:16:27 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) write$rdma_cm(r1, &(0x7f0000000640)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f00000004c0)}}, 0x10) close(r1) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ptrace(0xffffffffffffffff, r2) bind$unix(r4, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0x6e) listen(r4, 0x0) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x200000, 0x0) recvmsg$netrom(r5, &(0x7f0000000700)={&(0x7f0000000080)=@full={{0x3, {"bfe55c23b834bf"}, 0x4}, [{"343323c867b1f9"}, {"2583bb389e8834"}, {"723fc2a2d4c1a6"}, {"985f7f8fa53683"}, {"d38da11e1402d8"}, {"d36af6769005fc"}, {"0f00f707c37d96"}, {"2eec1d1091dbfc"}]}, 0x48, &(0x7f0000000680)=[{&(0x7f0000000100)="356d1fe14f6d5437fccbbf80622f66d8", 0x10}, {&(0x7f0000000140)="3370c402b5f10ef53abf21e0fc34c5ce306dab893f77678db3f841ca9faa30ad3e4bc95a630ff4fc15155fe3104982858ed241b2489532e8d408deccc1d292202dede6274df40f8274db6e5264504829e9dd6345c49172113e6932b10df52ef27bb0d32fc40ca34616bb2df32dc8c7fc8ad85dc37c3101fa9a488c7e922d3756cbbad74b3b5e2c8b731a03dfb6f095f217ee1ba9090218e50d5a3d90e0ab3e60326f3a16f0b34c6361091a4571ba35c0369c6b3a61e57edf030ef4e675ad256500488198ffa46d5eb4f0eb24721d9a0f44f631b4", 0xd4}, {&(0x7f0000000240)="8cbed56118ce232397595739264e6733e9ee40676e5db37e87e664108d2484550732e214d807efca9ed11174339a19e213eab6816a95ae3112c9fd62", 0x3c}, {&(0x7f00000002c0)="816cc3f0020dc3ec7d57be6de086a0fe9d4896", 0x13}, {&(0x7f0000000300)="4a7f81be4b90691c3699d10913615344d36816c2055c31f9a995447d50be4bc46367bf4c39020b2158aa7d2d3103fcd7333fa42b19b629827a03ab0a0940dae77747008dc969bee60a412365e93cab403e3351a3305d5ba9e10fd19f788f0b50770d560f657867136555007ceb4c7fbcefa7060557a7fbfeaec70fc9d211be0a87e9215464ac37afba04992cf733bfa0e846d7a095a9af64d06a4ccff75d5eadf7326b11d6e48625eeb43fb904aa14edf12324b6a131549cbaedc52707cb26ff0fa3573baee27cb57bf25a0ecc47d984d1d780dce8b2aaaeccc2867b96b12db69d4c778f24064ddd", 0xe8}, {&(0x7f0000000400)="f53ceda4bacf497c02f52ec1b8008030ba3e54fa640e170f9c978ba392d8d7fd31049932dceef84b768882c92777fa89c7be2723f22e4037f627f7727b134816ea7c791c7ecc2692ce98660e367be65b5f6e3c263dbbf8133cd8f1e7e7962e0342237296f3d32942e6abbd76a80aaf64a4335ae551c1a021439b26b5eb2eeb935866d26163132f43cf29a185a555f98ca2f48b6ec05b2a420b574e8090d861f48ca03be34f273d38f616835628e882e9c9a5cf3e", 0xb4}], 0x6, 0x0, 0x0, 0x20000004}, 0x40002021) connect$unix(r3, &(0x7f0000932000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) tkill(r2, 0x1000000000016) 00:16:27 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="295ed277a4200100360070") mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) rmdir(&(0x7f0000000340)='./file0//ile0\x00') r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) fstat(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r2) mkdir(&(0x7f0000000100)="2e2f66696c65302f2f696c65300e", 0x0) 00:16:27 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) write$rdma_cm(r0, &(0x7f0000000640)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f00000004c0)}}, 0x10) close(r0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0x6e) listen(r3, 0x0) connect$unix(r2, &(0x7f0000932000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) tkill(r1, 0x1000000000016) syz_mount_image$bfs(&(0x7f0000000040)='bfs\x00', &(0x7f0000000080)="e91f7189591e9233614b00", 0x400, 0x8, &(0x7f0000001740)=[{&(0x7f00000000c0)="7a087310f96357cfdabd9b8a1efacbd8b3970a98183ff9d4f21a224280666ad3f4b71b183df0ddd92647adec17cd037714ff22b2f1d4717dca89b5779cd17e4845b4685e97dc5d835d8598e572c2add57b48fd320b794810910b2e5c5f404d9ec8020e46fa43671470b16c4d3f91892048a7101fd66ee404a4c08e5cdce205de647de93b51987f782b528755fe45a975b9972a93ce87ea561844785391ad2a496ebbb63a9a1d4e7d083ebd9605bde39cc9a9733a6e0cc95afbcd7680b116a6890865d6", 0xc3, 0x36d0}, {&(0x7f00000001c0)="1f2b600b4ac291f6b92885e7401339e00f2964ac3722e0992d8101feba588b57bc1885e6f88855594c411c451394d85e469c5451c4a40666540b814654", 0x3d, 0x20000}, {&(0x7f0000000680)="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", 0x1000, 0x2}, {&(0x7f0000000200)="2d4f42d39eddfe2d00bb98e49182ecb3cb1e8de5f5a387b11744e2cf1597442c52b6e36d9bfa5f096402956f6854b21cc43bd1180056d843a7a9dd2cdf84f4af3ecf20d9765c99dcae0245cd6cf6b3f256f433e0e01d3312e8d25baac5305cf85803118f78daf1898c03da04096e9f8667bd5d44f537dba29df8999c47d7007e4641a75b2393223fdbdfd0444ae1d7", 0x8f, 0xa9a}, {&(0x7f00000002c0)="241d0464053eca933d28aad0498e334256eb6ed00a3121da53e50fbec0edc162d27e1b414c03480fd6cf518d5073df7220d8c1fe3db2af2a88cbe691b7128faa88639b7ebd59eb458bbbc21c7971958ea7a1cbd44a3bc37a0d91eb557fbd3cba14bdad0c98bca50b460ad158727601daa2f6c67adc948241628366e3c8b23115b1894f274103b71acd86a36e132f6809f407", 0x92, 0x100}, {&(0x7f0000000380)="d28408fbb882865bbda46476bb6e09a92897e18272e6fcde666e617c315bd5e361bb84de3399c4136f7ae78e2f58be21c07fd953c1f99e85fcd30d2b63566bc0242bc4c2f805e80a8d75c30b486d4e5e59d29305ee9c2e4a9e7778a4515a538e7e9e29f3c35f73586f079b0a37fb7806fc68cbb1782ad242f1ceb767d5c4522de21126cc06cbc5ff8606949f5202a73833dd9e5a5b27c3e081c85c59d9719efd1f4fae35ed2337ca9766266cea3f594e37a456de8b6537832d1b8d218f689c96bfe2c960ca1d3168477693e72ca83ad246ceb5885cb84d3a016df0ca1dd7ab84", 0xe0, 0x9}, {&(0x7f0000000480)="9b4e1c2b088e7868d50e866b0c5dfa6b9a926f4922aba129d81d6d70f72f74861df6850a8bcb983876cb2fc4f50f2edbfd8e4e21acb57a442e", 0x39, 0xffffffff}, {&(0x7f0000001680)="c4c4a2de610b5eaa17b6ff98830b33545df801fcd441fa774b06b6236105d83d8154126b5158b60c4e2ec02623cc5d087e79f6ca76280da920765a296b4895450c777efb6c5490297368f5fac3d07261b825dcfd4efc8eefabe7dd86fec360fd2eedb7fe13602dc864bd5beb175592cea0038f753325b9bf047c29147afdf91f5c7dc8a05cd81fb2465943e2d075c902080fe247fe80f060c18726f9df70af833be7325a58b5cd9046", 0xa9, 0x1}], 0x50, 0x0) 00:16:27 executing program 4: pipe2(&(0x7f0000989000)={0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) mount(&(0x7f0000434ff8)='./file0\x00', &(0x7f0000abf000)='./file0\x00', &(0x7f0000f4c000)='jfs\x00', 0x1023402, 0x0) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f00000000c0)='./file0t', 0x0, 0x0, &(0x7f0000001200), 0x3000, &(0x7f0000001280)) unlink(&(0x7f00003b3000)='./file0\x00') dup2(r0, r1) 00:16:27 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[0xfeffffff], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) r2 = socket(0x11, 0x100000803, 0x0) r3 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={"6966623000faffffffffffffff00", 0x12}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'ifb0\x00', 0xa201}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@dev={0xfe, 0x80, [0x0, 0x0, 0x100000000000000]}, 0x0, 0x0, 0x2}, 0x20) 00:16:27 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x10, 0x3, 0x6) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e280000001100ffffba16a0aa1c0309b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 00:16:27 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="295ed277a4200100360070") mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) rmdir(&(0x7f0000000340)='./file0//ile0\x00') r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) fstat(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r2) mkdir(&(0x7f0000000100)="2e2f66696c65302f2f696c65300e", 0x0) 00:16:27 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f760070") sendmsg$nl_xfrm(r0, &(0x7f0000001440)={&(0x7f0000000000)={0x10, 0x4170000}, 0x349, &(0x7f0000001400)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x0, 0x0, {{@in=@multicast1=0xe0000001, @in6=@mcast2={0xff, 0x2, [0x0, 0x0, 0xf0ffffff00000000], 0x1}, 0x0, 0x0, 0x0, 0x0, 0xa, 0xfffffff0, 0xf0ffffffffffff}}}, 0xb8}, 0x1}, 0x0) 00:16:27 executing program 2: r0 = socket$inet(0x10, 0x3, 0x6) r1 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x1, 0x0) mmap(&(0x7f0000000000/0xf50000)=nil, 0xf50000, 0x1, 0x32, 0xffffffffffffffff, 0x0) ioctl$int_in(r1, 0x800000c0045002, &(0x7f0000006000)) pipe(&(0x7f0000001380)) r2 = dup(r1) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000001180)={0x0, 0x356}, &(0x7f00000011c0)=0x8) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r2, 0x84, 0x1b, &(0x7f0000001200)={r3, 0xf9, "5faf696ccd9351403f75bc1af67eecf509a046ffda8b3cc7a84ee550908cb1ba6b32bf0663b19e6b199cbf673138e32af72afae6659970c7f7e2b1fb80eb67c6d5490ee822db232229f89c596e50e3cb07bf4a75733ad0eb6f4c4369214336ed0bfebdffca7244e7b081a6773b60c306d0e3345399101789b995ec3b45f3dad9565fb2cc066d1e22cb78d958cdfc4e39e12a05c760e82a338739161f8bcfdf23fce79040854495b783469b7af320d2b1f790f52e1942ef2b61a3aec319a5c69898d2eb6016ed52e189554cfc3c3f468b83a0275eb317bc54c82c1c6f8f407148d57e9ccf2aaa084eef05617938e6469b637ad9982f4619a190"}, &(0x7f0000001340)=0x101) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="0dce85123f43de4f34cb37b6a96a9e5ed9792057647a7f9cd7a2dcf7", 0x1c}], 0x1, &(0x7f0000000140)=[{0x1010, 0x116, 0x400, "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"}], 0x1010}, 0x0) 00:16:27 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x10, 0x3, 0x6) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e280000001100ffffba16a0aa1c0003b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 00:16:27 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="295ed277a4200100360070") mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) rmdir(&(0x7f0000000340)='./file0//ile0\x00') r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) fstat(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r2) mkdir(&(0x7f0000000100)='./file0//ile0\x00', 0x0) 00:16:27 executing program 2: r0 = socket$inet(0x10, 0x3, 0x2) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000140)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000e0000000400000020040000ffffffff680200002801000028010000ffffff9dffffffff880300008803000088030000ffffffff04000000", @ANYPTR=&(0x7f00000005c0)=ANY=[@ANYBLOB="00000000000000000000e6ff00000000000000000000000000000000008bc0514e0000000002000000000000000000000000000000000000000000000000000000000000"], @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000012801000000000000000000000000000000000000000000000000280069636d70000000000000000000000000000000000000000000000000000016060400000000004000736574000000000000000000000000000000000000000000000000000000ffff00000900000002000000020000000001000001000000b422000000080500280052454a4543540000000000000000000000000000000000000000000000000100000000000000ac14141ee0000001ffffffffff00000079616d300000000000000000000000006263736830000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ef00020200000000000000000000000000001801400100000000000000000000000000000000000000000000000030006164647274797065000000000000000000000000000000000000000000000004000201000000010000000000000050006f736600000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000700000000800000002000000010000002800434c41535349465900000000000000000000000000000000000000000000ff0f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f800200100000000000000000000000000000000000000000000000030006168000000000000000000000000000000000000000000000000000000007b0000002000000001000000000000003000616800000000000000000000000000000000000000000000000000000000800000000700000001000000000000002800000000000000000000000000000000000000000000000000000000000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff00000000"], 0x480) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x4100, 0x0) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000100)={0x2710, 0x0, &(0x7f0000ffc000/0x2000)=nil}) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000040)={0x0, @in={{0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}}, 0x65, 0x1ff, 0x3, 0xce3d, 0xfff}, &(0x7f0000000640)=0x98) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000680)={r2, 0x76, "3692985639ab18085ed5878f3de0ba01da8a483cfee4f8e3ae00b9d23b205363602ada851f40a4a9f5c792eeff6348ed3d74564a54ae770c7cd8e56bbc3d97e87ab0bf5f6d73ed66fb6af9a63a37a254800b05716c665b8ce31f7a7a9ed0eb8ab38fa03d585828a66d3889d730872967ec191f831115"}, &(0x7f0000000700)=0x7e) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) 00:16:27 executing program 2: r0 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x2000) getsockopt$netrom_NETROM_N2(r0, 0x103, 0x3, &(0x7f0000001680)=0x8d81, &(0x7f00000001c0)=0xb0) r1 = socket$inet(0x10, 0x0, 0x9) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x44041, 0x0) ioctl$TCSETS(r2, 0x5402, &(0x7f00000016c0)={0xd5, 0x7, 0x1000, 0x96, 0xfff, 0x9, 0x6, 0x3ff, 0x1, 0x0, 0x7f, 0x7f}) mincore(&(0x7f0000ffa000/0x3000)=nil, 0x3000, &(0x7f0000000200)=""/168) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f0000001740)={0x0, 0x7a, "bbd2aefb17bf10628b70b23b1be3cc1581771a898b41b893c42953d3a33bc33db2eb7457ae3d7ccdbc4075b8b1dda5a714c00c3385f55e333e8cafb79e538b4f06747107906a7ed1520934f69463a5a964d66521c601e9009ed82605372b3b659b9749d46dc9bf8afbb1b9fdf17470c69222fc282f2ae3c0d27e"}, &(0x7f0000001800)=0x82) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000001840)=ANY=[@ANYRES32=r3, @ANYBLOB="02000400d2f8ec8246546f79"], 0x10) r4 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x1, 0x800) ioctl$KVM_GET_DEVICE_ATTR(r4, 0x4018aee2, &(0x7f0000000140)={0x0, 0x800, 0x2, &(0x7f0000000080)=0x4}) ioctl$BLKROGET(r0, 0x125e, &(0x7f0000000100)) sendmsg(r1, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0) readlinkat(r0, &(0x7f0000001880)='./file0\x00', &(0x7f00000018c0)=""/4096, 0x1000) socket$inet_icmp_raw(0x2, 0x3, 0x1) preadv(r4, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/225, 0xe1}, {&(0x7f00000003c0)=""/76, 0x4c}, {&(0x7f0000000440)=""/233, 0xe9}, {&(0x7f0000000540)=""/38, 0x26}, {&(0x7f0000000580)=""/124, 0x7c}, {&(0x7f0000000600)=""/4096, 0x1000}], 0x6, 0x0) getsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000028c0), 0x10) inotify_init() 00:16:27 executing program 2: r0 = socket$inet(0x10, 0x3, 0x6) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10000, 0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0xcdae25de6cca5b98, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f00000000c0)={@any=0xffffffff}) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0) 00:16:27 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[0xfeffffff], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) r2 = socket(0x11, 0x100000803, 0x0) r3 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={"6966623000faffffffffffffff00", 0x12}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'ifb0\x00', 0xa201}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@dev={0xfe, 0x80, [0x0, 0x0, 0xf5ffffff]}, 0x0, 0x0, 0x2}, 0x20) 00:16:27 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f760070") sendmsg$nl_xfrm(r0, &(0x7f0000001440)={&(0x7f0000000000)={0x10, 0x4170000}, 0x349, &(0x7f0000001400)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x0, 0x0, {{@in=@multicast1=0xe0000001, @in6=@mcast2={0xff, 0x2, [0x0, 0x0, 0x2000000], 0x1}, 0x0, 0x0, 0x0, 0x0, 0xa, 0xfffffff0, 0xf0ffffffffffff}}}, 0xb8}, 0x1}, 0x0) [ 317.630593] BFS-fs: bfs_fill_super(): No BFS filesystem on loop5 (magic=a2c4c400) 00:16:28 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) write$rdma_cm(r1, &(0x7f0000000640)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f00000004c0)}}, 0x10) close(r1) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0x6e) listen(r4, 0x0) connect$unix(r3, &(0x7f0000932000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) tkill(r2, 0x1000000000016) 00:16:28 