[ 1651.992936] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=12125,uid=0 [ 1652.007934] Memory cgroup out of memory: Kill process 12125 (syz-executor.1) score 140 or sacrifice child [ 1652.018059] Killed process 12125 (syz-executor.1) total-vm:72712kB, anon-rss:7952kB, file-rss:34944kB, shmem-rss:0kB [ 1652.036455] oom_reaper: reaped process 12125 (syz-executor.1), now anon-rss:0kB, file-rss:33984kB, shmem-rss:0kB [ 1652.106438] netlink: 7 bytes leftover after parsing attributes in process `syz-executor.4'. 14:22:02 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000bd7000)={&(0x7f0000c07e98)=ANY=[@ANYBLOB="000000000000000000000000000000000000000033000000ffffffff000000000000000000000000000000000000000000000000000000000000000000294900000000000000000000000000000000000000007fffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020001007d00000000000000480001006d64350000000000000000000019000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000"], 0x1}}, 0x0) 14:22:02 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee4050c00000f0000008bc36f7d79ce3263dac37b7403242189c609", 0x23}], 0x1}, 0x0) 14:22:02 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = dup(r0) write$USERIO_CMD_SET_PORT_TYPE(r1, &(0x7f0000000000)={0x1, 0x100}, 0x2) r2 = socket$inet_udplite(0x2, 0x2, 0x88) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000100)="0af51f023c123f3188a070") sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0xfffffffffffffe6e, &(0x7f0000000ac0)={&(0x7f00000008c0)=@updpolicy={0xb8, 0x19, 0x309, 0x0, 0x0, {{@in=@remote, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x80}}}, 0xd5}, 0x1, 0x0, 0x0, 0x3}, 0x0) 14:22:02 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000bd7000)={&(0x7f0000c07e98)=ANY=[@ANYBLOB="000000000000000000000000000000000000000033000000ffffffff00000000000000000000000000000000000000000000000000000000000000000029490000000000000000000000000000000000f0ffffffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020001007d00000000000000480001006d64350000000000000000000019000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000"], 0x1}}, 0x0) [ 1652.358669] netlink: 7 bytes leftover after parsing attributes in process `syz-executor.4'. 14:22:02 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000000)=[{0x80000006}]}, 0x10) r1 = socket$pppoe(0x18, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) connect$pppoe(r1, &(0x7f0000000040)={0x18, 0x0, {0x2, @local, 'batadv0\x00'}}, 0x1e) sendmmsg(r1, &(0x7f0000005b40), 0x40000000000014d, 0xffffffff00000000) 14:22:03 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee4050c00000f0000008bc36f7d79ce3263dac37b7403242189c609", 0x23}], 0x1}, 0x0) [ 1652.583885] netlink: 7 bytes leftover after parsing attributes in process `syz-executor.4'. 14:22:03 executing program 1: r0 = perf_event_open(&(0x7f0000000300)={0x400000001, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f000094f000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffff9c, 0xc00c642d, 0x0) r1 = syz_open_dev$admmidi(&(0x7f0000000480)='/dev/admmidi#\x00', 0x1, 0x240) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000940)) write$uinput_user_dev(r1, &(0x7f00000004c0)={'syz1\x00', {0x4, 0x100, 0x6, 0x8}, 0x4e, [0x3, 0x3, 0x7, 0x9, 0x18, 0xfff, 0x4ec497bc, 0x6, 0x5, 0x65ae, 0x3, 0x9, 0x7, 0x9, 0x2, 0x81, 0x80000001, 0x9, 0x0, 0x4, 0x9, 0x4, 0x4, 0x1, 0x5, 0x80, 0x3, 0x5, 0x66a, 0xffffffffffffffe6, 0x1b, 0x0, 0xe2e, 0x6100, 0x1ff, 0x401, 0x4, 0x6, 0x101, 0x1, 0x2, 0x10000, 0x7ff, 0x9, 0x5, 0x8, 0xfffffffffffffff7, 0x4, 0xc53d, 0x80, 0x1000, 0x4, 0x0, 0x7ff, 0x0, 0x1, 0x8, 0x80, 0x6, 0x100000001, 0x3, 0xffffffff, 0x4, 0x81], [0x101, 0x7fff, 0x4, 0x8a04, 0xffffffff, 0x1, 0x800, 0x0, 0x8, 0x6, 0xfffffffffffffff8, 0x63e, 0x6, 0x5, 0x8000, 0x200, 0x8, 0x6, 0xffffffffffff7fff, 0x2, 0x3, 0xffffffffffffff7f, 0x6, 0x7f, 0x2, 0x4b3, 0x3ff, 0x4, 0x7fffffff, 0x1f, 0x0, 0x401, 0x5, 0x1, 0x1, 0xffffffffffffff7f, 0xc2e, 0x0, 0x200, 0x3, 0xfff, 0x6, 0x1ff, 0x0, 0x6, 0x5, 0x54, 0x4, 0xb3c2, 0x3, 0x3ff, 0xa4, 0x79, 0x6, 0x3, 0x5, 0x3, 0xc1cf, 0x8000, 0xb7db, 0x400, 0x100, 0x5, 0x1], [0x8, 0x9, 0xf8, 0x7ff, 0x80, 0x7, 0x4, 0xfffffffffffffff8, 0x3e8, 0x9, 0x73, 0x10000, 0x1bbf, 0x81, 0x1, 0x2, 0x7, 0x7fff, 0x1, 0x1e5, 0x9, 0x8, 0x97, 0x8, 0x1, 0x3, 0x9, 0x9, 0x5, 0xfffffffffffff801, 0xff, 0x5, 0x51c5, 0x2, 0x24ba8, 0xfffffffffffffffa, 0x0, 0x9, 0x6, 0x1ff, 0xfffffffffffffffb, 0x7ff, 0x5, 0xffffffffffffff28, 0x3, 0x1, 0xfff, 0x5000000000, 0x83e, 0x2, 0x100000000, 0x7, 0xfffffffffffffffb, 0x3, 0x3, 0x8, 0x5, 0x7, 0x100000000, 0x200, 0x8, 0x3, 0x5, 0xffffffff], [0x1000, 0xff, 0x0, 0x20, 0x3, 0x81, 0x2a19, 0x7, 0x6, 0x1, 0x7, 0xaa5300000, 0x401, 0x3, 0xd5ac, 0x80000001, 0x0, 0x4, 0x87, 0xfffffffffffffffd, 0xff, 0x45, 0x40, 0x6, 0x7, 0x2b49, 0x4, 0x0, 0x7, 0x5, 0x3ff, 0x20, 0x9, 0x7, 0x9, 0x7661, 0x1, 0x10001, 0x80, 0x7c6f, 0x6, 0x5ac2e1fc, 0x4, 0x1, 0x100, 0xc61c, 0xfffffffffffffe01, 0x79cc8ec0, 0x9, 0x6, 0x2, 0x1ff, 0x1, 0x3, 0x0, 0x1, 0x4, 0x1, 0x11, 0x3, 0xed71, 0x13ef, 0x6, 0x9a]}, 0x45c) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000000c0)={{{@in=@remote, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000000000)=0xe8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f00000001c0)=0xc) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000380)={0x0, 0x0}, &(0x7f00000003c0)=0xc) setresuid(r2, r3, r4) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) r5 = syz_open_dev$admmidi(&(0x7f0000000400)='/dev/admmidi#\x00', 0x3, 0x214040) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x20}) ioctl$DRM_IOCTL_AGP_FREE(r5, 0x40206435, &(0x7f00000009c0)={0x0, r6, 0x10000, 0x2}) openat$cgroup_int(r5, &(0x7f0000000440)='hugetlb.2MB.limit_in_bytes\x00', 0x2, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r8, &(0x7f00000001c0), 0x100000073) read(r7, &(0x7f0000000200)=""/250, 0x50c7e3e3) 14:22:03 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet_udplite(0x2, 0x2, 0x88) syz_genetlink_get_family_id$nbd(&(0x7f0000000000)='nbd\x00') ioctl(r1, 0x1000008912, &(0x7f0000000100)="fbf41f023c123f3188a070") setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000080)={{0x0, @local, 0x4e22, 0x3, 'wrr\x00', 0x22, 0x5, 0x4d}, {@empty, 0x4e24, 0x3, 0x9, 0xfffffffffffff001, 0x3}}, 0x44) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000140)=ANY=[@ANYBLOB="b8000000190009030000000000000000ac1414bb000000000000000000000000ff02000000000000000000000000000100000000000000000a00008000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000f8ffffff0000000000001e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b2132c62a6be32caa06ba69c9aa756c000000000000000000000000000000"], 0xb8}}, 0x0) 14:22:03 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000bd7000)={&(0x7f0000c07e98)=ANY=[@ANYBLOB="000000000000000000000000000000000000000033000000ffffffff0000000000000000000000000000000000000000000000000000000000000000002949000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020001007d00000000000000480001006d64350000000000000000000019000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000"], 0x1}}, 0x0) 14:22:03 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee4050c00000f0000008bc36f7d79ce3263dac37b7403242189c609", 0x23}], 0x1}, 0x0) 14:22:03 executing program 0: r0 = socket$l2tp(0x18, 0x1, 0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000002300)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000002200)="34ced2a996ba8ce718729a3354760e2d8bd18b58831aaa0329b2e3f5c1c40ce7b9ed91ddee7790b8dd2ab79522b1849ee922b47fc6bb66c05e4a1e060d4662d44d638fab3c06f602eca1b727b6d739b8b6f2b3e9a370f04dd876b2cf73729fb18176ff8c0535ef28868fc9aebf1830bf41fe6f1571038cc150598b3e37100bcdff6ccb4a28c555a0b5d0870a19744178c5c8d4f3a912ca459e994512e9364e4c1daa3331dccbf838ae336261c28b62dee6dadebb9de39e91dca8b16948bdadf77129ad9a708acdd9cf4df1eb18", 0xcd, r0}, 0x68) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000fbe000)={0x23b2fdfd04aaaee, &(0x7f00000021c0)=[{0x5}]}, 0xffffffffffffff3f) r2 = socket$pppoe(0x18, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x0, 0x2) ioctl$KVM_GET_NESTED_STATE(r4, 0xc080aebe, &(0x7f0000000140)={0x0, 0x0, 0x2080}) connect$pppoe(r2, &(0x7f0000000040)={0x18, 0x0, {0x2, @local, 'batadv0\x00'}}, 0x1e) r5 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x101, 0x0) ioctl$KVM_SET_GSI_ROUTING(r5, 0x4008ae6a, &(0x7f00000000c0)={0x1, 0x0, [{0x8000, 0x0, 0x0, 0x0, @adapter={0x8, 0x2, 0x1f, 0x100, 0x6}}]}) sendmmsg(r3, &(0x7f0000005b40), 0x0, 0x0) 14:22:03 executing program 3: r0 = perf_event_open(&(0x7f0000000300)={0x400000001, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f000094f000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffff9c, 0xc00c642d, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0x100000073) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) fstatfs(r0, &(0x7f00000000c0)=""/170) 14:22:03 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000bd7000)={&(0x7f0000c07e98)=ANY=[@ANYBLOB="000000000000000000000000000000000000000033000000ffffffff0000000000000000000000000000000000000000000000000000000000000000002949000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020001007d00000000000000480001006d64350000000000000000000019000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000"], 0x1}}, 0x0) [ 1653.102088] netlink: 7 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1653.130450] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:20002 14:22:03 executing program 0: r0 = socket$packet(0x11, 0x400000000005, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000000)=[{0x80000006}]}, 0xf) r1 = socket$pppoe(0x18, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) connect$pppoe(r1, &(0x7f0000000040)={0x18, 0x0, {0x2, @local, 'batadv0\x00'}}, 0x1e) init_module(&(0x7f0000000080)='&,+(ppp0user#{bdev\'cpuset\x00', 0x1a, &(0x7f00000000c0)=']*ppp1cgroup\x00') sendmmsg(r1, &(0x7f0000005b40), 0x40000000000014d, 0x0) 14:22:03 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee4050c00000f0000008bc36f7d79ce3263dac37b7403242189c609", 0x23}], 0x1}, 0x0) [ 1653.158174] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:20002 14:22:03 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="0af51f023c123f3188a070") ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={r0}) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, r3, 0x400, 0x70bd26, 0x25dfdbfe, {{}, 0x0, 0x4101, 0x0, {0x18, 0x17, {0x3, 0x6, @udp='udp:syz1\x00'}}}, ["", "", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x4044001) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f00000008c0)=@updpolicy={0xb8, 0x19, 0x309, 0x0, 0x0, {{@in=@remote, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x80}}}, 0xb8}}, 0x0) 14:22:03 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000bd7000)={&(0x7f0000c07e98)=ANY=[@ANYBLOB="000000000000000000000000000000000000000033000000ffffffff0000000000000000000000000000000000000000000000000000000000000000002949000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020001007d00000000000000480001006d64350000000000000000000019000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000"], 0x1}}, 0x0) [ 1653.310095] netlink: 7 bytes leftover after parsing attributes in process `syz-executor.4'. 14:22:03 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee4050c00000f0000008bc36f7d79ce3263dac37b7403242189c609", 0x23}], 0x1}, 0x0) [ 1653.567053] netlink: 7 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1653.733011] syz-executor.1 invoked oom-killer: gfp_mask=0x7200c2(GFP_HIGHUSER|__GFP_ACCOUNT), order=0, oom_score_adj=0 [ 1653.748890] CPU: 1 PID: 12235 Comm: syz-executor.1 Not tainted 5.0.0-rc6+ #70 [ 1653.756190] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1653.765529] Call Trace: [ 1653.768112] dump_stack+0x172/0x1f0 [ 1653.771730] dump_header+0x10f/0xb6c [ 1653.775467] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1653.780568] ? ___ratelimit+0x60/0x595 [ 1653.784454] ? do_raw_spin_unlock+0x57/0x270 [ 1653.788857] oom_kill_process.cold+0x10/0x6f5 [ 1653.793363] ? task_will_free_mem+0x139/0x6e0 [ 1653.797876] out_of_memory+0x79a/0x1280 [ 1653.801857] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1653.806947] ? oom_killer_disable+0x280/0x280 [ 1653.811440] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1653.816542] mem_cgroup_out_of_memory+0x99/0xe0 [ 1653.821208] ? memcg_memory_event+0x40/0x40 [ 1653.825543] ? _raw_spin_unlock+0x2d/0x50 [ 1653.829704] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1653.834811] try_charge+0xfec/0x1570 [ 1653.838511] ? find_held_lock+0x35/0x130 [ 1653.842575] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1653.847411] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 1653.852243] ? find_held_lock+0x35/0x130 [ 1653.856293] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 1653.861179] memcg_kmem_charge_memcg+0x7c/0x130 [ 1653.865856] ? memcg_kmem_put_cache+0xb0/0xb0 [ 1653.870345] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 1653.875189] memcg_kmem_charge+0x13b/0x340 [ 1653.879431] __alloc_pages_nodemask+0x437/0x710 [ 1653.884093] ? __alloc_pages_slowpath+0x2900/0x2900 [ 1653.889099] ? ___might_sleep+0x163/0x280 [ 1653.893238] ? copyin+0xb5/0x100 [ 1653.896596] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1653.902123] alloc_pages_current+0x107/0x210 [ 1653.906521] pipe_write+0xa65/0xfb0 [ 1653.910145] __vfs_write+0x613/0x8e0 [ 1653.913847] ? kernel_read+0x120/0x120 [ 1653.917729] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1653.923287] ? rw_verify_area+0x118/0x360 [ 1653.927438] vfs_write+0x20c/0x580 [ 1653.930969] ksys_write+0xea/0x1f0 [ 1653.934495] ? __ia32_sys_read+0xb0/0xb0 [ 1653.938553] ? do_syscall_64+0x26/0x610 [ 1653.942518] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1653.947880] ? do_syscall_64+0x26/0x610 [ 1653.951844] __x64_sys_write+0x73/0xb0 [ 1653.955747] do_syscall_64+0x103/0x610 [ 1653.959627] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1653.964828] RIP: 0033:0x457e29 [ 1653.968032] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1653.986937] RSP: 002b:00007fd8c7971c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1653.994627] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457e29 [ 1654.001897] RDX: 0000000100000073 RSI: 00000000200001c0 RDI: 0000000000000005 [ 1654.009159] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1654.016412] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd8c79726d4 [ 1654.023666] R13: 00000000004c3be0 R14: 00000000004dc3d0 R15: 00000000ffffffff [ 1654.032324] memory: usage 307200kB, limit 307200kB, failcnt 9095 [ 1654.053960] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1654.067689] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1654.075840] Memory cgroup stats for /syz1: cache:0KB rss:257152KB rss_huge:229376KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:8KB active_anon:257268KB inactive_file:0KB active_file:4KB unevictable:0KB [ 1654.100454] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=12232,uid=0 [ 1654.115469] Memory cgroup out of memory: Kill process 12232 (syz-executor.1) score 140 or sacrifice child 14:22:04 executing program 1: r0 = perf_event_open(&(0x7f0000000300)={0x400000001, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f000094f000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f00000000c0)={0x4, {{0x2, 0x4e22, @empty}}}, 0x88) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffff9c, 0xc00c642d, 0x0) syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x0, 0x40) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0x100000073) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) ioctl$VIDIOC_SUBDEV_G_SELECTION(r2, 0xc040563d, &(0x7f0000000000)={0x1, 0x0, 0x1, 0x7, {0x4, 0x101, 0x1, 0x1f}}) 14:22:04 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000080)=0xc) wait4(r2, &(0x7f00000000c0), 0x20000000, 0x0) ioctl(r1, 0x1000008912, &(0x7f0000000100)="0af51f023c123f3188a070") sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000140)=ANY=[@ANYBLOB="b800000019000c030000000000000000ac1414bb000000000000000000000000ff020000000000000000000000000001000000000000000dd1e0078000000000a79a9536a26089e3cbb6543b95be447e671c008fdf5a00c9e9a247428184666aa0f4a193417e871ceb59b1240a2f25e81967f6f48d81a6da8cf392c2984b2a8a34ea13ad2bd19300ab3dd67d89c66e9fb2e063d61b6dbad7216a03b513a67ed8adebc26a44c05ce5849d28d7466d9d18f79790c6268c35ec3d6e2143985f448e152d09b4688d1c9781", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0xb8}}, 0x0) 14:22:04 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000bd7000)={&(0x7f0000c07e98)=ANY=[@ANYBLOB="000000000000000000000000000000000000000033000000ffffffff00000000000000000000000000000000000000000000000000000000000000000029490000000000000000000000000000000000f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020001007d00000000000000480001006d64350000000000000000000019000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000"], 0x1}}, 0x0) 14:22:04 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x621c) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000000)=[{0x80000006}]}, 0x10) r1 = socket$pppoe(0x18, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) connect$pppoe(r1, &(0x7f0000000040)={0x18, 0x0, {0x2, @local, 'batadv0\x00'}}, 0x1e) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)={&(0x7f00000000c0)='./file0\x00', 0x0, 0x8}, 0x10) sendmmsg(r1, &(0x7f0000005b40), 0x40000000000014d, 0x0) 14:22:04 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee4050c00000f0000008bc36f7d79ce3263dac37b7403242189c609", 0x23}], 0x1}, 0x0) 14:22:04 executing program 3: r0 = perf_event_open(&(0x7f0000000300)={0x400000001, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f000094f000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffff9c, 0xc00c642d, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0x100000073) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) perf_event_open$cgroup(&(0x7f00000000c0)={0x4, 0x70, 0x7f, 0x7f, 0x7f, 0x4, 0x0, 0x2, 0x0, 0x1, 0x140000, 0x117f, 0x80, 0x0, 0x5, 0xfffffffffffff79d, 0x3, 0x5, 0x4, 0x3, 0xfffffffeffffffff, 0x24b8bd34, 0x48, 0x4, 0x3, 0x5, 0x0, 0x0, 0x1ff, 0x3, 0x7fffffff, 0x3, 0x0, 0x1ff, 0x175, 0x3ff, 0x5, 0x0, 0x0, 0xff, 0x2, @perf_bp={&(0x7f0000000000), 0xf}, 0x40, 0x8001, 0x0, 0xb, 0xfffffffffffffff8, 0x898a, 0x100}, r2, 0xc, r2, 0x5) [ 1654.125510] Killed process 12232 (syz-executor.1) total-vm:72712kB, anon-rss:7952kB, file-rss:34944kB, shmem-rss:0kB [ 1654.143486] oom_reaper: reaped process 12232 (syz-executor.1), now anon-rss:0kB, file-rss:33984kB, shmem-rss:0kB 14:22:04 executing program 2: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/mixer\x00', 0x8000, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000300)=0x2) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='personality\x00') r2 = creat(&(0x7f0000000080)='./bus\x00', 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000540)={@dev={0xac, 0x14, 0x14, 0xa}, @rand_addr=0xe8, 0x1, 0x1, [@broadcast]}, 0x14) ioctl(r3, 0x1000008912, &(0x7f0000000040)="0af51f023c123f3188a070") sendfile(r2, r1, 0x0, 0x10013c93e) socket$caif_seqpacket(0x25, 0x5, 0x8002) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = add_key$user(&(0x7f0000000380)='user\x00', &(0x7f00000003c0)={'syz', 0x1}, &(0x7f0000000400)="13bc584bedb1f8d33af756032be03bab991f5b6dc2852b97ebd881cd4d4c20cee7ab3d596b03bc6f212810e0869a90ce3f3697500e5cf78009ea1d95370471dd3eb1a49eb79ba5e7654aba58ce215cf68daa141b501e75b74b6383d67955f327a074e8f7f6a1691805671f3158c081e3511018512d9f1fb02fe2498a480c548326363cc21577f3df5843992cad4306d008b659044c06c7d556f045169d8fc2d9100f508d277f5d8b78963e7a4db405ce550c8518d557e9df0c72fca1678670aa81418e7599e968bd6f4366cb70c7e69bf8f7783df66a892ce62dc6e3f839a2d6c81205", 0xe3, 0xfffffffffffffffa) ioctl$KVM_HAS_DEVICE_ATTR(r2, 0x4018aee3, &(0x7f00000005c0)={0x0, 0x100000001, 0x6, &(0x7f0000000580)=0x8}) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0xb) keyctl$describe(0x6, r6, &(0x7f0000000500)=""/31, 0x1f) getsockopt$bt_sco_SCO_CONNINFO(r1, 0x11, 0x2, &(0x7f0000000600)=""/101, &(0x7f0000000680)=0x65) sendto(r5, &(0x7f0000000140)="fcdb8e7cc41f2aad8c9676ecd73f018f4bc47852b06d8a96f741b2af159a3ada32e61757415fd9782f391a54377a60fbddfd588431090a0880f9445e817f0304938b9db20f42f81bc03f1ab7827ae18e36d36fc035d8450219ceef154a7bc58033b551bd68f7b05a39119e0a555555f8867308589c0151af684b224c57985b5530ba4061690378a175ea591b7fcedb13e77b1b5b386264cabd3b9d", 0x9b, 0x4000010, &(0x7f0000000200)=@in6={0xa, 0x4e21, 0x8, @ipv4={[], [], @loopback}, 0x4}, 0x80) ioctl(r5, 0x1000008912, &(0x7f0000000100)="0af51f023c123f3188a070") syz_open_dev$adsp(&(0x7f0000000340)='/dev/adsp#\x00', 0x7, 0x0) ioctl$sock_inet_SIOCDELRT(r5, 0x890c, &(0x7f0000000080)={0x0, {0x2, 0x4e22, @empty}, {0x2, 0x4e23, @remote}, {0x2, 0x4e24, @local}, 0x84, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000000)='teql0\x00', 0x101, 0x80000000, 0x1}) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f00000008c0)=@updpolicy={0xb8, 0x19, 0x309, 0x0, 0x0, {{@in=@remote, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x80}}}, 0xb8}}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer2\x00', 0x80, 0x0) 14:22:04 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000bd7000)={&(0x7f0000c07e98)=ANY=[@ANYBLOB="000000000000000000000000000000000000000033000000ffffffff0000000000000000000000000000000000000000000000000000000000000000002949000000000000000000000000000000000071150000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020001007d00000000000000480001006d64350000000000000000000019000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000"], 0x1}}, 0x0) [ 1654.232491] netlink: 7 bytes leftover after parsing attributes in process `syz-executor.4'. 14:22:04 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee4050c00000f0000008bc36f7d79ce3263dac37b7403242189c609", 0x23}], 0x1}, 0x0) 14:22:05 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000bd7000)={&(0x7f0000c07e98)=ANY=[@ANYBLOB="000000000000000000000000000000000000000033000000ffffffff0000000000000000000000000000000000000000000000000000000000000000002949000000000000000000000000000000000015710000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020001007d00000000000000480001006d64350000000000000000000019000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000"], 0x1}}, 0x0) 14:22:05 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee4050c00000f0000008bc36f7d79ce3263dac37b7403242189c609", 0x23}], 0x1}, 0x0) 14:22:05 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x80000) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffff9c, 0xc0106426, &(0x7f00000000c0)={0x4, &(0x7f0000000080)=[{}, {}, {0x0}, {}]}) ioctl$DRM_IOCTL_NEW_CTX(r1, 0x40086425, &(0x7f0000000280)={r2, 0x2}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000100)="0af51f023c123f3188a070") sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000140)=ANY=[@ANYBLOB="b8000000190009030000000000000000ac1414bb000000000000000000000000ff02000000000000000000000000000100000000000000000a00008000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000080000000000000000040000000000000000000000000000000000000000000000000000000000000000000000b7350773f873e35dd625ca605349c82477981f038841b6e50700000000000000291e7d3dcad951f8c9f3cc0a1dfc7fb04597b6dfad3f3405f870aac02372fc31a9da97e6410019c574200bd231ea14996c629711e95a07f91541ff5471043b93d0405917f7fa05ad203454942d2d142910f97007309094558515b6adcdcdae744dbdd54a189b0c41a531"], 0xb8}}, 0x0) [ 1654.762503] net_ratelimit: 15 callbacks suppressed [ 1654.762512] protocol 88fb is buggy, dev hsr_slave_0 [ 1654.762575] protocol 88fb is buggy, dev hsr_slave_0 [ 1654.767640] protocol 88fb is buggy, dev hsr_slave_1 [ 1654.772650] protocol 88fb is buggy, dev hsr_slave_1 [ 1654.777712] protocol 88fb is buggy, dev hsr_slave_0 [ 1654.792820] protocol 88fb is buggy, dev hsr_slave_1 [ 1654.798016] protocol 88fb is buggy, dev hsr_slave_0 [ 1654.803183] protocol 88fb is buggy, dev hsr_slave_1 [ 1654.808334] protocol 88fb is buggy, dev hsr_slave_0 [ 1654.813480] protocol 88fb is buggy, dev hsr_slave_1 [ 1655.040865] syz-executor.1 invoked oom-killer: gfp_mask=0x7200c2(GFP_HIGHUSER|__GFP_ACCOUNT), order=0, oom_score_adj=0 [ 1655.053648] CPU: 0 PID: 12272 Comm: syz-executor.1 Not tainted 5.0.0-rc6+ #70 [ 1655.060965] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1655.070339] Call Trace: [ 1655.072951] dump_stack+0x172/0x1f0 [ 1655.076599] dump_header+0x10f/0xb6c [ 1655.080324] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1655.085453] ? ___ratelimit+0x60/0x595 [ 1655.089375] ? do_raw_spin_unlock+0x57/0x270 [ 1655.093818] oom_kill_process.cold+0x10/0x6f5 [ 1655.098353] ? task_will_free_mem+0x139/0x6e0 [ 1655.102869] out_of_memory+0x79a/0x1280 [ 1655.106856] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1655.111967] ? oom_killer_disable+0x280/0x280 [ 1655.116477] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1655.121625] mem_cgroup_out_of_memory+0x99/0xe0 [ 1655.126307] ? memcg_memory_event+0x40/0x40 [ 1655.130644] ? _raw_spin_unlock+0x2d/0x50 [ 1655.134806] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1655.139933] try_charge+0xfec/0x1570 [ 1655.143658] ? find_held_lock+0x35/0x130 [ 1655.147739] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1655.152591] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 1655.157449] ? find_held_lock+0x35/0x130 [ 1655.161525] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 1655.166396] memcg_kmem_charge_memcg+0x7c/0x130 [ 1655.171084] ? memcg_kmem_put_cache+0xb0/0xb0 [ 1655.175594] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 1655.180456] memcg_kmem_charge+0x13b/0x340 [ 1655.184704] __alloc_pages_nodemask+0x437/0x710 [ 1655.189383] ? __alloc_pages_slowpath+0x2900/0x2900 [ 1655.194407] ? ___might_sleep+0x163/0x280 [ 1655.198577] ? copyin+0xb5/0x100 [ 1655.201967] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1655.207522] alloc_pages_current+0x107/0x210 [ 1655.211945] pipe_write+0xa65/0xfb0 [ 1655.215595] __vfs_write+0x613/0x8e0 [ 1655.219342] ? kernel_read+0x120/0x120 [ 1655.223235] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1655.228842] ? rw_verify_area+0x118/0x360 [ 1655.233017] vfs_write+0x20c/0x580 [ 1655.236588] ksys_write+0xea/0x1f0 [ 1655.240150] ? __ia32_sys_read+0xb0/0xb0 [ 1655.244230] ? do_syscall_64+0x26/0x610 [ 1655.248213] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1655.253599] ? do_syscall_64+0x26/0x610 [ 1655.257588] __x64_sys_write+0x73/0xb0 [ 1655.261489] do_syscall_64+0x103/0x610 [ 1655.265388] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1655.270603] RIP: 0033:0x457e29 [ 1655.273804] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1655.292719] RSP: 002b:00007fd8c7971c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1655.300460] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457e29 [ 1655.307743] RDX: 0000000100000073 RSI: 00000000200001c0 RDI: 0000000000000005 [ 1655.315026] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1655.322349] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd8c79726d4 [ 1655.329636] R13: 00000000004c3be0 R14: 00000000004dc3d0 R15: 00000000ffffffff [ 1655.347371] memory: usage 307200kB, limit 307200kB, failcnt 9166 [ 1655.353751] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1655.360528] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1655.366926] Memory cgroup stats for /syz1: cache:0KB rss:257104KB rss_huge:229376KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:8KB active_anon:257212KB inactive_file:4KB active_file:0KB unevictable:0KB [ 1655.388455] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=12269,uid=0 [ 1655.410978] Memory cgroup out of memory: Kill process 12269 (syz-executor.1) score 140 or sacrifice child [ 1655.421128] Killed process 12269 (syz-executor.1) total-vm:72844kB, anon-rss:7952kB, file-rss:34944kB, shmem-rss:0kB [ 1655.447553] oom_reaper: reaped process 12269 (syz-executor.1), now anon-rss:0kB, file-rss:34836kB, shmem-rss:0kB 14:22:06 executing program 1: r0 = perf_event_open(&(0x7f0000000300)={0x400000001, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f000094f000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffff9c, 0xc00c642d, 0x0) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video37\x00', 0x2, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0x100000073) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000100)={{{@in=@dev, @in6=@ipv4={[], [], @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@loopback}}, &(0x7f0000000380)=0xe8) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x1000000, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@cache_loose='cache=loose'}, {@cache_none='cache=none'}], [{@hash='hash'}, {@appraise_type='appraise_type=imasig'}, {@uid_gt={'uid>', r3}}, {@fsname={'fsname', 0x3d, '/dev/video37\x00'}}]}}) 14:22:06 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000000)=[{0x80000006}]}, 0x10) r1 = socket$pppoe(0x18, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = accept4(r2, &(0x7f0000000080)=@xdp, &(0x7f0000000100)=0x80, 0x800) connect$vsock_dgram(r3, &(0x7f0000000140)={0x28, 0x0, 0xffffffff, @hyper}, 0x10) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) connect$pppoe(r1, &(0x7f0000000040)={0x18, 0x0, {0x2, @local, 'batadv0\x00'}}, 0x1e) sendmmsg(r1, &(0x7f0000005b40), 0x40000000000014d, 0x0) 14:22:06 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000bd7000)={&(0x7f0000c07e98)=ANY=[@ANYBLOB="000000000000000000000000000000000000000033000000ffffffff0000000000000000000000000000000000000000000000000000000000000000002949000000000000000000000000000000000000f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020001007d00000000000000480001006d64350000000000000000000019000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000"], 0x1}}, 0x0) 14:22:06 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee4050c00000f0000008bc36f7d79ce3263dac37b7403242189c609", 0x23}], 0x1}, 0x0) 14:22:06 executing program 2: r0 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x2040) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84800) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008911, &(0x7f0000000100)="0af55f023c123f3188a070") sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f00000008c0)=@updpolicy={0xb8, 0x19, 0x309, 0x0, 0x0, {{@in=@remote, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x80}}}, 0xb8}}, 0x0) 14:22:06 executing program 3: r0 = dup3(0xffffffffffffffff, 0xffffffffffffff9c, 0x80000) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000000), 0x4) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) close(r1) 14:22:06 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee4050c00000f0000008bc36f7d79ce3263dac37b7403242189c609", 0x23}], 0x1}, 0x0) 14:22:06 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000bd7000)={&(0x7f0000c07e98)=ANY=[@ANYBLOB="000000000000000000000000000000000000000033000000ffffffff00000000000000000000000000000000000000000000000000000000000000000029490000000000000000000000000000000000fffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020001007d00000000000000480001006d64350000000000000000000019000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000"], 0x1}}, 0x0) 14:22:06 executing program 3: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0x200000000000015, 0x3, 0x0) setsockopt$inet_opts(r1, 0x0, 0xd, &(0x7f0000000540)="ba3af665e9180a04b74c8934e1847f2c2c5e17ae68d8f2919638f0e295eaab097ae179dbcb9c6444bc0fd049d198178cc8372fd0b6f91cea9559ab47d9ddbb13877d629b52a6d2ecbdd685d56723c132c1584f2e5b2c00c6c9fc3f991066d9c016ec92b5c9a59483b50bfb38dd7468ce5e2992e8e5796d77fd1666224fa50d4e82b4275c8732d5deb5d04c9615bd2ae89835a2c86dcca78ae120d0cf7165995f93482499ea43bde9eb3acfe341bd3c1878dea49c8f9b7a63aaf23e8e89b887e4d98d323a1e46eb69312cf8a4749c4e514990ea92079f6be10b75cba577546547cbffde85184c", 0xe6) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000280)={{{@in=@remote, @in6=@remote}}, {{@in=@dev}, 0x0, @in6=@local}}, &(0x7f0000000380)=0xe8) getpeername$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, &(0x7f00000000c0)=0x10) getsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f00000003c0)={@remote}, &(0x7f0000000400)=0x14) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-monitor\x00', 0x200441, 0x0) ioctl$VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000140)={0x8000, 0xf, 0x2, "0df3f36e1135e41251ea3553f07ac2c8a00feda468fd19bad8cfacafd97f172e", 0x757f724b}) getsockopt$inet6_mreq(r1, 0x29, 0x1f, &(0x7f0000000480)={@loopback, 0x0}, &(0x7f00000004c0)=0x14) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000500)={'bond_slave_1\x00', r3}) bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @broadcast}, 0x14) ioctl$int_out(r0, 0x2, &(0x7f00000001c0)) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f0000000180)=0x20, 0x4) sendmmsg(r1, &(0x7f0000000d00), 0x400004e, 0x0) 14:22:06 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="0af51f023c123f3188a070") sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f00000008c0)=@updpolicy={0xb8, 0x19, 0x309, 0x0, 0x0, {{@in=@remote, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x80}}}, 0xb8}}, 0x0) getsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000000), &(0x7f0000000080)=0x4) 14:22:06 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000bd7000)={&(0x7f0000c07e98)=ANY=[@ANYBLOB="000000000000000000000000000000000000000033000000ffffffff0000000000000000000000000000000000000000000000000000000000000000002949000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020001007d00000000000000480001006d64350000000000000000000019000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000"], 0x1}}, 0x0) 14:22:06 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee4050c00000f0000008bc36f7d79ce3263dac37b7403242189c609", 0x23}], 0x1}, 0x0) [ 1656.124798] __nla_parse: 4 callbacks suppressed [ 1656.124871] netlink: 7 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1656.193851] syz-executor.1 invoked oom-killer: gfp_mask=0x7200c2(GFP_HIGHUSER|__GFP_ACCOUNT), order=0, oom_score_adj=0 [ 1656.205359] CPU: 1 PID: 12313 Comm: syz-executor.1 Not tainted 5.0.0-rc6+ #70 [ 1656.212649] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1656.222017] Call Trace: [ 1656.224606] dump_stack+0x172/0x1f0 [ 1656.228243] dump_header+0x10f/0xb6c [ 1656.231987] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1656.237081] ? ___ratelimit+0x60/0x595 [ 1656.240969] ? do_raw_spin_unlock+0x57/0x270 [ 1656.245382] oom_kill_process.cold+0x10/0x6f5 [ 1656.249865] ? task_will_free_mem+0x139/0x6e0 [ 1656.254354] out_of_memory+0x79a/0x1280 [ 1656.258340] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1656.263434] ? oom_killer_disable+0x280/0x280 [ 1656.267946] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1656.273055] mem_cgroup_out_of_memory+0x99/0xe0 [ 1656.277745] ? memcg_memory_event+0x40/0x40 [ 1656.282072] ? _raw_spin_unlock+0x2d/0x50 [ 1656.286207] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1656.291299] try_charge+0xfec/0x1570 [ 1656.295002] ? find_held_lock+0x35/0x130 [ 1656.299069] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1656.303902] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 1656.308775] ? find_held_lock+0x35/0x130 [ 1656.312826] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 1656.317663] memcg_kmem_charge_memcg+0x7c/0x130 [ 1656.322336] ? memcg_kmem_put_cache+0xb0/0xb0 [ 1656.326825] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 1656.331653] memcg_kmem_charge+0x13b/0x340 [ 1656.335902] __alloc_pages_nodemask+0x437/0x710 [ 1656.340565] ? __alloc_pages_slowpath+0x2900/0x2900 [ 1656.345601] ? ___might_sleep+0x163/0x280 [ 1656.349742] ? copyin+0xb5/0x100 [ 1656.353111] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1656.358653] alloc_pages_current+0x107/0x210 [ 1656.363067] pipe_write+0xa65/0xfb0 [ 1656.366692] __vfs_write+0x613/0x8e0 [ 1656.370395] ? kernel_read+0x120/0x120 [ 1656.374276] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1656.379836] ? rw_verify_area+0x118/0x360 [ 1656.383989] vfs_write+0x20c/0x580 [ 1656.387519] ksys_write+0xea/0x1f0 [ 1656.391059] ? __ia32_sys_read+0xb0/0xb0 [ 1656.395114] ? do_syscall_64+0x26/0x610 [ 1656.399115] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1656.404463] ? do_syscall_64+0x26/0x610 [ 1656.408441] __x64_sys_write+0x73/0xb0 [ 1656.412352] do_syscall_64+0x103/0x610 [ 1656.416251] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1656.421439] RIP: 0033:0x457e29 [ 1656.424628] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1656.443523] RSP: 002b:00007fd8c7971c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1656.451231] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457e29 [ 1656.458506] RDX: 0000000100000073 RSI: 00000000200001c0 RDI: 0000000000000005 [ 1656.465761] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1656.473017] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd8c79726d4 [ 1656.480270] R13: 00000000004c3be0 R14: 00000000004dc3d0 R15: 00000000ffffffff [ 1656.489096] memory: usage 307200kB, limit 307200kB, failcnt 9322 [ 1656.495700] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1656.502642] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1656.502650] Memory cgroup stats for /syz1: cache:0KB rss:257144KB rss_huge:229376KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:8KB active_anon:257212KB inactive_file:4KB active_file:0KB unevictable:0KB [ 1656.529652] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=12307,uid=0 14:22:07 executing program 1: r0 = perf_event_open(&(0x7f0000000300)={0x400000001, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f000094f000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.current\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e20, 0x5, @rand_addr="a8734e8f84473bf76508a9c59aef3b86", 0xd4b7}}, [0x7, 0x1, 0x4, 0x0, 0x80000000, 0x6, 0x800, 0x4, 0x2, 0x4, 0x5, 0x7, 0x1, 0x200, 0x81]}, &(0x7f0000000380)=0x100) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r1, 0x84, 0x79, &(0x7f00000003c0)={r2, 0x5, 0xffffffff}, 0x8) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffff9c, 0xc00c642d, 0x0) r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x400100, 0x0) ioctl$SG_GET_KEEP_ORPHAN(r3, 0x2288, &(0x7f0000000040)) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f0000000540)="a89a2c4a858fe2faef63f4a317e13fccd643dbbb041ba69872160a8aaa3f4854bde63f0e83967a0cdb21f0872d702f3d08bf96edcd480c9713967f1d69b560fe864fbb1b19613aa8b7fc4617cc0ece6c8b57fbef67ee2f480939a317619749d88043a4001f14b220883758da594b06c2095df92d08fcc08f045dd99bb404d99b82ceee78d6e1c3377195471408db3854dbf79f3a07b439feda65d6a1b834a64581b6f2669f6275bbc892ce63e001", 0x8fdf35f2) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f0000000440)={r2, @in={{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}}, [0x0, 0x4, 0x1, 0x7, 0xf8, 0x2, 0x5, 0x10000, 0x8c42, 0x4, 0x100000000, 0xf2, 0x7, 0x8000, 0x6]}, &(0x7f0000000600)=0x100) read(r4, &(0x7f0000000200)=""/250, 0x50c7e3e3) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000400)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) 14:22:07 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)) r0 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000f10ffc)=0x3f, 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={[], [], @broadcast}}, 0x1c) syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x5, 0x101200) listen(r0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getpgid(0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x2) ioctl$VIDIOC_TRY_DECODER_CMD(r1, 0xc0485661, &(0x7f0000000100)={0x0, 0x2, @start={0x3, 0x1}}) 14:22:07 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="0af51f023c123f3188a070") sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000140)=ANY=[@ANYBLOB="b8000000190009030000000000000000ac1414bb000000000000000000000000ff020000000000000000000100000000000000000a00008000000000000000004b55a97c0f31cd6ed1ac5b5ebd9db6a5462656e1f3dd40c7b795bad3a43abba06e7985640e070a1fbfe755d040702a21b44dee6e0c97017336d690dd217e90407cfe4349a838f3bf528bc69943b2f2226412a23aa06d9eb8695ee740484d0fb2d1c12e82148b21f7c0b7a36f9044276de95962833a9942e5515ae63c0391f7ec9c27584e0f3ce9e7a73d0788df730d16f92fffab54b801aa98cfe5d4b17746923cba48d8cc74e760149efdb2fd79", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0xb8}}, 0x0) 14:22:07 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000000)=[{0x80000006}]}, 0x10) r1 = socket$pppoe(0x18, 0x1, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cachefiles\x00', 0x220000, 0x0) ioctl$PPPIOCSMRU1(r2, 0x40047452, &(0x7f0000000480)=0xfffffffffffffffd) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x400000, 0x0) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000580)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(r3, &(0x7f0000000440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x120140c8}, 0xc, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB="a5020000", @ANYRES16=r4, @ANYBLOB="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"], 0x2a4}, 0x1, 0x0, 0x0, 0x4004010}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) connect$pppoe(r1, &(0x7f0000000040)={0x18, 0x0, {0x2, @local, 'batadv0\x00'}}, 0x1e) sendmmsg(r1, &(0x7f0000005b40), 0x40000000000014d, 0x0) setxattr$trusted_overlay_nlink(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='trusted.overlay.nlink\x00', &(0x7f0000000540)={'L+', 0x8}, 0x28, 0x0) 14:22:07 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000bd7000)={&(0x7f0000c07e98)=ANY=[@ANYBLOB="000000000000000000000000000000000000000033000000ffffffff0000000000000000000000000000000000000000000000000000000000000000002949000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020001007d00000000000000480001006d64350000000000000000000019000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000"], 0x1}}, 0x0) 14:22:07 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee4050c00000f0000008bc36f7d79ce3263dac37b7403242189c609", 0x23}], 0x1}, 0x0) [ 1656.529712] Memory cgroup out of memory: Kill process 12307 (syz-executor.1) score 140 or sacrifice child [ 1656.554270] Killed process 12307 (syz-executor.1) total-vm:72844kB, anon-rss:7952kB, file-rss:34944kB, shmem-rss:0kB [ 1656.581812] oom_reaper: reaped process 12307 (syz-executor.1), now anon-rss:0kB, file-rss:34836kB, shmem-rss:0kB [ 1656.677143] netlink: 7 bytes leftover after parsing attributes in process `syz-executor.4'. 14:22:07 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000bd7000)={&(0x7f0000c07e98)=ANY=[@ANYBLOB="000000000000000000000000000000000000000033000000ffffffff0000000000000000000000000000000000000000000000000000000000000000002949000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020001007d00000000000000480001006d64350000000000000000000019000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000"], 0x1}}, 0x0) 14:22:07 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x100000890e, &(0x7f00000000c0)="0af51f023c1a3f3188a070") r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/status\x00', 0x0, 0x0) write$ppp(r1, &(0x7f0000000140)="eaad0b2f5e04329df02ba2771d2988d204ad4b74ae54810a", 0x18) r2 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0xffffffff, 0x80000) ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af60, &(0x7f0000000080)={@reserved}) lseek(r0, 0x0, 0x3) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f00000008c0)=@updpolicy={0xb8, 0x19, 0x309, 0x0, 0x0, {{@in=@remote, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x80}}}, 0xb8}}, 0x0) 14:22:07 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee4050c00000f0000008bc36f7d79ce3263dac37b7403242189c609", 0x23}], 0x1}, 0x0) 14:22:07 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000bd7000)={&(0x7f0000c07e98)=ANY=[@ANYBLOB="000000000000000000000000000000000000000033000000ffffffff0000000000000000000000000000000000000000000000000000000000000000002949000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020001007d00000000000000480001006d64350000000000000000000019000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000"], 0x1}}, 0x0) [ 1656.903604] netlink: 7 bytes leftover after parsing attributes in process `syz-executor.4'. 14:22:07 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/btrfs-control\x00', 0x4000, 0x0) ioctl$sock_netrom_SIOCADDRT(r2, 0x890b, &(0x7f0000000100)={0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={'rose', 0x0}, 0x800, 'syz0\x00', @bcast, 0x4, 0x1, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0af51f023c123f3188a070") r3 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x44ff767112ac26e5) ioctl$UI_DEV_DESTROY(r3, 0x5502) ioctl$LOOP_CHANGE_FD(r3, 0x4c06, r1) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f00000008c0)=@updpolicy={0xb8, 0x19, 0x309, 0x0, 0x0, {{@in=@remote, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x80}}}, 0xb8}}, 0x0) 14:22:07 executing program 3: perf_event_open(&(0x7f0000000240)={0x0, 0x70, 0xa, 0x8000000000000002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0x0, 0x0) ioctl$KVM_S390_UCAS_UNMAP(r0, 0x4018ae51, &(0x7f0000000100)={0x100000001, 0x20, 0x80}) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000140)={0x1, 0x103, 0x1, {0x6, 0x20, 0x674, 0x101}}) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000040)='syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000000c0)={r1, 0x0, 0x0, 0x800, 0x0}, 0x20) recvmmsg(r0, &(0x7f0000000b40)=[{{&(0x7f00000003c0)=@nl=@unspec, 0x80, &(0x7f0000000880)=[{&(0x7f0000000440)=""/190, 0xbe}, {&(0x7f0000000500)=""/228, 0xe4}, {&(0x7f0000000600)=""/215, 0xd7}, {&(0x7f0000000700)=""/255, 0xff}, {&(0x7f0000000200)=""/55, 0x37}, {&(0x7f0000000800)=""/105, 0x69}, {&(0x7f00000002c0)=""/4, 0x4}], 0x7, &(0x7f0000000900)=""/159, 0x9f}, 0x80}, {{&(0x7f00000009c0)=@sco, 0x80, &(0x7f0000000ac0)=[{&(0x7f0000000a40)=""/79, 0x4f}], 0x1, &(0x7f0000000b00)=""/17, 0x11}, 0x800}], 0x2, 0x40000000, &(0x7f0000000bc0)={0x0, 0x989680}) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000300)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x2761, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000c00)}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x4030582a, &(0x7f0000000000)) [ 1657.336594] syz-executor.1 invoked oom-killer: gfp_mask=0x7200c2(GFP_HIGHUSER|__GFP_ACCOUNT), order=0, oom_score_adj=0 [ 1657.355731] CPU: 0 PID: 12358 Comm: syz-executor.1 Not tainted 5.0.0-rc6+ #70 [ 1657.363018] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1657.372363] Call Trace: [ 1657.374956] dump_stack+0x172/0x1f0 [ 1657.378573] dump_header+0x10f/0xb6c [ 1657.382274] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1657.387404] ? ___ratelimit+0x60/0x595 [ 1657.391282] ? do_raw_spin_unlock+0x57/0x270 [ 1657.395680] oom_kill_process.cold+0x10/0x6f5 [ 1657.400165] ? task_will_free_mem+0x139/0x6e0 [ 1657.404663] out_of_memory+0x79a/0x1280 [ 1657.408625] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1657.413723] ? oom_killer_disable+0x280/0x280 [ 1657.418201] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1657.423312] mem_cgroup_out_of_memory+0x99/0xe0 [ 1657.427978] ? memcg_memory_event+0x40/0x40 [ 1657.432290] ? _raw_spin_unlock+0x2d/0x50 [ 1657.436426] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1657.441511] try_charge+0xfec/0x1570 [ 1657.445234] ? find_held_lock+0x35/0x130 [ 1657.449289] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1657.454120] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 1657.458955] ? find_held_lock+0x35/0x130 [ 1657.463034] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 1657.467907] memcg_kmem_charge_memcg+0x7c/0x130 [ 1657.472565] ? memcg_kmem_put_cache+0xb0/0xb0 [ 1657.477063] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 1657.481891] memcg_kmem_charge+0x13b/0x340 [ 1657.486422] __alloc_pages_nodemask+0x437/0x710 [ 1657.491078] ? __alloc_pages_slowpath+0x2900/0x2900 [ 1657.496082] ? ___might_sleep+0x163/0x280 [ 1657.500214] ? copyin+0xb5/0x100 [ 1657.503565] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1657.509116] alloc_pages_current+0x107/0x210 [ 1657.513511] pipe_write+0xa65/0xfb0 [ 1657.517127] __vfs_write+0x613/0x8e0 [ 1657.520822] ? kernel_read+0x120/0x120 [ 1657.524691] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1657.530217] ? rw_verify_area+0x118/0x360 [ 1657.534358] vfs_write+0x20c/0x580 [ 1657.537899] ksys_write+0xea/0x1f0 [ 1657.541427] ? __ia32_sys_read+0xb0/0xb0 [ 1657.545488] ? do_syscall_64+0x26/0x610 [ 1657.549449] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1657.554793] ? do_syscall_64+0x26/0x610 [ 1657.558749] __x64_sys_write+0x73/0xb0 [ 1657.562633] do_syscall_64+0x103/0x610 [ 1657.566516] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1657.571685] RIP: 0033:0x457e29 [ 1657.574886] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1657.593770] RSP: 002b:00007fd8c7971c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1657.601460] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457e29 [ 1657.608726] RDX: 000000008fdf35f2 RSI: 0000000020000540 RDI: 0000000000000005 [ 1657.615981] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1657.623262] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd8c79726d4 [ 1657.630539] R13: 00000000004c3be0 R14: 00000000004dc3d0 R15: 00000000ffffffff [ 1657.645671] memory: usage 307200kB, limit 307200kB, failcnt 9431 [ 1657.651954] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1657.658918] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1657.665302] Memory cgroup stats for /syz1: cache:0KB rss:257116KB rss_huge:227328KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:8KB active_anon:257212KB inactive_file:4KB active_file:0KB unevictable:0KB 14:22:08 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000000)=[{0x80000006}]}, 0x10) r1 = socket$pppoe(0x18, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = fcntl$dupfd(r2, 0x406, r0) getsockopt$inet_sctp_SCTP_STATUS(r4, 0x84, 0xe, &(0x7f0000000280)={0x0, 0x2, 0xee, 0xfc, 0x3, 0xfffffffffffffff7, 0x6, 0x0, {0x0, @in6={{0xa, 0x4e24, 0x8d, @local, 0x1ff}}, 0x4, 0x1f, 0x2, 0x8, 0x9}}, 0xfffffffffffffffd) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r4, 0x84, 0x70, &(0x7f0000000340)={r5, @in6={{0xa, 0x4e24, 0xffffffff, @ipv4={[], [], @loopback}, 0x7}}, [0x6, 0x9, 0x10000, 0xccf, 0x1f, 0x8, 0x27d, 0x8001, 0x100, 0x5, 0x5, 0x9, 0x9, 0x2, 0x9]}, &(0x7f0000000440)=0x100) ioctl$VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000180)={0xf, @win={{0x80000000, 0x1f, 0xffff, 0x1000}, 0x3, 0xfffffffffffffffb, &(0x7f0000000100)={{0xf338, 0x3, 0x3, 0x10001}, &(0x7f00000000c0)={{0x0, 0xd6, 0x160000000, 0x8}, &(0x7f0000000080)={{0x8, 0xe0aa, 0x9, 0x9}}}}, 0x2000000000, &(0x7f0000000140)="37b1db33699226fdb90fa5e7e6f00ad67ac0ea872be52055c41a35771b51bf"}}) connect$pppoe(r1, &(0x7f0000000040)={0x18, 0x0, {0x2, @local, 'batadv0\x00'}}, 0x1e) sendmmsg(r1, &(0x7f0000005b40), 0x40000000000014d, 0x0) 14:22:08 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee4050c00000f0000008bc36f7d79ce3263dac37b7403242189c609", 0x23}], 0x1}, 0x0) 14:22:08 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000bd7000)={&(0x7f0000c07e98)=ANY=[@ANYBLOB="000000000000000000000000000000000000000033000000ffffffff0000000000000000000000000000000000000000000000000000000000000000002949000000000000000000000000000000000000001571000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020001007d00000000000000480001006d64350000000000000000000019000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000"], 0x1}}, 0x0) 14:22:08 executing program 1: r0 = perf_event_open(&(0x7f0000000300)={0x400000001, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f000094f000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffff9c, 0xc00c642d, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='environ\x00') ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0x100000073) read(r2, &(0x7f0000000200)=""/250, 0x50c7e3e3) 14:22:08 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="0af51f023c123f3188a070") r2 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) sendmsg$nl_netfilter(r2, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x108, 0x13, 0xf, 0x202, 0x70bd2d, 0x25dfdbff, {0xa, 0x0, 0x9}, [@generic="618886380f54bbe41ca74ea9cb0c80189ee1bbe437ae8dc4179c", @generic="d8db6c95221efa7201eab71d21f6191b4a1a7978fc6ab35f9f7258a9ae9f66210282423c17c4db43043e8ab87363225c3bc4625a6276a8bfe6aa3df4c622b98fd890d8af5650167a0862e5252c52601adb4d190c71f9174d51f644fe509a97d0f9edf6cfc9d910c9b6376c0246ce40a78da9bc47adc01ee3d9994f489edebc5377c444d7e00fd50f95fb6b54a05d69868a5cd065927cec406674627934f367d055dbbb99d33c7ea0f008428d73786a0d938281d34075f82b8a64ba80e37a84f6a4c26f3add788a071430d3108d9476f91a7c2947868b984c903b"]}, 0x108}, 0x1, 0x0, 0x0, 0x4008080}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="b8000000190009030000000000000000ac1414bb000000000000000000000000ff02000000000000000000000000000100000000000000000a00008000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xb8}}, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r2, 0x0, 0x48a, &(0x7f0000000440)={0x5, 0x7ff, 0x2c11}, 0xc) 14:22:08 executing program 3: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f000052a000)="240000001a0025f0006bb404feff141c020b5aff6e10b500000780cc0800090001000000", 0x24) r1 = syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0x2, 0x401) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000100)={0x0, 0x51, 0x4, 0x3, 0xde, 0x89cf}) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000000)={0x2, {{0x2, 0x4e22, @multicast1}}}, 0x88) [ 1657.686250] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=12357,uid=0 [ 1657.702194] Memory cgroup out of memory: Kill process 12357 (syz-executor.1) score 139 or sacrifice child [ 1657.712585] Killed process 12357 (syz-executor.1) total-vm:72844kB, anon-rss:7756kB, file-rss:34944kB, shmem-rss:0kB [ 1657.730740] oom_reaper: reaped process 12357 (syz-executor.1), now anon-rss:0kB, file-rss:33984kB, shmem-rss:0kB [ 1657.816571] netlink: 7 bytes leftover after parsing attributes in process `syz-executor.4'. 14:22:08 executing program 3: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000280)='/proc/capi/capi20ncci\x00', 0x40, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000340)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f00000005c0)=[{&(0x7f00000002c0)=""/20, 0x14}, {&(0x7f00000003c0)=""/127, 0x7f}, {&(0x7f0000000440)=""/236, 0xec}, {&(0x7f0000000540)=""/112, 0x70}], 0x4, &(0x7f0000000600)=""/15, 0xf}, 0x0) setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000680)={r1, @loopback, @broadcast}, 0xc) r2 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x859, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) munmap(&(0x7f0000094000/0x400000)=nil, 0x400000) mmap(&(0x7f0000249000/0x3000)=nil, 0x3000, 0x0, 0x2011, r2, 0x0) r4 = syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x3, 0x2) fchmodat(r4, &(0x7f0000000140)='./file0\x00', 0x68) getxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@known='system.advise\x00', &(0x7f0000000080)=""/97, 0x61) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='system.advise\x00', r4}, 0x10) 14:22:08 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000bd7000)={&(0x7f0000c07e98)=ANY=[@ANYBLOB="000000000000000000000000000000000000000033000000ffffffff00000000000000000000000000000000000000000000000000000000000000000029490000000000000000000000000000000000ffffff9e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020001007d00000000000000480001006d64350000000000000000000019000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000"], 0x1}}, 0x0) 14:22:08 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee4050c00000f0000008bc36f7d79ce3263dac37b7403242189c609", 0x23}], 0x1}, 0x0) 14:22:08 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="0af51f023c123f3188a070") r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x80000, 0x0) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, &(0x7f0000000b00)=""/4096, &(0x7f0000000080)=0x1000) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f00000008c0)=@updpolicy={0xb8, 0x19, 0x309, 0x0, 0x0, {{@in=@remote, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x80}}}, 0xb8}}, 0x0) [ 1658.001372] netlink: 7 bytes leftover after parsing attributes in process `syz-executor.4'. 14:22:08 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000000)=[{0x80000006}]}, 0x10) r1 = socket$pppoe(0x18, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x0, 0x2000}, 0x4) connect$pppoe(r1, &(0x7f0000000040)={0x18, 0x0, {0x2, @local, 'batadv0\x00'}}, 0x1e) sendmmsg(r1, &(0x7f0000005b40), 0x40000000000014d, 0x0) 14:22:08 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee4050c00000f0000008bc36f7d79ce3263dac37b7403242189c609", 0x23}], 0x1}, 0x0) 14:22:08 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000bd7000)={&(0x7f0000c07e98)=ANY=[@ANYBLOB="000000000000000000000000000000000000000033000000ffffffff00000000000000000000000000000000000000000000000000000000000000000029490000000000000000000000000000000000fffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020001007d00000000000000480001006d64350000000000000000000019000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000"], 0x1}}, 0x0) 14:22:08 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x5, 0x0) unshare(0x400) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x0, 0x0) pselect6(0x91, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, &(0x7f0000000100)={0x9}, &(0x7f0000000140)={0x0, 0x1c9c380}, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock2(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0) r2 = open(0x0, 0x0, 0x11) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000700)={0x0}, &(0x7f00000009c0)=0x8) ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000600)={0x7230d83796b0d5e6, @raw_data="f1fdd6745d6856d88c953c9a3f447fa167ab2223840438f0a20719e118ab79b6de92c4558e6573588081b4764c5144ed4bd2920269ad34cf0f533761857923322e8e46e3d01c976e7c654f1154f22cf8dbc20beac198cfa0d4d439eed0886e4c749be7317096dcb7084c2d9cd0bd52794b0b7489d72f15bd0fe098a766371c741b0c7636e5b7c8fb6c1c281a6d755b03df355931a493bd027d56d092e566c17b5a91932c64c6eb909ac90978f66d115a3b60c978bbe348c42571a23716a071b0142796a3e1d149c7"}) fsetxattr$security_capability(r1, &(0x7f0000000280)='security.capability\x00', &(0x7f0000000240)=@v2={0x2000000, [{0x8000, 0x2}, {0x1000, 0xb3e}]}, 0xffffffffffffff8e, 0x1) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000680)=ANY=[], &(0x7f00000005c0)) clock_adjtime(0x0, &(0x7f0000000300)={0x0, 0x0, 0x80000000, 0x7, 0x0, 0x0, 0x3f, 0x800, 0x0, 0x26, 0x4dc, 0x7ff, 0x100, 0x0, 0x0, 0xfffffffffffffff7, 0x0, 0x5b19bdf7, 0x0, 0x0, 0x6, 0x40000000000000, 0x5}) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/syz1\x00', 0x1ff) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) accept$packet(r0, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000840)=0x14) recvfrom$packet(r2, &(0x7f0000000740)=""/241, 0xf1, 0x21, &(0x7f0000000880)={0x11, 0x6, r5, 0x1, 0x7ff, 0x6, @broadcast}, 0x14) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000480)={r3, @in={{0x2, 0x4e21, @rand_addr=0xfffffffffffffff9}}, 0x80000000, 0xffffffff, 0x9, 0x93, 0x40}, 0x98) unlink(&(0x7f0000000440)='./file0\x00') write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000540)={0x3, 0x211, 0xfa00, {{0xa, 0x4e21, 0x7ff, @dev={0xfe, 0x80, [], 0x21}, 0x3ff}, {0xa, 0x4e22, 0x2, @remote, 0x81}}}, 0x47) 14:22:08 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="0af51f023c123f3188a070") getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000080)=0xc) connect(r1, &(0x7f0000000140)=@un=@file={0x1, './file0\x00'}, 0x80) r3 = syz_open_dev$vcsa(&(0x7f0000000200)='/dev/vcsa#\x00', 0x6, 0x200000) r4 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000280)='NET_DM\x00') sendmsg$NET_DM_CMD_STOP(r3, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, r4, 0x20, 0x70bd2b, 0x25dfdbfe, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x81) getpgid(r2) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f00000008c0)=@updpolicy={0xb8, 0x19, 0x309, 0x0, 0x0, {{@in=@remote, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x80}}}, 0xb8}}, 0x0) r5 = syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0x1, 0x200400) setsockopt$XDP_UMEM_FILL_RING(r5, 0x11b, 0x5, &(0x7f00000001c0)=0x2100, 0x4) [ 1658.321597] netlink: 7 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1658.505131] syz-executor.1 invoked oom-killer: gfp_mask=0x7200c2(GFP_HIGHUSER|__GFP_ACCOUNT), order=0, oom_score_adj=0 [ 1658.528358] CPU: 0 PID: 12406 Comm: syz-executor.1 Not tainted 5.0.0-rc6+ #70 [ 1658.535654] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1658.545017] Call Trace: [ 1658.547626] dump_stack+0x172/0x1f0 [ 1658.547652] dump_header+0x10f/0xb6c [ 1658.554978] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1658.554996] ? ___ratelimit+0x60/0x595 [ 1658.555013] ? do_raw_spin_unlock+0x57/0x270 [ 1658.555037] oom_kill_process.cold+0x10/0x6f5 [ 1658.555072] ? task_will_free_mem+0x139/0x6e0 [ 1658.555097] out_of_memory+0x79a/0x1280 [ 1658.555119] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1658.586599] ? oom_killer_disable+0x280/0x280 [ 1658.591102] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1658.596229] mem_cgroup_out_of_memory+0x99/0xe0 [ 1658.600916] ? memcg_memory_event+0x40/0x40 [ 1658.605260] ? _raw_spin_unlock+0x2d/0x50 [ 1658.609416] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1658.614542] try_charge+0xfec/0x1570 [ 1658.618271] ? find_held_lock+0x35/0x130 [ 1658.622362] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1658.627232] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 1658.632077] ? find_held_lock+0x35/0x130 [ 1658.636145] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 1658.641009] memcg_kmem_charge_memcg+0x7c/0x130 [ 1658.645681] ? memcg_kmem_put_cache+0xb0/0xb0 [ 1658.650191] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 1658.655025] memcg_kmem_charge+0x13b/0x340 [ 1658.659262] __alloc_pages_nodemask+0x437/0x710 [ 1658.663940] ? __alloc_pages_slowpath+0x2900/0x2900 [ 1658.668969] ? ___might_sleep+0x163/0x280 [ 1658.673142] ? copyin+0xb5/0x100 [ 1658.676532] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1658.682100] alloc_pages_current+0x107/0x210 [ 1658.686529] pipe_write+0xa65/0xfb0 [ 1658.690180] __vfs_write+0x613/0x8e0 [ 1658.693911] ? kernel_read+0x120/0x120 [ 1658.697808] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1658.703365] ? rw_verify_area+0x118/0x360 [ 1658.707516] vfs_write+0x20c/0x580 [ 1658.711060] ksys_write+0xea/0x1f0 [ 1658.714610] ? __ia32_sys_read+0xb0/0xb0 [ 1658.718672] ? do_syscall_64+0x26/0x610 [ 1658.722646] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1658.728021] ? do_syscall_64+0x26/0x610 [ 1658.732016] __x64_sys_write+0x73/0xb0 [ 1658.735907] do_syscall_64+0x103/0x610 [ 1658.739807] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1658.745009] RIP: 0033:0x457e29 [ 1658.748207] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1658.767111] RSP: 002b:00007fd8c7971c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1658.774815] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457e29 [ 1658.782088] RDX: 0000000100000073 RSI: 00000000200001c0 RDI: 0000000000000005 [ 1658.789354] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1658.796620] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd8c79726d4 [ 1658.803896] R13: 00000000004c3be0 R14: 00000000004dc3d0 R15: 00000000ffffffff [ 1658.814700] memory: usage 307200kB, limit 307200kB, failcnt 9512 [ 1658.820901] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1658.828073] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1658.834417] Memory cgroup stats for /syz1: cache:0KB rss:257132KB rss_huge:227328KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:8KB active_anon:257268KB inactive_file:0KB active_file:4KB unevictable:0KB [ 1658.855340] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=12403,uid=0 [ 1658.871574] Memory cgroup out of memory: Kill process 12403 (syz-executor.1) score 140 or sacrifice child [ 1658.881531] Killed process 12403 (syz-executor.1) total-vm:72712kB, anon-rss:8020kB, file-rss:34944kB, shmem-rss:0kB 14:22:09 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000bd7000)={&(0x7f0000c07e98)=ANY=[@ANYBLOB="000000000000000000000000000000000000000033000000ffffffff0000000000000000000000000000000000000000000000000000000000000000002949000000000000000000000000000000000000f0ffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020001007d00000000000000480001006d64350000000000000000000019000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000"], 0x1}}, 0x0) 14:22:09 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee4050c00000f0000008bc36f7d79ce3263dac37b7403242189c609", 0x23}], 0x1}, 0x0) 14:22:09 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x282000, 0x0) getsockopt$inet6_opts(r2, 0x29, 0x3b, &(0x7f0000000080)=""/111, &(0x7f0000000140)=0x6f) ioctl(r1, 0x1000008912, &(0x7f0000000100)="0af51f023c123f3188a070") sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f00000008c0)=@updpolicy={0xb8, 0x19, 0x309, 0x0, 0x0, {{@in=@remote, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x80}}}, 0xb8}}, 0x0) 14:22:09 executing program 3: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x4001fe) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$inet(0x2, 0x3, 0x19) syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000380)={@loopback, @local}, 0x2ee) 14:22:09 executing program 1: r0 = perf_event_open(&(0x7f0000000300)={0x400000001, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f000094f000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffff9c, 0xc00c642d, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x88101, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x400, 0x0) syz_open_dev$usb(&(0x7f00000001c0)='/dev/bus/usb/00#/00#\x00', 0x2, 0x4201) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/avc/cache_stats\x00', 0x0, 0x0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm_plock\x00', 0x4000, 0x0) syz_open_dev$vcsn(&(0x7f0000000280)='/dev/vcs#\x00', 0x0, 0x40) syz_open_dev$vcsn(&(0x7f00000002c0)='/dev/vcs#\x00', 0x7ff, 0x101000) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000380)='/selinux/checkreqprot\x00', 0x8000, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0x100000073) read(r2, &(0x7f00000000c0)=""/250, 0xfffffffffffffe29) 14:22:09 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000000)=[{0x80000006}]}, 0x10) r1 = socket$pppoe(0x18, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x100) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffff9c, 0x84, 0x70, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x27}}}, [0x3, 0x5, 0x5, 0x2, 0x3, 0x9, 0x20, 0x7fff, 0x4, 0x20, 0x3, 0x9, 0x0, 0x7, 0x80000001]}, &(0x7f00000001c0)=0x100) setsockopt$inet_sctp_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000000200)={r4, 0x100, 0x1, 0xffffffffffffffe0}, 0x10) connect$pppoe(r1, &(0x7f0000000040)={0x18, 0x0, {0x2, @local, 'batadv0\x00'}}, 0x1e) sendmmsg(r1, &(0x7f0000005b40), 0x40000000000014d, 0x0) [ 1658.904625] oom_reaper: reaped process 12403 (syz-executor.1), now anon-rss:0kB, file-rss:34836kB, shmem-rss:0kB 14:22:09 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="0af51f023c123f3188a070") sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f00000008c0)=@updpolicy={0xb8, 0x19, 0x309, 0x0, 0x0, {{@in=@remote, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x80}}}, 0xb8}}, 0x0) r2 = syz_open_dev$usb(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x80000000, 0x400) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_DISABLE(r2, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x42000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000240)={0x16c, r3, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0xe0, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x80, @remote, 0x1}}, {0x14, 0x2, @in={0x2, 0x4e21, @local}}}}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1188}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @empty}}, {0x14, 0x2, @in={0x2, 0x4e23, @broadcast}}}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}]}]}, @TIPC_NLA_LINK={0x70, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffffffffff8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb5cb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1627}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff}]}]}, @TIPC_NLA_SOCK={0x8, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x16c}, 0x1, 0x0, 0x0, 0x400c0}, 0x4000) r4 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x1) r5 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x100, 0x0) linkat(r4, &(0x7f0000000080)='./file0\x00', r5, &(0x7f0000000140)='./file0\x00', 0x1000) 14:22:09 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000bd7000)={&(0x7f0000c07e98)=ANY=[@ANYBLOB="000000000000000000000000000000000000000033000000ffffffff000000000000000000000000000000000000000000000000000000000000000000294900000000000000000000000000000000007fffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020001007d00000000000000480001006d64350000000000000000000019000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000"], 0x1}}, 0x0) [ 1659.004165] netlink: 7 bytes leftover after parsing attributes in process `syz-executor.4'. 14:22:09 executing program 3: r0 = perf_event_open(&(0x7f0000000300)={0x400000001, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f000094f000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffff9c, 0xc00c642d, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='environ\x00') ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0x100000073) read(r2, &(0x7f0000000200)=""/250, 0x50c7e3e3) 14:22:09 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee4050c00000f0000008bc36f7d79ce3263dac37b7403242189c609", 0x23}], 0x1}, 0x0) 14:22:09 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000000)=[{0x80000006}]}, 0x10) r1 = socket$pppoe(0x18, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000280)='/dev/full\x00', 0x10040, 0x0) ioctl$SG_GET_NUM_WAITING(r3, 0x227d, &(0x7f00000002c0)) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) connect$pppoe(r1, &(0x7f0000000040)={0x18, 0x0, {0x2, @local, 'b\x00\x00\x00\x01\x00'}}, 0xac) sendmmsg(r0, &(0x7f0000000080), 0x40000000000021c, 0x0) r4 = openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/attr/current\x00', 0x2, 0x0) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000140)) r5 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20ncci\x00', 0x0, 0x0) ioctl$VHOST_SET_LOG_FD(r5, 0x4004af07, &(0x7f0000000180)=r5) ioctl$sock_inet6_udp_SIOCINQ(r5, 0x541b, &(0x7f00000000c0)) fgetxattr(r4, &(0x7f00000001c0)=@known='trusted.overlay.upper\x00', &(0x7f0000000200)=""/103, 0x67) 14:22:09 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000bd7000)={&(0x7f0000c07e98)=ANY=[@ANYBLOB="000000000000000000000000000000000000000033000000ffffffff000000000000000000000000000000000000000000000000000000000000000000294900000000000000000000000000000000009effffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020001007d00000000000000480001006d64350000000000000000000019000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000"], 0x1}}, 0x0) [ 1659.249519] netlink: 7 bytes leftover after parsing attributes in process `syz-executor.4'. 14:22:09 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee4050c00000f0000008bc36f7d79ce3263dac37b7403242189c609", 0x23}], 0x1}, 0x0) 14:22:09 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000bd7000)={&(0x7f0000c07e98)=ANY=[@ANYBLOB="000000000000000000000000000000000000000033000000ffffffff00000000000000000000000000000000000000000000000000000000000000000029490000000000000000000000000000000000f0ffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020001007d00000000000000480001006d64350000000000000000000019000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000"], 0x1}}, 0x0) 14:22:09 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f0000000000)={'vcan0\x00', {0x2, 0x4e22, @multicast2}}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = getpid() syz_open_procfs(r2, &(0x7f00000000c0)='net/icmp6\x00') ioctl(r1, 0x1000008912, &(0x7f0000000100)="0af51f023c123f3188a070") sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000140)=ANY=[@ANYBLOB="b8000000190009030000000000000000ac1414bb000000000000000000000000ff02000000000000000000000000000100000000000000000a0000800000000005507c4f0d287abeb24e451c5b65", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0xb8}}, 0x0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm_plock\x00', 0x20800, 0x0) 14:22:10 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000000)=[{0x80000006}]}, 0x10) r1 = socket$pppoe(0x18, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x400000, 0x0) mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) ioctl$TIOCGSOFTCAR(r4, 0x5419, &(0x7f0000000180)) sendto$inet(r4, &(0x7f00000000c0), 0x0, 0x40d1, &(0x7f0000000100)={0x2, 0x4e24, @broadcast}, 0x10) connect$pppoe(r1, &(0x7f0000000040)={0x18, 0x0, {0x2, @local, 'batadv0\x00'}}, 0x1e) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r4, 0x84, 0x16, &(0x7f00000001c0)={0x1, [0x4]}, &(0x7f0000000200)=0x6) sendmmsg(r1, &(0x7f0000005b40), 0x40000000000014d, 0x0) ioctl$TIOCGSID(r4, 0x5429, &(0x7f00000000c0)=0x0) fcntl$setownex(r2, 0xf, &(0x7f0000000140)={0x1a9f7b991d0d168a, r5}) [ 1659.443949] netlink: 7 bytes leftover after parsing attributes in process `syz-executor.4'. 14:22:10 executing program 1: r0 = perf_event_open(&(0x7f0000000300)={0x400000001, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f000094f000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffff9c, 0xc00c642d, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_GET_CPUID2(r1, 0xc008ae91, &(0x7f00000000c0)=ANY=[@ANYBLOB="03000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a3c7ba5f0b8db38c9f450d00000000000000000000000000060000000000000000000000"]) write(r2, &(0x7f00000001c0), 0x100000073) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) 14:22:10 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000bd7000)={&(0x7f0000c07e98)=ANY=[@ANYBLOB="000000000000000000000000000000000000000033000000ffffffff00000000000000000000000000000000000000000000000000000000000000000029490000000000000000000000000000000000fffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020001007d00000000000000480001006d64350000000000000000000019000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000"], 0x1}}, 0x0) 14:22:10 executing program 2: openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x741082, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="0af51f023c123f3188a070") sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f00000008c0)=@updpolicy={0xb8, 0x19, 0x309, 0x0, 0x0, {{@in=@remote, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x80}}}, 0xb8}}, 0x0) 14:22:10 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee4050c00000f0000008bc36f7d79ce3263dac37b7403242189c609", 0x23}], 0x1}, 0x0) 14:22:10 executing program 3: r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/mls\x00', 0x0, 0x0) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000100)=0x7ce, &(0x7f0000000180)=0x2) r1 = socket$inet(0x10, 0x3, 0xc) r2 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0x4008af12, &(0x7f0000000080)={0x3, 0x7}) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000003061f001cfffd946fa2830020200a000900010006e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) 14:22:10 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000000)=[{0x80000006}]}, 0x10) r1 = socket$pppoe(0x18, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x1) connect$pppoe(r1, &(0x7f0000000040)={0x18, 0x0, {0x2, @local, 'batadv0\x00'}}, 0x1e) sendmmsg(r1, &(0x7f0000005b40), 0x40000000000014d, 0x0) [ 1659.802509] net_ratelimit: 22 callbacks suppressed [ 1659.802519] protocol 88fb is buggy, dev hsr_slave_0 [ 1659.812698] protocol 88fb is buggy, dev hsr_slave_1 [ 1659.899090] netlink: 7 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1659.910842] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 14:22:10 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee4050c00000f0000008bc36f7d79ce3263dac37b7403242189c609", 0x23}], 0x1}, 0x0) 14:22:10 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/avc/hash_stats\x00', 0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000240)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f0000000b00)={0x10d8, 0x2d, 0x100, 0x70bd27, 0x25dfdbfc, {0xa}, [@typed={0xc, 0x48, @u64=0x1000000}, @generic="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", @generic="7d0d31473a9042c717f8ef06f540a4d2b76df9fc79a6c626dada205450839951cf16c4a607c16671323effee14614e07cc45692c1981eed4b6ddcf3790281ea66e0912b0b4698e0c0f47437bab5a813d7e37eab7757bd7ca8e319ae691a04c13111536e3bf96f8694c38c4ba369e88b6c908a90124171957535ede37040e9ef1024d6cf69eafa4a1f984e91060c0b3866f368245974930e24d501da0dd03206d7c81220a1eedf97516", @typed={0xc, 0x5a, @u64=0x554}]}, 0x10d8}, 0x1, 0x0, 0x0, 0x40010}, 0x40800) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f00000008c0)=@updpolicy={0xb8, 0x19, 0x309, 0x0, 0x0, {{@in=@remote, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x80}}}, 0xb8}}, 0x0) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x1, 0x0) ioctl$TIOCGPTPEER(r2, 0x5441, 0x7) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000080)={0x0, 0x6}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000100)={r3, 0xffff, 0x7, [0x7ff, 0x3f, 0x0, 0x10000, 0x7, 0x100, 0x30e6]}, &(0x7f0000000140)=0x16) 14:22:10 executing program 3: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_out(r0, 0x2, &(0x7f00000000c0)) r1 = socket(0x40000000002, 0x3, 0x2) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x0, @local}, {0x2, 0x0, @broadcast}, {0x2, 0x0, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00)='team_slave_1:\x03\x00'}) openat$selinux_enforce(0xffffffffffffff9c, 0x0, 0x0, 0x0) 14:22:10 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000bd7000)={&(0x7f0000c07e98)=ANY=[@ANYBLOB="000000000000000000000000000000000000000033000000ffffffff0000000000000000000000000000000000000000000000000000000000000000002949000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020001007d00000000000000480001006d64350000000000000000000019000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000"], 0x1}}, 0x0) 14:22:10 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee4050c00000f0000008bc36f7d79ce3263dac37b7403242189c609", 0x23}], 0x1}, 0x0) 14:22:10 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="0af51f023c123f3188a070") sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f00000008c0)=@updpolicy={0xb8, 0x19, 0x309, 0x0, 0x0, {{@in=@remote, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x80}}}, 0xb8}}, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x4000, 0x0) getpeername$tipc(r2, &(0x7f0000000080), &(0x7f00000000c0)=0x10) [ 1660.449827] syz-executor.1 invoked oom-killer: gfp_mask=0x7200c2(GFP_HIGHUSER|__GFP_ACCOUNT), order=0, oom_score_adj=0 [ 1660.461297] CPU: 0 PID: 12513 Comm: syz-executor.1 Not tainted 5.0.0-rc6+ #70 [ 1660.468592] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1660.477937] Call Trace: [ 1660.480548] dump_stack+0x172/0x1f0 [ 1660.484206] dump_header+0x10f/0xb6c [ 1660.487932] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1660.493043] ? ___ratelimit+0x60/0x595 [ 1660.496946] ? do_raw_spin_unlock+0x57/0x270 [ 1660.501342] oom_kill_process.cold+0x10/0x6f5 [ 1660.505824] ? task_will_free_mem+0x139/0x6e0 [ 1660.510308] out_of_memory+0x79a/0x1280 [ 1660.514295] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1660.519411] ? oom_killer_disable+0x280/0x280 [ 1660.523919] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1660.529025] mem_cgroup_out_of_memory+0x99/0xe0 [ 1660.533693] ? memcg_memory_event+0x40/0x40 [ 1660.538010] ? _raw_spin_unlock+0x2d/0x50 [ 1660.542140] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1660.547226] try_charge+0xfec/0x1570 [ 1660.550924] ? find_held_lock+0x35/0x130 [ 1660.554991] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1660.559831] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 1660.564662] ? find_held_lock+0x35/0x130 [ 1660.568706] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 1660.573556] memcg_kmem_charge_memcg+0x7c/0x130 [ 1660.578223] ? memcg_kmem_put_cache+0xb0/0xb0 [ 1660.582722] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 1660.587560] memcg_kmem_charge+0x13b/0x340 [ 1660.591780] __alloc_pages_nodemask+0x437/0x710 [ 1660.596492] ? __alloc_pages_slowpath+0x2900/0x2900 [ 1660.601507] ? ___might_sleep+0x163/0x280 [ 1660.605670] ? copyin+0xb5/0x100 [ 1660.609024] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1660.614569] alloc_pages_current+0x107/0x210 [ 1660.618989] pipe_write+0xa65/0xfb0 [ 1660.622635] __vfs_write+0x613/0x8e0 [ 1660.626358] ? kernel_read+0x120/0x120 [ 1660.630227] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1660.635787] ? rw_verify_area+0x118/0x360 [ 1660.639933] vfs_write+0x20c/0x580 [ 1660.643477] ksys_write+0xea/0x1f0 [ 1660.647016] ? __ia32_sys_read+0xb0/0xb0 [ 1660.651069] ? do_syscall_64+0x26/0x610 [ 1660.655052] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1660.660412] ? do_syscall_64+0x26/0x610 [ 1660.664397] __x64_sys_write+0x73/0xb0 [ 1660.668286] do_syscall_64+0x103/0x610 [ 1660.672158] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1660.677330] RIP: 0033:0x457e29 [ 1660.680505] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1660.699389] RSP: 002b:00007fd8c7971c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1660.707081] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457e29 [ 1660.714342] RDX: 0000000100000073 RSI: 00000000200001c0 RDI: 0000000000000005 [ 1660.721603] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1660.728855] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd8c79726d4 [ 1660.736114] R13: 00000000004c3be0 R14: 00000000004dc3d0 R15: 00000000ffffffff [ 1660.744966] memory: usage 307200kB, limit 307200kB, failcnt 9623 [ 1660.751483] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1660.759012] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1660.766322] Memory cgroup stats for /syz1: cache:0KB rss:257164KB rss_huge:227328KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:8KB active_anon:257268KB inactive_file:0KB active_file:4KB unevictable:0KB [ 1660.787295] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=12509,uid=0 14:22:11 executing program 1: r0 = perf_event_open(&(0x7f0000000300)={0x400000001, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f000094f000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffff9c, 0xc00c642d, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) write(r0, &(0x7f0000000000), 0x179) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) 14:22:11 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000bd7000)={&(0x7f0000c07e98)=ANY=[@ANYBLOB="000000000000000000000000000000000000000033000000ffffffff0000000000000000000000000000000000000000000000000000000000000000002949000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020001007d00000000000000480001006d64350000000000000000000019000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000"], 0x1}}, 0x0) 14:22:11 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000000)=[{0x80000006}]}, 0x10) r1 = socket$pppoe(0x18, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/mls\x00', 0x0, 0x0) ioctl$sock_ax25_SIOCDELRT(r4, 0x890c, &(0x7f00000000c0)={@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, 0x7, [@null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null]}) accept(r2, &(0x7f0000000140)=@nfc, &(0x7f00000001c0)=0x80) connect$pppoe(r1, &(0x7f0000000040)={0x18, 0x0, {0x2, @local, 'batadv0\x00'}}, 0x1e) sendmmsg(r1, &(0x7f0000005b40), 0x40000000000014d, 0x0) 14:22:11 executing program 3: mkdir(&(0x7f0000000680)='./file0\x00', 0x18) clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000040)=@nullb='[d::d:/llb:\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x20000, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1b, &(0x7f0000000380)={0x0}, &(0x7f0000000540)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000580)={0x3, 0x4, 0x40, 0x0, r2}, &(0x7f0000000600)=0x10) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x8}]}}}]}, 0x3c}}, 0x0) r3 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x5, 0x400000) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000340)={0x8, 0x6, 0x1, 0x5, 0x0}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f00000003c0)=@assoc_value={r4, 0xe8}, &(0x7f0000000400)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x64, &(0x7f00000004c0)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x15}}, @in6={0xa, 0x4e22, 0x7, @empty, 0xc000000000000000}, @in6={0xa, 0x4e24, 0x821, @ipv4, 0x1f}, @in6={0xa, 0x4e24, 0x3, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1f}]}, &(0x7f0000000180)=0x10) lremovexattr(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)=@known='trusted.overlay.impure\x00') getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r3, 0x84, 0x70, &(0x7f0000000240)={r5, @in6={{0xa, 0x4e22, 0x9, @empty, 0x20}}, [0x21c3, 0x3, 0x3, 0xda6, 0x6d23, 0x0, 0x8000, 0x100000000, 0xfffffffffffffffd, 0x4, 0x5, 0x5, 0xaed, 0xfffffffffffffffe, 0x1]}, &(0x7f00000001c0)=0x100) 14:22:11 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee4050c00000f0000008bc36f7d79ce3263dac37b7403242189c609", 0x23}], 0x1}, 0x0) 14:22:11 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="0af51f023c123f3188a070") ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000080)={'vlan0\x00', &(0x7f0000000000)=@ethtool_rxfh={0x46, 0x8, 0x100, 0x1, 0x0, "ce435c", 0x6b85b7a8, [0xfffffffffffffffb, 0x6, 0x7, 0x2, 0x80000000, 0x0, 0x5306, 0x9, 0xdea]}}) syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x8000) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f00000008c0)=@updpolicy={0xb8, 0x19, 0x309, 0x0, 0x0, {{@in=@remote, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x80}}}, 0xb8}}, 0x0) [ 1660.802113] Memory cgroup out of memory: Kill process 12509 (syz-executor.1) score 140 or sacrifice child [ 1660.812090] Killed process 12509 (syz-executor.1) total-vm:72712kB, anon-rss:8020kB, file-rss:34944kB, shmem-rss:0kB [ 1660.833543] oom_reaper: reaped process 12509 (syz-executor.1), now anon-rss:0kB, file-rss:34832kB, shmem-rss:0kB 14:22:11 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee4050c00000f0000008bc36f7d79ce3263dac37b7403242189c609", 0x23}], 0x1}, 0x0) [ 1660.946016] libceph: parse_ips bad ip '[d::d' 14:22:11 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000bd7000)={&(0x7f0000c07e98)=ANY=[@ANYBLOB="000000000000000000000000000000000000000033000000ffffffff0000000000000000000000000000000000000000000000000000000000000000002949000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020001007d00000000000000480001006d64350000000000000000000019000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000"], 0x1}}, 0x0) [ 1661.002491] protocol 88fb is buggy, dev hsr_slave_0 [ 1661.002526] protocol 88fb is buggy, dev hsr_slave_0 [ 1661.007640] protocol 88fb is buggy, dev hsr_slave_1 [ 1661.012759] protocol 88fb is buggy, dev hsr_slave_1 [ 1661.022876] protocol 88fb is buggy, dev hsr_slave_0 [ 1661.027958] protocol 88fb is buggy, dev hsr_slave_1 [ 1661.033188] protocol 88fb is buggy, dev hsr_slave_0 [ 1661.038304] protocol 88fb is buggy, dev hsr_slave_1 [ 1661.049273] libceph: parse_ips bad ip '[d::d' 14:22:11 executing program 3: r0 = perf_event_open(&(0x7f0000000300)={0x400000001, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f000094f000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffff9c, 0xc00c642d, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_GET_CPUID2(r1, 0xc008ae91, &(0x7f00000000c0)=ANY=[@ANYBLOB="03000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a3c7ba5f0b8db38c9f450d00000000000000000000000000060000000000000000000000"]) write(r2, &(0x7f00000001c0), 0x100000073) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) 14:22:11 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000bd7000)={&(0x7f0000c07e98)=ANY=[@ANYBLOB="000000000000000000000000000000000000000033000000ffffffff0000000000000000000000000000000000000000000000000000000000000000002949000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020001007d00000000000000480001006d64350000000000000000000019000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000"], 0x1}}, 0x0) [ 1661.165588] __nla_parse: 5 callbacks suppressed [ 1661.165598] netlink: 7 bytes leftover after parsing attributes in process `syz-executor.4'. 