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x10, 0x3, 0x6) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e280000001100ffffba16a0aa1c0010b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) [ 317.722506] BFS-fs: bfs_fill_super(): No BFS filesystem on loop5 (magic=a2c4c400) 00:16:29 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) write$rdma_cm(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="080000000000000035112ca20df12ce59a3ae72c7c11", @ANYPTR=&(0x7f00000004c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00']], 0x10) close(r0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0x6e) listen(r3, 0x0) connect$unix(r2, &(0x7f0000932000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) tkill(r1, 0x1000000000016) 00:16:29 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="295ed277a4200100360070") mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) rmdir(&(0x7f0000000340)='./file0//ile0\x00') r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) fstat(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r2) mkdir(&(0x7f0000000100)='./file0//ile0\x00', 0x0) 00:16:29 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[0xfeffffff], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) r2 = socket(0x11, 0x100000803, 0x0) r3 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={"6966623000faffffffffffffff00", 0x12}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'ifb0\x00', 0xa201}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x5000000]}, 0x0, 0x0, 0x2}, 0x20) 00:16:29 executing program 2: r0 = socket$inet(0x10, 0x3, 0x6) getsockname(r0, &(0x7f0000000240)=@in={0x0, 0x0, @local}, &(0x7f00000002c0)=0x80) syz_mount_image$bfs(&(0x7f0000000080)='bfs\x00', &(0x7f0000000140)='./file0\x00', 0x1, 0x1, &(0x7f0000000200)=[{&(0x7f0000000180)="f6959f60e9e504dfe7051bb318abbd636119dc628a23d7b183dcd16191baadca2a64559785a79cdeeeae141ca4c06dc79a02a7637ce684b56ab178b23728b8317371710404c14570a020247e9ea6213518bdf3bceab79d70a82e9dd608248f37915d7d6f08bc258729a4a8df72c83390ba7911c003111d304dbcb85e603bfe", 0x7f, 0x5}], 0x1000, 0x0) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000000040), &(0x7f00000000c0)=0xc) 00:16:29 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f760070") sendmsg$nl_xfrm(r0, &(0x7f0000001440)={&(0x7f0000000000)={0x10, 0x4170000}, 0x349, &(0x7f0000001400)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x0, 0x0, {{@in=@multicast1=0xe0000001, @in6=@mcast2={0xff, 0x2, [0x0, 0x0, 0x200000000000000], 0x1}, 0x0, 0x0, 0x0, 0x0, 0xa, 0xfffffff0, 0xf0ffffffffffff}}}, 0xb8}, 0x1}, 0x0) 00:16:29 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x10, 0x3, 0x6) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e280000001100ffffba16a0aa1c0009b3ebea8653b1cc7e63975c10c47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 00:16:29 executing program 4: pipe2(&(0x7f0000989000)={0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) mount(&(0x7f0000434ff8)='./file0\x00', &(0x7f0000abf000)='./file0\x00', &(0x7f0000f4c000)='jfs\x00', 0x1023402, 0x0) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000001200), 0x3000, &(0x7f0000001280)) unlink(&(0x7f00003b3000)='./file0\x00') dup2(r0, r1) 00:16:29 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) write$rdma_cm(r1, &(0x7f0000000640)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f00000004c0)}}, 0x10) close(r1) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x7, 0x0) bind$unix(r4, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0x6e) listen(r4, 0x0) connect$unix(r3, &(0x7f0000932000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) tkill(r2, 0x1000000000016) 00:16:29 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x10, 0x3, 0x6) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e280000001100ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f6ca3", 0x4c}], 0x1}, 0x0) 00:16:29 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f760070") sendmsg$nl_xfrm(r0, &(0x7f0000001440)={&(0x7f0000000000)={0x10, 0x4170000}, 0x349, &(0x7f0000001400)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x0, 0x0, {{@in=@multicast1=0xe0000001, @in6=@mcast2={0xff, 0x2, [0x0, 0x0, 0x3000000], 0x1}, 0x0, 0x0, 0x0, 0x0, 0xa, 0xfffffff0, 0xf0ffffffffffff}}}, 0xb8}, 0x1}, 0x0) 00:16:29 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="295ed277a4200100360070") mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) rmdir(&(0x7f0000000340)='./file0//ile0\x00') r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) fstat(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r2) mkdir(&(0x7f0000000100)='./file0//ile0\x00', 0x0) 00:16:29 executing program 2: pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$ax25_int(r1, 0x101, 0x8, &(0x7f0000000140), &(0x7f00000000c0)=0xffffffffffffff08) r2 = socket$inet(0x10, 0x3, 0x6) getsockopt$ax25_buf(r0, 0x101, 0x19, &(0x7f0000000180)=""/90, &(0x7f0000000040)=0x5a) sendmsg(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000200)={0x0, 0xffffffff7fffffff, 0x101}, &(0x7f0000000240)=0x8) ioctl$KVM_ARM_SET_DEVICE_ADDR(r0, 0x4010aeab, &(0x7f0000000080)={0x7}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000300)={r3, @in={{0x2, 0x4e24, @broadcast=0xffffffff}}, 0x10001, 0x1, 0x8, 0x401}, 0x98) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000280)={r3, 0x10000}, 0x8) 00:16:30 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f760070") sendmsg$nl_xfrm(r0, &(0x7f0000001440)={&(0x7f0000000000)={0x10, 0x4170000}, 0x349, &(0x7f0000001400)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x0, 0x0, {{@in=@multicast1=0xe0000001, @in6=@mcast2={0xff, 0x2, [0x0, 0x0, 0xf00], 0x1}, 0x0, 0x0, 0x0, 0x0, 0xa, 0xfffffff0, 0xf0ffffffffffff}}}, 0xb8}, 0x1}, 0x0) 00:16:30 executing program 2: r0 = socket$inet(0x10, 0x3, 0x6) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f0000000040)={0x1ff4, {{0x2, 0x4e23, @local={0xac, 0x14, 0x14, 0xaa}}}}, 0x88) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0) 00:16:30 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[0xfeffffff], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) r2 = socket(0x11, 0x100000803, 0x0) r3 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={"6966623000faffffffffffffff00", 0x12}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'ifb0\x00', 0xa201}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x500]}, 0x0, 0x0, 0x2}, 0x20) 00:16:30 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="295ed277a4200100360070") mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) rmdir(&(0x7f0000000340)='./file0//ile0\x00') r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) fstat(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r2) mkdir(&(0x7f0000000100)="2e2f66696c65302f2f696c65300e", 0x0) 00:16:30 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x10, 0x3, 0x6) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e280000001100ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0xf}], 0x1}, 0x0) 00:16:30 executing program 4: pipe2(&(0x7f0000989000)={0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) mount(&(0x7f0000434ff8)='./file0\x00', &(0x7f0000abf000)='./file0\x00', &(0x7f0000f4c000)='jfs\x00', 0x1023402, 0x0) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000001200), 0x3000, &(0x7f0000001280)) unlink(&(0x7f00003b3000)='./file0\x00') dup2(r0, r1) 00:16:30 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) write$rdma_cm(r1, &(0x7f0000000640)=ANY=[@ANYBLOB="0c000000080000fa", @ANYPTR=&(0x7f00000004c0)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e60000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"]], 0x10) preadv(r0, &(0x7f0000000440)=[{&(0x7f0000000040)=""/230, 0xe6}, {&(0x7f0000000140)=""/203, 0xcb}, {&(0x7f00000002c0)=""/208, 0xd0}, {&(0x7f0000000240)=""/39, 0x27}, {&(0x7f00000003c0)=""/50, 0x32}, {&(0x7f0000000400)=""/46, 0x2e}, {&(0x7f0000000680)=""/251, 0xfb}], 0x7, 0x0) close(r1) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000780)='/dev/qat_adf_ctl\x00', 0x200, 0x0) ioctl$SG_GET_KEEP_ORPHAN(r5, 0x2288, &(0x7f00000007c0)) bind$unix(r4, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0x6e) listen(r4, 0x0) ioctl$GIO_UNISCRNMAP(r5, 0x4b69, &(0x7f0000000800)=""/47) connect$unix(r3, &(0x7f0000932000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) tkill(r2, 0x1000000000016) 00:16:30 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) write$rdma_cm(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c00524574ab7bdcac3533502ceda6e5a6dec72cd8fa2dc82a738a2fecd42d5c9485d1320d6b2da7bab0b02ac03147f762e5a70bfbe305000000ec3f001ee31c3e9d5c06c79bbea1741819d7102ee4152b43bed4f56df1b12bad31e482a4ef2fe821720fabec7ff9f8f75d2952d8720a42f275099f9a2f1c05fb73578dd477c7681f8fa6ccf1fab769b8c1272f62179fae0eb831d8a74aaa78f1c74cc09500d86447a9c374c6c7f6124f6b5ff71c08013f06fc519e4e32758dc3a47c0447acaaef846f5f5eb872f77f791031d637dde9177c9a188bb1fb296b465e9edf61305d8d00000062c281e09f1626de460619f981", @ANYPTR=&(0x7f00000004c0)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000550000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000bbc44bd7c9f78bfe000000703ea13660a26d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"]], 0x10) close(r0) syz_open_procfs$namespace(r1, &(0x7f0000000040)='ns/uts\x00') r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x800, 0x0) ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r4, 0x800455d1, &(0x7f0000000100)) bind$unix(r3, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0x6e) listen(r3, 0x0) socket$netlink(0x10, 0x3, 0x9) r5 = fcntl$dupfd(r0, 0x406, r3) ioctl$KDGKBLED(r5, 0x4b64, &(0x7f0000000080)) connect$unix(r2, &(0x7f0000932000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) tkill(r1, 0x1000000000016) 00:16:30 executing program 2: r0 = socket$inet(0x10, 0x3, 0x6) r1 = syz_open_dev$sndpcmp(&(0x7f00000001c0)='/dev/snd/pcmC#D#p\x00', 0x100000000, 0x0) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000200)) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffff9c, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x1c, &(0x7f0000000040)=[@in6={0xa, 0x4e21, 0x2, @empty, 0x2}]}, &(0x7f00000000c0)=0x10) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000140)={0x80000000, 0xc, 0x3, 0x40, r2}, &(0x7f0000000180)=0x10) 00:16:30 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f760070") sendmsg$nl_xfrm(r0, &(0x7f0000001440)={&(0x7f0000000000)={0x10, 0x4170000}, 0x349, &(0x7f0000001400)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x0, 0x0, {{@in=@multicast1=0xe0000001, @in6=@mcast2={0xff, 0x2, [0x0, 0x0, 0x2], 0x1}, 0x0, 0x0, 0x0, 0x0, 0xa, 0xfffffff0, 0xf0ffffffffffff}}}, 0xb8}, 0x1}, 0x0) [ 320.489465] QAT: Invalid ioctl [ 320.502057] QAT: Invalid ioctl [ 320.553472] QAT: Invalid ioctl [ 320.563699] QAT: Invalid ioctl 00:16:31 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x10, 0x3, 0x6) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e280000001100ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0xec0}], 0x1}, 0x0) 00:16:31 executing program 2: openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sloppy_tcp\x00', 0x2, 0x0) r0 = socket$inet(0x10, 0x3, 0x7) syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x200400) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0) 00:16:31 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="295ed277a4200100360070") mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) rmdir(&(0x7f0000000340)='./file0//ile0\x00') r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) fstat(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r2) mkdir(&(0x7f0000000100)="2e2f66696c65302f2f696c65300e", 0x0) 00:16:31 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) write$rdma_cm(r0, &(0x7f0000000640)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f00000004c0)}}, 0x10) close(r0) r2 = memfd_create(&(0x7f00000000c0)='vmnet1)\x00', 0x1) readlinkat(r2, &(0x7f0000000100)="e91f7189591e9233614b00", &(0x7f0000000140)=""/143, 0x8f) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0x6e) listen(r4, 0x0) connect$unix(r3, &(0x7f0000932000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) getsockopt$netrom_NETROM_IDLE(r2, 0x103, 0x7, &(0x7f0000000200)=0x9, &(0x7f0000000240)=0x4) connect$unix(r4, &(0x7f0000000040)=@file={0x1, "e91f7189591e9233614b00"}, 0x6e) tkill(r1, 0x1000000000016) 00:16:31 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[0xfeffffff], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) r2 = socket(0x11, 0x100000803, 0x0) r3 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={"6966623000faffffffffffffff00", 0x12}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'ifb0\x00', 0xa201}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0xfffffff5]}, 0x0, 0x0, 0x2}, 0x20) 00:16:31 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f760070") sendmsg$nl_xfrm(r0, &(0x7f0000001440)={&(0x7f0000000000)={0x10, 0x4170000}, 0x349, &(0x7f0000001400)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x0, 0x0, {{@in=@multicast1=0xe0000001, @in6=@mcast2={0xff, 0x2, [0x0, 0x0, 0xfffffffc], 0x1}, 0x0, 0x0, 0x0, 0x0, 0xa, 0xfffffff0, 0xf0ffffffffffff}}}, 0xb8}, 0x1}, 0x0) 00:16:31 executing program 4: pipe2(&(0x7f0000989000)={0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) mount(&(0x7f0000434ff8)='./file0\x00', &(0x7f0000abf000)='./file0\x00', &(0x7f0000f4c000)='jfs\x00', 0x1023402, 0x0) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f00000000c0)='./file0H', 0x0, 0x0, &(0x7f0000001200), 0x3000, &(0x7f0000001280)) unlink(&(0x7f00003b3000)='./file0\x00') dup2(r0, r1) 00:16:31 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) write$rdma_cm(r1, &(0x7f0000000640)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f00000004c0)}}, 0x10) getsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x8) close(r1) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0x6e) listen(r4, 0x0) connect$unix(r3, &(0x7f0000932000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) tkill(r2, 0x1000000000016) 00:16:31 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="295ed277a4200100360070") mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) rmdir(&(0x7f0000000340)='./file0//ile0\x00') r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) fstat(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r2) mkdir(&(0x7f0000000100)='./file0//ile0\a', 0x0) 00:16:31 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x10, 0x3, 0x6) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e280000001100ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0xfffffdef}], 0x1}, 0x0) 00:16:31 executing program 2: r0 = socket$inet(0x10, 0x3, 0x6) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000140)={'filter\x00', 0x7, 0x4, 0x480, 0x0, 0x280, 0x280, 0x398, 0x398, 0x398, 0x4, &(0x7f0000000040), {[{{@arp={@rand_addr, @multicast2=0xe0000002, 0xff, 0xff000000, @empty, {[0x0, 0x0, 0xff, 0xff, 0xff]}, @empty, {[0x0, 0xff, 0xff, 0xff]}, 0x2, 0x10000000000, 0x5, 0x7ff, 0x6, 0xbe1, 'bond_slave_0\x00', 'veth0\x00', {}, {0xff}, 0x0, 0x9}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@mac, @mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}, @empty, @multicast2=0xe0000002, 0x9, 0xffffffff}}}, {{@uncond, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}, @mac=@dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x17}, @dev={0xac, 0x14, 0x14, 0x1a}, @dev={0xac, 0x14, 0x14, 0x21}, 0x4, 0xffffffff}}}, {{@arp={@broadcast=0xffffffff, @local={0xac, 0x14, 0x14, 0xaa}, 0xffffff00, 0xffffff00, @mac=@link_local={0x1, 0x80, 0xc2}, {[0x0, 0x0, 0xff, 0x0, 0xff, 0xff]}, @mac, {[0x0, 0xff, 0x0, 0xff, 0xff]}, 0x4, 0x100000000, 0xff, 0x2, 0x1f, 0xffffffffffff0000, 'veth0\x00', 'nr0\x00', {0xff}, {}, 0x0, 0x8}, 0xf0, 0x118}, @unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x80000001}}}], {{[], 0xc0, 0xe8}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x4d0) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0) 00:16:31 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f760070") sendmsg$nl_xfrm(r0, &(0x7f0000001440)={&(0x7f0000000000)={0x10, 0x4170000}, 0x349, &(0x7f0000001400)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x0, 0x0, {{@in=@multicast1=0xe0000001, @in6=@mcast2={0xff, 0x2, [0x0, 0x0, 0x4], 0x1}, 0x0, 0x0, 0x0, 0x0, 0xa, 0xfffffff0, 0xf0ffffffffffff}}}, 0xb8}, 0x1}, 0x0) 00:16:31 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x10, 0x3, 0x6) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e280000001100ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x2000004c}], 0x1}, 0x0) 00:16:32 executing program 2: r0 = socket$inet(0x10, 0x3, 0x3a53) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0) 00:16:32 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[0xfeffffff], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) r2 = socket(0x11, 0x100000803, 0x0) r3 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={"6966623000faffffffffffffff00", 0x12}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'ifb0\x00', 0xa201}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x2]}, 0x0, 0x0, 0x2}, 0x20) 00:16:32 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x10, 0x3, 0x6) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e280000001100ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x33fe0}], 0x1}, 0x0) 00:16:32 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="295ed277a4200100360070") mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) rmdir(&(0x7f0000000340)='./file0//ile0\x00') r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) fstat(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r2) mkdir(&(0x7f0000000100)='./file0//ile0\x00', 0x0) 00:16:32 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f760070") sendmsg$nl_xfrm(r0, &(0x7f0000001440)={&(0x7f0000000000)={0x10, 0x4170000}, 0x349, &(0x7f0000001400)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x0, 0x0, {{@in=@multicast1=0xe0000001, @in6=@mcast2={0xff, 0x2, [0x0, 0x0, 0xfcffffff00000000], 0x1}, 0x0, 0x0, 0x0, 0x0, 0xa, 0xfffffff0, 0xf0ffffffffffff}}}, 0xb8}, 0x1}, 0x0) 00:16:32 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) write$rdma_cm(r0, &(0x7f0000000640)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f00000004c0)}}, 0x10) close(r0) r2 = socket$unix(0x1, 0x5, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0x6e) listen(r3, 0x0) connect$unix(r2, &(0x7f0000932000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) tkill(r1, 0x1000000000016) 00:16:32 executing program 4: pipe2(&(0x7f0000989000)={0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) mount(&(0x7f0000434ff8)='./file0\x00', &(0x7f0000abf000)='./file0\x00', &(0x7f0000f4c000)='jfs\x00', 0x1023402, 0x0) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000001200), 0x3000, &(0x7f0000001280)) unlink(&(0x7f00003b3000)='./file0\x00') dup2(r0, r1) 00:16:32 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) write$rdma_cm(r1, &(0x7f0000000640)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f00000004c0)}}, 0x10) close(r1) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0x6e) listen(r4, 0x0) connect$unix(r3, &(0x7f0000932000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x80000) accept4$packet(r5, 0x0, &(0x7f0000000080), 0x80000) tkill(r2, 0x1000000000016) 00:16:32 executing program 2: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x14080, 0x0) connect$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0x2, @local={0xac, 0x14, 0x14, 0xaa}}}, 0x1e) r1 = socket$inet(0x10, 0x3, 0x6) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0) 00:16:32 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x10, 0x3, 0x6) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e280000001100ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x7ffff000}], 0x1}, 0x0) 00:16:32 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="295ed277a4200100360070") mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) rmdir(&(0x7f0000000340)='./file0//ile0\x00') r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) fstat(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r2) mkdir(&(0x7f0000000100)='./file0//ile0\x00', 0x0) 00:16:32 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f760070") sendmsg$nl_xfrm(r0, &(0x7f0000001440)={&(0x7f0000000000)={0x10, 0x4170000}, 0x349, &(0x7f0000001400)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x0, 0x0, {{@in=@multicast1=0xe0000001, @in6=@mcast2={0xff, 0x2, [0x0, 0x0, 0xfffff000], 0x1}, 0x0, 0x0, 0x0, 0x0, 0xa, 0xfffffff0, 0xf0ffffffffffff}}}, 0xb8}, 0x1}, 0x0) 00:16:32 executing program 2: r0 = socket$inet(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000140)=ANY=[@ANYRES32=0x0, @ANYBLOB="0010000043da1ddef52851d4326b6fb8cf92bcc9302ee4c06e3e6a347190c1858800051a23ede25e5b143e21dd2220e44c8ca73b9cbe5e141c6ad8e756b4c57d75e025d256b7d39f96e918d63d61f00a965cc99c2a431c283d6ed77e5b855ecf3d71dd35d20e4bd501fb741cf3dcc997b53c5303844050692364eb23848f88f965693bc735f59112a85bc488dbb2fcebfc0d7b84e1028324f5f438de4e341a950dd0869bdc6f945b3f3db247e5dad4240e4a365c08ad6026b3532fd107f10ceec5fd38b9400812b7ac5d740c3fbf74702bc4d675d20bd7a1d08601748180a4a95966f3cd8dbeb711d257a826371a180d506c6a24e4eeecfa7f400301a8fbf047cdc83d2bea2fd2eb0c38a24decb2b2594ecc6d2324c959b0693dd98086b6e2caa6d862f590b313dbc93f88378973c7a8a61452a9a6ce05c0752a1c51b9e7c5a23aba549c4773bb65880789a705123d5a4e18b678a19422313391a8ae63e3da8d4569a62d14b920d8295899b689a57f88f9bbabf4e4e044fb808065911b6aa0922acd07310e3c1d58d74e18f2b7ba866b7bed5e599fd349695f1d5703732f1bac300e55f702ace534e503086c7771dcd611fe46d7e93f1adee3d12b3d4cee388c0aa738bc23a24d31405b5ebc3268881d7d5cc377490d600075db413bc9ee655ef75c7e9f27a8bbeb36d02ba0939ead1c10f49d7076c1a7051668b8ea5f6629ba6c3bb367e21cca47cab05e6752cc58fa20d27b0892ae9fa6ed5432a4320a75e7ef29181d5364b05085bdf1dcdb04b5e6b37f24ceb3f71c9cc9a344af18b5ab73f11eb3d97e1c109cb5e1f4761a15f09cf7ace168deda301db9ff23640c5256fd57d425f953bf7318598466db19d29baa1f0233d75bf97a8e17948d0b464b2b0788fed5cfe2c63e9f0fbea143b43c4eec1fd208a4f06c513ac2b0356fa77c37fb4ca0bfb5117373e05278f495646339b209faab7f3b1fd523a2bd8264f2d6401a48ee3419e535141bd957ee1e1a1586edc85dabbdfc740c70952b7fe34bbb61ee86b824f86cdb1f085b3a641cedc6d9626b73e160a2aacdb0df6eaf7ad5ae33baed978f7adf0b1ce742c9b09dc4348b3804a397bc1442427e9bfa8166595eba1df8598cbc11a4654b0462617164a77ba0acc69eeb292a0580d78731735c7fad0f4ca64cb28c6b08eff372ca7cca31c3fbe05c4397c86a1690dcb8e29c720b5dbe6435d7cc97b0c53d555c4d0f16beaca4cac4f749c2ac6fdc553204ed91fc9d428282f8c38a6fd443ce9fcb167e0df3d11cdba87b9de787b4c92c105a2a79df89a7746e4f18abd2d9424c583b81e4d686140219604933a4a671fb2657793ff17f1baf27c0395bf8fe7b3b730b0a715e39d5f4e318f92930949c3ee90a89baa8b0bad08eb9fa1acce4beae1e369ed226dddbe512c3cbb6447f26b33dd84c09730a71c16ae30d87deb2b3e7db26ebb18444b9346e79b9fae900b96e06fc8cfdc095e03d60bb5e617483d9fab6b4cfe17b387abbd0d5c971a4db27459e2a5fc90572fc2b65c694e4153c500228c4110a9cbd03ea16c37334701e57ab5c29e3f3eb2f3694c426b493b2e1403b203469ca057d90e03e697b3757b39287007f1a8ba69ccde2e24aad73fdf59a470fe0f147e250c1a750acbaa70b9ee7134fe4cb2a81e5f0cfb52698ae843c95bea22a701b15d63589dc4c2a49c88cd965b0648dd8e22e5a39fc6c1fbc4cfd2bd8d6402a15e911824f8683b9b3ea0f930947ba563579e738aac3c5df38c940533e829d46d7a7c783c3757f264b548f95f41dc5b3d6cd737e9b9a23363e9696f71a49a23b86bb7c041c41a502e2ab8170364ccefc2ccccd33ed4d54afcd15c358a78d201113ea88f28bfa5c306bd20aae59dd026f30cf02f09eb43cb0e97a00158c628bf1392c71e6dd8b07716294f5abff7dfe7345c589559264f6ce901cb3e70849205d6e2cf0d3ce50d869f7114ddbc1a1799323e8fed61c9c500ee0825b16f3f96426952b52626cce0b75b3f3d47dcbba6b5f9f572ff70e59dc17c296ff10b28f19158f25614234667e90ae3e60f5785b1536ced97a0c0d5674fdef871ee82675c722397cacf35283bf198f99a13030c5673cc8576b947b1211f28ef7b9af5e1fc5c84a0795c3e02660ad66ec936c6499ac1725604e3cf1138e2bf92597dbed2f9faa8a5ce17597fbe457dbe408911e72c2e12d06d72c2bdd7b01fae126bde44156405b66a1c11605477edf62b20242b116dbbac4a5598144f577fd4f91b8cd907cd4960eabe703627ff3f568a0b35364ae9564439d3350c1988f501548dd862668b0f8897ebec30c1df0b891d522ee04d51d1d040c2d338aaf3add7aeb479175705a0f5c63baa6f265c2b3bbaaa1b41e592e2c08287dc73362f08aef44d7a590cc75fc5d5a190ed2cc1088e1eeab6cdb730d01bf5bf5065a1b11438f7f9b15acc4e03c4b6a5a4a77d1ab55a219a6e9a68f52c9d54a8fd59d3033168433e93f10b7af1f191913e427cdb9fe2cdfccfe43ebef492ff7647907be0e31a282520f8f09c82dfb96d8183e3ed7f485fefc8b51bd778db8b71b72041ba1a3d80fe0685e9cd7cb3f8827b3ae972eec09742f049e988bb9429e4c84dce57f481fb6f084dff8ee82814769cf016b40cc8ce486d5934352a2098c46822699be8a8c60bbfcf6a03551e047b975f6c47a3ad2857e295522947cc5bc6c0b18bbeb067ce97db00e16e808a6f7982890ba1a0de729452594e5a12a114d016ee3a24f3cb3d13603400f925a9eee0609cfa5c484809a4454a303113b86b2ed7d05a05d2c3cc9f6f48d39e13af2922a45dfc31223916b413d8e40e8c83a2286f69a85b22eb0b80da04dcc247e1c38b65ee112e326eb01ffa3ab7057064e10286cc13f904ffe3d915c18587a15ab722bcbf7986d4d9297faad24c5d7a2a707a42e8d3c2d5e126e25725274f7f43aab099e321dab3a45093fa6cf9a642f37d30339c4a12526a5b9d34fca67e2924e067f72e58a4b6cdb8c1a8931f71d4fd1bd397d5d2c64656367d2b5743eceaf847f2441667d74a3921d7e2dbfd8cd3b290d7396f0f8bf5c618f69bf7f957dfa1d86d37252979b4eb97e2b2fc6ead0acae0079dc1d07b7699f9ff7d5a1687cafd5f95063edd798b8dd67259ab2d574d5f7d13fc7a15ef5d9cd5d216abd54fb9ab94476f99bf659ee025fb7fbcaab57e6461fc5b4f41aa18d0fd9fcb7ade94f442bf4c8785c5c386ed8516c2bf97bf92da69affeac0d19dd36bc2a78f6f216cb461671ffa39d2c8713ea9aa6dcf255a3971a07986e609dbfdcd2eada7720401230c02521b003991d078b957cb02a53dcd3eca81a6cf65342f6e2e49505e7fba7d494ab72b077d9f520672b7163abab1128ab37f8631f4bceeee2e9ba993f92419e6a9d677bb3420ea6460f32373eccb87669ff2285d07204db27385ddca96a30cc450c0212e1fe4c9d0919308570b4ec099690bb057d2dfbb04a9030b27b56c52f418cf7a485ed3434e25758a19f30a863b1b7b76fdab61241898641b3be727551db146368c1c99c75f4b99768d51d0c05725508eb586fdd5d77f0fc611b3b3fdddde48556f0e2889b754fe909c4e1361912d62ac1bab99ec400f55ad3b8bd5971baca3cf8f85561d6eb0164b92815cf3664ee5249b96ff053b349d37a6b15f4ccb9be55849f92d6c680e6b3ce75bcc3b4592f9eca1b36741898559a49827245a05f52862b8b38c1f316dd2f4c0b585088e71b6796a97cd9d9097cecf6eb4cf5c84b67e761e9e414e86e8dcbf6f6b9bcc208ad864b3e993325889d246986ae00633703e244608426556f21955782ec6dbdfc78a85c253458982a3e05d6f3a9e9dc619dcf13aa23ebb471f33340244043e0f2d962ca6acc437ab20dbeac8e8a38f055f5de2f3714ef34297c523f3082350629047362e4b78fa57c80b060c0b4cee472b98a22650d5b65403afd5b1e16062fd57bb665c2678c728ae2a9ff919fee95ae1915084b363765365aa0882b061cd695a74452e855f237a8f1bd39f8e1c1637dc48801af5840164f22f67e2fd98a66c904fda73eb873c4565c51825379ff8300e0a5549d9213f93f6b153209154caf405dfe9345586f7e1d8fc42162c6ae770ad6cf04b33090b473a049ef5c9ee40fcfd3c6580fa9c0f7c33904ec3708ea8ce73a6d89d45b90cecaf54d4ecd6381fd0b4170d8a7a38b0949f4278d532ac0f2597f3910262a64bfc39b91b17204c2950469f0de5f6912ce9e2c9c62e275deae7e6a45161c69628979e444fd6946f0a2ff888bbea14be0166c7748fba9615e7a022b176561214498cead063125bcce65753dbef75050bda5f570fd68b1d33547bcdd104c5306ac7ed9e384493049f3a04d6588efbe5d77c0fb780e5f0a9057e7eb0900062c74cbe6e0106a8256f4f733c876bfd0717cb5c8173b9411a96fb7685b4e6bee99b743e9144f662673998312692bb2601e2c5614fe9a3eddef6286f7798d46e6f8a73f4a8f8248fc37220d03555d208864b384440e471ab505515b9dbe256865fad67041de87077a990acd43ac75f478b048742914654ec0000000001000000c016996a1e6694032d5a3a3b81dc115d28d00036e3ca0928d0e77dd0dfcfbdbeac27451715c5a23832caf37e74bf4a583af5f9efb26ae4dcbab69ba27a6d1ccec32c7914f4801decbe8072f5ae2aa774c99b9c97ed6d48409db0f893ff34441592b3c152f9928b121b8f5c438111f977b0896716e8c888012c3793a59a62b94bff4ad91914d4da73ee13f9670ec6e7be4cdac2a3877a0713b3725d969ed42a924edccd1f6030496a227bf9f9cd411b42e561639decbce4ef7b6523f313b7e23fd9655919c7f9f1259d40c392c9ebdd02f3cfaded84c3ccc31ddf8857ad7ed6edfd0b4d9c37704c54a8e8fc824a2bbdc971e6e9ad69e30095ae4989dce2451da820ad441a384399757e4fda2543f4e24b26460e7b421ba8aa2f9841abe9eecd5c9031db4770e769fef2be277ace1c343db94836c24ba51465a9c072c2f11a98e89df401e69f073fd0b2f2d66b57917aa649fcdd0db437f8f21f6b90988da1bcaad76fe798d0a6885f60ead948d99e42290c23e0ab35c259ba397879432a26625b3e47b2ffb42c175e959c41c29d221da35fbe4c3fe18864940a04fa9a8ac03c3dd161244e8e57dd196e8058b5e979c3a09859b62d766f07d48856cf74c69e45e0735029503b250077f31b9f28ca6b46de24b1e168d048dee2cfa3be42425aec3fca408d1cee8b6bf2326c53c4df197bde05c868ce0ff0b167eba35e813630eaa665e5257bf1604567cf477aaf6e9d6b1e8be60f9304dc30786ba7bf52bd186352d5993bb67466aa6b1d4f687700bbf653a7c8761c2ce292ba540778035c24a294ea204c53aabb1dbef65595ac8a516224ec2437932cf4f43ae1e230ea656e613abde366fb74493a264d5aa612749effe57ad8a5ca63dacf5846debbb918965dee51513bf571d7fb8b842df7ee03757e9d50383764699909d115303ebb30baf1e1d0d9d241c0ff7523157df9a9c5323506d86ef811bbd6977bca661357ea2e8f565359acb0c002822263e4995085c016f669db661118c4262caf87c0398a83b64629fdcbf53daabbcdf5c90acd082918381a8ce41596f69e1f649003f1990aabc9bad3e7c9ff595bd4e2e49d2bc35273d008c8831137d54fc1cdf23a8d6751dc4583e4ffd68df601ceb82f39883e9a1a57218386c079412ac84ba5a716f5d7a9f35ff565ad8d79363ba35089c22e19ee147bd4"], &(0x7f0000000040)=0x1008) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000001180)={r1, 0x1000, "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"}, &(0x7f0000000080)=0x1008) 00:16:32 executing program 2: socketpair(0x1, 0x1, 0x2, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f00000000c0)={&(0x7f0000ffc000/0x4000)=nil, 0x10001, 0x7, 0x4000000020, &(0x7f0000ffc000/0x4000)=nil, 0x9}) r1 = socket$inet(0x10, 0x3, 0x6) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0) 00:16:33 executing program 2: r0 = socket$inet(0x10, 0x3, 0x6) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x1, 0x0) getsockname$ax25(r1, &(0x7f0000000080), &(0x7f00000000c0)=0x10) sendmsg$nl_route(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000220000042dbd7000fddbdf2500000000"], 0x14}, 0x1, 0x0, 0x0, 0x8080}, 0x4000000) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000873000)={&(0x7f00006b1ff4)={0x10}, 0xc, &(0x7f0000711ff0)={&(0x7f0000000140)=ANY=[@ANYBLOB="300000001c00130800000000002000000200004955a0d265e64fad00", @ANYRES32=0x0, @ANYBLOB="0000000008000100ac1400000c000200aaaaaaaa00000000"], 0x30}, 0x1}, 0x0) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0) 00:16:33 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f760070") sendmsg$nl_xfrm(r0, &(0x7f0000001440)={&(0x7f0000000000)={0x10, 0x4170000}, 0x349, &(0x7f0000001400)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x0, 0x0, {{@in=@multicast1=0xe0000001, @in6=@mcast2={0xff, 0x2, [0x0, 0x0, 0xa0020000], 0x1}, 0x0, 0x0, 0x0, 0x0, 0xa, 0xfffffff0, 0xf0ffffffffffff}}}, 0xb8}, 0x1}, 0x0) 00:16:33 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[0xfeffffff], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) r2 = socket(0x11, 0x100000803, 0x0) r3 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={"6966623000faffffffffffffff00", 