14:22:11 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee4050c00000f0000008bc36f7d79ce3263dac37b7403242189c609", 0x23}], 0x1}, 0x0) 14:22:11 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000bd7000)={&(0x7f0000c07e98)=ANY=[@ANYBLOB="000000000000000000000000000000000000000033000000ffffffff0000000000000000000000000000000000000000000000000000000000000000002949000000000000000000000000000000000000000000000015710000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020001007d00000000000000480001006d64350000000000000000000019000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000"], 0x1}}, 0x0) [ 1661.396071] netlink: 7 bytes leftover after parsing attributes in process `syz-executor.4'. 14:22:12 executing program 1: r0 = perf_event_open(&(0x7f0000000300)={0x400000001, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f000094f000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffff9c, 0xc00c642d, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0x100000073) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) ioctl$TIOCGETD(r1, 0x5424, &(0x7f0000000000)) 14:22:12 executing program 2: socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0af51f023c123f3188a070") getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@dev, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@empty}}, &(0x7f0000000080)=0xe8) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000003c0)={{{@in6=@local, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@loopback}}, &(0x7f00000000c0)=0xe8) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0xfffffffffffffdce, &(0x7f0000000000)={&(0x7f00000004c0)=@acquire={0x0, 0x17, 0x10, 0x70bd2b, 0x25dfdbff, {{@in=@loopback, 0x4d3, 0x7f}, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, {@in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, @in6=@rand_addr="ba5ea3ba03ed9e7ef6e3d405080b784e", 0x4e21, 0x0, 0x4e20, 0x6, 0x2, 0x20, 0x20, 0xff, 0x0, r1}, {{@in6=@mcast2, @in6=@dev={0xfe, 0x80, [], 0x14}, 0x4e22, 0x1, 0x4e20, 0x0, 0x2, 0x80, 0x20, 0x0, 0x0, r2}, {0x4c5b, 0x4ce, 0xffffffffffffffe1, 0x8, 0x7, 0x8, 0xfffffffeffffffff, 0x3f}, {0x6, 0x1, 0xfc50, 0x100000001}, 0x800, 0x0, 0x1, 0x1, 0x2, 0x3}, 0x9, 0xfffffffffffffff7, 0x0, 0x70bd26}, [@sec_ctx={0x0, 0x8, {0x0, 0x8, 0x1, 0x10000, 0x0, "61d698c06272722a7b2b5444355a4f00af942cc7939b0075c587d4028b2c97e4aa3beb0f9deb53f6cedf17e0033156781c69fe30b7df09eede16a3312d1889296c383c9c2f6c41cabe598b0db6e9ccefb32258287f18d79047ce"}}]}, 0xb8}, 0x1, 0x0, 0x0, 0x4}, 0x0) 14:22:12 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000000)=[{0x80000006}]}, 0x10) r1 = socket$pppoe(0x18, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmmsg(r0, &(0x7f0000003580)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000080)="187666547e30c40c31f1b6d362bfe9f2bd3f781b6e442f7ff68cc6f824874bd7acbd298eb0988b5356846beddf9d682e797c5d1ceba6affd8f3d27236c2763466943fe547d192704ada442c3ef505936bd052f4f81679b2dc593a381c29c9de4ec07b5b6ec42b3b9ffee956e0301609c3f24ff930738ec8c4eb7b7bffaa904d92b63089291a50607506b07c4d2d50e7e5c8e24e630b0e1a64547c2", 0x9b}, {&(0x7f0000000140)="f34faf6cf74623d27ef8992de3fdbc6b87400034467b976c6c28f8772cb82de59eaed471a57fff5dd8d04fa5829ecc8d6cb383c3941d5d24ab7ebe31ced3e3615f930d550e05b477117900e855f8311093a3392f4ce04d567e9f560fdf30c983bb60c4e2b5d9f60d9603b04c390d98870a5f7b0bcedf9cdf6bf937025402ed936d40142b67e1f2a5e8d6e8f865e46c8ce2041dbe65e6ca7989dd54637b3466c8bcccf68a4fa20030ff", 0xa9}, {&(0x7f0000000200)="6abfafd6decb3c498bcb76e3ddaa53c6f0d57bd815ba37954b8622641bf97e6f6f60069aca5ed54aa171918b24a693921bc54e9dd39ddc74845a5980ff", 0x3d}, {&(0x7f0000000240)="34e8a5d15fe52bb13f776cbf56b17653b719abb09f918825e7b20fc3510f8023dbd9d390a9711b59187ec626bbad692adf68ad67133ee4bd8ba1286196966065a069a2d005d6da9fc79a975eeb124c2f446304d66eb4fdb6e7f675f6648bfe859b006db7e36277ddc999bde5b5bc3ac77f4779c4224c5cdd8d0cdc89d1444bbbb7788df074c9678c408ce3ca67a62102095d12a31f61f59bc5a86a77945e21347e9c04ee2ce754d877961f1ef81be6e4ef0a3041001d9a47d49846", 0xbb}, {&(0x7f0000000300)="04c703046dcaa9b731280f7e7c8f082eb693881f109f71f741a29d09fc3bef0e9c099a529465cbd2f9afb1b9cb52e31185446893e75271761cffd8510a1dde7b2aff80fb62b7cb4d193a906f01087e8e2b4cdea0100918c9292905bd9094c30356b817a76905e65d97b775681aabf117a223a59d7571759579d00f04c17adfbb9bff99e2690e045263e45093d914ede44d1725", 0x93}], 0x5, &(0x7f0000000440)=[{0x28, 0x115, 0x863, "381355cb43219d18a6579ca9d2c1b3b0a9610692cf6e"}, {0xd8, 0x1, 0x7, "3bb301052281a359257849b1c9bc7874e55e2b9f483b0c0c3fe9bc9ab64ba4a0d6ea7e57a2248ab923cd15f5538ff00762fe64823a3d63de2b0d3197f9033bdc201bc3e5394ce72721efc4bcaba3e3f8cc87292b6e99e601058c1393b97bf0a120a71affed03108239e967352711f00b87e501a5e0fe6190a35fb428cc09ea29d420c9568f3481e6a3cb93fa33dfa533e6c31f84c2d769dd91a00147e8cb950c8d76eed45512b4f57ca06d3f16ca468d93807fbf1ef3e33e97cc36a46f861183ab3740cf"}, {0x88, 0x0, 0x3, "4db7c4e7803cabe0c7e83faa14d80212a08100cb6c738dd5e279599e18954fdb90356ca0c6d8a4ddf02ad4acdbf7661dcdae9a874152d321ece8edea1327ea487ac98672a2c73feadf0c4581860fdf112f5ce117b5630279e803a7a39ed5cfe6e69007a5ad593354590c802e1931a0f4d82af0"}], 0x188}, 0x100000001}, {{&(0x7f0000000600)=@ipx={0x4, 0xffff, 0x0, "daf304aac009"}, 0x80, &(0x7f0000001840)=[{&(0x7f0000000680)="73e5d0f3b9b5bb844db4c3c67bf589c9b8ecb07ec5565b908d107612e9fab875f7b0c157cf0eb0f8f55a1620e7f1d6081a2cc12026fffbe2aaa1b06dd6b5eae7e85920a82ffd7c53b41c2de8e616f8afbef2b8907cdb20649821f84b52b9cea49c09eab0472ab3eea56bfda8b7eb4bb86c4cbf6f624b72cdb3279f4b8ac51b575840b292672d5f7f2110d4843cb7ffe837e933db99a594a7ddd6a5ad353c956693ef57cc0f0841724b10f8b6e84cf2fbecae65f3e3864713acef81a619a3ce309f1e9674f32d2954f7f5bf5f933b5b1a5ce64104114d3adaa73fb803247775f7242786b6db73b58cda9ad71f7397683cf368d8ef12d8f185be3757e96091e570ff6c4d5b8ac680db40bab15c442e9e071a5ca16ba905595c5b37331a69a07f42ec8502a6d1554663f28b75f84d265d97a105e15951d34a8d19101dfc5933d8fd2909f17ecbcae2f4af31cadbdc709ceced746db461aaed1e745b362cd5e9267ae9a859edb78ecb2cec7e239e2b501a5f48fcbd127c5115ddc3c5345437ec6c315c38dfbaa241f0a6b47746230e622ff8e9f841f97b33c36b0d98ffa9d94f6cf464d85772f264eb213b5d5664cc291fd3fd5f25fc3b951ac51e8351c801c867349d7c958566313e0cfb2c2c2c87e08b0ddab4f7988693ae2a2063684d3476b5b4b9747c91dfa283a77b6e175de115a24aa3ff1fecd3a92250131bedaa41607f55270790c2378da178f861fe97d33f9d2af2867b2d6dba2362f3f51db3d52c3145aab83271528f9560020991676ec3acff7006b7a39ba97f37d90b6d3cf2652d5a32b1c8cf2c1155cee4fd4e2d3e710dcb01d4cafa8632243f7a6c2dbd6dd74a0fd1be68266a1d2f3ad33722b2215eb2df679a261f44131e593c63900d98e4c6110f09548d212d490b37dae61c450ef5865e1e5806b99e239b4864e51dd8f94917520aa071f7f88777883a80e5bfd1ff2ae61d68d44d12c9844333a8a81e9acdbcdce80f6c26ef84bf301b2c08b34d81d3815cebf7d1d9fff1339a77b6f2a238e34e8d465fc6e613cf3bf5e8a504345eec9eec501637744a607d201c4d99767b3539fbcb2ef5151b6d610bd1d5f6345b6b048dfa74497ea04e677907183aa2703d4988fa6e5a970f1a58b354b1ef30468e2cecbc44be8c6a3da0ba0cb6dee4bad027f6bc9317503659d1b02be1d45ba220c30ba0dba81d9714063be7aebe23e10d374f2f55c1070e65f92bc871ec0cde646c7329112bc3798b7206528b53a1a09e656940f7748b7610e4b15cde33f67b6717f163a5606cbb621c55d6404f1d0b1f904f9c23d09c92d3cc1240c18e75e5378cbfbe021ce416fbd3bf6756cfe54be8d3400b1f63193eb50367d1d4f938fa15b89afb8cbe3ccc4885657064f4207edd0b61178e38c280b3697abd8618229b21db8f87c292895120683a9ec2f47028c3c4f65e437a239585bdd485e876b94979955ef707c310da39f1b2d3d39e5d69f9e89a1260a5878b9c7a94a68ff8c5af4af14021810209c12f7ec0008927a4e5ff03a97e9ce64234e5abb718edcc802e5dd046e3903c39a14975be5a6c4153b0ca2754ced8684a958f7505d2bbee5c4ed493b37d9d0fe46a025a17df9d9e1d52881d9ee47ba1c1247b94046dc14effa111a51c0ddba1f4c24f1c52ee4e436150ae19dfc090b7b63b9f606a8214b15de90df35b4a2255f5db0c3ffad0ae98d884b6f5f4e6281f4c1fe933f67188b581c4b282f960503381737b1894746ab8bf4a091f0c281dba074704226c81b572eaa7ddfb6468d02d5c5dc8174e97967f6239ed2b7c007eba1901da5ae8205d93f49b0fe02dcaac5643a7d9b8667ca38344752661a4cb1ef648d00a551dbb87201f31ea56d491e339a479be36f24b983231a9fed838a0e76816d9fc24676505bd859084eb53c0b51030a2b206c705b26347b668599c74d9a557a70255479451a19cbfb55721c817560998fd087d1d0c5d5e99975d8e22d8341effc2b5afc9cecee4ac7f75dae2a2080cfec436a1ba4ca609d0c80861b0252cd74e94004733c2aae68114b9baba69ad4eca42db48194138936a215c22b00b2a645ad538076cbdba763df02a1f0611ec98d792f08581c42a5620291cc3f1d5dba992582d7472a860342761fa83b28889766a6359f8acd0d37d09382c9887396cc0302adb580f260b659ac6adea7e1c62d014d499c13fef43dfdc6f50ec4d2dc695f9ab408a3a76dc7d5a2ec05d31895bc3905570c581b0a89ffd3d4b6d62caa6b957e239f37864bbcd52848d5ffa3270ba364137c3295a76e649557a4a973ad8a6b560868cb07c6badc14bc650a338e97f9198b4291b32af0a96a74f6a826d9fe2a51292ae0c16d20da98bd87e1025e1f64e7d83b639f072b4e4af28f376c8e53cf2a97c4e8f86ccd466a10fecf1ec5ecd21c3525bb474165bb0a968889223b343dd3f47ad03089d8667fed4dac0bff09466b5ec17a50adb0dff5b8f0e9ba8d311146c965e47d0c4cb68c5462a9f93c99ef9aeaa1bc3b509b1e34041bb13693ec516cacedb0d5e2dbd8bfc9377bbdd2e48cc6f24ac06a8fe8f1b8fba93139d6882ba48ca0a4af47107925f69b13c80af3910123fb4f4f3352787793ae87aec91a2c7b2c2f17bf39a4f7cf9a1b33e902703826f30d189f8c7f4bb7e008eddb54b7194902a5721bc4f11f62a8245f7ed7e807f6ec6032f34c0e1d323ef926f9a81b98ae6b570b03c52e0f4ec7be14ebc1118a1db04dd473e477b0c82c47865783bbaf372e4e9bbf6760338cf03e8a887f887eef9718200f3ce823cc03d84c5974406cf760be7ac5511d51007cb319fe92c4b41e6bc65ba6167371ec58cf6b2f5deef571b64b5e673ef878c753571b1a3b5d1d64a0e50aaedd995937127f64fcb6b1732faf6ddde6d9c8ac59cfafb24c0b70907f112e71c46f198dee81f4383e541891d05779069c11f3c8045afc1a500364014abce4ccf744b9231ae225a86182a42913d87b15d55285d8982fced710462fb0621ab6ec24f71a388a99229ecaa50572d5dc740f7945d61bb68687fab408560462d526947649c2b814716cf72bd82782bc0f901790cb21b0f9380211cca5d110ffaac372058db501e405adeabf47668fadacf7c42020b9a0099e1bfaad53271fc2b350d4331ddc058b21a9a23812eaee8758522fe6ca08fcd0311e1bdaf17d69e84a026195c5fa77d60714d9f3fcbd25dd494c97b8c6f11c2f7439d1b94ec2c6ddad19da65927d336b568ab3996e0a77b53999dd776c24037a25d19e3ae998cdb8555aa51f4c84c342e258d1ed70494484f9f16f0bacd5996b2c2df03737aa73f0a1d1d9b44ce1e970f544a6978114badab09151d943fb35778d9c2ee4fb624f13b594b6766060b9dca3d0f56afc979c6d4fcb9ccf00cfca01b204d061bf21dc75109cde8f62479f175fc7c1d13c240a911389d5eb86c2e8beaf8534f22f6938b6b75edf4af3339944a7cfa0dad6d25c4d1ec282abaa8584abff3986ed2f7f8d72bab597509f7c7190127be74f646c702268257ca9343d4eadaf71187a202ae1daf78b556bf4d73b3bd95807b3e68a1bc54f550626c3d5494f941c00ab0576cae62b2dc07c3087b93876fa816564fdf9e52c38d941d5c60a3399e1133321ecfa0ecd59a91a5f9ff00742623b028b46903e66c020062cad954ff60c5764b23467b05b4597857f1eb1e23a975d4e162d2c3a4c003918acb5a93cc8105ed1e4ae896bbfbb303f62ad3247f6f288d5967e91ee71838b903f1cca898c662d00db8d16ad9bc19ffbe88ebe4bf5fa33248a510223ee2728e0732a5bea037a17c5454d7ec775d0711aa4a9eddae457e6b796488d0131dd2431c0cbdbc9137edff70a973467040ae779c5e3001dce9e043be2a24559e6ba2edd26bb22f8280d3fffa578df45590c9bb66bec41b00aa6acf0a1a2e6e16b0f1c108db5c0734dfb14bd950779c698b15a93ebc5b94eed8ecb4801952467edff4df135d091574461a7d49c84b0ad46007be72ddb512bdd3c19261e10644260fd4063135c7021256e4d2c8fe52eea30c865e5f094839c64dff04421e811a10ce2fe6e768b4e261c0c409c00dd0ac9542675db95d0110fc78ba9ccec6c53b3059d32ac5376176829852d627e6426f7392692d825025fbcd25e53ad5a2012009f0acd4cc181e9ea79f6217adf0e51a405c7db65d26cab413eaa01a8e9f0182f58d7a9c515da216b67033ce229d55c32a5e84384927a987faa18d9dc8e9704843290c9f8499fe4c2229effc36dcf1765f6c5498124b5c282bfe9de6c23a009e2cf2ee8227944aaf1353f98cc59da699e404a5a0f5426fa6842fec5fb9ff15498991b6d05296071b888747bfab79f17df2d754fed7da760a3d33ba11c410ca718d2b2a9a0246c8900acf5b64940ffeb5bddb659454a4e9859892d1223b6abba6e3f46ff39bb39e427b8657af5bafcde3ccecd5f3ef63fb3b520ad71b58a0ac227022d685b919003aae0dabedba9d67b211caea7824c538d69ca6497b8a90ea28db7592ccf85ca5255b929c305d1c1d06d5636804c5b73742471c74437a7fb489da44ed0781b7ba973618d8bf647636bd7ea99071c624822185defe8c350bbc3ddc6218882916cf424d5c719b569a5449055d28cb276f7ebeabc65c38a246fe3059d1fb5bcbb70afc5fcd7af23b9a2677fc340398cdc671f8f491bf73f14e6eb9b6b647c1acb2ff01de722e5c082d4585893809522e8398e30469ca06ead0ce90e895c42669890af88a1032b46851041f0157e79159c761c83a759e667fc27e1466ae9c6e6fb1ac1d644adeab72b2062431f89eadaff7488d1a673ad8c9adf64bc3c1cce950f87870816c8720e3a3ab818278e149636f2cbe0d70a00dcfc1e28dc1e6d11baeebc84a2c8178117add7e8e3462d3f2d640956b725b96de4fde362dd5054a4f6c799a98020c2635504a2b49cb42a1a66583c8b710f1b4a68529b2661651d356a9289a05bad8b52573777b2fcf468f9ad94f119d673296473d57bb5d39b231f5e4460e255d0ddd092987613f8cd6885882966c1de700e709913d1c1c0477d055f66fdc28682760e111471199173bef91e95639f9a26b0ff746797589af96d78eec2dcfbb0df46500e2db462efc3c2dd771c5b236f728f7f5ef69ef3111f0da0f26a476751c34026403255c62190b4f92b1df57304c51aa98aa87fb90b6e8c9f044b712d0146227e651ba2be82217bfa3c3c702b5a33b7d4c31ae1539adad13e38f2bff378e69d4351ccd769f68277b25c0977161ddfea3b37b35846182a4556fa5748310f2ca0bf28d1cc2031aabf839b268b4eca2da277ed6fd6d9c6ba2c75bbf66bd76c4bcde6f44eddbc43000caf71be1fe37ab045340b55d9f57a5621287f67e746d2f0463f4635b5e90c1a2b6f6ad1b885542d1515888dd103c8379de0a103d2da235c0bf4b80c8fa9bc595e897797991610666b495edcd84eefb30c318a7b9998755130666919ac27be6d861fffe6aec7b81692d0846e00ca0fff898f98e7cc21103711b328f16e1eb651589a7d5989c6a06dca7f3b272de121861cdfc44b0e035a27aaeb3c5f00d85c8bf3bf874dc9a1739de6811b61f4a137de73e292ccec08dc5d6efe69d35cd1791943e6dabf1f33aac2ccf53f89ae2dc4e0595ebd66cb4d5abbbaa16668259b65a20510566ee019e782da2d49f836785c5e69449322bd836592afa0b22817eef154deb2acaeb25cbe665c9ad30277b9dab021c78e3e42c2bb82416cd1d34ebd4b97954e8c88ceae6c8", 0x1000}, {&(0x7f0000001680)="d29a8933950bf1227047b48b616807a2a2b426db7e241f448dd8f43d93ea674575322e10ec99eb92bf147e4c3abc8c270c68fd53348bca9d68b95601b9ec5b44be4cf8fc2d17cd45450c9049885f72568fa81f987688501b8ffa99aa11ea7bad6fac32e662356a7f16b1c0059267bdb93bc40bf64d07f2b6537eaa82a1b271f42c3b79bc1b9f4e27254398a70b9fde4aedfd4e4750abbeb0efdf04b7b6bcccde508d67df076ba465112166106eae91d37854", 0xb2}, {&(0x7f0000001740)="9d9847cb2e9c01265654549e6212109e241196bc79be1500a013f38fca6c899c8489581034e07c71d7762bb938bb2b9d28317b55ca22b334ba9ae67ba7c6e4c42728dc105445092a5cd79203a2956e780fe8fa5d4b9ddcb0d3b770cf949da3de8d45a48a2534576589e7dd9f0f50927d457fdfaa4b4eb8f97259ab3351f75f11b7910773be4c2a518dfc4184abbfa2b54713c11bdc2686051de0bea01cdcba9ee30e7a60ce61d31bd9b7fa33a0e4a31155926058bc9dcf6ad136fb756947f87b4bcce4f9a813c76c46fcab86bfb2072611209a70ec060096a818028eefb65f947c9e4c9211be1910", 0xe8}], 0x3, &(0x7f0000001880)=[{0x40, 0x11d, 0x3, "d1ee5bf43179ccf5901279fdae8c6dec16a244455766155cb59adcf8ab643f7bd4091944abe7dacfd9"}, {0x28, 0xff, 0x1, "dadee970daaeb626d1c2a65261bd1461874f4c"}, {0x90, 0x3a, 0xa1ea, "5d8415ea5a12fe48c52af1c5d4723e155d58f08fc9144fe85ee9160953a757f4371a628a73d677d0635b8d8160940a5f1eff66df696f4acacf16351dc32089d2aeeea2612d3074eb9fea044e675b1a757080791b0a2fdb4d05c3ef4ce8d0b358295072c590067ec2145ac33b227b5aae597b63c7319920384cfa31b9d117ab2d"}, {0x60, 0x114, 0x401, "83f86e08148413e793f1ae8853c7edbfecf1ecd64f87ebe37762c2e458225b4778838e37ce4a9214d690043447c55c02f2a47e5e072717db016010292bbdb41ed4aacfdd08514eb41d4f6ced5b"}, {0x30, 0x105, 0xcaa7, "0042c90aff9b97d2b2a0c861212f952f8a9d952a8979621f400da1c867"}], 0x188}, 0xffffffffffffff26}, {{&(0x7f0000001a40)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e21, 0x4000, @local, 0x1f}}, 0x80, &(0x7f0000002fc0)=[{&(0x7f0000001ac0)="60c1b7e714cbe7acb0dfcc64f88b4e421a4a9d8f10e4c514ed834bf0b8a99b319992", 0x22}, {&(0x7f0000001b00)="0940c931a9146026f95ebc0bdef88804048d27ebe273c204599f48f6cd2fff0b3591a4f66bbf4d23001b69ffecf9a84710446b8705f3a3137d4afc25038beb226f514a45a245db803af2b4d326c92ea6b3ca657a4ef3ddcdb08cf32c418ac786dc23b3baf67721307dc2d7b2eda46a68f05cf1e594c6d428a0f4c84f1f9327ce4409d13e842165d05656", 0x8a}, {&(0x7f0000001bc0)="75c53de9ddd961a3c5ae0af058240a1dfd7f196a9354882410d43ef8dd9966af61193a7bb74f8632b34b517a343f1a945ce7cade3e578a40468921b51ddf4d93b6214d5e99899225422551326dbc88033dcf3126d229589e68", 0x59}, {&(0x7f0000001c40)="5911014a329195caf1b96f56322e220cedd691660a7925ed510e19bd634ffe4a2af9b5ae7c0cdc895206f3226ee9d3640fbb15fc6ec29d54ecec1101ecc76a5b4ed6625857a2d68305f4ff84ed1fe12d5f396966cc621892db1481bc22b7c39c50f8eac865b81c965bf1354af0ad379bb063344d42d35e8200cf286a9adbad8008b6449e071bcd059e370d7d319a9d8a2c1b5315b5d5038829a8eb164d98ebd4ce984283b0fa055b3e81c68c081ad3d96adbb0a2ec6674c63da4c7218fb79be13fdf10ee955f41fec2b6b0cf9d936375c6282b7a85f11d6ec37cab892458caaf825c56f696bcf7f3", 0xe8}, {&(0x7f0000001d40)="a915f159febe6e2d01b0058d", 0xc}, {&(0x7f0000001d80)="b8981630ee86872b248a7d5bd073f0dd28f4363b0409b0bb3231e0611c33601b42e8b9516e30adb63de81e6fbbceeb24688c3bd5278531a7532162fe", 0x3c}, {&(0x7f0000001dc0)="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", 0x1000}, {&(0x7f0000002dc0)="f87dffe55d4026af564fede33797c9a5654a3adb04a808573edb50f452e9f2e0d2f312711b7d40b3af3507d15d70883541a8542053ce35eb6309442a70858b802ae5", 0x42}, {&(0x7f0000002e40)="5000d6271ccdf43ba713147ab5205e8d4cd7b940cd8bd14c04691bdfdcfb83bdcd86038cca49978963e20ae020a445744e42b1f0496a232c98e5340cccb54438c657310b4632705b548c4ba4b363238cc411bb21b3cb2603895f9f22fec5c53a051fc589c1c84f6efd178cb26757a97b83cf7cc97c088b8aa8d04bd779a81254a8051c4e05d6210fc0cd32593eda36147269aa1b6087eb23c57e1ae03f9b87b7d8f9", 0xa2}, {&(0x7f0000002f00)="2226d360a0b400da6e717037f337dc71913c131ce645a5f7ef684d667c28ff0cbf6422d90746964f9570afefa3d20b530705c699b18ca453460ef1a120c396653d4ca9aef666088bf4d00d8f2ddfd56163dc991d8327a4bdfdbac36a835eaa287366f9166b87f2810855736409fb5e54d3e46fc473ce45184d5ea4ca437a75789b475f8514fc1a2ba9a69400adcf9d05eba51d62937f19ea586aafb42e63c174b8dd14bde9ecf5a985dbb58a3414d854", 0xb0}], 0xa}}, {{&(0x7f0000003080)=@pppol2tpv3={0x18, 0x1, {0x0, r2, {0x2, 0x4e22, @empty}, 0x3, 0x4, 0x3, 0x1}}, 0x80, &(0x7f0000003200)=[{&(0x7f0000003100)="4fb387e45c36a2ed5eea8337f2ec7fc21d121f18225d05255ae5de8ec2a5950ee70d8a4205b62affd5b5f249e324d9a89085353d52e3785b151c94d038c3b5a34c5c143dfc1d29dbd7cebee6f9c79c31a0217432a6f4938f959d2aa1b63a5005c2d3d3457a1a0df510316db9d15ffb489a2054e3be9e28a549a34eea470243fed6fba473afa5e0e706596305f26666969914604b4b380a7c396ad8197ff35207ad218256c66cee305265e6f02c9cc423d4", 0xb1}, {&(0x7f00000031c0)="a4d74916a5", 0x5}], 0x2, &(0x7f0000003240)=[{0x40, 0x1, 0x10001, "63a03d13d1c69f282cb5615b31a549bd946d47472ebc4289b83a81f1b958139a3899c2e006170b4b75"}, {0xd8, 0x29, 0x7, "c78741e32ac1b8bee41ca9a5d17aafb728ecd55631bca30880bfcd17cc91f67aaa8e369a167943d3d934d2e348618f84fa07dc5387df9a2dad964b0b54242717626859a08d9f5d780c4eb145dd6d202b61f40e794a185da868aa1a131e2ceaa90927fcc130db0f9b4a3dd5ba9217580eaf7d6a3c3ef128fea58e8468a1ed6d96c432472842cf323bd1fcc675fab2458b8e4946d9af50aa7afffab13314c7baee4cf0b39b631655396c1fb45250fea42dc50f2b608ee4f42771b8e79412159c27b86e71e4fcaa"}, {0x50, 0x11b, 0xffffffffffffffff, "922528cf17bd434bbadf6d983fce273094d91b138d36b1bfb0048ab881073c8d607c1ae754fcb5f769549f72204c95dc0bafbd9f4b22a77bf908b0ca"}, {0x88, 0x11, 0x9, "e721a6916182e63898a41e955a32e747d71c59134f0427c4c3f3457333067941f4bfa6751f1778088fae158f6afad9ba027f6eab0edb39e0cf38a14da70a09d289d847fdff5cb062003302e29256fc6811304d0751b60c8bd42c411ae941f3f821ba636033c0b7713eec3d3f0fd24cd93689e8943a92"}, {0x20, 0x11e, 0x100, "4fa9ee55c862205f810a8f529c06"}, {0x100, 0x112, 0x80000001, "7a3794b677ae9fc6a8e6e094415767c665b093a6c8fab73302a10825ce94723fd1df454474a697475d9226b90ae8b783956926a61262b7fb5fbf559e99322d22fb40b2ada197fd0be80f06f2ecdf560c53cf2295767e0cbed643d0c586338508a774e173ff7fac1fd051c670479c6e4e7c4788bf17798dad308ae58675ac75e434835f9ca9334eff5c0c99950c0b2201b5bdbfb4c3e678fe88ba4f12cb6fb42c9ab56fb198f59b78585a1000a85679847868c3c7b6a681eccf7a0b678aec0859144ff904e8d0fe64d4e3ac86356363db306284c6d2558c46a9944f3c6c46c891c7ef6d7a86ccd4f3e95f"}], 0x310}, 0xd0}], 0x4, 0x4000) connect$pppoe(r1, &(0x7f0000000040)={0x18, 0x0, {0x2, @local, 'batadv0\x00'}}, 0x1e) sendmmsg(r1, &(0x7f0000005b40), 0x40000000000014d, 0x0) 14:22:12 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000bd7000)={&(0x7f0000c07e98)=ANY=[@ANYBLOB="000000000000000000000000000000000000000033000000ffffffff0000000000000000000000000000000000000000000000000000000000000000002949000000000000000000000000000000000000000000ffffff9e0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020001007d00000000000000480001006d64350000000000000000000019000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000"], 0x1}}, 0x0) 14:22:12 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee4050c00000f0000008bc36f7d79ce3263dac37b7403242189c609", 0x23}], 0x1}, 0x0) 14:22:12 executing program 3: r0 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000, 0x0, 0x2}, 0xfeda) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x1c9002, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x1e, 0x805, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$IMGETVERSION(r2, 0x80044942, &(0x7f00000001c0)) r4 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000440)='/dev/video35\x00', 0x2, 0x0) ioctl$int_out(r2, 0x2, &(0x7f0000000180)) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r5, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") ioctl$VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000080)={0xffffffffffffffff, 0x1, 0x4}) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0) r6 = gettid() dup3(r3, r0, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) tkill(r6, 0x401104000000016) close(0xffffffffffffffff) 14:22:12 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee4050c00000f0000008bc36f7d79ce3263dac37b7403242189c609", 0x23}], 0x1}, 0x0) [ 1661.916898] netlink: 7 bytes leftover after parsing attributes in process `syz-executor.4'. 14:22:12 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="0af51f023c123f3188a070") sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000140)=ANY=[@ANYBLOB="b8000000190009030000000000000000ac1414bb000000000000000000000000ff02000000000000000000000000000100000000000000000a00008000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001041c684e0f3c6d047acb1cb7666861031cbfe9065721292b7183e43cd5c94d5d5167761122eb2894f55775c47bea72c4db5888fe51f6b062df9919b82f39f75b0f5e28d628db7c52a0cf025b9575f383c8e02f1e5e0e8e69cc880ceca9463dfa335cd003800000000d77e3e64eed6ccc0014e58519eb7a919"], 0xb8}}, 0x0) 14:22:12 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000bd7000)={&(0x7f0000c07e98)=ANY=[@ANYBLOB="000000000000000000000000000000000000000033000000ffffffff0000000000000000000000000000000000000000000000000000000000000000002949000000000000000000000000000000000000000000fffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020001007d00000000000000480001006d64350000000000000000000019000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000"], 0x1}}, 0x0) 14:22:12 executing program 3: r0 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x9, 0x0) recvmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/66, 0x42}], 0x1, &(0x7f00000005c0)=""/4096, 0x1000}, 0x10040) syz_open_dev$amidi(&(0x7f0000000140)='/dev/amidi#\x00', 0x7b, 0xdff17f00c241b321) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r0, 0x118, 0x1, &(0x7f0000000180)=0x133, 0x4) bpf$PROG_LOAD(0x14, &(0x7f0000000240)={0x0, 0x3, &(0x7f0000000040), &(0x7f0000000540)='syzkXN>/\x9a\xfe\xd6\xd0\xee=]]\xe2\xf7\x91\xe4T[i\xc5d\xe3Y\xa0)I\xabS\\\x1b%\xca\xa6e\xb9h\xd2\xf1\xa3.?\xeb\xe4\x18\x9b\xef\xa5\xf0Dr+\xae\x83\xe5\xb6\x95\x9e9.\x8d$\xe4\x1bL\xe1S\xc9{Z#\xe15\xe3\x8d;\x1d\x14\xadz\x9e\xebpi4\x7f\xee\x055iTO\x1a\x00\x00\x00\x00\x00\x00\x00\x00', 0x0, 0xbb, &(0x7f0000000300)=""/187, 0x0, 0x0, [], 0x0, 0xc}, 0x48) [ 1662.108104] netlink: 7 bytes leftover after parsing attributes in process `syz-executor.4'. 14:22:12 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000bd7000)={&(0x7f0000c07e98)=ANY=[@ANYBLOB="000000000000000000000000000000000000000033000000ffffffff00000000000000000000000000000000000000000000000000000000000000000029490000000000000000000000000000000000000000007fffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020001007d00000000000000480001006d64350000000000000000000019000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000"], 0x1}}, 0x0) 14:22:12 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee4050c00000f0000008bc36f7d79ce3263dac37b7403242189c609", 0x23}], 0x1}, 0x0) [ 1662.354021] netlink: 7 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1662.477117] syz-executor.1 invoked oom-killer: gfp_mask=0x7200c2(GFP_HIGHUSER|__GFP_ACCOUNT), order=0, oom_score_adj=0 [ 1662.489599] CPU: 1 PID: 12614 Comm: syz-executor.1 Not tainted 5.0.0-rc6+ #70 [ 1662.496902] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1662.506277] Call Trace: [ 1662.508885] dump_stack+0x172/0x1f0 [ 1662.512551] dump_header+0x10f/0xb6c [ 1662.516275] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1662.521394] ? ___ratelimit+0x60/0x595 [ 1662.525288] ? do_raw_spin_unlock+0x57/0x270 [ 1662.529713] oom_kill_process.cold+0x10/0x6f5 [ 1662.534231] ? task_will_free_mem+0x139/0x6e0 [ 1662.538745] out_of_memory+0x79a/0x1280 [ 1662.542734] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1662.547850] ? oom_killer_disable+0x280/0x280 [ 1662.552356] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1662.557481] mem_cgroup_out_of_memory+0x99/0xe0 [ 1662.562158] ? memcg_memory_event+0x40/0x40 [ 1662.566494] ? _raw_spin_unlock+0x2d/0x50 [ 1662.570646] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1662.575758] try_charge+0xfec/0x1570 [ 1662.579484] ? find_held_lock+0x35/0x130 [ 1662.583563] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1662.588413] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 1662.593263] ? find_held_lock+0x35/0x130 [ 1662.597345] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 1662.602208] memcg_kmem_charge_memcg+0x7c/0x130 [ 1662.606887] ? memcg_kmem_put_cache+0xb0/0xb0 [ 1662.611405] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 1662.616266] memcg_kmem_charge+0x13b/0x340 [ 1662.620526] __alloc_pages_nodemask+0x437/0x710 [ 1662.625210] ? __alloc_pages_slowpath+0x2900/0x2900 [ 1662.630256] ? ___might_sleep+0x163/0x280 [ 1662.634424] ? copyin+0xb5/0x100 [ 1662.637802] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1662.643353] alloc_pages_current+0x107/0x210 [ 1662.647769] pipe_write+0xa65/0xfb0 [ 1662.651417] __vfs_write+0x613/0x8e0 [ 1662.655147] ? kernel_read+0x120/0x120 [ 1662.659038] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1662.664611] ? rw_verify_area+0x118/0x360 [ 1662.668766] vfs_write+0x20c/0x580 [ 1662.672315] ksys_write+0xea/0x1f0 [ 1662.675889] ? __ia32_sys_read+0xb0/0xb0 [ 1662.680003] ? do_syscall_64+0x26/0x610 [ 1662.683999] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1662.689364] ? do_syscall_64+0x26/0x610 [ 1662.693362] __x64_sys_write+0x73/0xb0 [ 1662.697262] do_syscall_64+0x103/0x610 [ 1662.701164] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1662.706388] RIP: 0033:0x457e29 [ 1662.709583] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1662.728544] RSP: 002b:00007fd8c7971c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1662.736269] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457e29 [ 1662.743546] RDX: 0000000100000073 RSI: 00000000200001c0 RDI: 0000000000000005 [ 1662.750836] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1662.758117] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd8c79726d4 [ 1662.765388] R13: 00000000004c3be0 R14: 00000000004dc3d0 R15: 00000000ffffffff [ 1662.775615] memory: usage 307200kB, limit 307200kB, failcnt 9709 [ 1662.781798] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1662.788855] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1662.796604] Memory cgroup stats for /syz1: cache:0KB rss:257108KB rss_huge:227328KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:8KB active_anon:257276KB inactive_file:8KB active_file:0KB unevictable:0KB 14:22:13 executing program 1: r0 = perf_event_open(&(0x7f0000000000)={0x400000001, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x28108, 0xc, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8000, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f000094f000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffff9c, 0xc00c642d, 0x0) r1 = syz_open_dev$media(&(0x7f00000000c0)='/dev/media#\x00', 0x4, 0x12200) ioctl$VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000001400)={0x0, @win={{0x8, 0x1, 0x3ff, 0x3}, 0x2, 0xb619, &(0x7f00000003c0)={{0x4, 0xe1e, 0x9, 0xfffffffffffffffd}, &(0x7f0000000380)={{0x6, 0x10001, 0xffff, 0x3ff}, &(0x7f0000000340)={{0x10000, 0x1, 0x8, 0x10001}}}}, 0x8, &(0x7f0000000400)="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", 0x8}}) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000300)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x4100004}, 0x38f, &(0x7f0000001500)={&(0x7f0000000100)=ANY=[@ANYBLOB="32643cb8e8070bd19333009851", @ANYRES16=r2, @ANYBLOB="00042cbd7000ffdbdf25010000000000000002410000001000137564703a73797a3200000000"], 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000010) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0x100000073) read(r3, &(0x7f0000000200)=""/250, 0x50c7e3e3) 14:22:13 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000000)=[{0x80000006}]}, 0x10) r1 = socket$pppoe(0x18, 0x1, 0x0) r2 = dup(r1) r3 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0)='nbd\x00') r4 = socket(0x8, 0x0, 0x7) r5 = syz_open_dev$sndpcmc(&(0x7f0000000100)='/dev/snd/pcmC#D#c\x00', 0x6, 0x80400) r6 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/sloppy_sctp\x00', 0x2, 0x0) sendmsg$NBD_CMD_STATUS(r2, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x74, r3, 0x8, 0x70bd2d, 0x25dfdbfe, {}, [@NBD_ATTR_TIMEOUT={0xc}, @NBD_ATTR_TIMEOUT={0xc}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x101}, @NBD_ATTR_SOCKETS={0x24, 0x7, [{0x8, 0x1, r4}, {0x8, 0x1, r0}, {0x8, 0x1, r5}, {0x8, 0x1, r6}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x100}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x74}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) connect$pppoe(r1, &(0x7f0000000040)={0x18, 0x0, {0x2, @local, 'batadv0\x00'}}, 0x1e) sendmmsg(r1, &(0x7f0000005b40), 0x40000000000014d, 0x0) 14:22:13 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="0af51f023c123f3188a070") sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=@updpolicy={0xb8, 0x19, 0x309, 0x0, 0x0, {{@in=@remote, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x80}}}, 0xfffffffffffffc35}}, 0xffffffffffffffff) r2 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0x0, 0x2) ioctl$SIOCGETLINKNAME(r2, 0x89e0, &(0x7f0000000140)={0x1, 0x3}) 14:22:13 executing program 3: r0 = socket$vsock_dgram(0x28, 0x2, 0x0) mmap(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x200000c, 0x1e0033, r0, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e53fe8)) io_setup(0x6, &(0x7f0000000000)=0x0) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc0\x00', 0x1, 0x0) r4 = syz_open_dev$midi(&(0x7f0000000200)='/dev/midi#\x00', 0x6, 0x880) r5 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000300)='/dev/dlm-monitor\x00', 0x440000, 0x0) r6 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000004c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r7 = open(&(0x7f0000000640)='./file0\x00', 0x1a1880, 0x1) r8 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000780)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) io_submit(r2, 0x7, &(0x7f0000000800)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x7, 0x9, r0, &(0x7f0000000040)="07a18418b78fe5429c0734151b3db76cde952ece89b9cbc61314f425f60c41fb6b66183b65aed7e458ae55e10cc56c106ca693413633903d734286199a17f14b207293b6fbf7c51106879f2a72b2e1a44802dba0cf3fb239461952451c2300b254377962f0741663f3e11b73552979f680f981e6a250f3af61b8c36d0ed17dfb7641cf993232ae40b70a2a1074e3e3a11f410088b336165902e978a7c923077930877b9f636895937aa4d39bc8bf3e816f25e71a224981c9b1c7b9234af8db1a4862b4d448294837d1af4b7a56f895bdcdfb7326d4ae1b431de75d90cabcede1abf3755d4d4e5f490324", 0xea, 0xffffffff00000000, 0x0, 0x0, r3}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x8, 0x756c, r1, &(0x7f00000001c0)="d4a32b4007374f86baaa65acfe549fbcdf5da6819db205fff5dc5627e04a41aa2ff33547", 0x24, 0x9, 0x0, 0x5c56b9f7cb694651, r4}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x2, 0xffffffff80000000, r0, &(0x7f0000000280)="61aaafd7cc154b239fc5be8ed7781f7815925eb2f04517e4abdfc5c54aac7cbfe5efaaa44855738ce0c7005b4437273e2e0aa544ec173439f15a51799b7a17388bca643efc1397dce9d0", 0x4a, 0xdccc, 0x0, 0x3, r5}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x7, 0x6, r1, &(0x7f0000000380)="8afeac163a17fba0933e21b9e49932082bbd8d3bf8a80b59a05c12a2272dc727c925d45f069e83b43c676b6fea7ac6381708ec1f", 0x34, 0x70, 0x0, 0x1}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x5, 0x4, r0, &(0x7f0000000400)="8b413b9e46a6fc9b787fe58b5c5c5cdd26760f8999e326934f091c013d42cd496825cca7793f5adcfc7c21b671ba8e6ca1f9cfb40511b69b55f1c0c470c8bec81eb4e08f79399097db5f3793ebb49b19738ade2dcdc460c7296f9301c1d18ab6bde8667930e0d8d892e7ce67e19b73358248b0c1c0a13bb1283bc09184c42b7d1f5f3a666a337eae4cdef63b1580c7154a2141e4f4cb17cb2304903d2714812df96e654cbac26df31de4131e6a56e8", 0xaf, 0x2, 0x0, 0x3, r6}, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x7, 0x7a2caa93, r0, &(0x7f0000000540)="f5691c51249652af42eb6f5628b8653dd78660468933dc7a0c5f31355668388b593e90e56aca4f7ee5497dd95785c9615f98d4f8913734b1fc94f55be57ca333d878fb3cc54d42e6114624b480597623872c797c556cdae37ce181ee0fe9183c13a9d540bdc6ce73df4618eeebdcac6a2a1dc71267da943e35fad7439ddb5513ea1295e65b1dbad263157cb46d1d651750b8e1db16bc3b7d691fd62f2896dcc307f3526664b2360ae876b4906bb8976e11957602c88009ea3d3749c9d2eca4b5caedf8e68e60b3a097e5102eafcfe4550272c1fdecdf5d0ff10217e17ffd", 0xde, 0x5, 0x0, 0x0, r7}, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x2, 0x6ae2, r0, &(0x7f00000006c0)="6c09bdef6b72cc4259f2b183b4ae54a8a326b1354fe1768226d7e495b95c31e7c1efe3fdfed97d9160b8f152255ca08152b891c340606f89d0ee04f0d6448feb1b23698d750c0ce6a52b52040eb28bf29c64f71ba5f1eb680019774fc7ffd56356d194c88443439e5980cfefab798235cc5353a379dbe4319650c28266b17046f0bc5c6aa653b689a8ccbe8a1fa2591e014a01e263b4bcc3fcd3ab4a4c4e7d955ff45f34673b1c9e", 0xa8, 0x760, 0x0, 0x2, r8}]) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa02, &(0x7f0000007ffc)={&(0x7f0000002000/0x1000)=nil, 0x1000}) 14:22:13 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000bd7000)={&(0x7f0000c07e98)=ANY=[@ANYBLOB="000000000000000000000000000000000000000033000000ffffffff0000000000000000000000000000000000000000000000000000000000000000002949000000000000000000000000000000000000f0ffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020001007d00000000000000480001006d64350000000000000000000019000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000"], 0x1}}, 0x0) 14:22:13 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee4050c00000f0000008bc36f7d79ce3263dac37b7403242189c609", 0x23}], 0x1}, 0x0) [ 1662.817478] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=12613,uid=0 [ 1662.832155] Memory cgroup out of memory: Kill process 12613 (syz-executor.1) score 140 or sacrifice child [ 1662.842035] Killed process 12613 (syz-executor.1) total-vm:72844kB, anon-rss:8020kB, file-rss:34944kB, shmem-rss:0kB [ 1662.863125] oom_reaper: reaped process 12613 (syz-executor.1), now anon-rss:0kB, file-rss:34832kB, shmem-rss:0kB 14:22:13 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000bd7000)={&(0x7f0000c07e98)=ANY=[@ANYBLOB="000000000000000000000000000000000000000033000000ffffffff0000000000000000000000000000000000000000000000000000000000000000002949000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020001007d00000000000000480001006d64350000000000000000000019000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000"], 0x1}}, 0x0) [ 1662.933752] netlink: 7 bytes leftover after parsing attributes in process `syz-executor.4'. 14:22:13 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) fcntl$setstatus(r0, 0x4, 0x4800) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x81, 0x101) ioctl$EVIOCSABS3F(r2, 0x401845ff, &(0x7f0000000080)={0x1000, 0xffffffff, 0xe5, 0xffffffffffffff7f, 0x115, 0x7}) ioctl$sock_ax25_SIOCDELRT(r2, 0x890c, &(0x7f0000000140)={@bcast, @null, 0x4, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) ioctl(r1, 0x1000008912, &(0x7f0000000100)="0af51f023c123f3188a070") sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f00000008c0)=@updpolicy={0xb8, 0x19, 0x309, 0x0, 0x0, {{@in=@remote, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x80}}}, 0xb8}}, 0x0) 14:22:13 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee4050c00000f0000008bc36f7d79ce3263dac37b7403242189c609", 0x23}], 0x1}, 0x0) 14:22:13 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000bd7000)={&(0x7f0000c07e98)=ANY=[@ANYBLOB="000000000000000000000000000000000000000033000000ffffffff0000000000000000000000000000000000000000000000000000000000000000002949000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020001007d00000000000000480001006d64350000000000000000000019000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000"], 0x1}}, 0x0) [ 1663.146793] netlink: 7 bytes leftover after parsing attributes in process `syz-executor.4'. 14:22:13 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) inotify_init() socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000380)="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") sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="b8000000190009030000000000000000ac1414bb000000000000000000000000ff02000000000000000000000000000100000000000000000a00008000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0xb8}}, 0x0) 14:22:13 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000480)='/dev/video#\x00', 0x100000007fffffff, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, 0x0) sched_setaffinity(0x0, 0xfffffffffffffff8, &(0x7f0000000140)=0x40000000000009) shmget$private(0x0, 0x4000, 0x0, &(0x7f0000b60000/0x4000)=nil) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r2 = shmat(0x0, &(0x7f0000ffb000/0x4000)=nil, 0x7000) shmdt(r2) r3 = syz_open_dev$dmmidi(&(0x7f0000000240)='/dev/dmmidi#\x00', 0x8000, 0x400000) ioctl$KVM_GET_NESTED_STATE(r3, 0xc080aebe, &(0x7f00000004c0)={0x0, 0x0, 0x2080}) fcntl$getown(r1, 0x9) openat$random(0xffffffffffffff9c, &(0x7f0000000200)='/dev/urandom\x00', 0x0, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(0xffffffffffffffff, 0x80045301, &(0x7f00000000c0)) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) ioctl$BLKTRACETEARDOWN(r3, 0x1276, 0x0) perf_event_open(&(0x7f000000a000)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xa000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$EVIOCGPROP(r3, 0x80404509, &(0x7f0000000280)=""/158) clone(0x80a102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) ioctl$VIDIOC_STREAMOFF(r0, 0x40045613, &(0x7f0000000000)=0x4) mount(0x0, &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f00000001c0), &(0x7f0000000340)=0x4) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x8000, 0x2000000000000002, {0x1, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x15182c}}}) [ 1663.516364] syz-executor.1 invoked oom-killer: gfp_mask=0x7200c2(GFP_HIGHUSER|__GFP_ACCOUNT), order=0, oom_score_adj=0 [ 1663.533726] CPU: 1 PID: 12659 Comm: syz-executor.1 Not tainted 5.0.0-rc6+ #70 [ 1663.541061] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1663.550438] Call Trace: [ 1663.553041] dump_stack+0x172/0x1f0 [ 1663.556693] dump_header+0x10f/0xb6c [ 1663.560436] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1663.565554] ? ___ratelimit+0x60/0x595 [ 1663.569455] ? do_raw_spin_unlock+0x57/0x270 [ 1663.573874] oom_kill_process.cold+0x10/0x6f5 [ 1663.578378] ? task_will_free_mem+0x139/0x6e0 [ 1663.582890] out_of_memory+0x79a/0x1280 [ 1663.586911] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1663.592025] ? oom_killer_disable+0x280/0x280 [ 1663.596533] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1663.601654] mem_cgroup_out_of_memory+0x99/0xe0 [ 1663.606333] ? memcg_memory_event+0x40/0x40 [ 1663.610667] ? _raw_spin_unlock+0x2d/0x50 [ 1663.614817] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1663.619947] try_charge+0xfec/0x1570 [ 1663.623676] ? find_held_lock+0x35/0x130 [ 1663.627753] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1663.632603] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 1663.637445] ? find_held_lock+0x35/0x130 [ 1663.641510] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 1663.646381] memcg_kmem_charge_memcg+0x7c/0x130 [ 1663.651063] ? memcg_kmem_put_cache+0xb0/0xb0 [ 1663.655602] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 1663.660454] memcg_kmem_charge+0x13b/0x340 [ 1663.664702] __alloc_pages_nodemask+0x437/0x710 [ 1663.669381] ? __alloc_pages_slowpath+0x2900/0x2900 [ 1663.674403] ? ___might_sleep+0x163/0x280 [ 1663.678562] ? copyin+0xb5/0x100 [ 1663.681939] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1663.687502] alloc_pages_current+0x107/0x210 [ 1663.691940] pipe_write+0xa65/0xfb0 [ 1663.695673] __vfs_write+0x613/0x8e0 [ 1663.699392] ? kernel_read+0x120/0x120 [ 1663.703281] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1663.708850] ? rw_verify_area+0x118/0x360 [ 1663.713004] vfs_write+0x20c/0x580 [ 1663.716563] ksys_write+0xea/0x1f0 [ 1663.720106] ? __ia32_sys_read+0xb0/0xb0 [ 1663.724177] ? do_syscall_64+0x26/0x610 [ 1663.728159] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1663.733537] ? do_syscall_64+0x26/0x610 [ 1663.737534] __x64_sys_write+0x73/0xb0 [ 1663.741452] do_syscall_64+0x103/0x610 [ 1663.745353] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1663.750556] RIP: 0033:0x457e29 [ 1663.753754] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1663.772659] RSP: 002b:00007fd8c7971c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1663.780369] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457e29 [ 1663.787641] RDX: 0000000100000073 RSI: 00000000200001c0 RDI: 0000000000000005 [ 1663.794908] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1663.802179] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd8c79726d4 [ 1663.809451] R13: 00000000004c3be0 R14: 00000000004dc3d0 R15: 00000000ffffffff [ 1663.817318] memory: usage 307200kB, limit 307200kB, failcnt 9776 [ 1663.831508] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1663.850904] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1663.857461] Memory cgroup stats for /syz1: cache:0KB rss:257256KB rss_huge:227328KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:8KB active_anon:257340KB inactive_file:0KB active_file:0KB unevictable:0KB [ 1663.880363] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=12657,uid=0 [ 1663.897999] Memory cgroup out of memory: Kill process 12657 (syz-executor.1) score 140 or sacrifice child 14:22:14 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000000)=[{0x80000006}]}, 0x10) r1 = socket$pppoe(0x18, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) connect$pppoe(r1, &(0x7f0000000040)={0x18, 0x0, {0x2, @local, 'batadv0\x00'}}, 0x1e) sendmmsg(r1, &(0x7f0000004e80)=[{{&(0x7f0000000080)=@nfc_llcp={0x27, 0x0, 0x2, 0x4, 0x53, 0x1, "282209d84689c814d252deabe95d37e36fb6b2a30ba881638cfb96d12142e44e69fba7707a7bd696e2aaa3798578cbac5d229ddeea81d5338ba0a96ffaf577", 0x18}, 0x80, &(0x7f0000001380)=[{&(0x7f0000000100)="3bb30321b0dc790fb42c39c12ec88bfe2b53b9fa0621861ac5e9ca93350d4e68ea6414b71a11307eda81fed17652310f1b34eabab274b33228f817489d6c01caf224c016fb96d83ad3a6d4392085821a2fe103e246fec603f11e7460001bc70d9ab988f3373d7bf58b1ec171672fde8b44be616842d911ae8cf03376494b963cdabecf9ba8c7fac249f507c4fe9df171a8ba5d932c706664e7dcc83c8fb2f5b22c4c74cc628f077b8127a6bf6e3e328739757926106ec060cf2db022d8ccad01110633bff5ef925174b5d8455b5b11f525760a676e543c284f818db6e6eb973f046f41405b0290b37c9c", 0xea}, {&(0x7f0000000200)="a15e675ffe765366ad34684e9fae70e9fb524265966ed03ddf22e8e0694b52f27d749490bda0d39cbb4404fbbc854d1128cc74ce29b78dddb2a7bc7d28c5faf5bad420bd76abbe4c6a4d9dc4a312c5c0e4cdb7dbef27d4196d2bd9be0ba7bb53fecf6ed01478ec2d0a170291027fa05c0d8188ccd83118dd8c976fb39b128fb5474bc9c11e13e1b2762bbeb44cc2c7c940c12be2c3de35585278fbaf688bb4185bccabae47cb11ab7f7a421678863aaa113e967ebba46cbaa7b451eecda44f4d259e0f73789cd1b316c3bf768cde41f7318739b59f164911ef663e547597b674a000d4894f1cd500ae4fcfd5a3494f91baa1145758e324303909ebce90d18dfef781e6a8e8c2ca56e9a3614de83c9828645cc722afcb144f4149db10c90399a9ea8dac56543996f246b76971a87e1ea4d0285df1c8a00f894f5f50ad7d201148a7f9eeb6b27821888523223754bfa7a599335a98892309e0e949381e99d69e666a53c7ac53d2f7f65af61ba09894606831e80b21d43529c8a719cb2fcac4ae68e70caddb85d3373964a75d597d2e489d03b0352dd6d52ef2e3f40640b31e3919fa50dd60cd7d91aa0c85a0f4c6b029211925bed06e5dc6a783ba4de9eab2a7c02c2c6e78819eea6b80aaa570622da56a153339c8fb6bd30e2e0c4edd38fe4570d6bdccf716085923239ef32e88ebe0010adcda9259ebc49cfa7198c4dc6848ed832b49ceb5ec0f94969df1c796cc6040f3a9ae321db4255a5e652489f3a7aad75aec963d9bd5db8310a11909c0ebdb6557eb9eb28a132f8685982c1e49edd979b6c64dd4fc300e64c677aed13a3307fde0e7fe5ef7f3d32318399fbfb4df1248030093580fdc89b6145197d8cd09bf99b9acb95d1a240fd61842d685ecea86deddc679c9c2a7d2e50cab1588b417d5d6355bdad69312b1eae12125861e78240271246dacd99421984080b8a95379de1de6b12ccd87a197fed5e644ab9b810428f187f6d2495b8bd1be854b50688b0fb541b5f946a99a7b7703f05d4183f1e3edb5def457dcdd1d493aedc19ba0ffc78632019f8fd64c61ab9b1e4d5cba3d043bcdb68a215e6a9644173c87114b16125a2b1aa9057321a6b749e88cbf6ce61a86df021c26ceef673b1d1ddbb167349edc5e93a13653e5e7cbea4ef68ea077607b652b75eece5f13ddd5556dd068997e931bcb1ea6b72060486eb1453fa2c832fe7ec690e621c24abdc77a8687fb4c0877a5cb224223232cca00f06160db66b3aa2666030d97b117568e81b47f030a8f57073bb84269d13121445c5992a8c6607dd024128d4fb49b360d04587945c61dbd36cbbcf6cfe2750be1799f5280f1e04971ad5e809f7e97f1f5f187dc40fcea3610fda9ca08722433ea89b4161516f3f7c1ee907e1ae1d4e01e6049da70cb8ee79deb0ccb2d0bd0013e402d74b9da19c1d60f616c0d67f66d303c13140de45e1d618c86f97e251219fe652571c3f3d73f8699922ba35d8d2761ef59eeed12502fb918cb1891a2fe95486cfb14afada574992b8bb83ead080a69de7d7e7a80786a5840becfd992fc0e4e6e1a4939b08601bf649ad392c7b5f7e55f79dc0c030926a72df9ae9a461da822eb04792ea62362633b08bd17ffa73c6c19f9224cb7cc0b96c5188d21c6389ceebba0fe6cdd84451d540fb4727835f799f32e93c6afc44064ce820a8122d7b470acc30c59580e21bdc924cbd35998895c79526d5c408b9af62a0b79a4af55b034cc7773c7c7dbc7fd8ac66b72da5731df0012692eeaed29539cc52390cbcbb60143e6675295ce000b0b97e5604fa31081f7ea81ee98f8ff7303dce90ea466cc5474e7af96110c4fa5575ecf540af6d19f49b58efcd2a818f47fe03cc61fd59017be30dce0d0ff060dae70a7f5afec388309079c147633d77539bb61059f59a329b73a38bc7ebc4620e2611c3970d6134bd57f66604c0ab21b696a0df5397effe0721fe5c2268ae828c453c89d01823bc6fd9c6caecc8282f605715ca2fecb928b63a89a99ac3332360bb3e7ed35a40df25c8c0898ea709f103bfbc7d5d3c0a3a9de32d15cf9ae4207f5b4a4cdcbdf9f2ff634be5961cfb4ece00b48ef0024997abeda2ed410eab100f938a22bbb06e432e94b7a7e561fe202b5cd2f3da4fc9b8e3893ba308e68bd4d652a14d82c02d8ba5abc2c2e705205ccc80266c7d55a858a21496a73cee16aadd2837c68a5965bbedb5128ab80481d4c4e226742783de15b5460caa4f0c96a0685fefb1d9afff3f16198a1a86fb89df11a7a9eb2c5b02a78b17ec0762d380ae6d7a6c8c9fb0d89df3ccb471c1a9c1dd2a7dbe0414c8ad57871474259388b914cae950d6b8261dfee39600cf713554401f4dce56a9b97caa7c1124c1954411cae81beb00aaa09357008e2231b12178b73f4db8d7aea43f27c0ca6c5b91eec3004aa0f8e8e8bcba60322bb3ed4651f566f00a34feaea74018a337062657dc433eff59d2347973c90b273e126e5a01b8176188759696358f59fd2e7b757029c3c37126a40a8729b958ebccc596af4cecd8cd06fab36b0e072857d6715843c9110cef094d6c05f5eb6ffdc8ea6aafe69d794b94c272bbd55ca28354e18ef864845a813ba954299a91ce16dbe8eb592191c07cca98fc6e9500037d8c9eb367770c4a888ffdaed56d6322263326c596f2dab0dc3c0b46d2fc861fec7eb6258296a4175317630ea381d2a1f2eff4415025080112dea5b2d4013789e1f1641ddf61963f2729cd29456d41ad3af5e26c34d2bb65569e3c350634e32ecaa419ea1d759376ed41114fe51fd8ec8fb720711c4d107996eb804c80d8aab1822077d645f4e471ac3c841516c263aff279f1f2fe700ba39615140221329c8f45b0d7bd318d3518c2aff758e0d714a512bdb80a2c8a2ac7832d9401369164474c18d28521937d5c241743d76154f0f69b93cc07754f07ef0da3984d6e4f9d875d90b62b695af69d1cd5b77e332a187b373afcc6f0f694bfb7543f7393e3537547427ef1c1d50678231e081bbc9c10b5af304f75c897c3c8cabefc6af47dc61536ccda53b3ad9db7d913f2959048b863c50ef97e2a146b7909798b9a92819787e7ff8a435df6d57060f2807f52c3404da37c0bfb195940a7d6c104e9845814dcb5270d454fb57128efb32acbf5ded2d6fb8f15db83ef52bde49b4536088267600103ecc3f9d551db52e7c238729ed78e5792eff90baa3503bf7a832dde837cdfc1174b9737004af3cf7125ceb2b4899d1d67e298deaa4464667b8795fd100ed57f7f1959f8ff8a65787c168cbde101a672fff628e716fa7d565905e27ea17d942da1ca13e3b87e0738efe801b1375ab4c5600f003d21626825926c5db3b27415a9b2b07cf0b4ba05d65b5eb6ad4d4c4f420ce92e4ebeadc37f2dc17319b3c4689c1098933ed994b2d2181af260efedb3ee11278a3a4126d94c9b86be7afceb3bb8a69df1e2be6eeca4a2cdb525345fae53d0dae364efc7423af9eeef0462d6bdda322f73721593c937d47fea56e77a3b0febec94481a764d64fafa0dc88bfebf55a1a4a87237f6a5d557a9f8b7eb245a5ff5454ce8f1e664aa08aa9649aa28b97fcbb0cf6a91e95c2d7ca3d89b1030b7c5a3737069f2759181fbb62bf395e344412742000e622121b577cb6ca5d60c9e9caff0259709692150f8c8976568a283c6eac64c1ddb98a6b9ea7e1cb4e251601e2fa4b893ff5c142c5ce209444db69075ad1d309d623a35181ceb4d24d86796d361bcecf71b8c4d237a5c85581194885824921ab1cc1ac1dab2f532d80aaa600c58280dd246c892666a558931fe774b54943c90d530de43aef419c9e893782276b57d8ee8776e1630d426619888b996f0d2c2acb86b57ea5043159b8b251885fe19a7f80b45ee6e78243f64682d0cb0f7da3f9041d5d25f5157809a4680ffb3ce5f2fdeccdda0f02f60e23c8a4f631c49da48a333be6247573a87fd5989f7cc258bc6da18ab49c02d32662820bfecf5ded2f8c335db1b6554acc7bc0ac67cdec36702d5ef512015cd0abdd3ff1d461d927963ea0af8e4cc1913313b363ce70a26b6e3d1f642df58113d084ca021b2127759c6ebc8dee32b95421b94cdcdeac3f85835fbeae1d6a0b09fb2d86d33add715ecbba5dc8180f4b949f71a7659b807785e4d7921ac49712ad09563d445aed801c67c1bb6505df1724e7c16b09cb33cab53a479b237a8f3d61b51dd7c6ca921e527326e43a27d34719f9ac3aed4d7fba3d9f1016b563ed70811b63f5f4f9da49686bce6d19ff8b0869326a05445d0eac22f6479e168bf1efae815fb9731bca86a5c51128d2bca55a2ed161770d9fdb6ed24bdad82fb00ad4146299c603037c1fe54ff38ffbc647194ad2ccd1f9afafcd1bb6730ddac2880505eba9047f985c280781f750dd607056d670365bf13679602e7b65cdbe15d9ed4b3a97ad55ef666c5e7764e73efaf0cd4b505a35ce0d987c5fada20de4e7065275b7e0f2aa1122bfb4a58445e0c039c288c0c68be79c23a77061242bf45b2d1fd71e16c7328ed8ef24eaa6b44ca42f35ba8fd5a5635a5cd07b68f100b12647a4e6447b054772d28e9b89441ebfc7cb110b16876a5e3f37c83a2043989cfffa0aece24e2e5435d202045e4b2cd76280989fd448e49f9af9a0cce848f3d9a325f2adc1c689ecb81258f0eb039babfac6e1304b20e9f0f54236de7eb4999eb420b39c94ebea02a70ee99afd17618ead550e056d1a4b188b625eb965cfa7ede2aec95d40184ea1c5bf2d7115ba906bffb89e7d0f8f11137bd4411a046dc52bed626665fa38da5222fb1704b8afa1b4e38b4c95ca10304dd2b2be29cb19ee9bdafdc4f4add365349d6a85acebe000bf9a3d511ef0788c5a78fd592fe1037a58e11c096d65ffb85f48764b3eae01d3ba411cbe53ebd17a96a331445d61090ae2412643063e5ad7c08481d26ce9247fefe3df9cc69f9157e4f4b25711fb47f23b29d2d50d399c5ba43bb19693f47e0bb1ac4a8faa5e89b4c9d5ad58e6dcf166f06e752ea2f6128d3f8d1b16088da4adf8b8bb4ad96e2dcf552083c892378627163b3827964d22e6b3831395a90562efc071fb39ac49cfd83782614b88aa13cdc57b1ed72a69620e45f3d5cbc988d2e9a779ea17fcc8465dacb071e123b9b3d11b5cee671fddc8022cde027a072c2c3f82d1489137c77145792d90ce63df91de51bfb7a0ae2e911333c9f1980e1c5a15b5e3f44796c07fcd14e46b863c1ff9bac2479f423cc7f5f825b6a005da2732e1dac838f379a3c1f1efd8a9a4c7a37cc0e9932e67f9eb982769fc0f8fbcc1494705d20f7294607428e55901e1800ff60866f6355554a6923c6907b366fd964128b275ec5a96d4c484f7c8e321f8b8207266decc22adc025bc43a2c5d1428d913d0b1fa42fbd779b76e79b5e967efa8e56d4405da18f5574744127ae1f51d75546eee14d433d1eb88125eb4b4db6ec9effeebb7ce81bfb77240e0a8465aad4d7eb2f4614bdac724d02a93f93a1b4127bab8dcd6c97d8c2513216bf0862cd26555fcce13e1fb23fc6b9f76f14e1f8bbc5caf3a284e52623b274ec88172bcb7a41208ca6cdbd0dc87aa99e9628abfddec447f764ad5288ae0f2092d311dd9bf7b064ba7be51d51ccd80873f9f8bb0947ec5ecf3d2f9eeeb27e1314eaefae5c774431a375dfc332091be6f91cbb385ad6b0e5220296032067c6a9c650dfadcc600fb6a2a4475446cc33ecb46760e34800109909cf7f59c0968c23cd6d1421d0f98cdab3829d", 0x1000}, {&(0x7f0000001200)="3bbb5f74e722334c97737f3163aa6e184f5cfa696ecb7fa2797d3ab4dd234120ad5869f47fc01a99ca916fc0b75a7dda795cbcd782df4234f84fab384b2746a5b041f9bb636b429b3ac759a574b6b4beff8c90c4559c2f58c07463481746060591a75299879b9a534e6b9a0409d46dd5267a3c0b04bee65baa863cefdc312e", 0x7f}, {&(0x7f0000001280)="f64ed39fd6df47079caa7df72670d7bf9c7362f234cfc76bc1e17ba91ace0bbbd004b535974ec8ccc0a8e205fb1ace05e67674ffe735876e2f18ce67665ff7f841a4b9528eee5595f05b158ef2c31d4fb0ebb5ca55b5eb66c8174a2dc49f34db8d32d61ccdc51bd1fd42e6841c3bc459a3556c3a0a7be2ea6242c2f9fd82877bfb7612dcc44cba766de2e9960aa6a7a4b86f04a3e47c939d468fa3f70be24034b6fc4aeeda76abe073700931cad45c16601d5a7c565bc17c075c1b4e2f415e71259ff87a9763a75f2e775bf8e86b62f4e3be8ca5f8d3d945e7fed5322d4f34e727ef5bd396bdaf94b4c1", 0xea}], 0x4, &(0x7f00000013c0)=[{0xf8, 0x0, 0xbe3a, "4846f225564b668859bbab845a9841b9d7f82da61b0af47bb47e74adca774db068296a737381fe30151604af7b55392d79546b6c00217ad867825becae94aefec89445c2d4c674fa576dbbacff7b11b4fdf58a18d4e38158d085cdd00ee23bbd1823566c6dbbe5d897b3a819fce2ca7569d2dbd3bfc7af9f0f71137d2ad54de35f3850f44338529c107582f6d9b22891e0b0ab7c959b66eb246f53087d5eeb4da51ca0258ca0c173a85f799561b6a0dd92c45fd18b068496a9174ee92c4e84bbc44ffdfec1117dc000a37d66f5ca4c86b6dbe4bc652bde3ac0c974243d5ae1cc9769782327c268"}, {0x60, 0x10a, 0x4, "a8434a7dac2f5096badb75103ae94992e52cc749d3e4c74ec2d3723c8209fd0442c5206c821223e9679cefa3d405d18ce01d9edde714c657e6f619ae75241dc1661ce86aff044653cc446f"}, {0x110, 0x119, 0x0, "1353bb027401d6aa584899b7d335696b3d11d279b93ec865323c6aeee52ceb8602cb3154f8a66414d7aa8db9b53e942e2c0a2f47cacb827085bec4461e83a0e78f90cb64d4a7c0db49ea7e2fe95b531ff929aec79bf8aa096509caf6f94710a275d7401f3db35da99e6eb901db97dfbd743d8c763dfe1464fb29cdea0a566393ac18395bb276dd69bb2a906b3fe08bc2576466e9fb0b1e6051570d0e7fb45d6c3760a2f11685162e9aab3ccb63a10f1fc8df316d6ec63c852d8ce81b42b4258bb2622c9b84955121f0ae5953c3af00245f340121ca182f33b98966185372077fdda8b21c63ffff9602037d2c85c98900d1cbd353fddfc9f3f45d22f2f4"}, {0x20, 0x117, 0x2, "fad5d0e25574dbe7f270e6a530e1fe"}, {0x58, 0x11f, 0x5, "e612d30690f746e5d36d542f8c245bf5e320b107b02b3a455ecf7afec5bfeb3d9b8aefa109096933e730946e70f7e946c32e1d27e56e24063457a5aa8476bdc8ec"}, {0x80, 0x11f, 0x2, "8bda2bd12432044c795a15232ae6171147c69f36bce62a225b5cb748ccc6f4073f080ef0a390d5cefaaa00775f7d01f71279e9edbf2a30f3079e4cc6606a8d948c86f9e2e703c79cbf8a53dacce75b9e3bce697bdfa185b19136f8d6b3d37e7e6f75691ea3c1adc135ddf4"}], 0x360}, 0xc4}, {{&(0x7f0000001740)=@nfc_llcp={0x27, 0x1, 0x1, 0x5, 0x12b0, 0x6, "a3bdae7d9c733c08a36a85b4bf58ceb9973017484e23747ae3aa73a71e32ddd2da8d01c724089728cf01d65e84f0bb1b564f2ddbec1bc954a9e5c212cc8ab1", 0xd}, 0x80, &(0x7f0000001b00)=[{&(0x7f00000017c0)="f58703f5c40cdd35bddaecb709afbd7c2d995a38b7e8dd44fcbcd8e6ee65a3f4d80962b0b74b29b70a1f5a161893e10fb8613056a9a2e0eead569dcf0b0cbdba5dcdb9b227c08cf08da13ef1bd38f74bf6b0cff7a8719c700a876700dd70e234d0cda6cb48be897abd132c024688d57ac7c03cd94c0191d8e14c57c808b873d1423532cacb91ab4d903c3aa900e0a9ff2e8305269cc7f00de3a8d17c0c148fd052a365cd4cadf9f8fb06bfe92eb032b6a61cb591f4a8047b50749d9c35", 0xbd}, {&(0x7f0000001880)="5bc9c47b7a3e4143cebd64ea61f62e35b5e3b802bbb9fb307782ddfde0fcfde5ae9e108685f6f001c7bb0a9aa5fc869fe885c186efa94d0da5e01027779bda567feadcd8ff98a56b8beced777deb086eb7cb57e54a39e7c4272dc092e8ebad83d8ed51fed2e31d42061fbb4cdc304bb5c8df9a5af79d1e960b39ac7e710e77", 0x7f}, {&(0x7f0000001900)="115b91ee00af69ab1c5cbb49a748aaffd6c31c5aa7bc84fb1235db04fb25691e953e1caea5f316b40cdebea55d6694b5539cfc5a6394fd299f062e17ad087f143a96ef6f2b78f0f2941d673e755afc65918e81145e7141977c43b7f18439d5fc7eaf2714266e0fdabb4b65f9d4ba0146ab0419130d6386909345e31198357e43dc40e4ce74ecd7eeb06c06b0668c050c5bfa7450f114c14d2dd9538099f0e3761995f7bd7e43b09c80e30dfdf135131a49cd68f8dcc82505adef69ba93848d99", 0xc0}, {&(0x7f00000019c0)="a5bc3c7db52c7ccf42d1186897377f95ad1542dec7f490e2039fc8c6", 0x1c}, {&(0x7f0000001a00)="15628136e89ba7a43d5b92ccb6b6bf2c8bd3ab414a9e478a4eb28ed0a683fbf0aa24790bb2d58e55643321448c72cc08da9978ce4308887f6d1a069dcfadf59bcff98f659671b31ce5988029bfc3564d26f9f2a2b0ee9bfb43619a356ff7650be825116db4573fb89a1027666aaf6be339cf5ed8ce8ec29f2925f9d227b618b84f0e04eb137f89397baf3c7beaa4f42620c38430f576db98bc482ea488a811f4c2a38ecb76b292d9ceb98b5ff6ba1d294176a756382eb7b8247982a8c238d6268c1f9d8251fcf62dbafd7fc873e89db55ce8cb61ec81188df89dcd43d879e8957a61f0d8cfe4eedc9f9c7139a142", 0xee}], 0x5, &(0x7f0000001b80)=ANY=[@ANYBLOB="d0000000000000001301000004000000c22de22c13b1bed7f0e40043b25687103855ac7e8940a71092f8b8c59988a13a40416ac73c45227cd473fd5538ed87d55277556709ea9af7311eebc3fc05f13e8aa02e694bcca0800403bb307f066b7689be68269240d4b7bdb69357039b08921c581611c12931433cf9c16c3b772b8f1762140a525da907bc1da760d6b1c71111e8267c0bfcd23a7fc883ebeb7ee8d16da3d2fe793413f7ca88e726b5653d77d5a5997fe210d5c6b79ae502559a3e19aec35adb450e4e25388b0000000000008800000000000000290000000200000031510c996cee9848cc4c1ef799d47e0e53c7583aeb91de19cd40ae1e3e3754c4f197c4c98356da3ba8cd7e86cd58cf8a847d01a988c57768632ad2ed38d2ef7c7e830f0b190df9fb618757116a47c8393e278702b0ecb2312d1d06d721001ccbc51480fe2554429439a9a7859270545cb394a43d00000000f0000000000000000b01000001000080109d6426905734aed3183fcc48c357f33866e9e179b5c2e2cbb0c1610a0b3e4f45ed15a8a255eea6523bfb40f69b5ed20ed63d4dfcdc85869709f6892ab95fbde50ffafc8122126ef335b63be5e8559e5bf384e6964a08c2d10c6a5899ef6e3d50c79a492da25c60fa9b429afdbea09469f0cd090ac869688880fd98fbd84e1ebbc0e72d336093ede334ce52d118e12cbadf158adcf845bd260b6c7544f06bfb34260b16663fd7a45da307bb5d5bb921f9b918b8874eb44c51174189c7b572e0779c783fa537533c29fb3df88b7998c9a999a7c485b36f4628b21aabd193130050000000000000000901000000000000af285bd70357e97404697b7168490f062ed614de6786e53e1954fa223bda0847b164e6ca257a43860bf03a204b18a8b86a0000e00000000000000001000000ffffffffce2ebdb9354ea66cebc39d7b37dcc9994b1b5fc9d14f83dcd0f77e5e7d31b425effa95f4b341fe31ef3aa77970888408a6bf25669a4ec4f35012d5ce22aed764e3076e01eb59efb7fd364a2d1a17b7a62a19fe4d46c22ad4c4f82827133b63280d1d9034f07d3a4db9e69564e30108a8c6dce7c45cc0c8a811895547b2933dfaae5a1e0d30c8bfca13084533330153a1dcc9ee7f3fe9994ea7b17fa27579ccbcbdaac665ddc34852e2bc2e734d840cfafba64031744bb81374d11244a512215cc768a0a0387d4d0cefd67a163aac0000b0000000000000001f010000090000002260cc4b46f397cba53f770839741d1109d078a54ae52155ab5f48517d8cadced3297948d31a59a51ccbf14384de69735f2cb0e24e2de30d77e3df15934830eb8c387c2eef585e0ecbc82d21739f99b75d415289158aec2962151771bc826bd164c1eaf28739db297d1974b4b21ce00d72f3c5798ba9c4ef92ac2ab33e2de58bed268de37716dbd2cc5a34cb4d23e2877f2072230a9eb2475f706f04f40000008800000000000000030100000400000032cd1e92d413692245b5efe40494f888c16a91c25a0dad0604d4c86a436ee5d3b6e8a7721a4b40ad57f194358ca3eade26f8caa67c20358d4754793fec0f858238763271c380ea1602b0a1474768decfe077dddbf014ab34d6d05ca5677f54b593a90bf6da2b1bf203e17d9afd448beb2beb07000000000030000000000000001f010000010000006ad098919bd31262fc4e20c0d7d43adffd7ab98ce3cbf34c1a883552e863952c90000000000000001b01000037000000c63df5863522a92fb406b1b9edb2807d2c925d3c510f2c3a92b4438d5b0c850c029b40a375eca3987bfd255f40f840c1f33645de1395fe98ee50ba64c2558771a94341e82b55a82a2b49aca1133cf6106db9ff52f4469160a9ac6e3c063e8a02bb52120d809212e2e7e93844f38c53c80c03f9741b5a49bf9058da210000000088000000000000000000000004000000137b36137368c09254bd42a9331fcea432186062b69971485c2105c9f64adff9fcaf0802d531c896ee9bf5a286ec00a836a8eff959de68d723fd82306ed3f57c42599d8baabe687cad3957a70bf0c8ee345ab0f6e3741272c2d4ae10609b45e449ae47e47441f432e2339ca27f9db237d9f0bacac731c3e1"], 0x5f8}, 0x3}, {{&(0x7f0000002180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x4e23, @remote}, 0x0, 0x2, 0x4, 0x2}}, 0x80, &(0x7f0000003740)=[{&(0x7f0000002200)="c040dee61c596698be6ca8231021195256f675142b3781a6f0fad1b56101a14fb3f383c99dcbe364fe558e7f25f8a628b5095d021c2c1740a0c7297d8af42d3c8a9a06c79504ca45b6e651cd54b5c7e906c785fcfebd3d660e4318510d734905e6d24746833656ef91b3c7e04d48e6662d15a21d552e3454f3a4584eb13c2818fd8b14eeec701ae6b87bf32fed2a4857916a91b59c005eb23042676c670324bb9cee5ca5de3902affcb13add428532e89395b07ae5842ac98bb1afe43493991277550d2f31fa77f29579299b7a725f159013ca0466ff9d011f8767cf537804f182930764e9ae", 0xe6}, {&(0x7f0000002300)="59644630aee4c0c9faae4fb32e16d99d75284b9098ab454ebbc3ba7a063f23e835bf64cb5ad681c98c342a01a58eb9802202d477c71883a293871bcc03d287da4a7797f25788d7715d2238cf4f84d0167ed2bb128335f737e144efb760ba724c25d42c18cb97a2292e3281c4ba630b3ef7a745049994db7f045f734db92200bb95b5c1944e5b745b8efd729030d7692b87c3349a4c9adaadbe754bc9c36a3a937da713a0c449a9aa106efbd825b50d730b43ff32e79e63b1da2a210d77217a3d9ed8c4da9a1d9dce18256f1946fa9504baf4e3106253d61bacf513317ff57325acb678da7f72925152d85b0462c20de0306f", 0xf2}, {&(0x7f0000002400)="72084c3802c45d446775241c09983d276d8134dc31920fa71773b72cb10c512077d3f423aba5322740889b712338ac2cdd8f8efd02a72ebbfa72051cd162e4690c0e5bb946fff2326870bad021c546bf3eb5b0db61430ef47891efdcf03a51c719b44b0b0f8c", 0x66}, {&(0x7f0000002480)="468e42a49acdc6361ca88f5ffc0e19711bf8", 0x12}, {&(0x7f00000024c0)="490cb158e307144fda2b532278e71ab7661decead2f4188aaace5f13fa8d4b16c3369d0f67df589b3e7394d6bfb907e92c40744fe40ac19278e0040b02bcfa3207cd01d443b1d703ffa26b6cf4c4d897b5fad0a42a37d728df4bde2fbe56efe53823a00370165fa9a66f358b48cb9b412bf7c981ebbdc94b4265d4e8177efb68b50397701d6541c5cb1f497a89d4605cf66abe0372ddee9fc4bcf697b78b89719c61e20a7091810fcc11571424f109f49183090a", 0xb4}, {&(0x7f0000002580)="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", 0x1000}, {&(0x7f0000003580)="eb66494cb6e8c138974f2984ef864d17cad520a4ca2113f023d720378d8c72c3d23be42f1ebb77479ea5e394de10de603e49e86eb6ced204513996a2f043745e2a27e73bacbc1741b9e9df048b7a39e53f7d3898f0cca87211fafc280249872f7a63f37ed0c776b20ba1cc45d43433a611f2432582845da9a58b17fe81b965826ef4dfb571394413a6b72ebc05f50d14572a8d7a8af79fa0631d6e07d2ff0cdaf3d8eb096c16a97b62b27b0813809e12108e5c9609e91a377cb7094ba3f3cebecc122d171751f3bf0cc4a6deb7c53056b716a63e533aed110d58", 0xda}, {&(0x7f0000003680)="139a7948b841ecaedf3c92bfab1091b7607e16e098c450935f6b72b59e908e9882cae2542eff8663ad164171a6a0911f0be3bcb6ea4586c0dfb3f309e8add69aa4a9405117a91ddb5e33ec2a9e4dcc887461cfa5c62ccdf0e965312ad7d68fe1406dbd40bc5ed440a71a8fb88b4ddb74cb14b0c16a589bb4ef245c4b6e79ee4adac2f6cc4f319f04cd0b11fcf1aaf1cd3929725cea0549fcd49813e9aa79138c734bfe81a573646c32d0c70fb9bcccd7993b2418274edc9f151a1da8fd9b", 0xbe}], 0x8, &(0x7f00000037c0)=[{0xc0, 0x11b, 0x9, "202adbbcc6af097af431ab68f332e4fcd32688a4326aba649453a1c1336a754046f2cf382e3dfcc18bcaed73a3e8cfa2ff3bef919644ec9ef3c74d37481b5c59adb91c9ca2fa856187df5e1024bd4066cbb0446bd13322db76f5c361c4e3b04f80dd8a5a835b22c5e8f60fe4751c2afb4e7f57c64f84ae41adc3ac73dd3bf7c3c90eb296168812386f08baf00f6a9f3afa3e937f41fb655082e0823fc5af40700b7e4cceac58764e2c"}, {0x78, 0x102, 0x7, "a5dbf9a5ff160ab60e837628bbab74f2687497f18dcbedf4fcc017bd2fe91c29377e40fcfbae40192405731b36b9cd3f58246ad38a486a132a333f372100a65bac0f4bf8664cff62fb98b757d4068701265742315c92a1a097d7adda2976a5482d2444f5"}], 0x138}, 0x3}, {{0x0, 0x0, &(0x7f0000004b00)=[{&(0x7f0000003900)="c818fabdd7d87baca7bad5251fdc1001584474889db0acf0a1413b26b7b68e87d0bc41e59fab9b162c6e5245d7e87e79c7b58c1ca87dee5d4d914b74baa01ff3e1d4c3c40ae443b0380dffac7bfb5f6859cc807e29422734f3ff0e61d83429efa22c371cf7a53cc4e7ec17e660ef49506b5acdc63190d1ca795cb69a2da2294a4a8cf5f3fd58", 0x86}, {&(0x7f00000039c0)="d373e2aa3765de009a17cf988fada54db2d85f74f5", 0x15}, {&(0x7f0000003a00)="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", 0x1000}, {&(0x7f0000004a00)="a8d8b5b21b9aa61cac53786b0a0575ffd66d2c49", 0x14}, {&(0x7f0000004a40)="d653f64875dd16cdee26193b2f36aa76cbb514774fbaaef063d6ed1c3feb8f75d75a4ecc4cd2b35e56a660f5f7ac600583a00a0d52a0141816bd75f472dbf4f5eb808c23a4d695ce228dadb06f6b909480ea5863bc10bafb89637ee46cac215145c38e7f473a74bbc3974bb52c65e8542dfdc5f1b8ac31277f485a3320f5bb3975b977", 0x83}], 0x5, &(0x7f0000004b80)=[{0x100, 0x110, 0x4, "f400e4557d74b5aa7acaadb73d9fbc4c0962bbbeb7fc3e238c490ac2f7697f733548c6bbe6d5d21cc1d40d55b65d4ae2604f27c443b14a82ecd4bc90c0d89ec0cf6ff285e55184355334bec3d373d5edbe68d274f520e45bc420f69c8b39d190e3b316742cca92985926da2b8e022ba227cfa158a4b40f0a2607a1b524f23dd45c426a415c90b4a32c6a8ef3ddca87bf8dc0e2db423026bc6459c0870a1a3cb7bc3993de0bf6d2844a791932f196af5fb1dbecdbadb56ffc82edb8b592780fbba137283ae1f0d71c7f620fdb89afb0544244195c562c69f59f0a17e731a3826fdbf4518fbc39fbc54439"}, {0xc0, 0x13f, 0x9f26, "34094c694b2187cbb1518c4732fdedd4d3a4c86f4e5d3cea1765002ef6628135b9aca88cf08c8e5461b9e6e990e35c8cc41f6899531830cf0631cbb930426e5f4d7560e59f3f2cf68cb8b28ccb8b5d6b9a4892e4c39d7663cd838e4559bbc89b872a388983d86a416689099f8b68654e596a317e8b3941368f643a140e8086fed9e1937a9a2317a8ad332338be6a27a2be1aa719e7f63081f5948b51182f8419f58668c5f96cd84de2d37847a1"}, {0x108, 0x10a, 0xffffffff7fffffff, "52cfe50d31567b5e2f6446b7bbe4fb595ae5fec7b99391f52e71afbe06a50aa57c4b0bbf592720f75890ab11da595876f833261d33f74736431ddb8eec5a1cea9a9e96eb331c58bf19c5c50716111d8106602b7e2aebef2ec02df040e0efa9595f01fcb2c2916dbf2c08857f0858c54e96496dda18b3c6f9482cefc7654851ebad6f134f78388a8a8a1121468540af186065ecafeb7ce418c5944d478493edc85a0a22d3b5805e4ff0c6069a6e18401084c12d01a6c42a5745e234c7a665b34c2880721efe9eae1515510651a8fb1644e41b985ff1e0d5269e2545c51d10ec653ef4fcd77e3a979543fff89e1c4a6540b868ff"}], 0x2c8}}], 0x4, 0x0) 14:22:14 executing program 1: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0)=0x0) r1 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000180)={&(0x7f0000000140)='./file0\x00'}, 0x10) r2 = perf_event_open(&(0x7f0000000300)={0x400000001, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f000094f000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) fcntl$F_GET_RW_HINT(r1, 0x40b, &(0x7f00000003c0)) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffff9c, 0xc00c642d, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = semget(0x2, 0x0, 0x2) semctl$IPC_INFO(r5, 0x0, 0x3, &(0x7f0000000000)=""/127) semop(r5, &(0x7f0000000100)=[{0x2, 0x4, 0x1800}, {0x3, 0x10000, 0x1800}, {0x1, 0xfff, 0x800}], 0x3) write(r4, &(0x7f00000001c0), 0x100000073) read(r3, &(0x7f0000000200)=""/250, 0x50c7e3e3) getsockopt$inet_sctp_SCTP_NODELAY(r3, 0x84, 0x3, &(0x7f00000001c0), &(0x7f0000000380)=0x4) 14:22:14 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee4050c00000f0000008bc36f7d79ce3263dac37b7403242189c609", 0x23}], 0x1}, 0x0) 14:22:14 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000bd7000)={&(0x7f0000c07e98)=ANY=[@ANYBLOB="000000000000000000000000000000000000000033000000ffffffff0000000000000000000000000000000000000000000000000000000000000000002949000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020001007d00000000000000480001006d64350000000000000000000019000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000"], 0x1}}, 0x0) 14:22:14 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/connector\x00') ioctl$BLKIOOPT(r0, 0x1279, &(0x7f0000000080)) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000100)="0af51f023c123f3188a070") sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f00000008c0)=@updpolicy={0xb8, 0x19, 0x309, 0x0, 0x0, {{@in=@remote, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x80}}}, 0xb8}}, 0x0) 14:22:14 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000280)="2e0000001800810f622fffe5221ed4c416606b481f000b000000d41266fb120009000e00037363f6ab14415560b3", 0x2e}], 0x1}, 0x0) r1 = open(&(0x7f0000000340)='./file0\x00', 0x400000, 0x4) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') ioctl$VIDIOC_SUBDEV_S_CROP(r0, 0xc038563c, &(0x7f0000000000)={0x0, 0x0, {0x1, 0x8, 0x9, 0x1}}) sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f0000000300)={&(0x7f0000000080), 0xc, &(0x7f00000002c0)={&(0x7f0000000140)={0x10c, r2, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_SOCK={0x30, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x52e7}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfffffffffffffff9}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xda9}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x10001}]}, @TIPC_NLA_MEDIA={0x2c, 0x5, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb35}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa3f7}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb2f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9e7a}]}]}, @TIPC_NLA_SOCK={0x34, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0xf06f}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x400}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3f}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1f}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80000000}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x50f}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x100000000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1ff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x59}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x10000}]}, @TIPC_NLA_NODE={0x10, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x10c}}, 0x40000) [ 1663.909560] Killed process 12657 (syz-executor.1) total-vm:72712kB, anon-rss:8016kB, file-rss:34944kB, shmem-rss:0kB [ 1663.928813] oom_reaper: reaped process 12657 (syz-executor.1), now anon-rss:0kB, file-rss:34856kB, shmem-rss:0kB 14:22:14 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000bd7000)={&(0x7f0000c07e98)=ANY=[@ANYBLOB="000000000000000000000000000000000000000033000000ffffffff0000000000000000000000000000000000000000000000000000000000000000002949000000000000000000000000000000000000f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020001007d00000000000000480001006d64350000000000000000000019000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000"], 0x1}}, 0x0) [ 1664.001767] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1664.021396] netlink: 7 bytes leftover after parsing attributes in process `syz-executor.4'. 14:22:14 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee4050c00000f0000008bc36f7d79ce3263dac37b7403242189c609", 0x23}], 0x1}, 0x0) 14:22:14 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) r1 = syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x4, 0x111000) write$UHID_SET_REPORT_REPLY(r1, &(0x7f00000000c0)={0xe, 0x9, 0x7, 0x7f, 0xd2, "cd3fb218fd024d63d5f031db144f14ae1337d4351d8b35464ae5f8459bc67a340499ffd63698d93b3acb221868a11dc85d6052b834e9b1ad0705d5861b8235ee75a863dc35c8edf04af3a818890465eb8da981fa8bec422a24974641fdf2131a4d49d01bd1039ae1b399b0ed642edf6fcf50453f55a13c1fc08a5303185f1464d6592fa511b2b88f82dc7dd7ffd2d3c155fac76d321211567b8a63ce7eaea51e817701470f9e4bdacd502e4a8784c585f2149ca418cabf8834e9d4e02727c395147f17e9cefdc2baeea1751724f2ff621495"}, 0xde) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000000)=[{0x80000006}]}, 0x10) r2 = socket$pppoe(0x18, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) connect$pppoe(r2, &(0x7f0000000040)={0x18, 0x0, {0x2, @local, 'batadv0\x00'}}, 0x1e) sendmmsg(r2, &(0x7f0000000f80)=[{{&(0x7f00000001c0)=@ipx={0x4, 0x3, 0x1, "3c6e6b8f1fc0", 0x1ff}, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000240)="94e427a525ea71451798dc6e6b98942daa1b21869044a3ae7b3a1d6cea0b67b812ac2b26050298669cc64328aae27e3619fff359bb356092ceccc150891860246e6806ce033fa80ad427fc2e16c6941048cd1e5b105ce521e89129eb3664935245a9931c9922d876477c575f06c2f92a2c6acad77bfd82c4cda3c7701b556fc05f78a9a5415253ffb12e497f0b9ddf1dbd9ba7c5ef7e8dd04349d5c603ef9a380aa7e674dc4661898e0515eedf9ff52b5f319062acfc4d3756b169f3dfd4cb4918dfddf6af3a9e75089339c4a62ec131ae54909baafbff697e19f8bbfa59baa5c7c8e1be02bf3de8b92d96b387b2729b0fe02c700b4592e1"}, {&(0x7f0000000340)="d12cf6f78d4d5ad1ce13bc1ebc7cfcd316f09bed8e42f924e00e24117634048445eaf442e95da25ea0e5425dd5f346b5bfd4c49318b49d1f4a07d71348bfc2e4fafcc4384018059c03d99371fca7a4c8f7db8a7cc2577e02a02819d228f1bc2ad0c9d798624ffae61c5d5ec0bb11196c3e3a4a13a68a19dfb1a7cf68235b3fc2f22581f6fdc42b41016f5438bc90efbb3011381dcd21b131dd8ef2ff5a0487b56402408b54c52078dd8ddd6ed7c4eb615eca69da27e28ca271601f708521d44712e0f3ba42742f4c616647dd01d0069fcd22bf44"}, {&(0x7f0000000440)="1e3297ec5a5e005c965124ba93978addfaa14e628b8146fcf0f88ecd1a10a08e3514d11315b9721cfb14622dd1f31211283c0f5620603161b75b55f17ce9a1e9ffe998d34453a651dcfb3eb431010e59e2f2ded1dfff18a91ba938ea56"}, {&(0x7f00000004c0)="24abbfcf5cdb55917d61e0c7d85e00408ccc7df729a9f6f2c9952b6b00a6aba8245c4a17d6d63a7b956b464d8311a67f24278a995fe9c1cd2b95685d04437d70817761010d3bf52f865649a2032552b540e4b3403505ea9f676cd4a3b710fdb885fd36d0e7078951404448715d8c352780351c36fcd48201b5cb2b9750d422e47c893a73fe5668eed697c35ebb20d076a83b933996b70279344dd4da1ee6ad3f06c85fe80caba49877ba23927fa31343025f84ebec0b8d49dca2ef03d8503332a2ea1fdb33cecb1bc2f4e7280625b78602125a329ca4be870bdab457583024a274d5385c8d76129a559730213b95c97ee0af2436"}, {&(0x7f00000005c0)="df16822affe5df569ff58deedd3a5d1910651602f38f1d1f61b3266bfdb71608ec4404145262e73f2db1971110d85c16cac3f68c23f94e017d76371869d353d20d92860734dcc50bcb60324c9b1093ed45131589ab4762e5dc1066b9bfd60082aaef5a1bddbbb7c271ff47bbc688f5c7ce9964300de4cf1599bb5f91a8cc8fac51491bcfc434b40a38c7a94eee5fed91acd17fa3c4f99fce0800dae8fa2e0f6fd42c11e2d6044539b027500afc5cf2f7c56c59cfcbd7e212ee40761d97a59d9a60c888f3415fa055452090518446f19342aedee27b579e71ac0f30c78eb3f7b92c7a8d5dc150e8"}, {&(0x7f00000006c0)="6332cbb8be79059aebce6e99cc607104da1d165d5e7db168785674bcd5f2e7b1789b7e9548a97e313a3dbd9770bd514043f0795f805a0a08f3e31d0330ab5576843981b62a330400a631e64675f96869c1ee32700abecd2619e8080c9a3701660f0b5dbd7aa4ae09d03a3936eb1fedbd3e042b9b283c09ef4c00e002c7560988cf35169a2c91ff0ccf21f33cbcf84f3d7d3fe4707fe79063c5d031b490773af60676677e060a42bd906952d5db342f5f5242aed820bbbc423adca7077610508062dbf536243ff62b76b4e5fc57fb7994db90400146915f3140fd87dcd59b98eb7746049f2eefdba510fa50cd95c8d67a3dc74e58c8f249"}, {&(0x7f00000007c0)="334f7982ed354aa4c5e41be690c43eec18e1205e59968b9cc883bb37ad536fc5ec55460c673963c329c102f7f46c8c0ad617d019f5473663878a23928520213d160ecba2603c601f23482a9c1dfeef1cea42bbb6ae68d1b7d62574b23edeb5fd8a166b186d3da11d7ca882a51465563a249dd51918b0"}, {&(0x7f0000000840)="aaa559ba3133d020198d8a147bac1b3f89b539a21ff13f90fd22280930f3ccec2ca318d604212284db7be9aae74f8d1841874aab86f0e8c97fb60dee720f704aba50149dc8c5c44518e0a69462abee5341c566"}, {&(0x7f00000008c0)="e62409ed5320b63921b2f6b8cf2e5046546f9dbfc8fac14fa21935c8142ac3624ee156f16e56f77c1f12934b8038f674d52e05d8cd8f7fc92c263ce975c4c8b19e6fd31e8283c81d44d3d554f012a2a715f05e1bd085a9a187f9ba7b80a307223a9dcf68354dde56fb68c65b62bf7d60cd6a766d15398698baa9781e654164039c94b47f77b29003eed21b025717ab5cb16cd2f315ae119a9c70949f7a4c29ad24975777dc1c475ab77bdb26340e8cbbcbf7fa90bdcb904b09db9c53238bf46ff06890d6deca586b267ac0e3"}, {&(0x7f00000009c0)="030e43c0a9789e8d697482165fa7197c360768f9d4e3526cd581fd22005570c46ff9f564b7b773fd7d6c2dc45fff1e6e03fefb3037ce64d366d6897b7ece551cd2ace9eb5ff7dbf0eb50bcdf88b8dcfd723a902b960f0678013412991d5878f094940271ce2c655c6de49d199e8e3dc860c7aa0a3a072ce1c1770447f7a6b7ffa559a6e6e36e02e5a3137af7144a1c89568d12485995"}], 0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="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"]}, 0xffff}], 0x124d520c6717e71, 0x0) [ 1664.059498] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.3'. 