0x12}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'ifb0\x00', 0xa201}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x100000000000000]}, 0x0, 0x0, 0x2}, 0x20) 00:16:33 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x10, 0x3, 0x6) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e280000001100ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x24}], 0x1}, 0x0) 00:16:33 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0), 0x10) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) write$rdma_cm(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="0b00c435ba3aa0a3", @ANYPTR=&(0x7f00000004c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00']], 0x10) close(r0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0x6e) listen(r2, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r3, 0x891c, &(0x7f0000000080)={'\x00', {0x2, 0x4e22, @remote={0xac, 0x14, 0x14, 0xbb}}}) tkill(r1, 0x1000000000016) r4 = creat(&(0x7f0000000040)="e91f7189591e9233614b00", 0x2a) ioctl$TUNDETACHFILTER(r4, 0x401054d6, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r4, 0xc018620b, &(0x7f0000000100)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r4, 0xc018620b, &(0x7f0000000140)={r5}) 00:16:33 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="295ed277a4200100360070") mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) rmdir(&(0x7f0000000340)='./file0//ile0\x00') r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) fstat(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r2) mkdir(&(0x7f0000000100)='./file0//ile0\x00', 0x0) 00:16:33 executing program 4: pipe2(&(0x7f0000989000)={0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) mount(&(0x7f0000434ff8)='./file0\x00', &(0x7f0000abf000)='./file0\x00', &(0x7f0000f4c000)='jfs\x00', 0x1023402, 0x0) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000001200), 0x3000, &(0x7f0000001280)) unlink(&(0x7f00003b3000)='./file0\x00') dup2(r0, r1) 00:16:33 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) write$rdma_cm(r1, &(0x7f0000000640)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f00000004c0)}}, 0x10) close(r1) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0x6e) listen(r4, 0x0) connect$unix(r3, &(0x7f0000932000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) tkill(r2, 0x1000000000016) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000080)={0x7, 0x70, 0x57105282, 0x595, 0xfff, 0x2, 0x0, 0x5, 0x8000, 0x8, 0x7, 0xffffffff, 0x0, 0x7fffffff800000, 0xfffffffffffffff7, 0x2, 0x3, 0x100, 0x9, 0x80, 0x4, 0xffffffffffffffff, 0x9, 0xb, 0x2, 0x5, 0x10001, 0x200, 0xfffffffffffff800, 0xb69, 0x5, 0x7, 0x7, 0x6617, 0xf475, 0x9, 0x66e, 0x8, 0x0, 0x40, 0x1, @perf_bp={&(0x7f0000000040), 0xd}, 0x2000, 0x100, 0x81, 0x3, 0xffffffffffffff7f, 0x5, 0x4}, r2, 0x10, r5, 0xa) 00:16:33 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x10, 0x3, 0x6) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e280000001100ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0xc0}], 0x1}, 0x0) 00:16:33 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f760070") sendmsg$nl_xfrm(r0, &(0x7f0000001440)={&(0x7f0000000000)={0x10, 0x4170000}, 0x349, &(0x7f0000001400)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x0, 0x0, {{@in=@multicast1=0xe0000001, @in6=@mcast2={0xff, 0x2, [0x0, 0x0, 0xffffffffffffffff], 0x1}, 0x0, 0x0, 0x0, 0x0, 0xa, 0xfffffff0, 0xf0ffffffffffff}}}, 0xb8}, 0x1}, 0x0) [ 322.802222] netlink: 20 bytes leftover after parsing attributes in process `syz-executor2'. 00:16:33 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="295ed277a4200100360070") mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) rmdir(&(0x7f0000000340)='./file0//ile0\x00') r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) fstat(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r2) mkdir(&(0x7f0000000100)='./file0//ile0\x00', 0x0) [ 322.857334] netlink: 20 bytes leftover after parsing attributes in process `syz-executor2'. 00:16:33 executing program 2: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000240)='/dev/urandom\x00', 0x400001, 0x0) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000280)) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x20000, 0x0) sendto$inet(r1, &(0x7f0000000140)="258065206b5a87bce92ea274aaf62d287e97ab153570cbe076e5476e378d24eeb80f11099e6a0b2026c9e34abccfbfcfe02b98191ca294b1bc31a888d52c1de294a2fef56e37df7aed1ced1818a2ce9adbbc0abe49e6f70b8fd8d07f049b93f9660ead71057ae56eb1f624a4793b164a746657b2de108b559d7c1dd9cbe45be4f13b125ee15b75e9e18b597a22a791c258ae50fb481e8f3e35554b0f05170f1e235ab65b1ee2efda82f49c548d21bc3825298768aec377646b518d3e0908cb6336fba0910d79aee18bcb45556181000a79e46739703df224ba79f52a619f46bb101de5ff5dfed726fc49e4c606d999ae3bcd", 0xf2, 0x10, &(0x7f0000000080)={0x2, 0x4e24, @broadcast=0xffffffff}, 0x10) setsockopt$inet_mreqsrc(r1, 0x0, 0x26, &(0x7f00000000c0)={@local={0xac, 0x14, 0x14, 0xaa}, @rand_addr=0x1, @broadcast=0xffffffff}, 0xc) ioctl$fiemap(r0, 0xc020660b, &(0x7f0000000500)=ANY=[@ANYBLOB="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"]) r2 = socket$inet(0x10, 0x3, 0x6) sendmsg(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0) 00:16:33 executing program 2: r0 = socket$inet(0x10, 0x3, 0x6) getpeername(r0, &(0x7f0000000040)=@pppol2tpin6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @mcast1}}}, &(0x7f00000000c0)=0x80) setsockopt$packet_buf(r1, 0x107, 0x1f, &(0x7f0000000140)="89e01e90ccbf1b85d5be03cad23c92d3039167d8b2232fa9c20bd7da75663cb6dd94b4b06d1385339bb95fbf500ab6d6490ffd8a71c4173ed8ea34eea7f9c010cd4c052e4333140b5550683753778e00d2fde2a9515de808e6aee591b4d73f3a1b788ddc5fe513874afaa236721788140ae107e6bcea1b609d95b438085e83", 0x7f) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0) 00:16:33 executing program 2: r0 = socket$inet(0x10, 0x3, 0x6) r1 = fcntl$getown(r0, 0x9) syz_open_procfs$namespace(r1, &(0x7f0000000040)='ns/cgroup\x00') sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0) 00:16:33 executing program 2: r0 = open(&(0x7f0000000040)='./file0\x00', 0x400001, 0x100) ioctl$KVM_DEASSIGN_PCI_DEVICE(r0, 0x4040ae72, &(0x7f0000000080)={0x1, 0x9, 0x100, 0x7, 0x40000000000800}) r1 = add_key(&(0x7f00000001c0)='cifs.idmap\x00', &(0x7f0000000200)={0x73, 0x79, 0x7a, 0x1}, &(0x7f0000000240)="5e55035da81e330fb3dae22f0b5068050439c8cf3130b0d337cd2699b66dce3a6f34d5387390a7e09de4c288418aba4b2804df36db63c228bd9c20df1eb2a34fbca0b6b8eec0b42d065855019d269fc863e867b49866bb9a830675717d8887414f0abe6ff443d5e822469c61a7f7e85381772e7cfe2b87246516dc43d583ebd262aae8f2f88af1c66fa3fafade07a0c51a12cb511f2dee93209a8ae4b1851fefbd838bbf4fe11cfbdfff350f2a3bedd6c1d12edff11699245239fc565f92d1d7194f6129fd8ec66a09dfa80ef925296eb1511668ec32", 0xd6, 0xfffffffffffffffb) ioctl$EVIOCGSW(r0, 0x8040451b, &(0x7f0000000380)=""/242) add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={0x73, 0x79, 0x7a, 0x2}, 0x0, 0x0, r1) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f00000004c0)={0xfffffffffffffff8}, 0x4) r2 = socket$inet(0x10, 0x4, 0x6) inotify_add_watch(r0, &(0x7f0000000340)='./file0\x00', 0x80000004) getpid() setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f00000000c0)={0x6, @broadcast=0xffffffff, 0x4e21, 0x2, 'sh\x00', 0x8, 0x8, 0x27}, 0x1de) sendmsg(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0) ioctl$EVIOCSREP(r2, 0x40084503, &(0x7f0000000540)=[0x7, 0x80000001]) syz_mount_image$minix(&(0x7f0000000580)='minix\x00', &(0x7f00000005c0)='./file1\x00', 0x0, 0x5, &(0x7f0000000a00)=[{&(0x7f0000000600)="b0ad6643dd5e464ebcf37aedf6dd369624ee2aac50114d33db57d2196bcd0e3f1600c67a54fabf756396515085f122fbe22eea6e703cc9c96280d78358178d006ee3fd90c2a5d31ba25fcf079cd28e38b2b1401fc10e9239d6ebf54c62f83574241c97f4e76b1e41983a6cda682be004eecbca77a0af273c98577b1c0368c1561d7d1b6b41e4572dea", 0x89, 0xfff}, {&(0x7f00000006c0)="b9b94b38ca3f8d6a20dc61024b2847de51ecb6ed868733f798acb8ee56673770c553f0c075a88faadf45313f5aeeae5620e76165bbd0a28d00b8ebee4c9de6392dfb1b7e9ee4afb050a1587193db143843dc810f6d9fd5aebc41da008175f1046d9892e9104e9b268696345e7e7bc8b83ad87bc2a6855a1c4a18c41b54084befc789aa18604918b066dc6de581cffd06c8e8248b58b2134dee23233899bca260b08aaa2cda19ae33e722119f660e1edbe263f999ac", 0xb5, 0xfffffffffffff9fd}, {&(0x7f0000000780)="53a7e054f05477ab35f1c0f8052a99f94291594f19e63700eb27025e39942e9196c8a2f4f19c738fd232868a68eeaa4dd17b66986f8319705d7b9e6016a20211c81d1f651c4c210b789fd693fdffc827b5d37f5f1dceb9882377759e53a0276b78088153dd0e3e66384ab08796f788688bb24b6eaedc70ad7870cd644311b35bba7730cd8446d851dd213c73c369a48258a71089b936aaae89b5aacd4da9bf521ebf2513a13d60feb99779679164bb6d1e5b", 0xb2, 0x8}, {&(0x7f0000000840)="0c1f53607b2c36b7ed915f09911a0b8232d15d01a0d8d09a262b2875eb7855f90350e8af95ccb3bb84863a2f2498a386ee74563edd8f1922c5801d127287b19687f9505cb67ffc025af5fd1197a147fd89d351d8389cf8615fbaebbdb236a3339eb0dfb7d63bc1bee76c3eaa6166191358bd406e2b48d444925c43f7eeb012d62524820b7b8bea8c7bbbead7d4384c7cf135fff677a3a370f5c6aee20aef68c36b48a773668c387ad8f6f3406eaf078f7418c4d89689154b8710fd68befc50d6a1a42518b277fb76345629ec1dd5180804f48dd0cd0467d1d9d5e272b1dc73c267a3f4097506cf593c12f24854f9c314cf6617ac1876f19da3", 0xf9, 0x10001}, {&(0x7f0000000940)="654f68bef99b2b32714b371515cef5d8515192bb69db8dd7d4f2c4c562bc9982ebbc4c4d3ebf09c72246a614cf280649a4a95a4371e0ecfe6007499cc36e5242304e57c052801e905d130722c023d71d1d2eafda3148b53c3270bfb71cfb6348a1986c2d41e8e728e964031efc4f53997a1ec438a639c787d091ca02137a67017be17907e7ea34f51c0770d1085f46be4735227289aac5", 0x97, 0x1}], 0x80, 0x0) ioctl$EVIOCREVOKE(r0, 0x40044591, &(0x7f0000000500)=0xd9) timer_create(0x5, &(0x7f0000001b80)={0x0, 0x20, 0x5, @thr={&(0x7f0000000a80)="6dc41aab142a05ee05318b2308282f8d075cc4cdf29bee997037467584a254a373cf1530eff93afebed3e8ec623e37f2093d2d842dbb720f160d82e68c44046b4d3fe16aa6245e5222d88fa8a248ede65f466127dd7ee0fa1385c24766a6b694a36fc5950408a1770a9db499babf5e80b5f2c117b1d7ab00dcbf7eb1bbf471f70402c3ffab2474a887fcc227e9bc97e0bb7bbf9f7907fe80466dba2ff7707ea9dc11e835469b3b02d9c29e2e34a5a33845fddc0f13505f4f7c73f552a4822ab391ec61bd4dc1ffb562a59968db57b9be08210aafb5122f7af7829fe63f0fa3eca26f8b04ba6cf04c24cafb62aa027824105e88b5b10393cdd4dbb63a4e", &(0x7f0000000b80)="17e85fbe6de74adda77340b807b0f7e5a1454109ac085721f49f1808b0478b34aa19f1e94088dc72c2d1bdb337aa8399cb4716400bf69ddb45ee2697533409b19d7f42b7067b20fbe0bf1e9cf7fe501c9af4628b697ba38d1c4f72ae314dc8619f5e5bbd967d076bfdd02c8ec73bf37784990b419e6be67a53537e601b3dafc8d387844bfd2aa320fffaa0d44d17d2a08a6df6a0670a21380ed1f754598d392456d957a6f211c53e13951563938148033a13b89ec00a39600064965c2119f1f2f0770407a33159f7741ea4793ff64edd6d2472d8601d550b9b78d0f7dc982aae7a1189409a0dc919523b1a5abc046dbe7e1dea25c8362b2ca769202e4304426fa566f845b19f1506b1c9232f4fb46c591bbe2126453e7814dfbaeea8ba829170ed883076ffc910c8f3fdfe5ec7f87caea734c3b7581e3e60f6c0aa9464d796f7fef39d0c58e0113b13c789c44c7f76b64f9d05bdc339c12d23866e11536e754e895f0f0e9f938091934eda95b7597c5568fc2228af316ba0db3516a112698f97ea54af3b3097a5e538273b6ac25a74a2d210b50979b89cb3370c7d8760911b3eeeca4f61468b68745ae661a0f7a17b20839c3b7f8471f1bf5299575cca3938dca7a9d94da3c9abb16b9e193016e07872a7e3381cb87bdc5ad4339d5635336846e26fe871848592fe92983af8e198300a6af6d128b9a10b4960c0f549512d82179a9006206b64722e066a084f62e9a77bb5a342085901ff648225bf75d4d2df20eb071fde74073d2e7685545683123c50790f92e02c11f98abf759ce59ed69b685016c0c772c40f8b85c0bb0d3f6750bb075c7c53bd5b73de10ee7dc313e1628e9eae5b73a50d1668a1633e76c24b541693cb69bb16f7b57431ab578bdc428d276e5ae562b18ba42e7298e84d4c95035bdf0094ba31ce73ead35fbe8f9fcc0b112115c7bb859ab47d7255a97486b1adb6325056b8dce91985c3cc9492eebf021a7ede5ad1fc8bdcef8f7e271e97bdb0bc76b2ea77b98943ff05e9fe356dc6a94cf92c2f36475c9cdc557508ea6d08d4f3b4d80f4f7ca5bda0cf8aec94861bbd86e4c29dc33a7fe01fdf752388cb9930bc2b522fc72aa5c573939dc62a6954db98f2b9abe639b3f97483279ffe6c22af4c455ee07ffcc912d9a6477d31efadc1b761024f2dedf52b4bc5dad059e90c941a863b3c89fe9ef1b6f4a5eeff1181d7f52200a22df2d36225a8341ecd78803b7d4cc0d5a0b11d22f6228f0bf9f853bc429fc341688527bfa8722f0a1f8359f1345c32123d81efec9aee1d2d4d24e38c014e7c0ded9a420a87b25d240b0e16835aaf26d28af546c7d703e167fde3fbff3716415ef54c5d7bacd49e624bec6a156b16a1070903682cb724a620398827559a1025ed1b0f5e6f7c264154c18fe2687c5cae36a8efe30fd3e9d2fc687c8946c2be033a56dbe5191786312ae336013b4023204221342b3f32b837d1edc10376d76604a0d290d6563011accddd0ae1c6837b2bd66362160dcda7207dd431d46992bc2dd064048ec8a571e1405eca20b82bad322b09cef93f8b0bbb2421866c232fab8d5ba7ee71ccf721fdf551e8b9fd8c996508fb2ff238e54a67a9f29f57a027856b9e49a7ef4b987b77e68f0b35a4355132a36d7a7eb27f1e0e15a8f51fc2414b1cfa8402907a715baa2a6cb5749f945ecbcfcb480e211a762f2037ec70a422090a9a77980cae683b42572948371292027ffd75ed01d2ac582c293f8e7a9284c5fb04b895a7969e500cf36dcf8b82349ba4df1ee9834942dbe4d0f48e9af48a91246abb42a46182299246821a2a40781214bc173ff46adce41ac319a3391cba1f7ef13ead101acfb1df5669ab72bfec89507b595cd3d55c1a0fe13ba4b42dbfb0aa611dc0fef36342b00bebdd05c81d6acb7c4c09c12e97305d76c77a87a79dee4af66588af181f012f43efbab6294f82da54854db3e45f94e8275ea5c452ef46444b42ae2966bc0cea6616154fa4e68565eb9b13bac8f2e0f8a8d63dccec0537a15f9163a6c97859ee68feb58a39497c87a5f922f3476f1749a93cee8c6ac29500f9c29eaa33ca4e94fd99b828eef0e2deaa4b95ba02d1f8473b507d0479b15643e8829cada944dc624bad997fafeeb6d73986a7824285bb7d5a18505c8dd1b0a8917961f40afb9f00efde0a11f5a3b163af5f02097c6463908f2a7e196156ba700a0874bba13f7b4665b083b8a4325c2687f5a7d9c83e75d119de90010dcf11776c8bb8cb50fc9d6ed1701d0d318a6de7535001cfd1dc353f18877423c78620a521583122d9b4c85b41acc8b6c8cbbd306c2a90c8e2d056d21c05f2318e8f5323ace55ca4e4f50b62c632406b48cd1a1ca8ae59bcf70edc89bf97ea7ee1601355c9ef29db5f39d4215772f6f6f89a3862aa2d8aa332d5337d0fee6ad9bae4d6d82f946aefea696c0c9b92f5eb1804279efc29b4d7907e32f8869df15850735c8128523be1537d48ded646852139cbe3fab163014f2cc853f10b41cc5bc0fb0bb05c3b1721f39d30e6e90f8df0f1eb9c8074da88830f812bc038dc4fae33fead4bdb486cb072b7a6babad86190ac63d6b8e6f8094668f96ca486f32a163c692e61de1d9d3e78184b693ee86a1235a874f196560e010e2be16d625f0b1197c2afd8a295f46252fa6f7cc133b1b49cd99bdcbc614c9cffbdce8c74e5e5e571e749af6f193baa9793afac3cc877b11e18e0cf7d09b93100fe05ed9d6ae66d2bf8787c3a68ac4c1f39bee8749c9db39b4c2c90a2d2b1587390974ae8d1fa9d93e6e42ec733dda2c23304766ccaa593283cbf2b5e7d474e4e7f52936a415647db5e4973e0aa521b939c68980e9bec953fd5d9471c3b0c03d43476f1b413137227716c428c1509cbc785b7bbf0c0cb06a43d82b0a97f2e5f910ae7d922d89cf8b286ec95421385bb4d5d162859f0053e9f15dd589770026e826bfee20b37dcdb4203a7be3a83a5b38b455cb7511f72d905f24168e7869fdfc43495a6818f45f8e3e651066af74a19fdae2cd14c6c7001b548265e38a49f71c7b58bfea63f4c120b574aa5e4301deedc7a04343cf89d8918cd0ed1a417f304e90c65c98bccca85812f8f4c5a35d4092e9d6dd75ebb7817f899dfcbcd3c387e285578d76fe9c06439bcf24ee8d4f58b0d3cebd9f6b188c2685117515958fbbf731906217c5ffc34237b5f6c11ba212c445ae118c5aaad9e15f67bf1213a67492970252730f91acef5522ba23746176c3da855cd64ab0a0b0d5fd4177016b83ba0fa03c7a95a9985eb7b15b245136e19c9fd17826c18c3b5fcda24e8bef7ea15397f569cc54a4955b1fb9605abd25155eccb49d529905916a725fd59213cd2d17bde3667f81e7a33d410a39da3ffa8937df41a7fb60e7f36e38067c5e0f27b599b286e64ad9b1ba4ff639401a6a45512286d7045d708d0f876e10f319dee7785e7481f8a27670edaf3462eedee42556c1c3575a3b2f6dfff2df52125a26936e2350f0acf3669cd0fdaa7718261c29e8a7897d13a0a209d5c3ed498aeb03571f548dcc85fbedc96f9aab200876b9503925323c542e9f3101a4c034adc75caec212a4a477f83ac18d8978e72b65acd868683e8589ac4cdadb51b22e3ce75e99f8bfcd4f23d9f5e499df2f28e9b4a4eb97b6fa4716f914feec1c1aaa7742f8c62bc991b9081c3c2609e14464d059311127db1a2186538b2e0882b8b43b341b7d5258a63bdfee93c03808813688a6e2b07995733992628c4241f7057c14c1cd25e399d64ce3d57520732bdd016aad965aec8b7b151c854b3d9bab9ddbb2b72a913d87d274f7b7db4e312fb1ea04ab442a102ca44ff71aa9a4113cc34af16738e211aa0b2dbf732f7eec3e67ffb8c1dec83349061e0573ca76b82580005a927003365400396777a5633a9b3897a7ddecd234d6f4d1005575c65aec7b883a59e5e99ec9eb8ec510fb379924adc4fa51149d41abf9721a53afcc41071765a40f2934bafdbfcbfc7838431e6710d70cca26b74acc7e7aee9ef2721b2ef0a43e7f3450e2d9475c5edcf8e83113c2116b82e51b9a7167a34562c706176948f386e3ffb5a3cedd7ca485f5281d6db572e7af9592312cedf3021a9f34710e05c2ad9a12767a7945afa4381c149109b860a06608bec2736b4e73a561b07030ce1b9d4a2c37be8480e4e17139d098bb550e267fdc3ffffa3c6fd790cd6cb8b37f977c18686141de001abf88f24cd16246fd252151b219e0ebb319105b22dd2444e45dc7f98461e5cffc58ef2584b6be5ec01ac4d7c125bd3b0496e7f4a4fa98ac2ba176c56530b958fd8386d663659f5f5a671e7f4cbb621145c9e47efb3a6876b02f10e482c0929c967580f070b9eb7e3f8bb02911dc446ad36c9e821e070bb0abc20011360bd8890476cc58521cb64f091ae7cf7d761505ab8afe1e0a8d01487fd8b821a72e3f15df9b8034549f8040746923cc681de2445728e150c089df8be25a36398e420e7c11dd080f2913a036ef775275aa2d64c05ca8c9270830bba42fa3993c2488543c736abfdb6ba1b495ae74ce6b4412d8a607386c9f3253417f803241ed2e9896260c5e6b51057539fa084e5ed8d206b507a28d4bdb4443e6de5bcef257454bf03ddf989e30ce4eba25af81e422d61fdcfadc71a41cc120548a117735560549083232cc622635c4bc72a0c6e5a0d591d4f950082d2ae7a038ea40c1900090e6c68fc0b8f9535b39a2683f71fde917cbd6a0920a4ff7a8a649ebd8c1fbc35f65dc8dd25b0201bca94f935889bed2560cf0a99969fc92b34e884e7952f0d16e3761a3cacc7635a72f2ac642c0fd55734317b130334b4c755bb6f5e47382588755ddae30df51347f379ab688ac80ed745ab0896aa0cf8a2a481444655ebba3587374b12f3991a1682c02dd1fa298b4c695e00771d631c5f2c4fab81c9274741f12e0455a8d3d94bc9018b4573fd7d42e5b86893826edafd2137afca79250d5435b5c64bbdaa9607c4dfc578eb1c7b129b8a74ea1850a4eb10f1cc5b2f9ae1bd15aa0b1dc4dbb74a58c8562a0914375460f857809c389dedef94453fec93f56e2b3a1ffb8e90a7a0c49e7360f7223421a81d289a8e1141c307f7e96b5f76b824b0d9bd309813fc4be57050a069da9ccf91ca0e124ba5fb70c55557b44df4f14031f65fe3d10306ff8429de2a597d23d8cc058b77dbf3b71701fa5eae563b5802605dfbe26b133cc0660d9e671a49c9434dbb0b11adf517f4b7ae8467888cdb6e94ce3c4f0270921a6e0871d5f5d2e29297d89203c1d479c2e697472b5d7d44fd2f5bbcfa2f21a865573156f11405edc91f157476e4bddfe1e9c1bfb0e9d6966163cd79866402606c3724a5a73fa180af2a82ba90d7501a19137f22c0b17fdfc397de52ab9515065e075a4bb4a8154f22eaa00a7fa48ecfdd7f6fc15a4e27e721ddc2581c675248f4408e34c925d92116da7cb447cf4b44ebde32842f501d9689e1abfa2123711e26aeaa51e189a1a41a228087854ad9e00e512d126814be3bf15f15ee3ad86e0957bc8d7f6423a7024a5e808b6065a4b1800212ceea44598732443402960670296ab2277d55ce35cdd5c0cb671c866b8dc62404ca2b87d67fc0a1169930c2ce10e188b1e40c0276b23c3e9f67d2efcc9cc602f2ef070502e8c608b2143ecb242eebb592fb743b33d4782fab6ec02ee4e8fe20c7909e2a3a8e6227f9f9816cf705d35b942a4a78f7aedc0d6b6324935da405ed7c6afb93f9d707e67694ad2af1669dda40501c"}}, &(0x7f0000001bc0)=0x0) timer_delete(r3) ioctl$EVIOCSABS3F(r0, 0x401845ff, &(0x7f0000000480)={0x8, 0x0, 0x8, 0x6, 0x6, 0x7}) [ 323.135539] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device loop2. 00:16:33 executing program 2: r0 = socket$inet(0x10, 0x80004, 0x3) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0) [ 323.179158] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device loop2. 00:16:33 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[0xfeffffff], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) r2 = socket(0x11, 0x100000803, 0x0) r3 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={"6966623000faffffffffffffff00", 0x12}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'ifb0\x00', 0xa201}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x500000000000000]}, 0x0, 0x0, 0x2}, 0x20) 00:16:33 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x10, 0x3, 0x6) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e280000001100ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x8}, 0x0) 00:16:33 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f760070") sendmsg$nl_xfrm(r0, &(0x7f0000001440)={&(0x7f0000000000)={0x10, 0x4170000}, 0x349, &(0x7f0000001400)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x0, 0x0, {{@in=@multicast1=0xe0000001, @in6=@mcast2={0xff, 0x2, [0x0, 0x0, 0x1000000], 0x1}, 0x0, 0x0, 0x0, 0x0, 0xa, 0xfffffff0, 0xf0ffffffffffff}}}, 0xb8}, 0x1}, 0x0) 00:16:34 executing program 2: r0 = socket$inet(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e", 0x24}], 0x1, 0x0, 0x0, 0x20000000}, 0x0) 00:16:34 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="295ed277a4200100360070") mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) rmdir(&(0x7f0000000340)='./file0//ile0\x00') r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) fstat(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r2) mkdir(&(0x7f0000000100)='./file0//ile0\x00', 0x0) 00:16:34 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x10, 0x3, 0x6) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e280000001100ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x2}, 0x0) 00:16:34 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f760070") sendmsg$nl_xfrm(r0, &(0x7f0000001440)={&(0x7f0000000000)={0x10, 0x4170000}, 0x349, &(0x7f0000001400)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x0, 0x0, {{@in=@multicast1=0xe0000001, @in6=@mcast2={0xff, 0x2, [0x0, 0x0, 0x9effffff], 0x1}, 0x0, 0x0, 0x0, 0x0, 0xa, 0xfffffff0, 0xf0ffffffffffff}}}, 0xb8}, 0x1}, 0x0) 00:16:34 executing program 4: pipe2(&(0x7f0000989000)={0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) mount(&(0x7f0000434ff8)='./file0\x00', &(0x7f0000abf000)='./file0\x00', &(0x7f0000f4c000)='jfs\x00', 0x1023402, 0x0) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000001200), 0x3000, &(0x7f0000001280)) unlink(&(0x7f00003b3000)='./file0\x00') dup2(r0, r1) 00:16:34 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) write$rdma_cm(r1, &(0x7f0000000640)=ANY=[@ANYBLOB="0c000000080000fa", @ANYPTR=&(0x7f00000004c0)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"]], 0x10) close(r1) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0x6e) ioctl$TIOCLINUX7(r1, 0x541c, &(0x7f0000000040)={0x7, 0x75}) listen(r0, 0x2000000) connect$unix(r3, &(0x7f0000932000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) tkill(r2, 0x1000000000016) 00:16:34 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) write$rdma_cm(r0, &(0x7f0000000640)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f00000004c0)}}, 0x10) close(r0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0x6e) listen(r3, 0x0) connect$unix(r2, &(0x7f0000932000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) tkill(r1, 0x1000000000016) 00:16:34 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[0xfeffffff], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) r2 = socket(0x11, 0x100000803, 0x0) r3 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={"6966623000faffffffffffffff00", 0x12}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'ifb0\x00', 0xa201}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0xf5ffffff]}, 0x0, 0x0, 0x2}, 0x20) 00:16:34 executing program 2: r0 = socket$inet(0x10, 0x0, 0x6) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002a80)=[{{&(0x7f0000000080)=@pppol2tp={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @multicast1}}}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000140)=""/88, 0x58}, {&(0x7f00000001c0)=""/125, 0x7d}, {&(0x7f0000000240)=""/19, 0x13}], 0x3, &(0x7f00000002c0)=""/182, 0xb6, 0x8}, 0x1f}, {{&(0x7f0000000380)=@ax25, 0x80, &(0x7f0000001680)=[{&(0x7f0000000400)=""/25, 0x19}, {&(0x7f0000000440)=""/12, 0xc}, {&(0x7f0000000480)=""/4096, 0x1000}, {&(0x7f0000001480)=""/117, 0x75}, {&(0x7f0000001500)=""/197, 0xc5}, {&(0x7f0000001600)=""/120, 0x78}], 0x6, &(0x7f0000001700)=""/79, 0x4f, 0x9}, 0x7}, {{0x0, 0x0, &(0x7f0000001780), 0x0, &(0x7f00000017c0)=""/135, 0x87, 0x2}, 0x80000001}, {{&(0x7f0000001880)=@pppol2tpin6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @ipv4={[], [], @local}}}}, 0x80, &(0x7f0000002a40)=[{&(0x7f0000001900)=""/139, 0x8b}, {&(0x7f00000019c0)=""/40, 0x28}, {&(0x7f0000001a00)=""/4096, 0x1000}, {&(0x7f0000002a00)=""/62, 0x3e}], 0x4, 0x0, 0x0, 0x9}}], 0x4, 0x100, &(0x7f0000002b80)={0x0, 0x989680}) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f0000002bc0)=0x3, 0x4) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) ioctl$KDADDIO(r2, 0x4b34, 0x0) 00:16:34 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f760070") sendmsg$nl_xfrm(r0, &(0x7f0000001440)={&(0x7f0000000000)={0x10, 0x4170000}, 0x349, &(0x7f0000001400)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x0, 0x0, {{@in=@multicast1=0xe0000001, @in6=@mcast2={0xff, 0x2, [0x0, 0x0, 0xffffff7f], 0x1}, 0x0, 0x0, 0x0, 0x0, 0xa, 0xfffffff0, 0xf0ffffffffffff}}}, 0xb8}, 0x1}, 0x0) 00:16:34 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="295ed277a4200100360070") mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) rmdir(&(0x7f0000000340)='./file0//ile0\x00') r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) fstat(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r2) mkdir(&(0x7f0000000100)='./file0//ile0}', 0x0) 00:16:34 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x10, 0x3, 0x6) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e280000001100ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x5}, 0x0) 00:16:34 executing program 2: r0 = socket$inet(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x42) getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x15, &(0x7f0000000080)={@dev, 0x0}, &(0x7f00000002c0)=0x6) ioctl$sock_inet6_SIOCDELRT(r1, 0x890c, &(0x7f0000000140)={@remote={0xfe, 0x80, [], 0xbb}, @mcast1={0xff, 0x1, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x100000000, 0x4, 0x500, 0x1, 0x4600000, r2}) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f00000001c0)={{0x2, 0x4e24, @local={0xac, 0x14, 0x14, 0xaa}}, {0x306, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0x2, {0x2, 0x4e22, @loopback=0x7f000001}, 'eql\x00'}) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000240)={0x0, @broadcast}, &(0x7f0000000280)=0xc) 00:16:35 executing program 2: sendmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0) 00:16:35 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x10, 0x3, 0x6) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e280000001100ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1400}, 0x0) 00:16:35 executing program 4: pipe2(&(0x7f0000989000)={0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) mount(&(0x7f0000434ff8)='./file0\x00', &(0x7f0000abf000)='./file0\x00', &(0x7f0000f4c000)='jfs\x00', 0x1023402, 0x0) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f00000000c0)="2e2f66696c653005", 0x0, 0x0, &(0x7f0000001200), 0x3000, &(0x7f0000001280)) unlink(&(0x7f00003b3000)='./file0\x00') dup2(r0, r1) 00:16:35 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[0xfeffffff], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) r2 = socket(0x11, 0x100000803, 0x0) r3 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={"6966623000faffffffffffffff00", 0x12}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'ifb0\x00', 0xa201}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x2000000]}, 0x0, 0x0, 0x2}, 0x20) 00:16:35 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f760070") sendmsg$nl_xfrm(r0, &(0x7f0000001440)={&(0x7f0000000000)={0x10, 0x4170000}, 0x349, &(0x7f0000001400)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x0, 0x0, {{@in=@multicast1=0xe0000001, @in6=@mcast2={0xff, 0x2, [0x0, 0x0, 0xf0ffff], 0x1}, 0x0, 0x0, 0x0, 0x0, 0xa, 0xfffffff0, 0xf0ffffffffffff}}}, 0xb8}, 0x1}, 0x0) 00:16:35 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) write$rdma_cm(r1, &(0x7f0000000640)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f00000004c0)}}, 0x10) close(r1) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0x6e) listen(r4, 0x0) ustat(0x2, &(0x7f0000000040)) connect$unix(r3, &(0x7f0000932000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) tkill(r2, 0x1000000000016) 00:16:35 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) write$rdma_cm(r0, &(0x7f0000000640)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f00000004c0)}}, 0x10) close(r0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0x6e) listen(r3, 0x0) connect$unix(r2, &(0x7f0000932000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) r4 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x9, 0x100) timerfd_settime(r4, 0x1, &(0x7f0000000080)={{0x77359400}, {0x0, 0x1c9c380}}, &(0x7f00000000c0)) tkill(r1, 0x1000000000016) 00:16:35 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="295ed277a4200100360070") mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) rmdir(&(0x7f0000000340)='./file0//ile0\x00') r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) fstat(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r2) mkdir(&(0x7f0000000100)="2e2f66696c65302f2f696c653087", 0x0) 00:16:35 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f760070") sendmsg$nl_xfrm(r0, &(0x7f0000001440)={&(0x7f0000000000)={0x10, 0x4170000}, 0x349, &(0x7f0000001400)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x0, 0x0, {{@in=@multicast1=0xe0000001, @in6=@mcast2={0xff, 0x2, [0x0, 0x0, 0x300], 0x1}, 0x0, 0x0, 0x0, 0x0, 0xa, 0xfffffff0, 0xf0ffffffffffff}}}, 0xb8}, 0x1}, 0x0) 00:16:35 executing program 2: r0 = socket$inet(0x10, 0x1, 0x6) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0) 00:16:35 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x10, 0x3, 0x6) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e280000001100ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1, 0x0, 0xf00000000000000}, 0x0) 00:16:35 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="295ed277a4200100360070") mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) rmdir(&(0x7f0000000340)='./file0//ile0\x00') r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) fstat(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r2) mkdir(&(0x7f0000000100)="2e2f66696c65302f2f696c6530e4", 0x0) 00:16:35 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f760070") sendmsg$nl_xfrm(r0, &(0x7f0000001440)={&(0x7f0000000000)={0x10, 0x4170000}, 0x349, &(0x7f0000001400)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x0, 0x0, {{@in=@multicast1=0xe0000001, @in6=@mcast2={0xff, 0x2, [0x0, 0x0, 0x3], 0x1}, 0x0, 0x0, 0x0, 0x0, 0xa, 0xfffffff0, 0xf0ffffffffffff}}}, 0xb8}, 0x1}, 0x0) 00:16:35 executing program 2: sendmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x1d2, &(0x7f0000000040)=[{&(0x7f0000000080)="2400000024000703a939c44b6535f824a8a4a5c4e3a3025c1dfffd946fa2830020200a00", 0x24}], 0x1000000000000101, 0x0, 0x0, 0x1fffc}, 0x1000000000000) pipe(&(0x7f0000000000)={0xffffffffffffffff}) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0xc004ae02, &(0x7f00000000c0)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}) prctl$setfpexc(0xc, 0x20000) 00:16:35 executing program 2: r0 = socket$inet(0x10, 0x3, 0x6) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000040)=0x1f, 0x4) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e24, @broadcast=0xffffffff}}}, &(0x7f0000000080)=0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000200)={r1, @in6={{0xa, 0x4e23, 0x233, @local={0xfe, 0x80, [], 0xaa}, 0x40}}, 0x5, 0x8}, &(0x7f00000000c0)=0x90) 00:16:35 executing program 2: r0 = socket$inet(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0xffffffffffffffff, 0x1, 0x1, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa}, 0x20) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r1, 0x4008af23, &(0x7f00000000c0)={0x0, 0x4}) 00:16:36 executing program 2: r0 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x3f, 0x418040) getsockopt$netrom_NETROM_T2(r0, 0x103, 0x2, &(0x7f0000000080)=0x5a2610f6, &(0x7f00000000c0)=0x4) r1 = socket$inet(0x10, 0x80000001, 0x2) sendmsg(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000180)="24000000240007031dfffd946fa2830020200a00090077f7000085680c1bbba20400ff7e0fdd9dacd51666780b9eec0ddf395082ffc0", 0x36}], 0x1}, 0x0) bind$pptp(r0, &(0x7f00000011c0)={0x18, 0x2, {0x2, @broadcast=0xffffffff}}, 0x1e) finit_module(r0, &(0x7f0000000000)='bdev\x00', 0x1) sendto$ax25(r0, &(0x7f00000001c0)="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", 0x1000, 0x506f0b8a32636684, &(0x7f0000000100)={0x3, {"bddbb291e2c273"}, 0x7}, 0x10) 00:16:36 executing program 4: pipe2(&(0x7f0000989000)={0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) mount(&(0x7f0000434ff8)='./file0\x00', &(0x7f0000abf000)='./file0\x00', &(0x7f0000f4c000)='jfs\x00', 0x1023402, 0x0) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000001200), 0x3000, &(0x7f0000001280)) unlink(&(0x7f00003b3000)='./file0\x00') dup2(r0, r1) 00:16:36 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[0xfeffffff], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) r2 = socket(0x11, 0x100000803, 0x0) r3 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={"6966623000faffffffffffffff00", 0x12}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'ifb0\x00', 0xa201}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x5]}, 0x0, 0x0, 0x2}, 0x20) 00:16:36 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f760070") sendmsg$nl_xfrm(r0, &(0x7f0000001440)={&(0x7f0000000000)={0x10, 0x4170000}, 0x349, &(0x7f0000001400)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x0, 0x0, {{@in=@multicast1=0xe0000001, @in6=@mcast2={0xff, 0x2, [0x0, 0x0, 0x2a0], 0x1}, 0x0, 0x0, 0x0, 0x0, 0xa, 0xfffffff0, 0xf0ffffffffffff}}}, 0xb8}, 0x1}, 0x0) 00:16:36 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x10, 0x3, 0x6) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e280000001100ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1, 0x0, 0x3000000}, 0x0) 00:16:36 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="295ed277a4200100360070") mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) rmdir(&(0x7f0000000340)='./file0//ile0\x00') r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) fstat(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r2) mkdir(&(0x7f0000000100)='./file0//ile0\x00', 0x0) 00:16:36 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) write$rdma_cm(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="0c00000008000045570dcd3d8a9d2d1ff697fa", @ANYPTR=&(0x7f00000004c0)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000900000000000000000000000000000035240f95079e8892000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000eaffffffffffffff"]], 0x10) close(r0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0x6e) listen(r2, 0x9) connect$unix(r2, &(0x7f0000932000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) tkill(r1, 0x1000000000016) 00:16:36 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) clock_gettime(0x6, &(0x7f0000000040)) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) write$rdma_cm(r1, &(0x7f0000000640)=ANY=[@ANYBLOB, @ANYPTR=&(0x7f00000004c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00']], 0x10) close(r1) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0x6e) listen(r4, 0x0) connect$unix(r3, &(0x7f0000932000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x284e00, 0x0) ioctl$EVIOCGABS2F(r5, 0x8018456f, &(0x7f00000000c0)=""/252) tkill(r2, 0x1000000000016) 00:16:36 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f760070") sendmsg$nl_xfrm(r0, &(0x7f0000001440)={&(0x7f0000000000)={0x10, 0x4170000}, 0x349, &(0x7f0000001400)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x0, 0x0, {{@in=@multicast1=0xe0000001, @in6=@mcast2={0xff, 0x2, [0x0, 0x0, 0xffffff9e], 0x1}, 0x0, 0x0, 0x0, 0x0, 0xa, 0xfffffff0, 0xf0ffffffffffff}}}, 0xb8}, 0x1}, 0x0) 00:16:36 executing program 2: r0 = accept4(0xffffffffffffff9c, &(0x7f0000009240)=@vsock, &(0x7f00000092c0)=0x80, 0x80800) r1 = accept$inet(0xffffffffffffffff, 0x0, &(0x7f0000009340)) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000009380)={{{@in=@broadcast, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@multicast1}}, &(0x7f0000009480)=0xe8) r3 = getpgid(0x0) lstat(&(0x7f00000094c0)='./file0\x00', &(0x7f0000009500)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_generic(r0, &(0x7f00000095c0)={&(0x7f0000009300)={0x10, 0x0, 0x0, 0x20080004}, 0xc, &(0x7f0000009580)={&(0x7f000000a000)={0x1630, 0x1f, 0x200, 0x70bd2b, 0x25dfdbfe, {0x9}, [@generic="25dcca78c32b079647869ff596a60a33338cf40ba2c25cd514242e9e4fb06502bba3451b33c559794dcb961d675aaa461c7a96e9cb5bf7933dc68f74e7bdfefaa584cedd302484e6efbec88af3251c81c56f1b99a67decaa219990e21ebf35c294a50cda23d49b9ecc624ad2f7735ea24ecbaf9cf0c3cd80424ec54bbcb213c656d77d6dcd30baf24d86feedc307bfbe5a987cb698f57604ae7bcaa6e29c699b8675c9b5837e1d95ca2f7862d80fb286c7ef1c560dbb04c2fed9ec96c121102b003580e6c1fac824b1fb4ee8877f73a2", @typed={0x14, 0x94, @ipv6=@dev={0xfe, 0x80, [], 0x16}}, @generic="97c099e3f518dba3aba5f75c42cde71f26b49f1861404428fc087684cc6ee32dd35e624d8bfa51875f8915c371ada4bb847d28205ffbc883dd20cfb6e18c328ccffc25ae1d6c5d570d6ce797fb1dd9592dc935193ff84612b8479ce90711bb4b6f2baa59088021ad20a29b7f1ecec18e16f75a3bc1ba13cb5a6d9c045f5c5c46d3ff82057b78", @typed={0x8, 0x81, @fd=r1}, @typed={0x4, 0x53}, @nested={0x20, 0x94, [@generic="78a1fed4f13d5f68b896f7e8526cfe530c0b72c6575d7d2339"]}, @nested={0x130c, 0x7c, [@generic="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", @typed={0x84, 0x3a, @binary="1c32ba3369fbb97af21e5dd5c4eb4c981cce3bfcbc7d6713b49963efbd3f73247cc33d60a66cb07609bf7f1b350231b4b033c20e27d62730c879a2f27f9d87d276f700b3d90d3c8b8d55ad8ee0f4663c37d1b29f0d56b740951b677a0167407d5c0cea9df96bf3a2b5d9bf6184eaead4a8b7e3d777e46d0d8cd95deb218dd0aa"}, @generic="9aff4fb676a1228c055c3a841fbabc5f1b5dd4b98c0c09335bcae6edeb86a3b396d7e0f4677cfb", @typed={0x8, 0x5f, @uid=r2}, @generic="dc06bf60c140239517b740e90059ac029f534806cf2420ff3fd7995cf627b816ecf5f473c57dd0d63914a9dd889660696a2e08b92755ed492c32be91b01af29e57b7a8f9b1fe42193ad00f40c2af64bc9cc922d30e0f89fd129145a92a64179652a220c9884ba7b64d81d7294bda4e98e3077d0f53cc29aaa24a1f0eba37807ac402752b2e5600936e38cd460e1a51d409470ab2009327c5d9f111993a79de7c8a31a945029a4bbf189264104daefd6c18886e5a2aadc5ed71009e785d1707d9308ca904f9922251f3335f640d254644b337ead8edf3e38dc33138b9b27d", @generic="59df3aeb295c86852a55e6f017608723c6a5722b76d5ebc6e5b7caad741e4718b48d079b61839584bda6584baa46983250f2db739962cf7387eefd24e46fe73e6d25ecf80fac5fe6e409925a0bd8d98126e0b9fa6d241bb05d58cb4abc980c33d2c302828bd02f9cbc83d886022b51226a183dcfad9de546628377555ae34d69e3cc1dc4e28024e02fca793354c0e46ba4f7b2", @typed={0x14, 0x8e, @binary="2639330288f27ac8728a23750c57"}, @typed={0x14, 0xa, @ipv6=@local={0xfe, 0x80, [], 0xaa}}, @generic="ea79c94ebad0c2c1fdd05d68ecb026892e6775759afaf2455ede658a08ff8cb7e1d38a0fa3d8c8ff7719a9c8fbf0a2b54fac1f262fb057bd727e9b84a1ee7a05d65c0ed81f52efc3782e9a82c3822a6e708b651cb7084b9a755652a45eedc6a7b1f3dbb55af216685a4bebd85ad6b0b95f81914c952b86c119e1f94da52355686c79724445e8e8c794fdff9fbe0af7a7a8b98300ccbcf8f932f62c6b7746d4cf90360ea1afba758d5cb5aa13839c410c1c7a3fcee2f4da2d4f"]}, @nested={0xb4, 0x1c, [@typed={0xc, 0x1c, @u64=0x4}, @typed={0x8, 0x4d, @pid=r3}, @typed={0x14, 0x59, @ipv6=@mcast2={0xff, 0x2, [], 0x1}}, @typed={0x8, 0x5e, @uid=r4}, @generic="a7fb301cd48ffff5056e5c4d0ccd4ae69372b52b7b99dd86ea83f295d00c5a5b7b7df6d0b3927f0bc83c1abccea9851cd78ad7b603bb2223f3ab55", @generic="42536b4510b170862c9aea322583ebc87e2ef3dabbc114f0ade3e2675da1c30b55605cb494c4a8e969e1a6e9b1909c0fa112bdf152d7f560f047cde36070920710d8495a"]}, @typed={0xc, 0x49, @u64=0x8}, @generic="7691bfb7f87cd3c0b487e08d63ef43b15a25643593259c33e55b52b2f1a19cbbc0a79695c5755fe8b9d38a96d968540bb9919987e79781e2c9b0f6ea5352aaad27e6370413594abc3e73dfc2b63d8b846f6840e89cf0c69ee3abef44c8a4050ce5cb7ac5edd2ba1a122a5474366246e74f61e3e220f9003174e629a6d7637f09a2d6bb50187086991cba6b2f2df6f52d80d67d2befce501059b28d7e3caa476f03085364776c34cc437d755f8effa68b2b8777314a2cde586045"]}, 0x1630}, 0x1, 0x0, 0x0, 0x50}, 0x4000800) r5 = socket$inet(0x10, 0x3, 0x6) membarrier(0x60, 0x0) sendmsg(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)}, 0x0) setsockopt$SO_RDS_TRANSPORT(r5, 0x114, 0x8, &(0x7f0000000040), 0x4) 00:16:36 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x10, 0x3, 0x6) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e280000001100ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1, 0x0, 0x28000000}, 0x0) 00:16:36 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="295ed277a4200100360070") mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) rmdir(&(0x7f0000000340)='./file0//ile0\x00') r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) fstat(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r2) mkdir(&(0x7f0000000100)='./file0//ile0\x00', 0x0) 00:16:36 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r2 = gettid() syz_mount_image$nfs(&(0x7f0000000040)='nfs\x00', &(0x7f0000000080)='./file0\x00', 0x2, 0x2, &(0x7f0000000200)=[{&(0x7f00000000c0)="6c1009981145beeb", 0x8, 0x9fc}, {&(0x7f0000000100)="f1835131b5efa75ec29005ce11a7e61728239370c323f1dab0b9b6913059505d999cd3faddad73d52f4cad878714c77ca7aa30e6d2201443fc079f48b498d639bfef3e309dd1bdaeaec683c5f3a5fb101b88a513c2ceb0fbab248886ae591e9f5ef55777c6e0466d7c559ca8b38ff9027ae8ce73f544007164fc0422952e481c57f8ff85e36388ceabb54c4908edfbf9eb8523b51f5bb80a0a9655b0c4b6c167f3ae5f64dadd9eb6a168f673cead91ea658296229d03d28e82884b56715aac9a62f4342bb487b369f72766022964024460c40c3192b3e838a448fde710669554081f0ccea835ed1d1351aae6661b315c591d676efae95be257", 0xf9, 0x8}], 0x20, &(0x7f0000000240)='vmnet0\x00') timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) write$rdma_cm(r1, &(0x7f0000000640)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f00000004c0)}}, 0x10) close(r1) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0x6e) listen(r4, 0x0) connect$unix(r3, &(0x7f0000932000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) tkill(r2, 0x1000000000016) 00:16:36 executing program 2: r0 = socket$inet(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x400000, 0x0) setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r1, 0x111, 0x5, 0x1000, 0x4) 00:16:36 executing program 2: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f0000003000)=[{&(0x7f000000efdc)="240000005200910307fffd946fa200000200000000000000031d8568791ba3a2d188737e", 0x24}], 0x1}, 0x0) 00:16:36 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[0xfeffffff], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) r2 = socket(0x11, 0x100000803, 0x0) r3 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={"6966623000faffffffffffffff00", 0x12}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'ifb0\x00', 0xa201}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0xf5ffffff00000000]}, 0x0, 0x0, 0x2}, 0x20) 00:16:36 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x10, 0x3, 0x6) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e280000001100ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1, 0x0, 0xfffffffffffff000}, 0x0) 00:16:37 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[0xfeffffff], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) r2 = socket(0x11, 0x100000803, 0x0) r3 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={"6966623000faffffffffffffff00", 0x12}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'ifb0\x00', 0xa201}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x10000000000]}, 0x0, 0x0, 0x2}, 0x20) 00:16:37 executing program 4: pipe2(&(0x7f0000989000)={0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) mount(&(0x7f0000434ff8)='./file0\x00', &(0x7f0000abf000)='./file0\x00', &(0x7f0000f4c000)='jfs\x00', 0x1023402, 0x0) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000001200), 0x3000, &(0x7f0000001280)) unlink(&(0x7f00003b3000)='./file0\x00') dup2(r0, r1) 00:16:37 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) write$rdma_cm(r0, &(0x7f0000000640)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f00000004c0)}}, 0x10) close(r0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x5, 0x10000) bind$unix(r3, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0x6e) listen(r3, 0x0) connect$unix(r2, &(0x7f0000932000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) tkill(r1, 0x1000000000016) 00:16:37 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000002c0)="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") r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) write$rdma_cm(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="0c00000108048dfcd900fa", @ANYPTR=&(0x7f00000004c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00']], 0x10) close(r1) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0x6e) r5 = inotify_init() fcntl$setflags(r5, 0x2, 0x1) listen(r4, 0x0) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f0000000080)=0x4, 0x4) connect$unix(r3, &(0x7f0000932000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) tkill(r2, 0x1000000000016) 00:16:37 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f760070") sendmsg$nl_xfrm(r0, &(0x7f0000001440)={&(0x7f0000000000)={0x10, 0x4170000}, 0x349, &(0x7f0000001400)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x0, 0x0, {{@in=@multicast1=0xe0000001, @in6=@mcast2={0xff, 0x2, [0x0, 0x0, 0x300000000000000], 0x1}, 0x0, 0x0, 0x0, 0x0, 0xa, 0xfffffff0, 0xf0ffffffffffff}}}, 0xb8}, 0x1}, 0x0) 00:16:37 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x200000008912, &(0x7f0000000040)="025cc83d6d345f8f760070") r1 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x5001}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0) ioctl$TUNSETSNDBUF(r1, 0x400454d4, &(0x7f0000000000)) 00:16:37 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="295ed277a4200100360070") mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) rmdir(&(0x7f0000000340)='./file0//ile0\x00') r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) fstat(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r2) mkdir(&(0x7f0000000100)='./file0//ile0\x00', 0x0) 00:16:37 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x10, 0x3, 0x6) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e280000001100ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1, 0x0, 0x10}, 0x0) 00:16:37 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x10, 0x3, 0x6) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e280000001100ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1, 0x0, 0xb000000}, 0x0) 00:16:37 