14:22:14 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000180)='\x00', 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) fcntl$setlease(r0, 0x400, 0x1) fcntl$setown(r0, 0x8, 0x0) readahead(0xffffffffffffffff, 0x0, 0x0) execveat(r0, &(0x7f0000000500)='\x00', 0x0, 0x0, 0x1000) socket$nl_route(0x10, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000080)={0xffffffffffffffff}, 0x113, 0x100d}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r1, &(0x7f0000000380)={0xb, 0x10, 0xfa00, {&(0x7f0000000200), r2, 0x7}}, 0x18) fchdir(0xffffffffffffffff) ioctl$EVIOCGKEYCODE(0xffffffffffffffff, 0x80084504, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) getpid() sched_getattr(0x0, 0x0, 0x0, 0x0) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c) ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x6685) ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r1, &(0x7f0000000040)={0x10}) execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080), &(0x7f00000003c0)=[&(0x7f0000000140)='vmnet0vboxnet0[}systemwlan0user{\x00', &(0x7f00000001c0)=':\\selinux#[-(\\wlan1\\%@-!\x00', 0x0, &(0x7f0000000300)='wlan1(!(,&{em0\xeb\x00', &(0x7f0000000340)='ppp0\x00']) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x0) 14:22:14 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000bd7000)={&(0x7f0000c07e98)=ANY=[@ANYBLOB="000000000000000000000000000000000000000033000000ffffffff0000000000000000000000000000000000000000000000000000000000000000002949000000000000000000000000000000000000711500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020001007d00000000000000480001006d64350000000000000000000019000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000"], 0x1}}, 0x0) 14:22:14 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000280)='cgroup.controllers\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl(r1, 0xb2cb, &(0x7f0000000080)="4fe99df03c123f3155ece45403956bf10b090b41efc81b98f434e482240c71ffb761ac9fb036bcc31cc0936e4032cbadc05366782809b1a3633ac59209e83b0c4852") sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190009030000000000000000ac1414bb000800000000000000000000ff02eb3600000000000000000000000100000000000000000a00008000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xb8}}, 0x0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f00000004c0)={0x3, [0x0, 0x0, 0x0]}, &(0x7f0000000500)=0x10) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r3, 0x84, 0x6c, &(0x7f0000000540)={r5, 0xf4, "59321d97f520db0886cb03ce57e3c401bdaf94ded625a5fa495ac36894706a76d5f2a866e410edc0564169f017ed234d8e69ed756b6762a809c8ea38da4ac6a90bd5778ca2b3527b5c34dcb0ceb7f63f082539d27fa7139bef3e98d226190c288c94ba6828002feddddd6859c3b533b0fca91f5db435d7f1a3fb71c9d11a22cfd8dab4ed825eaff2155014bb91fec3e901840293b0a10824b9467de2377f62c6374eb99db59b3a3db063ef9b596e5212670fc590798fa8f96fc53834e5e79398ffa74fc4ec388a65e3b54ed0db7ab774cd52baac54f22312ec2de6d4d37e602fe47fa951d79246adfe6e08e91ec2890de217b75c"}, &(0x7f0000000640)=0xfc) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000680)={0x43, 0x1}, 0x10) sendmsg$IPVS_CMD_GET_SERVICE(r2, &(0x7f0000000480)={&(0x7f00000002c0), 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0xcc, r4, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x100}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_DEST={0x50, 0x2, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x8}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x7fff}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x8000}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x3}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x10001}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x1ff}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@local}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x400}, @IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0xe07}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x3}]}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x2a}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x15}, 0x800) 14:22:14 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee4050c00000f0000008bc36f7d79ce3263dac37b7403242189c609", 0x23}], 0x1}, 0x0) [ 1664.572303] syz-executor.1 invoked oom-killer: gfp_mask=0x7200c2(GFP_HIGHUSER|__GFP_ACCOUNT), order=0, oom_score_adj=0 [ 1664.584288] CPU: 1 PID: 12703 Comm: syz-executor.1 Not tainted 5.0.0-rc6+ #70 [ 1664.591582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1664.600960] Call Trace: [ 1664.603569] dump_stack+0x172/0x1f0 [ 1664.607220] dump_header+0x10f/0xb6c [ 1664.610960] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1664.616114] ? ___ratelimit+0x60/0x595 [ 1664.620019] ? do_raw_spin_unlock+0x57/0x270 [ 1664.624461] oom_kill_process.cold+0x10/0x6f5 [ 1664.628992] ? task_will_free_mem+0x139/0x6e0 [ 1664.633525] out_of_memory+0x79a/0x1280 [ 1664.637517] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1664.642636] ? oom_killer_disable+0x280/0x280 [ 1664.647150] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1664.652279] mem_cgroup_out_of_memory+0x99/0xe0 [ 1664.656978] ? memcg_memory_event+0x40/0x40 [ 1664.661337] ? _raw_spin_unlock+0x2d/0x50 [ 1664.665501] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1664.670618] try_charge+0xfec/0x1570 [ 1664.674347] ? find_held_lock+0x35/0x130 [ 1664.678427] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1664.683286] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 1664.688140] ? find_held_lock+0x35/0x130 [ 1664.692220] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 1664.697098] memcg_kmem_charge_memcg+0x7c/0x130 [ 1664.701784] ? memcg_kmem_put_cache+0xb0/0xb0 [ 1664.706318] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 1664.711178] memcg_kmem_charge+0x13b/0x340 [ 1664.715438] __alloc_pages_nodemask+0x437/0x710 [ 1664.720132] ? __alloc_pages_slowpath+0x2900/0x2900 [ 1664.725167] ? ___might_sleep+0x163/0x280 [ 1664.729324] ? copyin+0xb5/0x100 [ 1664.732681] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1664.738210] alloc_pages_current+0x107/0x210 [ 1664.742611] pipe_write+0xa65/0xfb0 [ 1664.746235] __vfs_write+0x613/0x8e0 [ 1664.749945] ? kernel_read+0x120/0x120 [ 1664.753827] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1664.759362] ? rw_verify_area+0x118/0x360 [ 1664.763511] vfs_write+0x20c/0x580 [ 1664.767043] ksys_write+0xea/0x1f0 [ 1664.770597] ? __ia32_sys_read+0xb0/0xb0 [ 1664.774664] ? do_syscall_64+0x26/0x610 [ 1664.778653] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1664.784017] ? do_syscall_64+0x26/0x610 [ 1664.788000] __x64_sys_write+0x73/0xb0 [ 1664.791878] do_syscall_64+0x103/0x610 [ 1664.795768] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1664.800960] RIP: 0033:0x457e29 [ 1664.804139] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1664.823030] RSP: 002b:00007fd8c7971c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1664.830752] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457e29 [ 1664.838035] RDX: 0000000100000073 RSI: 00000000200001c0 RDI: 0000000000000005 [ 1664.845323] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1664.852609] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd8c79726d4 [ 1664.859891] R13: 00000000004c3be0 R14: 00000000004dc3d0 R15: 00000000ffffffff [ 1664.868260] memory: usage 307200kB, limit 307200kB, failcnt 9947 [ 1664.875076] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1664.882988] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1664.889822] Memory cgroup stats for /syz1: cache:0KB rss:257184KB rss_huge:227328KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:8KB active_anon:257276KB inactive_file:4KB active_file:0KB unevictable:0KB [ 1664.911769] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=12702,uid=0 [ 1664.929850] Memory cgroup out of memory: Kill process 12702 (syz-executor.1) score 140 or sacrifice child [ 1664.941622] Killed process 12702 (syz-executor.1) total-vm:72844kB, anon-rss:8020kB, file-rss:34944kB, shmem-rss:0kB 14:22:15 executing program 1: r0 = perf_event_open(&(0x7f0000000300)={0x400000001, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f000094f000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) r1 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xb4d, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0x100000073) ioctl$FS_IOC_GETFLAGS(r3, 0x80086601, &(0x7f0000000040)) read(r2, &(0x7f0000000200)=""/250, 0x50c7e3e3) 14:22:15 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000000)=[{0x80000006}]}, 0x10) r1 = socket$pppoe(0x18, 0x1, 0x0) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x7, 0x7, 0x8000}, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) connect$pppoe(r1, &(0x7f0000000040)={0x18, 0x0, {0x2, @local, 'batadv0\x00'}}, 0x1e) sendmmsg(r1, &(0x7f0000005b40), 0x40000000000014d, 0x0) 14:22:15 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000bd7000)={&(0x7f0000c07e98)=ANY=[@ANYBLOB="000000000000000000000000000000000000000033000000ffffffff0000000000000000000000000000000000000000000000000000000000000000002949000000000000000000000000000000000000157100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020001007d00000000000000480001006d64350000000000000000000019000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000"], 0x1}}, 0x0) 14:22:15 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee4050c00000f0000008bc36f7d79ce3263dac37b7403242189c609", 0x23}], 0x1}, 0x0) 14:22:15 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="0af51f023c123f3188a070") sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000140)=ANY=[@ANYBLOB="b80000001900093dea57a2d24c6b73d95515030000000000000000ac1414bb000000000000000000f4fffffe020000000000000000000000000a00008000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0xb8}}, 0x0) 14:22:15 executing program 3: r0 = dup(0xffffffffffffff9c) ioctl$KDGKBLED(r0, 0x4b64, &(0x7f00000001c0)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000040)=[0x100000000, 0x6]) r3 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$TCSETS(r3, 0x40045431, 0x0) syz_open_pts(0xffffffffffffffff, 0x0) ioctl$VIDIOC_G_AUDIO(r0, 0x80345621, &(0x7f0000000000)) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$netlink_NETLINK_RX_RING(r0, 0x10e, 0x6, &(0x7f0000000080)={0x1c0000000000000, 0x96, 0x4, 0x5}, 0x10) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) nanosleep(0x0, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="2900000006004000000005000000000002000000000000000100000000000000000080000000000000"], 0x29) ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, 0x0) recvfrom$inet6(r2, &(0x7f0000001840)=""/31, 0x1f, 0x0, 0x0, 0x0) sendto$inet6(r2, &(0x7f0000000500)="2ff6508a80367565414cb3bddeb37393bd3e2535e472e5e59baedfdd1d0ac1401a2138346b495b5dbff9d149f08a72eb767bc60fc316eb39ff6bac6ee61b9b5218633bff8baa12d376c07df8d83b", 0x4e, 0x4000000, 0x0, 0x0) r5 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r5, 0x0, 0x485, 0x0, 0x0) accept4(r2, &(0x7f0000000280)=@can, &(0x7f0000000200)=0x80, 0x80000) sendto$inet6(r0, &(0x7f0000000140)="beea619b169e6322bd4a802e1e6b4b644331f704f7e404d90f8909b1a1a7bf0ab1a26bfae0a721b79774480cebcf9adbea5501c761e7c24e5056d67750bc6e5bca98adf336eadd7293b4d859aae02be43c6e59f2678548aa7f38a2dadc0de9496f1a2123d291ce67080e1ecee7edd9d935a402c30c12c04e2da9fdac5e8d", 0xffffffffffffff6b, 0x0, 0x0, 0x0) [ 1664.971237] oom_reaper: reaped process 12702 (syz-executor.1), now anon-rss:0kB, file-rss:34840kB, shmem-rss:0kB 14:22:15 executing program 2: socketpair(0x11, 0xa, 0xf0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000140)={0x274, r1, 0x208, 0x70bd28, 0x25dfdb7c, {}, [@TIPC_NLA_MON={0x34, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x101}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x10000}]}, @TIPC_NLA_MEDIA={0xe8, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x101}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x400}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x203}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x800}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x266}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffffffffc9f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffffffffff8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xbc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}]}, @TIPC_NLA_NODE={0x1c, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xc31}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0xa0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x0, @remote, 0xfffffffffffffffb}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x1f, @ipv4={[], [], @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x53c}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @local}}, {0x14, 0x2, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @empty}}, {0x14, 0x2, @in={0x2, 0x4e23, @multicast2}}}}]}, @TIPC_NLA_BEARER={0x28, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x40}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}]}, @TIPC_NLA_NET={0x24, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x5}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}]}, @TIPC_NLA_MON={0x3c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x20}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x16}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x200}]}]}, 0x274}, 0x1, 0x0, 0x0, 0x8800}, 0x4000000000004880) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000100)="0af51f023c123f3188a070") sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="b8000000190009030000000000000000ac1414bb000000000000000000000000ff02000000000000000000000000000100000000000000000a00008000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001010000000000000000000000000000190000000000000000000000000000000000000000000000000000000000"], 0xb8}}, 0x0) 14:22:15 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee4050c00000f0000008bc36f7d79ce3263dac37b7403242189c609", 0x23}], 0x1}, 0x0) [ 1665.162479] net_ratelimit: 16 callbacks suppressed [ 1665.162487] protocol 88fb is buggy, dev hsr_slave_0 [ 1665.162493] protocol 88fb is buggy, dev hsr_slave_0 [ 1665.162558] protocol 88fb is buggy, dev hsr_slave_1 [ 1665.167545] protocol 88fb is buggy, dev hsr_slave_1 [ 1665.187817] protocol 88fb is buggy, dev hsr_slave_0 [ 1665.192986] protocol 88fb is buggy, dev hsr_slave_1 [ 1665.198200] protocol 88fb is buggy, dev hsr_slave_0 [ 1665.203365] protocol 88fb is buggy, dev hsr_slave_1 14:22:15 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000bd7000)={&(0x7f0000c07e98)=ANY=[@ANYBLOB="000000000000000000000000000000000000000033000000ffffffff000000000000000000000000000000000000000000000000000000000000000000294900000000000000000000000000000000000000f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020001007d00000000000000480001006d64350000000000000000000019000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000"], 0x1}}, 0x0) [ 1665.208506] protocol 88fb is buggy, dev hsr_slave_0 [ 1665.213656] protocol 88fb is buggy, dev hsr_slave_1 14:22:15 executing program 3: getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in6, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@mcast1}}, &(0x7f0000000440)=0xe8) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000040)='./file1/file0\x00', 0x88b4, 0x3, &(0x7f00000002c0)=[{&(0x7f0000000100), 0x0, 0x9588}, {&(0x7f0000000140)="02d5ee64b70151becd1b947ad71e361a84398f8965c3934cc149f52c9af29b63730dc504519874b25fe73dc78d0e84fd2107991ef77c9238badfce18cbcc6d0a22647d7715b3cd41f645e671b3a8615b25130e522056fb18272972b54342e373a862b46ed98932f448ca5f81b005a9fe35bdecb51d144396c36ada14e642ac031838d05a0cf2a4ea25c790e6e82e291e7fcc72aba8825dd87097fdbae6ebd19f89228b46f27b8757d64a9708868ab7e1bd6d29651398c602246010db2d33", 0xbe, 0xffffffffffffffc0}, {&(0x7f0000000200)="4e797b2be39a3556178560333b9e7f1e390916adf1f1251471bb4502e1a19c5d072bede1e0297385", 0x28}], 0x50000, &(0x7f0000000480)={[{@jqfmt_vfsv1='jqfmt=vfsv1'}, {@nodiscard='nodiscard'}, {@heap='heap'}], [{@smackfstransmute={'smackfstransmute', 0x3d, 'minix\x00'}}, {@fsuuid={'fsuuid', 0x3d, {[0x63, 0x73, 0x37, 0x66, 0x36, 0x65, 0x65, 0x38], 0x2d, [0x0, 0x33, 0x0, 0x61], 0x2d, [0x36, 0x36, 0x36, 0x73], 0x2d, [0x64, 0x77, 0x36, 0x77], 0x2d, [0x75, 0x35, 0x62, 0x33, 0x34, 0x67, 0x64, 0x33]}}}, {@defcontext={'defcontext', 0x3d, 'user_u'}}, {@subj_role={'subj_role', 0x3d, 'minix\x00'}}, {@euid_gt={'euid>', r0}}, {@defcontext={'defcontext', 0x3d, 'root'}}]}) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file1\x00', 0x6c000000, 0x1, &(0x7f0000000240)=[{&(0x7f0000000280)="604884e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}], 0x0, 0x0) 14:22:15 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee4050c00000f0000008bc36f7d79ce3263dac37b7403242189c609", 0x23}], 0x1}, 0x0) 14:22:15 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000bd7000)={&(0x7f0000c07e98)=ANY=[@ANYBLOB="000000000000000000000000000000000000000033000000ffffffff0000000000000000000000000000000000000000000000000000000000000000002949000000000000000000000000000000000000fffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020001007d00000000000000480001006d64350000000000000000000019000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000"], 0x1}}, 0x0) [ 1665.677212] syz-executor.1 invoked oom-killer: gfp_mask=0x7200c2(GFP_HIGHUSER|__GFP_ACCOUNT), order=0, oom_score_adj=0 [ 1665.688355] CPU: 1 PID: 12766 Comm: syz-executor.1 Not tainted 5.0.0-rc6+ #70 [ 1665.695642] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1665.705004] Call Trace: [ 1665.707613] dump_stack+0x172/0x1f0 [ 1665.711291] dump_header+0x10f/0xb6c [ 1665.715037] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1665.720161] ? ___ratelimit+0x60/0x595 [ 1665.724069] ? do_raw_spin_unlock+0x57/0x270 [ 1665.728493] oom_kill_process.cold+0x10/0x6f5 [ 1665.733008] ? task_will_free_mem+0x139/0x6e0 [ 1665.737526] out_of_memory+0x79a/0x1280 [ 1665.741528] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1665.746660] ? oom_killer_disable+0x280/0x280 [ 1665.751183] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1665.756307] mem_cgroup_out_of_memory+0x99/0xe0 [ 1665.760992] ? memcg_memory_event+0x40/0x40 [ 1665.765336] ? _raw_spin_unlock+0x2d/0x50 [ 1665.769495] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1665.774611] try_charge+0xfec/0x1570 [ 1665.778333] ? find_held_lock+0x35/0x130 [ 1665.782446] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1665.787292] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 1665.792120] ? find_held_lock+0x35/0x130 [ 1665.796170] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 1665.801029] memcg_kmem_charge_memcg+0x7c/0x130 [ 1665.805708] ? memcg_kmem_put_cache+0xb0/0xb0 [ 1665.810210] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 1665.815066] memcg_kmem_charge+0x13b/0x340 [ 1665.819310] __alloc_pages_nodemask+0x437/0x710 [ 1665.823969] ? __alloc_pages_slowpath+0x2900/0x2900 [ 1665.828975] ? ___might_sleep+0x163/0x280 [ 1665.833111] ? copyin+0xb5/0x100 [ 1665.836474] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1665.842002] alloc_pages_current+0x107/0x210 [ 1665.846398] pipe_write+0xa65/0xfb0 [ 1665.850022] __vfs_write+0x613/0x8e0 [ 1665.853724] ? kernel_read+0x120/0x120 [ 1665.857619] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1665.863166] ? rw_verify_area+0x118/0x360 [ 1665.867338] vfs_write+0x20c/0x580 [ 1665.870868] ksys_write+0xea/0x1f0 [ 1665.874427] ? __ia32_sys_read+0xb0/0xb0 [ 1665.878491] ? do_syscall_64+0x26/0x610 [ 1665.882470] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1665.887864] ? do_syscall_64+0x26/0x610 [ 1665.891855] __x64_sys_write+0x73/0xb0 [ 1665.895746] do_syscall_64+0x103/0x610 [ 1665.899627] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1665.904800] RIP: 0033:0x457e29 [ 1665.907993] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1665.926888] RSP: 002b:00007fd8c7971c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1665.934601] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457e29 [ 1665.941860] RDX: 0000000100000073 RSI: 00000000200001c0 RDI: 0000000000000005 [ 1665.949117] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1665.956383] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd8c79726d4 [ 1665.963648] R13: 00000000004c3be0 R14: 00000000004dc3d0 R15: 00000000ffffffff [ 1665.972069] memory: usage 307200kB, limit 307200kB, failcnt 9998 [ 1665.978909] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1665.986484] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1665.993007] Memory cgroup stats for /syz1: cache:0KB rss:257212KB rss_huge:227328KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:8KB active_anon:257332KB inactive_file:4KB active_file:0KB unevictable:0KB [ 1666.014204] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=12763,uid=0 14:22:16 executing program 1: r0 = perf_event_open(&(0x7f0000000300)={0x400000001, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f000094f000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffff9c, 0xc00c642d, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = msgget$private(0x0, 0x100) msgctl$IPC_RMID(r3, 0x0) write(r2, &(0x7f00000001c0), 0x100000073) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040)='nbd\x00') sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x108000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="000127bd7000ffdbdf25020400000c00030000800000000000000c00060003000000000000000c00080008000000000000000c00070008000100", @ANYRES32=r1, @ANYBLOB="2400070008000100", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r1, @ANYBLOB="0c000800a40d000000000000"], 0x74}, 0x1, 0x0, 0x0, 0x90}, 0x4000014) read(r1, &(0x7f0000000680)=""/250, 0x21e) 14:22:16 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee4050c00000f0000008bc36f7d79ce3263dac37b7403242189c609", 0x23}], 0x1}, 0x0) 14:22:16 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000000)=[{0x80000006, 0x0, 0x9}]}, 0x10) r1 = socket$pppoe(0x18, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f0000000080)=0x8, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) connect$pppoe(r1, &(0x7f0000000040)={0x18, 0x0, {0x2, @local, 'batadv0\x00'}}, 0x1e) sendmmsg(r1, &(0x7f0000005b40), 0x40000000000014d, 0x0) 14:22:16 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') r3 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x0, 0x2) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000140)={0xd000, 0x10e000}) sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)={0x20, r2, 0x435, 0x0, 0x0, {0xb}, [@TIPC_NLA_MEDIA={0xc, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x20}}, 0x0) 14:22:16 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000bd7000)={&(0x7f0000c07e98)=ANY=[@ANYBLOB="000000000000000000000000000000000000000033000000ffffffff0000000000000000000000000000000000000000000000000000000000000000002949000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020001007d00000000000000480001006d64350000000000000000000019000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000"], 0x1}}, 0x0) 14:22:16 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="0af51f023c123f3188a070") sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="b8000000190009030000000000000000ac1414bb000000000000002000000000ff02000000000000000000000000000100000000000000000a00008000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0xb8}}, 0x0) [ 1666.029372] Memory cgroup out of memory: Kill process 12763 (syz-executor.1) score 140 or sacrifice child [ 1666.039341] Killed process 12763 (syz-executor.1) total-vm:72712kB, anon-rss:8020kB, file-rss:34944kB, shmem-rss:0kB [ 1666.058408] oom_reaper: reaped process 12763 (syz-executor.1), now anon-rss:0kB, file-rss:34832kB, shmem-rss:0kB 14:22:16 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee4050c00000f0000008bc36f7d79ce3263dac37b7403242189c609", 0x23}], 0x1}, 0x0) 14:22:16 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000bd7000)={&(0x7f0000c07e98)=ANY=[@ANYBLOB="000000000000000000000000000000000000000033000000ffffffff0000000000000000000000000000000000000000000000000000000000000000002949000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020001007d00000000000000480001006d64350000000000000000000019000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000"], 0x1}}, 0x0) 14:22:16 executing program 2: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) signalfd4(r0, &(0x7f0000000000), 0x8, 0x80000) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000002c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$KDGETMODE(r1, 0x4b3b, &(0x7f0000000300)) socket$kcm(0x29, 0x2, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/checkreqprot\x00', 0x420002, 0x0) write$P9_RATTACH(r3, &(0x7f00000000c0)={0x14, 0x69, 0x2, {0x0, 0x2, 0x7}}, 0x14) r4 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000240)={0x0, 0x7}, &(0x7f0000000280)=0x8) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f0000000380)={r5, @in6={{0xa, 0x4e24, 0xffffffffffffffff, @empty}}}, 0x84) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r6, 0x1000008912, &(0x7f0000000100)="0af51f023c123f3188a070") sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000140)=ANY=[@ANYBLOB="b8000000190009030000000000000000ac1414bb000000000000000000000000ff02000000000000000000000000000100000000000000000a00008000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff000000000000000000000000000000010000a1a8d1b2c0c8104a1e1dc711302847a500000000000000009e0fb3cbabb0be231446e36fd16f2190947122bdd9f477712e54291b7dc096922a3a4f84c32d51d917b577"], 0xb8}}, 0x0) 14:22:16 executing program 3: r0 = perf_event_open(&(0x7f0000000300)={0x400000001, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f000094f000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) r1 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xb4d, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0x100000073) ioctl$FS_IOC_GETFLAGS(r3, 0x80086601, &(0x7f0000000040)) read(r2, &(0x7f0000000200)=""/250, 0x50c7e3e3) [ 1666.228345] __nla_parse: 6 callbacks suppressed [ 1666.228354] netlink: 7 bytes leftover after parsing attributes in process `syz-executor.4'. 14:22:16 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee4050c00000f0000008bc36f7d79ce3263dac37b7403242189c609", 0x23}], 0x1}, 0x0) 14:22:16 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000000)=[{0x80000006}]}, 0x10) write$binfmt_aout(r0, &(0x7f0000000200)={{0x1cc, 0x1, 0x8001, 0x287, 0x1e7, 0xdf, 0x39d, 0x6761}, "f7ca79cae9c04b5ab162493f17b892a7932437b944de94b233377a6b5fa475dc9b9fda9cf32a9172701793b404132ebd1ed1336397976690956c82099620ad624a430769", [[], [], [], [], [], [], [], []]}, 0x864) r1 = socket$pppoe(0x18, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x20000, 0x0) epoll_pwait(r3, &(0x7f00000000c0)=[{}, {}, {}, {}, {}, {}], 0x6, 0x100000000, &(0x7f0000000140)={0x100}, 0x8) connect$pppoe(r1, &(0x7f0000000040)={0x18, 0x0, {0x2, @local, 'batadv0\x00'}}, 0x1e) sendmmsg(r1, &(0x7f0000005b40), 0x40000000000014d, 0x0) [ 1666.409860] netlink: 7 bytes leftover after parsing attributes in process `syz-executor.4'. 14:22:17 executing program 1: r0 = perf_event_open(&(0x7f0000000300)={0x400000001, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f000094f000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffff9c, 0xc00c642d, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0x100000073) r3 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) r4 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$instantiate(0xc, r3, &(0x7f00000000c0)=@encrypted_update={'update ', 'ecryptfs', 0x20, 'trusted:'}, 0x19, r4) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000400)='/selinux/context\x00', 0x2, 0x0) r5 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000180)='/dev/capi20\x00', 0x0, 0x0) writev(r5, &(0x7f00000001c0)=[{&(0x7f0000000380)="ff302bf4175365163e9208dca2f1cf7929fd9cadfc3abf41973697b286689a090bcfdb95bea2c43442fa4a47bb372654c18c69d4bb3efdecd72bf4424d73888dec70c43c1b3f01fcb1e9260d7359079784b6f3cfd80fd3420f0d60a478c0ec4e93b8c91a37c1c9f08a2383cd6eef45b8a5eb33021c", 0x75}], 0x1) 14:22:17 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000bd7000)={&(0x7f0000c07e98)=ANY=[@ANYBLOB="000000000000000000000000000000000000000033000000ffffffff0000000000000000000000000000000000000000000000000000000000000000002949000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020001007d00000000000000480001006d64350000000000000000000019000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000"], 0x1}}, 0x0) 14:22:17 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="0af51f023c123f3188a070") r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x0, 0x0) r3 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000140)={0x7002, &(0x7f0000000080), 0x8, r3, 0x2}) close(r1) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f00000008c0)=@updpolicy={0xb8, 0x19, 0x309, 0x0, 0x0, {{@in=@remote, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x80}}}, 0xb8}}, 0x0) 14:22:17 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee4050c00000f0000008bc36f7d79ce3263dac37b7403242189c609", 0x23}], 0x1}, 0x0) 14:22:17 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000040)='/dev/capi20\x00', 0x0, 0x0) openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x480000, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0xc10c5541, &(0x7f0000000200)={0x8, 0x8, 0x7, 0x0, 0x0, [], [], [], 0x80}) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x8a600, 0x0) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f00000000c0)=0x2, 0x4) ioctl$CAPI_MANUFACTURER_CMD(r1, 0xc0044306, 0x0) 14:22:17 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000000)=[{0x80000006}]}, 0x10) r1 = socket$pppoe(0x18, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) connect$pppoe(r1, &(0x7f0000000040)={0x18, 0x0, {0x2, @local, 'batadv0\x00'}}, 0x2fd) sendmmsg(r1, &(0x7f0000005b40), 0x40000000000014d, 0x0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm_plock\x00', 0x101000, 0x0) 14:22:17 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000bd7000)={&(0x7f0000c07e98)=ANY=[@ANYBLOB="000000000000000000000000000000000000000033000000ffffffff0000000000000000000000000000000000000000000000000000000000000000002949000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020001007d00000000000000480001006d64350000000000000000000019000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000"], 0x1}}, 0x0) 14:22:17 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee4050c00000f0000008bc36f7d79ce3263dac37b7403242189c609", 0x23}], 0x1}, 0x0) [ 1667.007479] netlink: 7 bytes leftover after parsing attributes in process `syz-executor.4'. 14:22:17 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="0af51f023c123f3188a070") sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f00000008c0)=@updpolicy={0xb8, 0x19, 0x309, 0x0, 0x0, {{@in=@remote, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x80}}}, 0xb8}}, 0x0) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x10000, 0x0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_BEARER_NAMES(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r3, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x80) 14:22:17 executing program 3: syz_emit_ethernet(0x140, &(0x7f0000000000)={@local, @random="8a37962a294f", [], {@ipv6={0x86dd, {0x0, 0x6, "110c11", 0x30, 0x21, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x6, [], {0x41, 0x6, "cb155d", 0x0, 0x0, 0x0, @mcast2, @dev}}}}}}}, 0x0) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x4, 0x10010, r0, 0x0) setxattr$security_capability(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='security.capability\x00', &(0x7f0000000180)=@v1={0x1000000, [{0xfffffffffffffff8, 0x7}]}, 0xc, 0x1) pread64(r0, &(0x7f0000000080)=""/74, 0x4a, 0x0) 14:22:17 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000000)=[{0x80000006}]}, 0x10) r1 = socket$pppoe(0x18, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x6, 0x202000) bind$x25(r3, &(0x7f00000000c0)={0x9, @remote={[], 0x1}}, 0x12) connect$pppoe(r1, &(0x7f0000000040)={0x18, 0x0, {0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 'batadv0\x00'}}, 0x1e) sendmmsg(r1, &(0x7f0000005b40), 0x40000000000014d, 0x0) [ 1667.144343] netlink: 7 bytes leftover after parsing attributes in process `syz-executor.4'. 14:22:17 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000bd7000)={&(0x7f0000c07e98)=ANY=[@ANYBLOB="000000000000000000000000000000000000000033000000ffffffff0000000000000000000000000000000000000000000000000000000000000000002949000000000000000000000000000000000000000015710000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020001007d00000000000000480001006d64350000000000000000000019000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000"], 0x1}}, 0x0) [ 1667.506892] syz-executor.1 invoked oom-killer: gfp_mask=0x7200c2(GFP_HIGHUSER|__GFP_ACCOUNT), order=0, oom_score_adj=0 [ 1667.517898] CPU: 0 PID: 12853 Comm: syz-executor.1 Not tainted 5.0.0-rc6+ #70 [ 1667.525186] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1667.534530] Call Trace: [ 1667.537131] dump_stack+0x172/0x1f0 [ 1667.540773] dump_header+0x10f/0xb6c [ 1667.544480] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1667.549576] ? ___ratelimit+0x60/0x595 [ 1667.553459] ? do_raw_spin_unlock+0x57/0x270 [ 1667.557873] oom_kill_process.cold+0x10/0x6f5 [ 1667.562373] ? task_will_free_mem+0x139/0x6e0 [ 1667.566871] out_of_memory+0x79a/0x1280 [ 1667.570866] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1667.575982] ? oom_killer_disable+0x280/0x280 [ 1667.580475] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1667.585582] mem_cgroup_out_of_memory+0x99/0xe0 [ 1667.590298] ? memcg_memory_event+0x40/0x40 [ 1667.594621] ? _raw_spin_unlock+0x2d/0x50 [ 1667.598782] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1667.603897] try_charge+0xfec/0x1570 [ 1667.607653] ? find_held_lock+0x35/0x130 [ 1667.611718] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1667.616560] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 1667.621401] ? find_held_lock+0x35/0x130 [ 1667.625467] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 1667.630330] memcg_kmem_charge_memcg+0x7c/0x130 [ 1667.635022] ? memcg_kmem_put_cache+0xb0/0xb0 [ 1667.639607] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 1667.644476] memcg_kmem_charge+0x13b/0x340 [ 1667.648814] __alloc_pages_nodemask+0x437/0x710 [ 1667.653487] ? __alloc_pages_slowpath+0x2900/0x2900 [ 1667.658513] ? ___might_sleep+0x163/0x280 [ 1667.662667] ? copyin+0xb5/0x100 [ 1667.666036] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1667.671599] alloc_pages_current+0x107/0x210 [ 1667.676011] pipe_write+0xa65/0xfb0 [ 1667.679647] __vfs_write+0x613/0x8e0 [ 1667.683362] ? kernel_read+0x120/0x120 [ 1667.687251] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1667.692799] ? rw_verify_area+0x118/0x360 [ 1667.696950] vfs_write+0x20c/0x580 [ 1667.700547] ksys_write+0xea/0x1f0 [ 1667.704106] ? __ia32_sys_read+0xb0/0xb0 [ 1667.708173] ? do_syscall_64+0x26/0x610 [ 1667.712268] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1667.717634] ? do_syscall_64+0x26/0x610 [ 1667.721625] __x64_sys_write+0x73/0xb0 [ 1667.725530] do_syscall_64+0x103/0x610 [ 1667.729442] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1667.734628] RIP: 0033:0x457e29 [ 1667.737819] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1667.756719] RSP: 002b:00007fd8c7971c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1667.764431] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457e29 [ 1667.771697] RDX: 0000000100000073 RSI: 00000000200001c0 RDI: 0000000000000005 [ 1667.778982] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1667.786263] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd8c79726d4 [ 1667.793530] R13: 00000000004c3be0 R14: 00000000004dc3d0 R15: 00000000ffffffff [ 1667.803023] memory: usage 307200kB, limit 307200kB, failcnt 10141 [ 1667.809313] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1667.816306] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1667.822517] Memory cgroup stats for /syz1: cache:0KB rss:257172KB rss_huge:227328KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:8KB active_anon:257340KB inactive_file:4KB active_file:0KB unevictable:0KB [ 1667.843342] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=12850,uid=0 14:22:18 executing program 1: r0 = perf_event_open(&(0x7f0000000300)={0x400000001, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f000094f000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffff9c, 0xc00c642d, 0x0) mmap$perf(&(0x7f0000ff6000/0x8000)=nil, 0x8000, 0x1000002, 0x4010, r0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0x100000073) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) 14:22:18 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet_udplite(0x2, 0x2, 0x88) bind$inet(r0, &(0x7f0000000500)={0x2, 0x4e20, @local}, 0x10) ioctl(r1, 0x1000008912, &(0x7f0000000100)="0af51f023c123f3188a070") ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) r2 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x401, 0x30402) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000440)={0xffffffffffffffff}, 0x13f, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r2, &(0x7f00000004c0)={0x5, 0x10, 0xfa00, {&(0x7f0000000240), r3, 0x2}}, 0x18) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e23, @remote}, 0x10) bind$isdn(r2, &(0x7f0000000080)={0x22, 0x100, 0x6, 0x7, 0x1}, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000140)=ANY=[@ANYBLOB="b8000000190009030000ff0100cc4d00ac1414bb004600000000000000000000ff02d18c00000000000000000000000100000000000000000a000080000000007cfd4f9518aeef9c298406578338f6d6d9dff88419296a6d55d2714a5c6078a4ad369fa110ffacc66cb6412bccc239c70dcd2f7cabdea9e87e", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0xb8}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 14:22:18 executing program 3: syz_emit_ethernet(0x140, &(0x7f0000000000)={@local, @random="8a37962a294f", [], {@ipv6={0x86dd, {0x0, 0x6, "110c11", 0x30, 0x21, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x6, [], {0x41, 0x6, "cb155d", 0x0, 0x0, 0x0, @mcast2, @dev}}}}}}}, 0x0) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x4, 0x10010, r0, 0x0) setxattr$security_capability(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='security.capability\x00', &(0x7f0000000180)=@v1={0x1000000, [{0xfffffffffffffff8, 0x7}]}, 0xc, 0x1) pread64(r0, &(0x7f0000000080)=""/74, 0x4a, 0x0) 14:22:18 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000bd7000)={&(0x7f0000c07e98)=ANY=[@ANYBLOB="000000000000000000000000000000000000000033000000ffffffff0000000000000000000000000000000000000000000000000000000000000000002949000000000000000000000000000000000000ffffff9e0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020001007d00000000000000480001006d64350000000000000000000019000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000"], 0x1}}, 0x0) 14:22:18 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee4050c00000f0000008bc36f7d79ce3263dac37b7403242189c609", 0x23}], 0x1}, 0x0) 14:22:18 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000000)=[{0x80000006}]}, 0x10) r1 = socket$pppoe(0x18, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) openat$vfio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vfio/vfio\x00', 0x400000, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000080), &(0x7f00000000c0)=0xc) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) connect$pppoe(r1, &(0x7f0000000040)={0x18, 0x0, {0x2, @local, 'batadv0\x00'}}, 0x1e) sendmmsg(r1, &(0x7f0000005b40), 0x40000000000014d, 0x0) [ 1667.858037] Memory cgroup out of memory: Kill process 12850 (syz-executor.1) score 140 or sacrifice child [ 1667.867936] Killed process 12850 (syz-executor.1) total-vm:72712kB, anon-rss:8020kB, file-rss:34944kB, shmem-rss:0kB [ 1667.888300] oom_reaper: reaped process 12850 (syz-executor.1), now anon-rss:0kB, file-rss:34828kB, shmem-rss:0kB 14:22:18 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000bd7000)={&(0x7f0000c07e98)=ANY=[@ANYBLOB="000000000000000000000000000000000000000033000000ffffffff0000000000000000000000000000000000000000000000000000000000000000002949000000000000000000000000000000000000fffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020001007d00000000000000480001006d64350000000000000000000019000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000"], 0x1}}, 0x0) 14:22:18 executing program 3: syz_emit_ethernet(0x140, &(0x7f0000000000)={@local, @random="8a37962a294f", [], {@ipv6={0x86dd, {0x0, 0x6, "110c11", 0x30, 0x21, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x6, [], {0x41, 0x6, "cb155d", 0x0, 0x0, 0x0, @mcast2, @dev}}}}}}}, 0x0) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x4, 0x10010, r0, 0x0) setxattr$security_capability(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='security.capability\x00', &(0x7f0000000180)=@v1={0x1000000, [{0xfffffffffffffff8, 0x7}]}, 0xc, 0x1) pread64(r0, &(0x7f0000000080)=""/74, 0x4a, 0x0) [ 1667.983145] netlink: 7 bytes leftover after parsing attributes in process `syz-executor.4'. 14:22:18 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$unix(0x1, 0x0, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r2, 0x0) accept4(r2, &(0x7f0000b17000)=@generic, &(0x7f0000dbd000)=0x80, 0x0) connect(r1, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) 14:22:18 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee4050c00000f0000008bc36f7d79ce3263dac37b7403242189c609", 0x23}], 0x1}, 0x0) 14:22:18 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000bd7000)={&(0x7f0000c07e98)=ANY=[@ANYBLOB="000000000000000000000000000000000000000033000000ffffffff000000000000000000000000000000000000000000000000000000000000000000294900000000000000000000000000000000000000f0ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020001007d00000000000000480001006d64350000000000000000000019000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000"], 0x1}}, 0x0) [ 1668.205001] netlink: 7 bytes leftover after parsing attributes in process `syz-executor.4'. 14:22:18 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/enforce\x00', 0x20003, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r1, 0xc0bc5310, &(0x7f0000000100)) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f00000000c0)={{0x2, 0x2, 0x0, 0x3, 0x100000001}}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000000)=[{0x80000006}]}, 0x10) r2 = socket$pppoe(0x18, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) connect$pppoe(r2, &(0x7f0000000040)={0x18, 0x0, {0x2, @local, 'batadv0\x00'}}, 0x1e) sendmmsg(r2, &(0x7f0000005b40), 0x40000000000014d, 0x0) [ 1668.281137] netlink: 7 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1668.499516] syz-executor.1 invoked oom-killer: gfp_mask=0x7200c2(GFP_HIGHUSER|__GFP_ACCOUNT), order=0, oom_score_adj=0 [ 1668.510482] CPU: 0 PID: 12888 Comm: syz-executor.1 Not tainted 5.0.0-rc6+ #70 [ 1668.517769] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1668.527127] Call Trace: [ 1668.529757] dump_stack+0x172/0x1f0 [ 1668.533413] dump_header+0x10f/0xb6c [ 1668.537162] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1668.542279] ? ___ratelimit+0x60/0x595 [ 1668.546183] ? do_raw_spin_unlock+0x57/0x270 [ 1668.550609] oom_kill_process.cold+0x10/0x6f5 [ 1668.555129] ? task_will_free_mem+0x139/0x6e0 [ 1668.559639] out_of_memory+0x79a/0x1280 [ 1668.563629] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1668.568759] ? oom_killer_disable+0x280/0x280 [ 1668.573276] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1668.578395] mem_cgroup_out_of_memory+0x99/0xe0 [ 1668.583104] ? memcg_memory_event+0x40/0x40 [ 1668.587463] ? _raw_spin_unlock+0x2d/0x50 [ 1668.591627] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1668.596737] try_charge+0xfec/0x1570 [ 1668.600473] ? find_held_lock+0x35/0x130 [ 1668.604585] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1668.609449] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 1668.614305] ? find_held_lock+0x35/0x130 [ 1668.618384] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 1668.623256] memcg_kmem_charge_memcg+0x7c/0x130 [ 1668.627949] ? memcg_kmem_put_cache+0xb0/0xb0 [ 1668.632478] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 1668.637343] memcg_kmem_charge+0x13b/0x340 [ 1668.641593] __alloc_pages_nodemask+0x437/0x710 [ 1668.646280] ? __alloc_pages_slowpath+0x2900/0x2900 [ 1668.651317] ? ___might_sleep+0x163/0x280 [ 1668.655498] ? copyin+0xb5/0x100 [ 1668.658889] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1668.664473] alloc_pages_current+0x107/0x210 [ 1668.668915] pipe_write+0xa65/0xfb0 [ 1668.672585] __vfs_write+0x613/0x8e0 [ 1668.676316] ? kernel_read+0x120/0x120 [ 1668.680208] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1668.685781] ? rw_verify_area+0x118/0x360 [ 1668.689941] vfs_write+0x20c/0x580 [ 1668.693505] ksys_write+0xea/0x1f0 [ 1668.697080] ? __ia32_sys_read+0xb0/0xb0 [ 1668.701160] ? do_syscall_64+0x26/0x610 [ 1668.705157] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1668.710540] ? do_syscall_64+0x26/0x610 [ 1668.714535] __x64_sys_write+0x73/0xb0 [ 1668.718454] do_syscall_64+0x103/0x610 [ 1668.722361] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1668.727584] RIP: 0033:0x457e29 [ 1668.730792] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1668.749824] RSP: 002b:00007fd8c7971c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1668.757597] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457e29 [ 1668.764890] RDX: 0000000100000073 RSI: 00000000200001c0 RDI: 0000000000000005 [ 1668.772205] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1668.779479] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd8c79726d4 [ 1668.786761] R13: 00000000004c3be0 R14: 00000000004dc3d0 R15: 00000000ffffffff [ 1668.796477] memory: usage 307200kB, limit 307200kB, failcnt 10185 [ 1668.802894] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1668.809670] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1668.816009] Memory cgroup stats for /syz1: cache:0KB rss:257224KB rss_huge:227328KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:8KB active_anon:257332KB inactive_file:4KB active_file:0KB unevictable:0KB [ 1668.836988] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=12887,uid=0 [ 1668.851895] Memory cgroup out of memory: Kill process 12887 (syz-executor.1) score 140 or sacrifice child [ 1668.872377] Killed process 12887 (syz-executor.1) total-vm:72712kB, anon-rss:8020kB, file-rss:34944kB, shmem-rss:0kB 14:22:19 executing program 1: r0 = perf_event_open(&(0x7f0000000300)={0x400000001, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f000094f000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffff9c, 0xc00c642d, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0x0) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) 14:22:19 executing program 3: syz_emit_ethernet(0x140, &(0x7f0000000000)={@local, @random="8a37962a294f", [], {@ipv6={0x86dd, {0x0, 0x6, "110c11", 0x30, 0x21, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x6, [], {0x41, 0x6, "cb155d", 0x0, 0x0, 0x0, @mcast2, @dev}}}}}}}, 0x0) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x4, 0x10010, r0, 0x0) setxattr$security_capability(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='security.capability\x00', &(0x7f0000000180)=@v1={0x1000000, [{0xfffffffffffffff8, 0x7}]}, 0xc, 0x1) pread64(r0, &(0x7f0000000080)=""/74, 0x4a, 0x0) 14:22:19 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee4050c00000f0000008bc36f7d79ce3263dac37b7403242189c609", 0x23}], 0x1}, 0x0) 14:22:19 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000bd7000)={&(0x7f0000c07e98)=ANY=[@ANYBLOB="000000000000000000000000000000000000000033000000ffffffff00000000000000000000000000000000000000000000000000000000000000000029490000000000000000000000000000000000007fffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020001007d00000000000000480001006d64350000000000000000000019000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000"], 0x1}}, 0x0) 14:22:19 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000000)=[{0x80000006}]}, 0x10) r1 = socket$pppoe(0x18, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_init_net_socket$llc(0x1a, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_STATS(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r3, 0xb03, 0x70bd2d, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}}, 0x20000000) connect$pppoe(r1, &(0x7f0000000040)={0x18, 0x0, {0x2, @local, 'batadv0\x00'}}, 0x1e) sendmmsg(r1, &(0x7f0000005b40), 0x40000000000014d, 0x0) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x40000, 0x0) ioctl$DRM_IOCTL_MARK_BUFS(r4, 0x40206417, &(0x7f00000000c0)={0x7, 0xb1, 0x9, 0x100000000, 0x18}) [ 1668.893670] oom_reaper: reaped process 12887 (syz-executor.1), now anon-rss:0kB, file-rss:34832kB, shmem-rss:0kB 14:22:19 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000bd7000)={&(0x7f0000c07e98)=ANY=[@ANYBLOB="000000000000000000000000000000000000000033000000ffffffff00000000000000000000000000000000000000000000000000000000000000000029490000000000000000000000000000000000009effffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020001007d00000000000000480001006d64350000000000000000000019000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000"], 0x1}}, 0x0) [ 1668.957510] netlink: 7 bytes leftover after parsing attributes in process `syz-executor.4'. 14:22:19 executing program 3: syz_emit_ethernet(0x140, &(0x7f0000000000)={@local, @random="8a37962a294f", [], {@ipv6={0x86dd, {0x0, 0x6, "110c11", 0x30, 0x21, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x6, [], {0x41, 0x6, "cb155d", 0x0, 0x0, 0x0, @mcast2, @dev}}}}}}}, 0x0) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x4, 0x10010, r0, 0x0) setxattr$security_capability(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='security.capability\x00', &(0x7f0000000180)=@v1={0x1000000, [{0xfffffffffffffff8, 0x7}]}, 0xc, 0x1) 14:22:19 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0xc9c9, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @raw_data="946f4ee869bed31c4241323400238a3a16543de9268e94e29b607ae4fecaedfec7ae1d54b33f917622b0765168f745717b8c81f2b87427e0ccc21b2541e274bccca5c8937c6140025c2911cfb71f6d08fa36a8fedd4d97cf0af38fe5dc9a17cf2ba32a969da8f5468cb206f2a49a898700f7337b9e286f62524793d0dae8f4e99d7c33b6523d5aac0307d7c968403dc61fb20ec56b68c1552270a79dd3469a95968a343a4dfdaeaf84a1f0e84f9c45bfa0db9bf5b81b5278b8986551acd27c4c39049ac29ec7267a"}) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x40, 0x0) r2 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0)='nbd\x00') r3 = fcntl$dupfd(r0, 0x0, r0) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/pfkey\x00', 0x4180, 0x0) r5 = syz_open_dev$admmidi(&(0x7f0000000140)='/dev/admmidi#\x00', 0x6, 0x40) r6 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) r7 = syz_open_dev$dspn(&(0x7f00000001c0)='/dev/dsp#\x00', 0x3, 0x0) r8 = syz_open_dev$sndpcmp(&(0x7f0000000200)='/dev/snd/pcmC#D#p\x00', 0x6c, 0x28200) r9 = syz_open_dev$audion(&(0x7f0000000240)='/dev/audio#\x00', 0x0, 0x400000) r10 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000280)='/dev/rtc0\x00', 0x2, 0x0) r11 = open(&(0x7f00000003c0)='./file0\x00', 0x102, 0x20) r12 = syz_open_dev$dmmidi(&(0x7f0000000600)='/dev/dmmidi#\x00', 0x472, 0xc0) r13 = openat$zero(0xffffffffffffff9c, &(0x7f0000000640)='/dev/zero\x00', 0x400, 0x0) r14 = syz_open_dev$cec(&(0x7f0000002100)='/dev/cec#\x00', 0x3, 0x2) r15 = openat$dsp(0xffffffffffffff9c, &(0x7f0000002200)='/dev/dsp\x00', 0x100, 0x0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000002340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000020}, 0xc, &(0x7f0000002300)={&(0x7f0000002240)={0xc0, r2, 0x110, 0x70bd27, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0x2c, 0x7, [{0x8, 0x1, r3}, {0x8, 0x1, r4}, {0x8, 0x1, r5}, {0x8, 0x1, r6}, {0x8, 0x1, r7}]}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x3}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SOCKETS={0x14, 0x7, [{0x8, 0x1, r8}, {0x8, 0x1, r9}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x107}, @NBD_ATTR_SOCKETS={0x3c, 0x7, [{0x8, 0x1, r10}, {0x8, 0x1, r0}, {0x8, 0x1, r11}, {0x8, 0x1, r12}, {0x8, 0x1, r13}, {0x8, 0x1, r14}, {0x8, 0x1, r15}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}]}, 0xc0}, 0x1, 0x0, 0x0, 0x4000804}, 0x20004000) 14:22:19 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee4050c00000f0000008bc36f7d79ce3263dac37b7403242189c609", 0x23}], 0x1}, 0x0) 14:22:19 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000bd7000)={&(0x7f0000c07e98)=ANY=[@ANYBLOB="000000000000000000000000000000000000000033000000ffffffff0000000000000000000000000000000000000000000000000000000000000000002949000000000000000000000000000000000000f0ffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020001007d00000000000000480001006d64350000000000000000000019000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000"], 0x1}}, 0x0) [ 1669.198330] netlink: 7 bytes leftover after parsing attributes in process `syz-executor.4'. 14:22:19 executing program 3: syz_emit_ethernet(0x140, &(0x7f0000000000)={@local, @random="8a37962a294f", [], {@ipv6={0x86dd, {0x0, 0x6, "110c11", 0x30, 0x21, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x6, [], {0x41, 0x6, "cb155d", 0x0, 0x0, 0x0, @mcast2, @dev}}}}}}}, 0x0) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x4, 0x10010, r0, 0x0) 14:22:19 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee4050c00000f0000008bc36f7d79ce3263dac37b7403242189c609", 0x23}], 0x1}, 0x0) [ 1669.450812] netlink: 7 bytes leftover after parsing attributes in process `syz-executor.4'. 14:22:20 executing program 1: r0 = perf_event_open(&(0x7f0000000300)={0x400000001, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f000094f000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffff9c, 0xc00c642d, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0x100000073) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_GET_BEARER_NAMES(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r3, 0x400, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40000) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) 14:22:20 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000bd7000)={&(0x7f0000c07e98)=ANY=[@ANYBLOB="000000000000000000000000000000000000000033000000ffffffff0000000000000000000000000000000000000000000000000000000000000000002949000000000000000000000000000000000000fffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020001007d00000000000000480001006d64350000000000000000000019000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000"], 0x1}}, 0x0) 14:22:20 executing program 2: r0 = syz_open_dev$admmidi(&(0x7f0000000200)='/dev/admmidi#\x00', 0x7, 0x400000) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000400)=0x3, 0x4) connect$unix(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r1 = socket$inet6(0xa, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f0000000300)='syz0\x00', 0x200002, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = syz_open_dev$admmidi(&(0x7f00000000c0)='/dev/admmidi#\x00', 0x800, 0x80000) r3 = syz_open_dev$sndpcmp(&(0x7f0000000100)='/dev/snd/pcmC#D#p\x00', 0x80000000, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, &(0x7f0000000340)="c401f5f81e0f3566b859000f00d866ba6100ec400f00970d000000440f01d13666410f3882118f697093e948b87d7a0000000000000f23c00f21f835020008000f23f86626470f06", 0x48}], 0x1, 0x29, &(0x7f0000000280)=[@efer, @efer={0x2, 0x6000}], 0x2) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) fsetxattr$trusted_overlay_opaque(r0, &(0x7f0000000440)='trusted.overlay.opaque\x00', &(0x7f0000000480)='y\x00', 0x2, 0x1) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r3, 0x4c06, r1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') ioctl$SNDRV_CTL_IOCTL_PVERSION(r3, 0x80045500, &(0x7f0000000000)) sendmsg$TIPC_NL_SOCK_GET(r3, &(0x7f00000004c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2100480}, 0xc, &(0x7f0000000240)={&(0x7f00000003c0)={0x38, 0x0, 0x204, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_SOCK={0x18, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_NET={0xc, 0x7, [@TIPC_NLA_NET_ID={0x8}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x48010) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f00000002c0)=[@text64={0x40, 0x0}], 0x1, 0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCGL2TPSTATS(0xffffffffffffffff, 0x80487436, &(0x7f0000000080)="68bd0000d7ebd3") ioctl$KVM_RUN(r5, 0xae80, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) openat$rfkill(0xffffffffffffff9c, 0x0, 0x404000, 0x0) 14:22:20 executing program 3: syz_emit_ethernet(0x140, &(0x7f0000000000)={@local, @random="8a37962a294f", [], {@ipv6={0x86dd, {0x0, 0x6, "110c11", 0x30, 0x21, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x6, [], {0x41, 0x6, "cb155d", 0x0, 0x0, 0x0, @mcast2, @dev}}}}}}}, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) 14:22:20 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000000)=[{0x80000006}]}, 0x10) r1 = socket$pppoe(0x18, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) connect$pppoe(r1, &(0x7f0000000040)={0x18, 0x0, {0x2, @local, 'batadv0\x00'}}, 0x1e) io_setup(0x4, &(0x7f0000000080)=0x0) io_pgetevents(r3, 0x7, 0x7, &(0x7f00000000c0)=[{}, {}, {}, {}, {}, {}, {}], 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0xfff}, 0x8}) r4 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000540)='/proc/capi/capi20ncci\x00', 0x40000, 0x0) name_to_handle_at(r4, &(0x7f00000008c0)='./file0\x00', &(0x7f0000000900)={0xe8, 0xac2, "f4b0b0614f88466ffcfd29052e0d869948efb0cb93c99e1ddb946e14022bd8308fb69817dd79b4e563d90f81544ef5c644aeef460ebf979fa666dc9bde473358572b13833609cb2bba7e8b74a842918bee3cf9ac325c7ec053725649d9523f74fa032fb0f63229d2ca646c9551e8873f6fadda5948f6e599b2b535971c595a2e8492204c04d8c968541c25b497a667510730ce13ae2c6c24d4114a7f898f78e592226f7eb5430be9e73bdca18bd21bc56dca02620b27b51ec794cbfeab5d5b1811fcfcbec2892c62bf7976baad020b0813cceb6f52d86e8822852f172de1926a"}, &(0x7f0000000a00), 0x400) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r4, 0x8008ae9d, &(0x7f0000000a40)=""/168) getresuid(&(0x7f0000000740), &(0x7f0000000780), &(0x7f00000007c0)=0x0) syz_mount_image$xfs(&(0x7f0000000240)='xfs\x00', &(0x7f0000000280)='./file0\x00', 0x2351, 0x7, &(0x7f0000000680)=[{&(0x7f00000002c0)="33dd5dad2307cd92fce855621edaf28e", 0x10, 0x4}, {&(0x7f0000000300)="d84a9d329e7412c81c6e60f4ad4c7acdd4fbf7a37a5d139b6596604d33de38538b8eb3fdaf78f6596a75c40d154483de6bfc54c3fccbaa195a693ebf8a43ed7fef11342bca2324e709a292a3a945dd70b8b0920ef523176e0740cb33d450dee29f8d6e29d3293efdd21a29a6303d", 0x6e, 0x2}, {&(0x7f0000000380)="112c12745d5570c15528f0accf22890bef83cb022b8600e6236f7afb7eb06cbea152af953724865d2d0939f9ee7fbc77ed41a031def1186f1050db0240a8785eb6aea61743239a74ce980fa6b38aa25f6526c8aa5a5ee3faedadcb8adc5540e005787fb8032a930f60d66ff42d1aec92843d0c", 0x73, 0xfffffffc00000000}, {&(0x7f0000000400)="82522ed35ed5d9c336cf0d281123691f0e3029000290c4f4b8350f4dc8afbe315d38c6f44c39605155dfc9e50d5b65130d77018884985ec592751f8006a344a9865a52f7e9e182f51535974a5405", 0x4e, 0x8}, {&(0x7f0000000480)="b3821d07dbaa07a1e02909aba3295b70d9e121e655507ad65ebe949cbc1a316a51eb9be7cec9c7686b0edb2bfe0c46ec7de865f45f25e8927f6a05756675b304a9a1c461a3fc65a573a461cb439254b0810a35f14163b18e9a995c40cf289563bcab3b4101a83630178d5526f1de9fae678cca2690d306f8ebb93cef66e9522f501c1058e1c81cf4e643ad3b54416b841ae025a8b72e", 0x96, 0x2}, {&(0x7f0000000540)}, {&(0x7f0000000580)="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", 0xfe, 0x3d}], 0x18000, &(0x7f0000000800)={[{@nolargeio='nolargeio'}, {@swidth={'swidth', 0x3d, 0x400}}, {@nogrpid='nogrpid'}, {@swidth={'swidth', 0x3d, 0x2b5a}}, {@gquota='gquota'}, {@gquota='gquota'}], [{@uid_lt={'uid<', r5}}, {@obj_role={'obj_role', 0x3d, 'procselinuxMposix_acl_access-'}}, {@defcontext={'defcontext', 0x3d, 'sysadm_u'}}]}) sendmmsg(r1, &(0x7f0000005b40), 0x40000000000014d, 0x0) 14:22:20 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee4050c00000f0000008bc36f7d79ce3263dac37b7403242189c609", 0x23}], 0x1}, 0x0) 14:22:20 executing program 3: syz_emit_ethernet(0x140, &(0x7f0000000000)={@local, @random="8a37962a294f", [], {@ipv6={0x86dd, {0x0, 0x6, "110c11", 0x30, 0x21, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x6, [], {0x41, 0x6, "cb155d", 0x0, 0x0, 0x0, @mcast2, @dev}}}}}}}, 0x0) 14:22:20 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000bd7000)={&(0x7f0000c07e98)=ANY=[@ANYBLOB="000000000000000000000000000000000000000033000000ffffffff0000000000000000000000000000000000000000000000000000000000000000002949000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020001007d00000000000000480001006d64350000000000000000000019000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000"], 0x1}}, 0x0) 14:22:20 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee4050c00000f0000008bc36f7d79ce3263dac37b7403242189c609", 0x23}], 0x1}, 0x0) 14:22:20 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000bd7000)={&(0x7f0000c07e98)=ANY=[@ANYBLOB="000000000000000000000000000000000000000033000000ffffffff0000000000000000000000000000000000000000000000000000000000000000002949000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020001007d00000000000000480001006d64350000000000000000000019000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000"], 0x1}}, 0x0) 14:22:20 executing program 3: syz_emit_ethernet(0x0, 0x0, 0x0) 14:22:20 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee4050c00000f0000008bc36f7d79ce3263dac37b7403242189c609", 0x23}], 0x1}, 0x0) [ 1670.212501] net_ratelimit: 31 callbacks suppressed [ 1670.212510] protocol 88fb is buggy, dev hsr_slave_0 [ 1670.222702] protocol 88fb is buggy, dev hsr_slave_1 [ 1670.509394] syz-executor.1 invoked oom-killer: gfp_mask=0x7200c2(GFP_HIGHUSER|__GFP_ACCOUNT), order=0, oom_score_adj=0 [ 1670.526451] CPU: 0 PID: 12971 Comm: syz-executor.1 Not tainted 5.0.0-rc6+ #70 [ 1670.533792] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1670.543181] Call Trace: [ 1670.545811] dump_stack+0x172/0x1f0 [ 1670.549481] dump_header+0x10f/0xb6c [ 1670.553229] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1670.558361] ? ___ratelimit+0x60/0x595 [ 1670.562275] ? do_raw_spin_unlock+0x57/0x270 [ 1670.566716] oom_kill_process.cold+0x10/0x6f5 [ 1670.571247] ? task_will_free_mem+0x139/0x6e0 [ 1670.575785] out_of_memory+0x79a/0x1280 [ 1670.579794] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1670.584928] ? oom_killer_disable+0x280/0x280 [ 1670.589579] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1670.594745] mem_cgroup_out_of_memory+0x99/0xe0 [ 1670.599446] ? memcg_memory_event+0x40/0x40 [ 1670.603803] ? _raw_spin_unlock+0x2d/0x50 [ 1670.607974] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1670.613115] try_charge+0xfec/0x1570 [ 1670.616854] ? find_held_lock+0x35/0x130 [ 1670.620946] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1670.625813] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 1670.630683] ? find_held_lock+0x35/0x130 [ 1670.634776] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 1670.639659] memcg_kmem_charge_memcg+0x7c/0x130 [ 1670.644357] ? memcg_kmem_put_cache+0xb0/0xb0 [ 1670.648886] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 1670.653785] memcg_kmem_charge+0x13b/0x340 [ 1670.658049] __alloc_pages_nodemask+0x437/0x710 [ 1670.662775] ? __alloc_pages_slowpath+0x2900/0x2900 [ 1670.667818] ? ___might_sleep+0x163/0x280 [ 1670.671997] ? copyin+0xb5/0x100 [ 1670.675395] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1670.680971] alloc_pages_current+0x107/0x210 [ 1670.685411] pipe_write+0xa65/0xfb0 [ 1670.689109] __vfs_write+0x613/0x8e0 [ 1670.692852] ? kernel_read+0x120/0x120 [ 1670.696875] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1670.702464] ? rw_verify_area+0x118/0x360 [ 1670.706643] vfs_write+0x20c/0x580 [ 1670.710217] ksys_write+0xea/0x1f0 [ 1670.713786] ? __ia32_sys_read+0xb0/0xb0 [ 1670.717873] ? do_syscall_64+0x26/0x610 [ 1670.721983] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1670.727374] ? do_syscall_64+0x26/0x610 [ 1670.731385] __x64_sys_write+0x73/0xb0 [ 1670.735417] do_syscall_64+0x103/0x610 [ 1670.739345] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1670.744554] RIP: 0033:0x457e29 [ 1670.747771] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1670.766703] RSP: 002b:00007fd8c7971c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1670.774462] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457e29 [ 1670.781765] RDX: 0000000100000073 RSI: 00000000200001c0 RDI: 0000000000000005 [ 1670.789083] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1670.796502] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd8c79726d4 [ 1670.803790] R13: 00000000004c3be0 R14: 00000000004dc3d0 R15: 00000000ffffffff [ 1670.816164] memory: usage 307200kB, limit 307200kB, failcnt 10252 [ 1670.822834] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1670.829710] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1670.836668] Memory cgroup stats for /syz1: cache:0KB rss:257356KB rss_huge:227328KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:8KB active_anon:257396KB inactive_file:4KB active_file:0KB unevictable:0KB [ 1670.856756] cgroup: fork rejected by pids controller in /syz0 [ 1670.857801] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=12964,uid=0 [ 1670.878733] Memory cgroup out of memory: Kill process 12964 (syz-executor.1) score 140 or sacrifice child [ 1670.888694] Killed process 12964 (syz-executor.1) total-vm:72712kB, anon-rss:8020kB, file-rss:34944kB, shmem-rss:0kB 14:22:21 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000bd7000)={&(0x7f0000c07e98)=ANY=[@ANYBLOB="000000000000000000000000000000000000000033000000ffffffff0000000000000000000000000000000000000000000000000000000000000000002949000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020001007d00000000000000480001006d64350000000000000000000019000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000"], 0x1}}, 0x0) 14:22:21 executing program 3: syz_emit_ethernet(0x0, 0x0, 0x0) 14:22:21 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee4050c00000f0000008bc36f7d79ce3263dac37b7403242189c609", 0x23}], 0x1}, 0x0) 14:22:21 executing program 1: perf_event_open(&(0x7f0000000300)={0x400000001, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffff9c, 0xc00c642d, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0x100000073) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) [ 1670.915926] oom_reaper: reaped process 12964 (syz-executor.1), now anon-rss:0kB, file-rss:34860kB, shmem-rss:0kB 14:22:21 executing program 0: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000000)=[{0x80000006}]}, 0x10) r0 = socket$pppoe(0x18, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x2, @local, 'batadv0\x00'}}, 0x1e) sendmmsg(r0, &(0x7f0000005b40), 0x40000000000014d, 0x0) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x2000, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r2, 0xc0045540, &(0x7f00000000c0)=0x7) 14:22:21 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x8000000002) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) r1 = memfd_create(&(0x7f0000000100)='-%\fv\x16\x1b\n\xed\xf9\xa3\x14\x9c\x95\xa4\x035sumwlan0^/:\xf4\xcb\xda', 0x1) write$UHID_DESTROY(r1, &(0x7f00000000c0), 0x4) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r1, &(0x7f0000000040)='\x00', 0x0, 0x0, 0x1000) r2 = open(&(0x7f0000000000)='./file0\x00', 0x101000, 0x8) r3 = gettid() ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r2, 0xc1105511, &(0x7f0000000180)={{0x7, 0x5, 0x2, 0x0, 'syz0\x00'}, 0x3, 0x400, 0x8, r3, 0x1, 0x8001, 'syz0\x00', &(0x7f0000000140)=['&.\x00'], 0x3, [], [0x0, 0x100000000, 0x3f, 0x1]}) 14:22:21 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee4050c00000f0000008bc36f7d79ce3263dac37b7403242189c609", 0x23}], 0x1}, 0x0) 14:22:21 executing program 3: syz_emit_ethernet(0x0, 0x0, 0x0) 14:22:21 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000bd7000)={&(0x7f0000c07e98)=ANY=[@ANYBLOB="000000000000000000000000000000000000000033000000ffffffff0000000000000000000000000000000000000000000000000000000000000000002949000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020001007d00000000000000480001006d64350000000000000000000019000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000"], 0x1}}, 0x0) 14:22:21 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000bd7000)={&(0x7f0000c07e98)=ANY=[@ANYBLOB="000000000000000000000000000000000000000033000000ffffffff0000000000000000000000000000000000000000000000000000000000000000002949000000000000000000000000000000000000000000000000157100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020001007d00000000000000480001006d64350000000000000000000019000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000"], 0x1}}, 0x0) 14:22:21 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee4050c00000f0000008bc36f7d79ce3263dac37b7403242189c609", 0x23}], 0x1}, 0x0) 14:22:21 executing program 3: syz_emit_ethernet(0x140, &(0x7f0000000000)={@local, @random="8a37962a294f", [], {@ipv6={0x86dd, {0x0, 0x6, "110c11", 0x30, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x6, [], {0x41, 0x6, "cb155d", 0x0, 0x0, 0x0, @mcast2, @dev}}}}}}}, 0x0) [ 1671.399519] __nla_parse: 5 callbacks suppressed [ 1671.399529] netlink: 7 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1671.404621] protocol 88fb is buggy, dev hsr_slave_0 [ 1671.404694] protocol 88fb is buggy, dev hsr_slave_1 [ 1671.412500] protocol 88fb is buggy, dev hsr_slave_0 [ 1671.428636] protocol 88fb is buggy, dev hsr_slave_1 [ 1671.433843] protocol 88fb is buggy, dev hsr_slave_0 [ 1671.438984] protocol 88fb is buggy, dev hsr_slave_1 [ 1671.444226] protocol 88fb is buggy, dev hsr_slave_0 [ 1671.449325] protocol 88fb is buggy, dev hsr_slave_1 14:22:22 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000bd7000)={&(0x7f0000c07e98)=ANY=[@ANYBLOB="000000000000000000000000000000000000000033000000ffffffff000000000000000000000000000000000000000000000000000000000000000000294900000000000000000000000000000000000000000000ffffff9e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020001007d00000000000000480001006d64350000000000000000000019000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000"], 0x1}}, 0x0) 14:22:22 executing program 3: syz_emit_ethernet(0x140, &(0x7f0000000000)={@local, @random="8a37962a294f", [], {@ipv6={0x86dd, {0x0, 0x6, "110c11", 0x30, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x6, [], {0x41, 0x6, "cb155d", 0x0, 0x0, 0x0, @mcast2, @dev}}}}}}}, 0x0) 14:22:22 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee4050c00000f0000008bc36f7d79ce3263dac37b7403242189c609", 0x23}], 0x1}, 0x0) [ 1671.644267] netlink: 7 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1671.743509] syz-executor.1 invoked oom-killer: gfp_mask=0x7200c2(GFP_HIGHUSER|__GFP_ACCOUNT), order=0, oom_score_adj=0 [ 1671.768335] CPU: 0 PID: 13148 Comm: syz-executor.1 Not tainted 5.0.0-rc6+ #70 [ 1671.775674] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1671.785048] Call Trace: [ 1671.787697] dump_stack+0x172/0x1f0 [ 1671.791372] dump_header+0x10f/0xb6c [ 1671.795122] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1671.800250] ? ___ratelimit+0x60/0x595 [ 1671.804161] ? do_raw_spin_unlock+0x57/0x270 [ 1671.808599] oom_kill_process.cold+0x10/0x6f5 [ 1671.813133] ? task_will_free_mem+0x139/0x6e0 [ 1671.817662] out_of_memory+0x79a/0x1280 [ 1671.821662] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1671.826792] ? oom_killer_disable+0x280/0x280 [ 1671.831308] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1671.836459] mem_cgroup_out_of_memory+0x99/0xe0 [ 1671.841152] ? memcg_memory_event+0x40/0x40 [ 1671.845505] ? _raw_spin_unlock+0x2d/0x50 [ 1671.849676] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1671.854798] try_charge+0xfec/0x1570 [ 1671.858539] ? find_held_lock+0x35/0x130 [ 1671.862634] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1671.867503] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 1671.872366] ? find_held_lock+0x35/0x130 [ 1671.876456] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 1671.881344] memcg_kmem_charge_memcg+0x7c/0x130 [ 1671.886036] ? memcg_kmem_put_cache+0xb0/0xb0 [ 1671.890582] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 1671.895457] memcg_kmem_charge+0x13b/0x340 [ 1671.899743] __alloc_pages_nodemask+0x437/0x710 [ 1671.904444] ? __alloc_pages_slowpath+0x2900/0x2900 [ 1671.909483] ? ___might_sleep+0x163/0x280 [ 1671.913655] ? copyin+0xb5/0x100 [ 1671.917046] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1671.922653] alloc_pages_current+0x107/0x210 [ 1671.927106] pipe_write+0xa65/0xfb0 [ 1671.930924] __vfs_write+0x613/0x8e0 [ 1671.934663] ? kernel_read+0x120/0x120 [ 1671.938570] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1671.944152] ? rw_verify_area+0x118/0x360 [ 1671.948324] vfs_write+0x20c/0x580 [ 1671.951890] ksys_write+0xea/0x1f0 [ 1671.955462] ? __ia32_sys_read+0xb0/0xb0 [ 1671.959545] ? do_syscall_64+0x26/0x610 [ 1671.963537] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1671.968918] ? do_syscall_64+0x26/0x610 [ 1671.972918] __x64_sys_write+0x73/0xb0 [ 1671.976832] do_syscall_64+0x103/0x610 [ 1671.980768] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1671.986022] RIP: 0033:0x457e29 [ 1671.989347] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1672.008352] RSP: 002b:00007fd8c7971c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1672.016101] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457e29 [ 1672.023390] RDX: 0000000100000073 RSI: 00000000200001c0 RDI: 0000000000000005 [ 1672.030678] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1672.037961] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd8c79726d4 [ 1672.045243] R13: 00000000004c3be0 R14: 00000000004dc3d0 R15: 00000000ffffffff [ 1672.065884] memory: usage 307200kB, limit 307200kB, failcnt 10308 [ 1672.072341] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1672.086397] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1672.098548] Memory cgroup stats for /syz1: cache:0KB rss:257236KB rss_huge:227328KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:8KB active_anon:257396KB inactive_file:0KB active_file:4KB unevictable:0KB [ 1672.132649] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=13147,uid=0 [ 1672.153167] Memory cgroup out of memory: Kill process 13147 (syz-executor.1) score 140 or sacrifice child [ 1672.168822] Killed process 13147 (syz-executor.1) total-vm:72712kB, anon-rss:8020kB, file-rss:34944kB, shmem-rss:0kB [ 1672.191406] oom_reaper: reaped process 13147 (syz-executor.1), now anon-rss:0kB, file-rss:33984kB, shmem-rss:0kB 14:22:22 executing program 1: r0 = perf_event_open(&(0x7f0000000300)={0x400000001, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x80000000000001, 0x0) getpeername$packet(0xffffffffffffff9c, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000000c0)=0x14) r3 = getuid() setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@mcast1, @in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x4e22, 0x8, 0x4e20, 0x0, 0x0, 0x20, 0x20, 0x2c, r2, r3}, {0x8001, 0xf95, 0x7, 0x5, 0x8001, 0x9, 0x8, 0x259}, {0x20, 0xffffffffffffff1f, 0x7, 0x180000000}, 0x7, 0x0, 0x2, 0x0, 0x2, 0x7a4a0ae3c6526d09}, {{@in6=@loopback, 0x4d6, 0x2b}, 0x2, @in6=@local, 0x3504, 0x3, 0x3, 0xfff, 0xe7, 0x4, 0x7}}, 0xe8) mmap(&(0x7f000094f000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffff9c, 0xc00c642d, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = getgid() syz_mount_image$iso9660(&(0x7f0000000380)='iso9660\x00', &(0x7f00000003c0)='./file0\x00', 0x7, 0x4, &(0x7f0000000640)=[{&(0x7f0000000400)="51a6eb7f290c03dc15f40cb649fd999a278f2f60837b37dbcb968592c508c34d2c067a7530113156c627675dec1f22c9f568e42fcceab34234f05202ca0f7790f2b7d625013a2fe338013478d41e69b11603071cb897", 0x56, 0x10000}, {&(0x7f0000000480)="643494f60589b7490c0beeda035bf1a23d7c688c6563d82c202c8574ea176c4059a8f770d4f0d7ad3be9c92b690e4038ea845875164249e16d77c7af8ebbfd98b498b2c4e15740a7b96cb48b68e74ba7175f59f9b64c80037380e886f175ad22fb08d6b5dc44a5a5", 0x68, 0x2e}, {&(0x7f0000000500)="b47bca33dae9386e6dd1fea0f67ac10a2bfc0d48d9586bdccb68a1eee2e95682eaeb0b4d7eb12990c3c82115d22fe68131b4cd", 0x33, 0x8}, {&(0x7f0000000540)="e9f36d81e6b5dc2a70d0f0b8728a2d58a97707f706c990d7f28cb20a7aabfaa044eec4ce661f78d4ce627117b97496a910fc512947b3b12816f682d2d3777a6ff5920d45d1189ab24d0fdd87b77d06b1b32ec854805e83c014515dc300abeccad78ead2f0ee8087907dc5cfbd70dc5b9c699abfc9dd46c026865300dec47393830fc91206627f255b9355ae6b1d2b4a110137ec0055bee89a4486df517e689cfd433eaef3260558043040e890a2a9b543e0e38f1e4ae826e5e5adfc018232ee4b431d2a33145ce533382e80ab8cd4a8dd0e44ed4d188a57e04bf53bef91ee3f10ecd64040a021f134c6f49a020c3429601c300d8d8", 0xf5, 0x3}], 0x2000000, &(0x7f00000006c0)={[{@sbsector={'sbsector', 0x3d, 0x9}}, {@unhide='unhide'}, {@cruft='cruft'}, {@gid={'gid', 0x3d, r6}}, {@norock='norock'}], [{@obj_user={'obj_user'}}, {@fsmagic={'fsmagic', 0x3d, 0xfff}}, {@fowner_gt={'fowner>', r3}}]}) write(r5, &(0x7f00000001c0), 0xffffffffffffff0e) read(r4, &(0x7f0000000200)=""/250, 0x50c7e3e3) 14:22:22 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000000)=[{0x80000006}]}, 0x10) r1 = socket$pppoe(0x18, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) connect$pppoe(r1, &(0x7f0000000040)={0x18, 0x0, {0x2, @local, 'batadv0\x00'}}, 0x1e) sendmmsg(r1, &(0x7f0000005b40), 0x40000000000014d, 0x0) r3 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x95, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x2400, 0x9) 14:22:25 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000bd7000)={&(0x7f0000c07e98)=ANY=[@ANYBLOB="000000000000000000000000000000000000000033000000ffffffff000000000000000000000000000000000000000000000000000000000000000000294900000000000000000000000000000000000000000000fffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020001007d00000000000000480001006d64350000000000000000000019000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000"], 0x1}}, 0x0) 14:22:25 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000140)='/dev/snd/controlC#\x00', 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$FS_IOC_GETFLAGS(r0, 0xc0045540, &(0x7f00000000c0)) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0xe000, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000180)={0x0, 0x3}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000200)={r2, 0x9}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000000080), &(0x7f0000000100)=0x4) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x141280, 0x0) 14:22:25 executing program 3: syz_emit_ethernet(0x140, &(0x7f0000000000)={@local, @random="8a37962a294f", [], {@ipv6={0x86dd, {0x0, 0x6, "110c11", 0x30, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x6, [], {0x41, 0x6, "cb155d", 0x0, 0x0, 0x0, @mcast2, @dev}}}}}}}, 0x0) 14:22:25 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee4050c00000f0000008bc36f7d79ce3263dac37b7403242189c609", 0x23}], 0x1}, 0x0) 14:22:25 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000000)=[{0x80000006}]}, 0x10) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f00000000c0)=0xc) capget(&(0x7f0000000100)={0x20080522, r1}, &(0x7f0000000140)={0x7, 0x0, 0x0, 0x1, 0x6, 0x5}) r2 = socket$pppoe(0x18, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) connect$pppoe(r2, &(0x7f0000000040)={0x18, 0x0, {0x2, @local, 'batadv0\x00'}}, 0x1e) sendmmsg(r2, &(0x7f0000005b40), 0x40000000000014d, 0x0) 14:22:25 executing program 1: socketpair(0x8, 0x80007, 0x780fb29b, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f00000003c0)={0x0, 0xe7, 0x9, 0x14, 0xc08d, 0x63}, &(0x7f0000000400)=0x14) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000440)={r2, 0x1}, &(0x7f0000000480)=0x8) r3 = perf_event_open(&(0x7f0000000300)={0x400000001, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$rds(0x15, 0x5, 0x0) mmap(&(0x7f000094f000/0x3000)=nil, 0x3000, 0x0, 0x11, r3, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffff9c, 0xc00c642d, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, 0x0) r5 = syz_open_dev$admmidi(&(0x7f0000000600)='/dev/admmidi#\x00', 0xfffffffffffffffa, 0x40240) ioctl$CAPI_GET_FLAGS(r5, 0x80044323, &(0x7f0000000640)) r6 = request_key(&(0x7f0000000680)='user\x00', &(0x7f00000006c0)={'syz', 0x3}, &(0x7f0000000700)='],%em0vmnet0)^{..)cgroup\'{ppp1\x00', 0x0) keyctl$set_timeout(0xf, r6, 0x800) pwrite64(r3, &(0x7f0000000500)="3786ffec9d9718fb20722c4c28b6a3440a3023f481f8b49b101c385829febbc14ea1c035c0cd71ac0b65189cbdc6006b8c17020cd44eaa7d4d6b1737329484a44471167a270c1929b8964c70711d9a82eb6cd0bb5406cd53923e826869456af992d3db8decc23ed7f7498496cc9a1e51fab6f38e4f1457cbcc976a89512eedf073c2fbbe289fae3427315eb4d88c96613ce554a8d19b2ac9c9ff0f1973a275eacd138645cb04333402a8ce2c0ce7806ff59a03e48937756c54aeb81ad4e832e11b30c72758a8851ff60f0327a42fcf915025", 0xd2, 0x0) r7 = open(&(0x7f0000000000)='./file0\x00', 0x28000, 0x2433005498f6ce0b) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f00000000c0)={0x4, &(0x7f0000000040)=[{0x0}, {}, {}, {}]}) ioctl$DRM_IOCTL_GET_CTX(r7, 0xc0086423, &(0x7f0000000100)={r8, 0x2}) unlink(&(0x7f00000004c0)='./file0\x00') pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ftruncate(r4, 0x6) r11 = syz_genetlink_get_family_id$fou(&(0x7f00000007c0)='fou\x00') sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x10004000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x3c, r11, 0x26, 0x70bd28, 0x25dfdbfc, {}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x1}, @FOU_ATTR_IPPROTO={0x8, 0x3, 0x7f}, @FOU_ATTR_IPPROTO={0x8, 0x3, 0x3e}, @FOU_ATTR_PORT={0x8, 0x1, 0x4e21}, @FOU_ATTR_PORT={0x8, 0x1, 0x4e20}]}, 0x3c}, 0x1, 0x0, 0x0, 0x5}, 0x10) write(r10, &(0x7f00000001c0), 0x100000073) fchmodat(r5, &(0x7f0000000740)='./file0\x00', 0x0) readlinkat(r7, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=""/123, 0x7b) read(r9, &(0x7f0000000200)=""/250, 0x50c7e3e3) [ 1675.391987] netlink: 7 bytes leftover after parsing attributes in process `syz-executor.4'. 14:22:26 executing program 3: syz_emit_ethernet(0x140, &(0x7f0000000000)={@local, @random="8a37962a294f", [], {@ipv6={0x86dd, {0x0, 0x6, "110c11", 0x30, 0x21, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x0, [], {0x41, 0x6, "cb155d", 0x0, 0x0, 0x0, @mcast2, @dev}}}}}}}, 0x0) 14:22:26 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee4050c00000f0000008bc36f7d79ce3263dac37b7403242189c609", 0x23}], 0x1}, 0x0) 14:22:26 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000bd7000)={&(0x7f0000c07e98)=ANY=[@ANYBLOB="000000000000000000000000000000000000000033000000ffffffff0000000000000000000000000000000000000000000000000000000000000000002949000000000000000000000000000000000000000000007fffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020001007d00000000000000480001006d64350000000000000000000019000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000"], 0x1}}, 0x0) [ 1675.522283] net_ratelimit: 16 callbacks suppressed [ 1675.522296] dccp_invalid_packet: P.Data Offset(0) too small [ 1675.562536] protocol 88fb is buggy, dev hsr_slave_0 [ 1675.562617] protocol 88fb is buggy, dev hsr_slave_1 [ 1675.567631] protocol 88fb is buggy, dev hsr_slave_1 [ 1675.572712] protocol 88fb is buggy, dev hsr_slave_0 [ 1675.582758] protocol 88fb is buggy, dev hsr_slave_1 [ 1675.587921] protocol 88fb is buggy, dev hsr_slave_0 [ 1675.593106] protocol 88fb is buggy, dev hsr_slave_1 [ 1675.598241] protocol 88fb is buggy, dev hsr_slave_0 [ 1675.603434] protocol 88fb is buggy, dev hsr_slave_1 14:22:26 executing program 3: syz_emit_ethernet(0x140, &(0x7f0000000000)={@local, @random="8a37962a294f", [], {@ipv6={0x86dd, {0x0, 0x6, "110c11", 0x30, 0x21, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x0, [], {0x41, 0x6, "cb155d", 0x0, 0x0, 0x0, @mcast2, @dev}}}}}}}, 0x0) [ 1675.658588] netlink: 7 bytes leftover after parsing attributes in process `syz-executor.4'. 14:22:26 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000bd7000)={&(0x7f0000c07e98)=ANY=[@ANYBLOB="000000000000000000000000000000000000000033000000ffffffff000000000000000000000000000000000000000000000000000000000000000000294900000000000000000000000000000000000000f0ffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020001007d00000000000000480001006d64350000000000000000000019000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000"], 0x1}}, 0x0) 14:22:26 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000180)="0adc1f023c123f3188a070") ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000180)={0x0, 0x2}) 14:22:26 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee4050c00000f0000008bc36f7d79ce3263dac37b7403242189c609", 0x23}], 0x1}, 0x0) 14:22:26 executing program 3: syz_emit_ethernet(0x140, &(0x7f0000000000)={@local, @random="8a37962a294f", [], {@ipv6={0x86dd, {0x0, 0x6, "110c11", 0x30, 0x21, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x0, [], {0x41, 0x6, "cb155d", 0x0, 0x0, 0x0, @mcast2, @dev}}}}}}}, 0x0) 14:22:26 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000000)=[{0x80000006}]}, 0x10) r1 = socket$pppoe(0x18, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) connect$pppoe(r1, &(0x7f0000000040)={0x18, 0x0, {0x4, @local, 'batadv0\x00'}}, 0x1e) ioctl$PPPOEIOCDFWD(r0, 0xb101, 0x0) sendmmsg(r1, &(0x7f0000005b40), 0x40000000000014d, 0x0) 14:22:26 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000bd7000)={&(0x7f0000c07e98)=ANY=[@ANYBLOB="000000000000000000000000000000000000000033000000ffffffff0000000000000000000000000000000000000000000000000000000000000000002949000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020001007d00000000000000480001006d64350000000000000000000019000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000"], 0x1}}, 0x0) [ 1675.923315] netlink: 7 bytes leftover after parsing attributes in process `syz-executor.4'. 14:22:26 executing program 3: syz_emit_ethernet(0x140, &(0x7f0000000000)={@local, @random="8a37962a294f", [], {@ipv6={0x86dd, {0x0, 0x6, "110c11", 0x30, 0x21, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x6, [], {0x0, 0x6, "cb155d", 0x0, 0x0, 0x0, @mcast2, @dev}}}}}}}, 0x0) [ 1676.165308] syz-executor.1 invoked oom-killer: gfp_mask=0x7200c2(GFP_HIGHUSER|__GFP_ACCOUNT), order=0, oom_score_adj=0 [ 1676.198404] CPU: 1 PID: 13216 Comm: syz-executor.1 Not tainted 5.0.0-rc6+ #70 [ 1676.205710] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1676.215078] Call Trace: [ 1676.217688] dump_stack+0x172/0x1f0 [ 1676.221338] dump_header+0x10f/0xb6c [ 1676.225073] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1676.230168] ? ___ratelimit+0x60/0x595 [ 1676.234072] ? do_raw_spin_unlock+0x57/0x270 [ 1676.238483] oom_kill_process.cold+0x10/0x6f5 [ 1676.242972] ? task_will_free_mem+0x139/0x6e0 [ 1676.247473] out_of_memory+0x79a/0x1280 [ 1676.251446] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1676.256539] ? oom_killer_disable+0x280/0x280 [ 1676.261034] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1676.266144] mem_cgroup_out_of_memory+0x99/0xe0 [ 1676.270804] ? memcg_memory_event+0x40/0x40 [ 1676.275133] ? _raw_spin_unlock+0x2d/0x50 [ 1676.279281] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1676.284404] try_charge+0xfec/0x1570 [ 1676.288110] ? find_held_lock+0x35/0x130 [ 1676.292186] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1676.297029] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 1676.301866] ? find_held_lock+0x35/0x130 [ 1676.305941] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 1676.310800] memcg_kmem_charge_memcg+0x7c/0x130 [ 1676.315481] ? memcg_kmem_put_cache+0xb0/0xb0 [ 1676.319983] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 1676.324827] memcg_kmem_charge+0x13b/0x340 [ 1676.329082] __alloc_pages_nodemask+0x437/0x710 [ 1676.333742] ? __alloc_pages_slowpath+0x2900/0x2900 [ 1676.338755] ? ___might_sleep+0x163/0x280 [ 1676.342908] ? copyin+0xb5/0x100 [ 1676.346282] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1676.351818] alloc_pages_current+0x107/0x210 [ 1676.356219] pipe_write+0xa65/0xfb0 [ 1676.359878] __vfs_write+0x613/0x8e0 [ 1676.363602] ? kernel_read+0x120/0x120 [ 1676.367475] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1676.373013] ? rw_verify_area+0x118/0x360 [ 1676.377162] vfs_write+0x20c/0x580 [ 1676.380713] ksys_write+0xea/0x1f0 [ 1676.384258] ? __ia32_sys_read+0xb0/0xb0 [ 1676.388309] ? do_syscall_64+0x26/0x610 [ 1676.392309] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1676.397680] ? do_syscall_64+0x26/0x610 [ 1676.401716] __x64_sys_write+0x73/0xb0 [ 1676.405599] do_syscall_64+0x103/0x610 [ 1676.409511] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1676.414699] RIP: 0033:0x457e29 [ 1676.417892] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1676.436780] RSP: 002b:00007fd8c7971c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1676.444474] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457e29 [ 1676.451728] RDX: 0000000100000073 RSI: 00000000200001c0 RDI: 0000000000000006 [ 1676.458991] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1676.466257] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd8c79726d4 [ 1676.473513] R13: 00000000004c3be0 R14: 00000000004dc3d0 R15: 00000000ffffffff [ 1676.483050] memory: usage 307200kB, limit 307200kB, failcnt 10379 [ 1676.489443] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1676.496397] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1676.502816] Memory cgroup stats for /syz1: cache:0KB rss:257328KB rss_huge:227328KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:8KB active_anon:257460KB inactive_file:0KB active_file:4KB unevictable:0KB [ 1676.524862] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=13210,uid=0 [ 1676.539740] Memory cgroup out of memory: Kill process 13210 (syz-executor.1) score 140 or sacrifice child [ 1676.549872] Killed process 13210 (syz-executor.1) total-vm:72712kB, anon-rss:8024kB, file-rss:34944kB, shmem-rss:0kB 14:22:27 executing program 1: r0 = perf_event_open(&(0x7f0000000300)={0x400000001, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f000094f000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffff9c, 0xc00c642d, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000380)="a1732a6583f226d0c007e0bd28a8ef47e2095b4e8deaa796bb7de8cddabf380ac9a998cb0d858dc7e389dc715498114db54b72a49da7ac057a626486e3dda299dc4d37cca9e9288d000562b8d1003ee30d99bccb6d0336c1c3d2601e5b661d1f2332ec32687a7d39c4d9fc4d7b0700065b655a9736f8b830d8ba42d80295eb366cc3f133edbaebe5662ae9685204ae08bd3d63ab24b8f5df8e66863fbc254863212c555c700d078e9060b4b27ab9c134e3cd79176014f1cd0bf49dad02a2e6bc19e4f384cb9fc957fca7cc8b05a80d4110ce229c4ec0f8", 0x4) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) syz_open_dev$usb(&(0x7f0000000140)='/dev/bus/usb/00#/00#\x00', 0x9, 0x80000000040000) 14:22:27 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) r1 = openat$zero(0xffffffffffffff9c, 0x0, 0x11b400, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(0xffffffffffffffff, 0xc018643a, 0x0) ioctl$BLKPG(0xffffffffffffffff, 0x1269, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r2 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) r3 = openat$cgroup_subtree(r2, &(0x7f00000001c0)='cgroup.subtree_control\x00', 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000380)=ANY=[@ANYBLOB="2b70696473201b8605832761bd50218a413e3175a52b08a24862cb549cfdf202af2850da39ea1fe59d3f56a040e26b9cba5b83517da425601cc9cfcabd0065d4f720b5fc2fc10537d23d27e8345ee62d72a7f3e3aab7305894ff6e6de45edcbedd3f962bf556cf45fc681f353285fc96257e9a6a01ffd73a13e56799abf52482b259581b6f6f3a8a167f3c711bf099aa602918168e1400a8772d7bf0edefd596237c5b4b8db8e7483cdcf5980f943e74609ec675725fc68b48c5574c431642b56c3a23968bc010f78e3dbaac69b29ea1577a58968b0639ed06109555d3b8c0"], 0x6) write$cgroup_subtree(r3, &(0x7f00000000c0)={[{0x2d, 'pids'}]}, 0x6) accept$inet6(0xffffffffffffffff, &(0x7f00000004c0)={0xa, 0x0, 0x0, @local}, &(0x7f0000000340)=0x3d8) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ioctl$IOC_PR_PREEMPT(r1, 0x401870cb, &(0x7f0000000040)={0x18b5, 0x0, 0x5, 0x42fc}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x13, 0xffffffffffffffff, 0x0) gettid() request_key(&(0x7f0000000200)='dns_resolver\x00', &(0x7f0000000180)={'sy.'}, &(0x7f0000000240)='syz', 0xffffffffffffffff) 14:22:27 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee4050c00000f0000008bc36f7d79ce3263dac37b7403242189c609", 0x23}], 0x1}, 0x0) 14:22:27 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000bd7000)={&(0x7f0000c07e98)=ANY=[@ANYBLOB="000000000000000000000000000000000000000033000000ffffffff0000000000000000000000000000000000000000000000000000000000000000002949000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020001007d00000000000000480001006d64350000000000000000000019000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000"], 0x1}}, 0x0) 14:22:27 executing program 3: syz_emit_ethernet(0x140, &(0x7f0000000000)={@local, @random="8a37962a294f", [], {@ipv6={0x86dd, {0x0, 0x6, "110c11", 0x30, 0x21, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x6, [], {0x0, 0x6, "cb155d", 0x0, 0x0, 0x0, @mcast2, @dev}}}}}}}, 0x0) [ 1676.573076] oom_reaper: reaped process 13210 (syz-executor.1), now anon-rss:0kB, file-rss:34872kB, shmem-rss:0kB 14:22:27 executing program 0: r0 = syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0x101, 0x80000) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_RESET_STATS(r0, &(0x7f0000000600)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40001000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000180)={0x414, r1, 0x8, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x74, 0x4, [@TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x400}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xadf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffffffffff81}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffffff8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}]}, @TIPC_NLA_NODE={0x30, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x80000001}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1e52}]}, @TIPC_NLA_LINK={0xd8, 0x4, [@TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8f53}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100000001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1f}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_LINK={0xd8, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb1e}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x120000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffffffb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb6}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x30000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6ec}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x143b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x40}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}]}, @TIPC_NLA_LINK={0x9c, 0x4, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}]}, @TIPC_NLA_BEARER={0x110, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x80000000}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @loopback}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x100000000, @ipv4={[], [], @multicast2}, 0x401}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x2b}}}, {0x14, 0x2, @in={0x2, 0x4e23, @rand_addr=0x1000}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x9, @mcast2, 0x6}}, {0x14, 0x2, @in={0x2, 0x4e21, @broadcast}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @local}}, {0x14, 0x2, @in={0x2, 0x4e20, @empty}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd1}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}]}]}, 0x414}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000000)=[{0x80000006}]}, 0x10) r3 = socket$pppoe(0x18, 0x1, 0x0) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000700)=0x0) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000740)=0x0) rt_tgsigqueueinfo(r4, r5, 0x13, &(0x7f0000000780)={0x3a, 0xff, 0x2}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) setxattr$security_evm(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='security.evm\x00', &(0x7f00000006c0)=@v1={0x2, '\b'}, 0x2, 0x2) connect$pppoe(r3, &(0x7f0000000040)={0x18, 0x0, {0x2, @local, 'batadv0\x00'}}, 0x1e) sendmmsg(r3, &(0x7f0000005b40), 0x40000000000014d, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) 14:22:27 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000bd7000)={&(0x7f0000c07e98)=ANY=[@ANYBLOB="000000000000000000000000000000000000000033000000ffffffff0000000000000000000000000000000000000000000000000000000000000000002949000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020001007d00000000000000480001006d64350000000000000000000019000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000"], 0x1}}, 0x0) [ 1676.661781] netlink: 7 bytes leftover after parsing attributes in process `syz-executor.4'. 14:22:27 executing program 3: syz_emit_ethernet(0x140, &(0x7f0000000000)={@local, @random="8a37962a294f", [], {@ipv6={0x86dd, {0x0, 0x6, "110c11", 0x30, 0x21, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x6, [], {0x0, 0x6, "cb155d", 0x0, 0x0, 0x0, @mcast2, @dev}}}}}}}, 0x0) 14:22:27 executing program 1: r0 = perf_event_open(&(0x7f0000000300)={0x400000001, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f000094f000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffff9c, 0xc00c642d, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0x100000073) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) 14:22:27 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee4050c00000f0000008bc36f7d79ce3263dac37b7403242189c609", 0x23}], 0x1}, 0x0) 14:22:27 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000bd7000)={&(0x7f0000c07e98)=ANY=[@ANYBLOB="000000000000000000000000000000000000000033000000ffffffff000000000000000000000000000000000000000000000000000000000000000000294900000000000000000000000000000000000000f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020001007d00000000000000480001006d64350000000000000000000019000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000"], 0x1}}, 0x0) [ 1676.945667] netlink: 7 bytes leftover after parsing attributes in process `syz-executor.4'. 14:22:27 executing program 3: syz_emit_ethernet(0x140, &(0x7f0000000000)={@local, @random="8a37962a294f", [], {@ipv6={0x86dd, {0x0, 0x6, "110c11", 0x30, 0x21, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x6, [], {0x0, 0x6, "cb155d", 0x0, 0x0, 0x0, @mcast2, @dev}}}}}}}, 0x0) 14:22:27 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee4050c00000f0000008bc36f7d79ce3263dac37b7403242189c609", 0x23}], 0x1}, 0x0) 14:22:27 executing program 2 (fault-call:0 fault-nth:0): syz_emit_ethernet(0x140, &(0x7f0000000000)={@local, @random="8a37962a294f", [], {@ipv6={0x86dd, {0x0, 0x6, "110c11", 0x30, 0x21, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x6, [], {0x41, 0x6, "cb155d", 0x0, 0x0, 0x0, @mcast2, @dev}}}}}}}, 0x0) 14:22:27 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000bd7000)={&(0x7f0000c07e98)=ANY=[@ANYBLOB="000000000000000000000000000000000000000033000000ffffffff0000000000000000000000000000000000000000000000000000000000000000002949000000000000000000000000000000000000007115000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020001007d00000000000000480001006d64350000000000000000000019000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000"], 0x1}}, 0x0) [ 1677.179851] netlink: 7 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1677.206249] FAULT_INJECTION: forcing a failure. [ 1677.206249] name failslab, interval 1, probability 0, space 0, times 0 [ 1677.218160] CPU: 0 PID: 13308 Comm: syz-executor.2 Not tainted 5.0.0-rc6+ #70 [ 1677.225457] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1677.234828] Call Trace: [ 1677.237442] dump_stack+0x172/0x1f0 [ 1677.241097] should_fail.cold+0xa/0x1b [ 1677.245007] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1677.250131] ? __mutex_lock+0x3cd/0x1310 [ 1677.254226] __should_failslab+0x121/0x190 [ 1677.258666] should_failslab+0x9/0x14 [ 1677.262500] kmem_cache_alloc+0x47/0x710 [ 1677.266591] ? avc_has_perm+0x379/0x610 [ 1677.270601] __build_skb+0x3e/0x310 [ 1677.274262] __napi_alloc_skb+0x1d2/0x300 [ 1677.278481] napi_get_frags+0x65/0x140 [ 1677.282436] tun_get_user+0xef5/0x38d0 [ 1677.286377] ? mark_held_locks+0x100/0x100 [ 1677.290681] ? tun_build_skb.isra.0+0x1150/0x1150 [ 1677.295549] ? tun_get+0x171/0x290 [ 1677.299129] ? lock_downgrade+0x810/0x810 [ 1677.303306] ? kasan_check_read+0x11/0x20 [ 1677.307491] tun_chr_write_iter+0xbd/0x160 [ 1677.311751] do_iter_readv_writev+0x5e0/0x8e0 [ 1677.316282] ? vfs_dedupe_file_range+0x780/0x780 [ 1677.321081] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1677.326639] ? rw_verify_area+0x118/0x360 [ 1677.330853] do_iter_write+0x184/0x610 [ 1677.334777] ? dup_iter+0x260/0x260 [ 1677.334801] vfs_writev+0x1b3/0x2f0 [ 1677.334817] ? vfs_iter_write+0xb0/0xb0 [ 1677.334832] ? kasan_check_read+0x11/0x20 [ 1677.334858] ? iterate_fd+0x360/0x360 [ 1677.334874] ? check_preemption_disabled+0x48/0x290 [ 1677.334894] ? wait_for_completion+0x440/0x440 [ 1677.334913] ? __fget_light+0x1a9/0x230 [ 1677.367659] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1677.373237] do_writev+0xf6/0x290 [ 1677.377215] ? vfs_writev+0x2f0/0x2f0 [ 1677.381044] ? do_syscall_64+0x26/0x610 [ 1677.385042] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1677.390439] ? do_syscall_64+0x26/0x610 [ 1677.394443] __x64_sys_writev+0x75/0xb0 [ 1677.398444] do_syscall_64+0x103/0x610 [ 1677.402351] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1677.407560] RIP: 0033:0x457ce1 [ 1677.410763] Code: 75 14 b8 14 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 e4 b9 fb ff c3 48 83 ec 08 e8 1a 2d 00 00 48 89 04 24 b8 14 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 63 2d 00 00 48 89 d0 48 83 c4 08 48 3d 01 14:22:28 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000bd7000)={&(0x7f0000c07e98)=ANY=[@ANYBLOB="000000000000000000000000000000000000000033000000ffffffff0000000000000000000000000000000000000000000000000000000000000000002949000000000000000000000000000000000000001571000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020001007d00000000000000480001006d64350000000000000000000019000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000"], 0x1}}, 0x0) 14:22:28 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee4050c00000f0000008bc36f7d79ce3263dac37b7403242189c609", 0x23}], 0x1}, 0x0) 14:22:28 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000000)=[{0x80000006}]}, 0x10) r1 = socket$pppoe(0x18, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) connect$pppoe(r1, &(0x7f0000000040)={0x18, 0x0, {0x2, @local, 'batadv0\x00'}}, 0x1e) sendmmsg(r1, &(0x7f0000005b40), 0x40000000000014d, 0x0) accept$packet(r0, &(0x7f0000000180)={0x11, 0x0, 0x0}, &(0x7f00000001c0)=0x14) sendto$packet(r0, &(0x7f0000000080)="5f01e48e3b23b7c8b47e992310cb9133831a64c8140e4e7956109e569a13e2ae627803e95b7e8e194fb2e06d009edc853d86097cf4303fa2860eda36f3bf10192b17b0c00baec24dae241105bdf559bad211fcfef63c7df9eadc2ca42cb1648841ec3842efa1140a3a5725adf64c06ef11c5341fc45c61f638bda71d5c359105e0bbb8af57d76f64233d3b0fcfaf2a3089f3f9d88562225e28a8c2ba1d9b882885e4bfb47ae6b1e1191f4448ab20005e23eedcfc3acadd8b915889cae9b1eb996a6d390030a59aad5ef0034ec4d48a2bc09d07a397bce3eddcf751210a28440d32328d8a4eef91fdb37397d32985", 0xee, 0x20048001, &(0x7f0000000200)={0x11, 0x1f, r3, 0x1, 0x1, 0x6, @random="c4759a911ae5"}, 0x14) 14:22:28 executing program 3: syz_emit_ethernet(0x140, &(0x7f0000000000)={@local, @random="8a37962a294f", [], {@ipv6={0x86dd, {0x0, 0x6, "110c11", 0x30, 0x21, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x6, [], {0x0, 0x6, "cb155d", 0x0, 0x0, 0x0, @mcast2, @dev}}}}}}}, 0x0) [ 1677.429686] RSP: 002b:00007f5d2350eba0 EFLAGS: 00000293 ORIG_RAX: 0000000000000014 [ 1677.437446] RAX: ffffffffffffffda RBX: 0000000000000140 RCX: 0000000000457ce1 [ 1677.444741] RDX: 0000000000000001 RSI: 00007f5d2350ebf0 RDI: 00000000000000f0 [ 1677.452033] RBP: 0000000020000000 R08: 00000000000000f0 R09: 0000000000000000 [ 1677.459349] R10: 0000000000000064 R11: 0000000000000293 R12: 00007f5d2350f6d4 [ 1677.466646] R13: 00000000004c6477 R14: 00000000004db8c0 R15: 0000000000000003 14:22:28 executing program 3: syz_emit_ethernet(0x140, &(0x7f0000000000)={@local, @random="8a37962a294f", [], {@ipv6={0x86dd, {0x0, 0x6, "110c11", 0x30, 0x21, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x6, [], {0x0, 0x6, "cb155d", 0x0, 0x0, 0x0, @mcast2, @dev}}}}}}}, 0x0) [ 1677.533122] netlink: 7 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1677.648364] syz-executor.1 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), order=0, oom_score_adj=0 [ 1677.690384] CPU: 1 PID: 13298 Comm: syz-executor.1 Not tainted 5.0.0-rc6+ #70 [ 1677.697735] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1677.707115] Call Trace: [ 1677.709735] dump_stack+0x172/0x1f0 [ 1677.713398] dump_header+0x10f/0xb6c [ 1677.717160] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1677.722287] ? ___ratelimit+0x60/0x595 [ 1677.726201] ? do_raw_spin_unlock+0x57/0x270 [ 1677.730640] oom_kill_process.cold+0x10/0x6f5 [ 1677.735180] ? task_will_free_mem+0x139/0x6e0 [ 1677.739707] out_of_memory+0x79a/0x1280 [ 1677.743715] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1677.748832] ? oom_killer_disable+0x280/0x280 [ 1677.753338] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1677.758480] mem_cgroup_out_of_memory+0x99/0xe0 [ 1677.763186] ? memcg_memory_event+0x40/0x40 [ 1677.767527] ? _raw_spin_unlock+0x2d/0x50 [ 1677.771684] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1677.776810] try_charge+0xfec/0x1570 [ 1677.780530] ? find_held_lock+0x35/0x130 [ 1677.784610] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1677.789472] ? kasan_check_read+0x11/0x20 [ 1677.793637] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 1677.798499] mem_cgroup_try_charge+0x24d/0x5e0 [ 1677.803108] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 1677.808063] wp_page_copy+0x408/0x1740 [ 1677.811959] ? find_held_lock+0x35/0x130 [ 1677.816035] ? pmd_pfn+0x1d0/0x1d0 [ 1677.819592] ? lock_downgrade+0x810/0x810 [ 1677.823761] ? __pte_alloc_kernel+0x220/0x220 [ 1677.828277] ? kasan_check_read+0x11/0x20 [ 1677.832426] ? do_raw_spin_unlock+0x57/0x270 [ 1677.836852] do_wp_page+0x2ed/0x1520 [ 1677.840578] ? rwlock_bug.part.0+0x90/0x90 [ 1677.844827] ? lock_acquire+0x16f/0x3f0 [ 1677.848831] ? finish_mkwrite_fault+0x4f0/0x4f0 [ 1677.853534] ? add_mm_counter_fast.part.0+0x40/0x40 [ 1677.858584] __handle_mm_fault+0x22db/0x3f20 [ 1677.863022] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 1677.867935] ? find_held_lock+0x35/0x130 [ 1677.872050] ? handle_mm_fault+0x322/0xb30 [ 1677.876373] ? kasan_check_read+0x11/0x20 [ 1677.880561] handle_mm_fault+0x43f/0xb30 [ 1677.884659] __do_page_fault+0x5da/0xd60 [ 1677.888775] do_page_fault+0x71/0x581 [ 1677.892619] page_fault+0x1e/0x30 [ 1677.896106] RIP: 0010:copy_user_enhanced_fast_string+0xe/0x20 [ 1677.902017] Code: 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 1f 00 c3 0f 1f 80 00 00 00 00 0f 1f 00 83 fa 40 0f 82 70 ff ff ff 89 d1 a4 31 c0 0f 1f 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 83 [ 1677.920952] RSP: 0018:ffff88802713fb30 EFLAGS: 00010206 [ 1677.926337] RAX: 0000000000000000 RBX: 0000000000001000 RCX: 0000000000000200 [ 1677.933623] RDX: 0000000000001000 RSI: ffff88805d7ece00 RDI: 00000000207e1000 [ 1677.940939] RBP: ffff88802713fb68 R08: ffffed100bafda00 R09: 0000000000000000 [ 1677.948233] R10: ffffed100bafd9ff R11: ffff88805d7ecfff R12: 00000000207e0200 [ 1677.955522] R13: ffff88805d7ec000 R14: 00000000207e1200 R15: 00007ffffffff000 [ 1677.962842] ? copyout+0xe2/0x100 [ 1677.966310] copy_page_to_iter+0x347/0xd00 [ 1677.970569] pipe_read+0x28a/0x940 [ 1677.974135] __vfs_read+0x610/0x8c0 [ 1677.977777] ? vfs_copy_file_range+0xbb0/0xbb0 [ 1677.982400] ? rw_verify_area+0x118/0x360 [ 1677.986595] vfs_read+0x194/0x3e0 [ 1677.990084] ksys_read+0xea/0x1f0 [ 1677.993562] ? kernel_write+0x120/0x120 [ 1677.997568] ? do_syscall_64+0x26/0x610 [ 1678.001552] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1678.006935] ? do_syscall_64+0x26/0x610 [ 1678.010945] __x64_sys_read+0x73/0xb0 [ 1678.014773] do_syscall_64+0x103/0x610 [ 1678.018688] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1678.023900] RIP: 0033:0x457e29 [ 1678.027108] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1678.046034] RSP: 002b:00007fd8c7950c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1678.053767] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457e29 [ 1678.061053] RDX: 0000000050c7e3e3 RSI: 0000000020000200 RDI: 0000000000000004 [ 1678.068352] RBP: 000000000073bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 1678.075635] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd8c79516d4 [ 1678.082914] R13: 00000000004c3964 R14: 00000000004d83b0 R15: 00000000ffffffff [ 1678.092594] memory: usage 307200kB, limit 307200kB, failcnt 10509 [ 1678.111272] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1678.118392] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1678.125446] Memory cgroup stats for /syz1: cache:0KB rss:257364KB rss_huge:227328KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:8KB active_anon:257396KB inactive_file:4KB active_file:0KB unevictable:0KB [ 1678.146915] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=13292,uid=0 [ 1678.161848] Memory cgroup out of memory: Kill process 13292 (syz-executor.1) score 140 or sacrifice child [ 1678.173020] Killed process 13292 (syz-executor.1) total-vm:72580kB, anon-rss:8020kB, file-rss:34944kB, shmem-rss:0kB 14:22:28 executing program 1: r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x115002, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x6685) r1 = perf_event_open(&(0x7f0000000300)={0x400000001, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f000094f000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffff9c, 0xc00c642d, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0x100000073) read(r2, &(0x7f0000000200)=""/250, 0x50c7e3e3) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x4, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@loose='loose'}, {@access_user='access=user'}, {@cache_fscache='cache=fscache'}, {@access_client='access=client'}], [{@func={'func', 0x3d, 'PATH_CHECK'}}, {@mask={'mask', 0x3d, 'MAY_READ'}}]}}) 14:22:28 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000bd7000)={&(0x7f0000c07e98)=ANY=[@ANYBLOB="000000000000000000000000000000000000000033000000ffffffff00000000000000000000000000000000000000000000000000000000000000000029490000000000000000000000000000000000000000f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020001007d00000000000000480001006d64350000000000000000000019000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000"], 0x1}}, 0x0) 14:22:28 executing program 2 (fault-call:0 fault-nth:1): syz_emit_ethernet(0x140, &(0x7f0000000000)={@local, @random="8a37962a294f", [], {@ipv6={0x86dd, {0x0, 0x6, "110c11", 0x30, 0x21, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x6, [], {0x41, 0x6, "cb155d", 0x0, 0x0, 0x0, @mcast2, @dev}}}}}}}, 0x0) 14:22:28 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee4050c00000f0000008bc36f7d79ce3263dac37b7403242189c609", 0x23}], 0x1}, 0x0) 14:22:28 executing program 3: syz_emit_ethernet(0x0, 0x0, 0x0) 14:22:28 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2000000000000040, &(0x7f0000000280)}, 0x4e4) r1 = socket$pppoe(0x18, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) connect$pppoe(r1, &(0x7f0000000040)={0x18, 0x0, {0x2, @local, 'batadv0\x00'}}, 0x1e) r3 = dup(r0) accept4$nfc_llcp(r3, 0x0, &(0x7f0000000100), 0x800) r4 = syz_open_dev$cec(&(0x7f0000000080)='/dev/cec#\x00', 0x1, 0x2) ioctl$KVM_GET_SREGS(r4, 0x8138ae83, &(0x7f0000000140)) ioctl$TIOCSLCKTRMIOS(r4, 0x5457, &(0x7f00000000c0)) sendmmsg(r1, &(0x7f0000005b40), 0x40000000000014d, 0x0) [ 1678.195355] oom_reaper: reaped process 13292 (syz-executor.1), now anon-rss:0kB, file-rss:34832kB, shmem-rss:0kB [ 1678.270215] netlink: 7 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1678.281015] FAULT_INJECTION: forcing a failure. [ 1678.281015] name failslab, interval 1, probability 0, space 0, times 0 [ 1678.292307] CPU: 0 PID: 13343 Comm: syz-executor.2 Not tainted 5.0.0-rc6+ #70 [ 1678.299612] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1678.308981] Call Trace: [ 1678.311594] dump_stack+0x172/0x1f0 [ 1678.315246] should_fail.cold+0xa/0x1b [ 1678.319149] ? __nf_conntrack_find_get+0xe45/0x1960 [ 1678.324196] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1678.329316] ? __nf_conntrack_find_get+0xe45/0x1960 [ 1678.334365] __should_failslab+0x121/0x190 [ 1678.338618] should_failslab+0x9/0x14 [ 1678.342440] kmem_cache_alloc+0x47/0x710 [ 1678.346522] ? __nf_conntrack_find_get+0xe6c/0x1960 [ 1678.351559] __nf_conntrack_alloc+0xdb/0x680 [ 1678.356020] init_conntrack.isra.0+0xe3a/0x1180 [ 1678.360718] ? nf_conntrack_alloc+0x50/0x50 [ 1678.365073] ? rcu_lockdep_current_cpu_online+0xe3/0x130 [ 1678.370550] nf_conntrack_in+0xa68/0x1070 [ 1678.374730] ? nf_conntrack_update+0x990/0x990 [ 1678.379321] ? ip6t_error+0x40/0x40 [ 1678.383012] ipv6_conntrack_in+0x1e/0x30 [ 1678.387106] nf_hook_slow+0xbf/0x1f0 [ 1678.390844] ipv6_rcv+0x25d/0x420 [ 1678.394325] ? ip6_rcv_core.isra.0+0x1c00/0x1c00 [ 1678.399116] ? ip6_rcv_finish_core.isra.0+0x590/0x590 [ 1678.404334] ? ip6_rcv_core.isra.0+0x1c00/0x1c00 [ 1678.409107] __netif_receive_skb_one_core+0x115/0x1a0 [ 1678.414315] ? __netif_receive_skb_core+0x3010/0x3010 14:22:28 executing program 3: syz_emit_ethernet(0x0, 0x0, 0x0) 14:22:29 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000bd7000)={&(0x7f0000c07e98)=ANY=[@ANYBLOB="000000000000000000000000000000000000000033000000ffffffff000000000000000000000000000000000000000000000000000000000000000000294900000000000000000000000000000000000000fffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020001007d00000000000000480001006d64350000000000000000000019000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000"], 0x1}}, 0x0) [ 1678.419532] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1678.425087] ? check_preemption_disabled+0x48/0x290 [ 1678.430109] ? lock_acquire+0x16f/0x3f0 [ 1678.434105] __netif_receive_skb+0x2c/0x1c0 [ 1678.438449] netif_receive_skb_internal+0x117/0x660 [ 1678.443473] ? dev_cpu_dead+0x920/0x920 [ 1678.447465] ? eth_gro_receive+0x890/0x890 [ 1678.451730] napi_gro_frags+0xade/0xd10 [ 1678.455737] tun_get_user+0x2832/0x38d0 [ 1678.459739] ? mark_held_locks+0x100/0x100 [ 1678.464002] ? tun_build_skb.isra.0+0x1150/0x1150 14:22:29 executing program 3: syz_emit_ethernet(0x0, 0x0, 0x0) 14:22:29 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee4050c00000f0000008bc36f7d79ce3263dac37b7403242189c609", 0x23}], 0x1}, 0x0) [ 1678.468852] ? tun_get+0x171/0x290 [ 1678.472427] ? lock_downgrade+0x810/0x810 [ 1678.476599] ? kasan_check_read+0x11/0x20 [ 1678.480774] tun_chr_write_iter+0xbd/0x160 [ 1678.485025] do_iter_readv_writev+0x5e0/0x8e0 [ 1678.489526] ? vfs_dedupe_file_range+0x780/0x780 [ 1678.494301] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1678.499876] ? rw_verify_area+0x118/0x360 [ 1678.504039] do_iter_write+0x184/0x610 [ 1678.507942] ? dup_iter+0x260/0x260 [ 1678.511603] vfs_writev+0x1b3/0x2f0 [ 1678.515245] ? vfs_iter_write+0xb0/0xb0 [ 1678.519237] ? kasan_check_read+0x11/0x20 [ 1678.523414] ? iterate_fd+0x360/0x360 [ 1678.527263] ? check_preemption_disabled+0x48/0x290 [ 1678.532311] ? wait_for_completion+0x440/0x440 [ 1678.536959] ? __fget_light+0x1a9/0x230 [ 1678.540960] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1678.546510] do_writev+0xf6/0x290 [ 1678.549978] ? vfs_writev+0x2f0/0x2f0 [ 1678.553807] ? do_syscall_64+0x26/0x610 [ 1678.557817] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1678.563185] ? do_syscall_64+0x26/0x610 [ 1678.567180] __x64_sys_writev+0x75/0xb0 [ 1678.571168] do_syscall_64+0x103/0x610 [ 1678.575069] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1678.580275] RIP: 0033:0x457ce1 [ 1678.583481] Code: 75 14 b8 14 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 e4 b9 fb ff c3 48 83 ec 08 e8 1a 2d 00 00 48 89 04 24 b8 14 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 63 2d 00 00 48 89 d0 48 83 c4 08 48 3d 01 [ 1678.601774] netlink: 7 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1678.602388] RSP: 002b:00007f5d2350eba0 EFLAGS: 00000293 ORIG_RAX: 0000000000000014 14:22:29 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) fcntl$addseals(r0, 0x409, 0x9) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000000)=[{0x80000006}]}, 0x10) r1 = socket$pppoe(0x18, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) connect$pppoe(r1, &(0x7f0000000040)={0x18, 0x0, {0x2, @local, 'batadv0\x00'}}, 0x1e) sendmmsg(r1, &(0x7f0000005b40), 0x40000000000014d, 0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x408000, 0x0) write$P9_RLERROR(r3, &(0x7f00000000c0)={0x9, 0x7, 0x2}, 0x9) [ 1678.602421] RAX: ffffffffffffffda RBX: 0000000000000140 RCX: 0000000000457ce1 [ 1678.602438] RDX: 0000000000000001 RSI: 00007f5d2350ebf0 RDI: 00000000000000f0 [ 1678.602447] RBP: 0000000020000000 R08: 00000000000000f0 R09: 0000000000000000 [ 1678.602456] R10: 0000000000000064 R11: 0000000000000293 R12: 00007f5d2350f6d4 [ 1678.602465] R13: 00000000004c6477 R14: 00000000004db8c0 R15: 0000000000000003 14:22:29 executing program 3: syz_emit_ethernet(0x140, &(0x7f0000000000)={@local, @random="8a37962a294f", [], {@ipv6={0x86dd, {0x0, 0x6, "110c11", 0x30, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x6, [], {0x0, 0x6, "cb155d", 0x0, 0x0, 0x0, @mcast2, @dev}}}}}}}, 0x0) [ 1678.944575] syz-executor.1 invoked oom-killer: gfp_mask=0x7200c2(GFP_HIGHUSER|__GFP_ACCOUNT), order=0, oom_score_adj=0 [ 1678.955676] CPU: 1 PID: 13345 Comm: syz-executor.1 Not tainted 5.0.0-rc6+ #70 [ 1678.963040] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1678.972401] Call Trace: [ 1678.975015] dump_stack+0x172/0x1f0 [ 1678.978652] dump_header+0x10f/0xb6c [ 1678.982356] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1678.987478] ? ___ratelimit+0x60/0x595 [ 1678.991374] ? do_raw_spin_unlock+0x57/0x270 [ 1678.995789] oom_kill_process.cold+0x10/0x6f5 [ 1679.000277] ? task_will_free_mem+0x139/0x6e0 [ 1679.004767] out_of_memory+0x79a/0x1280 [ 1679.008751] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1679.013863] ? oom_killer_disable+0x280/0x280 [ 1679.018349] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1679.023465] mem_cgroup_out_of_memory+0x99/0xe0 [ 1679.028146] ? memcg_memory_event+0x40/0x40 [ 1679.032466] ? _raw_spin_unlock+0x2d/0x50 [ 1679.036628] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1679.041749] try_charge+0xfec/0x1570 [ 1679.045475] ? find_held_lock+0x35/0x130 [ 1679.049548] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1679.054407] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 1679.059248] ? find_held_lock+0x35/0x130 [ 1679.063324] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 1679.068185] memcg_kmem_charge_memcg+0x7c/0x130 [ 1679.072876] ? memcg_kmem_put_cache+0xb0/0xb0 [ 1679.077391] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 1679.082233] memcg_kmem_charge+0x13b/0x340 [ 1679.086478] __alloc_pages_nodemask+0x437/0x710 [ 1679.091146] ? __alloc_pages_slowpath+0x2900/0x2900 [ 1679.096159] ? ___might_sleep+0x163/0x280 [ 1679.100307] ? copyin+0xb5/0x100 [ 1679.103666] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1679.109220] alloc_pages_current+0x107/0x210 [ 1679.113657] pipe_write+0xa65/0xfb0 [ 1679.117320] __vfs_write+0x613/0x8e0 [ 1679.121059] ? kernel_read+0x120/0x120 [ 1679.124970] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1679.130548] ? rw_verify_area+0x118/0x360 [ 1679.134711] vfs_write+0x20c/0x580 [ 1679.138267] ksys_write+0xea/0x1f0 [ 1679.141817] ? __ia32_sys_read+0xb0/0xb0 [ 1679.145880] ? do_syscall_64+0x26/0x610 [ 1679.149865] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1679.155222] ? do_syscall_64+0x26/0x610 [ 1679.159219] __x64_sys_write+0x73/0xb0 [ 1679.163101] do_syscall_64+0x103/0x610 [ 1679.166982] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1679.172177] RIP: 0033:0x457e29 [ 1679.175359] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1679.194260] RSP: 002b:00007fd8c7971c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1679.201979] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457e29 [ 1679.209240] RDX: 0000000100000073 RSI: 00000000200001c0 RDI: 0000000000000005 [ 1679.216504] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1679.223818] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd8c79726d4 [ 1679.231087] R13: 00000000004c3be0 R14: 00000000004dc3d0 R15: 00000000ffffffff [ 1679.238739] memory: usage 307200kB, limit 307200kB, failcnt 10580 [ 1679.246237] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1679.253213] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1679.259433] Memory cgroup stats for /syz1: cache:0KB rss:257272KB rss_huge:227328KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:8KB active_anon:257404KB inactive_file:4KB active_file:0KB unevictable:0KB [ 1679.280356] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=13344,uid=0 14:22:29 executing program 1: r0 = perf_event_open(&(0x7f0000000300)={0x400000001, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x1001f, r0, 0x4d) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffff9c, 0xc00c642d, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0x100000073) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) 14:22:29 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000bd7000)={&(0x7f0000c07e98)=ANY=[@ANYBLOB="000000000000000000000000000000000000000033000000ffffffff0000000000000000000000000000000000000000000000000000000000000000002949000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020001007d00000000000000480001006d64350000000000000000000019000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000"], 0x1}}, 0x0) 14:22:29 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee4050c00000f0000008bc36f7d79ce3263dac37b7403242189c609", 0x23}], 0x1}, 0x0) 14:22:29 executing program 3: syz_emit_ethernet(0x140, &(0x7f0000000000)={@local, @random="8a37962a294f", [], {@ipv6={0x86dd, {0x0, 0x6, "110c11", 0x30, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x6, [], {0x0, 0x6, "cb155d", 0x0, 0x0, 0x0, @mcast2, @dev}}}}}}}, 0x0) 14:22:29 executing program 2 (fault-call:0 fault-nth:2): syz_emit_ethernet(0x140, &(0x7f0000000000)={@local, @random="8a37962a294f", [], {@ipv6={0x86dd, {0x0, 0x6, "110c11", 0x30, 0x21, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x6, [], {0x41, 0x6, "cb155d", 0x0, 0x0, 0x0, @mcast2, @dev}}}}}}}, 0x0) [ 1679.295202] Memory cgroup out of memory: Kill process 13344 (syz-executor.1) score 140 or sacrifice child [ 1679.305136] Killed process 13344 (syz-executor.1) total-vm:72844kB, anon-rss:8020kB, file-rss:34944kB, shmem-rss:0kB [ 1679.322887] oom_reaper: reaped process 13344 (syz-executor.1), now anon-rss:0kB, file-rss:33984kB, shmem-rss:0kB [ 1679.402138] netlink: 7 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1679.413999] FAULT_INJECTION: forcing a failure. [ 1679.413999] name failslab, interval 1, probability 0, space 0, times 0 [ 1679.425307] CPU: 1 PID: 13375 Comm: syz-executor.2 Not tainted 5.0.0-rc6+ #70 [ 1679.432589] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1679.441969] Call Trace: [ 1679.444571] dump_stack+0x172/0x1f0 [ 1679.448233] should_fail.cold+0xa/0x1b 14:22:30 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000bd7000)={&(0x7f0000c07e98)=ANY=[@ANYBLOB="000000000000000000000000000000000000000033000000ffffffff0000000000000000000000000000000000000000000000000000000000000000002949000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020001007d00000000000000480001006d64350000000000000000000019000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000"], 0x1}}, 0x0) 14:22:30 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000000)=[{0x80000006}]}, 0x10) r1 = socket$pppoe(0x18, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) listen(r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) connect$pppoe(r1, &(0x7f0000000040)={0x18, 0x0, {0x2, @local, 'batadv0\x00'}}, 0x1e) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffff9c, 0x84, 0xf, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e24, @empty}}, 0x8001, 0x3, 0x81, 0x101, 0x400}, &(0x7f0000000180)=0x98) getsockopt$inet_sctp_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f00000001c0)={r4, 0x7fffffff}, &(0x7f0000000200)=0x8) sendmmsg(r1, &(0x7f0000005b40), 0x40000000000014d, 0x0) 14:22:30 executing program 3: syz_emit_ethernet(0x140, &(0x7f0000000000)={@local, @random="8a37962a294f", [], {@ipv6={0x86dd, {0x0, 0x6, "110c11", 0x30, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x6, [], {0x0, 0x6, "cb155d", 0x0, 0x0, 0x0, @mcast2, @dev}}}}}}}, 0x0) 14:22:30 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee4050c00000f0000008bc36f7d79ce3263dac37b7403242189c609", 0x23}], 0x1}, 0x0) [ 1679.452157] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1679.457271] ? perf_trace_lock_acquire+0xf5/0x580 [ 1679.462128] ? __nf_conntrack_find_get+0xe45/0x1960 [ 1679.467177] __should_failslab+0x121/0x190 [ 1679.471428] should_failslab+0x9/0x14 [ 1679.475245] __kmalloc_track_caller+0x6d/0x740 [ 1679.479831] ? lock_downgrade+0x810/0x810 [ 1679.484188] ? nf_ct_ext_add+0x2a9/0x640 [ 1679.488250] __krealloc+0x71/0xc0 [ 1679.491691] nf_ct_ext_add+0x2a9/0x640 [ 1679.495586] init_conntrack.isra.0+0x447/0x1180 [ 1679.500271] ? nf_conntrack_alloc+0x50/0x50 [ 1679.504603] ? rcu_lockdep_current_cpu_online+0xe3/0x130 [ 1679.510046] nf_conntrack_in+0xa68/0x1070 [ 1679.514208] ? nf_conntrack_update+0x990/0x990 [ 1679.518803] ? ip6t_error+0x40/0x40 [ 1679.522452] ipv6_conntrack_in+0x1e/0x30 [ 1679.526509] nf_hook_slow+0xbf/0x1f0 [ 1679.530214] ipv6_rcv+0x25d/0x420 [ 1679.533655] ? ip6_rcv_core.isra.0+0x1c00/0x1c00 [ 1679.538401] ? ip6_rcv_finish_core.isra.0+0x590/0x590 [ 1679.543602] ? ip6_rcv_core.isra.0+0x1c00/0x1c00 [ 1679.548352] __netif_receive_skb_one_core+0x115/0x1a0 [ 1679.553531] ? __netif_receive_skb_core+0x3010/0x3010 [ 1679.558727] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1679.564262] ? check_preemption_disabled+0x48/0x290 [ 1679.569276] ? lock_acquire+0x16f/0x3f0 [ 1679.573262] __netif_receive_skb+0x2c/0x1c0 [ 1679.577571] netif_receive_skb_internal+0x117/0x660 [ 1679.582573] ? dev_cpu_dead+0x920/0x920 [ 1679.586536] ? eth_gro_receive+0x890/0x890 [ 1679.590762] napi_gro_frags+0xade/0xd10 [ 1679.594727] tun_get_user+0x2832/0x38d0 [ 1679.598688] ? mark_held_locks+0x100/0x100 [ 1679.602958] ? tun_build_skb.isra.0+0x1150/0x1150 [ 1679.607790] ? tun_get+0x171/0x290 [ 1679.611320] ? lock_downgrade+0x810/0x810 [ 1679.615472] ? kasan_check_read+0x11/0x20 [ 1679.619624] tun_chr_write_iter+0xbd/0x160 [ 1679.623849] do_iter_readv_writev+0x5e0/0x8e0 [ 1679.628350] ? vfs_dedupe_file_range+0x780/0x780 [ 1679.633101] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1679.638626] ? rw_verify_area+0x118/0x360 [ 1679.642795] do_iter_write+0x184/0x610 [ 1679.646673] ? dup_iter+0x260/0x260 [ 1679.650311] vfs_writev+0x1b3/0x2f0 [ 1679.653950] ? vfs_iter_write+0xb0/0xb0 [ 1679.657913] ? kasan_check_read+0x11/0x20 [ 1679.662075] ? iterate_fd+0x360/0x360 [ 1679.665871] ? check_preemption_disabled+0x48/0x290 [ 1679.670880] ? wait_for_completion+0x440/0x440 [ 1679.675454] ? __fget_light+0x1a9/0x230 [ 1679.679431] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1679.684971] do_writev+0xf6/0x290 [ 1679.688501] ? vfs_writev+0x2f0/0x2f0 [ 1679.692391] ? do_syscall_64+0x26/0x610 [ 1679.696367] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1679.701720] ? do_syscall_64+0x26/0x610 [ 1679.705684] __x64_sys_writev+0x75/0xb0 [ 1679.709658] do_syscall_64+0x103/0x610 [ 1679.713553] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1679.718731] RIP: 0033:0x457ce1 [ 1679.721910] Code: 75 14 b8 14 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 e4 b9 fb ff c3 48 83 ec 08 e8 1a 2d 00 00 48 89 04 24 b8 14 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 63 2d 00 00 48 89 d0 48 83 c4 08 48 3d 01 [ 1679.740805] RSP: 002b:00007f5d2350eba0 EFLAGS: 00000293 ORIG_RAX: 0000000000000014 [ 1679.748502] RAX: ffffffffffffffda RBX: 0000000000000140 RCX: 0000000000457ce1 [ 1679.755781] RDX: 0000000000000001 RSI: 00007f5d2350ebf0 RDI: 00000000000000f0 [ 1679.763044] RBP: 0000000020000000 R08: 00000000000000f0 R09: 0000000000000000 [ 1679.770326] R10: 0000000000000064 R11: 0000000000000293 R12: 00007f5d2350f6d4 [ 1679.777583] R13: 00000000004c6477 R14: 00000000004db8c0 R15: 0000000000000003 14:22:30 executing program 2 (fault-call:0 fault-nth:3): syz_emit_ethernet(0x140, &(0x7f0000000000)={@local, @random="8a37962a294f", [], {@ipv6={0x86dd, {0x0, 0x6, "110c11", 0x30, 0x21, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x6, [], {0x41, 0x6, "cb155d", 0x0, 0x0, 0x0, @mcast2, @dev}}}}}}}, 0x0) [ 1679.899949] netlink: 7 bytes leftover after parsing attributes in process `syz-executor.4'. 14:22:30 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000bd7000)={&(0x7f0000c07e98)=ANY=[@ANYBLOB="000000000000000000000000000000000000000033000000ffffffff0000000000000000000000000000000000000000000000000000000000000000002949000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020001007d00000000000000480001006d64350000000000000000000019000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000"], 0x1}}, 0x0) 14:22:30 executing program 3: syz_emit_ethernet(0x140, &(0x7f0000000000)={@local, @random="8a37962a294f", [], {@ipv6={0x86dd, {0x0, 0x6, "110c11", 0x30, 0x21, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x0, [], {0x0, 0x6, "cb155d", 0x0, 0x0, 0x0, @mcast2, @dev}}}}}}}, 0x0) [ 1680.240485] syz-executor.1 invoked oom-killer: gfp_mask=0x7200c2(GFP_HIGHUSER|__GFP_ACCOUNT), order=0, oom_score_adj=0 [ 1680.258443] CPU: 0 PID: 13377 Comm: syz-executor.1 Not tainted 5.0.0-rc6+ #70 [ 1680.265742] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1680.275093] Call Trace: [ 1680.277676] dump_stack+0x172/0x1f0 [ 1680.281316] dump_header+0x10f/0xb6c [ 1680.285046] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1680.290157] ? ___ratelimit+0x60/0x595 [ 1680.294141] ? do_raw_spin_unlock+0x57/0x270 [ 1680.298543] oom_kill_process.cold+0x10/0x6f5 [ 1680.303029] ? task_will_free_mem+0x139/0x6e0 [ 1680.307516] out_of_memory+0x79a/0x1280 [ 1680.311480] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1680.316570] ? oom_killer_disable+0x280/0x280 [ 1680.321078] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1680.326201] mem_cgroup_out_of_memory+0x99/0xe0 [ 1680.330860] ? memcg_memory_event+0x40/0x40 [ 1680.335174] ? _raw_spin_unlock+0x2d/0x50 [ 1680.339309] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1680.344401] try_charge+0xfec/0x1570 [ 1680.348100] ? find_held_lock+0x35/0x130 [ 1680.352152] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1680.357001] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 1680.361834] ? find_held_lock+0x35/0x130 [ 1680.365896] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 1680.370749] memcg_kmem_charge_memcg+0x7c/0x130 [ 1680.375407] ? memcg_kmem_put_cache+0xb0/0xb0 [ 1680.379898] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 1680.384730] memcg_kmem_charge+0x13b/0x340 [ 1680.388960] __alloc_pages_nodemask+0x437/0x710 [ 1680.393642] ? __alloc_pages_slowpath+0x2900/0x2900 [ 1680.398660] ? ___might_sleep+0x163/0x280 [ 1680.402799] ? copyin+0xb5/0x100 [ 1680.406157] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1680.411688] alloc_pages_current+0x107/0x210 [ 1680.416134] pipe_write+0xa65/0xfb0 [ 1680.419770] __vfs_write+0x613/0x8e0 [ 1680.423473] ? kernel_read+0x120/0x120 [ 1680.427349] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1680.432884] ? rw_verify_area+0x118/0x360 [ 1680.437049] vfs_write+0x20c/0x580 [ 1680.440585] ksys_write+0xea/0x1f0 [ 1680.444117] ? __ia32_sys_read+0xb0/0xb0 [ 1680.448175] ? do_syscall_64+0x26/0x610 [ 1680.452137] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1680.457485] ? do_syscall_64+0x26/0x610 [ 1680.461558] __x64_sys_write+0x73/0xb0 [ 1680.465453] do_syscall_64+0x103/0x610 [ 1680.469333] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1680.474506] RIP: 0033:0x457e29 [ 1680.477715] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1680.496630] RSP: 002b:00007fd8c7971c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1680.504345] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457e29 [ 1680.511603] RDX: 0000000100000073 RSI: 00000000200001c0 RDI: 0000000000000005 [ 1680.518866] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1680.526140] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd8c79726d4 [ 1680.533412] R13: 00000000004c3be0 R14: 00000000004dc3d0 R15: 00000000ffffffff [ 1680.543237] memory: usage 307200kB, limit 307200kB, failcnt 10658 [ 1680.549794] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1680.557086] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1680.563669] Memory cgroup stats for /syz1: cache:0KB rss:257400KB rss_huge:227328KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:8KB active_anon:257460KB inactive_file:4KB active_file:0KB unevictable:0KB [ 1680.584647] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=13376,uid=0 [ 1680.599422] Memory cgroup out of memory: Kill process 13376 (syz-executor.1) score 140 or sacrifice child [ 1680.609310] net_ratelimit: 34 callbacks suppressed [ 1680.609319] protocol 88fb is buggy, dev hsr_slave_0 [ 1680.609398] protocol 88fb is buggy, dev hsr_slave_1 [ 1680.624876] Killed process 13376 (syz-executor.1) total-vm:72712kB, anon-rss:8020kB, file-rss:34944kB, shmem-rss:0kB 14:22:31 executing program 2: syz_emit_ethernet(0x140, &(0x7f0000000000)={@local, @random="8a37962a294f", [], {@ipv6={0x86dd, {0x0, 0x6, "110c11", 0x30, 0x21, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x6, [], {0x41, 0x6, "cb155d", 0x0, 0x0, 0x0, @mcast2, @dev}}}}}}}, 0x0) 14:22:31 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee4050c00000f0000008bc36f7d79ce3263dac37b7403242189c609", 0x23}], 0x1}, 0x0) 14:22:31 executing program 1: r0 = perf_event_open(&(0x7f0000000300)={0x400000001, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) capget(&(0x7f0000000040)={0x200f1526, r1}, &(0x7f00000000c0)={0x5c01, 0x6347, 0x2, 0x610, 0x4, 0x8}) mmap(&(0x7f000094f000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) r2 = syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x8d2, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, 0x0) getsockname$netlink(r2, &(0x7f0000000140), &(0x7f0000000180)=0xc) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0x100000073) read(r3, &(0x7f0000000200)=""/250, 0x50c7e3e3) setsockopt$IP_VS_SO_SET_FLUSH(r3, 0x0, 0x485, 0x0, 0x0) 14:22:31 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000bd7000)={&(0x7f0000c07e98)=ANY=[@ANYBLOB="000000000000000000000000000000000000000033000000ffffffff0000000000000000000000000000000000000000000000000000000000000000002949000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020001007d00000000000000480001006d64350000000000000000000019000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000"], 0x1}}, 0x0) 14:22:31 executing program 3: syz_emit_ethernet(0x140, &(0x7f0000000000)={@local, @random="8a37962a294f", [], {@ipv6={0x86dd, {0x0, 0x6, "110c11", 0x30, 0x21, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x0, [], {0x0, 0x6, "cb155d", 0x0, 0x0, 0x0, @mcast2, @dev}}}}}}}, 0x0) 14:22:31 executing program 0: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000000)=[{0x80000006}]}, 0x10) r0 = socket$pppoe(0x18, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x2, @local, 'batadv0\x00'}}, 0x1e) sendmmsg(r0, &(0x7f0000005b40), 0x40000000000014d, 0x0) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20ncci\x00', 0x20101, 0x0) bind$bt_rfcomm(r2, &(0x7f00000000c0)={0x1f, {0x319987cd, 0x9, 0x200, 0x1}}, 0xa) ioctl$VIDIOC_SUBDEV_G_FMT(r2, 0xc0585604, &(0x7f0000000100)={0x1, 0x0, {0xe52d, 0x0, 0x200e, 0x7, 0x81b1093c5fa86977, 0x0, 0x2}}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000200)={r2, 0x50, &(0x7f0000000180)}, 0x10) [ 1680.643476] oom_reaper: reaped process 13376 (syz-executor.1), now anon-rss:0kB, file-rss:34832kB, shmem-rss:0kB 14:22:31 executing program 2: syz_emit_ethernet(0xd, &(0x7f0000000000)={@local, @random="8a37962a294f", [], {@ipv6={0x86dd, {0x0, 0x6, "110c11", 0x30, 0x21, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x6, [], {0x41, 0x6, "cb155d", 0x0, 0x0, 0x0, @mcast2, @dev}}}}}}}, 0x0) 14:22:31 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000bd7000)={&(0x7f0000c07e98)=ANY=[@ANYBLOB="000000000000000000000000000000000000000033000000ffffffff0000000000000000000000000000000000000000000000000000000000000000002949000000000000000000000000000000000000000000157100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020001007d00000000000000480001006d64350000000000000000000019000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000"], 0x1}}, 0x0) [ 1680.711941] dccp_v6_rcv: dropped packet with invalid checksum [ 1680.722457] dccp_invalid_packet: P.Data Offset(0) too small [ 1680.729121] netlink: 7 bytes leftover after parsing attributes in process `syz-executor.4'. 14:22:31 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee4050c00000f0000008bc36f7d79ce3263dac37b7403242189c609", 0x23}], 0x1}, 0x0) 14:22:31 executing program 3: syz_emit_ethernet(0x140, &(0x7f0000000000)={@local, @random="8a37962a294f", [], {@ipv6={0x86dd, {0x0, 0x6, "110c11", 0x30, 0x21, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x0, [], {0x0, 0x6, "cb155d", 0x0, 0x0, 0x0, @mcast2, @dev}}}}}}}, 0x0) [ 1680.926105] dccp_invalid_packet: P.Data Offset(0) too small [ 1680.936451] netlink: 7 bytes leftover after parsing attributes in process `syz-executor.4'. 14:22:31 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000bd7000)={&(0x7f0000c07e98)=ANY=[@ANYBLOB="000000000000000000000000000000000000000033000000ffffffff000000000000000000000000000000000000000000000000000000000000000000294900000000000000000000000000000000000000ffffff9e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020001007d00000000000000480001006d64350000000000000000000019000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000"], 0x1}}, 0x0) 14:22:31 executing program 2: syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @random="8a37962a294f", [], {@ipv6={0x86dd, {0x0, 0x6, "110c11", 0x30, 0x21, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x6, [], {0x41, 0x6, "cb155d", 0x0, 0x0, 0x0, @mcast2, @dev}}}}}}}, 0x0) 14:22:31 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/igmp6\x00') setsockopt$RXRPC_SECURITY_KEY(r1, 0x110, 0x1, &(0x7f00000000c0)='\x00', 0x1) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000000)=[{0x80000006}]}, 0x10) r2 = socket$pppoe(0x18, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) connect$pppoe(r2, &(0x7f0000000040)={0x18, 0x0, {0x2, @local, 'batadv0\x00'}}, 0x1e) sendmmsg(r2, &(0x7f0000005b40), 0x40000000000014d, 0x0) 14:22:31 executing program 3 (fault-call:0 fault-nth:0): syz_emit_ethernet(0x140, &(0x7f0000000000)={@local, @random="8a37962a294f", [], {@ipv6={0x86dd, {0x0, 0x6, "110c11", 0x30, 0x21, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x6, [], {0x0, 0x6, "cb155d", 0x0, 0x0, 0x0, @mcast2, @dev}}}}}}}, 0x0) [ 1681.326214] syz-executor.1 invoked oom-killer: gfp_mask=0x7200c2(GFP_HIGHUSER|__GFP_ACCOUNT), order=0, oom_score_adj=0 [ 1681.337198] CPU: 1 PID: 13414 Comm: syz-executor.1 Not tainted 5.0.0-rc6+ #70 [ 1681.344495] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1681.353854] Call Trace: [ 1681.356461] dump_stack+0x172/0x1f0 [ 1681.360085] dump_header+0x10f/0xb6c [ 1681.363801] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1681.368892] ? ___ratelimit+0x60/0x595 [ 1681.372765] ? do_raw_spin_unlock+0x57/0x270 [ 1681.377291] oom_kill_process.cold+0x10/0x6f5 [ 1681.381808] ? task_will_free_mem+0x139/0x6e0 [ 1681.386316] out_of_memory+0x79a/0x1280 [ 1681.390311] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1681.395462] ? oom_killer_disable+0x280/0x280 [ 1681.399950] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1681.405079] mem_cgroup_out_of_memory+0x99/0xe0 [ 1681.409748] ? memcg_memory_event+0x40/0x40 [ 1681.414066] ? _raw_spin_unlock+0x2d/0x50 [ 1681.418205] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1681.423294] try_charge+0xfec/0x1570 [ 1681.426994] ? find_held_lock+0x35/0x130 [ 1681.431060] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1681.435904] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 1681.440745] ? find_held_lock+0x35/0x130 [ 1681.444808] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 1681.449648] memcg_kmem_charge_memcg+0x7c/0x130 [ 1681.454306] ? memcg_kmem_put_cache+0xb0/0xb0 [ 1681.458793] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 1681.463623] memcg_kmem_charge+0x13b/0x340 [ 1681.467850] __alloc_pages_nodemask+0x437/0x710 [ 1681.472510] ? __alloc_pages_slowpath+0x2900/0x2900 [ 1681.477528] ? ___might_sleep+0x163/0x280 [ 1681.481685] ? copyin+0xb5/0x100 [ 1681.485038] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1681.490585] alloc_pages_current+0x107/0x210 [ 1681.494992] pipe_write+0xa65/0xfb0 [ 1681.498632] __vfs_write+0x613/0x8e0 [ 1681.502342] ? kernel_read+0x120/0x120 [ 1681.506218] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1681.511756] ? rw_verify_area+0x118/0x360 [ 1681.515904] vfs_write+0x20c/0x580 [ 1681.519458] ksys_write+0xea/0x1f0 [ 1681.522999] ? __ia32_sys_read+0xb0/0xb0 [ 1681.527067] ? do_syscall_64+0x26/0x610 [ 1681.531035] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1681.536401] ? do_syscall_64+0x26/0x610 [ 1681.540379] __x64_sys_write+0x73/0xb0 [ 1681.544258] do_syscall_64+0x103/0x610 [ 1681.548170] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1681.553345] RIP: 0033:0x457e29 [ 1681.556537] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1681.575615] RSP: 002b:00007fd8c7971c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1681.583322] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457e29 [ 1681.590578] RDX: 0000000100000073 RSI: 00000000200001c0 RDI: 0000000000000005 [ 1681.597865] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1681.605154] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd8c79726d4 [ 1681.612418] R13: 00000000004c3be0 R14: 00000000004dc3d0 R15: 00000000ffffffff [ 1681.621082] memory: usage 307200kB, limit 307200kB, failcnt 10779 [ 1681.627369] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1681.634578] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1681.649219] Memory cgroup stats for /syz1: cache:0KB rss:257292KB rss_huge:227328KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:8KB active_anon:257404KB inactive_file:4KB active_file:0KB unevictable:0KB 14:22:32 executing program 3: syz_emit_ethernet(0x140, &(0x7f0000000000)={@local, @random="8a37962a294f", [], {@ipv6={0x86dd, {0x0, 0x6, "110c11", 0x30, 0x21, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x6, [], {0x0, 0x6, "cb155d", 0x0, 0x0, 0x0, @mcast2, @dev}}}}}}}, 0x0) 14:22:32 executing program 1: r0 = perf_event_open(&(0x7f0000000300)={0x400000001, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f000094f000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x40000, 0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f00000001c0)='security.selinux\x00', &(0x7f0000000200)='system_u:object_r:crond_var_run_t:s0\x00', 0x25, 0x3) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x113}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000280)={0x7, 0x8, 0xfa00, {r3, 0x3}}, 0x10) write(r1, &(0x7f00000001c0), 0x0) read(r0, &(0x7f00000000c0)=""/250, 0xc8) 14:22:32 executing program 2: syz_emit_ethernet(0x141, &(0x7f0000000000)={@local, @random="8a37962a294f", [], {@ipv6={0x86dd, {0x0, 0x6, "110c11", 0x30, 0x21, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x6, [], {0x41, 0x6, "cb155d", 0x0, 0x0, 0x0, @mcast2, @dev}}}}}}}, 0x0) 14:22:32 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee4050c00000f0000008bc36f7d79ce3263dac37b7403242189c609", 0x23}], 0x1}, 0x0) 14:22:32 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000bd7000)={&(0x7f0000c07e98)=ANY=[@ANYBLOB="000000000000000000000000000000000000000033000000ffffffff000000000000000000000000000000000000000000000000000000000000000000294900000000000000000000000000000000000000fffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020001007d00000000000000480001006d64350000000000000000000019000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000"], 0x1}}, 0x0) 14:22:32 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000000)=[{0x80000006}]}, 0x10) r1 = socket$pppoe(0x18, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) connect$pppoe(r1, &(0x7f0000000040)={0x18, 0x0, {0x2, @local, 'batadv0\x00'}}, 0x1e) sendmmsg(r1, &(0x7f0000005b40), 0x40000000000014d, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='timers\x00') ioctl$TIOCGETD(r3, 0x5424, &(0x7f0000000100)) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x100, 0x4) [ 1681.671074] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=13410,uid=0 [ 1681.686314] Memory cgroup out of memory: Kill process 13410 (syz-executor.1) score 140 or sacrifice child [ 1681.696328] Killed process 13410 (syz-executor.1) total-vm:72844kB, anon-rss:8020kB, file-rss:34944kB, shmem-rss:0kB [ 1681.716538] oom_reaper: reaped process 13410 (syz-executor.1), now anon-rss:0kB, file-rss:34836kB, shmem-rss:0kB 14:22:32 executing program 3: syz_emit_ethernet(0xd, &(0x7f0000000000)={@local, @random="8a37962a294f", [], {@ipv6={0x86dd, {0x0, 0x6, "110c11", 0x30, 0x21, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x6, [], {0x0, 0x6, "cb155d", 0x0, 0x0, 0x0, @mcast2, @dev}}}}}}}, 0x0) [ 1681.774571] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 1681.789547] dccp_v6_rcv: dropped packet with invalid checksum [ 1681.798473] netlink: 7 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1681.807188] protocol 88fb is buggy, dev hsr_slave_0 [ 1681.807280] protocol 88fb is buggy, dev hsr_slave_1 [ 1681.807406] protocol 88fb is buggy, dev hsr_slave_0 14:22:32 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee4050c00000f0000008bc36f7d79ce3263dac37b7403242189c609", 0x23}], 0x1}, 0x0) 14:22:32 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000bd7000)={&(0x7f0000c07e98)=ANY=[@ANYBLOB="000000000000000000000000000000000000000033000000ffffffff00000000000000000000000000000000000000000000000000000000000000000029490000000000000000000000000000000000000000f0ffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020001007d00000000000000480001006d64350000000000000000000019000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000"], 0x1}}, 0x0) 14:22:32 executing program 2: syz_emit_ethernet(0xfdef, &(0x7f0000000000)={@local, @random="8a37962a294f", [], {@ipv6={0x86dd, {0x0, 0x6, "110c11", 0x30, 0x21, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x6, [], {0x41, 0x6, "cb155d", 0x0, 0x0, 0x0, @mcast2, @dev}}}}}}}, 0x0) 14:22:32 executing program 1: r0 = perf_event_open(&(0x7f0000000300)={0x400000001, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f000094f000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffff9c, 0xc00c642d, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0x100000073) 14:22:32 executing program 3: syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @random="8a37962a294f", [], {@ipv6={0x86dd, {0x0, 0x6, "110c11", 0x30, 0x21, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x6, [], {0x0, 0x6, "cb155d", 0x0, 0x0, 0x0, @mcast2, @dev}}}}}}}, 0x0) 14:22:32 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000bd7000)={&(0x7f0000c07e98)=ANY=[@ANYBLOB="000000000000000000000000000000000000000033000000ffffffff0000000000000000000000000000000000000000000000000000000000000000002949000000000000000000000000000000000000007fffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020001007d00000000000000480001006d64350000000000000000000019000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000"], 0x1}}, 0x0) [ 1682.090370] netlink: 7 bytes leftover after parsing attributes in process `syz-executor.4'. 14:22:32 executing program 2: syz_emit_ethernet(0x20000140, &(0x7f0000000000)={@local, @random="8a37962a294f", [], {@ipv6={0x86dd, {0x0, 0x6, "110c11", 0x30, 0x21, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x6, [], {0x41, 0x6, "cb155d", 0x0, 0x0, 0x0, @mcast2, @dev}}}}}}}, 0x0) 14:22:32 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee4050c00000f0000008bc36f7d79ce3263dac37b7403242189c609", 0x23}], 0x1}, 0x0) 14:22:32 executing program 3: syz_emit_ethernet(0x15b, &(0x7f0000000000)={@local, @random="8a37962a294f", [], {@ipv6={0x86dd, {0x0, 0x6, "110c11", 0x30, 0x21, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x6, [], {0x0, 0x6, "cb155d", 0x0, 0x0, 0x0, @mcast2, @dev}}}}}}}, 0x0) 14:22:32 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000000)=[{0x80000006}]}, 0x10) r1 = socket$pppoe(0x18, 0x1, 0x0) r2 = open(&(0x7f0000000080)='./file0\x00', 0x200, 0xa0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f00000000c0)=0x1, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) connect$pppoe(r1, &(0x7f0000000040)={0x18, 0x0, {0x2, @local, 'batadv0\x00'}}, 0x1e) sendmmsg(r2, &(0x7f0000005b40), 0x0, 0x1) connect$pppoe(r1, &(0x7f0000000100)={0x18, 0x0, {0x4, @random="007d7c5d79de", 'veth0_to_bond\x00'}}, 0x1e) 14:22:32 executing program 2: syz_emit_ethernet(0x7ffff000, &(0x7f0000000000)={@local, @random="8a37962a294f", [], {@ipv6={0x86dd, {0x0, 0x6, "110c11", 0x30, 0x21, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x6, [], {0x41, 0x6, "cb155d", 0x0, 0x0, 0x0, @mcast2, @dev}}}}}}}, 0x0) 14:22:32 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000bd7000)={&(0x7f0000c07e98)=ANY=[@ANYBLOB="000000000000000000000000000000000000000033000000ffffffff0000000000000000000000000000000000000000000000000000000000000000002949000000000000000000000000000000000000009effffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020001007d00000000000000480001006d64350000000000000000000019000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000"], 0x1}}, 0x0) [ 1682.322694] netlink: 7 bytes leftover after parsing attributes in process `syz-executor.4'. 14:22:32 executing program 3: syz_emit_ethernet(0xfdef, &(0x7f0000000000)={@local, @random="8a37962a294f", [], {@ipv6={0x86dd, {0x0, 0x6, "110c11", 0x30, 0x21, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x6, [], {0x0, 0x6, "cb155d", 0x0, 0x0, 0x0, @mcast2, @dev}}}}}}}, 0x0) 14:22:32 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee4050c00000f0000008bc36f7d79ce3263dac37b7403242189c609", 0x23}], 0x1}, 0x0) 14:22:33 executing program 2: syz_emit_ethernet(0xfffffdef, &(0x7f0000000000)={@local, @random="8a37962a294f", [], {@ipv6={0x86dd, {0x0, 0x6, "110c11", 0x30, 0x21, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x6, [], {0x41, 0x6, "cb155d", 0x0, 0x0, 0x0, @mcast2, @dev}}}}}}}, 0x0) [ 1682.600332] netlink: 7 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1682.625708] netlink: 7 bytes leftover after parsing attributes in process `syz-executor.4'. 14:22:33 executing program 1: r0 = perf_event_open(&(0x7f0000000300)={0x400000001, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f000094f000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x800, 0x0) getpeername$ax25(r1, &(0x7f00000001c0)={{0x3, @netrom}, [@rose, @null, @default, @null, @default, @netrom, @netrom, @null]}, &(0x7f0000000240)=0x48) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffff9c, 0xc00c642d, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x24, &(0x7f0000000000)=0x8, 0x4) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0x100000073) ioctl$PPPIOCGDEBUG(0xffffffffffffff9c, 0x80047441, &(0x7f0000000280)) read(r3, &(0x7f00000000c0)=""/250, 0xfffffffffffffca9) 14:22:33 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000bd7000)={&(0x7f0000c07e98)=ANY=[@ANYBLOB="000000000000000000000000000000000000000033000000ffffffff000000000000000000000000000000000000000000000000000000000000000000294900000000000000000000000000000000000000f0ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020001007d00000000000000480001006d64350000000000000000000019000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000"], 0x1}}, 0x0) 14:22:33 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000000)=[{0x80000006}]}, 0x10) r1 = socket$pppoe(0x18, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) connect$pppoe(r1, &(0x7f0000000040)={0x18, 0x0, {0x2, @local, 'batadv0\x00'}}, 0x1e) sendmmsg(r2, &(0x7f0000001fc0)=[{{&(0x7f00000000c0)=@sco={0x1f, {0x3fffc00000000000, 0x1, 0xcc, 0x1, 0x1, 0x1}}, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000140)="0d88c0d49a6df2685dd49177da0b3b07b8238e5e782efcd8e2eba39eee84cff08385072a558183ce9084461b732450711acf752a9e8c49827c2f4297cc972e32cf69fafa910e4a7310f085bdb4be924a1b789691178931607b25df0f54ef476c581096154b06aec7c806471ce4fb6eb347c9b58e2c2d8db35d74043c450bc3734b25fd79383dab41ba733a36e26f667f8610a245fa2262e1ae50d76193578a54e9bdf538d9069b5a654d4bf72b3bdbf0ba486cdc2016802f85625b63f0e744d0d1314b27451d93e7fa788ef66d194ab9eb5deeb097fffc892370c47701d0cd59552405d20c8c270f98f0505053"}, {&(0x7f0000000240)="a7bd4b9dd17d96e05bb8cfe5b33e5ae591f07d61f9fb36e531279cf57553a2a1914aa6f1df632d37f5f8f9dcdf4e343eb4aef4aba609fe08f22287e59d7456eb0f37ed58f96adc47755732e8c64957bd8c95cd7f44ba3fd137c2a77e0a02a1dbb23a4fb2e2c4f5a6b06c5d5708d4b504808fc1ebbb93d19e1d501d97a2e077147a8bc021f8af0c943de7cd69892e9518a3b96fee78a32601d71c93ba44dd2ffa30443605818d3676a14e086079e5f392fab88a6e9af55259f2db05d84660b5eb90c23ea25f1cb32943ea73d87b8c18a3041be18dd3a805f688e2554f22d9c8e41331a58eba9bdc452672d506849799a6be0d8badbd82a230c48f3337f358bd"}, {&(0x7f0000000340)="cbdb2191def7a0b8232251d08a34798662361b4137202ca0253eac92d31eeaceba28fe708feceedb7d665e995dcb3f0e74ee7b81ff550577f88726216f5704799603fc0e96719b2e0c53658600c5be68a3ffa57a91dc8fdc99fc882674eab3cf318b224ff31512f6475a2a73f0ae63"}]}, 0x400}, {{&(0x7f0000000400)=@x25={0x9, @null=' \x00'}, 0x0, &(0x7f0000001680)=[{&(0x7f0000000480)="ee391ab86bb389c1ef0c1b72d0fa"}, {&(0x7f00000004c0)="16a27c7e9d188302408edaa0afe819e30d7ac225a33019b35f52720fff632a3ec814cc004667260cbd1e0c300f0b904aa2f8cc55ce7fd2eb59c78ecd0dfc27d789a90ee47b308b0758d4e93f5f6cbaaa0ebb615c636b8c1f9b5be54c130910aaddcc65dd97b861a8b876eb171fb6605286cf206351809bf0c78e7eada7ad9ca7a4e2bdeb4444ebaf4f5e2cc0447de562834c9c70bc8287041626f162a44f36f5ff4691578a657cd2eb80a95348292dbf0cee780a23c6"}, {&(0x7f0000000580)="58f37bc47b094ba390231d2f62eb7e60613c86a8820905747d3c5aed945ec24d3ae30c06db30312a875935243dafebbcaecd1481f80a64ef4d4d0c224b741ec48797828f1c1dba944219c05ed610a68c81715ddf3286dab0817ec3f3f44b6bc989e5982c44b69827c8b9945c65d898bd62f34ec239b2dc218d0972b0b3c57d1491d311b09ecc7c0635c96a731e9c6a8e3a3ea34899bd48cf39b5a22162fdf591876902e318dba823b1e162337ffe4763788bdf7c5840162c6b02db7ee5c0c1229d6a7e12d841cfed7c2279562d86733728436a3e69ec3f07c195e72f2fb8c42adb76cfc5605e72352b5293f99fd8d726efeed576d6f4c4af9a"}, {&(0x7f0000000680)="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"}]}, 0x4}, {{&(0x7f00000016c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x4, 0x3, 0x1, 0x3, {0xa, 0x4e22, 0x275e, @mcast1, 0xa3b}}}, 0x0, &(0x7f00000018c0)=[{&(0x7f0000001740)="4a10a745991cb74d8a5571ba785a41f2f07f6bc5df1b596ee45f3aed179bdb500f7ca9a0a49dbc5265db9b8b6de5368975a333351bc091b546c3f75c5722757892fd3a9e2f649a2791206754d10fc52f4090e4bcee797c125e73ebcc2882ee20c43907f9129dc1f90728b42e15c2608e0f03542cf7"}, {&(0x7f00000017c0)}, {&(0x7f0000001800)="b6364c5676f65cd34fefed3e0141368710f2c6d6268a2a0cc2edb64c84acbc9eb6c0b4c2c6c7b150762f2cf2ca17c5cc2ae19742c180f55741d07afd21ffe772b0fdcd12d876adda6285caf8899dc65507c87225c3b1e311a0f37b4298b06c0497125a5f97655283e85572cdfb9e145e73a2170784981b42fff3763e42f76a34cebe312193865573742f7002a4f4d91b5e8ae106ce7a22dafa08c38b5640f0e76802afcbe91bf708349d2b7d3a"}], 0x0, &(0x7f0000001900)=[{0x0, 0x10e, 0x3cc, "dfd6c594b2d8e7005cf06a71763327d9edcabc41a5e970553f5127def9579de0ef4db2ccbcb3455bf9cddd56762240cdf7f95272e426507f63220434af0122ba7a89d10d2b61c352a0e354857de010c0ae065e1f89a9f998efcf75d5610ed10bf6280717beb8cd4dfeac515c36d05b8ef195e3b432"}, {0x0, 0x11d, 0x1}, {0x0, 0x109, 0x7, "b883e7474a18f5c32d76184ccab6d0"}, {0x0, 0x10e, 0x8, "73d39bb2462872182dc3932d72"}, {0x0, 0x29, 0x0, "93ba4eef422d07261289a761e564b124b9a32835453e327e54dd8779e65c67ce480c1b0e0e8351a9a5f10146dc0056cb8c9917d7e87218acb1fbdb474ae6933d624b00a2ed5fe52512341beba84593e0164a"}, {0x0, 0x1, 0x8001, "f5f72e993bd96c1709cdc7a54a7aec0152e5a04ff86d78150feb6a45be6c4417f4374b"}, {0x0, 0x101, 0x0, "333f897f02a18edfcba5d94dbe751f55255d7b11984cc744178aa13e72c50772fdbb77ac1f712aec0a1404c5a8f99d178f5be9ce7efc8d8f900d4ab04c6dec6481b0dcb51614e6ef175c25ac788e8b2b606f3dc6dabbc3"}]}, 0x8}, {{0x0, 0x0, &(0x7f0000001cc0)=[{&(0x7f0000001b00)="7963c26ec3c113a4613a13388289256b1e669a72d8d0527fdb1a7adfb21fe7c675f39d93c62603e3317d1c35f71fecdeb488f82725311910e5f9af435f3266c68d8446f935dd7b226ea1d9070def6ffaf8c9b901c308ae9e390a532b0bc818b692eda2a97ef98fe6335515ba5a833a70a7be03b0c92bfc59497c59e6cc9520caaa5e7745887d840cb008dd19aec1a0c0a805ce08215fc22af3753ba1662b5b2c276f"}, {&(0x7f0000001bc0)="5343826d40610fb65753fd094a2e049401f6325eda78c39e4be5e9d7356312f43d32b68dbec8185f90c3b3a3a4e8025ec252cb036ba2a698474fe34c0f2e2978ca6be5072f8b7e44673fd765d62d347a36eb24c75e4867f2185d388cd100197b9f18e3251dbf86737927422c235c5b5d9237e805700c1e2eaa903d2ad734e8718421aeb5ab7508d148039bf99de7be49d68817f3e813a038a36113e22eb6ac817940d193cc41f95b54f5943ca6d111b006efc647682220f6f1fde3ce947cff293620dc61cd38c65632864c9e63ed01fc11b3ded676821de16d0de1d28c"}], 0x0, &(0x7f0000001d00)=[{0x0, 0x10d, 0xffff, "13d1899f1bbf8c2fc353b3a207840525d3adf9d901dbe8544d1826367471568820409e43245a9f4735c98b6fe9b190c1e5ab4c7f14066416793327852ffb2b5a408d790c22a4c796df05da3da0a5f6cea2adbbbf43197b8d11dd06bc2763036675f1030e1b99ab3b2f9b9a7f60e4d8cec25a0290fe151cbd87483dbab39d6a4de1c0b6a284638f858ee576e2b9d943ce864a9c4bedcb1905bb463aec26f855317600152ff966f8e3f536c9b378aeb4fba438eee53da061a22b6303d150a9097170df207d815992b4c27ef76ff7ff1494d2c3aa51015aa0a4aa1b5d1b4a69"}, {0x0, 0x103, 0x100000000, "3ef9fc3f3bf6b327fff5e45bf2ab7a3ccd4bc26acbb447e6ee93b51f3ed21abecce7002c898af0bb8ff3f841f4c6991e334eac6cc086c82d824c33e45407f31c66cfb924171bd481af27d2983915faca6f3a332dec6259ece20596fc6eed30ab9afdd1e3a641b4d7c49a2a15ffbe765880c583426ead172e64d8ae347ebae2b86d0a2d2b1c46e1b9b873714f7da962928398a3ca8fe96dd0b98c616a76d8ba096d3215f017b05e8a147644604d7cee1551991a87a1dba191d815a0b78f72b14c0a2987fb5521cefce1e61d5f85e53c4a350d2f8aa5e32e328f5cb643850854ba899c8fa250c3"}, {0x0, 0x1, 0xfffffffffffffff7, "eac02492545a72260aacafc20d79cf4f3a5887f27e5178daf22a6aa76ce47f33e9daf29926fa3f8ab017e9cd6e"}, {0x0, 0x11f, 0xef, "b46024a6fd9b3af7ab563a616315bc8b1b171d41e8c0affe4d5ead011d1a5e26a3b26d1c111817e6348dfe481b57f667d8510cc04fa137dcbc079426b7fa53511e4241639f8554856164b6e9a22e82ca0c22cd08479481c5273ed98a1dd208fadea47f9f82a4662258fb98cceec4de"}]}, 0x4}], 0x400000000000313, 0x20044011) 14:22:33 executing program 3: syz_emit_ethernet(0x20000140, &(0x7f0000000000)={@local, @random="8a37962a294f", [], {@ipv6={0x86dd, {0x0, 0x6, "110c11", 0x30, 0x21, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x6, [], {0x0, 0x6, "cb155d", 0x0, 0x0, 0x0, @mcast2, @dev}}}}}}}, 0x0) 14:22:33 executing program 2: syz_emit_ethernet(0xfffffffffffffdef, &(0x7f0000000000)={@local, @random="8a37962a294f", [], {@ipv6={0x86dd, {0x0, 0x6, "110c11", 0x30, 0x21, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x6, [], {0x41, 0x6, "cb155d", 0x0, 0x0, 0x0, @mcast2, @dev}}}}}}}, 0x0) 14:22:33 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee4050c00000f0000008bc36f7d79ce3263dac37b7403242189c609", 0x23}], 0x1}, 0x0) 14:22:33 executing program 3: syz_emit_ethernet(0x7ffff000, &(0x7f0000000000)={@local, @random="8a37962a294f", [], {@ipv6={0x86dd, {0x0, 0x6, "110c11", 0x30, 0x21, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x6, [], {0x0, 0x6, "cb155d", 0x0, 0x0, 0x0, @mcast2, @dev}}}}}}}, 0x0) [ 1682.937363] netlink: 7 bytes leftover after parsing attributes in process `syz-executor.4'. 14:22:33 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000bd7000)={&(0x7f0000c07e98)=ANY=[@ANYBLOB="000000000000000000000000000000000000000033000000ffffffff000000000000000000000000000000000000000000000000000000000000000000294900000000000000000000000000000000000000fffffffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020001007d00000000000000480001006d64350000000000000000000019000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000"], 0x1}}, 0x0) 14:22:33 executing program 2: syz_emit_ethernet(0x140, &(0x7f0000000000)={@local, @random="8a0a962a294f", [], {@ipv6={0x86dd, {0x0, 0x6, "110c11", 0x30, 0x21, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x6, [], {0x41, 0x6, "cb155d", 0x0, 0x0, 0x0, @mcast2, @dev}}}}}}}, 0x0) [ 1682.997317] netlink: 7 bytes leftover after parsing attributes in process `syz-executor.4'. 