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="295ed277a4200100360070") mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) rmdir(&(0x7f0000000340)='./file0//ile0\x00') r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) fstat(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r2) mkdir(&(0x7f0000000100)="2e2f66696c65302f2f696c6530ff", 0x0) 00:16:37 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f760070") sendmsg$nl_xfrm(r0, &(0x7f0000001440)={&(0x7f0000000000)={0x10, 0x4170000}, 0x349, &(0x7f0000001400)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x0, 0x0, {{@in=@multicast1=0xe0000001, @in6=@mcast2={0xff, 0x2, [0x0, 0x0, 0xf000000], 0x1}, 0x0, 0x0, 0x0, 0x0, 0xa, 0xfffffff0, 0xf0ffffffffffff}}}, 0xb8}, 0x1}, 0x0) 00:16:37 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) write$rdma_cm(r1, &(0x7f0000000640)=ANY=[@ANYBLOB="0c00000008000003", @ANYPTR=&(0x7f00000004c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00']], 0x10) close(r1) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0x6e) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x4b2800, 0x0) ioctl$EVIOCGLED(r5, 0x80404519, &(0x7f0000000080)=""/213) listen(r4, 0x0) connect$unix(r3, &(0x7f0000932000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) tkill(r2, 0x1000000000016) 00:16:37 executing program 2: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) lsetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@known='user.syz\x00', &(0x7f0000000180)='user.syz\x00', 0x8, 0x0) getxattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000004fc0)=@known='user.syz\x00', &(0x7f0000005000)=""/171, 0xab) 00:16:38 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[0xfeffffff], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) r2 = socket(0x11, 0x100000803, 0x0) r3 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={"6966623000faffffffffffffff00", 0x12}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'ifb0\x00', 0xa201}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x200000000000000]}, 0x0, 0x0, 0x2}, 0x20) 00:16:38 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f760070") sendmsg$nl_xfrm(r0, &(0x7f0000001440)={&(0x7f0000000000)={0x10, 0x4170000}, 0x349, &(0x7f0000001400)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x0, 0x0, {{@in=@multicast1=0xe0000001, @in6=@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0xf0ffffffffffff], 0x1}, 0x0, 0x0, 0x0, 0x0, 0xa, 0xfffffff0, 0xf0ffffffffffff}}}, 0xb8}, 0x1}, 0x0) 00:16:38 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x10, 0x3, 0x6) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e280000001100ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1, 0x0, 0xf00}, 0x0) 00:16:38 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="295ed277a4200100360070") mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) rmdir(&(0x7f0000000340)='./file0//ile0\x00') r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) fstat(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r2) mkdir(&(0x7f0000000100)="2e2f66696c65302f2f696c65300e", 0x0) 00:16:38 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f760070") sendmsg$nl_xfrm(r0, &(0x7f0000001440)={&(0x7f0000000000)={0x10, 0x4170000}, 0x349, &(0x7f0000001400)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x0, 0x0, {{@in=@multicast1=0xe0000001, @in6=@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x400000000000000], 0x1}, 0x0, 0x0, 0x0, 0x0, 0xa, 0xfffffff0, 0xf0ffffffffffff}}}, 0xb8}, 0x1}, 0x0) 00:16:38 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a0676ffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 00:16:38 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x10, 0x3, 0x6) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e280000001100ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1, 0x0, 0x8}, 0x0) 00:16:38 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[0xfeffffff], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) r2 = socket(0x11, 0x100000803, 0x0) r3 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={"6966623000faffffffffffffff00", 0x12}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'ifb0\x00', 0xa201}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x1000000]}, 0x0, 0x0, 0x2}, 0x20) 00:16:38 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="295ed277a4200100360070") mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) rmdir(&(0x7f0000000340)='./file0//ile0\x00') r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) fstat(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r2) mkdir(&(0x7f0000000100)="2e2f66696c65302f2f696c65308c", 0x0) 00:16:38 executing program 4: pipe2(&(0x7f0000989000)={0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) mount(&(0x7f0000434ff8)='./file0\x00', &(0x7f0000abf000)='./file0\x00', &(0x7f0000f4c000)='jfs\x00', 0x1023402, 0x0) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000001200), 0x3000, &(0x7f0000001280)) unlink(&(0x7f00003b3000)='./file0\x00') dup2(r0, r1) 00:16:38 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) write$rdma_cm(r1, &(0x7f0000000640)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f00000004c0)}}, 0x10) close(r1) r3 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x4f1cb351, 0x240) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r3, 0x10e, 0x8, &(0x7f0000000080)=0x3, 0x4) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) bind$unix(r5, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0x6e) listen(r5, 0x0) connect$unix(r4, &(0x7f0000932000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) tkill(r2, 0x1000000000016) 00:16:38 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f0000000640)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f00000004c0)}}, 0x10) close(r0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0x6e) listen(r3, 0x0) connect$unix(r2, &(0x7f0000932000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) tkill(r1, 0x1000000000016) 00:16:38 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x10, 0x3, 0x6) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e280000001100ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1, 0x0, 0xfffffff0}, 0x0) 00:16:38 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="295ed277a4200100360070") mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) rmdir(&(0x7f0000000340)='./file0//ile0\x00') r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) fstat(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r2) mkdir(&(0x7f0000000100)='./file0//ile0\x00', 0x0) 00:16:38 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f760070") sendmsg$nl_xfrm(r0, &(0x7f0000001440)={&(0x7f0000000000)={0x10, 0x4170000}, 0x349, &(0x7f0000001400)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x0, 0x0, {{@in=@multicast1=0xe0000001, @in6=@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x9effffff], 0x1}, 0x0, 0x0, 0x0, 0x0, 0xa, 0xfffffff0, 0xf0ffffffffffff}}}, 0xb8}, 0x1}, 0x0) 00:16:38 executing program 2: mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)="006400ecff0345") getdents64(r0, &(0x7f0000000080)=""/41, 0x29) getdents64(r0, &(0x7f0000000df0)=""/528, 0x7f356272) 00:16:38 executing program 2: gettid() r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082) r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4000000) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='net/udp\x00') ioctl$LOOP_SET_FD(r1, 0x4c00, r2) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) 00:16:39 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[0xfeffffff], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) r2 = socket(0x11, 0x100000803, 0x0) r3 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={"6966623000faffffffffffffff00", 0x12}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'ifb0\x00', 0xa201}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x0, 0x0, 0x2}, 0x20) 00:16:39 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f760070") sendmsg$nl_xfrm(r0, &(0x7f0000001440)={&(0x7f0000000000)={0x10, 0x4170000}, 0x349, &(0x7f0000001400)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x0, 0x0, {{@in=@multicast1=0xe0000001, @in6=@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0xf0ffffff00000000], 0x1}, 0x0, 0x0, 0x0, 0x0, 0xa, 0xfffffff0, 0xf0ffffffffffff}}}, 0xb8}, 0x1}, 0x0) 00:16:39 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x10, 0x3, 0x6) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e280000001100ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1, 0x0, 0x3f00000000000000}, 0x0) 00:16:39 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="295ed277a4200100360070") mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) rmdir(&(0x7f0000000340)='./file0//ile0\x00') r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) fstat(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r2) mkdir(&(0x7f0000000100)='./file0//ile0\x00', 0x0) 00:16:39 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f760070") sendmsg$nl_xfrm(r0, &(0x7f0000001440)={&(0x7f0000000000)={0x10, 0x4170000}, 0x349, &(0x7f0000001400)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x0, 0x0, {{@in=@multicast1=0xe0000001, @in6=@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x200000000000000], 0x1}, 0x0, 0x0, 0x0, 0x0, 0xa, 0xfffffff0, 0xf0ffffffffffff}}}, 0xb8}, 0x1}, 0x0) 00:16:39 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x10, 0x3, 0x6) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e280000001100ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1, 0x0, 0xfcffffff}, 0x0) 00:16:39 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="295ed277a4200100360070") mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) rmdir(&(0x7f0000000340)='./file0//ile0\x00') r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) fstat(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r2) mkdir(&(0x7f0000000100)='./file0//ile0\x00', 0x0) 00:16:39 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f760070") sendmsg$nl_xfrm(r0, &(0x7f0000001440)={&(0x7f0000000000)={0x10, 0x4170000}, 0x349, &(0x7f0000001400)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x0, 0x0, {{@in=@multicast1=0xe0000001, @in6=@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x300000000000000], 0x1}, 0x0, 0x0, 0x0, 0x0, 0xa, 0xfffffff0, 0xf0ffffffffffff}}}, 0xb8}, 0x1}, 0x0) 00:16:39 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x10, 0x3, 0x6) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e280000001100ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1, 0x0, 0xf}, 0x0) 00:16:39 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f760070") sendmsg$nl_xfrm(r0, &(0x7f0000001440)={&(0x7f0000000000)={0x10, 0x4170000}, 0x349, &(0x7f0000001400)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x0, 0x0, {{@in=@multicast1=0xe0000001, @in6=@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0xf0], 0x1}, 0x0, 0x0, 0x0, 0x0, 0xa, 0xfffffff0, 0xf0ffffffffffff}}}, 0xb8}, 0x1}, 0x0) 00:16:39 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="295ed277a4200100360070") mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) rmdir(&(0x7f0000000340)='./file0//ile0\x00') r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) fstat(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r2) mkdir(&(0x7f0000000100)="2e2f66696c65302f2f696c65300e", 0x0) 00:16:39 executing program 4: pipe2(&(0x7f0000989000)={0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) mount(&(0x7f0000434ff8)='./file0\x00', &(0x7f0000abf000)='./file0\x00', &(0x7f0000f4c000)='jfs\x00', 0x1023402, 0x0) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000001200), 0x3000, &(0x7f0000001280)) unlink(&(0x7f00003b3000)='./file0\x00') dup2(r0, r1) 00:16:39 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) write$rdma_cm(r0, &(0x7f0000000640)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f00000004c0)}}, 0x10) close(r0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0x6e) listen(r3, 0x0) connect$unix(r2, &(0x7f0000932000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x20000, 0x0) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_DEL_SERVICE(r4, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4008102}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0x100, r5, 0x4, 0x70bd25, 0x25dfdbfe, {0x3}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}, @IPVS_CMD_ATTR_DEST={0x20, 0x2, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@mcast2={0xff, 0x2, [], 0x1}}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x4}]}, @IPVS_CMD_ATTR_SERVICE={0x30, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sed\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffffffff}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xfffffffffffffffb}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x7fff}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffffffffffffffe0}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xee}, @IPVS_CMD_ATTR_DEST={0x64, 0x2, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x7}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@local={0xac, 0x14, 0x14, 0xaa}}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x400}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x1}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x100000001}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@dev={0xac, 0x14, 0x14, 0x1c}}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x9}]}]}, 0x100}, 0x1}, 0x1) tkill(r1, 0x1000000000016) 00:16:39 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) write$rdma_cm(r1, &(0x7f0000000640)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f00000004c0)}}, 0x10) close(r1) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0x6e) clock_gettime(0x7, &(0x7f0000000100)) listen(r4, 0x0) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x60000, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000000c0)={r5, 0x0, 0x1, 0x9, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6}, 0x20) connect$unix(r3, &(0x7f0000932000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) tkill(r2, 0x1000000000016) 00:16:39 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x10, 0x3, 0x6) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e280000001100ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1, 0x0, 0xffffff7f00000000}, 0x0) [ 389.963431] device bridge_slave_1 left promiscuous mode [ 389.968988] bridge0: port 2(bridge_slave_1) entered disabled state [ 389.985787] device bridge_slave_0 left promiscuous mode [ 389.991328] bridge0: port 1(bridge_slave_0) entered disabled state [ 390.087578] IPVS: ftp: loaded support on port[0] = 21 [ 392.027142] team0 (unregistering): Port device team_slave_1 removed [ 392.037347] team0 (unregistering): Port device team_slave_0 removed [ 392.047087] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 392.063185] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 392.093426] bond0 (unregistering): Released all slaves [ 392.633857] bridge0: port 1(bridge_slave_0) entered blocking state [ 392.640290] bridge0: port 1(bridge_slave_0) entered disabled state [ 392.648101] device bridge_slave_0 entered promiscuous mode [ 392.685912] bridge0: port 2(bridge_slave_1) entered blocking state [ 392.692337] bridge0: port 2(bridge_slave_1) entered disabled state [ 392.700156] device bridge_slave_1 entered promiscuous mode [ 392.735781] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 