14:22:33 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee4050c00000f0000008bc36f7d79ce3263dac37b7403242189c609", 0x23}], 0x1}, 0x0) 14:22:33 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000000)=[{0x80000006}]}, 0x10) r1 = socket$pppoe(0x18, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) fcntl$getownex(r2, 0x10, &(0x7f0000000080)) connect$pppoe(r1, &(0x7f0000000040)={0x18, 0x0, {0x2, @local, 'batadv0\x00'}}, 0x1e) sendmmsg(r1, &(0x7f0000005b40), 0x40000000000014d, 0x0) 14:22:33 executing program 3: syz_emit_ethernet(0xfffffdef, &(0x7f0000000000)={@local, @random="8a37962a294f", [], {@ipv6={0x86dd, {0x0, 0x6, "110c11", 0x30, 0x21, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x6, [], {0x0, 0x6, "cb155d", 0x0, 0x0, 0x0, @mcast2, @dev}}}}}}}, 0x0) [ 1683.206852] netlink: 7 bytes leftover after parsing attributes in process `syz-executor.4'. 14:22:34 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000bd7000)={&(0x7f0000c07e98)=ANY=[@ANYBLOB="000000000000000000000000000000000000000033000000ffffffff0000000000000000000000000000000000000000000000000000000000000000002949000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020001007d00000000000000480001006d64350000000000000000000019000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000"], 0x1}}, 0x0) 14:22:34 executing program 2: syz_emit_ethernet(0x140, &(0x7f0000000000)={@local, @random="8a41962a294f", [], {@ipv6={0x86dd, {0x0, 0x6, "110c11", 0x30, 0x21, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x6, [], {0x41, 0x6, "cb155d", 0x0, 0x0, 0x0, @mcast2, @dev}}}}}}}, 0x0) 14:22:34 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee4050c00000f0000008bc36f7d79ce3263dac37b7403242189c609", 0x23}], 0x1}, 0x0) 14:22:34 executing program 1: r0 = perf_event_open(&(0x7f0000000300)={0x400000001, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f000094f000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffff9c, 0xc00c642d, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0x100000073) read(r0, &(0x7f0000000200)=""/250, 0xfffffffffffffd65) 14:22:34 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000000)=[{0x80000006}]}, 0x10) r1 = socket$pppoe(0x18, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) connect$pppoe(r1, &(0x7f0000000040)={0x18, 0x0, {0x2, @local, 'batadv0\x00'}}, 0x1e) sendmmsg(r2, &(0x7f0000000080), 0x0, 0x0) 14:22:34 executing program 3: syz_emit_ethernet(0xfffffffffffffdef, &(0x7f0000000000)={@local, @random="8a37962a294f", [], {@ipv6={0x86dd, {0x0, 0x6, "110c11", 0x30, 0x21, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x6, [], {0x0, 0x6, "cb155d", 0x0, 0x0, 0x0, @mcast2, @dev}}}}}}}, 0x0) 14:22:34 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000bd7000)={&(0x7f0000c07e98)=ANY=[@ANYBLOB="000000000000000000000000000000000000000033000000ffffffff0000000000000000000000000000000000000000000000000000000000000000002949000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020001007d00000000000000480001006d64350000000000000000000019000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000"], 0x1}}, 0x0) 14:22:34 executing program 3: syz_emit_ethernet(0x140, &(0x7f0000000000)={@local, @random="8a0a962a294f", [], {@ipv6={0x86dd, {0x0, 0x6, "110c11", 0x30, 0x21, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x6, [], {0x0, 0x6, "cb155d", 0x0, 0x0, 0x0, @mcast2, @dev}}}}}}}, 0x0) [ 1683.835479] netlink: 7 bytes leftover after parsing attributes in process `syz-executor.4'. 14:22:34 executing program 2: syz_emit_ethernet(0x140, &(0x7f0000000000)={@local, @random="8a37960b294f", [], {@ipv6={0x86dd, {0x0, 0x6, "110c11", 0x30, 0x21, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x6, [], {0x41, 0x6, "cb155d", 0x0, 0x0, 0x0, @mcast2, @dev}}}}}}}, 0x0) 14:22:34 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee4050c00000f0000008bc36f7d79ce3263dac37b7403242189c609", 0x23}], 0x1}, 0x0) 14:22:34 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000000)=[{0x80000006}]}, 0x10) r1 = socket$pppoe(0x18, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) connect$pppoe(r1, &(0x7f0000000040)={0x18, 0x0, {0x2, @local, 'batadv0\x00'}}, 0x1e) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video35\x00', 0x2, 0x0) sendmmsg(r1, &(0x7f0000005b40), 0x40000000000014d, 0x0) r4 = syz_open_dev$midi(&(0x7f00000000c0)='/dev/midi#\x00', 0xbc5, 0x10200) ioctl$CAPI_NCCI_OPENCOUNT(r4, 0x80044326, &(0x7f0000000100)=0x7fac) getdents(r4, &(0x7f0000000140)=""/39, 0x27) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f00000001c0)={{{@in=@dev, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@local}}, &(0x7f00000002c0)=0xe8) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000300)={0x0, 0x0}, &(0x7f0000000340)=0xc) r7 = getuid() r8 = geteuid() r9 = getuid() r10 = geteuid() getsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f0000000380)={{{@in6=@local, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@dev}}, &(0x7f0000000480)=0xe8) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000580), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000640)={0x0, 0x0, 0x0}, &(0x7f0000000680)=0xc) r15 = getgid() fsetxattr$system_posix_acl(r2, &(0x7f0000000180)='system.posix_acl_default\x00', &(0x7f00000006c0)={{}, {}, [{0x2, 0x0, r5}, {0x2, 0x5, r6}, {0x2, 0x3, r7}, {0x2, 0x3, r8}, {0x2, 0x3, r9}, {0x2, 0x2, r10}, {0x2, 0x0, r11}, {0x2, 0x4, r12}], {0x4, 0x4}, [{0x8, 0x5, r13}, {0x8, 0x2, r14}, {0x8, 0x2, r15}], {0x10, 0x2}, {0x20, 0x1}}, 0x7c, 0x2) 14:22:34 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000bd7000)={&(0x7f0000c07e98)=ANY=[@ANYBLOB="000000000000000000000000000000000000000033000000ffffffff0000000000000000000000000000000000000000000000000000000000000000002949000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020001007d00000000000000480001006d64350000000000000000000019000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000"], 0x1}}, 0x0) 14:22:34 executing program 3: syz_emit_ethernet(0x140, &(0x7f0000000000)={@local, @random="8a5b962a294f", [], {@ipv6={0x86dd, {0x0, 0x6, "110c11", 0x30, 0x21, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x6, [], {0x0, 0x6, "cb155d", 0x0, 0x0, 0x0, @mcast2, @dev}}}}}}}, 0x0) 14:22:34 executing program 2: syz_emit_ethernet(0x140, &(0x7f0000000000)={@local, @random="8a379641294f", [], {@ipv6={0x86dd, {0x0, 0x6, "110c11", 0x30, 0x21, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x6, [], {0x41, 0x6, "cb155d", 0x0, 0x0, 0x0, @mcast2, @dev}}}}}}}, 0x0) [ 1684.067334] netlink: 7 bytes leftover after parsing attributes in process `syz-executor.4'. 14:22:34 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee4050c00000f0000008bc36f7d79ce3263dac37b7403242189c609", 0x23}], 0x1}, 0x0) 14:22:35 executing program 1: r0 = perf_event_open(&(0x7f0000000300)={0x400000001, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f000094f000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f00000000c0)="f10d1af03ddcd714ed58fbe85932f060285904396ee2c037438d8f11df34b28b30ee3cebdd7beefe7b2cdaf15631b7384547c44392ed0218772b88c19024ff8388fc2e5183818e4fd70ac36e7d1d726c6efdd08f49037bbaa7493dc11cadc22f2b2e78536dba4df8521c94bd399a3d910aba630cd304786c16c9541686e1abb2b5234006cd5c4958891938acf717e73c55b7d76152282b27f71e487a4d27d1509fa74ddc62dcb4dda916316140482c3a31be8c531e0a85dd9d4007a8935605bd4b371b03a74808e8536894f03ab5cce1698d061116d52d9167883b630b3ba008bc63f4c7d38b43a8a05410555e91e62183f849e269b97ce4430bcb247b4dd3c7") ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffff9c, 0xc00c642d, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0x100000073) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) 14:22:35 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000bd7000)={&(0x7f0000c07e98)=ANY=[@ANYBLOB="000000000000000000000000000000000000000033000000ffffffff0000000000000000000000000000000000000000000000000000000000000000002949000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020001007d00000000000000480001006d64350000000000000000000019000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000"], 0x1}}, 0x0) 14:22:35 executing program 3: syz_emit_ethernet(0x140, &(0x7f0000000000)={@local, @random="8a37960b294f", [], {@ipv6={0x86dd, {0x0, 0x6, "110c11", 0x30, 0x21, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x6, [], {0x0, 0x6, "cb155d", 0x0, 0x0, 0x0, @mcast2, @dev}}}}}}}, 0x0) 14:22:35 executing program 2: syz_emit_ethernet(0x140, &(0x7f0000000000)={@local, @random="8a37962a0b4f", [], {@ipv6={0x86dd, {0x0, 0x6, "110c11", 0x30, 0x21, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x6, [], {0x41, 0x6, "cb155d", 0x0, 0x0, 0x0, @mcast2, @dev}}}}}}}, 0x0) 14:22:35 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee4050c00000f0000008bc36f7d79ce3263dac37b7403242189c609", 0x23}], 0x1}, 0x0) 14:22:35 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000140)="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") setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000000)=[{0x80000006}]}, 0x10) r1 = socket$pppoe(0x18, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) connect$pppoe(r1, &(0x7f0000000040)={0x18, 0x0, {0x2, @local, 'batadv0\x00'}}, 0x1e) sendmmsg(r1, &(0x7f0000005b40), 0x40000000000014d, 0x0) r3 = syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x5, 0xa02) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffff9c, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$xdp(r3, &(0x7f0000000100)={0x2c, 0x0, r4, 0x29, r0}, 0x10) 14:22:35 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000bd7000)={&(0x7f0000c07e98)=ANY=[@ANYBLOB="000000000000000000000000000000000000000033000000ffffffff0000000000000000000000000000000000000000000000000000000000000000002949000000000000000000000000000000000000000000000000001571000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020001007d00000000000000480001006d64350000000000000000000019000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000"], 0x1}}, 0x0) 14:22:35 executing program 2: syz_emit_ethernet(0x140, &(0x7f0000000000)={@local, @random="8a37962a414f", [], {@ipv6={0x86dd, {0x0, 0x6, "110c11", 0x30, 0x21, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x6, [], {0x41, 0x6, "cb155d", 0x0, 0x0, 0x0, @mcast2, @dev}}}}}}}, 0x0) 14:22:35 executing program 3: syz_emit_ethernet(0x140, &(0x7f0000000000)={@local, @random="8a37965b294f", [], {@ipv6={0x86dd, {0x0, 0x6, "110c11", 0x30, 0x21, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x6, [], {0x0, 0x6, "cb155d", 0x0, 0x0, 0x0, @mcast2, @dev}}}}}}}, 0x0) 14:22:35 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee4050c00000f0000008bc36f7d79ce3263dac37b7403242189c609", 0x23}], 0x1}, 0x0) 14:22:35 executing program 2: syz_emit_ethernet(0x140, &(0x7f0000000000)={@local, @random="8a37962a294f", [], {@ipv6={0x86dd, {0x2, 0x6, "110c11", 0x30, 0x21, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x6, [], {0x41, 0x6, "cb155d", 0x0, 0x0, 0x0, @mcast2, @dev}}}}}}}, 0x0) 14:22:35 executing program 3: syz_emit_ethernet(0x140, &(0x7f0000000000)={@local, @random="8a37962a0a4f", [], {@ipv6={0x86dd, {0x0, 0x6, "110c11", 0x30, 0x21, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x6, [], {0x0, 0x6, "cb155d", 0x0, 0x0, 0x0, @mcast2, @dev}}}}}}}, 0x0) [ 1685.216362] syz-executor.1 invoked oom-killer: gfp_mask=0x7200c2(GFP_HIGHUSER|__GFP_ACCOUNT), order=0, oom_score_adj=0 [ 1685.236633] CPU: 1 PID: 13613 Comm: syz-executor.1 Not tainted 5.0.0-rc6+ #70 [ 1685.243926] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1685.253295] Call Trace: [ 1685.255899] dump_stack+0x172/0x1f0 [ 1685.259550] dump_header+0x10f/0xb6c [ 1685.263254] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1685.268370] ? ___ratelimit+0x60/0x595 [ 1685.272247] ? do_raw_spin_unlock+0x57/0x270 [ 1685.276647] oom_kill_process.cold+0x10/0x6f5 [ 1685.281174] ? task_will_free_mem+0x139/0x6e0 [ 1685.285673] out_of_memory+0x79a/0x1280 [ 1685.289668] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1685.294781] ? oom_killer_disable+0x280/0x280 [ 1685.299261] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1685.304362] mem_cgroup_out_of_memory+0x99/0xe0 [ 1685.309020] ? memcg_memory_event+0x40/0x40 [ 1685.313334] ? _raw_spin_unlock+0x2d/0x50 [ 1685.317467] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1685.322589] try_charge+0xfec/0x1570 [ 1685.326298] ? find_held_lock+0x35/0x130 [ 1685.330387] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1685.335218] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 1685.340047] ? find_held_lock+0x35/0x130 [ 1685.344105] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 1685.348959] memcg_kmem_charge_memcg+0x7c/0x130 [ 1685.353632] ? memcg_kmem_put_cache+0xb0/0xb0 [ 1685.358116] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 1685.362959] memcg_kmem_charge+0x13b/0x340 [ 1685.367199] __alloc_pages_nodemask+0x437/0x710 [ 1685.371869] ? __alloc_pages_slowpath+0x2900/0x2900 [ 1685.376874] ? ___might_sleep+0x163/0x280 [ 1685.381013] ? copyin+0xb5/0x100 [ 1685.384369] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1685.389899] alloc_pages_current+0x107/0x210 [ 1685.394314] pipe_write+0xa65/0xfb0 [ 1685.397952] __vfs_write+0x613/0x8e0 [ 1685.401656] ? kernel_read+0x120/0x120 [ 1685.405639] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1685.411192] ? rw_verify_area+0x118/0x360 [ 1685.415343] vfs_write+0x20c/0x580 [ 1685.418886] ksys_write+0xea/0x1f0 [ 1685.422446] ? __ia32_sys_read+0xb0/0xb0 [ 1685.426525] ? do_syscall_64+0x26/0x610 [ 1685.430490] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1685.435889] ? do_syscall_64+0x26/0x610 [ 1685.439873] __x64_sys_write+0x73/0xb0 [ 1685.443764] do_syscall_64+0x103/0x610 [ 1685.447652] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1685.452847] RIP: 0033:0x457e29 [ 1685.456028] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1685.474939] RSP: 002b:00007fd8c7971c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1685.482631] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457e29 [ 1685.489882] RDX: 0000000100000073 RSI: 00000000200001c0 RDI: 0000000000000005 [ 1685.497136] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1685.504395] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd8c79726d4 [ 1685.511660] R13: 00000000004c3be0 R14: 00000000004dc3d0 R15: 00000000ffffffff [ 1685.519673] memory: usage 307200kB, limit 307200kB, failcnt 10885 [ 1685.526199] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1685.533115] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1685.539312] Memory cgroup stats for /syz1: cache:0KB rss:257180KB rss_huge:227328KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:8KB active_anon:257268KB inactive_file:4KB active_file:0KB unevictable:0KB 14:22:36 executing program 1: r0 = perf_event_open(&(0x7f0000000300)={0x400000001, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x1000000000000000, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f000094f000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffff9c, 0xc00c642d, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0x100000073) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) 14:22:36 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000bd7000)={&(0x7f0000c07e98)=ANY=[@ANYBLOB="000000000000000000000000000000000000000033000000ffffffff00000000000000000000000000000000000000000000000000000000000000000029490000000000000000000000000000000000000000000000ffffff9e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020001007d00000000000000480001006d64350000000000000000000019000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000"], 0x1}}, 0x0) 14:22:36 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee4050c00000f0000008bc36f7d79ce3263dac37b7403242189c609", 0x23}], 0x1}, 0x0) 14:22:36 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000000)=[{0x80000006}]}, 0x10) r1 = socket$pppoe(0x18, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0xf210b2d0bcc15265, 0x0) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r3, 0x80045400, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) connect$pppoe(r1, &(0x7f0000000040)={0x18, 0x0, {0x2, @local, 'batadv0\x00'}}, 0x1e) sendmmsg(r1, &(0x7f0000005b40), 0x40000000000014d, 0x0) 14:22:36 executing program 3: syz_emit_ethernet(0x140, &(0x7f0000000000)={@local, @random="8a37962a0b4f", [], {@ipv6={0x86dd, {0x0, 0x6, "110c11", 0x30, 0x21, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x6, [], {0x0, 0x6, "cb155d", 0x0, 0x0, 0x0, @mcast2, @dev}}}}}}}, 0x0) 14:22:36 executing program 2: syz_emit_ethernet(0x140, &(0x7f0000000000)={@local, @random="8a37962a294f", [], {@ipv6={0x86dd, {0x3, 0x6, "110c11", 0x30, 0x21, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x6, [], {0x41, 0x6, "cb155d", 0x0, 0x0, 0x0, @mcast2, @dev}}}}}}}, 0x0) [ 1685.560274] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=13611,uid=0 [ 1685.575125] Memory cgroup out of memory: Kill process 13611 (syz-executor.1) score 140 or sacrifice child [ 1685.585087] Killed process 13611 (syz-executor.1) total-vm:72712kB, anon-rss:8020kB, file-rss:34944kB, shmem-rss:0kB [ 1685.604475] oom_reaper: reaped process 13611 (syz-executor.1), now anon-rss:0kB, file-rss:34832kB, shmem-rss:0kB [ 1685.676455] net_ratelimit: 52 callbacks suppressed [ 1685.676465] dccp_v6_rcv: dropped packet with invalid checksum [ 1685.689670] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 1685.713040] dccp_v6_rcv: dropped packet with invalid checksum 14:22:36 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000bd7000)={&(0x7f0000c07e98)=ANY=[@ANYBLOB="000000000000000000000000000000000000000033000000ffffffff00000000000000000000000000000000000000000000000000000000000000000029490000000000000000000000000000000000000000000000fffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020001007d00000000000000480001006d64350000000000000000000019000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000"], 0x1}}, 0x0) [ 1685.723705] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 14:22:36 executing program 2: syz_emit_ethernet(0x140, &(0x7f0000000000)={@local, @random="8a37962a294f", [], {@ipv6={0x86dd, {0x4, 0x6, "110c11", 0x30, 0x21, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x6, [], {0x41, 0x6, "cb155d", 0x0, 0x0, 0x0, @mcast2, @dev}}}}}}}, 0x0) 14:22:36 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee4050c00000f0000008bc36f7d79ce3263dac37b7403242189c609", 0x23}], 0x1}, 0x0) 14:22:36 executing program 3: syz_emit_ethernet(0x140, &(0x7f0000000000)={@local, @random="8a37962a254f", [], {@ipv6={0x86dd, {0x0, 0x6, "110c11", 0x30, 0x21, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x6, [], {0x0, 0x6, "cb155d", 0x0, 0x0, 0x0, @mcast2, @dev}}}}}}}, 0x0) [ 1685.893993] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 1685.904719] dccp_v6_rcv: dropped packet with invalid checksum 14:22:36 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee4050c00000f0000008bc36f7d79ce3263dac37b7403242189c609", 0x23}], 0x1}, 0x0) 14:22:36 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000bd7000)={&(0x7f0000c07e98)=ANY=[@ANYBLOB="000000000000000000000000000000000000000033000000ffffffff000000000000000000000000000000000000000000000000000000000000000000294900000000000000000000000000000000000000000000007fffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020001007d00000000000000480001006d64350000000000000000000019000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000"], 0x1}}, 0x0) [ 1685.945406] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 1685.956720] dccp_v6_rcv: dropped packet with invalid checksum [ 1685.962803] protocol 88fb is buggy, dev hsr_slave_0 [ 1685.967900] protocol 88fb is buggy, dev hsr_slave_1 [ 1686.256933] syz-executor.1 invoked oom-killer: gfp_mask=0x7200c2(GFP_HIGHUSER|__GFP_ACCOUNT), order=0, oom_score_adj=0 [ 1686.267996] CPU: 1 PID: 13648 Comm: syz-executor.1 Not tainted 5.0.0-rc6+ #70 [ 1686.275271] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1686.284629] Call Trace: [ 1686.287213] dump_stack+0x172/0x1f0 [ 1686.290842] dump_header+0x10f/0xb6c [ 1686.294547] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1686.299639] ? ___ratelimit+0x60/0x595 [ 1686.303513] ? do_raw_spin_unlock+0x57/0x270 [ 1686.307914] oom_kill_process.cold+0x10/0x6f5 [ 1686.312420] ? task_will_free_mem+0x139/0x6e0 [ 1686.316946] out_of_memory+0x79a/0x1280 [ 1686.320917] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1686.326030] ? oom_killer_disable+0x280/0x280 [ 1686.330526] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1686.335648] mem_cgroup_out_of_memory+0x99/0xe0 [ 1686.340315] ? memcg_memory_event+0x40/0x40 [ 1686.344625] ? _raw_spin_unlock+0x2d/0x50 [ 1686.348781] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1686.353869] try_charge+0xfec/0x1570 [ 1686.357568] ? find_held_lock+0x35/0x130 [ 1686.361624] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1686.366478] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 1686.371309] ? find_held_lock+0x35/0x130 [ 1686.375360] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 1686.380204] memcg_kmem_charge_memcg+0x7c/0x130 [ 1686.384871] ? memcg_kmem_put_cache+0xb0/0xb0 [ 1686.389386] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 1686.394236] memcg_kmem_charge+0x13b/0x340 [ 1686.398463] __alloc_pages_nodemask+0x437/0x710 [ 1686.403121] ? __alloc_pages_slowpath+0x2900/0x2900 [ 1686.408139] ? ___might_sleep+0x163/0x280 [ 1686.412286] ? copyin+0xb5/0x100 [ 1686.415641] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1686.421191] alloc_pages_current+0x107/0x210 [ 1686.425589] pipe_write+0xa65/0xfb0 [ 1686.429214] __vfs_write+0x613/0x8e0 [ 1686.432922] ? kernel_read+0x120/0x120 [ 1686.436803] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1686.442338] ? rw_verify_area+0x118/0x360 [ 1686.446476] vfs_write+0x20c/0x580 [ 1686.450024] ksys_write+0xea/0x1f0 [ 1686.453553] ? __ia32_sys_read+0xb0/0xb0 [ 1686.457614] ? do_syscall_64+0x26/0x610 [ 1686.461577] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1686.466927] ? do_syscall_64+0x26/0x610 [ 1686.470906] __x64_sys_write+0x73/0xb0 [ 1686.474794] do_syscall_64+0x103/0x610 [ 1686.478714] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1686.483919] RIP: 0033:0x457e29 [ 1686.487114] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1686.506005] RSP: 002b:00007fd8c7971c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1686.513696] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457e29 [ 1686.520953] RDX: 0000000100000073 RSI: 00000000200001c0 RDI: 0000000000000005 [ 1686.528209] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1686.535463] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd8c79726d4 [ 1686.542736] R13: 00000000004c3be0 R14: 00000000004dc3d0 R15: 00000000ffffffff [ 1686.551952] memory: usage 307168kB, limit 307200kB, failcnt 10965 [ 1686.558377] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1686.565401] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1686.571624] Memory cgroup stats for /syz1: cache:0KB rss:257132KB rss_huge:227328KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:8KB active_anon:257276KB inactive_file:0KB active_file:4KB unevictable:0KB [ 1686.592568] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=13647,uid=0 14:22:37 executing program 1: r0 = perf_event_open(&(0x7f0000000300)={0x400000001, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f000094f000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffff9c, 0xc00c642d, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0x100000073) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000040)=0x0) sched_rr_get_interval(r3, &(0x7f00000000c0)) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) ioctl$sock_inet_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000000)) 14:22:37 executing program 3: syz_emit_ethernet(0x140, &(0x7f0000000000)={@local, @random="8a37962a5b4f", [], {@ipv6={0x86dd, {0x0, 0x6, "110c11", 0x30, 0x21, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x6, [], {0x0, 0x6, "cb155d", 0x0, 0x0, 0x0, @mcast2, @dev}}}}}}}, 0x0) 14:22:37 executing program 2: syz_emit_ethernet(0x140, &(0x7f0000000000)={@local, @random="8a37962a294f", [], {@ipv6={0x86dd, {0x5, 0x6, "110c11", 0x30, 0x21, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x6, [], {0x41, 0x6, "cb155d", 0x0, 0x0, 0x0, @mcast2, @dev}}}}}}}, 0x0) 14:22:37 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee4050c00000f0000008bc36f7d79ce3263dac37b7403242189c609", 0x23}], 0x1}, 0x0) 14:22:37 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000000)=[{0x80000006}]}, 0x10) r1 = socket$pppoe(0x18, 0x1, 0x0) r2 = creat(&(0x7f0000001840)='./file0\x00', 0x24) setsockopt$RDS_GET_MR_FOR_DEST(r2, 0x114, 0x7, &(0x7f00000028c0)={@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x3, 0x1, 0x2}}, {&(0x7f0000001880)=""/4096, 0x1000}, &(0x7f0000002880), 0x20}, 0xa0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) connect$pppoe(r1, &(0x7f0000000040)={0x18, 0x0, {0x2, @local, 'batadv0\x00'}}, 0x1e) sendmmsg(r1, &(0x7f0000005b40), 0x40000000000014d, 0x0) r4 = add_key(&(0x7f0000000080)='trusted\x00', &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000100)="901148e43987c9b3863b42caca85834e1568431fd3a0d7bb866e37bf39532817079b05d3a891d88081ffd32728e89149bd117f44af9f2fbd42b6df6ac158b7480b484a8d563214e0c8a0eee917748e396745bd9c05025a4986079715ff6bdf85d1bfc3c78b759df85304ce8ace03c0e8c71415e082018e150a29fef16e20443017fa9aecd94c5fb0dacb37af4df9de9e1e17d48b00c3ab60958c8c7e0814cfc6525995e1f67fc5396f212184e05b11ed9e53b55ec63f2169eb69293aeffb1e0390551b64b732f9ff2e0308860a1dd7e323fcbc63240743303d5bb08b1b1ed8009f54691eeed1c19bba8a49fb7e7827b4", 0xf0, 0xfffffffffffffffa) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000200)={r4, 0x2, 0xa40}, &(0x7f0000000240)={'enc=', 'pkcs1', ' hash=', {'sha384-arm64\x00'}}, &(0x7f00000002c0)="9b152823a66dab58a866aec138038f709ffa5e5de098338b0283b25a570511a7986192ac7922ddea41344785feafb84cd379a7f6588f6879751fc9109603cf63c0e04979b73a853504", &(0x7f0000000340)=""/4096) 14:22:37 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000bd7000)={&(0x7f0000c07e98)=ANY=[@ANYBLOB="000000000000000000000000000000000000000033000000ffffffff00000000000000000000000000000000000000000000000000000000000000000029490000000000000000000000000000000000000000f0ffffffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020001007d00000000000000480001006d64350000000000000000000019000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000"], 0x1}}, 0x0) [ 1686.607408] Memory cgroup out of memory: Kill process 13647 (syz-executor.1) score 140 or sacrifice child [ 1686.617323] Killed process 13647 (syz-executor.1) total-vm:72712kB, anon-rss:8020kB, file-rss:34944kB, shmem-rss:0kB [ 1686.638436] oom_reaper: reaped process 13647 (syz-executor.1), now anon-rss:0kB, file-rss:34832kB, shmem-rss:0kB 14:22:37 executing program 3: syz_emit_ethernet(0x140, &(0x7f0000000000)={@local, @random="8a37962a295b", [], {@ipv6={0x86dd, {0x0, 0x6, "110c11", 0x30, 0x21, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x6, [], {0x0, 0x6, "cb155d", 0x0, 0x0, 0x0, @mcast2, @dev}}}}}}}, 0x0) 14:22:37 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000bd7000)={&(0x7f0000c07e98)=ANY=[@ANYBLOB="000000000000000000000000000000000000000033000000ffffffff0000000000000000000000000000000000000000000000000000000000000000002949000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020001007d00000000000000480001006d64350000000000000000000019000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000"], 0x1}}, 0x0) 14:22:37 executing program 2: syz_emit_ethernet(0x140, &(0x7f0000000000)={@local, @random="8a37962a294f", [], {@ipv6={0x86dd, {0x6, 0x6, "110c11", 0x30, 0x21, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x6, [], {0x41, 0x6, "cb155d", 0x0, 0x0, 0x0, @mcast2, @dev}}}}}}}, 0x0) 14:22:37 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee4050c00000f0000008bc36f7d79ce3263dac37b7403242189c609", 0x23}], 0x1}, 0x0) 14:22:37 executing program 3: syz_emit_ethernet(0x140, &(0x7f0000000000)={@local, @random="8a37962a294f", [], {@ipv6={0x86dd, {0x2, 0x6, "110c11", 0x30, 0x21, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x6, [], {0x0, 0x6, "cb155d", 0x0, 0x0, 0x0, @mcast2, @dev}}}}}}}, 0x0) 14:22:37 executing program 2: syz_emit_ethernet(0x140, &(0x7f0000000000)={@local, @random="8a37962a294f", [], {@ipv6={0x86dd, {0x7, 0x6, "110c11", 0x30, 0x21, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x6, [], {0x41, 0x6, "cb155d", 0x0, 0x0, 0x0, @mcast2, @dev}}}}}}}, 0x0) [ 1686.957636] __nla_parse: 7 callbacks suppressed [ 1686.957646] netlink: 7 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1687.241647] syz-executor.1 invoked oom-killer: gfp_mask=0x7200c2(GFP_HIGHUSER|__GFP_ACCOUNT), order=0, oom_score_adj=0 [ 1687.252654] CPU: 0 PID: 13688 Comm: syz-executor.1 Not tainted 5.0.0-rc6+ #70 [ 1687.259925] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1687.269263] Call Trace: [ 1687.271912] dump_stack+0x172/0x1f0 [ 1687.275563] dump_header+0x10f/0xb6c [ 1687.279289] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1687.284403] ? ___ratelimit+0x60/0x595 [ 1687.288298] ? do_raw_spin_unlock+0x57/0x270 [ 1687.292715] oom_kill_process.cold+0x10/0x6f5 [ 1687.297229] ? task_will_free_mem+0x139/0x6e0 [ 1687.301727] out_of_memory+0x79a/0x1280 [ 1687.305692] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1687.310794] ? oom_killer_disable+0x280/0x280 [ 1687.315299] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1687.320440] mem_cgroup_out_of_memory+0x99/0xe0 [ 1687.325119] ? memcg_memory_event+0x40/0x40 [ 1687.329466] ? _raw_spin_unlock+0x2d/0x50 [ 1687.333633] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1687.338748] try_charge+0xfec/0x1570 [ 1687.342477] ? find_held_lock+0x35/0x130 [ 1687.346587] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1687.351432] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 1687.356281] ? find_held_lock+0x35/0x130 [ 1687.360350] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 1687.365191] memcg_kmem_charge_memcg+0x7c/0x130 [ 1687.369851] ? memcg_kmem_put_cache+0xb0/0xb0 [ 1687.374878] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 1687.379731] memcg_kmem_charge+0x13b/0x340 [ 1687.383976] __alloc_pages_nodemask+0x437/0x710 [ 1687.388644] ? __alloc_pages_slowpath+0x2900/0x2900 [ 1687.393657] ? ___might_sleep+0x163/0x280 [ 1687.397804] ? copyin+0xb5/0x100 [ 1687.401156] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1687.406688] alloc_pages_current+0x107/0x210 [ 1687.411098] pipe_write+0xa65/0xfb0 [ 1687.414735] __vfs_write+0x613/0x8e0 [ 1687.418458] ? kernel_read+0x120/0x120 [ 1687.422335] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1687.427883] ? rw_verify_area+0x118/0x360 [ 1687.432017] vfs_write+0x20c/0x580 [ 1687.435573] ksys_write+0xea/0x1f0 [ 1687.439135] ? __ia32_sys_read+0xb0/0xb0 [ 1687.443195] ? do_syscall_64+0x26/0x610 [ 1687.447166] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1687.452528] ? do_syscall_64+0x26/0x610 [ 1687.456517] __x64_sys_write+0x73/0xb0 [ 1687.460415] do_syscall_64+0x103/0x610 [ 1687.464317] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1687.469515] RIP: 0033:0x457e29 [ 1687.472704] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1687.491735] RSP: 002b:00007fd8c7971c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1687.499441] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457e29 [ 1687.506695] RDX: 0000000100000073 RSI: 00000000200001c0 RDI: 0000000000000005 [ 1687.513960] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1687.521225] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd8c79726d4 [ 1687.528477] R13: 00000000004c3be0 R14: 00000000004dc3d0 R15: 00000000ffffffff [ 1687.538053] memory: usage 307200kB, limit 307200kB, failcnt 11044 [ 1687.544662] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1687.551417] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1687.557731] Memory cgroup stats for /syz1: cache:0KB rss:257140KB rss_huge:227328KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:8KB active_anon:257276KB inactive_file:4KB active_file:0KB unevictable:0KB [ 1687.578566] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=13686,uid=0 14:22:38 executing program 1: r0 = perf_event_open(&(0x7f0000000300)={0x400000001, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000000000)={@local, @dev={0xac, 0x14, 0x14, 0xd}, @remote}, 0xc) mmap(&(0x7f000094f000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffff9c, 0xc00c642d, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0x100000073) read(r0, &(0x7f0000000200)=""/250, 0xfa) 14:22:38 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000bd7000)={&(0x7f0000c07e98)=ANY=[@ANYBLOB="000000000000000000000000000000000000000033000000ffffffff0000000000000000000000000000000000000000000000000000000000000000002949000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020001007d00000000000000480001006d64350000000000000000000019000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000"], 0x1}}, 0x0) 14:22:38 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee4050c00000f0000008bc36f7d79ce3263dac37b7403242189c609", 0x23}], 0x1}, 0x0) 14:22:38 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000000)=[{0x80000006}]}, 0x10) r1 = socket$pppoe(0x18, 0x1, 0x0) socketpair$unix(0x1, 0x200000003, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm_plock\x00', 0x800, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r3, 0xc0106407, &(0x7f00000000c0)={0x1, 0x1, 0x0, 0x9d1}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) connect$pppoe(r1, &(0x7f0000000040)={0x18, 0x0, {0x2, @local, 'batadv0\x00'}}, 0x1e) socket(0xa, 0x0, 0x2) sendmmsg(r1, &(0x7f0000005b40), 0x40000000000014d, 0x0) 14:22:38 executing program 3: syz_emit_ethernet(0x140, &(0x7f0000000000)={@local, @random="8a37962a294f", [], {@ipv6={0x86dd, {0x3, 0x6, "110c11", 0x30, 0x21, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x6, [], {0x0, 0x6, "cb155d", 0x0, 0x0, 0x0, @mcast2, @dev}}}}}}}, 0x0) 14:22:38 executing program 2: syz_emit_ethernet(0x140, &(0x7f0000000000)={@local, @random="8a37962a294f", [], {@ipv6={0x86dd, {0x8, 0x6, "110c11", 0x30, 0x21, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x6, [], {0x41, 0x6, "cb155d", 0x0, 0x0, 0x0, @mcast2, @dev}}}}}}}, 0x0) [ 1687.593350] Memory cgroup out of memory: Kill process 13686 (syz-executor.1) score 140 or sacrifice child [ 1687.603210] Killed process 13686 (syz-executor.1) total-vm:72712kB, anon-rss:8020kB, file-rss:34944kB, shmem-rss:0kB [ 1687.623094] oom_reaper: reaped process 13686 (syz-executor.1), now anon-rss:0kB, file-rss:34836kB, shmem-rss:0kB 14:22:38 executing program 2: syz_emit_ethernet(0x140, &(0x7f0000000000)={@local, @random="8a37962a294f", [], {@ipv6={0x86dd, {0x9, 0x6, "110c11", 0x30, 0x21, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x6, [], {0x41, 0x6, "cb155d", 0x0, 0x0, 0x0, @mcast2, @dev}}}}}}}, 0x0) [ 1687.713013] netlink: 7 bytes leftover after parsing attributes in process `syz-executor.4'. 14:22:38 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000bd7000)={&(0x7f0000c07e98)=ANY=[@ANYBLOB="000000000000000000000000000000000000000033000000ffffffff0000000000000000000000000000000000000000000000000000000000000000002949000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020001007d00000000000000480001006d64350000000000000000000019000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000"], 0x1}}, 0x0) 14:22:38 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee4050c00000f0000008bc36f7d79ce3263dac37b7403242189c609", 0x23}], 0x1}, 0x0) 14:22:38 executing program 3: syz_emit_ethernet(0x140, &(0x7f0000000000)={@local, @random="8a37962a294f", [], {@ipv6={0x86dd, {0x4, 0x6, "110c11", 0x30, 0x21, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x6, [], {0x0, 0x6, "cb155d", 0x0, 0x0, 0x0, @mcast2, @dev}}}}}}}, 0x0) 14:22:38 executing program 2: syz_emit_ethernet(0x140, &(0x7f0000000000)={@local, @random="8a37962a294f", [], {@ipv6={0x86dd, {0xd, 0x6, "110c11", 0x30, 0x21, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x6, [], {0x41, 0x6, "cb155d", 0x0, 0x0, 0x0, @mcast2, @dev}}}}}}}, 0x0) [ 1687.891854] netlink: 7 bytes leftover after parsing attributes in process `syz-executor.4'. 14:22:38 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee4050c00000f0000008bc36f7d79ce3263dac37b7403242189c609", 0x23}], 0x1}, 0x0) [ 1688.101971] netlink: 7 bytes leftover after parsing attributes in process `syz-executor.4'. 14:22:39 executing program 1: r0 = perf_event_open(&(0x7f0000000300)={0x400000001, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f000094f000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffff9c, 0xc00c642d, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0x100000073) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r1, 0x800442d4, &(0x7f0000000000)=0x200) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) 14:22:39 executing program 3: syz_emit_ethernet(0x140, &(0x7f0000000000)={@local, @random="8a37962a294f", [], {@ipv6={0x86dd, {0x5, 0x6, "110c11", 0x30, 0x21, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x6, [], {0x0, 0x6, "cb155d", 0x0, 0x0, 0x0, @mcast2, @dev}}}}}}}, 0x0) 14:22:39 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee4050c00000f0000008bc36f7d79ce3263dac37b7403242189c609", 0x23}], 0x1}, 0x0) 14:22:39 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000000)=[{0x80000006}]}, 0x10) r1 = socket$pppoe(0x18, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) connect$pppoe(r1, &(0x7f0000000040)={0x18, 0x0, {0x2, @local, 'batadv0\x00'}}, 0x1e) r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x301080, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f00000000c0)='reno\x00', 0x5) sendmmsg(r1, &(0x7f0000005b40), 0x40000000000014d, 0x0) 14:22:39 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000bd7000)={&(0x7f0000c07e98)=ANY=[@ANYBLOB="000000000000000000000000000000000000000033000000ffffffff00000000000000000000000000000000000000000000000000000000000000000029490000000000000000000000000000000000000000f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020001007d00000000000000480001006d64350000000000000000000019000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000"], 0x1}}, 0x0) 14:22:39 executing program 2: syz_emit_ethernet(0x140, &(0x7f0000000000)={@local, @random="8a37962a294f", [], {@ipv6={0x86dd, {0x21, 0x6, "110c11", 0x30, 0x21, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x6, [], {0x41, 0x6, "cb155d", 0x0, 0x0, 0x0, @mcast2, @dev}}}}}}}, 0x0) 14:22:39 executing program 2: syz_emit_ethernet(0x140, &(0x7f0000000000)={@local, @random="8a37962a294f", [], {@ipv6={0x86dd, {0x28, 0x6, "110c11", 0x30, 0x21, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x6, [], {0x41, 0x6, "cb155d", 0x0, 0x0, 0x0, @mcast2, @dev}}}}}}}, 0x0) [ 1688.625623] netlink: 7 bytes leftover after parsing attributes in process `syz-executor.4'. 14:22:39 executing program 3: syz_emit_ethernet(0x140, &(0x7f0000000000)={@local, @random="8a37962a294f", [], {@ipv6={0x86dd, {0x6, 0x6, "110c11", 0x30, 0x21, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x6, [], {0x0, 0x6, "cb155d", 0x0, 0x0, 0x0, @mcast2, @dev}}}}}}}, 0x0) 14:22:39 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000bd7000)={&(0x7f0000c07e98)=ANY=[@ANYBLOB="000000000000000000000000000000000000000033000000ffffffff0000000000000000000000000000000000000000000000000000000000000000002949000000000000000000000000000000000000000071150000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020001007d00000000000000480001006d64350000000000000000000019000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000"], 0x1}}, 0x0) 14:22:39 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee4050c00000f0000008bc36f7d79ce3263dac37b7403242189c609", 0x23}], 0x1}, 0x0) 14:22:39 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000000)=[{0x80000006}]}, 0x10) r1 = socket$pppoe(0x18, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/commit_pending_bools\x00', 0x1, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r3, 0x10f, 0x81, &(0x7f0000000140)=0x101, 0x4) connect$pppoe(r1, &(0x7f0000000040)={0x18, 0x0, {0x2, @local, 'batadv0\x00'}}, 0x1e) sendmmsg(r1, &(0x7f0000005b40), 0x40000000000014d, 0x0) r4 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x100000000, 0x200) ioctl$BLKIOMIN(r4, 0x1278, &(0x7f00000000c0)) 14:22:39 executing program 2: syz_emit_ethernet(0x140, &(0x7f0000000000)={@local, @random="8a37962a294f", [], {@ipv6={0x86dd, {0x60, 0x6, "110c11", 0x30, 0x21, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x6, [], {0x41, 0x6, "cb155d", 0x0, 0x0, 0x0, @mcast2, @dev}}}}}}}, 0x0) [ 1688.845175] netlink: 7 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1689.144324] syz-executor.1 invoked oom-killer: gfp_mask=0x7200c2(GFP_HIGHUSER|__GFP_ACCOUNT), order=0, oom_score_adj=0 [ 1689.155492] CPU: 0 PID: 13769 Comm: syz-executor.1 Not tainted 5.0.0-rc6+ #70 [ 1689.162774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1689.172146] Call Trace: [ 1689.174748] dump_stack+0x172/0x1f0 [ 1689.178392] dump_header+0x10f/0xb6c [ 1689.182137] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1689.187243] ? ___ratelimit+0x60/0x595 [ 1689.191132] ? do_raw_spin_unlock+0x57/0x270 [ 1689.195564] oom_kill_process.cold+0x10/0x6f5 [ 1689.200060] ? task_will_free_mem+0x139/0x6e0 [ 1689.204636] out_of_memory+0x79a/0x1280 [ 1689.208629] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1689.213747] ? oom_killer_disable+0x280/0x280 [ 1689.218259] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1689.223384] mem_cgroup_out_of_memory+0x99/0xe0 [ 1689.228073] ? memcg_memory_event+0x40/0x40 [ 1689.232415] ? _raw_spin_unlock+0x2d/0x50 [ 1689.236586] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1689.241702] try_charge+0xfec/0x1570 [ 1689.245429] ? find_held_lock+0x35/0x130 [ 1689.249513] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1689.254374] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 1689.259212] ? find_held_lock+0x35/0x130 [ 1689.263273] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 1689.268120] memcg_kmem_charge_memcg+0x7c/0x130 [ 1689.272789] ? memcg_kmem_put_cache+0xb0/0xb0 [ 1689.277280] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 1689.282114] memcg_kmem_charge+0x13b/0x340 [ 1689.286387] __alloc_pages_nodemask+0x437/0x710 [ 1689.291058] ? __alloc_pages_slowpath+0x2900/0x2900 [ 1689.296094] ? ___might_sleep+0x163/0x280 [ 1689.300244] ? copyin+0xb5/0x100 [ 1689.303613] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1689.309162] alloc_pages_current+0x107/0x210 [ 1689.313581] pipe_write+0xa65/0xfb0 [ 1689.317233] __vfs_write+0x613/0x8e0 [ 1689.320964] ? kernel_read+0x120/0x120 [ 1689.324851] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1689.330415] ? rw_verify_area+0x118/0x360 [ 1689.334590] vfs_write+0x20c/0x580 [ 1689.338148] ksys_write+0xea/0x1f0 [ 1689.341683] ? __ia32_sys_read+0xb0/0xb0 [ 1689.345762] ? do_syscall_64+0x26/0x610 [ 1689.349735] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1689.355105] ? do_syscall_64+0x26/0x610 [ 1689.359089] __x64_sys_write+0x73/0xb0 [ 1689.362989] do_syscall_64+0x103/0x610 [ 1689.366874] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1689.372048] RIP: 0033:0x457e29 [ 1689.375736] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1689.394639] RSP: 002b:00007fd8c7971c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1689.402347] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457e29 [ 1689.409602] RDX: 0000000100000073 RSI: 00000000200001c0 RDI: 0000000000000005 [ 1689.416856] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1689.424119] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd8c79726d4 [ 1689.431385] R13: 00000000004c3be0 R14: 00000000004dc3d0 R15: 00000000ffffffff [ 1689.439973] memory: usage 307200kB, limit 307200kB, failcnt 11117 [ 1689.447205] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1689.454058] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1689.460216] Memory cgroup stats for /syz1: cache:0KB rss:257288KB rss_huge:227328KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:8KB active_anon:257332KB inactive_file:4KB active_file:0KB unevictable:0KB [ 1689.480997] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=13764,uid=0 14:22:40 executing program 1: r0 = perf_event_open(&(0x7f0000000300)={0x400000001, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f000094f000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffff9c, 0xc00c642d, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) pipe(&(0x7f0000000040)) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='bridge_slave_1\x00', 0x10) write(r2, &(0x7f00000001c0), 0x100000073) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) 14:22:40 executing program 3: syz_emit_ethernet(0x140, &(0x7f0000000000)={@local, @random="8a37962a294f", [], {@ipv6={0x86dd, {0x7, 0x6, "110c11", 0x30, 0x21, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x6, [], {0x0, 0x6, "cb155d", 0x0, 0x0, 0x0, @mcast2, @dev}}}}}}}, 0x0) 14:22:40 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee4050c00000f0000008bc36f7d79ce3263dac37b7403242189c609", 0x23}], 0x1}, 0x0) 14:22:40 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000bd7000)={&(0x7f0000c07e98)=ANY=[@ANYBLOB="000000000000000000000000000000000000000033000000ffffffff0000000000000000000000000000000000000000000000000000000000000000002949000000000000000000000000000000000000000015710000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020001007d00000000000000480001006d64350000000000000000000019000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000"], 0x1}}, 0x0) 14:22:40 executing program 2: syz_emit_ethernet(0x140, &(0x7f0000000000)={@local, @random="8a37962a294f", [], {@ipv6={0x86dd, {0xf0, 0x6, "110c11", 0x30, 0x21, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x6, [], {0x41, 0x6, "cb155d", 0x0, 0x0, 0x0, @mcast2, @dev}}}}}}}, 0x0) 14:22:40 executing program 0: r0 = socket$packet(0x11, 0x5, 0x300) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000200)='/dev/mixer\x00', 0x111a00, 0x0) mq_timedsend(r1, &(0x7f0000000140)="f1c9db4d961f06e2cfd5d385936d3f84bd5b22079a1cf1163fbf7c94c13662ac1b393f", 0x23, 0x3, &(0x7f0000000180)={0x77359400}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000000)=[{0x80000006}]}, 0x10) r2 = socket$pppoe(0x18, 0x1, 0x0) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) ioctl$TUNSETLINK(r3, 0x400454cd, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x2) connect$pppoe(r2, &(0x7f0000000040)={0x18, 0x0, {0x2, @local, 'batadv0\x00'}}, 0x1e) write$P9_RLOCK(r3, &(0x7f00000001c0)={0x8, 0x35, 0x2, 0x2}, 0x8) ioctl$BLKSECDISCARD(r3, 0x127d, &(0x7f00000000c0)=0x6) sendmmsg(r2, &(0x7f0000005b40), 0x40000000000014d, 0x0) [ 1689.496098] Memory cgroup out of memory: Kill process 13764 (syz-executor.1) score 140 or sacrifice child [ 1689.505989] Killed process 13764 (syz-executor.1) total-vm:72712kB, anon-rss:8020kB, file-rss:34944kB, shmem-rss:0kB [ 1689.526290] oom_reaper: reaped process 13764 (syz-executor.1), now anon-rss:0kB, file-rss:34832kB, shmem-rss:0kB 14:22:40 executing program 3: syz_emit_ethernet(0x140, &(0x7f0000000000)={@local, @random="8a37962a294f", [], {@ipv6={0x86dd, {0x8, 0x6, "110c11", 0x30, 0x21, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x6, [], {0x0, 0x6, "cb155d", 0x0, 0x0, 0x0, @mcast2, @dev}}}}}}}, 0x0) 14:22:40 executing program 2: syz_emit_ethernet(0x140, &(0x7f0000000000)={@local, @random="8a37962a294f", [], {@ipv6={0x86dd, {0x132, 0x6, "110c11", 0x30, 0x21, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x6, [], {0x41, 0x6, "cb155d", 0x0, 0x0, 0x0, @mcast2, @dev}}}}}}}, 0x0) 14:22:40 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee4050c00000f0000008bc36f7d79ce3263dac37b7403242189c609", 0x23}], 0x1}, 0x0) [ 1689.623297] netlink: 7 bytes leftover after parsing attributes in process `syz-executor.4'. 14:22:40 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000bd7000)={&(0x7f0000c07e98)=ANY=[@ANYBLOB="000000000000000000000000000000000000000033000000ffffffff0000000000000000000000000000000000000000000000000000000000000000002949000000000000000000000000000000000000000000f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020001007d00000000000000480001006d64350000000000000000000019000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000"], 0x1}}, 0x0) 14:22:40 executing program 3: syz_emit_ethernet(0x140, &(0x7f0000000000)={@local, @random="8a37962a294f", [], {@ipv6={0x86dd, {0x9, 0x6, "110c11", 0x30, 0x21, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x6, [], {0x0, 0x6, "cb155d", 0x0, 0x0, 0x0, @mcast2, @dev}}}}}}}, 0x0) 14:22:40 executing program 2: syz_emit_ethernet(0x140, &(0x7f0000000000)={@local, @random="8a37962a294f", [], {@ipv6={0x86dd, {0x300, 0x6, "110c11", 0x30, 0x21, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x6, [], {0x41, 0x6, "cb155d", 0x0, 0x0, 0x0, @mcast2, @dev}}}}}}}, 0x0) [ 1689.787878] netlink: 7 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1690.101757] syz-executor.1 invoked oom-killer: gfp_mask=0x7200c2(GFP_HIGHUSER|__GFP_ACCOUNT), order=0, oom_score_adj=0 [ 1690.113020] CPU: 1 PID: 13803 Comm: syz-executor.1 Not tainted 5.0.0-rc6+ #70 [ 1690.120322] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1690.129682] Call Trace: [ 1690.132261] dump_stack+0x172/0x1f0 [ 1690.135909] dump_header+0x10f/0xb6c [ 1690.139634] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1690.144725] ? ___ratelimit+0x60/0x595 [ 1690.148601] ? do_raw_spin_unlock+0x57/0x270 [ 1690.152999] oom_kill_process.cold+0x10/0x6f5 [ 1690.157488] ? task_will_free_mem+0x139/0x6e0 [ 1690.161977] out_of_memory+0x79a/0x1280 [ 1690.165947] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1690.171054] ? oom_killer_disable+0x280/0x280 [ 1690.175563] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1690.180690] mem_cgroup_out_of_memory+0x99/0xe0 [ 1690.185347] ? memcg_memory_event+0x40/0x40 [ 1690.189678] ? _raw_spin_unlock+0x2d/0x50 [ 1690.193841] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1690.198930] try_charge+0xfec/0x1570 [ 1690.202642] ? find_held_lock+0x35/0x130 [ 1690.206695] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1690.211543] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 1690.216399] ? find_held_lock+0x35/0x130 [ 1690.220462] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 1690.225303] memcg_kmem_charge_memcg+0x7c/0x130 [ 1690.229986] ? memcg_kmem_put_cache+0xb0/0xb0 [ 1690.234508] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 1690.239407] memcg_kmem_charge+0x13b/0x340 [ 1690.243633] __alloc_pages_nodemask+0x437/0x710 [ 1690.248290] ? __alloc_pages_slowpath+0x2900/0x2900 [ 1690.253294] ? ___might_sleep+0x163/0x280 [ 1690.257431] ? copyin+0xb5/0x100 [ 1690.260790] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1690.266316] alloc_pages_current+0x107/0x210 [ 1690.270739] pipe_write+0xa65/0xfb0 [ 1690.274387] __vfs_write+0x613/0x8e0 [ 1690.278107] ? kernel_read+0x120/0x120 [ 1690.282005] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1690.287573] ? rw_verify_area+0x118/0x360 [ 1690.291724] vfs_write+0x20c/0x580 [ 1690.295275] ksys_write+0xea/0x1f0 [ 1690.298806] ? __ia32_sys_read+0xb0/0xb0 [ 1690.302857] ? do_syscall_64+0x26/0x610 [ 1690.306823] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1690.312172] ? do_syscall_64+0x26/0x610 [ 1690.316136] __x64_sys_write+0x73/0xb0 [ 1690.320024] do_syscall_64+0x103/0x610 [ 1690.323920] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1690.329122] RIP: 0033:0x457e29 [ 1690.332328] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1690.351217] RSP: 002b:00007fd8c7971c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1690.358910] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457e29 [ 1690.366173] RDX: 0000000100000073 RSI: 00000000200001c0 RDI: 0000000000000007 [ 1690.373437] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1690.380692] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd8c79726d4 [ 1690.387949] R13: 00000000004c3be0 R14: 00000000004dc3d0 R15: 00000000ffffffff [ 1690.396618] memory: usage 307200kB, limit 307200kB, failcnt 11246 [ 1690.403208] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1690.410110] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1690.416456] Memory cgroup stats for /syz1: cache:0KB rss:257240KB rss_huge:227328KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:8KB active_anon:257332KB inactive_file:4KB active_file:0KB unevictable:0KB [ 1690.437348] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=13802,uid=0 14:22:41 executing program 1: r0 = perf_event_open(&(0x7f0000000300)={0x400000001, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f000094f000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffff9c, 0xc00c642d, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$DRM_IOCTL_SET_UNIQUE(r1, 0x40106410, &(0x7f0000000040)={0xe5, &(0x7f00000000c0)="5fd9358e7426120c2974b9d0a38ded48612fd36eef7d161f1ecac451ee8515c72b76891f7cd4383b6d989bc617100d9c4a23e436abf12faaf6d43bec3b1f0bb2b3d5f39c0557631c33632ba18b520e31dd3a40c7cdf581c0e43d8d9f3a44cb6f2b0e15d36304d54538f5d5eadfd335a7ea6986906bd208a7cf359909618f3d581eda78aeb1dc23e299d9693372e896f5ca6b658662947d4148db3733191b6359a9820ce8670307cb7c0c04a1666afaf72a12a3034e3664351225647e939cc8b70d07b8694020248f0566cabcba781a34523e8d7fafa6ad36886b5a7c2a867946e67a535554"}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0x100000073) read(r2, &(0x7f0000000200)=""/250, 0x50c7e3e3) 14:22:41 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee4050c00000f0000008bc36f7d79ce3263dac37b7403242189c609", 0x23}], 0x1}, 0x0) 14:22:41 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000bd7000)={&(0x7f0000c07e98)=ANY=[@ANYBLOB="000000000000000000000000000000000000000033000000ffffffff00000000000000000000000000000000000000000000000000000000000000000029490000000000000000000000000000000000000000fffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020001007d00000000000000480001006d64350000000000000000000019000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000"], 0x1}}, 0x0) 14:22:41 executing program 3: syz_emit_ethernet(0x140, &(0x7f0000000000)={@local, @random="8a37962a294f", [], {@ipv6={0x86dd, {0xd, 0x6, "110c11", 0x30, 0x21, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x6, [], {0x0, 0x6, "cb155d", 0x0, 0x0, 0x0, @mcast2, @dev}}}}}}}, 0x0) 14:22:41 executing program 2: syz_emit_ethernet(0x140, &(0x7f0000000000)={@local, @random="8a37962a294f", [], {@ipv6={0x86dd, {0x500, 0x6, "110c11", 0x30, 0x21, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x6, [], {0x41, 0x6, "cb155d", 0x0, 0x0, 0x0, @mcast2, @dev}}}}}}}, 0x0) 14:22:41 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000000)=[{0x80000006}]}, 0x10) r1 = socket$pppoe(0x18, 0x1, 0x0) socketpair$unix(0x1, 0x4, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x3, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') sendmsg$TIPC_CMD_GET_MAX_PORTS(r3, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4104000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r4, 0x24, 0x70bd25, 0x25dfdbfe, {}, [""]}, 0x1c}}, 0x8801) connect$pppoe(r1, &(0x7f0000000040)={0x18, 0x0, {0x2, @local, 'batadv0\x00'}}, 0x1e) sendmmsg(r3, &(0x7f0000005b40), 0x400000000000202, 0x0) [ 1690.453139] Memory cgroup out of memory: Kill process 13802 (syz-executor.1) score 140 or sacrifice child [ 1690.463107] Killed process 13802 (syz-executor.1) total-vm:72712kB, anon-rss:8020kB, file-rss:34944kB, shmem-rss:0kB [ 1690.482788] oom_reaper: reaped process 13802 (syz-executor.1), now anon-rss:0kB, file-rss:34832kB, shmem-rss:0kB [ 1690.565483] netlink: 7 bytes leftover after parsing attributes in process `syz-executor.4'. 14:22:41 executing program 2: syz_emit_ethernet(0x140, &(0x7f0000000000)={@local, @random="8a37962a294f", [], {@ipv6={0x86dd, {0x543, 0x6, "110c11", 0x30, 0x21, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x6, [], {0x41, 0x6, "cb155d", 0x0, 0x0, 0x0, @mcast2, @dev}}}}}}}, 0x0) 14:22:41 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000bd7000)={&(0x7f0000c07e98)=ANY=[@ANYBLOB="000000000000000000000000000000000000000033000000ffffffff0000000000000000000000000000000000000000000000000000000000000000002949000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020001007d00000000000000480001006d64350000000000000000000019000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000"], 0x1}}, 0x0) 14:22:41 executing program 3: syz_emit_ethernet(0x140, &(0x7f0000000000)={@local, @random="8a37962a294f", [], {@ipv6={0x86dd, {0x21, 0x6, "110c11", 0x30, 0x21, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x6, [], {0x0, 0x6, "cb155d", 0x0, 0x0, 0x0, @mcast2, @dev}}}}}}}, 0x0) 14:22:41 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000000)=[{0x80000006}]}, 0x10) r1 = socket$pppoe(0x18, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 'batadv0\x00'}}, 0x1e) sendmmsg(r1, &(0x7f0000005b40), 0x40000000000014d, 0x0) 14:22:41 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee4050c00000f0000008bc36f7d79ce3263dac37b7403242189c609", 0x23}], 0x1}, 0x0) [ 1690.766301] net_ratelimit: 80 callbacks suppressed [ 1690.766310] dccp_v6_rcv: dropped packet with invalid checksum [ 1690.790142] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 14:22:41 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000bd7000)={&(0x7f0000c07e98)=ANY=[@ANYBLOB="000000000000000000000000000000000000000033000000ffffffff0000000000000000000000000000000000000000000000000000000000000000002949000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020001007d00000000000000480001006d64350000000000000000000019000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000"], 0x1}}, 0x0) [ 1690.821718] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 1690.831932] netlink: 7 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1690.839550] dccp_v6_rcv: dropped packet with invalid checksum [ 1691.002787] protocol 88fb is buggy, dev hsr_slave_0 [ 1691.007946] protocol 88fb is buggy, dev hsr_slave_1 [ 1691.135332] syz-executor.1 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), order=0, oom_score_adj=0 [ 1691.145466] CPU: 0 PID: 13841 Comm: syz-executor.1 Not tainted 5.0.0-rc6+ #70 [ 1691.152750] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1691.162111] Call Trace: [ 1691.164691] dump_stack+0x172/0x1f0 [ 1691.168325] dump_header+0x10f/0xb6c [ 1691.172034] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1691.177135] ? ___ratelimit+0x60/0x595 [ 1691.181021] ? do_raw_spin_unlock+0x57/0x270 [ 1691.185430] oom_kill_process.cold+0x10/0x6f5 [ 1691.189921] ? task_will_free_mem+0x139/0x6e0 [ 1691.194426] out_of_memory+0x79a/0x1280 [ 1691.198464] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1691.203566] ? oom_killer_disable+0x280/0x280 [ 1691.208053] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1691.213178] mem_cgroup_out_of_memory+0x99/0xe0 [ 1691.217856] ? memcg_memory_event+0x40/0x40 [ 1691.222180] ? _raw_spin_unlock+0x2d/0x50 [ 1691.226315] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1691.231404] try_charge+0xfec/0x1570 [ 1691.235114] ? find_held_lock+0x35/0x130 [ 1691.239201] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1691.244049] ? kasan_check_read+0x11/0x20 [ 1691.248212] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 1691.253073] mem_cgroup_try_charge+0x24d/0x5e0 [ 1691.257684] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 1691.262615] wp_page_copy+0x408/0x1740 [ 1691.266489] ? find_held_lock+0x35/0x130 [ 1691.270540] ? pmd_pfn+0x1d0/0x1d0 [ 1691.274089] ? lock_downgrade+0x810/0x810 [ 1691.278260] ? __pte_alloc_kernel+0x220/0x220 [ 1691.282755] ? kasan_check_read+0x11/0x20 [ 1691.286892] ? do_raw_spin_unlock+0x57/0x270 [ 1691.291291] do_wp_page+0x2ed/0x1520 [ 1691.295011] ? rwlock_bug.part.0+0x90/0x90 [ 1691.299251] ? lock_acquire+0x16f/0x3f0 [ 1691.303222] ? finish_mkwrite_fault+0x4f0/0x4f0 [ 1691.307882] ? add_mm_counter_fast.part.0+0x40/0x40 [ 1691.312907] __handle_mm_fault+0x22db/0x3f20 [ 1691.317329] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 1691.322168] ? find_held_lock+0x35/0x130 [ 1691.326219] ? handle_mm_fault+0x322/0xb30 [ 1691.330457] ? kasan_check_read+0x11/0x20 [ 1691.334610] handle_mm_fault+0x43f/0xb30 [ 1691.338696] __do_page_fault+0x5da/0xd60 [ 1691.342777] do_page_fault+0x71/0x581 [ 1691.346572] page_fault+0x1e/0x30 [ 1691.350014] RIP: 0010:copy_user_enhanced_fast_string+0xe/0x20 [ 1691.355893] Code: 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 1f 00 c3 0f 1f 80 00 00 00 00 0f 1f 00 83 fa 40 0f 82 70 ff ff ff 89 d1 a4 31 c0 0f 1f 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 83 [ 1691.375342] RSP: 0018:ffff888037637b30 EFLAGS: 00010206 [ 1691.380713] RAX: 0000000000000000 RBX: 0000000000001000 RCX: 0000000000000200 [ 1691.387987] RDX: 0000000000001000 RSI: ffff88808a771e00 RDI: 00000000207c1000 [ 1691.395264] RBP: ffff888037637b68 R08: ffffed10114ee400 R09: 0000000000000000 [ 1691.402535] R10: ffffed10114ee3ff R11: ffff88808a771fff R12: 00000000207c0200 [ 1691.409816] R13: ffff88808a771000 R14: 00000000207c1200 R15: 00007ffffffff000 [ 1691.417120] ? copyout+0xe2/0x100 [ 1691.420580] copy_page_to_iter+0x347/0xd00 [ 1691.424841] pipe_read+0x28a/0x940 [ 1691.428393] __vfs_read+0x610/0x8c0 [ 1691.432023] ? vfs_copy_file_range+0xbb0/0xbb0 [ 1691.436642] ? rw_verify_area+0x118/0x360 [ 1691.440801] vfs_read+0x194/0x3e0 [ 1691.444247] ksys_read+0xea/0x1f0 [ 1691.447705] ? kernel_write+0x120/0x120 [ 1691.451684] ? do_syscall_64+0x26/0x610 [ 1691.455659] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1691.461031] ? do_syscall_64+0x26/0x610 [ 1691.464998] __x64_sys_read+0x73/0xb0 [ 1691.468798] do_syscall_64+0x103/0x610 [ 1691.472691] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1691.477891] RIP: 0033:0x457e29 [ 1691.481097] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1691.500249] RSP: 002b:00007fd8c7950c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1691.507946] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457e29 [ 1691.515220] RDX: 0000000050c7e3e3 RSI: 0000000020000200 RDI: 0000000000000004 [ 1691.522621] RBP: 000000000073bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 1691.529906] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd8c79516d4 [ 1691.537198] R13: 00000000004c3964 R14: 00000000004d83b0 R15: 00000000ffffffff [ 1691.546021] memory: usage 307200kB, limit 307200kB, failcnt 11314 [ 1691.552311] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1691.559183] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1691.565390] Memory cgroup stats for /syz1: cache:0KB rss:257256KB rss_huge:227328KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:8KB active_anon:257268KB inactive_file:4KB active_file:0KB unevictable:0KB [ 1691.586236] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=13836,uid=0 [ 1691.600918] Memory cgroup out of memory: Kill process 13836 (syz-executor.1) score 140 or sacrifice child [ 1691.610937] Killed process 13836 (syz-executor.1) total-vm:72580kB, anon-rss:8020kB, file-rss:34944kB, shmem-rss:0kB 14:22:42 executing program 1: r0 = perf_event_open(&(0x7f0000000300)={0x400000001, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f000094f000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x400402, 0x0) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r1, 0x800442d2, &(0x7f0000000140)={0x2, &(0x7f0000000100)=[{0x0, 0x0, 0x0, @remote}, {0x0, 0x0, 0x0, @remote}]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffff9c, 0xc00c642d, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x1, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0x100000073) read(r2, &(0x7f0000000200)=""/250, 0x50c7e3e3) memfd_create(&(0x7f0000000040)='lo:\x00', 0x2) 14:22:42 executing program 2: syz_emit_ethernet(0x140, &(0x7f0000000000)={@local, @random="8a37962a294f", [], {@ipv6={0x86dd, {0x600, 0x6, "110c11", 0x30, 0x21, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x6, [], {0x41, 0x6, "cb155d", 0x0, 0x0, 0x0, @mcast2, @dev}}}}}}}, 0x0) 14:22:42 executing program 3: syz_emit_ethernet(0x140, &(0x7f0000000000)={@local, @random="8a37962a294f", [], {@ipv6={0x86dd, {0x28, 0x6, "110c11", 0x30, 0x21, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x6, [], {0x0, 0x6, "cb155d", 0x0, 0x0, 0x0, @mcast2, @dev}}}}}}}, 0x0) 14:22:42 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee4050c00000f0000008bc36f7d79ce3263dac37b7403242189c609", 0x23}], 0x1}, 0x0) 14:22:42 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f00000000c0)=[{0x80000006, 0x0, 0x0, 0x4}]}, 0x10) r1 = socket$pppoe(0x18, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x4000, 0x0) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000200)={0x0, 0x4}, &(0x7f0000000280)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000480)={r4, 0xac, &(0x7f00000003c0)=[@in6={0xa, 0x4e24, 0x14100000, @dev={0xfe, 0x80, [], 0xd}, 0x80000000}, @in6={0xa, 0x4e22, 0x100, @mcast1, 0xfffffffffffffffa}, @in6={0xa, 0x4e24, 0x6, @mcast1, 0x2}, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e20, @empty}, @in6={0xa, 0x4e24, 0xff, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x7}, @in6={0xa, 0x4e22, 0x2, @rand_addr="0492d0f0c98129d0ac3d09b5154476d4", 0x101}]}, &(0x7f00000004c0)=0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f00000002c0)={r4, @in6={{0xa, 0x4e21, 0x3, @loopback, 0x5}}, 0x1, 0x1, 0x0, 0x9, 0xb0}, &(0x7f0000000380)=0x98) ioctl$LOOP_SET_STATUS64(r3, 0x4c04, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x9, 0x5f3, 0x0, 0x4, 0x11, 0xd, "62bf0b5e4877c55d187d8beedaef13f853c72c2a49c92dc5b7ed47a53f3a6b1a64459aa40a0fbc00897cbddea05bdc420f11402eadd0a7572c47c46627c962d8", "e9686276a1cba4bdb8fe11f554ab5a740dc07aa499b111ef93e232bb402d25c870b1a31d369cddfac408f59890738dbcbe818c3b13b8238f437f64b0aea98a10", "b5690ebfbb3dca88904b27d1178d749702eff8e35f267d1be6ba5fb77f658426", [0x8, 0x3ff]}) connect$pppoe(r1, &(0x7f0000000040)={0x18, 0x0, {0x2, @local, 'batadv0\x00'}}, 0x1e) sendmmsg(r1, &(0x7f0000005b40), 0x40000000000014d, 0x0) syz_open_dev$midi(&(0x7f0000000080)='/dev/midi#\x00', 0x4, 0x18000) [ 1691.632362] oom_reaper: reaped process 13836 (syz-executor.1), now anon-rss:0kB, file-rss:34836kB, shmem-rss:0kB 14:22:42 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000bd7000)={&(0x7f0000c07e98)=ANY=[@ANYBLOB="000000000000000000000000000000000000000033000000ffffffff0000000000000000000000000000000000000000000000000000000000000000002949000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020001007d00000000000000480001006d64350000000000000000000019000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000"], 0x1}}, 0x0) 14:22:42 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee4050c00000f0000008bc36f7d79ce3263dac37b7403242189c609", 0x23}], 0x1}, 0x0) 14:22:42 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000bd7000)={&(0x7f0000c07e98)=ANY=[@ANYBLOB="000000000000000000000000000000000000000033000000ffffffff0000000000000000000000000000000000000000000000000000000000000000002949000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020001007d00000000000000480001006d64350000000000000000000019000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000"], 0x1}}, 0x0) [ 1691.740104] dccp_v6_rcv: dropped packet with invalid checksum [ 1691.755245] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 1691.768913] dccp_v6_rcv: dropped packet with invalid checksum [ 1691.779292] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 14:22:42 executing program 2: syz_emit_ethernet(0x140, &(0x7f0000000000)={@local, @random="8a37962a294f", [], {@ipv6={0x86dd, {0x608, 0x6, "110c11", 0x30, 0x21, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x6, [], {0x41, 0x6, "cb155d", 0x0, 0x0, 0x0, @mcast2, @dev}}}}}}}, 0x0) 14:22:42 executing program 3: syz_emit_ethernet(0x140, &(0x7f0000000000)={@local, @random="8a37962a294f", [], {@ipv6={0x86dd, {0x60, 0x6, "110c11", 0x30, 0x21, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x6, [], {0x0, 0x6, "cb155d", 0x0, 0x0, 0x0, @mcast2, @dev}}}}}}}, 0x0) 14:22:42 executing program 2: syz_emit_ethernet(0x140, &(0x7f0000000000)={@local, @random="8a37962a294f", [], {@ipv6={0x86dd, {0x689, 0x6, "110c11", 0x30, 0x21, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x6, [], {0x41, 0x6, "cb155d", 0x0, 0x0, 0x0, @mcast2, @dev}}}}}}}, 0x0) 14:22:42 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000000)=[{0x80000006}]}, 0x10) r1 = socket$pppoe(0x18, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) connect$pppoe(r1, &(0x7f0000000040)={0x18, 0x0, {0x2, @local, 'batadv0\x00'}}, 0x1e) [ 1692.221106] syz-executor.1 invoked oom-killer: gfp_mask=0x7200c2(GFP_HIGHUSER|__GFP_ACCOUNT), order=0, oom_score_adj=0 [ 1692.235906] CPU: 1 PID: 13874 Comm: syz-executor.1 Not tainted 5.0.0-rc6+ #70 [ 1692.243225] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1692.252593] Call Trace: [ 1692.255193] dump_stack+0x172/0x1f0 [ 1692.258841] dump_header+0x10f/0xb6c [ 1692.262568] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1692.267686] ? ___ratelimit+0x60/0x595 [ 1692.271605] ? do_raw_spin_unlock+0x57/0x270 [ 1692.276033] oom_kill_process.cold+0x10/0x6f5 [ 1692.280573] ? task_will_free_mem+0x139/0x6e0 [ 1692.285088] out_of_memory+0x79a/0x1280 [ 1692.289071] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1692.294190] ? oom_killer_disable+0x280/0x280 [ 1692.298686] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1692.303811] mem_cgroup_out_of_memory+0x99/0xe0 [ 1692.308478] ? memcg_memory_event+0x40/0x40 [ 1692.312873] ? _raw_spin_unlock+0x2d/0x50 [ 1692.317046] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1692.322156] try_charge+0xfec/0x1570 [ 1692.325858] ? find_held_lock+0x35/0x130 [ 1692.329921] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1692.334765] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 1692.339616] ? find_held_lock+0x35/0x130 [ 1692.343686] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 1692.348557] memcg_kmem_charge_memcg+0x7c/0x130 [ 1692.353235] ? memcg_kmem_put_cache+0xb0/0xb0 [ 1692.357742] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 1692.362580] memcg_kmem_charge+0x13b/0x340 [ 1692.366829] __alloc_pages_nodemask+0x437/0x710 [ 1692.371497] ? __alloc_pages_slowpath+0x2900/0x2900 [ 1692.376509] ? ___might_sleep+0x163/0x280 [ 1692.380655] ? copyin+0xb5/0x100 [ 1692.384007] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1692.389531] alloc_pages_current+0x107/0x210 [ 1692.393955] pipe_write+0xa65/0xfb0 [ 1692.397599] __vfs_write+0x613/0x8e0 [ 1692.401304] ? kernel_read+0x120/0x120 [ 1692.405193] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1692.410720] ? rw_verify_area+0x118/0x360 [ 1692.414866] vfs_write+0x20c/0x580 [ 1692.418410] ksys_write+0xea/0x1f0 [ 1692.421961] ? __ia32_sys_read+0xb0/0xb0 [ 1692.426019] ? do_syscall_64+0x26/0x610 [ 1692.429975] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1692.435331] ? do_syscall_64+0x26/0x610 [ 1692.439309] __x64_sys_write+0x73/0xb0 [ 1692.443184] do_syscall_64+0x103/0x610 [ 1692.447078] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1692.452265] RIP: 0033:0x457e29 [ 1692.455452] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1692.474384] RSP: 002b:00007fd8c7971c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1692.482150] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457e29 [ 1692.489428] RDX: 0000000100000073 RSI: 00000000200001c0 RDI: 0000000000000005 [ 1692.496716] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1692.504007] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd8c79726d4 [ 1692.511257] R13: 00000000004c3be0 R14: 00000000004dc3d0 R15: 00000000ffffffff [ 1692.521269] memory: usage 307200kB, limit 307200kB, failcnt 11427 [ 1692.542671] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1692.549574] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1692.555934] Memory cgroup stats for /syz1: cache:0KB rss:257108KB rss_huge:227328KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:8KB active_anon:257212KB inactive_file:4KB active_file:0KB unevictable:0KB [ 1692.577009] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=13872,uid=0 14:22:43 executing program 1: r0 = perf_event_open(&(0x7f0000000300)={0x400000001, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f000094f000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffff9c, 0xc00c642d, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) write(0xffffffffffffffff, &(0x7f00000001c0), 0x100000073) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e3e3) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCINQ(r1, 0x541b, &(0x7f0000000000)) 14:22:43 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee4050c00000f0000008bc36f7d79ce3263dac37b7403242189c609", 0x23}], 0x1}, 0x0) 14:22:43 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000bd7000)={&(0x7f0000c07e98)=ANY=[@ANYBLOB="000000000000000000000000000000000000000033000000ffffffff0000000000000000000000000000000000000000000000000000000000000000002949000000000000000000000000000000000000000000001571000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020001007d00000000000000480001006d64350000000000000000000019000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000"], 0x1}}, 0x0) 14:22:43 executing program 3: syz_emit_ethernet(0x140, &(0x7f0000000000)={@local, @random="8a37962a294f", [], {@ipv6={0x86dd, {0xf0, 0x6, "110c11", 0x30, 0x21, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x6, [], {0x0, 0x6, "cb155d", 0x0, 0x0, 0x0, @mcast2, @dev}}}}}}}, 0x0) 14:22:43 executing program 2: syz_emit_ethernet(0x140, &(0x7f0000000000)={@local, @random="8a37962a294f", [], {@ipv6={0x86dd, {0x700, 0x6, "110c11", 0x30, 0x21, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x6, [], {0x41, 0x6, "cb155d", 0x0, 0x0, 0x0, @mcast2, @dev}}}}}}}, 0x0) 14:22:43 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000000)=[{0x80000006}]}, 0x10) getsockname(r0, &(0x7f0000000140)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={[], [], @remote}}}}, &(0x7f00000001c0)=0x80) accept$ax25(r1, &(0x7f0000000200)={{0x3, @null}, [@rose, @bcast, @default, @default, @remote, @bcast, @netrom, @default]}, &(0x7f0000000280)=0x48) r2 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x10001, 0x4000) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f00000000c0)={0x4, 0x4, 0x1000}) r3 = socket$pppoe(0x18, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) connect$pppoe(r3, &(0x7f0000000040)={0x18, 0x0, {0x2, @local, 'batadv0\x00'}}, 0x1e) sendmmsg(r3, &(0x7f0000005b40), 0x40000000000014d, 0x0) [ 1692.591898] Memory cgroup out of memory: Kill process 13872 (syz-executor.1) score 139 or sacrifice child [ 1692.602201] Killed process 13872 (syz-executor.1) total-vm:72712kB, anon-rss:7756kB, file-rss:34944kB, shmem-rss:0kB [ 1692.629218] oom_reaper: reaped process 13872 (syz-executor.1), now anon-rss:0kB, file-rss:34836kB, shmem-rss:0kB 14:22:43 executing program 2: syz_emit_ethernet(0x140, &(0x7f0000000000)={@local, @random="8a37962a294f", [], {@ipv6={0x86dd, {0x806, 0x6, "110c11", 0x30, 0x21, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x6, [], {0x41, 0x6, "cb155d", 0x0, 0x0, 0x0, @mcast2, @dev}}}}}}}, 0x0) 14:22:43 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000bd7000)={&(0x7f0000c07e98)=ANY=[@ANYBLOB="000000000000000000000000000000000000000033000000ffffffff00000000000000000000000000000000000000000000000000000000000000000029490000000000000000000000000000000000000000ffffff9e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020001007d00000000000000480001006d64350000000000000000000019000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000"], 0x1}}, 0x0) [ 1692.729603] __nla_parse: 2 callbacks suppressed [ 1692.729614] netlink: 7 bytes leftover after parsing attributes in process `syz-executor.4'. 14:22:43 executing program 3: syz_emit_ethernet(0x140, &(0x7f0000000000)={@local, @random="8a37962a294f", [], {@ipv6={0x86dd, {0x132, 0x6, "110c11", 0x30, 0x21, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x6, [], {0x0, 0x6, "cb155d", 0x0, 0x0, 0x0, @mcast2, @dev}}}}}}}, 0x0) 14:22:43 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee4050c00000f0000008bc36f7d79ce3263dac37b7403242189c609", 0x23}], 0x1}, 0x0) 14:22:43 executing program 1: r0 = perf_event_open(&(0x7f0000000300)={0x400000001, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f000094f000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x1, 0x2000) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000540)='/selinux/avc/hash_stats\x00', 0x0, 0x0) r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x6, 0x2) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0x100000073) read(r2, &(0x7f0000000200)=""/250, 0x50c7e3e3) 14:22:43 executing program 2: syz_emit_ethernet(0x140, &(0x7f0000000000)={@local, @random="8a37962a294f", [], {@ipv6={0x86dd, {0x900, 0x6, "110c11", 0x30, 0x21, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x6, [], {0x41, 0x6, "cb155d", 0x0, 0x0, 0x0, @mcast2, @dev}}}}}}}, 0x0) [ 1692.968984] netlink: 7 bytes leftover after parsing attributes in process `syz-executor.4'. 14:22:43 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000bd7000)={&(0x7f0000c07e98)=ANY=[@ANYBLOB="000000000000000000000000000000000000000033000000ffffffff00000000000000000000000000000000000000000000000000000000000000000029490000000000000000000000000000000000000000fffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020001007d00000000000000480001006d64350000000000000000000019000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000"], 0x1}}, 0x0) 14:22:43 executing program 3: syz_emit_ethernet(0x140, &(0x7f0000000000)={@local, @random="8a37962a294f", [], {@ipv6={0x86dd, {0x300, 0x6, "110c11", 0x30, 0x21, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x6, [], {0x0, 0x6, "cb155d", 0x0, 0x0, 0x0, @mcast2, @dev}}}}}}}, 0x0) 14:22:43 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee4050c00000f0000008bc36f7d79ce3263dac37b7403242189c609", 0x23}], 0x1}, 0x0) 14:22:43 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000000)=[{0x80000006}]}, 0x10) r1 = socket$pppoe(0x18, 0x1, 0x0) read(r0, &(0x7f0000000100)=""/87, 0x57) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x4, 0x121200) ioctl$BLKGETSIZE64(r3, 0x80081272, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) connect$pppoe(r1, &(0x7f0000000040)={0x18, 0x0, {0x2, @local, 'batadv0\x00'}}, 0x1e) sendmmsg(r1, &(0x7f0000005b40), 0x40000000000014d, 0x0) 14:22:43 executing program 2: syz_emit_ethernet(0x140, &(0x7f0000000000)={@local, @random="8a37962a294f", [], {@ipv6={0x86dd, {0xd00, 0x6, "110c11", 0x30, 0x21, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x6, [], {0x41, 0x6, "cb155d", 0x0, 0x0, 0x0, @mcast2, @dev}}}}}}}, 0x0) [ 1693.193058] netlink: 7 bytes leftover after parsing attributes in process `syz-executor.4'. 14:22:43 executing program 3: syz_emit_ethernet(0x140, &(0x7f0000000000)={@local, @random="8a37962a294f", [], {@ipv6={0x86dd, {0x500, 0x6, "110c11", 0x30, 0x21, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x6, [], {0x0, 0x6, "cb155d", 0x0, 0x0, 0x0, @mcast2, @dev}}}}}}}, 0x0) 14:22:43 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000bd7000)={&(0x7f0000c07e98)=ANY=[@ANYBLOB="000000000000000000000000000000000000000033000000ffffffff0000000000000000000000000000000000000000000000000000000000000000002949000000000000000000000000000000000000000000f0ffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020001007d00000000000000480001006d64350000000000000000000019000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000"], 0x1}}, 0x0) 14:22:43 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee4050c00000f0000008bc36f7d79ce3263dac37b7403242189c609", 0x23}], 0x1}, 0x0) 14:22:44 executing program 2: syz_emit_ethernet(0x140, &(0x7f0000000000)={@local, @random="8a37962a294f", [], {@ipv6={0x86dd, {0xe80, 0x6, "110c11", 0x30, 0x21, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x6, [], {0x41, 0x6, "cb155d", 0x0, 0x0, 0x0, @mcast2, @dev}}}}}}}, 0x0) 14:22:44 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000bd7000)={&(0x7f0000c07e98)=ANY=[@ANYBLOB="000000000000000000000000000000000000000033000000ffffffff000000000000000000000000000000000000000000000000000000000000000000294900000000000000000000000000000000000000007fffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020001007d00000000000000480001006d64350000000000000000000019000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000"], 0x1}}, 0x0) [ 1693.428053] netlink: 7 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1693.624591] syz-executor.1 invoked oom-killer: gfp_mask=0x7200c2(GFP_HIGHUSER|__GFP_ACCOUNT), order=0, oom_score_adj=0 [ 1693.635969] CPU: 1 PID: 13930 Comm: syz-executor.1 Not tainted 5.0.0-rc6+ #70 [ 1693.643256] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1693.652609] Call Trace: [ 1693.655209] dump_stack+0x172/0x1f0 [ 1693.658855] dump_header+0x10f/0xb6c [ 1693.662592] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1693.667697] ? ___ratelimit+0x60/0x595 [ 1693.671573] ? do_raw_spin_unlock+0x57/0x270 [ 1693.675984] oom_kill_process.cold+0x10/0x6f5 [ 1693.680480] ? task_will_free_mem+0x139/0x6e0 [ 1693.684972] out_of_memory+0x79a/0x1280 [ 1693.688935] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1693.694077] ? oom_killer_disable+0x280/0x280 [ 1693.698585] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1693.703728] mem_cgroup_out_of_memory+0x99/0xe0 [ 1693.708394] ? memcg_memory_event+0x40/0x40 [ 1693.712736] ? _raw_spin_unlock+0x2d/0x50 [ 1693.716900] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1693.722002] try_charge+0xfec/0x1570 [ 1693.725709] ? find_held_lock+0x35/0x130 [ 1693.729774] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1693.734622] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 1693.739466] ? find_held_lock+0x35/0x130 [ 1693.743533] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 1693.748380] memcg_kmem_charge_memcg+0x7c/0x130 [ 1693.753054] ? memcg_kmem_put_cache+0xb0/0xb0 [ 1693.757567] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 1693.762412] memcg_kmem_charge+0x13b/0x340 [ 1693.766654] __alloc_pages_nodemask+0x437/0x710 [ 1693.771326] ? __alloc_pages_slowpath+0x2900/0x2900 [ 1693.776360] ? ___might_sleep+0x163/0x280 [ 1693.780520] ? copyin+0xb5/0x100 [ 1693.783892] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1693.789430] alloc_pages_current+0x107/0x210 [ 1693.793850] pipe_write+0xa65/0xfb0 [ 1693.797483] __vfs_write+0x613/0x8e0 [ 1693.801183] ? kernel_read+0x120/0x120 [ 1693.805053] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1693.810622] ? rw_verify_area+0x118/0x360 [ 1693.814770] vfs_write+0x20c/0x580 [ 1693.818322] ksys_write+0xea/0x1f0 [ 1693.821848] ? __ia32_sys_read+0xb0/0xb0 [ 1693.825899] ? do_syscall_64+0x26/0x610 [ 1693.829861] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1693.835221] ? do_syscall_64+0x26/0x610 [ 1693.839196] __x64_sys_write+0x73/0xb0 [ 1693.843097] do_syscall_64+0x103/0x610 [ 1693.846986] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1693.852158] RIP: 0033:0x457e29 [ 1693.855347] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1693.874252] RSP: 002b:00007fd8c7971c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1693.881959] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457e29 [ 1693.889214] RDX: 0000000100000073 RSI: 00000000200001c0 RDI: 0000000000000005 [ 1693.896494] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1693.903764] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd8c79726d4 [ 1693.911026] R13: 00000000004c3be0 R14: 00000000004dc3d0 R15: 00000000ffffffff [ 1693.921463] memory: usage 307200kB, limit 307200kB, failcnt 11476 [ 1693.928970] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1693.936693] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1693.943474] Memory cgroup stats for /syz1: cache:0KB rss:257140KB rss_huge:227328KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:8KB active_anon:257268KB inactive_file:0KB active_file:4KB unevictable:0KB [ 1693.965082] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=13928,uid=0 [ 1693.980139] Memory cgroup out of memory: Kill process 13928 (syz-executor.1) score 140 or sacrifice child [ 1693.990200] Killed process 13928 (syz-executor.1) total-vm:72712kB, anon-rss:8020kB, file-rss:34944kB, shmem-rss:0kB [ 1694.012190] oom_reaper: reaped process 13928 (syz-executor.1), now anon-rss:0kB, file-rss:33984kB, shmem-rss:0kB 14:22:44 executing program 1: r0 = perf_event_open(&(0x7f0000000300)={0x400000001, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f000094f000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffff9c, 0xc00c642d, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f0000000000)="d422d8c74d7055982b0fa45cdcd26a968887eef2400d7c5c7f337a700137a1b1525b0753a2795806eedd9f5677839a20703f75fc7f7d4b0f5747c0cb7e1d3b38dfcf6c5cf290eda61319d1871ae5a9c9b3d87319481d4826790bfaa459892b231f712ed550f3dd5025bc3a19936c7c9f426f24", 0x73) write(r2, &(0x7f00000001c0), 0x100000073) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) 14:22:44 executing program 3: syz_emit_ethernet(0x140, &(0x7f0000000000)={@local, @random="8a37962a294f", [], {@ipv6={0x86dd, {0x543, 0x6, "110c11", 0x30, 0x21, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x6, [], {0x0, 0x6, "cb155d", 0x0, 0x0, 0x0, @mcast2, @dev}}}}}}}, 0x0) 14:22:44 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee4050c00000f0000008bc36f7d79ce3263dac37b7403242189c609", 0x23}], 0x1}, 0x0) 14:22:44 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000bd7000)={&(0x7f0000c07e98)=ANY=[@ANYBLOB="000000000000000000000000000000000000000033000000ffffffff000000000000000000000000000000000000000000000000000000000000000000294900000000000000000000000000000000000000009effffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020001007d00000000000000480001006d64350000000000000000000019000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000"], 0x1}}, 0x0) 14:22:44 executing program 2: syz_emit_ethernet(0x140, &(0x7f0000000000)={@local, @random="8a37962a294f", [], {@ipv6={0x86dd, {0x2000, 0x6, "110c11", 0x30, 0x21, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x6, [], {0x41, 0x6, "cb155d", 0x0, 0x0, 0x0, @mcast2, @dev}}}}}}}, 0x0) [ 1694.143317] netlink: 7 bytes leftover after parsing attributes in process `syz-executor.4'. 14:22:44 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000), 0x10) setsockopt$sock_void(r0, 0x1, 0x3f, 0x0, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000001100)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000100)="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", 0x1000, r2}, 0x68) connect$pppoe(r1, &(0x7f0000000040)={0x18, 0x0, {0x2, @random="5aa3a4d48477", 'batadv0\x00'}}, 0x1e) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x9bff) setxattr$trusted_overlay_nlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='trusted.overlay.nlink\x00', &(0x7f00000000c0)={'L-', 0x4}, 0x28, 0x1) sendmmsg(r1, &(0x7f0000005b40), 0x40000000000014d, 0x0) 14:22:44 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000bd7000)={&(0x7f0000c07e98)=ANY=[@ANYBLOB="000000000000000000000000000000000000000033000000ffffffff00000000000000000000000000000000000000000000000000000000000000000029490000000000000000000000000000000000000000f0ffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020001007d00000000000000480001006d64350000000000000000000019000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000"], 0x1}}, 0x0) 14:22:44 executing program 2: syz_emit_ethernet(0x140, &(0x7f0000000000)={@local, @random="8a37962a294f", [], {@ipv6={0x86dd, {0x2100, 0x6, "110c11", 0x30, 0x21, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x6, [], {0x41, 0x6, "cb155d", 0x0, 0x0, 0x0, @mcast2, @dev}}}}}}}, 0x0) 14:22:44 executing program 3: syz_emit_ethernet(0x140, &(0x7f0000000000)={@local, @random="8a37962a294f", [], {@ipv6={0x86dd, {0x600, 0x6, "110c11", 0x30, 0x21, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x6, [], {0x0, 0x6, "cb155d", 0x0, 0x0, 0x0, @mcast2, @dev}}}}}}}, 0x0) 14:22:44 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee4050c00000f0000008bc36f7d79ce3263dac37b7403242189c609", 0x23}], 0x1}, 0x0) 14:22:44 executing program 3: syz_emit_ethernet(0x140, &(0x7f0000000000)={@local, @random="8a37962a294f", [], {@ipv6={0x86dd, {0x608, 0x6, "110c11", 0x30, 0x21, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x6, [], {0x0, 0x6, "cb155d", 0x0, 0x0, 0x0, @mcast2, @dev}}}}}}}, 0x0) [ 1694.359949] netlink: 7 bytes leftover after parsing attributes in process `syz-executor.4'. 14:22:45 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000bd7000)={&(0x7f0000c07e98)=ANY=[@ANYBLOB="000000000000000000000000000000000000000033000000ffffffff00000000000000000000000000000000000000000000000000000000000000000029490000000000000000000000000000000000000000fffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020001007d00000000000000480001006d64350000000000000000000019000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000"], 0x1}}, 0x0) [ 1694.645987] syz-executor.1 invoked oom-killer: gfp_mask=0x7200c2(GFP_HIGHUSER|__GFP_ACCOUNT), order=0, oom_score_adj=0 [ 1694.657222] CPU: 0 PID: 13987 Comm: syz-executor.1 Not tainted 5.0.0-rc6+ #70 [ 1694.664525] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1694.673894] Call Trace: [ 1694.673920] dump_stack+0x172/0x1f0 [ 1694.673945] dump_header+0x10f/0xb6c [ 1694.673963] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1694.680161] ? ___ratelimit+0x60/0x595 [ 1694.692860] ? do_raw_spin_unlock+0x57/0x270 [ 1694.697373] oom_kill_process.cold+0x10/0x6f5 [ 1694.701899] ? task_will_free_mem+0x139/0x6e0 [ 1694.706423] out_of_memory+0x79a/0x1280 [ 1694.710425] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1694.715567] ? oom_killer_disable+0x280/0x280 [ 1694.720110] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1694.725263] mem_cgroup_out_of_memory+0x99/0xe0 [ 1694.729937] ? memcg_memory_event+0x40/0x40 [ 1694.734265] ? _raw_spin_unlock+0x2d/0x50 [ 1694.738405] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1694.743511] try_charge+0xfec/0x1570 [ 1694.747228] ? find_held_lock+0x35/0x130 [ 1694.751284] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1694.756131] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 1694.760967] ? find_held_lock+0x35/0x130 [ 1694.765018] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 1694.769917] memcg_kmem_charge_memcg+0x7c/0x130 [ 1694.774596] ? memcg_kmem_put_cache+0xb0/0xb0 [ 1694.779099] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 1694.783956] memcg_kmem_charge+0x13b/0x340 [ 1694.788191] __alloc_pages_nodemask+0x437/0x710 [ 1694.792855] ? __alloc_pages_slowpath+0x2900/0x2900 [ 1694.797869] ? ___might_sleep+0x163/0x280 [ 1694.802013] ? copyin+0xb5/0x100 [ 1694.805407] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1694.810933] alloc_pages_current+0x107/0x210 [ 1694.815373] pipe_write+0xa65/0xfb0 [ 1694.818994] __vfs_write+0x613/0x8e0 [ 1694.822705] ? kernel_read+0x120/0x120 [ 1694.826590] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1694.832131] ? rw_verify_area+0x118/0x360 [ 1694.836280] vfs_write+0x20c/0x580 [ 1694.839821] ksys_write+0xea/0x1f0 [ 1694.843348] ? __ia32_sys_read+0xb0/0xb0 [ 1694.847407] ? do_syscall_64+0x26/0x610 [ 1694.851401] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1694.856776] ? do_syscall_64+0x26/0x610 [ 1694.860753] __x64_sys_write+0x73/0xb0 [ 1694.864665] do_syscall_64+0x103/0x610 [ 1694.868570] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1694.873751] RIP: 0033:0x457e29 [ 1694.876951] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1694.895851] RSP: 002b:00007fd8c7971c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1694.903546] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457e29 [ 1694.910809] RDX: 0000000100000073 RSI: 00000000200001c0 RDI: 0000000000000005 [ 1694.918087] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1694.925355] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd8c79726d4 [ 1694.932618] R13: 00000000004c3be0 R14: 00000000004dc3d0 R15: 00000000ffffffff [ 1694.941514] memory: usage 307200kB, limit 307200kB, failcnt 11547 [ 1694.947819] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1694.954666] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1694.960823] Memory cgroup stats for /syz1: cache:0KB rss:257180KB rss_huge:227328KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:8KB active_anon:257268KB inactive_file:0KB active_file:0KB unevictable:0KB [ 1694.981734] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=13986,uid=0 14:22:45 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee4050c00000f0000008bc36f7d79ce3263dac37b7403242189c609", 0x23}], 0x1}, 0x0) 14:22:45 executing program 1: r0 = perf_event_open(&(0x7f0000000300)={0x400000001, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f000094f000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x8, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x800, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000040), 0x0) read(r2, &(0x7f0000000200)=""/250, 0x50c7e3e3) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r2, 0x8008ae9d, &(0x7f0000000000)=""/23) 14:22:45 executing program 2: syz_emit_ethernet(0x140, &(0x7f0000000000)={@local, @random="8a37962a294f", [], {@ipv6={0x86dd, {0x2800, 0x6, "110c11", 0x30, 0x21, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x6, [], {0x41, 0x6, "cb155d", 0x0, 0x0, 0x0, @mcast2, @dev}}}}}}}, 0x0) 14:22:45 executing program 3: syz_emit_ethernet(0x140, &(0x7f0000000000)={@local, @random="8a37962a294f", [], {@ipv6={0x86dd, {0x689, 0x6, "110c11", 0x30, 0x21, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x6, [], {0x0, 0x6, "cb155d", 0x0, 0x0, 0x0, @mcast2, @dev}}}}}}}, 0x0) 14:22:45 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000bd7000)={&(0x7f0000c07e98)=ANY=[@ANYBLOB="000000000000000000000000000000000000000033000000ffffffff0000000000000000000000000000000000000000000000000000000000000000002949000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020001007d00000000000000480001006d64350000000000000000000019000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000"], 0x1}}, 0x0) 14:22:45 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000000)=[{0x80000006}]}, 0x10) r1 = socket$pppoe(0x18, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$vfio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vfio/vfio\x00', 0x200000, 0x0) ioctl$IMADDTIMER(r3, 0x80044940, &(0x7f0000000200)=0xf4240) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) mremap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffa000/0x1000)=nil) r4 = pkey_alloc(0x0, 0x3) pkey_mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4, r4) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffff9c, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000, 0xffffffffffffff9c}) r7 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x200080, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r6, 0xc00c642d, &(0x7f0000000180)={0x0, 0x80000, r7}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r7, 0xc00c642d, &(0x7f0000000140)={r5, 0x80000, r7}) connect$pppoe(r1, &(0x7f0000000040)={0x18, 0x0, {0x2, @local, 'batadv0\x00'}}, 0x1e) sendmmsg(r1, &(0x7f0000005b40), 0x40000000000014d, 0x0) [ 1694.996520] Memory cgroup out of memory: Kill process 13986 (syz-executor.1) score 140 or sacrifice child [ 1695.006378] Killed process 13986 (syz-executor.1) total-vm:72712kB, anon-rss:8020kB, file-rss:34944kB, shmem-rss:0kB [ 1695.025547] oom_reaper: reaped process 13986 (syz-executor.1), now anon-rss:0kB, file-rss:34832kB, shmem-rss:0kB 14:22:45 executing program 3: syz_emit_ethernet(0x140, &(0x7f0000000000)={@local, @random="8a37962a294f", [], {@ipv6={0x86dd, {0x700, 0x6, "110c11", 0x30, 0x21, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x6, [], {0x0, 0x6, "cb155d", 0x0, 0x0, 0x0, @mcast2, @dev}}}}}}}, 0x0) [ 1695.087400] netlink: 7 bytes leftover after parsing attributes in process `syz-executor.4'. 14:22:45 executing program 2: syz_emit_ethernet(0x140, &(0x7f0000000000)={@local, @random="8a37962a294f", [], {@ipv6={0x86dd, {0x3201, 0x6, "110c11", 0x30, 0x21, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x6, [], {0x41, 0x6, "cb155d", 0x0, 0x0, 0x0, @mcast2, @dev}}}}}}}, 0x0) 14:22:45 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000bd7000)={&(0x7f0000c07e98)=ANY=[@ANYBLOB="000000000000000000000000000000000000000033000000ffffffff0000000000000000000000000000000000000000000000000000000000000000002949000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020001007d00000000000000480001006d64350000000000000000000019000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000"], 0x1}}, 0x0) 14:22:45 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee4050c00000f0000008bc36f7d79ce3263dac37b7403242189c609", 0x23}], 0x1}, 0x0) 14:22:45 executing program 3: syz_emit_ethernet(0x140, &(0x7f0000000000)={@local, @random="8a37962a294f", [], {@ipv6={0x86dd, {0x806, 0x6, "110c11", 0x30, 0x21, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x6, [], {0x0, 0x6, "cb155d", 0x0, 0x0, 0x0, @mcast2, @dev}}}}}}}, 0x0) [ 1695.280366] netlink: 7 bytes leftover after parsing attributes in process `syz-executor.4'. 14:22:45 executing program 2: syz_emit_ethernet(0x140, &(0x7f0000000000)={@local, @random="8a37962a294f", [], {@ipv6={0x86dd, {0x3580, 0x6, "110c11", 0x30, 0x21, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x6, [], {0x41, 0x6, "cb155d", 0x0, 0x0, 0x0, @mcast2, @dev}}}}}}}, 0x0) 14:22:45 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000bd7000)={&(0x7f0000c07e98)=ANY=[@ANYBLOB="000000000000000000000000000000000000000033000000ffffffff0000000000000000000000000000000000000000000000000000000000000000002949000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020001007d00000000000000480001006d64350000000000000000000019000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000"], 0x1}}, 0x0) 14:22:46 executing program 1: r0 = perf_event_open(&(0x7f0000000300)={0x400000001, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f000094f000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffff9c, 0xc00c642d, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000000)=0x0) syz_open_procfs(r3, &(0x7f0000000040)='net/ip_tables_targets\x00') write(r2, &(0x7f00000001c0), 0x100000073) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) 14:22:46 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee4050c00000f0000008bc36f7d79ce3263dac37b7403242189c609", 0x23}], 0x1}, 0x0) 14:22:46 executing program 3: syz_emit_ethernet(0x140, &(0x7f0000000000)={@local, @random="8a37962a294f", [], {@ipv6={0x86dd, {0x900, 0x6, "110c11", 0x30, 0x21, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x6, [], {0x0, 0x6, "cb155d", 0x0, 0x0, 0x0, @mcast2, @dev}}}}}}}, 0x0) 14:22:46 executing program 2: syz_emit_ethernet(0x140, &(0x7f0000000000)={@local, @random="8a37962a294f", [], {@ipv6={0x86dd, {0x3f00, 0x6, "110c11", 0x30, 0x21, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x6, [], {0x41, 0x6, "cb155d", 0x0, 0x0, 0x0, @mcast2, @dev}}}}}}}, 0x0) 14:22:46 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000bd7000)={&(0x7f0000c07e98)=ANY=[@ANYBLOB="000000000000000000000000000000000000000033000000ffffffff0000000000000000000000000000000000000000000000000000000000000000002949000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020001007d00000000000000480001006d64350000000000000000000019000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000"], 0x1}}, 0x0) 14:22:46 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000000)=[{0x80000006}]}, 0x10) r1 = socket$pppoe(0x18, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/hash_stats\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0)='tls\x00', 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) connect$pppoe(r1, &(0x7f0000000040)={0x18, 0x0, {0x2, @local, 'batadv0\x00'}}, 0x1e) sendmmsg(r1, &(0x7f0000005b40), 0x40000000000014d, 0x0) [ 1696.047350] netlink: 7 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1696.051614] net_ratelimit: 70 callbacks suppressed [ 1696.051624] dccp_v6_rcv: dropped packet with invalid checksum [ 1696.067516] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 1696.080670] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 1696.092529] dccp_v6_rcv: dropped packet with invalid checksum 14:22:46 executing program 3: syz_emit_ethernet(0x140, &(0x7f0000000000)={@local, @random="8a37962a294f", [], {@ipv6={0x86dd, {0xd00, 0x6, "110c11", 0x30, 0x21, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x6, [], {0x0, 0x6, "cb155d", 0x0, 0x0, 0x0, @mcast2, @dev}}}}}}}, 0x0) 14:22:46 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee4050c00000f0000008bc36f7d79ce3263dac37b7403242189c609", 0x23}], 0x1}, 0x0) 14:22:46 executing program 2: syz_emit_ethernet(0x140, &(0x7f0000000000)={@local, @random="8a37962a294f", [], {@ipv6={0x86dd, {0x4000, 0x6, "110c11", 0x30, 0x21, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x6, [], {0x41, 0x6, "cb155d", 0x0, 0x0, 0x0, @mcast2, @dev}}}}}}}, 0x0) 14:22:46 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000bd7000)={&(0x7f0000c07e98)=ANY=[@ANYBLOB="000000000000000000000000000000000000000033000000ffffffff0000000000000000000000000000000000000000000000000000000000000000002949000000000000000000000000000000000000000000000000000015710000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020001007d00000000000000480001006d64350000000000000000000019000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000"], 0x1}}, 0x0) [ 1696.238750] netlink: 7 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1696.263694] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 14:22:46 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee4050c00000f0000008bc36f7d79ce3263dac37b7403242189c609", 0x23}], 0x1}, 0x0) [ 1696.317218] dccp_v6_rcv: dropped packet with invalid checksum [ 1696.328989] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 14:22:46 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000bd7000)={&(0x7f0000c07e98)=ANY=[@ANYBLOB="000000000000000000000000000000000000000033000000ffffffff0000000000000000000000000000000000000000000000000000000000000000002949000000000000000000000000000000000000000000000000ffffff9e0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020001007d00000000000000480001006d64350000000000000000000019000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000"], 0x1}}, 0x0) [ 1696.359744] dccp_v6_rcv: dropped packet with invalid checksum [ 1696.602570] protocol 88fb is buggy, dev hsr_slave_0 [ 1696.602620] protocol 88fb is buggy, dev hsr_slave_1 [ 1696.638359] syz-executor.1 invoked oom-killer: gfp_mask=0x7200c2(GFP_HIGHUSER|__GFP_ACCOUNT), order=0, oom_score_adj=0 [ 1696.649561] CPU: 1 PID: 14074 Comm: syz-executor.1 Not tainted 5.0.0-rc6+ #70 [ 1696.656838] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1696.666172] Call Trace: [ 1696.668776] dump_stack+0x172/0x1f0 [ 1696.672433] dump_header+0x10f/0xb6c [ 1696.676157] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1696.681258] ? ___ratelimit+0x60/0x595 [ 1696.685143] ? do_raw_spin_unlock+0x57/0x270 [ 1696.689558] oom_kill_process.cold+0x10/0x6f5 [ 1696.694077] ? task_will_free_mem+0x139/0x6e0 [ 1696.698577] out_of_memory+0x79a/0x1280 [ 1696.702544] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1696.707632] ? oom_killer_disable+0x280/0x280 [ 1696.712114] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1696.717224] mem_cgroup_out_of_memory+0x99/0xe0 [ 1696.721903] ? memcg_memory_event+0x40/0x40 [ 1696.726236] ? _raw_spin_unlock+0x2d/0x50 [ 1696.730374] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1696.735465] try_charge+0xfec/0x1570 [ 1696.739173] ? find_held_lock+0x35/0x130 [ 1696.743224] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1696.748050] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 1696.752898] ? find_held_lock+0x35/0x130 [ 1696.756967] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 1696.761810] memcg_kmem_charge_memcg+0x7c/0x130 [ 1696.766465] ? memcg_kmem_put_cache+0xb0/0xb0 [ 1696.770960] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 1696.775808] memcg_kmem_charge+0x13b/0x340 [ 1696.780114] __alloc_pages_nodemask+0x437/0x710 [ 1696.784771] ? __alloc_pages_slowpath+0x2900/0x2900 [ 1696.789774] ? ___might_sleep+0x163/0x280 [ 1696.793918] ? copyin+0xb5/0x100 [ 1696.797287] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1696.802838] alloc_pages_current+0x107/0x210 [ 1696.807266] pipe_write+0xa65/0xfb0 [ 1696.810897] __vfs_write+0x613/0x8e0 [ 1696.814681] ? kernel_read+0x120/0x120 [ 1696.818553] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1696.824099] ? rw_verify_area+0x118/0x360 [ 1696.828237] vfs_write+0x20c/0x580 [ 1696.831772] ksys_write+0xea/0x1f0 [ 1696.835312] ? __ia32_sys_read+0xb0/0xb0 [ 1696.839376] ? do_syscall_64+0x26/0x610 [ 1696.843349] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1696.848695] ? do_syscall_64+0x26/0x610 [ 1696.852674] __x64_sys_write+0x73/0xb0 [ 1696.856551] do_syscall_64+0x103/0x610 [ 1696.860442] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1696.865618] RIP: 0033:0x457e29 [ 1696.868810] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1696.887706] RSP: 002b:00007fd8c7971c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1696.895413] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457e29 [ 1696.902674] RDX: 0000000100000073 RSI: 00000000200001c0 RDI: 0000000000000005 [ 1696.909944] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1696.917210] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd8c79726d4 [ 1696.924479] R13: 00000000004c3be0 R14: 00000000004dc3d0 R15: 00000000ffffffff [ 1696.933975] memory: usage 307200kB, limit 307200kB, failcnt 11622 [ 1696.940543] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1696.947562] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1696.957581] Memory cgroup stats for /syz1: cache:0KB rss:257148KB rss_huge:227328KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:8KB active_anon:257268KB inactive_file:0KB active_file:4KB unevictable:0KB [ 1696.978391] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=14073,uid=0 [ 1696.993108] Memory cgroup out of memory: Kill process 14073 (syz-executor.1) score 140 or sacrifice child 14:22:47 executing program 1: r0 = perf_event_open(&(0x7f0000000300)={0x400000001, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f000094f000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x6685) r1 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x0, 0x82) ioctl$sock_inet6_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000040)) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffff9c, 0xc00c642d, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0x100000073) openat$vimc1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video1\x00', 0x2, 0x0) read(r2, &(0x7f0000000200)=""/250, 0x50c7e3e3) 14:22:47 executing program 3: syz_emit_ethernet(0x140, &(0x7f0000000000)={@local, @random="8a37962a294f", [], {@ipv6={0x86dd, {0xe80, 0x6, "110c11", 0x30, 0x21, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x6, [], {0x0, 0x6, "cb155d", 0x0, 0x0, 0x0, @mcast2, @dev}}}}}}}, 0x0) 14:22:47 executing program 2: syz_emit_ethernet(0x140, &(0x7f0000000000)={@local, @random="8a37962a294f", [], {@ipv6={0x86dd, {0x4305, 0x6, "110c11", 0x30, 0x21, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x6, [], {0x41, 0x6, "cb155d", 0x0, 0x0, 0x0, @mcast2, @dev}}}}}}}, 0x0) 14:22:47 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000000)=[{0x80000006}]}, 0x10) r1 = syz_open_dev$sndpcmp(&(0x7f0000000180)='/dev/snd/pcmC#D#p\x00', 0x0, 0x20900) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffff9c, 0x84, 0x6, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e20, 0x9, @remote, 0x1000}}}, &(0x7f0000000280)=0x84) setsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f00000002c0)={r2, 0x0, 0x9, 0x4}, 0x10) r3 = socket$pppoe(0x18, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt(r4, 0x1, 0x494, &(0x7f0000000380)="c1046e3c2da8a7122505648b3c2335425e78bbdd1daeba4425c408c41f4ca86c424c6067a97394202ab032b48545982b6799ef28404a24193ccca591f65d26796d8d74ebe08c72de66", 0x49) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) connect$pppoe(r3, &(0x7f0000000040)={0x18, 0x0, {0x2, @local, 'batadv0\x00'}}, 0x1e) r5 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0xffffffffffffff7f, 0x2) getsockopt$netrom_NETROM_T4(r5, 0x103, 0x6, &(0x7f00000000c0)=0x3, &(0x7f0000000100)=0x4) sendmmsg(r3, &(0x7f0000005b40), 0x40000000000014d, 0x0) r6 = msgget(0x0, 0x2) msgctl$IPC_STAT(r6, 0x2, &(0x7f0000000380)) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0) pwrite64(r0, &(0x7f0000000400)="a11586ff30be98f74667bb8fb92bc922f6940b91f2523f263adb452d7a33e761b71c66f53ad4edc966cf90448513e3dc2679abab4671fcc34a4092ccc02d89608b2a14863e205b222cd076438e0a39cd5a82faedf8fb7867f4656faf6ffadd224101b4da845b318aaddef7fab8cf8887509d2565a2f0b5343f70a523ea787c7ab8ef7e60e770dda31325086dbd8ab3302b0121289113", 0x96, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, &(0x7f0000000340)={0x77359400}, 0x10) 14:22:47 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000bd7000)={&(0x7f0000c07e98)=ANY=[@ANYBLOB="000000000000000000000000000000000000000033000000ffffffff0000000000000000000000000000000000000000000000000000000000000000002949000000000000000000000000000000000000000000000000fffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020001007d00000000000000480001006d64350000000000000000000019000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000"], 0x1}}, 0x0) 14:22:47 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee4050c00000f0000008bc36f7d79ce3263dac37b7403242189c609", 0x23}], 0x1}, 0x0) [ 1697.003141] Killed process 14073 (syz-executor.1) total-vm:72712kB, anon-rss:8020kB, file-rss:34944kB, shmem-rss:0kB [ 1697.023403] oom_reaper: reaped process 14073 (syz-executor.1), now anon-rss:0kB, file-rss:34836kB, shmem-rss:0kB 14:22:47 executing program 2: syz_emit_ethernet(0x140, &(0x7f0000000000)={@local, @random="8a37962a294f", [], {@ipv6={0x86dd, {0x4788, 0x6, "110c11", 0x30, 0x21, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x6, [], {0x41, 0x6, "cb155d", 0x0, 0x0, 0x0, @mcast2, @dev}}}}}}}, 0x0) 14:22:47 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000bd7000)={&(0x7f0000c07e98)=ANY=[@ANYBLOB="000000000000000000000000000000000000000033000000ffffffff00000000000000000000000000000000000000000000000000000000000000000029490000000000000000000000000000000000000000000000007fffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020001007d00000000000000480001006d64350000000000000000000019000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000"], 0x1}}, 0x0) 14:22:47 executing program 3: syz_emit_ethernet(0x140, &(0x7f0000000000)={@local, @random="8a37962a294f", [], {@ipv6={0x86dd, {0x2000, 0x6, "110c11", 0x30, 0x21, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x6, [], {0x0, 0x6, "cb155d", 0x0, 0x0, 0x0, @mcast2, @dev}}}}}}}, 0x0) 14:22:47 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee4050c00000f0000008bc36f7d79ce3263dac37b7403242189c609", 0x23}], 0x1}, 0x0) 14:22:47 executing program 0: r0 = syz_open_dev$admmidi(&(0x7f0000000280)='/dev/admmidi#\x00', 0x8, 0x200000) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc0405519, &(0x7f0000000300)={0x0, 0x3, 0x281, 0x8001, 'syz0\x00', 0x5}) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000000)=[{0x80000006}]}, 0x10) r2 = socket$pppoe(0x18, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) connect$pppoe(r2, &(0x7f0000000040)={0x18, 0x0, {0x2, @local, 'batadv0\x00'}}, 0x1e) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000000080)={{{@in=@multicast2, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@broadcast}}, &(0x7f0000000180)=0xe8) ioctl$SIOCAX25ADDUID(r2, 0x89e1, &(0x7f00000001c0)={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, r4}) sendmmsg(r2, &(0x7f0000005b40), 0x40000000000014d, 0x0) lsetxattr$trusted_overlay_nlink(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='trusted.overlay.nlink\x00', &(0x7f00000002c0)={'U+', 0x2}, 0x296, 0x3) 14:22:47 executing program 2: syz_emit_ethernet(0x140, &(0x7f0000000000)={@local, @random="8a37962a294f", [], {@ipv6={0x86dd, {0x4888, 0x6, "110c11", 0x30, 0x21, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x6, [], {0x41, 0x6, "cb155d", 0x0, 0x0, 0x0, @mcast2, @dev}}}}}}}, 0x0) [ 1697.548258] syz-executor.1 invoked oom-killer: gfp_mask=0x7200c2(GFP_HIGHUSER|__GFP_ACCOUNT), order=0, oom_score_adj=0 [ 1697.559467] CPU: 1 PID: 14114 Comm: syz-executor.1 Not tainted 5.0.0-rc6+ #70 [ 1697.566748] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1697.576122] Call Trace: [ 1697.578726] dump_stack+0x172/0x1f0 [ 1697.582346] dump_header+0x10f/0xb6c [ 1697.586063] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1697.591183] ? ___ratelimit+0x60/0x595 [ 1697.595078] ? do_raw_spin_unlock+0x57/0x270 [ 1697.599487] oom_kill_process.cold+0x10/0x6f5 [ 1697.603974] ? task_will_free_mem+0x139/0x6e0 [ 1697.608480] out_of_memory+0x79a/0x1280 [ 1697.612467] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1697.617559] ? oom_killer_disable+0x280/0x280 [ 1697.622052] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1697.627184] mem_cgroup_out_of_memory+0x99/0xe0 [ 1697.631841] ? memcg_memory_event+0x40/0x40 [ 1697.636184] ? _raw_spin_unlock+0x2d/0x50 [ 1697.640357] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1697.645456] try_charge+0xfec/0x1570 [ 1697.649156] ? find_held_lock+0x35/0x130 [ 1697.653208] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1697.658040] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 1697.662892] ? find_held_lock+0x35/0x130 [ 1697.666962] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 1697.671800] memcg_kmem_charge_memcg+0x7c/0x130 [ 1697.676456] ? memcg_kmem_put_cache+0xb0/0xb0 [ 1697.680952] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 1697.685785] memcg_kmem_charge+0x13b/0x340 [ 1697.690021] __alloc_pages_nodemask+0x437/0x710 [ 1697.694680] ? __alloc_pages_slowpath+0x2900/0x2900 [ 1697.699692] ? ___might_sleep+0x163/0x280 [ 1697.703831] ? copyin+0xb5/0x100 [ 1697.707186] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1697.712713] alloc_pages_current+0x107/0x210 [ 1697.717119] pipe_write+0xa65/0xfb0 [ 1697.720751] __vfs_write+0x613/0x8e0 [ 1697.724459] ? kernel_read+0x120/0x120 [ 1697.728359] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1697.733890] ? rw_verify_area+0x118/0x360 [ 1697.738027] vfs_write+0x20c/0x580 [ 1697.741581] ksys_write+0xea/0x1f0 [ 1697.745124] ? __ia32_sys_read+0xb0/0xb0 [ 1697.749177] ? do_syscall_64+0x26/0x610 [ 1697.753139] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1697.758509] ? do_syscall_64+0x26/0x610 [ 1697.762508] __x64_sys_write+0x73/0xb0 [ 1697.766380] do_syscall_64+0x103/0x610 [ 1697.770265] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1697.775455] RIP: 0033:0x457e29 [ 1697.778654] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1697.797589] RSP: 002b:00007fd8c7971c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1697.805317] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457e29 [ 1697.812584] RDX: 0000000100000073 RSI: 00000000200001c0 RDI: 0000000000000005 [ 1697.819853] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1697.827119] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd8c79726d4 [ 1697.834384] R13: 00000000004c3be0 R14: 00000000004dc3d0 R15: 00000000ffffffff [ 1697.842020] memory: usage 307200kB, limit 307200kB, failcnt 11688 [ 1697.848486] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1697.856132] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1697.862711] Memory cgroup stats for /syz1: cache:0KB rss:257096KB rss_huge:227328KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:8KB active_anon:257268KB inactive_file:4KB active_file:0KB unevictable:0KB [ 1697.883728] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=14113,uid=0 14:22:48 executing program 1: r0 = getpid() r1 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x2, 0x210880) perf_event_open(&(0x7f00000000c0)={0x0, 0x70, 0x1, 0x2, 0x2, 0x4, 0x0, 0x772a633a, 0x30401, 0x8, 0xffffffffffffffff, 0x9ba1, 0x321, 0x0, 0x1, 0x6, 0xe2, 0x8, 0x8, 0x1000, 0xfffffffffffffff7, 0xffffffffffffffff, 0x7, 0x5, 0x8000, 0x4, 0x2, 0x5, 0x1, 0x1, 0x200, 0xa62, 0x48a, 0x3, 0x7, 0x0, 0x7fff, 0xffffffffffffff6f, 0x0, 0x1ff, 0x2, @perf_bp={&(0x7f0000000000), 0x4}, 0x10, 0x4, 0x1f, 0x7, 0x3, 0x5, 0x8}, r0, 0xe, r1, 0x0) r2 = perf_event_open(&(0x7f0000000300)={0x400000001, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f000094f000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffff9c, 0xc00c642d, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000080)={0x1, 0x7, 0x3, 0x6, 0xfffffffffffffffc, 0x2, 0x9}, 0xc) ioctl$VIDIOC_S_PRIORITY(r1, 0x40045644, 0x3) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000380)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000001c0)={0xffffffffffffffff}, 0x111, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_MIGRATE_ID(r1, &(0x7f00000003c0)={0x12, 0x10, 0xfa00, {&(0x7f0000000140), r3, r1}}, 0x18) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000400), &(0x7f0000000440)=0xc) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f00000001c0), 0x100000073) read(r4, &(0x7f0000000200)=""/250, 0x50c7e3e3) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r4, 0xc0905664, &(0x7f0000000480)={0x0, 0x0, [], @raw_data=[0x0, 0x4, 0x627c, 0x8, 0x1000, 0xfffffffffffffffe, 0x0, 0x10000, 0x23b, 0xac4f, 0x1, 0x3ac, 0x15d, 0x5, 0x1, 0x6, 0x6, 0x4, 0x5, 0xfffffffffffffffe, 0x7fff, 0x99, 0x10001, 0x6, 0x6, 0xfffffffffffffffc, 0x9, 0x9, 0x2, 0x5, 0x23, 0x5]}) 14:22:48 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000bd7000)={&(0x7f0000c07e98)=ANY=[@ANYBLOB="000000000000000000000000000000000000000033000000ffffffff0000000000000000000000000000000000000000000000000000000000000000002949000000000000000000000000000000000000000000f0ffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020001007d00000000000000480001006d64350000000000000000000019000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000"], 0x1}}, 0x0) 14:22:48 executing program 3: syz_emit_ethernet(0x140, &(0x7f0000000000)={@local, @random="8a37962a294f", [], {@ipv6={0x86dd, {0x2100, 0x6, "110c11", 0x30, 0x21, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x6, [], {0x0, 0x6, "cb155d", 0x0, 0x0, 0x0, @mcast2, @dev}}}}}}}, 0x0) 14:22:48 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee4050c00000f0000008bc36f7d79ce3263dac37b7403242189c609", 0x23}], 0x1}, 0x0) 14:22:48 executing program 2: syz_emit_ethernet(0x140, &(0x7f0000000000)={@local, @random="8a37962a294f", [], {@ipv6={0x86dd, {0x6000, 0x6, "110c11", 0x30, 0x21, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x6, [], {0x41, 0x6, "cb155d", 0x0, 0x0, 0x0, @mcast2, @dev}}}}}}}, 0x0) 14:22:48 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000000)=[{0x80000006}]}, 0x10) r1 = socket$pppoe(0x18, 0x1, 0x0) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x2040, 0x0) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f00000000c0)={0xfffffffffffffff7, "cf2c85c1f981db13318abea578f73f3c3fabec100395746bfa83531669bf0b9a", 0x1, 0x1}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) connect$pppoe(r1, &(0x7f0000000040)={0x18, 0x0, {0x2, @local, 'batadv0\x00'}}, 0x1e) sendmmsg(r1, &(0x7f0000005b40), 0x40000000000014d, 0x0) [ 1697.899210] Memory cgroup out of memory: Kill process 14113 (syz-executor.1) score 140 or sacrifice child [ 1697.909240] Killed process 14113 (syz-executor.1) total-vm:72580kB, anon-rss:8016kB, file-rss:34944kB, shmem-rss:0kB [ 1697.931402] oom_reaper: reaped process 14113 (syz-executor.1), now anon-rss:0kB, file-rss:34828kB, shmem-rss:0kB 14:22:48 executing program 3: syz_emit_ethernet(0x140, &(0x7f0000000000)={@local, @random="8a37962a294f", [], {@ipv6={0x86dd, {0x2800, 0x6, "110c11", 0x30, 0x21, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x6, [], {0x0, 0x6, "cb155d", 0x0, 0x0, 0x0, @mcast2, @dev}}}}}}}, 0x0) 14:22:48 executing program 2: syz_emit_ethernet(0x140, &(0x7f0000000000)={@local, @random="8a37962a294f", [], {@ipv6={0x86dd, {0x6488, 0x6, "110c11", 0x30, 0x21, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x6, [], {0x41, 0x6, "cb155d", 0x0, 0x0, 0x0, @mcast2, @dev}}}}}}}, 0x0) [ 1698.016513] __nla_parse: 4 callbacks suppressed [ 1698.016523] netlink: 7 bytes leftover after parsing attributes in process `syz-executor.4'. 14:22:48 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000bd7000)={&(0x7f0000c07e98)=ANY=[@ANYBLOB="000000000000000000000000000000000000000033000000ffffffff0000000000000000000000000000000000000000000000000000000000000000002949000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020001007d00000000000000480001006d64350000000000000000000019000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000"], 0x1}}, 0x0) 14:22:48 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee4050c00000f0000008bc36f7d79ce3263dac37b7403242189c609", 0x23}], 0x1}, 0x0) 14:22:48 executing program 3: syz_emit_ethernet(0x140, &(0x7f0000000000)={@local, @random="8a37962a294f", [], {@ipv6={0x86dd, {0x3201, 0x6, "110c11", 0x30, 0x21, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x6, [], {0x0, 0x6, "cb155d", 0x0, 0x0, 0x0, @mcast2, @dev}}}}}}}, 0x0) 14:22:48 executing program 2: syz_emit_ethernet(0x140, &(0x7f0000000000)={@local, @random="8a37962a294f", [], {@ipv6={0x86dd, {0x800e, 0x6, "110c11", 0x30, 0x21, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x6, [], {0x41, 0x6, "cb155d", 0x0, 0x0, 0x0, @mcast2, @dev}}}}}}}, 0x0) [ 1698.195886] netlink: 7 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1698.459423] syz-executor.1 invoked oom-killer: gfp_mask=0x7200c2(GFP_HIGHUSER|__GFP_ACCOUNT), order=0, oom_score_adj=0 [ 1698.471194] CPU: 0 PID: 14152 Comm: syz-executor.1 Not tainted 5.0.0-rc6+ #70 [ 1698.478477] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1698.487830] Call Trace: [ 1698.490407] dump_stack+0x172/0x1f0 [ 1698.494038] dump_header+0x10f/0xb6c [ 1698.497770] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1698.502894] ? ___ratelimit+0x60/0x595 [ 1698.506789] ? do_raw_spin_unlock+0x57/0x270 [ 1698.511213] oom_kill_process.cold+0x10/0x6f5 [ 1698.515736] ? task_will_free_mem+0x139/0x6e0 [ 1698.520236] out_of_memory+0x79a/0x1280 [ 1698.524222] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1698.529321] ? oom_killer_disable+0x280/0x280 [ 1698.533808] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1698.538913] mem_cgroup_out_of_memory+0x99/0xe0 [ 1698.543591] ? memcg_memory_event+0x40/0x40 [ 1698.547923] ? _raw_spin_unlock+0x2d/0x50 [ 1698.552074] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1698.557186] try_charge+0xfec/0x1570 [ 1698.560911] ? find_held_lock+0x35/0x130 [ 1698.564978] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1698.569820] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 1698.574654] ? find_held_lock+0x35/0x130 [ 1698.578726] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 1698.583574] memcg_kmem_charge_memcg+0x7c/0x130 [ 1698.588250] ? memcg_kmem_put_cache+0xb0/0xb0 [ 1698.592744] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 1698.597581] memcg_kmem_charge+0x13b/0x340 [ 1698.601853] __alloc_pages_nodemask+0x437/0x710 [ 1698.606516] ? __alloc_pages_slowpath+0x2900/0x2900 [ 1698.611536] ? ___might_sleep+0x163/0x280 [ 1698.615694] ? copyin+0xb5/0x100 [ 1698.619054] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1698.624600] alloc_pages_current+0x107/0x210 [ 1698.629034] pipe_write+0xa65/0xfb0 [ 1698.632721] __vfs_write+0x613/0x8e0 [ 1698.636453] ? kernel_read+0x120/0x120 [ 1698.640327] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1698.645884] ? rw_verify_area+0x118/0x360 [ 1698.650028] vfs_write+0x20c/0x580 [ 1698.653597] ksys_write+0xea/0x1f0 [ 1698.657134] ? __ia32_sys_read+0xb0/0xb0 [ 1698.661184] ? do_syscall_64+0x26/0x610 [ 1698.665148] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1698.670527] ? do_syscall_64+0x26/0x610 [ 1698.674510] __x64_sys_write+0x73/0xb0 [ 1698.678404] do_syscall_64+0x103/0x610 [ 1698.682287] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1698.687513] RIP: 0033:0x457e29 [ 1698.690700] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1698.709581] RSP: 002b:00007fd8c7971c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1698.717268] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457e29 [ 1698.724526] RDX: 0000000100000073 RSI: 00000000200001c0 RDI: 0000000000000005 [ 1698.731789] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1698.739064] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd8c79726d4 [ 1698.746336] R13: 00000000004c3be0 R14: 00000000004dc3d0 R15: 00000000ffffffff [ 1698.755696] memory: usage 307200kB, limit 307200kB, failcnt 11749 [ 1698.761930] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1698.768740] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1698.775043] Memory cgroup stats for /syz1: cache:0KB rss:257148KB rss_huge:227328KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:8KB active_anon:257212KB inactive_file:4KB active_file:0KB unevictable:0KB [ 1698.795827] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=14151,uid=0 14:22:49 executing program 1: r0 = perf_event_open(&(0x7f0000000300)={0x400000001, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f000094f000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0xfffffffffffffffd) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffff9c, 0xc00c642d, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0x100000073) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) ioctl$DRM_IOCTL_GET_UNIQUE(r1, 0xc0106401, &(0x7f0000000000)={0x1000, &(0x7f0000000380)=""/4096}) 14:22:49 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000bd7000)={&(0x7f0000c07e98)=ANY=[@ANYBLOB="000000000000000000000000000000000000000033000000ffffffff0000000000000000000000000000000000000000000000000000000000000000002949000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020001007d00000000000000480001006d64350000000000000000000019000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000"], 0x1}}, 0x0) 14:22:49 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee4050c00000f0000008bc36f7d79ce3263dac37b7403242189c609", 0x23}], 0x1}, 0x0) 14:22:49 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000000)=[{0x80000006}]}, 0x10) r1 = open(&(0x7f0000000080)='./file0\x00', 0x100, 0x1ce) getsockopt$X25_QBITINCL(r1, 0x106, 0x1, &(0x7f00000000c0), &(0x7f0000000100)=0x4) r2 = socket$pppoe(0x18, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) connect$pppoe(r2, &(0x7f0000000040)={0x18, 0x0, {0x2, @local, 'batadv0\x00'}}, 0x1e) sendmmsg(r2, &(0x7f0000005b40), 0x40000000000014d, 0x0) 14:22:49 executing program 3: syz_emit_ethernet(0x140, &(0x7f0000000000)={@local, @random="8a37962a294f", [], {@ipv6={0x86dd, {0x3580, 0x6, "110c11", 0x30, 0x21, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x6, [], {0x0, 0x6, "cb155d", 0x0, 0x0, 0x0, @mcast2, @dev}}}}}}}, 0x0) 14:22:49 executing program 2: syz_emit_ethernet(0x140, &(0x7f0000000000)={@local, @random="8a37962a294f", [], {@ipv6={0x86dd, {0x8035, 0x6, "110c11", 0x30, 0x21, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x6, [], {0x41, 0x6, "cb155d", 0x0, 0x0, 0x0, @mcast2, @dev}}}}}}}, 0x0) [ 1698.810498] Memory cgroup out of memory: Kill process 14151 (syz-executor.1) score 139 or sacrifice child [ 1698.820348] Killed process 14151 (syz-executor.1) total-vm:72712kB, anon-rss:7756kB, file-rss:35008kB, shmem-rss:0kB [ 1698.837470] oom_reaper: reaped process 14151 (syz-executor.1), now anon-rss:0kB, file-rss:34828kB, shmem-rss:0kB 14:22:49 executing program 3: syz_emit_ethernet(0x140, &(0x7f0000000000)={@local, @random="8a37962a294f", [], {@ipv6={0x86dd, {0x4000, 0x6, "110c11", 0x30, 0x21, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x6, [], {0x0, 0x6, "cb155d", 0x0, 0x0, 0x0, @mcast2, @dev}}}}}}}, 0x0) 14:22:49 executing program 2: syz_emit_ethernet(0x140, &(0x7f0000000000)={@local, @random="8a37962a294f", [], {@ipv6={0x86dd, {0x8100, 0x6, "110c11", 0x30, 0x21, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x6, [], {0x41, 0x6, "cb155d", 0x0, 0x0, 0x0, @mcast2, @dev}}}}}}}, 0x0) [ 1698.923370] netlink: 7 bytes leftover after parsing attributes in process `syz-executor.4'. 14:22:49 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000bd7000)={&(0x7f0000c07e98)=ANY=[@ANYBLOB="000000000000000000000000000000000000000033000000ffffffff0000000000000000000000000000000000000000000000000000000000000000002949000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020001007d00000000000000480001006d64350000000000000000000019000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000"], 0x1}}, 0x0) 14:22:49 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee4050c00000f0000008bc36f7d79ce3263dac37b7403242189c609", 0x23}], 0x1}, 0x0) [ 1699.141714] netlink: 7 bytes leftover after parsing attributes in process `syz-executor.4'. 14:22:49 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000000)=[{0x80000006}]}, 0x10) r1 = socket$pppoe(0x18, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r2 = syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x100000000, 0x80) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400203) connect$pppoe(r1, &(0x7f0000000040)={0x18, 0x0, {0x2, @local, 'batadv0\x00'}}, 0x1e) sendmmsg(r1, &(0x7f0000005b40), 0x40000000000014d, 0x0) 14:22:49 executing program 3: syz_emit_ethernet(0x140, &(0x7f0000000000)={@local, @random="8a37962a294f", [], {@ipv6={0x86dd, {0x4305, 0x6, "110c11", 0x30, 0x21, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x6, [], {0x0, 0x6, "cb155d", 0x0, 0x0, 0x0, @mcast2, @dev}}}}}}}, 0x0) [ 1699.418670] syz-executor.1 invoked oom-killer: gfp_mask=0x7200c2(GFP_HIGHUSER|__GFP_ACCOUNT), order=0, oom_score_adj=0 [ 1699.430033] CPU: 1 PID: 14187 Comm: syz-executor.1 Not tainted 5.0.0-rc6+ #70 [ 1699.437327] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1699.446675] Call Trace: [ 1699.449256] dump_stack+0x172/0x1f0 [ 1699.452878] dump_header+0x10f/0xb6c [ 1699.456595] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1699.461706] ? ___ratelimit+0x60/0x595 [ 1699.465594] ? do_raw_spin_unlock+0x57/0x270 [ 1699.470007] oom_kill_process.cold+0x10/0x6f5 [ 1699.474496] ? task_will_free_mem+0x139/0x6e0 [ 1699.478998] out_of_memory+0x79a/0x1280 [ 1699.482967] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1699.488081] ? oom_killer_disable+0x280/0x280 [ 1699.492577] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1699.497689] mem_cgroup_out_of_memory+0x99/0xe0 [ 1699.502343] ? memcg_memory_event+0x40/0x40 [ 1699.506670] ? _raw_spin_unlock+0x2d/0x50 [ 1699.510821] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1699.515920] try_charge+0xfec/0x1570 [ 1699.519644] ? find_held_lock+0x35/0x130 [ 1699.523699] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1699.528531] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 1699.533360] ? find_held_lock+0x35/0x130 [ 1699.537419] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 1699.542254] memcg_kmem_charge_memcg+0x7c/0x130 [ 1699.546905] ? memcg_kmem_put_cache+0xb0/0xb0 [ 1699.551521] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 1699.556353] memcg_kmem_charge+0x13b/0x340 [ 1699.560590] __alloc_pages_nodemask+0x437/0x710 [ 1699.565251] ? __alloc_pages_slowpath+0x2900/0x2900 [ 1699.570256] ? ___might_sleep+0x163/0x280 [ 1699.574403] ? copyin+0xb5/0x100 [ 1699.577784] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1699.583324] alloc_pages_current+0x107/0x210 [ 1699.587732] pipe_write+0xa65/0xfb0 [ 1699.591355] __vfs_write+0x613/0x8e0 [ 1699.595060] ? kernel_read+0x120/0x120 [ 1699.598948] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1699.604488] ? rw_verify_area+0x118/0x360 [ 1699.608657] vfs_write+0x20c/0x580 [ 1699.612195] ksys_write+0xea/0x1f0 [ 1699.615747] ? __ia32_sys_read+0xb0/0xb0 [ 1699.619823] ? do_syscall_64+0x26/0x610 [ 1699.623794] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1699.629201] ? do_syscall_64+0x26/0x610 [ 1699.633172] __x64_sys_write+0x73/0xb0 [ 1699.637062] do_syscall_64+0x103/0x610 [ 1699.640965] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1699.646154] RIP: 0033:0x457e29 [ 1699.649346] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1699.668231] RSP: 002b:00007fd8c7971c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1699.675946] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457e29 [ 1699.683200] RDX: 0000000100000073 RSI: 00000000200001c0 RDI: 0000000000000005 [ 1699.690477] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1699.697747] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd8c79726d4 [ 1699.705013] R13: 00000000004c3be0 R14: 00000000004dc3d0 R15: 00000000ffffffff [ 1699.713005] memory: usage 307200kB, limit 307200kB, failcnt 11838 [ 1699.719726] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1699.726809] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1699.733126] Memory cgroup stats for /syz1: cache:0KB rss:257116KB rss_huge:227328KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:8KB active_anon:257212KB inactive_file:4KB active_file:0KB unevictable:0KB [ 1699.754009] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=14183,uid=0 14:22:50 executing program 1: r0 = perf_event_open(&(0x7f0000000300)={0x400000001, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f000094f000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffff9c, 0xc00c642d, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$NBD_CLEAR_QUE(r2, 0xab05) write(r2, &(0x7f00000001c0), 0x100000073) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) 14:22:50 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000bd7000)={&(0x7f0000c07e98)=ANY=[@ANYBLOB="000000000000000000000000000000000000000033000000ffffffff0000000000000000000000000000000000000000000000000000000000000000002949000000000000000000000000000000000000000000f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020001007d00000000000000480001006d64350000000000000000000019000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000"], 0x1}}, 0x0) 14:22:50 executing program 2: syz_emit_ethernet(0x140, &(0x7f0000000000)={@local, @random="8a37962a294f", [], {@ipv6={0x86dd, {0x8847, 0x6, "110c11", 0x30, 0x21, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x6, [], {0x41, 0x6, "cb155d", 0x0, 0x0, 0x0, @mcast2, @dev}}}}}}}, 0x0) 14:22:50 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee4050c00000f0000008bc36f7d79ce3263dac37b7403242189c609", 0x23}], 0x1}, 0x0) 14:22:50 executing program 3: syz_emit_ethernet(0x140, &(0x7f0000000000)={@local, @random="8a37962a294f", [], {@ipv6={0x86dd, {0x4788, 0x6, "110c11", 0x30, 0x21, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x6, [], {0x0, 0x6, "cb155d", 0x0, 0x0, 0x0, @mcast2, @dev}}}}}}}, 0x0) [ 1699.768842] Memory cgroup out of memory: Kill process 14183 (syz-executor.1) score 139 or sacrifice child [ 1699.778788] Killed process 14183 (syz-executor.1) total-vm:72712kB, anon-rss:7756kB, file-rss:34944kB, shmem-rss:0kB [ 1699.798847] oom_reaper: reaped process 14183 (syz-executor.1), now anon-rss:0kB, file-rss:34832kB, shmem-rss:0kB 14:22:50 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000000)=[{0x80000006}]}, 0x10) r1 = socket$pppoe(0x18, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) connect$pppoe(r1, &(0x7f0000000040)={0x18, 0x0, {0x2, @local, 'batadv0\x00'}}, 0x1e) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f0000000080)={0x1, {{0x2, 0x4e23, @rand_addr=0xff}}}, 0x88) r3 = fcntl$dupfd(r2, 0x406, r0) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffff9c, 0x84, 0x72, &(0x7f0000000140)={0x0, 0x6, 0x30}, &(0x7f0000000180)=0xc) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r3, 0x84, 0x23, &(0x7f00000001c0)={r4, 0x10001}, 0x8) modify_ldt$read_default(0x2, &(0x7f0000000200)=""/185, 0xb9) sendmmsg(r1, &(0x7f0000005b40), 0x40000000000014d, 0x0) 14:22:50 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000bd7000)={&(0x7f0000c07e98)=ANY=[@ANYBLOB="000000000000000000000000000000000000000033000000ffffffff0000000000000000000000000000000000000000000000000000000000000000002949000000000000000000000000000000000000000000711500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020001007d00000000000000480001006d64350000000000000000000019000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000"], 0x1}}, 0x0) 14:22:50 executing program 3: syz_emit_ethernet(0x140, &(0x7f0000000000)={@local, @random="8a37962a294f", [], {@ipv6={0x86dd, {0x4888, 0x6, "110c11", 0x30, 0x21, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x6, [], {0x0, 0x6, "cb155d", 0x0, 0x0, 0x0, @mcast2, @dev}}}}}}}, 0x0) 14:22:50 executing program 2: syz_emit_ethernet(0x140, &(0x7f0000000000)={@local, @random="8a37962a294f", [], {@ipv6={0x86dd, {0x8848, 0x6, "110c11", 0x30, 0x21, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x6, [], {0x41, 0x6, "cb155d", 0x0, 0x0, 0x0, @mcast2, @dev}}}}}}}, 0x0) [ 1699.881689] netlink: 7 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1699.899931] netlink: 7 bytes leftover after parsing attributes in process `syz-executor.4'. 14:22:50 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee4050c00000f0000008bc36f7d79ce3263dac37b7403242189c609", 0x23}], 0x1}, 0x0) [ 1700.068145] netlink: 7 bytes leftover after parsing attributes in process `syz-executor.4'. 14:22:50 executing program 2: syz_emit_ethernet(0x140, &(0x7f0000000000)={@local, @random="8a37962a294f", [], {@ipv6={0x86dd, {0x8864, 0x6, "110c11", 0x30, 0x21, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x6, [], {0x41, 0x6, "cb155d", 0x0, 0x0, 0x0, @mcast2, @dev}}}}}}}, 0x0) 14:22:50 executing program 3: syz_emit_ethernet(0x140, &(0x7f0000000000)={@local, @random="8a37962a294f", [], {@ipv6={0x86dd, {0x6000, 0x6, "110c11", 0x30, 0x21, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x6, [], {0x0, 0x6, "cb155d", 0x0, 0x0, 0x0, @mcast2, @dev}}}}}}}, 0x0) [ 1700.419576] syz-executor.1 invoked oom-killer: gfp_mask=0x7200c2(GFP_HIGHUSER|__GFP_ACCOUNT), order=0, oom_score_adj=0 [ 1700.430952] CPU: 1 PID: 14219 Comm: syz-executor.1 Not tainted 5.0.0-rc6+ #70 [ 1700.438270] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1700.447625] Call Trace: [ 1700.450226] dump_stack+0x172/0x1f0 [ 1700.453843] dump_header+0x10f/0xb6c [ 1700.457563] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1700.462692] ? ___ratelimit+0x60/0x595 [ 1700.466583] ? do_raw_spin_unlock+0x57/0x270 [ 1700.470988] oom_kill_process.cold+0x10/0x6f5 [ 1700.475481] ? task_will_free_mem+0x139/0x6e0 [ 1700.479979] out_of_memory+0x79a/0x1280 [ 1700.483949] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1700.489053] ? oom_killer_disable+0x280/0x280 [ 1700.493561] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1700.498680] mem_cgroup_out_of_memory+0x99/0xe0 [ 1700.503332] ? memcg_memory_event+0x40/0x40 [ 1700.507685] ? _raw_spin_unlock+0x2d/0x50 [ 1700.511824] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1700.516958] try_charge+0xfec/0x1570 [ 1700.520658] ? find_held_lock+0x35/0x130 [ 1700.524754] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1700.529634] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 1700.534475] ? find_held_lock+0x35/0x130 [ 1700.538539] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 1700.543376] memcg_kmem_charge_memcg+0x7c/0x130 [ 1700.548030] ? memcg_kmem_put_cache+0xb0/0xb0 [ 1700.552513] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 1700.557355] memcg_kmem_charge+0x13b/0x340 [ 1700.561593] __alloc_pages_nodemask+0x437/0x710 [ 1700.566252] ? __alloc_pages_slowpath+0x2900/0x2900 [ 1700.571268] ? ___might_sleep+0x163/0x280 [ 1700.575403] ? copyin+0xb5/0x100 [ 1700.578768] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1700.584313] alloc_pages_current+0x107/0x210 [ 1700.588722] pipe_write+0xa65/0xfb0 [ 1700.592349] __vfs_write+0x613/0x8e0 [ 1700.596081] ? kernel_read+0x120/0x120 [ 1700.599981] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1700.605534] ? rw_verify_area+0x118/0x360 [ 1700.609683] vfs_write+0x20c/0x580 [ 1700.613211] ksys_write+0xea/0x1f0 [ 1700.616770] ? __ia32_sys_read+0xb0/0xb0 [ 1700.620827] ? do_syscall_64+0x26/0x610 [ 1700.624802] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1700.630167] ? do_syscall_64+0x26/0x610 [ 1700.634171] __x64_sys_write+0x73/0xb0 [ 1700.638049] do_syscall_64+0x103/0x610 [ 1700.641954] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1700.647129] RIP: 0033:0x457e29 [ 1700.650311] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1700.669209] RSP: 002b:00007fd8c7971c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1700.676930] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457e29 [ 1700.684191] RDX: 0000000100000073 RSI: 00000000200001c0 RDI: 0000000000000005 [ 1700.691464] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1700.698729] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd8c79726d4 [ 1700.705981] R13: 00000000004c3be0 R14: 00000000004dc3d0 R15: 00000000ffffffff [ 1700.715399] memory: usage 307196kB, limit 307200kB, failcnt 11940 [ 1700.721851] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1700.728919] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1700.735228] Memory cgroup stats for /syz1: cache:0KB rss:257132KB rss_huge:227328KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:8KB active_anon:257204KB inactive_file:4KB active_file:0KB unevictable:0KB [ 1700.756167] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=14218,uid=0 14:22:51 executing program 1: r0 = perf_event_open(&(0x7f0000000300)={0x400000001, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f000094f000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffff9c, 0xc00c642d, 0x0) open_by_handle_at(r0, &(0x7f00000000c0)={0xac, 0x401, "b92bc974de4920cec6fbfcd84a8f7827a521f5dd846eb0ebceee6be5dc40f35dbb49d1a47a2787a0abccc108f8aedf60085d9564477e06b9f41fdd68e1f9740fd88732fcf408e51b42bb967c4ee952954a4f183cc1f08167a42f0812520c7aa67a1c2297ee6310adb34e11fed3a7ea798e06e3adec7197af9adac2559559ac9ee87d0e869b677cd943a25c3250d1adee6df7930228904bc0d7ebd01d917af3075d9935f9"}, 0x1) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0x100000073) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) 14:22:51 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee4050c00000f0000008bc36f7d79ce3263dac37b7403242189c609", 0x23}], 0x1}, 0x0) 14:22:51 executing program 2: syz_emit_ethernet(0x140, &(0x7f0000000000)={@local, @random="8a37962a294f", [], {@ipv6={0x86dd, {0x8906, 0x6, "110c11", 0x30, 0x21, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x6, [], {0x41, 0x6, "cb155d", 0x0, 0x0, 0x0, @mcast2, @dev}}}}}}}, 0x0) 14:22:51 executing program 3: syz_emit_ethernet(0x140, &(0x7f0000000000)={@local, @random="8a37962a294f", [], {@ipv6={0x86dd, {0x6488, 0x6, "110c11", 0x30, 0x21, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x6, [], {0x0, 0x6, "cb155d", 0x0, 0x0, 0x0, @mcast2, @dev}}}}}}}, 0x0) 14:22:51 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000bd7000)={&(0x7f0000c07e98)=ANY=[@ANYBLOB="000000000000000000000000000000000000000033000000ffffffff0000000000000000000000000000000000000000000000000000000000000000002949000000000000000000000000000000000000000000157100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020001007d00000000000000480001006d64350000000000000000000019000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000"], 0x1}}, 0x0) 14:22:51 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000000)=[{0x80000006}]}, 0x10) r1 = socket$pppoe(0x18, 0x1, 0x0) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dlm-control\x00', 0x240001, 0x0) ioctl$TIOCGPTPEER(r2, 0x5441, 0xfd) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = add_key(&(0x7f0000000100)='blacklist\x00', &(0x7f0000000140)={'syz', 0x0}, &(0x7f0000000180)="1c91cc3206b9a1cf724b844ac4f78a695cfc1999b7023910f3c1848079f73d195205c35fed5b610e18c525e104f5120dd8ad03cc3c11f3dd769a2d5d45c13aee69285f7b5ddf97cd6af31d49d098b5edbd030d62ba19a627e17e89b1dc29e5", 0x5f, 0xfffffffffffffffb) keyctl$setperm(0x5, r4, 0x20) r5 = creat(&(0x7f0000000080)='./file0\x00', 0x40) ioctl$LOOP_SET_FD(r5, 0x4c00, r0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r5, 0xc008551a, &(0x7f00000000c0)={0x8, 0x18, [0x8, 0x8, 0xd33, 0x1ff, 0xafc3, 0x5e]}) connect$pppoe(r1, &(0x7f0000000040)={0x18, 0x0, {0x1, @dev={[], 0x22}, 'batadv0\x00'}}, 0x1e) sendmmsg(r1, &(0x7f0000005b40), 0x40000000000014d, 0x0) [ 1700.771585] Memory cgroup out of memory: Kill process 14218 (syz-executor.1) score 139 or sacrifice child [ 1700.781484] Killed process 14218 (syz-executor.1) total-vm:72712kB, anon-rss:7756kB, file-rss:34944kB, shmem-rss:0kB [ 1700.803051] oom_reaper: reaped process 14218 (syz-executor.1), now anon-rss:0kB, file-rss:34832kB, shmem-rss:0kB 14:22:51 executing program 3: syz_emit_ethernet(0x140, &(0x7f0000000000)={@local, @random="8a37962a294f", [], {@ipv6={0x86dd, {0x800e, 0x6, "110c11", 0x30, 0x21, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x6, [], {0x0, 0x6, "cb155d", 0x0, 0x0, 0x0, @mcast2, @dev}}}}}}}, 0x0) [ 1700.877577] netlink: 7 bytes leftover after parsing attributes in process `syz-executor.4'. 14:22:51 executing program 2: syz_emit_ethernet(0x140, &(0x7f0000000000)={@local, @random="8a37962a294f", [], {@ipv6={0x86dd, {0xf000, 0x6, "110c11", 0x30, 0x21, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x6, [], {0x41, 0x6, "cb155d", 0x0, 0x0, 0x0, @mcast2, @dev}}}}}}}, 0x0) 14:22:51 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000bd7000)={&(0x7f0000c07e98)=ANY=[@ANYBLOB="000000000000000000000000000000000000000033000000ffffffff000000000000000000000000000000000000000000000000000000000000000000294900000000000000000000000000000000000000000000f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020001007d00000000000000480001006d64350000000000000000000019000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000"], 0x1}}, 0x0) 14:22:51 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee4050c00000f0000008bc36f7d79ce3263dac37b7403242189c609", 0x23}], 0x1}, 0x0) 14:22:51 executing program 3: syz_emit_ethernet(0x140, &(0x7f0000000000)={@local, @random="8a37962a294f", [], {@ipv6={0x86dd, {0x8035, 0x6, "110c11", 0x30, 0x21, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x6, [], {0x0, 0x6, "cb155d", 0x0, 0x0, 0x0, @mcast2, @dev}}}}}}}, 0x0) [ 1701.083058] net_ratelimit: 81 callbacks suppressed [ 1701.083102] dccp_v6_rcv: dropped packet with invalid checksum 14:22:51 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000bd7000)={&(0x7f0000c07e98)=ANY=[@ANYBLOB="000000000000000000000000000000000000000033000000ffffffff0000000000000000000000000000000000000000000000000000000000000000002949000000000000000000000000000000000000000000fffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020001007d00000000000000480001006d64350000000000000000000019000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000"], 0x1}}, 0x0) [ 1701.139112] dccp_v6_rcv: dropped packet with invalid checksum [ 1701.150204] netlink: 7 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1701.225833] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 1701.287229] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 1701.400114] syz-executor.1 invoked oom-killer: gfp_mask=0x7200c2(GFP_HIGHUSER|__GFP_ACCOUNT), order=0, oom_score_adj=0 [ 1701.411139] protocol 88fb is buggy, dev hsr_slave_0 [ 1701.411186] protocol 88fb is buggy, dev hsr_slave_1 [ 1701.421896] CPU: 1 PID: 14254 Comm: syz-executor.1 Not tainted 5.0.0-rc6+ #70 [ 1701.429171] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1701.438527] Call Trace: [ 1701.441121] dump_stack+0x172/0x1f0 [ 1701.444741] dump_header+0x10f/0xb6c [ 1701.448448] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1701.453535] ? ___ratelimit+0x60/0x595 [ 1701.457440] ? do_raw_spin_unlock+0x57/0x270 [ 1701.461863] oom_kill_process.cold+0x10/0x6f5 [ 1701.466347] ? task_will_free_mem+0x139/0x6e0 [ 1701.470842] out_of_memory+0x79a/0x1280 [ 1701.474819] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1701.479925] ? oom_killer_disable+0x280/0x280 [ 1701.484422] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1701.489534] mem_cgroup_out_of_memory+0x99/0xe0 [ 1701.494190] ? memcg_memory_event+0x40/0x40 [ 1701.498501] ? _raw_spin_unlock+0x2d/0x50 [ 1701.502631] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1701.507737] try_charge+0xfec/0x1570 [ 1701.511440] ? find_held_lock+0x35/0x130 [ 1701.515518] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1701.520352] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 1701.525186] ? find_held_lock+0x35/0x130 [ 1701.529239] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 1701.534094] memcg_kmem_charge_memcg+0x7c/0x130 [ 1701.538747] ? memcg_kmem_put_cache+0xb0/0xb0 [ 1701.543237] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 1701.548076] memcg_kmem_charge+0x13b/0x340 [ 1701.552310] __alloc_pages_nodemask+0x437/0x710 [ 1701.556996] ? __alloc_pages_slowpath+0x2900/0x2900 [ 1701.562009] ? ___might_sleep+0x163/0x280 [ 1701.566158] ? copyin+0xb5/0x100 [ 1701.569538] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1701.575109] alloc_pages_current+0x107/0x210 [ 1701.579522] pipe_write+0xa65/0xfb0 [ 1701.583176] __vfs_write+0x613/0x8e0 [ 1701.586889] ? kernel_read+0x120/0x120 [ 1701.590768] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1701.596352] ? rw_verify_area+0x118/0x360 [ 1701.600506] vfs_write+0x20c/0x580 [ 1701.604066] ksys_write+0xea/0x1f0 [ 1701.607627] ? __ia32_sys_read+0xb0/0xb0 [ 1701.611677] ? do_syscall_64+0x26/0x610 [ 1701.615656] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1701.621019] ? do_syscall_64+0x26/0x610 [ 1701.625013] __x64_sys_write+0x73/0xb0 [ 1701.628914] do_syscall_64+0x103/0x610 [ 1701.632811] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1701.637992] RIP: 0033:0x457e29 [ 1701.641208] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1701.660093] RSP: 002b:00007fd8c7971c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1701.667791] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457e29 [ 1701.675062] RDX: 0000000100000073 RSI: 00000000200001c0 RDI: 0000000000000005 [ 1701.682332] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1701.689600] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd8c79726d4 [ 1701.696885] R13: 00000000004c3be0 R14: 00000000004dc3d0 R15: 00000000ffffffff [ 1701.705026] memory: usage 307200kB, limit 307200kB, failcnt 12018 [ 1701.711976] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1701.718886] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1701.725554] Memory cgroup stats for /syz1: cache:0KB rss:257040KB rss_huge:227328KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:8KB active_anon:257204KB inactive_file:4KB active_file:0KB unevictable:0KB 14:22:52 executing program 1: r0 = perf_event_open(&(0x7f0000000300)={0x400000001, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f000094f000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffff9c, 0xc00c642d, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) r1 = socket$inet6_sctp(0xa, 0x0, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffff9c, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0xfffffffffffffdf7, &(0x7f0000000000)=[@in6={0xa, 0x4e24, 0x100, @loopback}, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x11}}, @in6={0xa, 0x4e22, 0x10001, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x6}, @in={0x2, 0x4e22, @loopback}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000140)={r2, 0x1}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f00000003c0), &(0x7f0000000400)=0x4) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0x100000073) io_setup(0x1, &(0x7f00000001c0)=0x0) io_destroy(r5) write$selinux_user(r3, &(0x7f0000000380)=ANY=[@ANYBLOB="73797f74656d5f7500000000723a7379736c6f674b636f6e665f743a533020756e636f6e66696e65645f750000000000"], 0x30) read(r3, &(0x7f0000000200)=""/250, 0x50c7e3e3) 14:22:52 executing program 2: syz_emit_ethernet(0x140, &(0x7f0000000000)={@local, @random="8a37962a294f", [], {@ipv6={0x86dd, {0x40000, 0x6, "110c11", 0x30, 0x21, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x6, [], {0x41, 0x6, "cb155d", 0x0, 0x0, 0x0, @mcast2, @dev}}}}}}}, 0x0) 14:22:52 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee4050c00000f0000008bc36f7d79ce3263dac37b7403242189c609", 0x23}], 0x1}, 0x0) 14:22:52 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000000)=[{0x80000006}]}, 0x10) r1 = socket$pppoe(0x18, 0x1, 0x0) write$FUSE_IOCTL(r1, &(0x7f0000000100)={0x20, 0x0, 0x6, {0x1, 0x4, 0xa9, 0xfffffffffffffff9}}, 0x20) socketpair$unix(0x1, 0x9, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) connect$pppoe(r1, &(0x7f0000000040)={0x18, 0x0, {0x2, @local, 'batadv0\x00'}}, 0x1e) sendmmsg(r1, &(0x7f0000005b40), 0x40000000000014d, 0x0) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r2, 0x84, 0x20, &(0x7f0000000080)=0xffffffff, 0x4) socket(0x9, 0x3, 0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000140)={0x0, @in6={{0xa, 0x4e20, 0x6, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1}}, 0x9, 0x9, 0x585f, 0x1, 0x41c6}, &(0x7f0000000200)=0x98) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000240)={r3, 0xfffffffffffffffb}, 0x8) r4 = syz_open_dev$usbmon(&(0x7f00000002c0)='/dev/usbmon#\x00', 0x1, 0x20000) write$vhci(r4, &(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, "5a9a3ac59b249c6d2ceb1044b4f5a15712fb58a1e665ae00656ef8e24dcc7248d6322d222ab4605f2a0d93363eb246e5c4fc5103937b978431c07abe6b5a0bcc3ed3f86f4970e7efc639"}, 0x4b) ioctl$SIOCGSTAMPNS(r2, 0x8907, &(0x7f00000000c0)) 14:22:52 executing program 3: syz_emit_ethernet(0x140, &(0x7f0000000000)={@local, @random="8a37962a294f", [], {@ipv6={0x86dd, {0x8100, 0x6, "110c11", 0x30, 0x21, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x6, [], {0x0, 0x6, "cb155d", 0x0, 0x0, 0x0, @mcast2, @dev}}}}}}}, 0x0) 14:22:52 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000bd7000)={&(0x7f0000c07e98)=ANY=[@ANYBLOB="000000000000000000000000000000000000000033000000ffffffff0000000000000000000000000000000000000000000000000000000000000000002949000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020001007d00000000000000480001006d64350000000000000000000019000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000"], 0x1}}, 0x0) [ 1701.746678] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=14252,uid=0 [ 1701.761969] Memory cgroup out of memory: Kill process 14252 (syz-executor.1) score 139 or sacrifice child [ 1701.771901] Killed process 14252 (syz-executor.1) total-vm:72712kB, anon-rss:7756kB, file-rss:34944kB, shmem-rss:0kB [ 1701.790270] oom_reaper: reaped process 14252 (syz-executor.1), now anon-rss:0kB, file-rss:34832kB, shmem-rss:0kB [ 1701.856109] netlink: 7 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1701.871743] dccp_v6_rcv: dropped packet with invalid checksum [ 1701.883623] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 14:22:52 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee4050c00000f0000008bc36f7d79ce3263dac37b7403242189c609", 0x23}], 0x1}, 0x0) 14:22:52 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000bd7000)={&(0x7f0000c07e98)=ANY=[@ANYBLOB="000000000000000000000000000000000000000033000000ffffffff0000000000000000000000000000000000000000000000000000000000000000002949000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020001007d00000000000000480001006d64350000000000000000000019000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000"], 0x1}}, 0x0) [ 1701.907898] dccp_v6_rcv: dropped packet with invalid checksum [ 1701.921024] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 14:22:52 executing program 2: syz_emit_ethernet(0x140, &(0x7f0000000000)={@local, @random="8a37962a294f", [], {@ipv6={0x86dd, {0x6b6b6b, 0x6, "110c11", 0x30, 0x21, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x6, [], {0x41, 0x6, "cb155d", 0x0, 0x0, 0x0, @mcast2, @dev}}}}}}}, 0x0) 14:22:52 executing program 3: syz_emit_ethernet(0x140, &(0x7f0000000000)={@local, @random="8a37962a294f", [], {@ipv6={0x86dd, {0x8847, 0x6, "110c11", 0x30, 0x21, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x6, [], {0x0, 0x6, "cb155d", 0x0, 0x0, 0x0, @mcast2, @dev}}}}}}}, 0x0) 14:22:52 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee4050c00000f0000008bc36f7d79ce3263dac37b7403242189c609", 0x23}], 0x1}, 0x0) 14:22:52 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000bd7000)={&(0x7f0000c07e98)=ANY=[@ANYBLOB="000000000000000000000000000000000000000033000000ffffffff0000000000000000000000000000000000000000000000000000000000000000002949000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020001007d00000000000000480001006d64350000000000000000000019000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000"], 0x1}}, 0x0) [ 1702.432639] syz-executor.1 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), order=0, oom_score_adj=0 [ 1702.442214] CPU: 1 PID: 14292 Comm: syz-executor.1 Not tainted 5.0.0-rc6+ #70 [ 1702.449500] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1702.458854] Call Trace: [ 1702.461461] dump_stack+0x172/0x1f0 [ 1702.465110] dump_header+0x10f/0xb6c [ 1702.468827] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1702.473918] ? ___ratelimit+0x60/0x595 [ 1702.477791] ? do_raw_spin_unlock+0x57/0x270 [ 1702.482188] oom_kill_process.cold+0x10/0x6f5 [ 1702.486689] ? task_will_free_mem+0x139/0x6e0 [ 1702.491183] out_of_memory+0x79a/0x1280 [ 1702.495145] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1702.500240] ? oom_killer_disable+0x280/0x280 [ 1702.504733] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1702.509837] mem_cgroup_out_of_memory+0x99/0xe0 [ 1702.514512] ? memcg_memory_event+0x40/0x40 [ 1702.518831] ? _raw_spin_unlock+0x2d/0x50 [ 1702.522976] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1702.528111] try_charge+0xfec/0x1570 [ 1702.531822] ? find_held_lock+0x35/0x130 [ 1702.535900] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1702.540743] ? kasan_check_read+0x11/0x20 [ 1702.544908] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 1702.549765] mem_cgroup_try_charge+0x24d/0x5e0 [ 1702.554337] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 1702.559273] wp_page_copy+0x408/0x1740 [ 1702.563161] ? find_held_lock+0x35/0x130 [ 1702.567243] ? pmd_pfn+0x1d0/0x1d0 [ 1702.570810] ? lock_downgrade+0x810/0x810 [ 1702.574949] ? __pte_alloc_kernel+0x220/0x220 [ 1702.579445] ? kasan_check_read+0x11/0x20 [ 1702.583608] ? do_raw_spin_unlock+0x57/0x270 [ 1702.588030] do_wp_page+0x2ed/0x1520 [ 1702.591764] ? rwlock_bug.part.0+0x90/0x90 [ 1702.595984] ? lock_acquire+0x16f/0x3f0 [ 1702.599962] ? finish_mkwrite_fault+0x4f0/0x4f0 [ 1702.604646] ? add_mm_counter_fast.part.0+0x40/0x40 [ 1702.609662] __handle_mm_fault+0x22db/0x3f20 [ 1702.614085] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 1702.618941] ? find_held_lock+0x35/0x130 [ 1702.623013] ? handle_mm_fault+0x322/0xb30 [ 1702.627276] ? kasan_check_read+0x11/0x20 [ 1702.631423] handle_mm_fault+0x43f/0xb30 [ 1702.635481] __do_page_fault+0x5da/0xd60 [ 1702.639536] do_page_fault+0x71/0x581 [ 1702.643341] page_fault+0x1e/0x30 [ 1702.646800] RIP: 0010:copy_user_enhanced_fast_string+0xe/0x20 [ 1702.652698] Code: 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 1f 00 c3 0f 1f 80 00 00 00 00 0f 1f 00 83 fa 40 0f 82 70 ff ff ff 89 d1 a4 31 c0 0f 1f 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 83 [ 1702.671584] RSP: 0018:ffff88803a49fb30 EFLAGS: 00010206 [ 1702.676929] RAX: 0000000000000000 RBX: 0000000000001000 RCX: 0000000000000200 [ 1702.684213] RDX: 0000000000001000 RSI: ffff8880a8a7ee00 RDI: 00000000207a1000 [ 1702.691486] RBP: ffff88803a49fb68 R08: ffffed101514fe00 R09: 0000000000000000 [ 1702.698739] R10: ffffed101514fdff R11: ffff8880a8a7efff R12: 00000000207a0200 [ 1702.706003] R13: ffff8880a8a7e000 R14: 00000000207a1200 R15: 00007ffffffff000 [ 1702.713328] ? copyout+0xe2/0x100 [ 1702.716769] copy_page_to_iter+0x347/0xd00 [ 1702.720995] pipe_read+0x28a/0x940 [ 1702.724552] __vfs_read+0x610/0x8c0 [ 1702.728192] ? vfs_copy_file_range+0xbb0/0xbb0 [ 1702.732795] ? rw_verify_area+0x118/0x360 [ 1702.736931] vfs_read+0x194/0x3e0 [ 1702.740405] ksys_read+0xea/0x1f0 [ 1702.743858] ? kernel_write+0x120/0x120 [ 1702.747857] ? do_syscall_64+0x26/0x610 [ 1702.751826] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1702.757173] ? do_syscall_64+0x26/0x610 [ 1702.761150] __x64_sys_read+0x73/0xb0 [ 1702.764956] do_syscall_64+0x103/0x610 [ 1702.768858] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1702.774048] RIP: 0033:0x457e29 [ 1702.777246] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1702.796126] RSP: 002b:00007fd8c7971c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1702.803819] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457e29 [ 1702.811083] RDX: 0000000050c7e3e3 RSI: 0000000020000200 RDI: 0000000000000004 [ 1702.818333] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1702.825618] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd8c79726d4 [ 1702.832888] R13: 00000000004c3964 R14: 00000000004d83b0 R15: 00000000ffffffff [ 1702.841511] memory: usage 307200kB, limit 307200kB, failcnt 12132 [ 1702.848293] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1702.855280] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1702.861428] Memory cgroup stats for /syz1: cache:0KB rss:256992KB rss_huge:227328KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:8KB active_anon:257148KB inactive_file:4KB active_file:0KB unevictable:0KB [ 1702.883901] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=14290,uid=0 [ 1702.898890] Memory cgroup out of memory: Kill process 14290 (syz-executor.1) score 139 or sacrifice child [ 1702.908855] Killed process 14290 (syz-executor.1) total-vm:72712kB, anon-rss:7748kB, file-rss:34944kB, shmem-rss:0kB 14:22:53 executing program 1: r0 = perf_event_open(&(0x7f0000000300)={0x400000001, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f000094f000/0x3000)=nil, 0x3000, 0x0, 0x80010, r0, 0x0) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0x100000073) read(r2, &(0x7f0000000200)=""/250, 0x50c7e3e3) 14:22:53 executing program 2: syz_emit_ethernet(0x140, &(0x7f0000000000)={@local, @random="8a37962a294f", [], {@ipv6={0x86dd, {0xf0ffff, 0x6, "110c11", 0x30, 0x21, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x6, [], {0x41, 0x6, "cb155d", 0x0, 0x0, 0x0, @mcast2, @dev}}}}}}}, 0x0) 14:22:53 executing program 3: syz_emit_ethernet(0x140, &(0x7f0000000000)={@local, @random="8a37962a294f", [], {@ipv6={0x86dd, {0x8848, 0x6, "110c11", 0x30, 0x21, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x6, [], {0x0, 0x6, "cb155d", 0x0, 0x0, 0x0, @mcast2, @dev}}}}}}}, 0x0) 14:22:53 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000000)=[{0x80000006}]}, 0x10) r1 = socket$pppoe(0x18, 0x1, 0x0) init_module(&(0x7f0000000080)='\x00', 0x1, &(0x7f00000000c0)='batadv0\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) connect$pppoe(r1, &(0x7f0000000040)={0x18, 0x0, {0x2, @local, 'batadv0\x00'}}, 0x1e) sendmmsg(r1, &(0x7f0000005b40), 0x40000000000014d, 0x0) 14:22:53 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee4050c00000f0000008bc36f7d79ce3263dac37b7403242189c609", 0x23}], 0x1}, 0x0) 14:22:53 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000bd7000)={&(0x7f0000c07e98)=ANY=[@ANYBLOB="000000000000000000000000000000000000000033000000ffffffff0000000000000000000000000000000000000000000000000000000000000000002949000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020001007d00000000000000480001006d64350000000000000000000019000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000"], 0x1}}, 0x0) [ 1702.932189] oom_reaper: reaped process 14290 (syz-executor.1), now anon-rss:0kB, file-rss:34844kB, shmem-rss:0kB 14:22:53 executing program 2: syz_emit_ethernet(0x140, &(0x7f0000000000)={@local, @random="8a37962a294f", [], {@ipv6={0x86dd, {0x1000000, 0x6, "110c11", 0x30, 0x21, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x6, [], {0x41, 0x6, "cb155d", 0x0, 0x0, 0x0, @mcast2, @dev}}}}}}}, 0x0) [ 1703.033500] __nla_parse: 2 callbacks suppressed [ 1703.033511] netlink: 7 bytes leftover after parsing attributes in process `syz-executor.4'. 