392.772670] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 392.879465] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 392.918762] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 393.084500] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 393.091907] team0: Port device team_slave_0 added [ 393.128885] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 393.136851] team0: Port device team_slave_1 added [ 393.171093] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 393.178063] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 393.186480] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 393.206974] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 393.213856] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 393.222678] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 393.257335] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 393.264501] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 393.272562] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 393.310193] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 393.317320] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 393.332157] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 393.605292] bridge0: port 2(bridge_slave_1) entered blocking state [ 393.611670] bridge0: port 2(bridge_slave_1) entered forwarding state [ 393.618304] bridge0: port 1(bridge_slave_0) entered blocking state [ 393.624692] bridge0: port 1(bridge_slave_0) entered forwarding state [ 393.631981] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 394.144202] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 394.389201] 8021q: adding VLAN 0 to HW filter on device bond0 [ 394.467466] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 394.544353] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 394.550520] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 394.558170] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 394.630458] 8021q: adding VLAN 0 to HW filter on device team0 [ 455.202239] device bridge_slave_1 left promiscuous mode [ 455.207746] bridge0: port 2(bridge_slave_1) entered disabled state [ 455.226541] device bridge_slave_0 left promiscuous mode [ 455.232035] bridge0: port 1(bridge_slave_0) entered disabled state [ 455.277690] team0 (unregistering): Port device team_slave_1 removed [ 455.296864] team0 (unregistering): Port device team_slave_0 removed [ 455.311061] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 455.327630] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 455.353660] bond0 (unregistering): Released all slaves [ 456.363280] IPVS: ftp: loaded support on port[0] = 21 [ 456.668338] bridge0: port 1(bridge_slave_0) entered blocking state [ 456.674725] bridge0: port 1(bridge_slave_0) entered disabled state [ 456.681664] device bridge_slave_0 entered promiscuous mode [ 456.703767] bridge0: port 2(bridge_slave_1) entered blocking state [ 456.710132] bridge0: port 2(bridge_slave_1) entered disabled state [ 456.717040] device bridge_slave_1 entered promiscuous mode [ 456.739285] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 456.762463] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 456.824963] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 456.848954] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 456.941726] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 456.949519] team0: Port device team_slave_0 added [ 456.971479] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 456.978517] team0: Port device team_slave_1 added [ 456.999933] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 457.024879] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 457.048509] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 457.073297] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 457.267790] bridge0: port 2(bridge_slave_1) entered blocking state [ 457.274162] bridge0: port 2(bridge_slave_1) entered forwarding state [ 457.280751] bridge0: port 1(bridge_slave_0) entered blocking state [ 457.287087] bridge0: port 1(bridge_slave_0) entered forwarding state [ 457.294178] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 458.009182] 8021q: adding VLAN 0 to HW filter on device bond0 [ 458.081936] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 458.153975] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 458.160160] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 458.167375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 458.174723] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 458.231535] 8021q: adding VLAN 0 to HW filter on device team0 [ 492.512349] INFO: task syz-executor2:20685 blocked for more than 120 seconds. [ 492.519740] Not tainted 4.17.0+ #89 [ 492.523913] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 492.531881] syz-executor2 D24720 20685 4589 0x00000004 [ 492.537527] Call Trace: [ 492.540119] __schedule+0x801/0x1e30 [ 492.543855] ? __sched_text_start+0x8/0x8 [ 492.548029] ? do_raw_spin_trylock+0x1b0/0x1b0 [ 492.552635] ? _raw_spin_unlock_irqrestore+0x74/0xc0 [ 492.557750] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 492.562796] ? trace_hardirqs_on+0xd/0x10 [ 492.566960] ? prepare_to_wait_event+0x38e/0xc50 [ 492.571745] ? prepare_to_wait_exclusive+0x540/0x540 [ 492.576861] ? find_held_lock+0x36/0x1c0 [ 492.580943] schedule+0xef/0x430 [ 492.584313] ? __schedule+0x1e30/0x1e30 [ 492.588302] ? check_same_owner+0x320/0x320 [ 492.592629] ? kasan_check_read+0x11/0x20 [ 492.596794] ? rcu_is_watching+0x85/0x140 [ 492.600945] ? replenish_dl_entity.cold.53+0x37/0x37 [ 492.606070] ? __might_sleep+0x95/0x190 [ 492.610067] blk_queue_enter+0x8da/0xdf0 [ 492.614165] ? blk_exit_rl+0x80/0x80 [ 492.617905] ? trace_hardirqs_on+0xd/0x10 [ 492.622090] ? save_stack+0x43/0xd0 [ 492.625725] ? kasan_kmalloc+0xc4/0xe0 [ 492.629631] ? kasan_slab_alloc+0x12/0x20 [ 492.633793] ? kmem_cache_alloc+0x12e/0x760 [ 492.638149] ? mempool_alloc_slab+0x44/0x60 [ 492.642481] ? mempool_alloc+0x18b/0x490 [ 492.646562] ? bio_alloc_bioset+0x384/0x6d0 [ 492.650895] ? blkdev_issue_flush+0xd1/0x300 [ 492.655325] ? blkdev_fsync+0x93/0xd0 [ 492.659148] ? vfs_fsync_range+0x140/0x220 [ 492.663398] ? vfs_fsync+0x29/0x30 [ 492.666946] ? __loop_update_dio+0x4de/0x6a0 [ 492.671362] ? lo_ioctl+0xd28/0x2190 [ 492.675082] ? blkdev_ioctl+0x9b6/0x2020 [ 492.679153] ? block_ioctl+0xee/0x130 [ 492.682964] ? do_vfs_ioctl+0x1cf/0x16f0 [ 492.687045] ? ksys_ioctl+0xa9/0xd0 [ 492.690684] ? __x64_sys_ioctl+0x73/0xb0 [ 492.694772] ? do_syscall_64+0x1b1/0x800 [ 492.698845] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 492.705098] ? finish_wait+0x420/0x420 [ 492.709012] ? print_usage_bug+0xc0/0xc0 [ 492.713102] ? graph_lock+0x170/0x170 [ 492.716953] generic_make_request+0x651/0x1790 [ 492.721544] ? print_usage_bug+0xc0/0xc0 [ 492.725617] ? blk_get_request+0x7e0/0x7e0 [ 492.729854] ? print_usage_bug+0xc0/0xc0 [ 492.733925] ? __lock_is_held+0xb5/0x140 [ 492.737996] ? rcu_read_lock_sched_held+0x108/0x120 [ 492.743041] ? kmem_cache_alloc+0x5fa/0x760 [ 492.747378] ? mark_held_locks+0xc9/0x160 [ 492.751542] ? __raw_spin_lock_init+0x1c/0x100 [ 492.756134] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 492.761170] submit_bio+0xba/0x460 [ 492.764727] ? submit_bio+0xba/0x460 [ 492.768457] ? generic_make_request+0x1790/0x1790 [ 492.773318] ? init_wait_entry+0x1b0/0x1b0 [ 492.777560] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 492.783107] ? file_check_and_advance_wb_err+0x152/0x5d0 [ 492.788576] submit_bio_wait+0x134/0x1e0 [ 492.792645] ? submit_bio_wait_endio+0x40/0x40 [ 492.797249] blkdev_issue_flush+0x204/0x300 [ 492.801599] blkdev_fsync+0x93/0xd0 [ 492.805247] ? thaw_bdev+0x1a0/0x1a0 [ 492.808967] vfs_fsync_range+0x140/0x220 [ 492.813045] vfs_fsync+0x29/0x30 [ 492.816413] __loop_update_dio+0x4de/0x6a0 [ 492.820654] lo_ioctl+0xd28/0x2190 [ 492.824194] ? lo_rw_aio_complete+0x430/0x430 [ 492.828694] blkdev_ioctl+0x9b6/0x2020 [ 492.832584] ? blkpg_ioctl+0xc40/0xc40 [ 492.836478] ? lock_downgrade+0x8e0/0x8e0 [ 492.840633] ? kasan_check_read+0x11/0x20 [ 492.844791] ? rcu_is_watching+0x85/0x140 [ 492.848940] ? rcu_report_qs_rnp+0x790/0x790 [ 492.853368] ? __fget+0x40c/0x650 [ 492.856825] ? expand_files.part.8+0x9a0/0x9a0 [ 492.861426] ? _raw_spin_unlock_irqrestore+0x63/0xc0 [ 492.866547] block_ioctl+0xee/0x130 [ 492.870192] ? blkdev_fallocate+0x400/0x400 [ 492.874531] do_vfs_ioctl+0x1cf/0x16f0 [ 492.878448] ? ioctl_preallocate+0x2e0/0x2e0 [ 492.882870] ? fget_raw+0x20/0x20 [ 492.886345] ? putname+0xf2/0x130 [ 492.889807] ? rcu_read_lock_sched_held+0x108/0x120 [ 492.894843] ? kmem_cache_free+0x25c/0x2d0 [ 492.899097] ? exit_to_usermode_loop+0x87/0x310 [ 492.903790] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 492.909344] ? security_file_ioctl+0x94/0xc0 [ 492.913770] ksys_ioctl+0xa9/0xd0 [ 492.917227] __x64_sys_ioctl+0x73/0xb0 [ 492.921127] do_syscall_64+0x1b1/0x800 [ 492.925037] ? finish_task_switch+0x1ca/0x840 [ 492.929554] ? syscall_return_slowpath+0x5c0/0x5c0 [ 492.934493] ? syscall_return_slowpath+0x30f/0x5c0 [ 492.939448] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 492.944826] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 492.949682] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 492.954874] RIP: 0033:0x4559f9 [ 492.958066] Code: 0f 85 e9 f2 ff ff c6 84 24 60 01 00 00 00 48 8b ac 24 38 01 00 00 48 81 c4 40 01 00 00 c3 c6 84 24 60 01 00 00 00 48 8b ac 24 <38> 01 00 00 48 81 c4 40 01 00 00 c3 c6 84 24 60 01 00 00 01 48 8b [ 492.977277] RSP: 002b:00007fe6419f8c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 492.984992] RAX: ffffffffffffffda RBX: 00007fe6419f96d4 RCX: 00000000004559f9 [ 492.992277] RDX: 0000000000000013 RSI: 0000000000004c06 RDI: 0000000000000014 [ 492.999554] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 493.006840] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 493.014115] R13: 00000000004bddfb R14: 00000000004cbc08 R15: 0000000000000000 [ 493.021400] [ 493.021400] Showing all locks held in the system: [ 493.027729] 2 locks held by khungtaskd/897: [ 493.032054] #0: 000000005c36a0d2 (rcu_read_lock){....}, at: watchdog+0x1ff/0xf60 [ 493.039709] #1: 000000005c36a0d2 (rcu_read_lock){....}, at: debug_show_all_locks+0xc8/0x40c [ 493.048336] 1 lock held by rsyslogd/4420: [ 493.052480] #0: 0000000028904989 (&f->f_pos_lock){+.+.}, at: __fdget_pos+0x1a9/0x1e0 [ 493.060484] 2 locks held by getty/4510: [ 493.064460] #0: 0000000073c1664f (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x37/0x40 [ 493.072722] #1: 000000005784b452 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x321/0x1cc0 [ 493.081593] 2 locks held by getty/4511: [ 493.085574] #0: 0000000031c36c4b (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x37/0x40 [ 493.093822] #1: 00000000ffe5fd33 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x321/0x1cc0 [ 493.102703] 2 locks held by getty/4512: [ 493.106680] #0: 0000000029b8bd17 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x37/0x40 [ 493.114932] #1: 0000000091c64b7c (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x321/0x1cc0 [ 493.123794] 2 locks held by getty/4513: [ 493.127777] #0: 000000001a59945d (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x37/0x40 [ 493.136044] #1: 000000002ae718ae (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x321/0x1cc0 [ 493.144920] 2 locks held by getty/4514: [ 493.148898] #0: 000000005c755357 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x37/0x40 [ 493.157160] #1: 00000000545f1c6a (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x321/0x1cc0 [ 493.166040] 2 locks held by getty/4515: [ 493.170031] #0: 0000000034c0567c (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x37/0x40 [ 493.178292] #1: 0000000098e9a29c (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x321/0x1cc0 [ 493.187172] 2 locks held by getty/4516: [ 493.191145] #0: 0000000043f87317 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x37/0x40 [ 493.199408] #1: 00000000cfe735a1 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x321/0x1cc0 [ 493.208294] 1 lock held by syz-executor2/20685: [ 493.212974] #0: 00000000dedc37da (&lo->lo_ctl_mutex/1){+.+.}, at: lo_ioctl+0x8d/0x2190 [ 493.221166] 1 lock held by blkid/21041: [ 493.225145] #0: 00000000dedc37da (&lo->lo_ctl_mutex/1){+.+.}, at: lo_ioctl+0x8d/0x2190 [ 493.233329] 1 lock held by syz-executor0/21043: [ 493.238021] #0: 00000000dedc37da (&lo->lo_ctl_mutex/1){+.+.}, at: lo_ioctl+0x8d/0x2190 [ 493.246199] [ 493.247858] ============================================= [ 493.247858] [ 493.254879] NMI backtrace for cpu 1 [ 493.258530] CPU: 1 PID: 897 Comm: khungtaskd Not tainted 4.17.0+ #89 [ 493.265000] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 493.274332] Call Trace: [ 493.276901] dump_stack+0x1b9/0x294 [ 493.280513] ? dump_stack_print_info.cold.2+0x52/0x52 [ 493.285687] ? vprintk_default+0x28/0x30 [ 493.289731] ? vprintk_func+0x81/0xe7 [ 493.293514] nmi_cpu_backtrace.cold.4+0x19/0xce [ 493.298166] ? lapic_can_unplug_cpu.cold.26+0x3f/0x3f [ 493.303344] nmi_trigger_cpumask_backtrace+0x151/0x192 [ 493.308609] arch_trigger_cpumask_backtrace+0x14/0x20 [ 493.313780] watchdog+0xc10/0xf60 [ 493.317218] ? reset_hung_task_detector+0xb0/0xb0 [ 493.322046] ? __schedule+0x1e30/0x1e30 [ 493.326002] ? do_raw_spin_unlock+0x9e/0x2e0 [ 493.330388] ? do_raw_spin_trylock+0x1b0/0x1b0 [ 493.334948] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 493.340464] ? __kthread_parkme+0x111/0x1d0 [ 493.344764] ? parse_args.cold.15+0x1b3/0x1b3 [ 493.349238] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 493.354232] ? trace_hardirqs_on+0xd/0x10 [ 493.358369] kthread+0x345/0x410 [ 493.361713] ? reset_hung_task_detector+0xb0/0xb0 [ 493.366531] ? kthread_bind+0x40/0x40 [ 493.370322] ret_from_fork+0x3a/0x50 [ 493.374069] Sending NMI from CPU 1 to CPUs 0: [ 493.378581] NMI backtrace for cpu 0 skipped: idling at native_safe_halt+0x6/0x10 [ 493.379573] Kernel panic - not syncing: hung_task: blocked tasks [ 493.392266] CPU: 1 PID: 897 Comm: khungtaskd Not tainted 4.17.0+ #89 [ 493.398737] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 493.408072] Call Trace: [ 493.410645] dump_stack+0x1b9/0x294 [ 493.414256] ? dump_stack_print_info.cold.2+0x52/0x52 [ 493.419438] ? printk_safe_log_store+0x2d0/0x2d0 [ 493.424178] panic+0x22f/0x4de [ 493.427350] ? add_taint.cold.5+0x16/0x16 [ 493.431480] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 493.436999] ? nmi_trigger_cpumask_backtrace+0x13a/0x192 [ 493.442428] ? printk_safe_flush+0xd7/0x130 [ 493.446729] watchdog+0xc21/0xf60 [ 493.450167] ? reset_hung_task_detector+0xb0/0xb0 [ 493.454992] ? __schedule+0x1e30/0x1e30 [ 493.458947] ? do_raw_spin_unlock+0x9e/0x2e0 [ 493.463334] ? do_raw_spin_trylock+0x1b0/0x1b0 [ 493.467897] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 493.473421] ? __kthread_parkme+0x111/0x1d0 [ 493.477722] ? parse_args.cold.15+0x1b3/0x1b3 [ 493.482196] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 493.487192] ? trace_hardirqs_on+0xd/0x10 [ 493.491319] kthread+0x345/0x410 [ 493.494665] ? reset_hung_task_detector+0xb0/0xb0 [ 493.499483] ? kthread_bind+0x40/0x40 [ 493.503264] ret_from_fork+0x3a/0x50 [ 493.507375] Dumping ftrace buffer: [ 493.510900] (ftrace buffer empty) [ 493.514587] Kernel Offset: disabled [ 493.518194] Rebooting in 86400 seconds..