14:22:53 executing program 3: syz_emit_ethernet(0x140, &(0x7f0000000000)={@local, @random="8a37962a294f", [], {@ipv6={0x86dd, {0x8864, 0x6, "110c11", 0x30, 0x21, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x6, [], {0x0, 0x6, "cb155d", 0x0, 0x0, 0x0, @mcast2, @dev}}}}}}}, 0x0) 14:22:53 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000bd7000)={&(0x7f0000c07e98)=ANY=[@ANYBLOB="000000000000000000000000000000000000000033000000ffffffff0000000000000000000000000000000000000000000000000000000000000000002949000000000000000000000000000000000000000000000015710000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020001007d00000000000000480001006d64350000000000000000000019000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000"], 0x1}}, 0x0) 14:22:53 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee4050c00000f0000008bc36f7d79ce3263dac37b7403242189c609", 0x23}], 0x1}, 0x0) 14:22:53 executing program 2: syz_emit_ethernet(0x140, &(0x7f0000000000)={@local, @random="8a37962a294f", [], {@ipv6={0x86dd, {0x2000000, 0x6, "110c11", 0x30, 0x21, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x6, [], {0x41, 0x6, "cb155d", 0x0, 0x0, 0x0, @mcast2, @dev}}}}}}}, 0x0) 14:22:53 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000000)=[{0x80000006}]}, 0x10) r1 = socket$pppoe(0x18, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) pipe(&(0x7f0000000080)) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-monitor\x00', 0x4000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x101) connect$pppoe(r1, &(0x7f0000000040)={0x18, 0x0, {0x2, @local, 'batadv0\x00'}}, 0x1e) sendmmsg(r1, &(0x7f0000005b40), 0x40000000000014d, 0x0) [ 1703.285723] netlink: 7 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1703.553780] syz-executor.1 invoked oom-killer: gfp_mask=0x7200c2(GFP_HIGHUSER|__GFP_ACCOUNT), order=0, oom_score_adj=0 [ 1703.564827] CPU: 0 PID: 14331 Comm: syz-executor.1 Not tainted 5.0.0-rc6+ #70 [ 1703.572107] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1703.581458] Call Trace: [ 1703.584052] dump_stack+0x172/0x1f0 [ 1703.587681] dump_header+0x10f/0xb6c [ 1703.591383] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1703.596474] ? ___ratelimit+0x60/0x595 [ 1703.600379] ? do_raw_spin_unlock+0x57/0x270 [ 1703.604779] oom_kill_process.cold+0x10/0x6f5 [ 1703.609282] ? task_will_free_mem+0x139/0x6e0 [ 1703.613781] out_of_memory+0x79a/0x1280 [ 1703.617761] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1703.622901] ? oom_killer_disable+0x280/0x280 [ 1703.627395] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1703.632540] mem_cgroup_out_of_memory+0x99/0xe0 [ 1703.637196] ? memcg_memory_event+0x40/0x40 [ 1703.641513] ? _raw_spin_unlock+0x2d/0x50 [ 1703.645646] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1703.650764] try_charge+0xfec/0x1570 [ 1703.654490] ? find_held_lock+0x35/0x130 [ 1703.658545] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1703.663418] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 1703.668278] ? find_held_lock+0x35/0x130 [ 1703.672341] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 1703.677191] memcg_kmem_charge_memcg+0x7c/0x130 [ 1703.681872] ? memcg_kmem_put_cache+0xb0/0xb0 [ 1703.686367] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 1703.691199] memcg_kmem_charge+0x13b/0x340 [ 1703.695432] __alloc_pages_nodemask+0x437/0x710 [ 1703.700117] ? __alloc_pages_slowpath+0x2900/0x2900 [ 1703.705134] ? ___might_sleep+0x163/0x280 [ 1703.709298] ? copyin+0xb5/0x100 [ 1703.712690] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1703.718281] alloc_pages_current+0x107/0x210 [ 1703.722689] pipe_write+0xa65/0xfb0 [ 1703.726322] __vfs_write+0x613/0x8e0 [ 1703.730039] ? kernel_read+0x120/0x120 [ 1703.733931] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1703.739475] ? rw_verify_area+0x118/0x360 [ 1703.743623] vfs_write+0x20c/0x580 [ 1703.747167] ksys_write+0xea/0x1f0 [ 1703.750717] ? __ia32_sys_read+0xb0/0xb0 [ 1703.754766] ? do_syscall_64+0x26/0x610 [ 1703.758736] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1703.764102] ? do_syscall_64+0x26/0x610 [ 1703.768063] __x64_sys_write+0x73/0xb0 [ 1703.771956] do_syscall_64+0x103/0x610 [ 1703.775839] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1703.781027] RIP: 0033:0x457e29 [ 1703.784210] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1703.803106] RSP: 002b:00007fd8c7971c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1703.810826] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457e29 [ 1703.818097] RDX: 0000000100000073 RSI: 00000000200001c0 RDI: 0000000000000005 [ 1703.825349] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1703.832603] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd8c79726d4 [ 1703.839878] R13: 00000000004c3be0 R14: 00000000004dc3d0 R15: 00000000ffffffff [ 1703.848979] memory: usage 307200kB, limit 307200kB, failcnt 12231 [ 1703.855291] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1703.862052] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1703.868273] Memory cgroup stats for /syz1: cache:0KB rss:257020KB rss_huge:227328KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:8KB active_anon:257204KB inactive_file:4KB active_file:0KB unevictable:0KB [ 1703.889059] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=14329,uid=0 14:22:54 executing program 1: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) accept$netrom(r0, &(0x7f00000000c0)={{0x3, @null}, [@rose, @netrom, @default, @netrom, @netrom, @netrom, @remote, @rose]}, &(0x7f0000000040)=0x48) setsockopt$TIPC_MCAST_REPLICAST(r0, 0x10f, 0x86) r1 = perf_event_open(&(0x7f0000000300)={0x400000001, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000380)={0x3, 0x80}) openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x2, 0x0) mmap(&(0x7f000094f000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) getsockopt$TIPC_IMPORTANCE(r0, 0x10f, 0x7f, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffff9c, 0xc00c642d, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0x100000073) read(r2, &(0x7f0000000200)=""/250, 0x50c7e3e3) 14:22:54 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee4050c00000f0000008bc36f7d79ce3263dac37b7403242189c609", 0x23}], 0x1}, 0x0) 14:22:54 executing program 3: syz_emit_ethernet(0x140, &(0x7f0000000000)={@local, @random="8a37962a294f", [], {@ipv6={0x86dd, {0x8906, 0x6, "110c11", 0x30, 0x21, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x6, [], {0x0, 0x6, "cb155d", 0x0, 0x0, 0x0, @mcast2, @dev}}}}}}}, 0x0) 14:22:54 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000bd7000)={&(0x7f0000c07e98)=ANY=[@ANYBLOB="000000000000000000000000000000000000000033000000ffffffff0000000000000000000000000000000000000000000000000000000000000000002949000000000000000000000000000000000000000000ffffff9e0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020001007d00000000000000480001006d64350000000000000000000019000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000"], 0x1}}, 0x0) 14:22:54 executing program 2: syz_emit_ethernet(0x140, &(0x7f0000000000)={@local, @random="8a37962a294f", [], {@ipv6={0x86dd, {0x3000000, 0x6, "110c11", 0x30, 0x21, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x6, [], {0x41, 0x6, "cb155d", 0x0, 0x0, 0x0, @mcast2, @dev}}}}}}}, 0x0) 14:22:54 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000000)=[{0x80000006}]}, 0x10) r1 = request_key(&(0x7f00000006c0)='user\x00', &(0x7f0000000700)={'syz', 0x1}, &(0x7f0000000740)='selinux-wlan0em0,]{)vboxnet0\x97ppp1vmnet0/\x00', 0xfffffffffffffffb) request_key(&(0x7f0000000600)='.dead\x00', &(0x7f0000000640)={'syz', 0x0}, &(0x7f0000000680)='9trusted/\x00', r1) r2 = socket$pppoe(0x18, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x100, 0x0) r3 = syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0x4, 0x80000) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f00000005c0)=0x100, 0x4) syz_open_pts(r3, 0x480182) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x7fffffff) socket$inet_udplite(0x2, 0x2, 0x88) connect$pppoe(r2, &(0x7f0000000040)={0x18, 0x0, {0x2, @local, 'batadv0\x00'}}, 0x1e) sendmmsg(r2, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000100)="0148dad5a050b79a1c3abd157f88d6c6b1d51613", 0x14}], 0x1, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x1e0}, 0x17e4}, {{&(0x7f0000000380)=@ethernet={0x6, @broadcast}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000400)="85ff6a369c8678c6f759822ad420a3fce79ea18d235c7b1df1a7762fac686ae56263d58d1ee8d13ec490e510a9ee1b8329f1300daba84b652b4f80c0bbdfe23a189384878b98e8ab879e066f5c90e82d7efda1fb96e4e655b60d327607954a21d5100eb549aad0ada8d9b188c5df4994fc8f3639b981664230785c860f03e1b1ec653b3b131997fd2ff3260c7c93d4a644c77ee7ad8ad73620280ef0a0981323ce4526d422b47f16e74ae196dc16bbe3ec09cc69e83f15a3d51fb14e", 0xbc}, {&(0x7f00000004c0)="f28aad5affbc6d85429757971e09df1b369c346a20201d2f768af68e913bf3489c78e9ce89cffdca57a14b76dfd3ff7295e0df", 0x33}], 0x2}, 0x7}], 0x2, 0x0) [ 1703.903764] Memory cgroup out of memory: Kill process 14329 (syz-executor.1) score 139 or sacrifice child [ 1703.913607] Killed process 14329 (syz-executor.1) total-vm:72712kB, anon-rss:7756kB, file-rss:34944kB, shmem-rss:0kB [ 1703.931995] oom_reaper: reaped process 14329 (syz-executor.1), now anon-rss:0kB, file-rss:34832kB, shmem-rss:0kB 14:22:54 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000bd7000)={&(0x7f0000c07e98)=ANY=[@ANYBLOB="000000000000000000000000000000000000000033000000ffffffff0000000000000000000000000000000000000000000000000000000000000000002949000000000000000000000000000000000000000000fffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020001007d00000000000000480001006d64350000000000000000000019000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000"], 0x1}}, 0x0) [ 1704.026694] netlink: 7 bytes leftover after parsing attributes in process `syz-executor.4'. 14:22:54 executing program 3: syz_emit_ethernet(0x140, &(0x7f0000000000)={@local, @random="8a37962a294f", [], {@ipv6={0x86dd, {0xf000, 0x6, "110c11", 0x30, 0x21, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x6, [], {0x0, 0x6, "cb155d", 0x0, 0x0, 0x0, @mcast2, @dev}}}}}}}, 0x0) 14:22:54 executing program 2: syz_emit_ethernet(0x140, &(0x7f0000000000)={@local, @random="8a37962a294f", [], {@ipv6={0x86dd, {0x4000000, 0x6, "110c11", 0x30, 0x21, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x6, [], {0x41, 0x6, "cb155d", 0x0, 0x0, 0x0, @mcast2, @dev}}}}}}}, 0x0) 14:22:54 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee4050c00000f0000008bc36f7d79ce3263dac37b7403242189c609", 0x23}], 0x1}, 0x0) 14:22:54 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000000)=[{0x80000006}]}, 0x10) r1 = socket$pppoe(0x18, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) connect$pppoe(r1, &(0x7f0000000040)={0x18, 0x0, {0x2, @local, 'batadv0\x00'}}, 0x1e) sendmmsg(r2, &(0x7f0000000080), 0x40000000000028b, 0x0) 14:22:54 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000bd7000)={&(0x7f0000c07e98)=ANY=[@ANYBLOB="000000000000000000000000000000000000000033000000ffffffff000000000000000000000000000000000000000000000000000000000000000000294900000000000000000000000000000000000000000000f0ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020001007d00000000000000480001006d64350000000000000000000019000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000"], 0x1}}, 0x0) [ 1704.281803] netlink: 7 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1704.491858] syz-executor.1 invoked oom-killer: gfp_mask=0x7200c2(GFP_HIGHUSER|__GFP_ACCOUNT), order=0, oom_score_adj=0 [ 1704.503038] CPU: 1 PID: 14369 Comm: syz-executor.1 Not tainted 5.0.0-rc6+ #70 [ 1704.510321] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1704.519659] Call Trace: [ 1704.522241] dump_stack+0x172/0x1f0 [ 1704.525878] dump_header+0x10f/0xb6c [ 1704.529591] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1704.534703] ? ___ratelimit+0x60/0x595 [ 1704.538602] ? do_raw_spin_unlock+0x57/0x270 [ 1704.543016] oom_kill_process.cold+0x10/0x6f5 [ 1704.547528] ? task_will_free_mem+0x139/0x6e0 [ 1704.552026] out_of_memory+0x79a/0x1280 [ 1704.555994] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1704.561088] ? oom_killer_disable+0x280/0x280 [ 1704.565580] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1704.570686] mem_cgroup_out_of_memory+0x99/0xe0 [ 1704.575360] ? memcg_memory_event+0x40/0x40 [ 1704.579677] ? _raw_spin_unlock+0x2d/0x50 [ 1704.583820] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1704.588922] try_charge+0xfec/0x1570 [ 1704.592637] ? find_held_lock+0x35/0x130 [ 1704.596698] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1704.601542] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 1704.606393] ? find_held_lock+0x35/0x130 [ 1704.610456] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 1704.615295] memcg_kmem_charge_memcg+0x7c/0x130 [ 1704.619955] ? memcg_kmem_put_cache+0xb0/0xb0 [ 1704.624479] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 1704.629324] memcg_kmem_charge+0x13b/0x340 [ 1704.633575] __alloc_pages_nodemask+0x437/0x710 [ 1704.638257] ? __alloc_pages_slowpath+0x2900/0x2900 [ 1704.643272] ? ___might_sleep+0x163/0x280 [ 1704.647441] ? copyin+0xb5/0x100 [ 1704.650809] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1704.656363] alloc_pages_current+0x107/0x210 [ 1704.660805] pipe_write+0xa65/0xfb0 [ 1704.664452] __vfs_write+0x613/0x8e0 [ 1704.668181] ? kernel_read+0x120/0x120 [ 1704.672091] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1704.677633] ? rw_verify_area+0x118/0x360 [ 1704.681773] vfs_write+0x20c/0x580 [ 1704.685348] ksys_write+0xea/0x1f0 [ 1704.688886] ? __ia32_sys_read+0xb0/0xb0 [ 1704.692958] ? do_syscall_64+0x26/0x610 [ 1704.696929] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1704.702323] ? do_syscall_64+0x26/0x610 [ 1704.706312] __x64_sys_write+0x73/0xb0 [ 1704.710210] do_syscall_64+0x103/0x610 [ 1704.714118] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1704.719310] RIP: 0033:0x457e29 [ 1704.722506] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1704.741415] RSP: 002b:00007fd8c7971c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1704.749123] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457e29 [ 1704.756386] RDX: 0000000100000073 RSI: 00000000200001c0 RDI: 0000000000000005 [ 1704.763666] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1704.770931] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd8c79726d4 [ 1704.778203] R13: 00000000004c3be0 R14: 00000000004dc3d0 R15: 00000000ffffffff [ 1704.787041] memory: usage 307200kB, limit 307200kB, failcnt 12339 [ 1704.793499] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1704.793510] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1704.793518] Memory cgroup stats for /syz1: cache:0KB rss:257164KB rss_huge:227328KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:8KB active_anon:257172KB inactive_file:4KB active_file:0KB unevictable:0KB [ 1704.807008] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=14365,uid=0 14:22:55 executing program 1: r0 = perf_event_open(&(0x7f0000000300)={0x400000001, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f000094f000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) r1 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x98, 0x20482) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0x100000073) unlinkat(r3, &(0x7f0000000000)='./file0\x00', 0x200) read(r2, &(0x7f0000000200)=""/250, 0x50c7e3e3) 14:22:55 executing program 2: syz_emit_ethernet(0x140, &(0x7f0000000000)={@local, @random="8a37962a294f", [], {@ipv6={0x86dd, {0x5000000, 0x6, "110c11", 0x30, 0x21, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x6, [], {0x41, 0x6, "cb155d", 0x0, 0x0, 0x0, @mcast2, @dev}}}}}}}, 0x0) 14:22:55 executing program 3: syz_emit_ethernet(0x140, &(0x7f0000000000)={@local, @random="8a37962a294f", [], {@ipv6={0x86dd, {0x6b6b6b, 0x6, "110c11", 0x30, 0x21, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x6, [], {0x0, 0x6, "cb155d", 0x0, 0x0, 0x0, @mcast2, @dev}}}}}}}, 0x0) 14:22:55 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee4050c00000f0000008bc36f7d79ce3263dac37b7403242189c609", 0x23}], 0x1}, 0x0) 14:22:55 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000bd7000)={&(0x7f0000c07e98)=ANY=[@ANYBLOB="000000000000000000000000000000000000000033000000ffffffff00000000000000000000000000000000000000000000000000000000000000000029490000000000000000000000000000000000000000007fffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020001007d00000000000000480001006d64350000000000000000000019000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000"], 0x1}}, 0x0) [ 1704.844002] Memory cgroup out of memory: Kill process 14365 (syz-executor.1) score 139 or sacrifice child [ 1704.854343] Killed process 14365 (syz-executor.1) total-vm:72580kB, anon-rss:7756kB, file-rss:34944kB, shmem-rss:0kB [ 1704.877761] oom_reaper: reaped process 14365 (syz-executor.1), now anon-rss:0kB, file-rss:34828kB, shmem-rss:0kB 14:22:55 executing program 3: syz_emit_ethernet(0x140, &(0x7f0000000000)={@local, @random="8a37962a294f", [], {@ipv6={0x86dd, {0xf0ffff, 0x6, "110c11", 0x30, 0x21, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x6, [], {0x0, 0x6, "cb155d", 0x0, 0x0, 0x0, @mcast2, @dev}}}}}}}, 0x0) 14:22:55 executing program 2: syz_emit_ethernet(0x140, &(0x7f0000000000)={@local, @random="8a37962a294f", [], {@ipv6={0x86dd, {0x6000000, 0x6, "110c11", 0x30, 0x21, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x6, [], {0x41, 0x6, "cb155d", 0x0, 0x0, 0x0, @mcast2, @dev}}}}}}}, 0x0) [ 1704.968169] netlink: 7 bytes leftover after parsing attributes in process `syz-executor.4'. 14:22:55 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee4050c00000f0000008bc36f7d79ce3263dac37b7403242189c609", 0x23}], 0x1}, 0x0) 14:22:55 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000bd7000)={&(0x7f0000c07e98)=ANY=[@ANYBLOB="000000000000000000000000000000000000000033000000ffffffff00000000000000000000000000000000000000000000000000000000000000000029490000000000000000000000000000000000000000009effffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020001007d00000000000000480001006d64350000000000000000000019000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000"], 0x1}}, 0x0) 14:22:55 executing program 3: syz_emit_ethernet(0x140, &(0x7f0000000000)={@local, @random="8a37962a294f", [], {@ipv6={0x86dd, {0x1000000, 0x6, "110c11", 0x30, 0x21, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x6, [], {0x0, 0x6, "cb155d", 0x0, 0x0, 0x0, @mcast2, @dev}}}}}}}, 0x0) [ 1705.213550] netlink: 7 bytes leftover after parsing attributes in process `syz-executor.4'. 14:22:55 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000bd7000)={&(0x7f0000c07e98)=ANY=[@ANYBLOB="000000000000000000000000000000000000000033000000ffffffff0000000000000000000000000000000000000000000000000000000000000000002949000000000000000000000000000000000000000000f0ffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020001007d00000000000000480001006d64350000000000000000000019000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000"], 0x1}}, 0x0) 14:22:55 executing program 2: syz_emit_ethernet(0x140, &(0x7f0000000000)={@local, @random="8a37962a294f", [], {@ipv6={0x86dd, {0x7000000, 0x6, "110c11", 0x30, 0x21, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x6, [], {0x41, 0x6, "cb155d", 0x0, 0x0, 0x0, @mcast2, @dev}}}}}}}, 0x0) [ 1705.521872] syz-executor.1 invoked oom-killer: gfp_mask=0x7200c2(GFP_HIGHUSER|__GFP_ACCOUNT), order=0, oom_score_adj=0 [ 1705.535687] CPU: 1 PID: 14407 Comm: syz-executor.1 Not tainted 5.0.0-rc6+ #70 [ 1705.542998] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1705.552356] Call Trace: [ 1705.554967] dump_stack+0x172/0x1f0 [ 1705.558617] dump_header+0x10f/0xb6c [ 1705.562351] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1705.567466] ? ___ratelimit+0x60/0x595 [ 1705.571356] ? do_raw_spin_unlock+0x57/0x270 [ 1705.575784] oom_kill_process.cold+0x10/0x6f5 [ 1705.580281] ? task_will_free_mem+0x139/0x6e0 [ 1705.584771] out_of_memory+0x79a/0x1280 [ 1705.588736] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1705.593843] ? oom_killer_disable+0x280/0x280 [ 1705.598334] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1705.603447] mem_cgroup_out_of_memory+0x99/0xe0 [ 1705.608137] ? memcg_memory_event+0x40/0x40 [ 1705.612472] ? _raw_spin_unlock+0x2d/0x50 [ 1705.616633] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1705.621732] try_charge+0xfec/0x1570 [ 1705.625435] ? find_held_lock+0x35/0x130 [ 1705.629491] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1705.634335] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 1705.639178] ? find_held_lock+0x35/0x130 [ 1705.643241] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 1705.648095] memcg_kmem_charge_memcg+0x7c/0x130 [ 1705.652763] ? memcg_kmem_put_cache+0xb0/0xb0 [ 1705.657258] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 1705.662095] memcg_kmem_charge+0x13b/0x340 [ 1705.666322] __alloc_pages_nodemask+0x437/0x710 [ 1705.671004] ? __alloc_pages_slowpath+0x2900/0x2900 [ 1705.676049] ? ___might_sleep+0x163/0x280 [ 1705.680226] ? copyin+0xb5/0x100 [ 1705.683630] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1705.689183] alloc_pages_current+0x107/0x210 [ 1705.693601] pipe_write+0xa65/0xfb0 [ 1705.697238] __vfs_write+0x613/0x8e0 [ 1705.700966] ? kernel_read+0x120/0x120 [ 1705.704862] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1705.710401] ? rw_verify_area+0x118/0x360 [ 1705.714579] vfs_write+0x20c/0x580 [ 1705.718123] ksys_write+0xea/0x1f0 [ 1705.721653] ? __ia32_sys_read+0xb0/0xb0 [ 1705.725719] ? do_syscall_64+0x26/0x610 [ 1705.729685] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1705.735045] ? do_syscall_64+0x26/0x610 [ 1705.739053] __x64_sys_write+0x73/0xb0 [ 1705.742971] do_syscall_64+0x103/0x610 [ 1705.746861] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1705.752036] RIP: 0033:0x457e29 [ 1705.755224] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1705.774129] RSP: 002b:00007fd8c7971c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1705.781835] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457e29 [ 1705.789102] RDX: 0000000100000073 RSI: 00000000200001c0 RDI: 0000000000000005 [ 1705.796365] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1705.803643] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd8c79726d4 [ 1705.810908] R13: 00000000004c3be0 R14: 00000000004dc3d0 R15: 00000000ffffffff [ 1705.819628] memory: usage 307200kB, limit 307200kB, failcnt 12495 [ 1705.826420] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1705.833965] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1705.840276] Memory cgroup stats for /syz1: cache:0KB rss:257084KB rss_huge:227328KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:8KB active_anon:257204KB inactive_file:0KB active_file:0KB unevictable:0KB 14:22:56 executing program 1: r0 = perf_event_open(&(0x7f0000000300)={0x400000001, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f000094f000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffff9c, 0xc00c642d, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = getpgid(0x0) fcntl$lock(r1, 0x6, &(0x7f0000000000)={0x0, 0x7, 0x6, 0x0, r3}) write(r2, &(0x7f00000001c0), 0x100000073) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f00000001c0)=0xc) ioctl$SIOCAX25GETUID(r2, 0x89e0, &(0x7f0000000200)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, r4}) read(r1, &(0x7f00000000c0)=""/250, 0xfa) 14:22:56 executing program 3: syz_emit_ethernet(0x140, &(0x7f0000000000)={@local, @random="8a37962a294f", [], {@ipv6={0x86dd, {0x2000000, 0x6, "110c11", 0x30, 0x21, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x6, [], {0x0, 0x6, "cb155d", 0x0, 0x0, 0x0, @mcast2, @dev}}}}}}}, 0x0) 14:22:56 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000000)=[{0x80000006}]}, 0x10) r1 = socket$pppoe(0x18, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) syz_open_dev$media(&(0x7f0000000180)='/dev/media#\x00', 0x6e4, 0x400) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/btrfs-control\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0x4, @local, 'Hatadv0\x00'}}, 0x1e) fsetxattr$security_smack_entry(r1, &(0x7f0000000100)='security.SMACK64MMAP\x00', &(0x7f0000000140)='Hatadv0\x00', 0x8, 0x0) sendmmsg(r1, &(0x7f0000005b40), 0x40000000000014d, 0x0) 14:22:56 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee4050c00000f0000008bc36f7d79ce3263dac37b7403242189c609", 0x23}], 0x1}, 0x0) 14:22:56 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000bd7000)={&(0x7f0000c07e98)=ANY=[@ANYBLOB="000000000000000000000000000000000000000033000000ffffffff0000000000000000000000000000000000000000000000000000000000000000002949000000000000000000000000000000000000000000fffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020001007d00000000000000480001006d64350000000000000000000019000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000"], 0x1}}, 0x0) 14:22:56 executing program 2: syz_emit_ethernet(0x140, &(0x7f0000000000)={@local, @random="8a37962a294f", [], {@ipv6={0x86dd, {0x8000000, 0x6, "110c11", 0x30, 0x21, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x6, [], {0x41, 0x6, "cb155d", 0x0, 0x0, 0x0, @mcast2, @dev}}}}}}}, 0x0) [ 1705.861214] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=14404,uid=0 [ 1705.876006] Memory cgroup out of memory: Kill process 14404 (syz-executor.1) score 139 or sacrifice child [ 1705.886053] Killed process 14404 (syz-executor.1) total-vm:72712kB, anon-rss:7752kB, file-rss:34944kB, shmem-rss:0kB [ 1705.904006] oom_reaper: reaped process 14404 (syz-executor.1), now anon-rss:0kB, file-rss:33984kB, shmem-rss:0kB 14:22:56 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000bd7000)={&(0x7f0000c07e98)=ANY=[@ANYBLOB="000000000000000000000000000000000000000033000000ffffffff0000000000000000000000000000000000000000000000000000000000000000002949000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020001007d00000000000000480001006d64350000000000000000000019000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000"], 0x1}}, 0x0) 14:22:56 executing program 3: syz_emit_ethernet(0x140, &(0x7f0000000000)={@local, @random="8a37962a294f", [], {@ipv6={0x86dd, {0x3000000, 0x6, "110c11", 0x30, 0x21, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x6, [], {0x0, 0x6, "cb155d", 0x0, 0x0, 0x0, @mcast2, @dev}}}}}}}, 0x0) [ 1705.968626] netlink: 7 bytes leftover after parsing attributes in process `syz-executor.4'. 14:22:56 executing program 2: syz_emit_ethernet(0x140, &(0x7f0000000000)={@local, @random="8a37962a294f", [], {@ipv6={0x86dd, {0x8060000, 0x6, "110c11", 0x30, 0x21, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x6, [], {0x41, 0x6, "cb155d", 0x0, 0x0, 0x0, @mcast2, @dev}}}}}}}, 0x0) 14:22:56 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000140)=[{0x80000006, 0x4cd464ac, 0x26e, 0x2000000000000000}]}, 0x10) r1 = socket$pppoe(0x18, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x103, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0), 0x106, 0x100f}}, 0x20) connect$pppoe(r1, &(0x7f0000000040)={0x18, 0x0, {0x2, @local, 'batadv0\x00'}}, 0x1e) sendmmsg(r1, &(0x7f0000005b40), 0x40000000000014d, 0x0) socket$pppoe(0x18, 0x1, 0x0) 14:22:56 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee4050c00000f0000008bc36f7d79ce3263dac37b7403242189c609", 0x23}], 0x1}, 0x0) [ 1706.107051] net_ratelimit: 62 callbacks suppressed [ 1706.107061] dccp_v6_rcv: dropped packet with invalid checksum [ 1706.130688] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 14:22:56 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000bd7000)={&(0x7f0000c07e98)=ANY=[@ANYBLOB="000000000000000000000000000000000000000033000000ffffffff0000000000000000000000000000000000000000000000000000000000000000002949000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020001007d00000000000000480001006d64350000000000000000000019000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000"], 0x1}}, 0x0) [ 1706.151880] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 1706.164994] dccp_v6_rcv: dropped packet with invalid checksum [ 1706.205767] netlink: 7 bytes leftover after parsing attributes in process `syz-executor.4'. 14:22:57 executing program 1: r0 = perf_event_open(&(0x7f0000000300)={0x400000001, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f000094f000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffff9c, 0xc00c642d, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x404000, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={r1, &(0x7f00000000c0)="de0f1c251c56da501f98799e243e552a71b5460faf6ff5f434cba19423eccc2e4dc601f02a151aed1f15f99ae00f7b96cb8df9bda8315311eef52d43c2ff6330434ae030f411989ff2dee0547e582c0ab3c39653309fda69bfe71c02c4411fd4f0ac96eb23df99c070751816fdf79b7f7e9874fe546cc79ffacb6633029cab8f6d680fb505e65fa30d38f457c61d95c58eb4f28f949db424204d606e34f996501f2e4482f3396a75ccea71a742a3385e8d9a4b9e8ee267ca5bfa61e75bb9c643f1", &(0x7f0000000380)="0a569fca7203eab6b99e91a1533a2963558f149a5bb08d540f872f3ed1ec8229f7cf6e2b167b631cf8b5e1308589ed7ff562527308ea0f98fb3eb0212fb27f98de9d659f6ca9bf571fc0159f73e3af23e16fbe18150d4ba382b1d2dad68ec090b31e533417d3d32cdb61cc0a44d69f9ff701582c267f3c3a031d0c87f52ecb9b6cab74bb307742138088e96a674d247a74c8e147c6fab9d0906b08f0cf5acfd64012819990ad90ecac5ba082c533235df4112c07cf91c621afe5d7b7e28da6cb8f10c4631f9fa6e888ac448ef2c4197ef172876bd6734855f0cea8c910210da698e0cb224d1bb407580f", 0x1}, 0x20) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0x100000073) read(r2, &(0x7f0000000200)=""/250, 0x50c7e3e3) 14:22:57 executing program 3: syz_emit_ethernet(0x140, &(0x7f0000000000)={@local, @random="8a37962a294f", [], {@ipv6={0x86dd, {0x4000000, 0x6, "110c11", 0x30, 0x21, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x6, [], {0x0, 0x6, "cb155d", 0x0, 0x0, 0x0, @mcast2, @dev}}}}}}}, 0x0) 14:22:57 executing program 2: syz_emit_ethernet(0x140, &(0x7f0000000000)={@local, @random="8a37962a294f", [], {@ipv6={0x86dd, {0x9000000, 0x6, "110c11", 0x30, 0x21, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x6, [], {0x41, 0x6, "cb155d", 0x0, 0x0, 0x0, @mcast2, @dev}}}}}}}, 0x0) 14:22:57 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee4050c00000f0000008bc36f7d79ce3263dac37b7403242189c609", 0x23}], 0x1}, 0x0) 14:22:57 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000bd7000)={&(0x7f0000c07e98)=ANY=[@ANYBLOB="000000000000000000000000000000000000000033000000ffffffff0000000000000000000000000000000000000000000000000000000000000000002949000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020001007d00000000000000480001006d64350000000000000000000019000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000"], 0x1}}, 0x0) 14:22:57 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000000)=[{0x80000006}]}, 0x10) r1 = openat$vfio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vfio/vfio\x00', 0x4000, 0x0) ioctl$sock_inet_sctp_SIOCINQ(r1, 0x541b, &(0x7f0000000200)) r2 = socket$pppoe(0x18, 0x1, 0x0) r3 = syz_open_dev$vcsn(&(0x7f0000000140)='/dev/vcs#\x00', 0x401, 0x2) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r3, 0x84, 0x21, &(0x7f0000000180), 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = semget$private(0x0, 0x3, 0x100) semctl$GETZCNT(r5, 0x1, 0xf, &(0x7f0000000080)=""/135) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) connect$pppoe(r2, &(0x7f0000000040)={0x18, 0x0, {0x2, @local, 'batadv0\x00'}}, 0x1e) ioctl$KDSKBMODE(r1, 0x4b45, &(0x7f0000000240)=0x5) sendmmsg(r2, &(0x7f0000005b40), 0x40000000000014d, 0x0) 14:22:57 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000bd7000)={&(0x7f0000c07e98)=ANY=[@ANYBLOB="000000000000000000000000000000000000000033000000ffffffff0000000000000000000000000000000000000000000000000000000000000000002949000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020001007d00000000000000480001006d64350000000000000000000019000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000"], 0x1}}, 0x0) [ 1706.927802] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 1706.936854] dccp_v6_rcv: dropped packet with invalid checksum [ 1706.944202] netlink: 7 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1706.947294] dccp_v6_rcv: dropped packet with invalid checksum [ 1706.960578] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 14:22:57 executing program 3: syz_emit_ethernet(0x140, &(0x7f0000000000)={@local, @random="8a37962a294f", [], {@ipv6={0x86dd, {0x5000000, 0x6, "110c11", 0x30, 0x21, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x6, [], {0x0, 0x6, "cb155d", 0x0, 0x0, 0x0, @mcast2, @dev}}}}}}}, 0x0) 14:22:57 executing program 2: syz_emit_ethernet(0x140, &(0x7f0000000000)={@local, @random="8a37962a294f", [], {@ipv6={0x86dd, {0xd000000, 0x6, "110c11", 0x30, 0x21, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x6, [], {0x41, 0x6, "cb155d", 0x0, 0x0, 0x0, @mcast2, @dev}}}}}}}, 0x0) 14:22:57 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee4050c00000f0000008bc36f7d79ce3263dac37b7403242189c609", 0x23}], 0x1}, 0x0) [ 1707.002559] protocol 88fb is buggy, dev hsr_slave_0 [ 1707.002564] protocol 88fb is buggy, dev hsr_slave_0 14:22:57 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000bd7000)={&(0x7f0000c07e98)=ANY=[@ANYBLOB="000000000000000000000000000000000000000033000000ffffffff0000000000000000000000000000000000000000000000000000000000000000002949000000000000000000000000000000000000000000000000000000157100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020001007d00000000000000480001006d64350000000000000000000019000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000"], 0x1}}, 0x0) [ 1707.129836] netlink: 7 bytes leftover after parsing attributes in process `syz-executor.4'. 14:22:57 executing program 3: syz_emit_ethernet(0x140, &(0x7f0000000000)={@local, @random="8a37962a294f", [], {@ipv6={0x86dd, {0x6000000, 0x6, "110c11", 0x30, 0x21, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x6, [], {0x0, 0x6, "cb155d", 0x0, 0x0, 0x0, @mcast2, @dev}}}}}}}, 0x0) [ 1707.466649] syz-executor.1 invoked oom-killer: gfp_mask=0x7200c2(GFP_HIGHUSER|__GFP_ACCOUNT), order=0, oom_score_adj=0 [ 1707.477729] CPU: 0 PID: 14482 Comm: syz-executor.1 Not tainted 5.0.0-rc6+ #70 [ 1707.485137] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1707.494700] Call Trace: [ 1707.497335] dump_stack+0x172/0x1f0 [ 1707.500984] dump_header+0x10f/0xb6c [ 1707.504712] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1707.509804] ? ___ratelimit+0x60/0x595 [ 1707.513689] ? do_raw_spin_unlock+0x57/0x270 [ 1707.518093] oom_kill_process.cold+0x10/0x6f5 [ 1707.522611] ? task_will_free_mem+0x139/0x6e0 [ 1707.527104] out_of_memory+0x79a/0x1280 [ 1707.531068] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1707.536167] ? oom_killer_disable+0x280/0x280 [ 1707.540695] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1707.545822] mem_cgroup_out_of_memory+0x99/0xe0 [ 1707.550506] ? memcg_memory_event+0x40/0x40 [ 1707.554834] ? _raw_spin_unlock+0x2d/0x50 [ 1707.558988] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1707.564084] try_charge+0xfec/0x1570 [ 1707.567786] ? find_held_lock+0x35/0x130 [ 1707.571837] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1707.576666] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 1707.581501] ? find_held_lock+0x35/0x130 [ 1707.585563] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 1707.590402] memcg_kmem_charge_memcg+0x7c/0x130 [ 1707.595092] ? memcg_kmem_put_cache+0xb0/0xb0 [ 1707.599592] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 1707.604428] memcg_kmem_charge+0x13b/0x340 [ 1707.608657] __alloc_pages_nodemask+0x437/0x710 [ 1707.613316] ? __alloc_pages_slowpath+0x2900/0x2900 [ 1707.618323] ? ___might_sleep+0x163/0x280 [ 1707.622471] ? copyin+0xb5/0x100 [ 1707.625830] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1707.631359] alloc_pages_current+0x107/0x210 [ 1707.635790] pipe_write+0xa65/0xfb0 [ 1707.639432] __vfs_write+0x613/0x8e0 [ 1707.643169] ? kernel_read+0x120/0x120 [ 1707.647053] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1707.652596] ? rw_verify_area+0x118/0x360 [ 1707.656733] vfs_write+0x20c/0x580 [ 1707.660265] ksys_write+0xea/0x1f0 [ 1707.663794] ? __ia32_sys_read+0xb0/0xb0 [ 1707.667859] ? do_syscall_64+0x26/0x610 [ 1707.671848] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1707.677200] ? do_syscall_64+0x26/0x610 [ 1707.681183] __x64_sys_write+0x73/0xb0 [ 1707.685097] do_syscall_64+0x103/0x610 [ 1707.689000] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1707.694188] RIP: 0033:0x457e29 [ 1707.697371] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1707.716291] RSP: 002b:00007fd8c7971c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1707.724034] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457e29 [ 1707.731316] RDX: 0000000100000073 RSI: 00000000200001c0 RDI: 0000000000000005 [ 1707.738580] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1707.745850] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd8c79726d4 [ 1707.753112] R13: 00000000004c3be0 R14: 00000000004dc3d0 R15: 00000000ffffffff [ 1707.761704] memory: usage 307200kB, limit 307200kB, failcnt 12591 [ 1707.768063] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1707.775200] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1707.781359] Memory cgroup stats for /syz1: cache:0KB rss:257008KB rss_huge:227328KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:8KB active_anon:257204KB inactive_file:4KB active_file:0KB unevictable:0KB [ 1707.802116] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=14481,uid=0 14:22:58 executing program 1: r0 = perf_event_open(&(0x7f0000000300)={0x400000001, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f000094f000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffff9c, 0xc00c642d, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0x100000073) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000000040)={0x0, 0x1, 0x30, 0x4, 0x3}, &(0x7f0000000080)=0x18) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r2, 0x84, 0x6c, &(0x7f0000000380)={r3, 0x1000, "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"}, &(0x7f0000000100)=0x1008) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r2, 0x84, 0x23, &(0x7f0000000140)={r4, 0x1}, 0x8) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) ioctl$VIDIOC_LOG_STATUS(r2, 0x5646, 0x0) 14:22:58 executing program 2: syz_emit_ethernet(0x140, &(0x7f0000000000)={@local, @random="8a37962a294f", [], {@ipv6={0x86dd, {0x20000000, 0x6, "110c11", 0x30, 0x21, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x6, [], {0x41, 0x6, "cb155d", 0x0, 0x0, 0x0, @mcast2, @dev}}}}}}}, 0x0) 14:22:58 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee4050c00000f0000008bc36f7d79ce3263dac37b7403242189c609", 0x23}], 0x1}, 0x0) 14:22:58 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000bd7000)={&(0x7f0000c07e98)=ANY=[@ANYBLOB="000000000000000000000000000000000000000033000000ffffffff000000000000000000000000000000000000000000000000000000000000000000294900000000000000000000000000000000000000000000000000ffffff9e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020001007d00000000000000480001006d64350000000000000000000019000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000"], 0x1}}, 0x0) 14:22:58 executing program 3: syz_emit_ethernet(0x140, &(0x7f0000000000)={@local, @random="8a37962a294f", [], {@ipv6={0x86dd, {0x7000000, 0x6, "110c11", 0x30, 0x21, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x6, [], {0x0, 0x6, "cb155d", 0x0, 0x0, 0x0, @mcast2, @dev}}}}}}}, 0x0) 14:22:58 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000000)=[{0x80000006}]}, 0x10) r1 = socket$pppoe(0x18, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_CAPBSET_READ(0x17, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$IP_VS_SO_GET_SERVICE(r2, 0x0, 0x483, &(0x7f0000000080), &(0x7f0000000100)=0x68) connect$pppoe(r1, &(0x7f0000000040)={0x18, 0x0, {0x2, @local, 'batadv0\x00'}}, 0x1e) sendmmsg(r1, &(0x7f0000005b40), 0x40000000000014d, 0x0) [ 1707.816838] Memory cgroup out of memory: Kill process 14481 (syz-executor.1) score 139 or sacrifice child [ 1707.826698] Killed process 14481 (syz-executor.1) total-vm:72712kB, anon-rss:7756kB, file-rss:34944kB, shmem-rss:0kB [ 1707.845704] oom_reaper: reaped process 14481 (syz-executor.1), now anon-rss:0kB, file-rss:34832kB, shmem-rss:0kB 14:22:58 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000bd7000)={&(0x7f0000c07e98)=ANY=[@ANYBLOB="000000000000000000000000000000000000000033000000ffffffff000000000000000000000000000000000000000000000000000000000000000000294900000000000000000000000000000000000000000000000000fffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020001007d00000000000000480001006d64350000000000000000000019000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000"], 0x1}}, 0x0) 14:22:58 executing program 2: syz_emit_ethernet(0x140, &(0x7f0000000000)={@local, @random="8a37962a294f", [], {@ipv6={0x86dd, {0x21000000, 0x6, "110c11", 0x30, 0x21, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x6, [], {0x41, 0x6, "cb155d", 0x0, 0x0, 0x0, @mcast2, @dev}}}}}}}, 0x0) 14:22:58 executing program 3: syz_emit_ethernet(0x140, &(0x7f0000000000)={@local, @random="8a37962a294f", [], {@ipv6={0x86dd, {0x8000000, 0x6, "110c11", 0x30, 0x21, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x6, [], {0x0, 0x6, "cb155d", 0x0, 0x0, 0x0, @mcast2, @dev}}}}}}}, 0x0) 14:22:58 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee4050c00000f0000008bc36f7d79ce3263dac37b7403242189c609", 0x23}], 0x1}, 0x0) [ 1708.084323] __nla_parse: 1 callbacks suppressed [ 1708.084333] netlink: 7 bytes leftover after parsing attributes in process `syz-executor.4'. 14:22:58 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000bd7000)={&(0x7f0000c07e98)=ANY=[@ANYBLOB="000000000000000000000000000000000000000033000000ffffffff0000000000000000000000000000000000000000000000000000000000000000002949000000000000000000000000000000000000000000000000007fffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020001007d00000000000000480001006d64350000000000000000000019000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000"], 0x1}}, 0x0) 14:22:58 executing program 2: syz_emit_ethernet(0x140, &(0x7f0000000000)={@local, @random="8a37962a294f", [], {@ipv6={0x86dd, {0x28000000, 0x6, "110c11", 0x30, 0x21, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x6, [], {0x41, 0x6, "cb155d", 0x0, 0x0, 0x0, @mcast2, @dev}}}}}}}, 0x0) [ 1708.428161] syz-executor.1 invoked oom-killer: gfp_mask=0x7200c2(GFP_HIGHUSER|__GFP_ACCOUNT), order=0, oom_score_adj=0 [ 1708.439388] CPU: 0 PID: 14516 Comm: syz-executor.1 Not tainted 5.0.0-rc6+ #70 [ 1708.446661] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1708.456016] Call Trace: [ 1708.458622] dump_stack+0x172/0x1f0 [ 1708.462260] dump_header+0x10f/0xb6c [ 1708.465967] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1708.471058] ? ___ratelimit+0x60/0x595 [ 1708.474961] ? do_raw_spin_unlock+0x57/0x270 [ 1708.479376] oom_kill_process.cold+0x10/0x6f5 [ 1708.483862] ? task_will_free_mem+0x139/0x6e0 [ 1708.488351] out_of_memory+0x79a/0x1280 [ 1708.492318] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1708.497408] ? oom_killer_disable+0x280/0x280 [ 1708.501902] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1708.507009] mem_cgroup_out_of_memory+0x99/0xe0 [ 1708.511679] ? memcg_memory_event+0x40/0x40 [ 1708.515996] ? _raw_spin_unlock+0x2d/0x50 [ 1708.520142] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1708.525245] try_charge+0xfec/0x1570 [ 1708.528945] ? find_held_lock+0x35/0x130 [ 1708.533014] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1708.537845] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 1708.542688] ? find_held_lock+0x35/0x130 [ 1708.546745] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 1708.551583] memcg_kmem_charge_memcg+0x7c/0x130 [ 1708.556239] ? memcg_kmem_put_cache+0xb0/0xb0 [ 1708.560725] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 1708.565557] memcg_kmem_charge+0x13b/0x340 [ 1708.569784] __alloc_pages_nodemask+0x437/0x710 [ 1708.574440] ? __alloc_pages_slowpath+0x2900/0x2900 [ 1708.579458] ? ___might_sleep+0x163/0x280 [ 1708.583597] ? copyin+0xb5/0x100 [ 1708.586957] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1708.592493] alloc_pages_current+0x107/0x210 [ 1708.596908] pipe_write+0xa65/0xfb0 [ 1708.600549] __vfs_write+0x613/0x8e0 [ 1708.604265] ? kernel_read+0x120/0x120 [ 1708.608142] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1708.613676] ? rw_verify_area+0x118/0x360 [ 1708.617815] vfs_write+0x20c/0x580 [ 1708.621347] ksys_write+0xea/0x1f0 [ 1708.624874] ? __ia32_sys_read+0xb0/0xb0 [ 1708.628924] ? do_syscall_64+0x26/0x610 [ 1708.632893] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1708.638243] ? do_syscall_64+0x26/0x610 [ 1708.642216] __x64_sys_write+0x73/0xb0 [ 1708.646097] do_syscall_64+0x103/0x610 [ 1708.649978] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1708.655162] RIP: 0033:0x457e29 [ 1708.658355] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1708.677257] RSP: 002b:00007fd8c7971c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1708.684958] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457e29 [ 1708.692214] RDX: 0000000100000073 RSI: 00000000200001c0 RDI: 0000000000000005 [ 1708.699481] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1708.706738] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd8c79726d4 [ 1708.713991] R13: 00000000004c3be0 R14: 00000000004dc3d0 R15: 00000000ffffffff [ 1708.728048] memory: usage 307200kB, limit 307200kB, failcnt 12693 [ 1708.734352] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1708.741181] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1708.751458] Memory cgroup stats for /syz1: cache:0KB rss:257100KB rss_huge:227328KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:8KB active_anon:257212KB inactive_file:4KB active_file:0KB unevictable:0KB [ 1708.781042] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=14515,uid=0 [ 1708.796022] Memory cgroup out of memory: Kill process 14515 (syz-executor.1) score 139 or sacrifice child [ 1708.805974] Killed process 14515 (syz-executor.1) total-vm:72844kB, anon-rss:7756kB, file-rss:34944kB, shmem-rss:0kB 14:22:59 executing program 1: r0 = perf_event_open(&(0x7f0000000300)={0x400000001, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f000094f000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) r1 = dup3(r0, r0, 0x80000) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0x100000073) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_GET(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x60, r4, 0x2, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}]}, @TIPC_NLA_BEARER={0x30, 0x1, [@TIPC_NLA_BEARER_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0x10) read(r2, &(0x7f0000000200)=""/250, 0x50c7e3e3) exit_group(0x2) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="2b721e8d508a9c646d61202f696f202d637075202f6d656d810000000070696473202d"], 0x23) 14:22:59 executing program 3: syz_emit_ethernet(0x140, &(0x7f0000000000)={@local, @random="8a37962a294f", [], {@ipv6={0x86dd, {0x8060000, 0x6, "110c11", 0x30, 0x21, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x6, [], {0x0, 0x6, "cb155d", 0x0, 0x0, 0x0, @mcast2, @dev}}}}}}}, 0x0) 14:22:59 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee4050c00000f0000008bc36f7d79ce3263dac37b7403242189c609", 0x23}], 0x1}, 0x0) 14:22:59 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000bd7000)={&(0x7f0000c07e98)=ANY=[@ANYBLOB="000000000000000000000000000000000000000033000000ffffffff000000000000000000000000000000000000000000000000000000000000000000294900000000000000000000000000000000000000000000f0ffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020001007d00000000000000480001006d64350000000000000000000019000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000"], 0x1}}, 0x0) 14:22:59 executing program 2: syz_emit_ethernet(0x140, &(0x7f0000000000)={@local, @random="8a37962a294f", [], {@ipv6={0x86dd, {0x32010000, 0x6, "110c11", 0x30, 0x21, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x6, [], {0x41, 0x6, "cb155d", 0x0, 0x0, 0x0, @mcast2, @dev}}}}}}}, 0x0) 14:22:59 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000000)=[{0x80000006}]}, 0x10) r1 = socket$pppoe(0x18, 0x1, 0x0) r2 = dup2(r0, r0) ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r2, 0x800455d1, &(0x7f00000000c0)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x0, 0x0) write$FUSE_DIRENT(r4, &(0x7f0000000180)=ANY=[@ANYBLOB="b80000000000000005000000000000000300000000000000000000000000000002000000ff0300006c6f00000001000004000000000000008b4c0000000000002dffffff02000000626174615bd939670a93664b1f9789c9918916d1f04d33647630e7e7d911fdf2a5006b2ac50000000300000000000000010000000000000008000000010000006261746164763000050000000000000000100000000000000b0000002e9d000070707031656d31656d30400000000000"], 0xb8) connect$pppoe(r1, &(0x7f0000000040)={0x18, 0x0, {0x0, @local, 'batadv0\x00'}}, 0x1e) sendmmsg(r1, &(0x7f0000005b40), 0x40000000000014d, 0x0) [ 1708.825221] oom_reaper: reaped process 14515 (syz-executor.1), now anon-rss:0kB, file-rss:34832kB, shmem-rss:0kB [ 1708.896017] netlink: 7 bytes leftover after parsing attributes in process `syz-executor.4'. 14:22:59 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000bd7000)={&(0x7f0000c07e98)=ANY=[@ANYBLOB="000000000000000000000000000000000000000033000000ffffffff0000000000000000000000000000000000000000000000000000000000000000002949000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020001007d00000000000000480001006d64350000000000000000000019000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000"], 0x1}}, 0x0) 14:22:59 executing program 3: syz_emit_ethernet(0x140, &(0x7f0000000000)={@local, @random="8a37962a294f", [], {@ipv6={0x86dd, {0x9000000, 0x6, "110c11", 0x30, 0x21, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x6, [], {0x0, 0x6, "cb155d", 0x0, 0x0, 0x0, @mcast2, @dev}}}}}}}, 0x0) 14:22:59 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee4050c00000f0000008bc36f7d79ce3263dac37b7403242189c609", 0x23}], 0x1}, 0x0) 14:22:59 executing program 2: syz_emit_ethernet(0x140, &(0x7f0000000000)={@local, @random="8a37962a294f", [], {@ipv6={0x86dd, {0x3f000000, 0x6, "110c11", 0x30, 0x21, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x6, [], {0x41, 0x6, "cb155d", 0x0, 0x0, 0x0, @mcast2, @dev}}}}}}}, 0x0) 14:22:59 executing program 0: r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vfio/vfio\x00', 0x200000, 0x0) mmap$perf(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4, 0x11, r0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000000)=[{0x80000006}]}, 0x10) r2 = socket$pppoe(0x18, 0x1, 0x0) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vsock\x00', 0x246000, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) connect$pppoe(r2, &(0x7f0000000040)={0x18, 0x0, {0x2, @local, 'batadv0\x00'}}, 0x1e) sendmmsg(r2, &(0x7f0000005b40), 0x40000000000014d, 0x0) r6 = getpgid(0xffffffffffffffff) r7 = getpid() fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) stat(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000240)=0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000280)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@loopback}}, &(0x7f0000000380)=0xe8) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000021c0)={0x0, 0x0}, &(0x7f0000002200)=0xc) r13 = fcntl$getown(r4, 0x9) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000002780)={0x0, r5, 0x0, 0x5, &(0x7f0000002740)='user\x00', 0xffffffffffffffff}, 0x30) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000002980)={0x0}, &(0x7f00000029c0)=0xc) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000002a00)={0x0, 0x0}, &(0x7f0000002a40)=0xc) r17 = getegid() getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000002a80)={0x0}, &(0x7f0000002ac0)=0xc) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000002b00)={{{@in6=@initdev, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@empty}}, &(0x7f0000002c00)=0xe8) lstat(&(0x7f0000002c40)='./file0\x00', &(0x7f0000002c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000002d40)={0x0, r0, 0x0, 0xb, &(0x7f0000002d00)='/dev/vsock\x00'}, 0x30) getresuid(&(0x7f0000002d80), &(0x7f0000002dc0)=0x0, &(0x7f0000002e00)) r23 = getegid() r24 = gettid() fstat(r3, &(0x7f0000002e40)={0x0, 0x0, 0x0, 0x0, 0x0}) r26 = getegid() r27 = getpgrp(0x0) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000002ec0)={{{@in6=@mcast2, @in6=@ipv4={[], [], @remote}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@initdev}}, &(0x7f0000002fc0)=0xe8) r29 = getegid() sendmsg$netlink(r0, &(0x7f00000030c0)={&(0x7f0000000100)=@kern={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000002900)=[{&(0x7f00000003c0)={0x8fc, 0x3f, 0x0, 0x70bd27, 0x25dfdbfc, "", [@generic="075ef3c1a5b463817dfe12cc9ca36ed63754edad1d45cd80e8573e5a229f731085507de045b9a5d66a4ec998bf", @generic="9d829b05c963615155e80d2e4d4e59be2bda65395d64e9fa0a681a8fd3c5b0d9f6f5e4998895e51d665f711cd374ef67dbdcb5aa9e21db4a2ce898d29deca751d9e68b87462c292fc7af3658755cc9f5b3f30cb328bcc1089a772c4b7bfad93fc34f534ccc197ca688f4e329dba6e8376a281436259a3e780c1c25cce7f3e9762f42a2bc68efd3d6f3c4573cdf6784e3f412ad9827c044fd4a2f016c581ea910e330c169040ce813f35c37d645dfb94059d78c3436f5d41b91a5", @nested={0x444, 0x55, [@typed={0x8, 0x62, @pid=r6}, @typed={0xc0, 0x70, @binary="80e014d264eb3297e7639cf7eb239193ce3f52c9ed83f931cf4a1f54d7372a96444c74aac472c444523a0fbbab78dda33047079abeaa3d87002ebf73a0db248ad4f892e85e12cf5aeaad68331b9c4e59f1ae8fb478634d6476e630127e7d2d1a1507d0ec24d9022b134d951a936076a04a7af63f5d36dbf3a5980d1e5281ec25723252b1c71971c88de0dd639d0a08bacafea525c0f047e8d4c18523ce8ca81a312fb87eab3ddc7b519df389eb463d3e70e5517eb3a751c0c0de"}, @generic="b43c7b2c872e9ceda361f0bde4da9b62eebe4ba8f00038afad821da4cf5633e1f57c7fef533beff73552d5f31a1b4b1e2bc204e97284a910664a34a355cb65da6faeda401a7d6fc515e9c0278ab63f23585efec6f24a046b7ea5b5d30ae5b2c0170f9c1a3fb21c92f1e62b8888f82aee1c7399cb931aee5dced8aeb4e6331b3554cad010c597e288ebb29c7ac2d373d62159229ca0943657344a244898cbad019b85a6974cd02e2888e89ee2562be9b855e77ce3aec69633df7784c61817f97be5b55eae79c844991b62b659def671084d", @typed={0x6c, 0x3e, @binary="ad26697249bb71672be6d1191527cc239e7f60a6ff19b891b303cca526fc16c306d8e320b21a0ded75c95bad48a95a45cc740600bada4fb4a8770329762d67b1440ab0f3170876b22fd2cca621e717ab31daf5f0715a0299a4bc3a2ed86e659577af830a1ef41e"}, @typed={0xe8, 0x18, @binary="3b7c8caad8b9dedbad739b18d5f81a81908ec328374cbb359c372abdabd87c420841db87dba8b599c211fb22e1046c7262c4e4f671d4db82aeffc3e897210031a459e393856340e658ffa5fb6ac69b89a0cfbb9776dcd903b073f92189cb3287e58fb6d1932f53e5ea16bdb221bab7e801ab0321e2eb2cc858588b09f823c9bed5d4c2715989e6a6b51486efd7a363e41851974d2cd75f4dd1eb632a32fbfb14155a840f98146215ba9b497c638c420acf91de242d33ce9984f0f17f282729109cf2778029bb58686c08b8e4249d00ded9925982a7ffc2e6fb29cb43e7f5f49221"}, @typed={0x8, 0x1b, @pid=r7}, @generic="1a7433c85d3be66cb5e9b6326a396e505c338e6caca5059380b41b3b26354e40e753e5660a49613f7ac6b5fe5b2cf0b2e782f4ac35d5e7d740c87c4c983b22d1045b9809d5b1093175b6f8868daee20fb975be4d0758102a33cbc555fc0a3453425fa35b63c8c4bbe52aee2540e0f314f674a2cb4db4de78c73f9f3c6d", @generic="e12f4a929807a8af984c4240e02c9920957cb7c0e346b659e1a6d8b0f2f109173c299aab3e989c71a1731d25b88c28b9a74e7300e207429875564393dfc35b20943eacafe6e9c4d265016e9936b94a340ba9177c5f1a24d0f6acee4227956e5d368869d130b0a1d446daf6dfd54b9ba70dfd3fc5ec138b6c534ea31bfb94b7096f87ee2783ed0eb5638d6e6bcd5dfddd36ac2737940361e28278f08f168bec895d4aa857c85aedafeec6808f4226f029909bfc5d6a33c08ea62b0bbfae4f44f9289ab2c779dcf7ceeeebfa5741"]}, @nested={0x28c, 0x75, [@generic="960b2da70a97ccd72d40d1e49ff386038590ad00d288b50c0c213b50cfffe19ab3ffac7fb403092a60b2aa3f03787289504481a77d491f2b7697c90ca4942989b304bea404c5230bf570fe65bfa72f4d7be1d77c09d6858f7a7d10f2aae49307383cfdbef474239e9680512473db29cb64a7de28229595", @generic="2497c5a39be58c1de9704439da2c2038716fd5eb231cf4c06bc316ea06c7e61c2e1fe5b6a07977a9bf0e316c99c77f6d4b11b0503ebd674e63b8757fa34f1ed29da8c3cc6a7141a6973efdab812a110545ac2785828a0aac898d828e0c1544b6b21460803e114cefa45a229ca897295281f7873577a8849bbd2d2dfd4e64bc694b87bf0673609eda59b1550507c7f106665d912a7040614d3d98e078e7290abcad7e89a58707b7a1ccd33521c99c60f287459a303e5b6168fd08aba5b5f0ad555ee015ea4fb352cd901ae2a01a24860fa09ebeaec59f40ac8b4b52e7d4dc81b3be05becfd1621940", @typed={0x8, 0x4e, @pid=r8}, @typed={0x8, 0x18, @uid=r9}, @typed={0x8, 0x20, @pid=r10}, @generic="705eb5200243f180c86db7822841ed95cf779b59264016f36d2d18f2e8b314abe1427cd1a0378ecb818491879fd072b040cdf747e08dd32981a5c64b567837f8efb122f0eb429dad88e2c5025585ec42ce7aa6bd44b69568176d0b12a1caf627b6b9c1e506bdebab91ce74cdbcd7ed0d46260f52e33d74193efa61f30df2b852dc5324cc024573b31475d9775576cd38310ffa254a59375c4ff1785bbfe4876c28ac58f09fde8a5f1cd8bc0cb83e9f4d25d1a38f1deec28664e5a248265caa6e5395e31fbf021c52985df944", @typed={0x3c, 0x1b, @binary="e92a6fa8739b095278dea71640a812e8ccbd784f184cdba5348caa6195e09eda0ee7a61f50c8f60738f074628fc0ea4fe0a73db7fbe5"}, @typed={0x8, 0x3f, @uid=r11}]}, @nested={0x134, 0xc, [@typed={0x8, 0x38, @ipv4=@empty}, @generic, @typed={0x14, 0x2c, @ipv6=@mcast1}, @typed={0x8, 0x21, @u32=0xc2e1}, @typed={0x60, 0x0, @binary="e02c396434258f8954559bdf3ffe7e854b43d2917df442b9c56580e47d179f41df5fe130e246fb25c875f61789a165719354aca3bd74abb954d727f003437f449a55a9a6545b48d6e6dcde306c5718f8ff7ad7aa570ff528e4"}, @generic="8888aae807340eca48cabfcad12203804b8b", @generic="772b25d7aa28716f0ad9b1f76abb75e753bbf699bf3e2a9d8d3a67ff2e73c5a68c02af0525e9af8564cd166837b3c43cc64a649d6b039eadfb87cd48f2011e6fcfb75e039e9b98752ee2f0c4bb89e027f3ab74d80bf50d07f1325e33c84f3f3e95773c88dd899a6f01b37a619ffb4a26be6462421dd8bd994ee2d5ee2c16a90171269d6caa52273984f0c2a76862fd23ec580d809bb7900e92b9"]}]}, 0x8fc}, {&(0x7f0000000cc0)={0x12ec, 0x1c, 0x200, 0x70bd25, 0x25dfdbfb, "", [@nested={0x12dc, 0x8b, [@generic="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", @typed={0x8, 0x88, @u32=0xd22}, @generic="63cce002dfe1d18d430721674add97674c20817121ab55cec8c46429988ecb8e9c4ae6769152b0493a151289d1791f0704875ea0c696b59493d48f061a99b83543e0fc5a032cef0d55ef76843b938b93d101fced0630d4b3dcfa4faa6e279fd51bd5f6e7c915dc46f902762db0fe183c803d9fac06b892ea48503ac0d459d52d7a27f569054163c7833ec74e6e17a0b1982e6d293fe3ead8a265a8610ed3c264ff0b664f3cc075a03ed2eccf5b4b095151798c3c881774be25af33b53fd2a4f0f8d23e54af40c51cb075e3c65357f289829afd96c59739b3732007f58d31f0f3f0", @generic="197de6464383a9a2b6528fd60a814fdcb6ab95834256da4639cf6373ef5bb85d3a74fd83069d5d09c2990c5c7d42f0b304bab60bbdd1f45f6a555e9e856e53cc7f415e416dd166b1b7267bdbad14a3342f72daa3aa99766b124c3ce88c744cba1b6f06d263029f3231373b588f3556f0b4181cfda8cda48ee2f1f3d35a1e02fc7ed5157f8fc2a097b8bf266acb7d6a731e6e667ea52bffc18d0e3dd10a124bf85aac1d892d710be5af3e82aa1acb9a", @typed={0x8, 0x75, @ipv4=@broadcast}, @generic="bc88e6e3723d4d5160a543d4fe04e2b08a5bf88a98c02f910567368ac2d3015451c7a4109190c99153fd6d10f010a519b6f5b1b24d710c432933b27fa080450fd75d549b23b8895774fbcb70fbec283b6096e9c4e616", @generic="35fcecfc50435262379e2843eb6f53c61073a58579a82c05a6af11e8f3a8399f41c4c87a80be2accdec4dd30c611aaaea665338e900841068a250b3a4a8691bd251ac759f83bc61038318e918686946d89c0e315fb8684f77c462b79b484faa29fd73d43189e24703836d186a66005c934ef6b79583ff4db9024a7d3a3dd44f4eb3925844dc3b4b1f3fbc6cfb8a093b8b4d13aad16415968b2128f0f41b15ebd77257f6873c68a17269d6d0913c53d1a3cba96b2401bba53aa8f17b8251948a10a146b74d320b7a672240d67deba3208321734a2ff543ff3fdce5da37cd919"]}]}, 0x12ec}, {&(0x7f0000001fc0)={0x1d4, 0x30, 0x401, 0x70bd2b, 0x25dfdbfd, "", [@nested={0x1c4, 0x3a, [@generic="3987541746ae9048f54ea2bddf9fbfb59c02101f877c50454975717b6b5956f0d705a41e1c66951cba0303582863a45c17e43931b1a433972382806f1eb6a4a2f2818e0a3b5fdc6d562f02bc15edefdd2314c8dc6eb3c3904789eae13d54b7ba29fcba2157ab61704a9f96e115233df187916431f9289f45ca18deae47a80f66051511afaba5a35fa160fbd857e6236ea072623a0923c71e7795a2b5a522ce8195e2a5b3fdefa85cba", @generic="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", @typed={0x14, 0x3, @ipv6=@ipv4={[], [], @local}}, @typed={0x8, 0x16, @fd=r1}]}]}, 0x1d4}, {&(0x7f0000002240)={0x148, 0x1f, 0x407, 0x70bd27, 0x25dfdbfd, "", [@typed={0x8, 0x44, @uid=r12}, @nested={0x130, 0x2a, [@generic="2f93fb808b7b9d358f1beec5a9ae1edcc4ccb7e8b3a9a14a259c218c96b1db52703797f152e153cd1f7f6078efbb725ee1bb9d476b0f22b9562d5345f4980687b57391db53b583c26e8f3a83371b488f707f6191d9b1b4120d4e211bd08041275f576103b369b135d9b3f00b3e27a3be7a6a214adedd3da553f053c1f8382ee0f460f2c664351851f0caedb70bf680b0", @generic="9bdd0ea6cb3e96e22eb132c32c5a993cf9006698c9bd047684885a4e6605df57eee9a67744f03a33f2b546778c0b3af997710961f2c01c06ae6716deb1e277c01eda46fd1219ba284f6b8000a81d2dea37b48c81d3ae4e825f62217c03df687296e61f114a61df89566ba6eceb870cfb5757b9494acfba847b", @typed={0xc, 0x44, @u64=0x3}, @typed={0x10, 0x4c, @str='security!$\x00'}, @typed={0x4, 0x78}]}]}, 0x148}, {&(0x7f00000023c0)={0x368, 0x17, 0x100, 0x70bd2a, 0x25dfdbff, "", [@generic="40bf5d9fe60ffccc451c1e2b67cc9e53249b39ca53dce5b304af17c93dd0e5987e7d924da2db3d56823f20ee20", @nested={0x1f4, 0x28, [@typed={0x8, 0x3d, @pid=r13}, @typed={0xc, 0x93, @u64=0x912}, @generic="58ddd0643d1cf56744558a55497a4a9e4f6691377f566efbd298dfc0fa2ed3f3660a95ecb10cc7b02dd224f78abae890edbc67d8ddcf293e74ab6981a8db7e124c663f3b791e7a9a5ee42e552a26a9325e83571b45d0fb401330b81534585582568fa333f751a2353142a5f8b35394342585d19f958fcbf30db2da9331ff0aa6d1f0baf9d61dd0ee60ffb18a890bdd2cee446785161ce6b425acc5809a2946ef790635d4db732a0afb705d98bb72fdefcd2d4c1c842a56cfc3a66e8f41ba4df362502f770b7061442ec706d1ce962ab5c0a10add5e4deae9464c793c954d416536baadb589a185aa6a2548eeb849c82130", @generic="eb4cd0c92233ca7ad42bc7c7a79abab150b410c24158bf6809de22582f80808fdfa83d3f4621922fa83acd0c968794722bdf49355f08b131b0c51b8bff5d8a4642f485628d3b78ef36219c16411f7f9332760b223eda44323ead51039aa7b4a54059766984055c724665599be8a4fae32780c993b21d91abd6505e03ea6c6d55166f12c10f7840b8126e7be49fa5867abcc37a02a89933ad417f826909f26cbed83e9066d58010fbec689433979531530c22183d0cdff5104f54aec1f8a8350dff45c375b3eb193383", @typed={0x20, 0x6c, @binary="27490ac3f55e4d8838401f737fd4e233e58dfc238748383b3d"}]}, @typed={0x4, 0x7d}, @generic="8de414107a6acd509ffee26d464f70457268d15bcc95684fe9a53bf8661bcb36f37ca390f6764608d73146af07f0aefe12dc81837a96c960b21ec97cefb3c55cc266fbf6b9f98b526bbe4ebd865738d856b57a3d0778f5025695e2f7b78fcb0fdc42f103fa31", @generic="648b9eaae06b0bf1c236c1babe0e5aa6ec9103a90179dc7a39967b9c2c91dd8bd9a944c50d7f591f61de203f933470ca72fafe68a0067e6349e502eeae111adc88c092cecf482ee6dd52d9ef4a03d53b21959bf3b7eeb1762308622c6dc5f52968a4d704519cdb2c5ea27bf5b859e3cd", @generic="9aaa4bea03d863da26d9239df4f568f35929fb18499da4d094e53e87ac9226642a825846bd29594b95853033582af589bea97f4e41000f1f0bebc8660b11fcd23a739c8cc99dbfa11e7203f891a4f32f5bb64a424264dee7bfbd7d"]}, 0x368}, {&(0x7f00000027c0)={0x11c, 0x1f, 0x1, 0x70bd28, 0x25dfdbfc, "", [@typed={0xc, 0x89, @u64=0x9}, @typed={0x8, 0x60, @str='+\\/\x00'}, @nested={0xc, 0x1, [@typed={0x8, 0x6a, @pid=r14}]}, @generic="0f1140871f9ab0d9540841c9f3445889dac32d7583ee6e3f53bb5df4a7751ba07b318498b2d1d8f6ed9b1549fe71cb7ac7a8c271bef1f29c70638b6df812f53c01fcfa4031c5a6c7536682c00dd1df7477d1fc4c96b9f1882d0aa614f6397315275afcc0b3ab53df419758757b4083add9b68266de8c4e87c484d3f705fcea3287214b85e1e523b0b7e6ea2836f956df2d2c6f7a29ca172497c374bce104600fa999ee315007fff3cfa0d67d8610b4914502792c10ee5ffa7466102e2ee178ee21ccc05d52df6a95fd52d9c88a2d16127ac4c46a883ef90221492a8b5cc80b5afe8fd37d2873d76c1d7a0bd1"]}, 0x11c}], 0x6, &(0x7f0000003000)=[@cred={0x20, 0x1, 0x2, r15, r16, r17}, @cred={0x20, 0x1, 0x2, r18, r19, r20}, @cred={0x20, 0x1, 0x2, r21, r22, r23}, @cred={0x20, 0x1, 0x2, r24, r25, r26}, @cred={0x20, 0x1, 0x2, r27, r28, r29}], 0xa0, 0x20000080}, 0x4010) [ 1709.057625] netlink: 7 bytes leftover after parsing attributes in process `syz-executor.4'. 14:22:59 executing program 3: syz_emit_ethernet(0x140, &(0x7f0000000000)={@local, @random="8a37962a294f", [], {@ipv6={0x86dd, {0xd000000, 0x6, "110c11", 0x30, 0x21, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x6, [], {0x0, 0x6, "cb155d", 0x0, 0x0, 0x0, @mcast2, @dev}}}}}}}, 0x0) 14:22:59 executing program 1: r0 = socket$tipc(0x1e, 0x7, 0x0) mmap(&(0x7f000094f000/0x2000)=nil, 0x2000, 0x2000004, 0x40010, r0, 0x0) r1 = perf_event_open(&(0x7f0000000300)={0x400000001, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f000094f000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffff9c, 0xc00c642d, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0x100000073) read(r2, &(0x7f0000000200)=""/250, 0x50c7e3e3) 14:22:59 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000bd7000)={&(0x7f0000c07e98)=ANY=[@ANYBLOB="000000000000000000000000000000000000000033000000ffffffff0000000000000000000000000000000000000000000000000000000000000000002949000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020001007d00000000000000480001006d64350000000000000000000019000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000"], 0x1}}, 0x0) 14:22:59 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee4050c00000f0000008bc36f7d79ce3263dac37b7403242189c609", 0x23}], 0x1}, 0x0) 14:22:59 executing program 2: syz_emit_ethernet(0x140, &(0x7f0000000000)={@local, @random="8a37962a294f", [], {@ipv6={0x86dd, {0x40000000, 0x6, "110c11", 0x30, 0x21, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x6, [], {0x41, 0x6, "cb155d", 0x0, 0x0, 0x0, @mcast2, @dev}}}}}}}, 0x0) [ 1709.303526] netlink: 7 bytes leftover after parsing attributes in process `syz-executor.4'. 14:22:59 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000bd7000)={&(0x7f0000c07e98)=ANY=[@ANYBLOB="000000000000000000000000000000000000000033000000ffffffff0000000000000000000000000000000000000000000000000000000000000000002949000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020001007d00000000000000480001006d64350000000000000000000019000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000"], 0x1}}, 0x0) 14:22:59 executing program 3: syz_emit_ethernet(0x140, &(0x7f0000000000)={@local, @random="8a37962a294f", [], {@ipv6={0x86dd, {0x20000000, 0x6, "110c11", 0x30, 0x21, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x6, [], {0x0, 0x6, "cb155d", 0x0, 0x0, 0x0, @mcast2, @dev}}}}}}}, 0x0) [ 1709.348747] netlink: 7 bytes leftover after parsing attributes in process `syz-executor.4'. 14:22:59 executing program 2: syz_emit_ethernet(0x140, &(0x7f0000000000)={@local, @random="8a37962a294f", [], {@ipv6={0x86dd, {0x43050000, 0x6, "110c11", 0x30, 0x21, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x6, [], {0x41, 0x6, "cb155d", 0x0, 0x0, 0x0, @mcast2, @dev}}}}}}}, 0x0) 14:22:59 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee4050c00000f0000008bc36f7d79ce3263dac37b7403242189c609", 0x23}], 0x1}, 0x0) 14:23:00 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000bd7000)={&(0x7f0000c07e98)=ANY=[@ANYBLOB="000000000000000000000000000000000000000033000000ffffffff000000000000000000000000000000000000000000000000000000000000000000294900000000000000000000000000000000000000000000f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020001007d00000000000000480001006d64350000000000000000000019000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000"], 0x1}}, 0x0) 14:23:00 executing program 3: syz_emit_ethernet(0x140, &(0x7f0000000000)={@local, @random="8a37962a294f", [], {@ipv6={0x86dd, {0x21000000, 0x6, "110c11", 0x30, 0x21, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x6, [], {0x0, 0x6, "cb155d", 0x0, 0x0, 0x0, @mcast2, @dev}}}}}}}, 0x0) [ 1709.523746] netlink: 7 bytes leftover after parsing attributes in process `syz-executor.4'. 14:23:00 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x80000006}]}, 0x4fbcf4d20f5d758e) r1 = socket$pppoe(0x18, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) connect$pppoe(r1, &(0x7f0000000040)={0x18, 0x0, {0x2, @local, 'batadv0\x00'}}, 0x1e) sendmmsg(r1, &(0x7f0000005b40), 0x40000000000014d, 0x0) 14:23:00 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee4050c00000f0000008bc36f7d79ce3263dac37b7403242189c609", 0x23}], 0x1}, 0x0) [ 1709.733613] netlink: 7 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1709.856644] syz-executor.1 invoked oom-killer: gfp_mask=0x7200c2(GFP_HIGHUSER|__GFP_ACCOUNT), order=0, oom_score_adj=0 [ 1709.867800] CPU: 1 PID: 14582 Comm: syz-executor.1 Not tainted 5.0.0-rc6+ #70 [ 1709.875115] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1709.884486] Call Trace: [ 1709.887082] dump_stack+0x172/0x1f0 [ 1709.890708] dump_header+0x10f/0xb6c [ 1709.894459] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1709.899572] ? ___ratelimit+0x60/0x595 [ 1709.903459] ? do_raw_spin_unlock+0x57/0x270 [ 1709.907874] oom_kill_process.cold+0x10/0x6f5 [ 1709.912372] ? task_will_free_mem+0x139/0x6e0 [ 1709.916896] out_of_memory+0x79a/0x1280 [ 1709.920897] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1709.926017] ? oom_killer_disable+0x280/0x280 [ 1709.930505] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1709.935621] mem_cgroup_out_of_memory+0x99/0xe0 [ 1709.940314] ? memcg_memory_event+0x40/0x40 [ 1709.944652] ? _raw_spin_unlock+0x2d/0x50 [ 1709.948801] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1709.953933] try_charge+0xfec/0x1570 [ 1709.957659] ? find_held_lock+0x35/0x130 [ 1709.961727] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1709.966566] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 1709.971411] ? find_held_lock+0x35/0x130 [ 1709.975495] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 1709.980345] memcg_kmem_charge_memcg+0x7c/0x130 [ 1709.985009] ? memcg_kmem_put_cache+0xb0/0xb0 [ 1709.989512] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 1709.994364] memcg_kmem_charge+0x13b/0x340 [ 1709.998630] __alloc_pages_nodemask+0x437/0x710 [ 1710.003321] ? __alloc_pages_slowpath+0x2900/0x2900 [ 1710.008351] ? ___might_sleep+0x163/0x280 [ 1710.012513] ? copyin+0xb5/0x100 [ 1710.015903] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1710.021467] alloc_pages_current+0x107/0x210 [ 1710.025896] pipe_write+0xa65/0xfb0 [ 1710.029529] __vfs_write+0x613/0x8e0 [ 1710.033271] ? kernel_read+0x120/0x120 [ 1710.037174] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1710.042766] ? rw_verify_area+0x118/0x360 [ 1710.046938] vfs_write+0x20c/0x580 [ 1710.050516] ksys_write+0xea/0x1f0 [ 1710.054097] ? __ia32_sys_read+0xb0/0xb0 [ 1710.058184] ? do_syscall_64+0x26/0x610 [ 1710.062182] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1710.067538] ? do_syscall_64+0x26/0x610 [ 1710.071509] __x64_sys_write+0x73/0xb0 [ 1710.075406] do_syscall_64+0x103/0x610 [ 1710.079324] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1710.084521] RIP: 0033:0x457e29 [ 1710.087727] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1710.106649] RSP: 002b:00007fd8c7971c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1710.114376] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457e29 [ 1710.121645] RDX: 0000000100000073 RSI: 00000000200001c0 RDI: 0000000000000005 [ 1710.128907] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1710.136178] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd8c79726d4 [ 1710.143451] R13: 00000000004c3be0 R14: 00000000004dc3d0 R15: 00000000ffffffff [ 1710.152174] memory: usage 307200kB, limit 307200kB, failcnt 12789 [ 1710.159005] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1710.166598] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1710.173503] Memory cgroup stats for /syz1: cache:0KB rss:257076KB rss_huge:227328KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:8KB active_anon:257204KB inactive_file:0KB active_file:4KB unevictable:0KB [ 1710.194786] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=14578,uid=0 [ 1710.220924] Memory cgroup out of memory: Kill process 14578 (syz-executor.1) score 139 or sacrifice child [ 1710.232605] Killed process 14578 (syz-executor.1) total-vm:72712kB, anon-rss:7756kB, file-rss:34944kB, shmem-rss:0kB 14:23:00 executing program 1: r0 = perf_event_open(&(0x7f0000000300)={0x400000001, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f000094f000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x0, 0x0) pipe(&(0x7f0000000040)) lsetxattr$trusted_overlay_redirect(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='trusted.overlay.redirect\x00', &(0x7f0000000100)='./file0\x00', 0x8, 0x1) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) write(0xffffffffffffffff, &(0x7f00000001c0), 0x100000073) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e3e3) 14:23:00 executing program 2: syz_emit_ethernet(0x140, &(0x7f0000000000)={@local, @random="8a37962a294f", [], {@ipv6={0x86dd, {0x60000000, 0x6, "110c11", 0x30, 0x21, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x6, [], {0x41, 0x6, "cb155d", 0x0, 0x0, 0x0, @mcast2, @dev}}}}}}}, 0x0) 14:23:00 executing program 3: syz_emit_ethernet(0x140, &(0x7f0000000000)={@local, @random="8a37962a294f", [], {@ipv6={0x86dd, {0x28000000, 0x6, "110c11", 0x30, 0x21, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x6, [], {0x0, 0x6, "cb155d", 0x0, 0x0, 0x0, @mcast2, @dev}}}}}}}, 0x0) 14:23:00 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000bd7000)={&(0x7f0000c07e98)=ANY=[@ANYBLOB="000000000000000000000000000000000000000033000000ffffffff0000000000000000000000000000000000000000000000000000000000000000002949000000000000000000000000000000000000000000007115000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020001007d00000000000000480001006d64350000000000000000000019000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000"], 0x1}}, 0x0) 14:23:00 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee4050c00000f0000008bc36f7d79ce3263dac37b7403242189c609", 0x23}], 0x1}, 0x0) 14:23:00 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000000)=[{0x80000006}]}, 0x10) r1 = socket$pppoe(0x18, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bind$bt_sco(r4, &(0x7f0000000100)={0x1f, {0x8, 0x258, 0x4, 0x1f, 0x0, 0xd5}}, 0x8) getsockopt$TIPC_SOCK_RECVQ_DEPTH(r3, 0x10f, 0x84, &(0x7f0000000140), &(0x7f0000000180)=0x4) ioctl$KVM_TPR_ACCESS_REPORTING(r3, 0xc028ae92, &(0x7f00000000c0)={0x7, 0x6}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_SET_RELBIT(r3, 0x40045566, 0x9) connect$pppoe(r1, &(0x7f0000000040)={0x18, 0x0, {0x2, @local, 'batadv0\x00'}}, 0x1e) getsockopt$IPT_SO_GET_INFO(r4, 0x0, 0x40, &(0x7f00000001c0)={'raw\x00'}, &(0x7f0000000240)=0x54) sendmmsg(r1, &(0x7f0000005b40), 0x40000000000014d, 0x0) [ 1710.254942] oom_reaper: reaped process 14578 (syz-executor.1), now anon-rss:0kB, file-rss:34832kB, shmem-rss:0kB 14:23:00 executing program 2: syz_emit_ethernet(0x140, &(0x7f0000000000)={@local, @random="8a37962a294f", [], {@ipv6={0x86dd, {0x6b6b6b00, 0x6, "110c11", 0x30, 0x21, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x6, [], {0x41, 0x6, "cb155d", 0x0, 0x0, 0x0, @mcast2, @dev}}}}}}}, 0x0) 14:23:00 executing program 3: syz_emit_ethernet(0x140, &(0x7f0000000000)={@local, @random="8a37962a294f", [], {@ipv6={0x86dd, {0x32010000, 0x6, "110c11", 0x30, 0x21, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x6, [], {0x0, 0x6, "cb155d", 0x0, 0x0, 0x0, @mcast2, @dev}}}}}}}, 0x0) [ 1710.339967] netlink: 7 bytes leftover after parsing attributes in process `syz-executor.4'. 14:23:00 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000bd7000)={&(0x7f0000c07e98)=ANY=[@ANYBLOB="000000000000000000000000000000000000000033000000ffffffff0000000000000000000000000000000000000000000000000000000000000000002949000000000000000000000000000000000000000000001571000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020001007d00000000000000480001006d64350000000000000000000019000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000"], 0x1}}, 0x0) 14:23:01 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee4050c00000f0000008bc36f7d79ce3263dac37b7403242189c609", 0x23}], 0x1}, 0x0) 14:23:01 executing program 1: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x800, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000040), &(0x7f00000000c0)=0x4) r1 = perf_event_open(&(0x7f0000000300)={0x400000001, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f000094f000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffff9c, 0xc00c642d, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0x100000073) read(r2, &(0x7f0000000200)=""/250, 0x50c7e3e3) 14:23:01 executing program 3: syz_emit_ethernet(0x140, &(0x7f0000000000)={@local, @random="8a37962a294f", [], {@ipv6={0x86dd, {0x40000000, 0x6, "110c11", 0x30, 0x21, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x6, [], {0x0, 0x6, "cb155d", 0x0, 0x0, 0x0, @mcast2, @dev}}}}}}}, 0x0) 14:23:01 executing program 2: syz_emit_ethernet(0x140, &(0x7f0000000000)={@local, @random="8a37962a294f", [], {@ipv6={0x86dd, {0x800e0000, 0x6, "110c11", 0x30, 0x21, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x6, [], {0x41, 0x6, "cb155d", 0x0, 0x0, 0x0, @mcast2, @dev}}}}}}}, 0x0) 14:23:01 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000bd7000)={&(0x7f0000c07e98)=ANY=[@ANYBLOB="000000000000000000000000000000000000000033000000ffffffff00000000000000000000000000000000000000000000000000000000000000000029490000000000000000000000000000000000000000000000f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020001007d00000000000000480001006d64350000000000000000000019000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000"], 0x1}}, 0x0) [ 1710.573638] netlink: 7 bytes leftover after parsing attributes in process `syz-executor.4'. 14:23:01 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee4050c00000f0000008bc36f7d79ce3263dac37b7403242189c609", 0x23}], 0x1}, 0x0) 14:23:01 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000000)=[{0x80000006}]}, 0x10) r1 = socket$pppoe(0x18, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0x8000000000002, @dev={[], 0x17}, 'batadv0\x00'}}, 0xfffffffffffffdbf) sendmmsg(r1, &(0x7f0000005b40), 0x40000000000014d, 0x0) 14:23:01 executing program 2: syz_emit_ethernet(0x140, &(0x7f0000000000)={@local, @random="8a37962a294f", [], {@ipv6={0x86dd, {0x80350000, 0x6, "110c11", 0x30, 0x21, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x6, [], {0x41, 0x6, "cb155d", 0x0, 0x0, 0x0, @mcast2, @dev}}}}}}}, 0x0) 14:23:01 executing program 3: syz_emit_ethernet(0x140, &(0x7f0000000000)={@local, @random="8a37962a294f", [], {@ipv6={0x86dd, {0x43050000, 0x6, "110c11", 0x30, 0x21, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x6, [], {0x0, 0x6, "cb155d", 0x0, 0x0, 0x0, @mcast2, @dev}}}}}}}, 0x0) 14:23:01 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000bd7000)={&(0x7f0000c07e98)=ANY=[@ANYBLOB="000000000000000000000000000000000000000033000000ffffffff000000000000000000000000000000000000000000000000000000000000000000294900000000000000000000000000000000000000000000fffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020001007d00000000000000480001006d64350000000000000000000019000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000"], 0x1}}, 0x0) [ 1710.828279] netlink: 7 bytes leftover after parsing attributes in process `syz-executor.4'. 14:23:01 executing program 2: syz_emit_ethernet(0x140, &(0x7f0000000000)={@local, @random="8a37962a294f", [], {@ipv6={0x86dd, {0x81000000, 0x6, "110c11", 0x30, 0x21, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x6, [], {0x41, 0x6, "cb155d", 0x0, 0x0, 0x0, @mcast2, @dev}}}}}}}, 0x0) 14:23:01 executing program 3: syz_emit_ethernet(0x140, &(0x7f0000000000)={@local, @random="8a37962a294f", [], {@ipv6={0x86dd, {0x60000000, 0x6, "110c11", 0x30, 0x21, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x6, [], {0x0, 0x6, "cb155d", 0x0, 0x0, 0x0, @mcast2, @dev}}}}}}}, 0x0) 14:23:01 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee4050c00000f0000008bc36f7d79ce3263dac37b7403242189c609", 0x23}], 0x1}, 0x0) [ 1711.162536] net_ratelimit: 76 callbacks suppressed [ 1711.162545] protocol 88fb is buggy, dev hsr_slave_0 [ 1711.162562] protocol 88fb is buggy, dev hsr_slave_0 [ 1711.167604] protocol 88fb is buggy, dev hsr_slave_1 [ 1711.172659] protocol 88fb is buggy, dev hsr_slave_1 [ 1711.177760] protocol 88fb is buggy, dev hsr_slave_0 [ 1711.192789] protocol 88fb is buggy, dev hsr_slave_1 [ 1711.197985] protocol 88fb is buggy, dev hsr_slave_0 [ 1711.203174] protocol 88fb is buggy, dev hsr_slave_1 [ 1711.208333] protocol 88fb is buggy, dev hsr_slave_0 [ 1711.213459] protocol 88fb is buggy, dev hsr_slave_1 [ 1711.249043] syz-executor.1 invoked oom-killer: gfp_mask=0x7200c2(GFP_HIGHUSER|__GFP_ACCOUNT), order=0, oom_score_adj=0 [ 1711.267887] CPU: 1 PID: 14644 Comm: syz-executor.1 Not tainted 5.0.0-rc6+ #70 [ 1711.275184] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1711.284556] Call Trace: [ 1711.287136] dump_stack+0x172/0x1f0 [ 1711.290750] dump_header+0x10f/0xb6c [ 1711.294451] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1711.299541] ? ___ratelimit+0x60/0x595 [ 1711.303434] ? do_raw_spin_unlock+0x57/0x270 [ 1711.307846] oom_kill_process.cold+0x10/0x6f5 [ 1711.312347] ? task_will_free_mem+0x139/0x6e0 [ 1711.316831] out_of_memory+0x79a/0x1280 [ 1711.320793] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1711.325883] ? oom_killer_disable+0x280/0x280 [ 1711.330365] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1711.335463] mem_cgroup_out_of_memory+0x99/0xe0 [ 1711.340123] ? memcg_memory_event+0x40/0x40 [ 1711.344453] ? _raw_spin_unlock+0x2d/0x50 [ 1711.348599] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1711.353702] try_charge+0xfec/0x1570 [ 1711.357401] ? find_held_lock+0x35/0x130 [ 1711.361448] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1711.366291] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 1711.371121] ? find_held_lock+0x35/0x130 [ 1711.375366] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 1711.380230] memcg_kmem_charge_memcg+0x7c/0x130 [ 1711.384886] ? memcg_kmem_put_cache+0xb0/0xb0 [ 1711.389367] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 1711.394195] memcg_kmem_charge+0x13b/0x340 [ 1711.398418] __alloc_pages_nodemask+0x437/0x710 [ 1711.403084] ? __alloc_pages_slowpath+0x2900/0x2900 [ 1711.408094] ? ___might_sleep+0x163/0x280 [ 1711.412255] ? copyin+0xb5/0x100 [ 1711.415609] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1711.421134] alloc_pages_current+0x107/0x210 [ 1711.425531] pipe_write+0xa65/0xfb0 [ 1711.429150] __vfs_write+0x613/0x8e0 [ 1711.432853] ? kernel_read+0x120/0x120 [ 1711.436727] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1711.442271] ? rw_verify_area+0x118/0x360 [ 1711.446409] vfs_write+0x20c/0x580 [ 1711.449943] ksys_write+0xea/0x1f0 [ 1711.453486] ? __ia32_sys_read+0xb0/0xb0 [ 1711.457541] ? do_syscall_64+0x26/0x610 [ 1711.461508] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1711.466889] ? do_syscall_64+0x26/0x610 [ 1711.470851] __x64_sys_write+0x73/0xb0 [ 1711.474726] do_syscall_64+0x103/0x610 [ 1711.478600] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1711.483776] RIP: 0033:0x457e29 [ 1711.486958] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1711.505846] RSP: 002b:00007fd8c7971c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1711.513549] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457e29 [ 1711.520805] RDX: 0000000100000073 RSI: 00000000200001c0 RDI: 0000000000000005 [ 1711.528060] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1711.535326] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd8c79726d4 [ 1711.542584] R13: 00000000004c3be0 R14: 00000000004dc3d0 R15: 00000000ffffffff [ 1711.550827] memory: usage 307200kB, limit 307200kB, failcnt 12858 [ 1711.557283] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1711.564377] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1711.570661] Memory cgroup stats for /syz1: cache:0KB rss:257096KB rss_huge:227328KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:8KB active_anon:257204KB inactive_file:0KB active_file:4KB unevictable:0KB [ 1711.591875] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=14642,uid=0 [ 1711.607237] Memory cgroup out of memory: Kill process 14642 (syz-executor.1) score 139 or sacrifice child 14:23:02 executing program 1: r0 = perf_event_open(&(0x7f0000000300)={0x400000001, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f000094f000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffff9c, 0xc00c642d, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0x100000073) recvfrom$rxrpc(r2, &(0x7f0000000040)=""/46, 0x2e, 0x0, &(0x7f0000000080)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e23, @empty}}, 0x24) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) 14:23:02 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000000)=[{0x80000006}]}, 0x10) r1 = socket$pppoe(0x18, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0x2, @local, 'batadv0\x00'}}, 0xfffffffffffffd57) r3 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/policy\x00', 0x0, 0x0) mq_notify(r3, &(0x7f0000000240)={0x0, 0x24, 0x2, @thr={&(0x7f0000000100)="90cfd3eb2584fb95c69c409fedb7a3bee17094cff2caec73f197daa148338d14609d698b86cadab3f3ed7757d47f6d7a960ce121410ecc34102144fbd617fbff35b250a4d9c3ef3a9b5e9ce7ac0442e00145a088d60979a33fae64c72b8bc449bf773b64a03a", &(0x7f0000000180)="b9df49e85af11ed40e59dad9e9548c53337bb22b2b685fdbf6eda22a83f9ad7881aefff29842b0c09b75d8786cd82c2a26da26ce072189c59a9ee2223c80d6c9ffb327eeea91e7bc377eaa39837c4428cb0fa9669c0c935ca28789b978114cb4cebdde6b81179cba08cd3c9ae58ebdf77a2a604a82b276fb6c3326efc7b99247befede8bdaacdefc858a19a56204640c4a4e04f8c5c14aef9d8a20916ca3755201a278b839"}}) sendmmsg(r1, &(0x7f0000005b40), 0x40000000000014d, 0x0) 14:23:02 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000bd7000)={&(0x7f0000c07e98)=ANY=[@ANYBLOB="000000000000000000000000000000000000000033000000ffffffff0000000000000000000000000000000000000000000000000000000000000000002949000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020001007d00000000000000480001006d64350000000000000000000019000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000"], 0x1}}, 0x0) 14:23:02 executing program 3: syz_emit_ethernet(0x140, &(0x7f0000000000)={@local, @random="8a37962a294f", [], {@ipv6={0x86dd, {0x6b6b6b00, 0x6, "110c11", 0x30, 0x21, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x6, [], {0x0, 0x6, "cb155d", 0x0, 0x0, 0x0, @mcast2, @dev}}}}}}}, 0x0) 14:23:02 executing program 2: syz_emit_ethernet(0x140, &(0x7f0000000000)={@local, @random="8a37962a294f", [], {@ipv6={0x86dd, {0x86ddffff, 0x6, "110c11", 0x30, 0x21, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x6, [], {0x41, 0x6, "cb155d", 0x0, 0x0, 0x0, @mcast2, @dev}}}}}}}, 0x0) 14:23:02 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee4050c00000f0000008bc36f7d79ce3263dac37b7403242189c609", 0x23}], 0x1}, 0x0) [ 1711.617245] Killed process 14642 (syz-executor.1) total-vm:72712kB, anon-rss:7756kB, file-rss:34944kB, shmem-rss:0kB [ 1711.638274] oom_reaper: reaped process 14642 (syz-executor.1), now anon-rss:0kB, file-rss:33984kB, shmem-rss:0kB 14:23:02 executing program 2: syz_emit_ethernet(0x140, &(0x7f0000000000)={@local, @random="8a37962a294f", [], {@ipv6={0x86dd, {0x88470000, 0x6, "110c11", 0x30, 0x21, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x6, [], {0x41, 0x6, "cb155d", 0x0, 0x0, 0x0, @mcast2, @dev}}}}}}}, 0x0) 14:23:02 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000bd7000)={&(0x7f0000c07e98)=ANY=[@ANYBLOB="000000000000000000000000000000000000000033000000ffffffff0000000000000000000000000000000000000000000000000000000000000000002949000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020001007d00000000000000480001006d64350000000000000000000019000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000"], 0x1}}, 0x0) 14:23:02 executing program 3: syz_emit_ethernet(0x140, &(0x7f0000000000)={@local, @random="8a37962a294f", [], {@ipv6={0x86dd, {0x800e0000, 0x6, "110c11", 0x30, 0x21, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x6, [], {0x0, 0x6, "cb155d", 0x0, 0x0, 0x0, @mcast2, @dev}}}}}}}, 0x0) 14:23:02 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee4050c00000f0000008bc36f7d79ce3263dac37b7403242189c609", 0x23}], 0x1}, 0x0) 14:23:02 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000000)=[{0x80000006}]}, 0x10) r1 = socket$pppoe(0x18, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x10001, 0x0) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r3, 0x84, 0x12, &(0x7f00000000c0), &(0x7f0000000100)=0x4) connect$pppoe(r1, &(0x7f0000000040)={0x18, 0x0, {0x2, @local, 'batadv0\x00'}}, 0x1e) sendmmsg(r1, &(0x7f0000005b40), 0x40000000000014d, 0x0) 14:23:02 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee4050c00000f0000008bc36f7d79ce3263dac37b7403242189c609", 0x23}], 0x1}, 0x0) [ 1712.190545] syz-executor.1 invoked oom-killer: gfp_mask=0x7200c2(GFP_HIGHUSER|__GFP_ACCOUNT), order=0, oom_score_adj=0 [ 1712.201466] CPU: 0 PID: 14694 Comm: syz-executor.1 Not tainted 5.0.0-rc6+ #70 [ 1712.208726] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1712.218068] Call Trace: [ 1712.220673] dump_stack+0x172/0x1f0 [ 1712.224317] dump_header+0x10f/0xb6c [ 1712.228030] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1712.233128] ? ___ratelimit+0x60/0x595 [ 1712.237008] ? do_raw_spin_unlock+0x57/0x270 [ 1712.241437] oom_kill_process.cold+0x10/0x6f5 [ 1712.245954] ? task_will_free_mem+0x139/0x6e0 [ 1712.250439] out_of_memory+0x79a/0x1280 [ 1712.254411] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1712.259504] ? oom_killer_disable+0x280/0x280 [ 1712.263991] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1712.269102] mem_cgroup_out_of_memory+0x99/0xe0 [ 1712.273794] ? memcg_memory_event+0x40/0x40 [ 1712.278151] ? _raw_spin_unlock+0x2d/0x50 [ 1712.282317] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1712.287406] try_charge+0xfec/0x1570 [ 1712.291110] ? find_held_lock+0x35/0x130 [ 1712.295166] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1712.299998] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 1712.304834] ? find_held_lock+0x35/0x130 [ 1712.308883] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 1712.313734] memcg_kmem_charge_memcg+0x7c/0x130 [ 1712.318411] ? memcg_kmem_put_cache+0xb0/0xb0 [ 1712.322894] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 1712.327724] memcg_kmem_charge+0x13b/0x340 [ 1712.331950] __alloc_pages_nodemask+0x437/0x710 [ 1712.336614] ? __alloc_pages_slowpath+0x2900/0x2900 [ 1712.341621] ? ___might_sleep+0x163/0x280 [ 1712.345766] ? copyin+0xb5/0x100 [ 1712.349135] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1712.354667] alloc_pages_current+0x107/0x210 [ 1712.359093] pipe_write+0xa65/0xfb0 [ 1712.362725] __vfs_write+0x613/0x8e0 [ 1712.366447] ? kernel_read+0x120/0x120 [ 1712.370330] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1712.375874] ? rw_verify_area+0x118/0x360 [ 1712.380008] vfs_write+0x20c/0x580 [ 1712.383578] ksys_write+0xea/0x1f0 [ 1712.387146] ? __ia32_sys_read+0xb0/0xb0 [ 1712.391202] ? do_syscall_64+0x26/0x610 [ 1712.395180] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1712.400549] ? do_syscall_64+0x26/0x610 [ 1712.404526] __x64_sys_write+0x73/0xb0 [ 1712.408432] do_syscall_64+0x103/0x610 [ 1712.412318] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1712.417498] RIP: 0033:0x457e29 [ 1712.420700] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1712.439602] RSP: 002b:00007fd8c7971c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1712.447318] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457e29 [ 1712.454603] RDX: 0000000100000073 RSI: 00000000200001c0 RDI: 0000000000000005 [ 1712.461859] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1712.469115] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd8c79726d4 [ 1712.476371] R13: 00000000004c3be0 R14: 00000000004dc3d0 R15: 00000000ffffffff [ 1712.485015] memory: usage 307200kB, limit 307200kB, failcnt 12951 [ 1712.491260] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1712.498132] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1712.504318] Memory cgroup stats for /syz1: cache:0KB rss:257020KB rss_huge:227328KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:8KB active_anon:257204KB inactive_file:4KB active_file:0KB unevictable:0KB [ 1712.525280] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=14693,uid=0 14:23:03 executing program 1: prctl$PR_CAPBSET_READ(0x17, 0x4) r0 = perf_event_open(&(0x7f0000000300)={0x400000001, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f000094f000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffff9c, 0xc00c642d, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0x100000073) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xfffffef3) vmsplice(r3, &(0x7f0000000040)=[{&(0x7f0000000100)="16", 0x1}], 0x1, 0x0) r4 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r4, 0x1000000000016) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0x7, &(0x7f0000000000)={0x80, 0x0, 0x0, 0x100}, 0x10) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) 14:23:03 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000bd7000)={&(0x7f0000c07e98)=ANY=[@ANYBLOB="000000000000000000000000000000000000000033000000ffffffff0000000000000000000000000000000000000000000000000000000000000000002949000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020001007d00000000000000480001006d64350000000000000000000019000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000"], 0x1}}, 0x0) 14:23:03 executing program 3: syz_emit_ethernet(0x140, &(0x7f0000000000)={@local, @random="8a37962a294f", [], {@ipv6={0x86dd, {0x80350000, 0x6, "110c11", 0x30, 0x21, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x6, [], {0x0, 0x6, "cb155d", 0x0, 0x0, 0x0, @mcast2, @dev}}}}}}}, 0x0) 14:23:03 executing program 2: syz_emit_ethernet(0x140, &(0x7f0000000000)={@local, @random="8a37962a294f", [], {@ipv6={0x86dd, {0x88480000, 0x6, "110c11", 0x30, 0x21, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x6, [], {0x41, 0x6, "cb155d", 0x0, 0x0, 0x0, @mcast2, @dev}}}}}}}, 0x0) 14:23:03 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000000)=[{0x80000006}]}, 0x10) r1 = socket$pppoe(0x18, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) connect$pppoe(r1, &(0x7f0000000040)={0x18, 0x0, {0x2, @local, 'batadv0\x00'}}, 0x1e) recvmsg(r1, &(0x7f0000001380)={&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f0000001300)=[{&(0x7f0000000100)=""/4096, 0x1000}, {&(0x7f0000001100)=""/6, 0x6}, {&(0x7f0000001140)=""/87, 0x57}, {&(0x7f00000011c0)=""/47, 0x2f}, {&(0x7f0000001200)}, {&(0x7f0000001240)=""/134, 0x86}], 0x6}, 0x61) setsockopt$inet_tcp_int(r3, 0x6, 0x7, &(0x7f00000013c0), 0x4) sendmmsg(r1, &(0x7f0000005b40), 0x40000000000014d, 0x0) 14:23:03 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee4050c00000f0000008bc36f7d79ce3263dac37b7403242189c609", 0x23}], 0x1}, 0x0) [ 1712.539993] Memory cgroup out of memory: Kill process 14693 (syz-executor.1) score 139 or sacrifice child [ 1712.549952] Killed process 14693 (syz-executor.1) total-vm:72712kB, anon-rss:7756kB, file-rss:34944kB, shmem-rss:0kB [ 1712.567876] oom_reaper: reaped process 14693 (syz-executor.1), now anon-rss:0kB, file-rss:34832kB, shmem-rss:0kB 14:23:03 executing program 3: syz_emit_ethernet(0x140, &(0x7f0000000000)={@local, @random="8a37962a294f", [], {@ipv6={0x86dd, {0x81000000, 0x6, "110c11", 0x30, 0x21, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x6, [], {0x0, 0x6, "cb155d", 0x0, 0x0, 0x0, @mcast2, @dev}}}}}}}, 0x0) 14:23:03 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000bd7000)={&(0x7f0000c07e98)=ANY=[@ANYBLOB="000000000000000000000000000000000000000033000000ffffffff0000000000000000000000000000000000000000000000000000000000000000002949000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020001007d00000000000000480001006d64350000000000000000000019000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000"], 0x1}}, 0x0) 14:23:03 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee4050c00000f0000008bc36f7d79ce3263dac37b7403242189c609", 0x23}], 0x1}, 0x0) 14:23:03 executing program 2: syz_emit_ethernet(0x140, &(0x7f0000000000)={@local, @random="8a37962a294f", [], {@ipv6={0x86dd, {0x88640000, 0x6, "110c11", 0x30, 0x21, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x6, [], {0x41, 0x6, "cb155d", 0x0, 0x0, 0x0, @mcast2, @dev}}}}}}}, 0x0) 14:23:03 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000bd7000)={&(0x7f0000c07e98)=ANY=[@ANYBLOB="000000000000000000000000000000000000000033000000ffffffff0000000000000000000000000000000000000000000000000000000000000000002949000000000000000000000000000000000000000000000000157100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020001007d00000000000000480001006d64350000000000000000000019000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000"], 0x1}}, 0x0) 14:23:03 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee4050c00000f0000008bc36f7d79ce3263dac37b7403242189c609", 0x23}], 0x1}, 0x0) 14:23:04 executing program 1: r0 = perf_event_open(&(0x7f0000000300)={0x400000001, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000950000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffff9c, 0xc00c642d, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0x100000073) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) 14:23:04 executing program 3: syz_emit_ethernet(0x140, &(0x7f0000000000)={@local, @random="8a37962a294f", [], {@ipv6={0x86dd, {0x86ddffff, 0x6, "110c11", 0x30, 0x21, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x6, [], {0x0, 0x6, "cb155d", 0x0, 0x0, 0x0, @mcast2, @dev}}}}}}}, 0x0) 14:23:04 executing program 2: syz_emit_ethernet(0x140, &(0x7f0000000000)={@local, @random="8a37962a294f", [], {@ipv6={0x86dd, {0x88a8ffff, 0x6, "110c11", 0x30, 0x21, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x6, [], {0x41, 0x6, "cb155d", 0x0, 0x0, 0x0, @mcast2, @dev}}}}}}}, 0x0) 14:23:04 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x80000006}]}, 0x10) r1 = socket$pppoe(0x18, 0x1, 0x0) r2 = dup3(r0, r1, 0x80000) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r2, 0x40405515, &(0x7f0000000100)={0x9, 0x0, 0x100, 0x81, 'syz0\x00', 0x88}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) connect$pppoe(r1, &(0x7f0000000040)={0x18, 0x0, {0x2, @local, 'batadv0\x00'}}, 0x1e) r4 = inotify_add_watch(r2, &(0x7f0000000180)='./file0\x00', 0x80) inotify_rm_watch(r2, r4) r5 = syz_open_dev$midi(&(0x7f0000000080)='/dev/midi#\x00', 0x1, 0x1) ioctl$NBD_CLEAR_SOCK(r5, 0xab04) fsetxattr$security_evm(r2, &(0x7f00000001c0)='security.evm\x00', &(0x7f0000000200)=@v2={0x3, 0x3, 0x1, 0x1ff, 0x50, "197f1d8698f7457b65622b5b402fcbe03ece0f6c936459233adc8285fe600067b2108165b09f0eb0c42b669e5a76426713d64581a7e3ff9819026d2749eb7fe3837b5450e207ff47347a957cb6f6f781"}, 0x5a, 0x1) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r5, 0xc008551c, &(0x7f0000000140)=ANY=[@ANYBLOB="060000001000000025bf0000ff7f00000800000084490000a9"]) sendmmsg(r1, &(0x7f0000005b40), 0x40000000000014d, 0x0) 14:23:04 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee4050c00000f0000008bc36f7d79ce3263dac37b7403242189c609", 0x23}], 0x1}, 0x0) 14:23:04 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000bd7000)={&(0x7f0000c07e98)=ANY=[@ANYBLOB="000000000000000000000000000000000000000033000000ffffffff000000000000000000000000000000000000000000000000000000000000000000294900000000000000000000000000000000000000000000ffffff9e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020001007d00000000000000480001006d64350000000000000000000019000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000"], 0x1}}, 0x0) 14:23:04 executing program 3: syz_emit_ethernet(0x140, &(0x7f0000000000)={@local, @random="8a37962a294f", [], {@ipv6={0x86dd, {0x88470000, 0x6, "110c11", 0x30, 0x21, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x6, [], {0x0, 0x6, "cb155d", 0x0, 0x0, 0x0, @mcast2, @dev}}}}}}}, 0x0) [ 1713.717589] __nla_parse: 8 callbacks suppressed [ 1713.717599] netlink: 7 bytes leftover after parsing attributes in process `syz-executor.4'. 14:23:04 executing program 2: syz_emit_ethernet(0x140, &(0x7f0000000000)={@local, @random="8a37962a294f", [], {@ipv6={0x86dd, {0x88caffff, 0x6, "110c11", 0x30, 0x21, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x6, [], {0x41, 0x6, "cb155d", 0x0, 0x0, 0x0, @mcast2, @dev}}}}}}}, 0x0) 14:23:04 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000bd7000)={&(0x7f0000c07e98)=ANY=[@ANYBLOB="000000000000000000000000000000000000000033000000ffffffff000000000000000000000000000000000000000000000000000000000000000000294900000000000000000000000000000000000000000000fffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020001007d00000000000000480001006d64350000000000000000000019000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000"], 0x1}}, 0x0) 14:23:04 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee4050c00000f0000008bc36f7d79ce3263dac37b7403242189c609", 0x23}], 0x1}, 0x0) 14:23:04 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000000)=[{0x80000006}]}, 0x10) r1 = socket$pppoe(0x18, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) connect$pppoe(r1, &(0x7f0000000040)={0x18, 0x0, {0x2, @local, 'batadv0\x00'}}, 0x1e) sendmmsg(r1, &(0x7f0000005b40), 0x40000000000014d, 0x0) 14:23:04 executing program 3: syz_emit_ethernet(0x140, &(0x7f0000000000)={@local, @random="8a37962a294f", [], {@ipv6={0x86dd, {0x88480000, 0x6, "110c11", 0x30, 0x21, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x6, [], {0x0, 0x6, "cb155d", 0x0, 0x0, 0x0, @mcast2, @dev}}}}}}}, 0x0) [ 1713.979358] netlink: 7 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1714.020229] netlink: 7 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1714.203505] syz-executor.1 invoked oom-killer: gfp_mask=0x7200c2(GFP_HIGHUSER|__GFP_ACCOUNT), order=0, oom_score_adj=0 [ 1714.214585] CPU: 1 PID: 14766 Comm: syz-executor.1 Not tainted 5.0.0-rc6+ #70 [ 1714.221865] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1714.231234] Call Trace: [ 1714.233838] dump_stack+0x172/0x1f0 [ 1714.237479] dump_header+0x10f/0xb6c [ 1714.241207] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1714.246303] ? ___ratelimit+0x60/0x595 [ 1714.250200] ? do_raw_spin_unlock+0x57/0x270 [ 1714.254617] oom_kill_process.cold+0x10/0x6f5 [ 1714.259111] ? task_will_free_mem+0x139/0x6e0 [ 1714.263600] out_of_memory+0x79a/0x1280 [ 1714.267569] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1714.272668] ? oom_killer_disable+0x280/0x280 [ 1714.277154] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1714.282256] mem_cgroup_out_of_memory+0x99/0xe0 [ 1714.286940] ? memcg_memory_event+0x40/0x40 [ 1714.291271] ? _raw_spin_unlock+0x2d/0x50 [ 1714.295412] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1714.300516] try_charge+0xfec/0x1570 [ 1714.304231] ? find_held_lock+0x35/0x130 [ 1714.308301] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1714.313139] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 1714.317981] ? find_held_lock+0x35/0x130 [ 1714.322034] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 1714.326895] memcg_kmem_charge_memcg+0x7c/0x130 [ 1714.331580] ? memcg_kmem_put_cache+0xb0/0xb0 [ 1714.336071] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 1714.340906] memcg_kmem_charge+0x13b/0x340 [ 1714.345163] __alloc_pages_nodemask+0x437/0x710 [ 1714.349841] ? __alloc_pages_slowpath+0x2900/0x2900 [ 1714.354857] ? ___might_sleep+0x163/0x280 [ 1714.358996] ? copyin+0xb5/0x100 [ 1714.362392] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1714.367946] alloc_pages_current+0x107/0x210 [ 1714.372358] pipe_write+0xa65/0xfb0 [ 1714.375987] __vfs_write+0x613/0x8e0 [ 1714.379707] ? kernel_read+0x120/0x120 [ 1714.383606] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1714.389169] ? rw_verify_area+0x118/0x360 [ 1714.393307] vfs_write+0x20c/0x580 [ 1714.396842] ksys_write+0xea/0x1f0 [ 1714.400376] ? __ia32_sys_read+0xb0/0xb0 [ 1714.404443] ? do_syscall_64+0x26/0x610 [ 1714.408424] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1714.413784] ? do_syscall_64+0x26/0x610 [ 1714.417798] __x64_sys_write+0x73/0xb0 [ 1714.421680] do_syscall_64+0x103/0x610 [ 1714.425577] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1714.430781] RIP: 0033:0x457e29 [ 1714.433991] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1714.452918] RSP: 002b:00007fd8c7971c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1714.460640] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457e29 [ 1714.467930] RDX: 0000000100000073 RSI: 00000000200001c0 RDI: 0000000000000005 [ 1714.475214] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1714.482489] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd8c79726d4 [ 1714.489764] R13: 00000000004c3be0 R14: 00000000004dc3d0 R15: 00000000ffffffff [ 1714.498738] memory: usage 307188kB, limit 307200kB, failcnt 13075 [ 1714.505554] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1714.512575] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1714.518868] Memory cgroup stats for /syz1: cache:0KB rss:257128KB rss_huge:227328KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:8KB active_anon:257204KB inactive_file:4KB active_file:0KB unevictable:0KB [ 1714.540436] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=14761,uid=0 14:23:05 executing program 1: 14:23:05 executing program 2: syz_emit_ethernet(0x140, &(0x7f0000000000)={@local, @random="8a37962a294f", [], {@ipv6={0x86dd, {0x89060000, 0x6, "110c11", 0x30, 0x21, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x6, [], {0x41, 0x6, "cb155d", 0x0, 0x0, 0x0, @mcast2, @dev}}}}}}}, 0x0) 14:23:05 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000bd7000)={&(0x7f0000c07e98)=ANY=[@ANYBLOB="000000000000000000000000000000000000000033000000ffffffff00000000000000000000000000000000000000000000000000000000000000000029490000000000000000000000000000000000000000000000f0ffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020001007d00000000000000480001006d64350000000000000000000019000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000"], 0x1}}, 0x0) 14:23:05 executing program 3: syz_emit_ethernet(0x140, &(0x7f0000000000)={@local, @random="8a37962a294f", [], {@ipv6={0x86dd, {0x88640000, 0x6, "110c11", 0x30, 0x21, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x6, [], {0x0, 0x6, "cb155d", 0x0, 0x0, 0x0, @mcast2, @dev}}}}}}}, 0x0) 14:23:05 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee4050c00000f0000008bc36f7d79ce3263dac37b7403242189c609", 0x23}], 0x1}, 0x0) 14:23:05 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000000)=[{0x80000006}]}, 0x10) r1 = socket$pppoe(0x18, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000240)='/proc/capi/capi20ncci\x00', 0x101001, 0x0) openat$mixer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/mixer\x00', 0x2, 0x0) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/capi/capi20ncci\x00', 0x20100, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ubi_ctrl\x00', 0x1, 0x0) pipe2(&(0x7f0000000340), 0x4000) syz_open_dev$usbmon(&(0x7f0000000380)='/dev/usbmon#\x00', 0xb6, 0x200800) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/sequencer2\x00', 0x101000, 0x0) openat$mixer(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mixer\x00', 0x8000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) connect$pppoe(r1, &(0x7f0000000040)={0x18, 0x0, {0x2, @local, 'batadv0\x00'}}, 0x1e) sendmmsg(r1, &(0x7f0000005b40), 0x40000000000014d, 0x0) r4 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vfio/vfio\x00', 0x10000, 0x0) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x7, 0xff}, &(0x7f0000000100)=0x10) ioctl$DRM_IOCTL_RM_MAP(r3, 0x4028641b, &(0x7f0000000440)={&(0x7f0000ffa000/0x4000)=nil, 0x1, 0x2, 0x4d, &(0x7f0000ffc000/0x4000)=nil, 0x8001}) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000000140)={r5, @in={{0x2, 0x4e24, @empty}}, 0x7, 0x2}, &(0x7f0000000200)=0x90) [ 1714.555374] Memory cgroup out of memory: Kill process 14761 (syz-executor.1) score 139 or sacrifice child [ 1714.565330] Killed process 14761 (syz-executor.1) total-vm:72712kB, anon-rss:7756kB, file-rss:34944kB, shmem-rss:0kB [ 1714.586674] oom_reaper: reaped process 14761 (syz-executor.1), now anon-rss:0kB, file-rss:34832kB, shmem-rss:0kB 14:23:05 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000bd7000)={&(0x7f0000c07e98)=ANY=[@ANYBLOB="000000000000000000000000000000000000000033000000ffffffff0000000000000000000000000000000000000000000000000000000000000000002949000000000000000000000000000000000000000000007fffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020001007d00000000000000480001006d64350000000000000000000019000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000"], 0x1}}, 0x0) [ 1714.682488] netlink: 7 bytes leftover after parsing attributes in process `syz-executor.4'. 14:23:05 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f0000000280)=[{0x100040}, {0x80000006}]}, 0x10) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) sendmmsg(r1, &(0x7f000000ac80), 0x66, 0x0) 14:23:05 executing program 2: syz_emit_ethernet(0x140, &(0x7f0000000000)={@local, @random="8a37962a294f", [], {@ipv6={0x86dd, {0x8dffffff, 0x6, "110c11", 0x30, 0x21, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x6, [], {0x41, 0x6, "cb155d", 0x0, 0x0, 0x0, @mcast2, @dev}}}}}}}, 0x0) 14:23:05 executing program 3: syz_emit_ethernet(0x140, &(0x7f0000000000)={@local, @random="8a37962a294f", [], {@ipv6={0x86dd, {0x88a8ffff, 0x6, "110c11", 0x30, 0x21, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x6, [], {0x0, 0x6, "cb155d", 0x0, 0x0, 0x0, @mcast2, @dev}}}}}}}, 0x0) 14:23:05 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee4050c00000f0000008bc36f7d79ce3263dac37b7403242189c609", 0x23}], 0x1}, 0x0) 14:23:05 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000bd7000)={&(0x7f0000c07e98)=ANY=[@ANYBLOB="000000000000000000000000000000000000000033000000ffffffff0000000000000000000000000000000000000000000000000000000000000000002949000000000000000000000000000000000000000000009effffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020001007d00000000000000480001006d64350000000000000000000019000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000"], 0x1}}, 0x0) 14:23:05 executing program 2: syz_emit_ethernet(0x140, &(0x7f0000000000)={@local, @random="8a37962a294f", [], {@ipv6={0x86dd, {0xf5ffffff, 0x6, "110c11", 0x30, 0x21, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x6, [], {0x41, 0x6, "cb155d", 0x0, 0x0, 0x0, @mcast2, @dev}}}}}}}, 0x0) 14:23:05 executing program 3: syz_emit_ethernet(0x140, &(0x7f0000000000)={@local, @random="8a37962a294f", [], {@ipv6={0x86dd, {0x88caffff, 0x6, "110c11", 0x30, 0x21, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x6, [], {0x0, 0x6, "cb155d", 0x0, 0x0, 0x0, @mcast2, @dev}}}}}}}, 0x0) [ 1714.991297] netlink: 7 bytes leftover after parsing attributes in process `syz-executor.4'. 14:23:05 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000000)=[{0x80000006}]}, 0x10) r1 = socket$pppoe(0x18, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) connect$pppoe(r1, &(0x7f0000000040)={0x18, 0x0, {0x2, @local, 'batadv0\x00'}}, 0x1e) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000003fc0)={{{@in6=@mcast1, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}}}, &(0x7f00000040c0)=0xe8) sendmmsg(r1, &(0x7f00000057c0)=[{{&(0x7f0000000080)=@ipx={0x4, 0x1, 0xfffffffffffffbed, "11708a15e3a2", 0x1}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000100)="2b115362e5a0f39a7ee4cd8837d64dd403fa27ca3e44042e1cc05dbfd39bd3d314aa03e0ff81d3502df35eec5a4708bbdc01880291afa25c92bf084e99c471a97f871cd8da88e0cd6d9ddd551c34fe8b3e3fec09e93a7f240a8278db6dc9fb7313a8eb200479a749ad7b36aff23d43a8c18d82d584b6a04340edfee103a4f78d4d7a2e01566753fb66169aa0fec12638f5424ba3b353cea2ad2e0343cb384ddb4231e8a0b49bf871f0286415efbc687f4c95eaa7fdd99036dd6cbbd025f623c4161e53a4f71c4f53080aecbc9ac441e0dbb915d50f4d087a1fe5ff0dc5befabeed69dbcfa121238ee21104", 0xeb}, {&(0x7f0000000200)="1ef6ea0302019ceeee6d66de18fbe28ee6a0ad08e7c7ff1fe582aeec251178c22591635f7e90800123896efcd0824b47f72f3b2fe916e6490bf26a3acb447d2973dd44189e5247a910075445abf2664e68f1d934ed6b0b5f211c65d545d7cf7084414a879af9addced7821a0f637796854f11edd913f2e35120e83608d8fd8498ddd52f55cb9b53f300c96198fd5503ec24be7fd017f984cdf53eae5dc2da9e54239d571dd18e46e83baba18bc79aaaa8801bd6bc66acaf6b27f87070330296f14a796db8e078539671981101ad1201820ec8675ed339e67b128ea874bbaff977f848ce7d29bfd67f7afd657", 0xec}, {&(0x7f0000000300)="4d218ce60307067856ba07b28172694a336dc74d6ae49a458d13ecf1904eafb7f18813d3e13cb02b3472e3e7cff037d825fd22f5bae501aa2bdd04ee87046efe09bad7a7f13a51037e6a1191fa304ce0950a11a416e0b4d4b5cfe64ae84f2d3ec72763f8f2ea90d5588af441f1cb31e2c4d0080349be024ead4d8d00ed7718b0015bb0529de98099a0776c5cee292d0ec63c57eb45a7d08333642ecfe020602aab1ca28755d65b3b88905efff405e91c59fa9e4c6fff932e3ba97212f33376f21a8ec2c1f2", 0xc5}, {&(0x7f0000000400)="c43cf058986ed8aea835c641a975afa54a1bbc0100e370fa25e2285082fb93802d831594b7bf0c0e64c1e179094a71ea3fabf115e8684f5ef725ccffbbe8280250625dc670f8eeefec8616ce31a6ba5947f86735b5c53ea2980fb0f8350b99353eff041455a53e6c1f70d5a9be893a89bb6b504fa2a0162efbe91340485edd1dfa7ee50eda449f323fe99590bcc6499f0bf889f69007f50ada54f77a7fe581d6f8", 0xa1}, {&(0x7f00000004c0)="4eb926195cbe1267fbf4877fc3c5f1d359ecaebfc9647e10eb11be213430fc7a26fef0dad692bf0fd12e6a81bd2ae6692c70757505f67887d55c8e198e25ce699a249d8a9d8961ba26a71d054b90e4a4abe76b37844bd3d23ada0bf350570e4858ca02e7765bd94a5becf7958f3c5d904ecfe841029a54a4d3e9a3e4b7589e1d8e8fbbba8702351eac3bb1d3b139192f238d104bd1b0a8de7b88e3bec99296d6f2151235a131fa3edcd3cd97850b1d7682eaa39878ed4382949c71b10cc6806f38e6eeadb63fa58b863c90d29d5781142f27c6568c0cf64a96f127a23ae355d79b5ca0adad8076fb13e45b4414aa543dfe0809ec54ccd0", 0xf7}], 0x5, &(0x7f0000000640)=[{0xb8, 0x113, 0xffffffff, "625f192b0fe9e4354146fe7018a16f91f3a4ab1fbcf2a7acc0c491c5d4bceb5938f6ecbbe9ff381e847e94fdf995ad3ab04a2232e8ebcebbe09979500b80179a8e678a3044e87470b7b8c76364b1018154a5b77d758f40d1d66fdcca30088c4e1d913c29b941de58fcbf707b044327ae7734db86970cfb984bba7bdeaf7e5a869a4ba36cd749e6277f3defba66d72a898af4077639640f390e340da96a456ffc17"}, {0x1010, 0x111, 0x1, "64f2ed88947491d37663b5e45a984bce3f2fedf74341bbccc8c88152a9e01490df8f27871abdbe55b3eb39d43c362a176d85009508db674e2cf93d40eabb97d37a8031e43ce7aca77270c536ecf8f5726a9a023f521d8599c14860d1a79cea39299ad76df84f690fedf98be6846a908876194f7cde34db2742f74f61dbbfc1bdd02ca297d309b568e447f9c81ec73de22a3ef77794c23ee175c54ce88f842b5f78911a74e9602888996cbf71dfe0bf22c3687d482c37413b80132bc31e9c9495869d392e4f5e5de93d587efbaf4a529703377fa69e5d43c2f264c5bc30f1e4a5f6e15cf6d9bcfbfc184fc2a4da7958f038e4b032110cc1ca49b3e5f5a0452db5194236f2e90208767685fd550c507e899dae4dd97f2a03ce3006b285cd9c9be622e302d69b28f9136be657110d636816c5fd3c6338ed6ef76fe20fc6e48707dabf4c018878c7a5f9e502eb53521f5dc8ceb85c05b1d36db7c4e8f2afd98571e3b6ec2f9eb003294c1a308146c054532adeb52113fecbecc1900229b3addaf79c7fc1af40a4816fbf7c1992ac01896d4234cb3f87f2181e5fbd224501d20b1b09b3c3d6bab5341c518c812f463ab9fccd01daf033a0f84a0dbddbb2bde1f8822fb4b70c2867e829e8e841d8bc88f25980efbf9426e9395d9607c2d613f8a9df00d1b481a2d88749127ed2fe3e0d3b71fb408449e6261ea5706dd0088a083f2b59718d8a67b0879c029b1f23c2c0d14dba0437d3731ca243e6ce73456dd01193a53714e2295f1736ff667cc12e637c1af66cbc2ea5437272df3beb2347cb743a92a050f243d972517e317d171c6f4fcd76d7d62b1040962fe19e6f0c535b7fe3c1babb40f17a43a7e31a79cd4d482553b013a4e473e06bd0f1159b832a27d4e532b9053c3bd1bc209fadc9d665e9d7f165227f56b81b0bd09bb8ba597d68985ce8c265af7c6e9fbf90cf825832fac87e86a4b50229d73bcedd99ec52d6e325f22667d848e9830a08380649c236287180f9480334eb5c43106bdf37a2b37c4ab029ac9156682f9fa242dd008bf5db358b0a3ec82b16641668bed7cbba8dc2399be98d5af932474fa63edd2c41e86ac762efc2eed5b79ef1c31d15c7e2415e5466d4583e6523d27a8b813f4d6ef4b722a896ddb7ba8086a2d928642c39f11f472110d7c9b208623f6f8a2ffd90fec124647377508204509b3c9a321673b7619d05e6b90ec91412490ca6679bc419a4da0881700894c01b7d11d8eaccfe9ae9e40b7693157a809cd97f3bd76dac908d8feaaa30f66875293fb49082bc8fbbecf0b2b0b12308ce80c105b59da30eab9cc5612aa11f6a6050db568379c23231b76bac3472d354b22c0088e80d1a33122b364fd0db88ec46b46fcb983a2ffc6f111f0e00bbf844d96dcb028c8472e4a33cea8ce4f4ec1949804dff5f6422025d00f63e3fce1583e14b8067f43f0711f547bf079dc37e8e992b925c631a8fe922e0edf616a7ce173d9fc8d9ab5fee836b34b7d55593ec644f5d2f1093441561679d97227a4a5e599307cfb458fb626b472d9043619521afd92607afdc5a3787983eec7ed60002b8328bed9ed8ba55d83489af57091d8d82e5b7562fdb19ac08952a378040965231f4d7527d7855abfa621703da7832c2bbbef30fb9ba27fbb47805c8228bfa233942e77bbee50e99d9ff0aba678a87dd334965afa3a324aaf7692b80871ce5e210e4a3f7be71fd470f7b570a1cbfd85747341efdf29e8391455ae6106909d618c4bd03d50f78621095e5460285307f11b060e43d66ba47deef4c3c98d24e49a36987e83fdecee2bd54fc267e7ce3f4d03e5a1d195e00e091ddf41a39e56e750b6711a333ca63addcc6129461e63f1adbba7480af33b9e301a100b5e4e081e7ea5494ef0072ed94cf0b3c9c29a261437675bea9708d8c23b6f02e80c979d0bc8e53f729cd468d099c20f25fa0dc40c5d6b957244f0bb39f9c973789ef83b04883b0545f43d86f2888a1c0b8d3ce5df750d3b796b07be1a48e9d1aaa3813b241e5cb1dfd6299e8b8b7f9759c693c9adc7d278ade2315f0fc81513b9c0fa0209950f1469271560a3fe9c39b443401f7257aa22c62b5d0a93dfce2f85f6280afd453d7e40e9d39ca0b2f21d3ead1bb9aff3f8dedfdb8659135f2cc81d6f9b3375488e03021eaf2045e568a8c129ec3736eb404b9623fc3579015ef0c68d2b2efb648836b5ba5016b1b14a4092b6a09c1f762521b816fcc0493aa4bd732a361a1375eb4273f823cb82bc7a5deea42c8d56e0034d5e1ee60d710962d0b32db697077c657c03f1064cd9335ac37ee87663d4e4a287f898531601cf2bf00e056b7840fdc13581ffdfa6aa22308cbee5e44179dacd20e846fd61d8489ef3f58db4d19bc51e4db874b09774410d5cbaaed9aa8d3f1bff225ad3ff420404f37621a403c9c94b0b3787cfcd045d5b6daebf419beae1c35a99dc24c70b6487eeed2c474974a566e797ee02d2555385ef9fc3adbb3728f11caf3c85860c5bfa8279b0c5cb5bd39827568bb9e732b0ff2d63c3e843a1487d145e0c48e17af55c0b50c99baa8557f99a8b121b0c09ea090461684918b46fe7da2684d4485fd606e8a1a9573e0d9bc1f56f090e82e15288f92dab7d3e1b3e8be9964a63d84971b13e276bc911279d7871c15bfbc429464935389afbe5d41b62174d99d11455f7129c671d4f6dc49b55cccb253e9de3ce3055361c695d25fc950930853b7dd6b4423beb0cfe02c02f140c20ef65c6aed90c58c69fa3c908f310f8d4b14d72c2d353e569424bd573727e9e8bf6b3a48904032afd83e5b051255ecd40283309b6ddd0c3fc96ea561415f7094ed763175f8570936c1a1216ce81d0e052afac1d2b3f25308320fed1d983ead0f2d8db01018bf344491d7a63833e4c361997eab9af57c4a8ee6dc5f1d8b06ce63b736cecd0073f104ea0e91df23f7abfc5d81cbeebd8199f0a9973465de1ee28b40a2184fb51f34595bd52f731f67aa1c0e56221d21e1aa668b8dee27699418e08357ab9bda21a726803930ffc77e91ea5bd8174d588470fb253c9e75a6c5217c1adb092d59037a55307a95ee3e9cd1dd3c7f587c8888ba37f7c368cd3014f19016450be3a411220e0078a54f2c36c722b06ecd6d011a9bf867d26bb456e7f14f9db0e26b61d96d2cddfa620ca260a6726df0cc573b4f41120690c26ae126ad0bd2fcedd3be75a9fb9e0e86420e146df404c393b6ffe89761110ebaddbeccf99550337106e289befdf6ccb8c00e5730d2bc6c81d15068f7965fd11442cce3983bdd954ef16fab573583009b0d39c0af6c2604a685157f61c4c85fa5db3691712adc8ba620271b7a952b844aa7f5f0e8d5539802de0e5d46cf66b78becaca1dc13d7acc94d2c13b8e6a40fc702af3bd9f9a4116f5bf19ad7b4bf3ae2857e6026420c0c99b5eee9ca8780b6c7e57323678aca5e60068ec88e95eaa45a6faa5ef3c26e24ae6da4181a94eecba41cb5efae563753c9a2feb8f399ca918b1e27b453dce16db162d1946d24a82630ac6a775ccbecaff541dc8ba0de00d4d7acc2fe2d59c656cf093a40a3a3d99c62223432b9b65f89d95917e23359cb7e3b88344ed67beb612e8046c574005c4e9f490ece5945aa28609e3c21df5222b424f0e8f73ff03ef7b512128317cfd5bad62797b9b89abe0e30bbce7ceb20a42862dd6caa559ce2577a9fdd1fb52365eacb8ef945969b249e5d5a137a24aca518a1e3e5a2ff166204a91a9d43a1d7a70df0bed16f0276918247beca77a29fc2042d53087e9f912f73df6fcee29ec1c2511a057d2a5d83c3d7fa563687da741fb51ca60356aea72ce2ad1625c222e96a19177ad6547a01189042cf4f4e7ea522ddf30db0cdd032ade2eea4c4a6de74d3fb90529cb89fafb5f9ba09e642909360469bd6718cf476a7f5dc4f4457e1d15995c2154894dc69d81fd25791f5789a664269933725c2cffb6a6d7e6a39f033d170cd68bffb7087eab9ce309be1bedcd2c702f631001df7f58c94c278a94dbd4d85c0c6518e6aade10b4ef16254961e5f9824b84d45c48a96abe1ef317777892f2b6a70f1d99f5a60760d79887480c7321fc7895af3dbe7cf96a440e3d1781a795ed9b03b1675bc83e4d5fa8295d901a8bc50bda269abe00be073b76a21ad26a05e116714b8eac595d6f8f5ee2fa76720682c5197ef54390e6af72172b11c05f86a5c1197ec2c02402fc0bc736b9288a1f606c31bb36852aee2de6fe3073423b5eadfa2498ac774441c3ee03f9b5b9eafb5810eb2c3faacbb4eaea8f3b1ca1149282c0ff9d916bed508fb6a18d3edcb76b4056d733b564a8e868d7770ab8a66660b5f1e83e67bfa23c50d6c365ed2bbc45c8ff51c12d752f49b1ba0c40906660302746d6e8dcc09a7ebce714d19884d91243183c47ee83104b014893106f76fbac1ba58eb07fc23147005f8d264d043086bb49ebec8558bbb8ff7543ffd75dd15d169d658b43885102f34e161c3239ace9d4ec1a87b06b4b338f7e87d9a64afbb7fe4e8765a046aef3c9c42335642524e023b7e126955cd1d0f76d614a4530c51ecf626962e8b79d76cc40a9b965dc11d9a4d41b496028f06e9495eff15423a9592b4d8331e29f9d5f5a1a9e685a7f728e33de821e81cf6e8238c0cc3de5d1eefc9bbff380f46be83b5a5e530cd25e9c665ce3066a88043a0831e202c3abc57e58d2edcc2ee3d6edbd055dcc5ef51ac43591910ec531829dd1269d21315d2a5b654af2badbcc18c4baea502e3559c67ad9ed9e6f9620473ff833b13c92febe2e354397917a0e8c050d708a67eaaa15eb22355f27eaed7f78e81ef6f32c298a2b3d6d3739a2f4f404489bf9335fdd947a518c89bd775ac2e12a4f2ad8bae80701f8f639f501328e8bf0229593c14b8c447df38312d3be59a16d02ccdb9abdf727db9722d58b2c4b5442b89fe4a956b852c1976511971155a0f7caca7db13b1d61ff64b895729538573dce3ccf3d916ebf6e64f5742dfff35da49ad0bca94ab4755394b51a00baeb1cde0187b3c6a457e871c1a52ee8d4955287bd617974cd21e532277661c92abc072613f918cbec35e4dec514a8f2a40eb50ba3f39e4fa13079623fc629ab3c85c461bf2a96d6eb3815b386362efa8687cdbfa5799b4ad66e68fd9aed3bf1021d97cfaee54e6b6fa6196e9c2adb56eeb7746dd4e7851081007691241d8d8faa8fabd9ced25ce047e5cff43cbf085718243dc6029849c3b63dc4a19853628a37f531ae11540c713fc12955112281e38442d98d48b5b5f33847286023823392a5ff90b1bc9fe318aefe7dd325831f6ae3d7f453c7fc8fbbf72815796efce0651f7268a445e0d6affae7f746eb8f3045edd07be6ac461675888d16bdacec5b1464aee71768be0610de6fa4991b75ebbf6d9cbc143b72d1f8f76966a7e42b180790721c2ec8672adf40ef0b8a1642bfd1f21b2aabcc03fa7cff959f002c48569b92416e1f26326be8bf23bead30c1d4ab7aab07fd227b587cb8ca34b16379c713567ec3280e08766d9972c4c5e09147c4053c25c9a1b1b8fa30de0efc5c5849cf2dcc6479cb91467a3b5546082222e2bf023850c276f003ba0a935b1ae6e79ac46fecef282620cd938a3107b24ff7f992c177ed756f4df6fb2f6e067ceca2ac807f89404a07a0a0500923696dbf4b7d11022ed7afa8bfbc1ca2da2bdb0a5f26145ee810904cfb4c6d50717991f31c644b2800acb7cf2e9bbeb70ce0fd70e08062d469d0ae8c40175201ccfb1a30cfc"}, {0x90, 0x18a, 0x8, "64b4bcbe0f107fab1df64b4201c28b14a3afe1cf5b2396d4179d6e9462865ecb2ee7042bbb5550a4958e8e89b319bdbbef3f4059066568eefe5f8efd2eba6ad347743624ac29f9697791984d631fcc4914bf66692629bb8b8f67099777d439f7eb4fc3c426a72700c6239c2ca8da52015bcc410f54afdcde2d8087d59e0f7a"}, {0x60, 0x0, 0x4, "69a0ffd0dc6eef22056d15105d2114c3d9c84a1b16ba401f32ea2af7be8fba069379c6aada9569148cc9297c8098b37e3f715319cb131607fb48d7b3cdb1790bdf8a672059ff3f272ce589a02b"}, {0x68, 0x18f, 0x6, "5a6ac3069aebe0bcb9fdb8fe051f22ff2d404b5adf7196442335fa92a3d1eac746266090ec7c889c75d07b285d960ceeb4bd4dfef15975143ec1340c6b399fb0d6ad1abd5f5bfb7cff6135de3f9d9ff72f1a335862ff"}, {0x20, 0x0, 0x8, "050b4daf566074ea6f5f3ba065"}, {0x40, 0x10c, 0x7, "bb48c56df39663b4920117e9a030dc4e7ced7b456ce229b08db3eec145c8d9ab83e3dbd377d3abf25e91c6"}, {0x98, 0x11d, 0x7fff, "7a2f748ca3cd3cc7b557a8fb926d1ba5b182938800f55aa8d282f0516c6b91f43f73fee37c632e95e1397ea34a04528fad1873757ac6db2b68816fc86b687e6b06dfbed4ff1706f9685cfaa975d8db54024d7163b17c4d443f62a4933a2e76309eef878241def1e0bf2c6cf39865d4ea4dc83539df5f7feba04a24c730287ec6a1985648"}, {0xc0, 0x19f, 0xffffffffffffffff, "cf07f5282ada13c94ca68b6a66f4892d2588dc4ee538ead104ee17aba8fe5d60d0624ac3556511287140cad70907a22e0f15feb830fca0bb0519d9973ca45f4e20ba76fe4988f807391395615d3a8074477abd104f02a4371111b5b86e4412e95e68390d97f49133c2ea32b8982ce1fcd1524e1d1267fffd482acb4431a328dd0334658a2bd424f11051d384cbdb3d1f1868fef220a6bbe83dbb2e551ae69affaaa0ff5a3dbb8c80ff164561"}], 0x13d8}, 0x6}, {{&(0x7f0000001a40)=@ipx={0x4, 0x3, 0x400, "3e9f17d7d6d7", 0x8}, 0x80, &(0x7f0000001e00)=[{&(0x7f0000001ac0)="353d7ac7695bfaa2c3c625586def2eaa8d15baa49bbb55968080628e516be57cb37851b399b7b4602bc37900329352126127d8720861839d662a046fae6664338477b13a7e941a04c61b7dc5e1c5d0b78fc810699907e2f0e8d7241017d9e84ab83f", 0x62}, {&(0x7f0000001b40)="e78a60a4cc432a911d2f67321b8b9d9a2e0078c9189b26c74cfaf25d3f792f8b3c0bbd057373b246370a553dd4a3763910b1378377aeb0ade789776a4c5dbc29fea39620598df838c3e5db375c463dbd7d4d08641a21565f24d4a6ed08bf7c2bf81e6b88a6a253eb6e6b0c1a6e94557a378c89e599ca6e1d1760af74aa2d84db2eb58e37725da70cdbf230e811c3", 0x8e}, {&(0x7f0000001c00)="f478b1ae34683f939c7476d87b67cc2f7ed3dd8aca879f6e46ac622a972399eb4b4b0f2f571998e0ed1127f0444f85d539f8e084d2f13c69de5bf679547d1b1a267ccc9441", 0x45}, {&(0x7f0000001c80)}, {&(0x7f0000001cc0)="792ed2da645b2d123f055971fcd8c7e400c5", 0x12}, {&(0x7f0000001d00)="38ae3ff491ae64d04c52f86eb9f028c574d5894eab0e5de00e222917bf2d99d80b5191cd4a09cc2a7478b53c029320f76dfd96b026d7261746a6c16535a25a654fd40aacfede193ac1387ac5b1f15b71fb833b718f5a58ab45ea47cd9721118f0fcc07612465013f6613ea4d5bfe6db91d090d7ef4b993048322c6a77ebec6b4f126a59b3c04b025efe054942ba5a57cdcc49bf64e82dd61294a0ddce33a1cd0bfe85122a5153f38bcee013a5fe1f16245f1c1dc797899e3bc7978aa3e0693a05370e32e5d4e527bac66c4cb29894340a73489cb5dad347e7bedbbc7f09f8d4161", 0xe1}], 0x6}, 0x2}, {{&(0x7f0000004100)=@xdp={0x2c, 0x2, r3, 0x18}, 0x80, &(0x7f00000041c0)=[{&(0x7f0000004180)="9b1fd43e8a4aca1e73a0b437746a16f08771dfa3e9f151008b2e4af93d62e45a5f82a63341f6fd", 0x27}], 0x1, &(0x7f0000004200)=[{0x108, 0x11f, 0x10000, "2c6d31e721a8a5bc058df7e16240d70afad271f699184e823cba7b2cb4f70a64b557b45f3b49a7fb6a67d994966b990d39bf66e042df1bded92413f44b48781c5e3f6aaa0ce333d99c6d89a98237276afeb10cdc16858248bdbe87c6d45920a3c1cfca8dcd533a7bc4942eef97e94ccbcd42cf992c549ed60fc7c94841c1d0c14b3a0bc8eec5189838a9635a35e2195c3528858d02a57dcd605342c0399b82611a9dc0932bcc7ee5e08aa4a2cbac02982be5763c7927dd1866589e533beff8e7730bca06cb56efd48eef474f50ce6189704fd1a7142df591d016512fcbe3691a966f23a90a8135d6b0ef3ceabfba7c57106e13eb32"}, {0x100, 0x10e, 0x8, "b65ffe15ed8080e35458e0f7aa5cd5310a0bed9a6bc8974780ccd34b34b94698e3316f4aa77ba298f667bcfdf2f5f266e966d5b0daefd0cba3ffa7af5120622e8dab9c488c6e4166441d1e3f38fe41a746e5d67c487829019cc6de1f90505101f6ee1eefd8b1775289326eac9edb5b00ffc6209d9465841cd618ddeedf3bcc7b24689c8d2b21bcd16ade0ecbb6cb82a0a2c124902ccca4673eb17bf523db0573e8acfd899968bb60f4cf480cba078b6225c5a1c2d1495f8979b3645b78606abb4c8fd98c9e6d33445bb3b2c5889c4402f43f7a8a4b5cb624fbfcc4724cad01e0d40a3b1fc7ad9c421e"}, {0xd0, 0x118, 0x6, "8f1a6c980e5781d2682bc9a59dd21027d56c6369d70e03e923e303fe9ae0439bad384c028b4e60f2771ece4aea853dfeaf826f9363b71cbe571d16522ce74d1aa6da60970314779951ae4ef38021b1e3a33795354f5372d7419dac7ba9285497468bfc24b9cd1cc74fc5d866752c9c735307636921cebda154d501f390280bf0c18fe671cac6d5c5ece9d952d36664b41dd4fcd0ae2b17407fb68375a766895d28026e6d00d7af440322c00213fabc01018e3a39afd741db1f059e"}, {0xc8, 0x11d, 0x9, "8ed0d38f61ac06e6956c4f9f9d99053e48924b0f49b7871ad2a926cac2d11a6b7b7b0dc95e15c4407985523922cebd34a627cc82901a3d0a33c1acca5319107e546aef5ef210f42c584fae97648d3d615d0dce94519f6b3b0c4ca8dc90b5276941c2373fee93c7b6a7773e18587a23efe1be6d1e194b0fad4e812a84c05849edd5a84de2369601e38aca836b1938eb28898d980daefd78c151b723c73cbe33f918a5bdc165608753ac340c7d070e25fdbff9"}, {0xe0, 0x108, 0x0, "fbb1a19b91ed888e478b735a7b3b680b890ac02d91c2dfdfcbb9bccc3a65f8c4cd9b522bbff0d0d7e5a3341125a6b471afd444f4ce833b2002a95ae0927d4907633a4b9e1ffbaf55f0a7091bfcd636bcdd027770175e2cab2e8f6073268329d1d4bb73b1e32d27ce188b6e1f23a8fdcbe29c2db029363147906901d7e8d0a651f7a160803929c902d2f578c73b93cc29682a47e9598b0f717bc117d596ee2a990d21de40a1bdd56d39509e2f45c8abbadb20ec68da2fca5f7b41e2d24141f3d3f43d5477e7622e6c6effed564bcd162e"}, {0x58, 0x112, 0x80000001, "5191fef66292c29a0b5354533235dfbe244e2eb420fbd63fa757dd1ca458a2a8fc358bf93697cb68009d1b8d430c33d57ee70c7e5134b2cd5ff2af04dbba2ed88e01559bff0e9e82"}, {0x40, 0x0, 0x7b49, "13200d296d5c9d4b810ef8cc58b1a3d92b7cf10c43935ca2962e46cd339ae1b32832f8edf2f4fca3e619b2fadd8c"}, {0x90, 0x0, 0x40, "94f31591fb80f980ffd3b43099b19d757f14cc4826166acbb94c71b44bf7345a8b2603d8770bdf01cfe33b9f3ec86f15ffd35f2545f87c17a6d3fa77295e9ed228c7fd6b023dca36a6261c893309e5b7f0d7b801eeef757dad3b57e4553d93bd9106234cc6942df5c3fb881e0e2fb0fc893cf8890c79e081e0d75dafdb0b"}, {0x1010, 0x0, 0x0, "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"}], 0x15b8}, 0x6}], 0x3, 0x800) sendmmsg(r1, &(0x7f0000005b40), 0x40000000000014d, 0x0) 14:23:05 executing program 2: syz_emit_ethernet(0x140, &(0x7f0000000000)={@local, @random="8a37962a294f", [], {@ipv6={0x86dd, {0xffffa888, 0x6, "110c11", 0x30, 0x21, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x6, [], {0x41, 0x6, "cb155d", 0x0, 0x0, 0x0, @mcast2, @dev}}}}}}}, 0x0) [ 1715.105189] netlink: 7 bytes leftover after parsing attributes in process `syz-executor.4'. 14:23:05 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000bd7000)={&(0x7f0000c07e98)=ANY=[@ANYBLOB="000000000000000000000000000000000000000033000000ffffffff000000000000000000000000000000000000000000000000000000000000000000294900000000000000000000000000000000000000000000f0ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020001007d00000000000000480001006d64350000000000000000000019000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000"], 0x1}}, 0x0) 14:23:05 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee4050c00000f0000008bc36f7d79ce3263dac37b7403242189c609", 0x23}], 0x1}, 0x0) 14:23:05 executing program 3: syz_emit_ethernet(0x140, &(0x7f0000000000)={@local, @random="8a37962a294f", [], {@ipv6={0x86dd, {0x89060000, 0x6, "110c11", 0x30, 0x21, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x6, [], {0x0, 0x6, "cb155d", 0x0, 0x0, 0x0, @mcast2, @dev}}}}}}}, 0x0) 14:23:05 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_buf(r0, 0x107, 0xf, 0x0, &(0x7f0000000140)) 14:23:05 executing program 2: syz_emit_ethernet(0x140, &(0x7f0000000000)={@local, @random="8a37962a294f", [], {@ipv6={0x86dd, {0xffffca88, 0x6, "110c11", 0x30, 0x21, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x6, [], {0x41, 0x6, "cb155d", 0x0, 0x0, 0x0, @mcast2, @dev}}}}}}}, 0x0) [ 1715.339850] netlink: 7 bytes leftover after parsing attributes in process `syz-executor.4'. 14:23:05 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee4050c00000f0000008bc36f7d79ce3263dac37b7403242189c609", 0x23}], 0x1}, 0x0) 14:23:05 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000bd7000)={&(0x7f0000c07e98)=ANY=[@ANYBLOB="000000000000000000000000000000000000000033000000ffffffff000000000000000000000000000000000000000000000000000000000000000000294900000000000000000000000000000000000000000000fffffffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020001007d00000000000000480001006d64350000000000000000000019000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000"], 0x1}}, 0x0) 14:23:05 executing program 3: syz_emit_ethernet(0x140, &(0x7f0000000000)={@local, @random="8a37962a294f", [], {@ipv6={0x86dd, {0x8dffffff, 0x6, "110c11", 0x30, 0x21, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x6, [], {0x0, 0x6, "cb155d", 0x0, 0x0, 0x0, @mcast2, @dev}}}}}}}, 0x0) 14:23:06 executing program 1: socketpair$unix(0x1, 0x0, 0x0, 0x0) clone(0x2102009ff8, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000100)=@nat={'nat\x00', 0x19, 0x2, 0x260, [0x20000540, 0x0, 0x0, 0x20000570, 0x200008b0], 0x90, 0x0, &(0x7f0000000540)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0x0, 0x1, [{{{0x19, 0x28, 0x8863, 'team0\x00', 'veth1_to_bridge\x00', 'veth1_to_hsr\x00', 'veth0_to_team\x00', @broadcast, [0x0, 0xff, 0x0, 0x0, 0x0, 0xff], @local, [0x0, 0xff, 0x0, 0x0, 0x0, 0xff], 0x138, 0x198, 0x1d0, [@helper={'helper\x00', 0x28, {{0x0, 'irc-20000\x00'}}}, @ip6={'ip6\x00', 0x50, {{@empty, @loopback, [0xffffff00, 0xffffffff, 0xffffffff, 0xff], [0xffffff00, 0xffffffff], 0x1, 0xbf, 0x61, 0x3c, 0x4e24, 0x4e21, 0x4e23, 0x4e20}}}]}, [@common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x5}}}, @common=@AUDIT={'AUDIT\x00', 0x8, {{0x2}}}]}, @arpreply={'arpreply\x00', 0x10, {{@broadcast, 0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x2}]}, 0x2d8) 14:23:06 executing program 2: syz_emit_ethernet(0x140, &(0x7f0000000000)={@local, @random="8a37962a294f", [], {@ipv6={0x86dd, {0xffffdd86, 0x6, "110c11", 0x30, 0x21, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x6, [], {0x41, 0x6, "cb155d", 0x0, 0x0, 0x0, @mcast2, @dev}}}}}}}, 0x0) [ 1715.551533] netlink: 7 bytes leftover after parsing attributes in process `syz-executor.4'. 14:23:06 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000000)=[{0x80000006}]}, 0x10) r1 = socket$pppoe(0x18, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) connect$pppoe(r1, &(0x7f0000000040)={0x18, 0x0, {0x2, @local, 'batadv0\x00'}}, 0x1e) sendmmsg(r1, &(0x7f00000000c0), 0x0, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x40000, 0x0) 14:23:06 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000bd7000)={&(0x7f0000c07e98)=ANY=[@ANYBLOB="000000000000000000000000000000000000000033000000ffffffff0000000000000000000000000000000000000000000000000000000000000000002949000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020001007d00000000000000480001006d64350000000000000000000019000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000"], 0x1}}, 0x0) 14:23:06 executing program 3: syz_emit_ethernet(0x140, &(0x7f0000000000)={@local, @random="8a37962a294f", [], {@ipv6={0x86dd, {0xf5ffffff, 0x6, "110c11", 0x30, 0x21, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x6, [], {0x0, 0x6, "cb155d", 0x0, 0x0, 0x0, @mcast2, @dev}}}}}}}, 0x0) 14:23:06 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee4050c00000f0000008bc36f7d79ce3263dac37b7403242189c609", 0x23}], 0x1}, 0x0) 14:23:06 executing program 2: syz_emit_ethernet(0x140, &(0x7f0000000000)={@local, @random="8a37962a294f", [], {@ipv6={0x86dd, {0xfffff000, 0x6, "110c11", 0x30, 0x21, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x6, [], {0x41, 0x6, "cb155d", 0x0, 0x0, 0x0, @mcast2, @dev}}}}}}}, 0x0) 14:23:06 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x1, 0x3, &(0x7f0000002000)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f0000006f3d)=""/195}, 0x48) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x1000000000000f, &(0x7f0000000000)=0x57bd, 0x2ce) setsockopt$sock_attach_bpf(r1, 0x1, 0x34, &(0x7f0000009000)=r0, 0x4) [ 1715.667962] kernel msg: ebtables bug: please report to author: Valid hook without chain [ 1715.791208] netlink: 7 bytes leftover after parsing attributes in process `syz-executor.4'. 14:23:06 executing program 3: syz_emit_ethernet(0x140, &(0x7f0000000000)={@local, @random="8a37962a294f", [], {@ipv6={0x86dd, {0xffffa888, 0x6, "110c11", 0x30, 0x21, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x6, [], {0x0, 0x6, "cb155d", 0x0, 0x0, 0x0, @mcast2, @dev}}}}}}}, 0x0) 14:23:06 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) r1 = syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0x9, 0x220000) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qat_adf_ctl\x00', 0x100, 0x0) ioctl$TUNSETFILTEREBPF(r1, 0x800454e1, &(0x7f0000000100)=r2) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000000)=[{0x80000006}]}, 0x10) r3 = socket$pppoe(0x18, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) connect$pppoe(r3, &(0x7f0000000040)={0x18, 0x0, {0x2, @local, 'batadv0\x00'}}, 0x1e) sendmmsg(r3, &(0x7f0000005b40), 0x40000000000014d, 0x0) 14:23:06 executing program 2: syz_emit_ethernet(0x140, &(0x7f0000000000)={@local, @random="8a37962a294f", [], {@ipv6={0x86dd, {0xffffff8d, 0x6, "110c11", 0x30, 0x21, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x6, [], {0x41, 0x6, "cb155d", 0x0, 0x0, 0x0, @mcast2, @dev}}}}}}}, 0x0) 14:23:06 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee4050c00000f0000008bc36f7d79ce3263dac37b7403242189c609", 0x23}], 0x1}, 0x0) 14:23:06 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000bd7000)={&(0x7f0000c07e98)=ANY=[@ANYBLOB="000000000000000000000000000000000000000033000000ffffffff0000000000000000000000000000000000000000000000000000000000000000002949000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020001007d00000000000000480001006d64350000000000000000000019000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000"], 0x1}}, 0x0) 14:23:06 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) accept4(r0, &(0x7f0000000000)=@generic, &(0x7f0000000100)=0x80, 0x800) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160-generic\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can={0x37}, 0x1400, &(0x7f00000000c0), 0x2}}, {{&(0x7f0000005900)=@pppoe={0x18, 0x0, {0x0, @link_local, 'syzkaller0\x00'}}, 0x50, &(0x7f0000007ac0), 0x1a9, &(0x7f0000007b00)}}], 0x3fffffffffffe0d, 0x0) 14:23:06 executing program 3: syz_emit_ethernet(0x140, &(0x7f0000000000)={@local, @random="8a37962a294f", [], {@ipv6={0x86dd, {0xffffca88, 0x6, "110c11", 0x30, 0x21, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x6, [], {0x0, 0x6, "cb155d", 0x0, 0x0, 0x0, @mcast2, @dev}}}}}}}, 0x0) [ 1716.041817] netlink: 7 bytes leftover after parsing attributes in process `syz-executor.4'. 14:23:06 executing program 2: syz_emit_ethernet(0x140, &(0x7f0000000000)={@local, @random="8a37962a294f", [], {@ipv6={0x86dd, {0xfffffff5, 0x6, "110c11", 0x30, 0x21, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x6, [], {0x41, 0x6, "cb155d", 0x0, 0x0, 0x0, @mcast2, @dev}}}}}}}, 0x0) 14:23:06 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000bd7000)={&(0x7f0000c07e98)=ANY=[@ANYBLOB="000000000000000000000000000000000000000033000000ffffffff0000000000000000000000000000000000000000000000000000000000000000002949000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020001007d00000000000000480001006d64350000000000000000000019000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000"], 0x1}}, 0x0) 14:23:06 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee4050c00000f0000008bc36f7d79ce3263dac37b7403242189c609", 0x23}], 0x1}, 0x0) 14:23:06 executing program 3: syz_emit_ethernet(0x140, &(0x7f0000000000)={@local, @random="8a37962a294f", [], {@ipv6={0x86dd, {0xffffdd86, 0x6, "110c11", 0x30, 0x21, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x6, [], {0x0, 0x6, "cb155d", 0x0, 0x0, 0x0, @mcast2, @dev}}}}}}}, 0x0) [ 1716.256747] net_ratelimit: 82 callbacks suppressed [ 1716.256756] dccp_v6_rcv: dropped packet with invalid checksum [ 1716.273538] dccp_v6_rcv: dropped packet with invalid checksum 14:23:06 executing program 2: syz_emit_ethernet(0x140, &(0x7f0000000000)={@local, @random="8a37962a294f", [], {@ipv6={0x86dd, {0x4000000000000, 0x6, "110c11", 0x30, 0x21, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x6, [], {0x41, 0x6, "cb155d", 0x0, 0x0, 0x0, @mcast2, @dev}}}}}}}, 0x0) 14:23:06 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000000)=[{0x80000006}]}, 0x10) r1 = socket$pppoe(0x18, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) connect$pppoe(r1, &(0x7f0000000040)={0x18, 0x0, {0x2, @local, 'batadv0\x00'}}, 0x1e) sendmmsg(r1, &(0x7f0000005b40), 0x40000000000014d, 0x0) r3 = open(&(0x7f0000000080)='./file0\x00', 0x40, 0x104) setsockopt$bt_BT_FLUSHABLE(r3, 0x112, 0x8, &(0x7f00000000c0)=0x6, 0x4) 14:23:06 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee4050c00000f0000008bc36f7d79ce3263dac37b7403242189c609", 0x23}], 0x1}, 0x0) 14:23:06 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000bd7000)={&(0x7f0000c07e98)=ANY=[@ANYBLOB="000000000000000000000000000000000000000033000000ffffffff0000000000000000000000000000000000000000000000000000000000000000002949000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020001007d00000000000000480001006d64350000000000000000000019000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000"], 0x1}}, 0x0) 14:23:06 executing program 1: r0 = perf_event_open(&(0x7f0000000300)={0x400000001, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f000094f000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffff9c, 0xc00c642d, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$DRM_IOCTL_SET_UNIQUE(r1, 0x40106410, &(0x7f0000000040)={0xe5, &(0x7f00000000c0)="5fd9358e7426120c2974b9d0a38ded48612fd36eef7d161f1ecac451ee8515c72b76891f7cd4383b6d989bc617100d9c4a23e436abf12faaf6d43bec3b1f0bb2b3d5f39c0557631c33632ba18b520e31dd3a40c7cdf581c0e43d8d9f3a44cb6f2b0e15d36304d54538f5d5eadfd335a7ea6986906bd208a7cf359909618f3d581eda78aeb1dc23e299d9693372e896f5ca6b658662947d4148db3733191b6359a9820ce8670307cb7c0c04a1666afaf72a12a3034e3664351225647e939cc8b70d07b8694020248f0566cabcba781a34523e8d7fafa6ad36886b5a7c2a867946e67a535554"}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0x100000073) read(r2, &(0x7f0000000200)=""/250, 0x50c7e3e3) [ 1716.357492] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 1716.378911] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 14:23:07 executing program 3: syz_emit_ethernet(0x140, &(0x7f0000000000)={@local, @random="8a37962a294f", [], {@ipv6={0x86dd, {0xfffff000, 0x6, "110c11", 0x30, 0x21, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x6, [], {0x0, 0x6, "cb155d", 0x0, 0x0, 0x0, @mcast2, @dev}}}}}}}, 0x0) [ 1716.469185] dccp_v6_rcv: dropped packet with invalid checksum [ 1716.501945] dccp_v6_rcv: dropped packet with invalid checksum 14:23:07 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee4050c00000f0000008bc36f7d79ce3263dac37b7403242189c609", 0x23}], 0x1}, 0x0) 14:23:07 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000bd7000)={&(0x7f0000c07e98)=ANY=[@ANYBLOB="000000000000000000000000000000000000000033000000ffffffff0000000000000000000000000000000000000000000000000000000000000000002949000000000000000000000000000000000000000000000000000000001571000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020001007d00000000000000480001006d64350000000000000000000019000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000"], 0x1}}, 0x0) 14:23:07 executing program 2: syz_emit_ethernet(0x140, &(0x7f0000000000)={@local, @random="8a37962a294f", [], {@ipv6={0x86dd, {0x6b6b6b00000000, 0x6, "110c11", 0x30, 0x21, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x6, [], {0x41, 0x6, "cb155d", 0x0, 0x0, 0x0, @mcast2, @dev}}}}}}}, 0x0) [ 1716.602517] protocol 88fb is buggy, dev hsr_slave_0 [ 1716.607642] protocol 88fb is buggy, dev hsr_slave_1 [ 1716.667692] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 14:23:07 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee4050c00000f0000008bc36f7d79ce3263dac37b7403242189c609", 0x23}], 0x1}, 0x0) [ 1716.712480] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 14:23:07 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000bd7000)={&(0x7f0000c07e98)=ANY=[@ANYBLOB="000000000000000000000000000000000000000033000000ffffffff00000000000000000000000000000000000000000000000000000000000000000029490000000000000000000000000000000000000000000000000000ffffff9e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020001007d00000000000000480001006d64350000000000000000000019000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000"], 0x1}}, 0x0) 14:23:07 executing program 3: syz_emit_ethernet(0x140, &(0x7f0000000000)={@local, @random="8a37962a294f", [], {@ipv6={0x86dd, {0xffffff8d, 0x6, "110c11", 0x30, 0x21, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x6, [], {0x0, 0x6, "cb155d", 0x0, 0x0, 0x0, @mcast2, @dev}}}}}}}, 0x0) 14:23:07 executing program 2: syz_emit_ethernet(0x140, &(0x7f0000000000)={@local, @random="8a37962a294f", [], {@ipv6={0x86dd, {0xf0ffffffffffff, 0x6, "110c11", 0x30, 0x21, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x6, [], {0x41, 0x6, "cb155d", 0x0, 0x0, 0x0, @mcast2, @dev}}}}}}}, 0x0) 14:23:07 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000000)=[{0x80000006}]}, 0x10) r1 = socket$pppoe(0x18, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$amidi(&(0x7f00000001c0)='/dev/amidi#\x00', 0x0, 0x101002) r4 = dup3(r1, r1, 0x80000) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x6) connect$pppoe(r1, &(0x7f0000000040)={0x18, 0x0, {0x2, @local, 'batadv0\x00'}}, 0x1e) ioctl$FICLONE(r2, 0x40049409, r2) r5 = fcntl$dupfd(r0, 0x0, r3) ioctl$VIDIOC_TRY_EXT_CTRLS(r5, 0xc0205649, &(0x7f0000000100)={0xfffffffffffffffd, 0x101, 0xfffffffffffffffc, [], &(0x7f00000000c0)={0x990a5e, 0x6, [], @p_u32=&(0x7f0000000200)=0x2}}) recvfrom$netrom(r5, &(0x7f0000000140)=""/113, 0x71, 0x10100, 0x0, 0x0) sendmmsg(r1, &(0x7f0000005b40), 0x40000000000014d, 0x0) 14:23:07 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000bd7000)={&(0x7f0000c07e98)=ANY=[@ANYBLOB="000000000000000000000000000000000000000033000000ffffffff00000000000000000000000000000000000000000000000000000000000000000029490000000000000000000000000000000000000000000000000000fffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020001007d00000000000000480001006d64350000000000000000000019000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000"], 0x1}}, 0x0) 14:23:07 executing program 3: syz_emit_ethernet(0x140, &(0x7f0000000000)={@local, @random="8a37962a294f", [], {@ipv6={0x86dd, {0xfffffff5, 0x6, "110c11", 0x30, 0x21, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x6, [], {0x0, 0x6, "cb155d", 0x0, 0x0, 0x0, @mcast2, @dev}}}}}}}, 0x0) [ 1717.196015] syz-executor.1 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), order=0, oom_score_adj=0 [ 1717.208773] CPU: 1 PID: 14948 Comm: syz-executor.1 Not tainted 5.0.0-rc6+ #70 [ 1717.216070] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1717.225433] Call Trace: [ 1717.228040] dump_stack+0x172/0x1f0 [ 1717.231689] dump_header+0x10f/0xb6c [ 1717.235406] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1717.240522] ? ___ratelimit+0x60/0x595 [ 1717.244423] ? do_raw_spin_unlock+0x57/0x270 [ 1717.248851] oom_kill_process.cold+0x10/0x6f5 [ 1717.253354] ? task_will_free_mem+0x139/0x6e0 [ 1717.257857] out_of_memory+0x79a/0x1280 [ 1717.261833] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1717.266939] ? oom_killer_disable+0x280/0x280 [ 1717.271438] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1717.276553] mem_cgroup_out_of_memory+0x99/0xe0 [ 1717.281234] ? memcg_memory_event+0x40/0x40 [ 1717.285565] ? _raw_spin_unlock+0x2d/0x50 [ 1717.289714] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1717.294902] try_charge+0xfec/0x1570 [ 1717.298614] ? find_held_lock+0x35/0x130 [ 1717.302680] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1717.307532] ? kasan_check_read+0x11/0x20 [ 1717.311687] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 1717.316545] mem_cgroup_try_charge+0x24d/0x5e0 [ 1717.321136] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 1717.326072] wp_page_copy+0x408/0x1740 [ 1717.329971] ? find_held_lock+0x35/0x130 [ 1717.334043] ? pmd_pfn+0x1d0/0x1d0 [ 1717.337599] ? lock_downgrade+0x810/0x810 [ 1717.341747] ? __pte_alloc_kernel+0x220/0x220 [ 1717.346248] ? kasan_check_read+0x11/0x20 [ 1717.350401] ? do_raw_spin_unlock+0x57/0x270 [ 1717.354817] do_wp_page+0x2ed/0x1520 [ 1717.358535] ? rwlock_bug.part.0+0x90/0x90 [ 1717.362766] ? lock_acquire+0x16f/0x3f0 [ 1717.366740] ? finish_mkwrite_fault+0x4f0/0x4f0 [ 1717.371407] ? add_mm_counter_fast.part.0+0x40/0x40 [ 1717.376636] __handle_mm_fault+0x22db/0x3f20 [ 1717.381053] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 1717.385900] ? find_held_lock+0x35/0x130 [ 1717.389966] ? handle_mm_fault+0x322/0xb30 [ 1717.394228] ? kasan_check_read+0x11/0x20 [ 1717.398384] handle_mm_fault+0x43f/0xb30 [ 1717.402459] __do_page_fault+0x5da/0xd60 [ 1717.406534] do_page_fault+0x71/0x581 [ 1717.410348] page_fault+0x1e/0x30 [ 1717.413804] RIP: 0010:copy_user_enhanced_fast_string+0xe/0x20 [ 1717.419688] Code: 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 1f 00 c3 0f 1f 80 00 00 00 00 0f 1f 00 83 fa 40 0f 82 70 ff ff ff 89 d1 a4 31 c0 0f 1f 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 83 [ 1717.438620] RSP: 0018:ffff88803a207b30 EFLAGS: 00010206 [ 1717.443996] RAX: 0000000000000000 RBX: 0000000000001000 RCX: 0000000000000200 [ 1717.451290] RDX: 0000000000001000 RSI: ffff88803a788e00 RDI: 0000000020751000 [ 1717.458677] RBP: ffff88803a207b68 R08: ffffed10074f1200 R09: 0000000000000000 [ 1717.465962] R10: ffffed10074f11ff R11: ffff88803a788fff R12: 0000000020750200 [ 1717.473247] R13: ffff88803a788000 R14: 0000000020751200 R15: 00007ffffffff000 [ 1717.480575] ? copyout+0xe2/0x100 [ 1717.484561] copy_page_to_iter+0x347/0xd00 [ 1717.488818] pipe_read+0x28a/0x940 [ 1717.492383] __vfs_read+0x610/0x8c0 [ 1717.496046] ? vfs_copy_file_range+0xbb0/0xbb0 [ 1717.500651] ? rw_verify_area+0x118/0x360 [ 1717.504800] vfs_read+0x194/0x3e0 [ 1717.508275] ksys_read+0xea/0x1f0 [ 1717.511733] ? kernel_write+0x120/0x120 [ 1717.515717] ? do_syscall_64+0x26/0x610 [ 1717.519690] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1717.525059] ? do_syscall_64+0x26/0x610 [ 1717.529061] __x64_sys_read+0x73/0xb0 [ 1717.532876] do_syscall_64+0x103/0x610 [ 1717.536780] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1717.541966] RIP: 0033:0x457e29 [ 1717.545160] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1717.564058] RSP: 002b:00007fd8c7950c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1717.571770] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457e29 [ 1717.579033] RDX: 0000000050c7e3e3 RSI: 0000000020000200 RDI: 0000000000000004 [ 1717.586300] RBP: 000000000073bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 1717.593567] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd8c79516d4 [ 1717.600847] R13: 00000000004c3964 R14: 00000000004d83b0 R15: 00000000ffffffff [ 1717.612885] memory: usage 307200kB, limit 307200kB, failcnt 13132 [ 1717.619150] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1717.635633] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1717.641813] Memory cgroup stats for /syz1: cache:0KB rss:256756KB rss_huge:227328KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:8KB active_anon:256936KB inactive_file:4KB active_file:0KB unevictable:0KB [ 1717.667713] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=14938,uid=0 [ 1717.682697] Memory cgroup out of memory: Kill process 14938 (syz-executor.1) score 138 or sacrifice child 14:23:08 executing program 1: syz_emit_ethernet(0x140, &(0x7f0000000000)={@local, @random="8a37962a0b4f", [], {@ipv6={0x86dd, {0x0, 0x6, "110c11", 0x30, 0x21, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x6, [], {0x0, 0x6, "cb155d", 0x0, 0x0, 0x0, @mcast2, @dev}}}}}}}, 0x0) 14:23:08 executing program 2: syz_emit_ethernet(0x140, &(0x7f0000000000)={@local, @random="8a37962a294f", [], {@ipv6={0x86dd, {0x100000000000000, 0x6, "110c11", 0x30, 0x21, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x6, [], {0x41, 0x6, "cb155d", 0x0, 0x0, 0x0, @mcast2, @dev}}}}}}}, 0x0) 14:23:08 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee4050c00000f0000008bc36f7d79ce3263dac37b7403242189c609", 0x23}], 0x1}, 0x0) 14:23:08 executing program 3: syz_emit_ethernet(0x140, &(0x7f0000000000)={@local, @random="8a37962a294f", [], {@ipv6={0x86dd, {0x6b6b6b00000000, 0x6, "110c11", 0x30, 0x21, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x6, [], {0x0, 0x6, "cb155d", 0x0, 0x0, 0x0, @mcast2, @dev}}}}}}}, 0x0) 14:23:08 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000bd7000)={&(0x7f0000c07e98)=ANY=[@ANYBLOB="000000000000000000000000000000000000000033000000ffffffff000000000000000000000000000000000000000000000000000000000000000000294900000000000000000000000000000000000000000000000000007fffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020001007d00000000000000480001006d64350000000000000000000019000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000"], 0x1}}, 0x0) [ 1717.693254] Killed process 14940 (syz-executor.1) total-vm:72580kB, anon-rss:7548kB, file-rss:35812kB, shmem-rss:0kB [ 1717.712012] oom_reaper: reaped process 14940 (syz-executor.1), now anon-rss:0kB, file-rss:34852kB, shmem-rss:0kB 14:23:08 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000000)=[{0x80000006}]}, 0x10) r1 = socket$pppoe(0x18, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) connect$pppoe(r1, &(0x7f0000000040)={0x18, 0x0, {0x2, @local, 'batadv0\x00'}}, 0x1e) sendmmsg(r1, &(0x7f0000005b40), 0x40000000000014d, 0x0) mq_open(&(0x7f0000000080)='batadv0\x00', 0x8c0, 0x108, &(0x7f00000000c0)={0x5a, 0x8, 0x6, 0x6, 0x8000, 0x1, 0x0, 0x6a9}) 14:23:08 executing program 3: syz_emit_ethernet(0x140, &(0x7f0000000000)={@local, @random="8a37962a294f", [], {@ipv6={0x86dd, {0xf0ffffffffffff, 0x6, "110c11", 0x30, 0x21, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x6, [], {0x0, 0x6, "cb155d", 0x0, 0x0, 0x0, @mcast2, @dev}}}}}}}, 0x0) 14:23:08 executing program 2: syz_emit_ethernet(0x140, &(0x7f0000000000)={@local, @random="8a37962a294f", [], {@ipv6={0x86dd, {0x200000000000000, 0x6, "110c11", 0x30, 0x21, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x6, [], {0x41, 0x6, "cb155d", 0x0, 0x0, 0x0, @mcast2, @dev}}}}}}}, 0x0) 14:23:08 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000bd7000)={&(0x7f0000c07e98)=ANY=[@ANYBLOB="000000000000000000000000000000000000000033000000ffffffff00000000000000000000000000000000000000000000000000000000000000000029490000000000000000000000000000000000000000000000f0ffffffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020001007d00000000000000480001006d64350000000000000000000019000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000"], 0x1}}, 0x0) 14:23:08 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee4050c00000f0000008bc36f7d79ce3263dac37b7403242189c609", 0x23}], 0x1}, 0x0) 14:23:08 executing program 1: r0 = perf_event_open(&(0x7f0000000300)={0x400000001, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f000094f000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f00000000c0)="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") ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffff9c, 0xc00c642d, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0x100000073) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) 14:23:08 executing program 3: syz_emit_ethernet(0x140, &(0x7f0000000000)={@local, @random="8a37962a294f", [], {@ipv6={0x86dd, {0x100000000000000, 0x6, "110c11", 0x30, 0x21, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x6, [], {0x0, 0x6, "cb155d", 0x0, 0x0, 0x0, @mcast2, @dev}}}}}}}, 0x0) 14:23:08 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000bd7000)={&(0x7f0000c07e98)=ANY=[@ANYBLOB="000000000000000000000000000000000000000033000000ffffffff0000000000000000000000000000000000000000000000000000000000000000002949000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020001007d00000000000000480001006d64350000000000000000000019000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000"], 0x1}}, 0x0) 14:23:08 executing program 2: syz_emit_ethernet(0x140, &(0x7f0000000000)={@local, @random="8a37962a294f", [], {@ipv6={0x86dd, {0x300000000000000, 0x6, "110c11", 0x30, 0x21, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x6, [], {0x41, 0x6, "cb155d", 0x0, 0x0, 0x0, @mcast2, @dev}}}}}}}, 0x0) 14:23:08 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee4050c00000f0000008bc36f7d79ce3263dac37b7403242189c609", 0x23}], 0x1}, 0x0) 14:23:08 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000bd7000)={&(0x7f0000c07e98)=ANY=[@ANYBLOB="000000000000000000000000000000000000000033000000ffffffff0000000000000000000000000000000000000000000000000000000000000000002949000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020001007d00000000000000480001006d64350000000000000000000019000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000"], 0x1}}, 0x0) 14:23:08 executing program 3: syz_emit_ethernet(0x140, &(0x7f0000000000)={@local, @random="8a37962a294f", [], {@ipv6={0x86dd, {0x200000000000000, 0x6, "110c11", 0x30, 0x21, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x6, [], {0x0, 0x6, "cb155d", 0x0, 0x0, 0x0, @mcast2, @dev}}}}}}}, 0x0) 14:23:08 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000000)=[{0x80000006}]}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000100)={0xa, &(0x7f0000000080)=[{0x1ff, 0xf7d, 0x8000, 0x9}, {0x7fff, 0x0, 0xab, 0x9}, {0x100000000, 0x9, 0x4, 0x4}, {0xe2bc, 0x8000, 0x9, 0xc0}, {0x0, 0x1, 0x140000000000000, 0x3}, {0x1, 0x7, 0x9, 0x7}, {0x800, 0x1f, 0x40a, 0x8}, {0x5, 0x4, 0x83, 0x80000001}, {0x2, 0x10001, 0x8, 0x34e0392e}, {0x8, 0x9, 0x10001, 0x81}]}, 0x10) r1 = socket$pppoe(0x18, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) connect$pppoe(r1, &(0x7f0000000040)={0x18, 0x0, {0x2, @local, 'batadv0\x00'}}, 0x1e) sendmmsg(r1, &(0x7f0000005b40), 0x40000000000014d, 0x0) 14:23:08 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee4050c00000f0000008bc36f7d79ce3263dac37b7403242189c609", 0x23}], 0x1}, 0x0) 14:23:08 executing program 2: syz_emit_ethernet(0x140, &(0x7f0000000000)={@local, @random="8a37962a294f", [], {@ipv6={0x86dd, {0x400000000000000, 0x6, "110c11", 0x30, 0x21, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x6, [], {0x41, 0x6, "cb155d", 0x0, 0x0, 0x0, @mcast2, @dev}}}}}}}, 0x0) 14:23:09 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee4050c00000f0000008bc36f7d79ce3263dac37b7403242189c609", 0x23}], 0x1}, 0x0) 14:23:09 executing program 3: syz_emit_ethernet(0x140, &(0x7f0000000000)={@local, @random="8a37962a294f", [], {@ipv6={0x86dd, {0x300000000000000, 0x6, "110c11", 0x30, 0x21, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x6, [], {0x0, 0x6, "cb155d", 0x0, 0x0, 0x0, @mcast2, @dev}}}}}}}, 0x0) [ 1718.667364] syz-executor.1 invoked oom-killer: gfp_mask=0x7200c2(GFP_HIGHUSER|__GFP_ACCOUNT), order=0, oom_score_adj=0 [ 1718.678850] CPU: 1 PID: 15008 Comm: syz-executor.1 Not tainted 5.0.0-rc6+ #70 [ 1718.686127] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1718.695474] Call Trace: [ 1718.698065] dump_stack+0x172/0x1f0 [ 1718.701687] dump_header+0x10f/0xb6c [ 1718.705397] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1718.710513] ? ___ratelimit+0x60/0x595 [ 1718.714415] ? do_raw_spin_unlock+0x57/0x270 [ 1718.718841] oom_kill_process.cold+0x10/0x6f5 [ 1718.723346] ? task_will_free_mem+0x139/0x6e0 [ 1718.727853] out_of_memory+0x79a/0x1280 [ 1718.731818] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1718.736910] ? oom_killer_disable+0x280/0x280 [ 1718.741420] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1718.746521] mem_cgroup_out_of_memory+0x99/0xe0 [ 1718.751182] ? memcg_memory_event+0x40/0x40 [ 1718.755496] ? _raw_spin_unlock+0x2d/0x50 [ 1718.759631] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1718.764721] try_charge+0xfec/0x1570 [ 1718.768424] ? find_held_lock+0x35/0x130 [ 1718.772480] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1718.777329] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 1718.782172] ? find_held_lock+0x35/0x130 [ 1718.786225] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 1718.791065] memcg_kmem_charge_memcg+0x7c/0x130 [ 1718.795722] ? memcg_kmem_put_cache+0xb0/0xb0 [ 1718.800210] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 1718.805042] memcg_kmem_charge+0x13b/0x340 [ 1718.809270] __alloc_pages_nodemask+0x437/0x710 [ 1718.813938] ? __alloc_pages_slowpath+0x2900/0x2900 [ 1718.818950] ? ___might_sleep+0x163/0x280 [ 1718.823094] ? copyin+0xb5/0x100 [ 1718.826456] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1718.831991] alloc_pages_current+0x107/0x210 [ 1718.836392] pipe_write+0xa65/0xfb0 [ 1718.840017] __vfs_write+0x613/0x8e0 [ 1718.843733] ? kernel_read+0x120/0x120 [ 1718.847621] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1718.853179] ? rw_verify_area+0x118/0x360 [ 1718.857344] vfs_write+0x20c/0x580 [ 1718.860905] ksys_write+0xea/0x1f0 [ 1718.864467] ? __ia32_sys_read+0xb0/0xb0 [ 1718.868544] ? do_syscall_64+0x26/0x610 [ 1718.872530] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1718.877914] ? do_syscall_64+0x26/0x610 [ 1718.881905] __x64_sys_write+0x73/0xb0 [ 1718.885812] do_syscall_64+0x103/0x610 [ 1718.889730] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1718.894908] RIP: 0033:0x457e29 [ 1718.898094] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1718.917006] RSP: 002b:00007fd8c7971c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1718.924768] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457e29 [ 1718.932053] RDX: 0000000100000073 RSI: 00000000200001c0 RDI: 0000000000000005 [ 1718.939319] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1718.946580] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd8c79726d4 [ 1718.953846] R13: 00000000004c3be0 R14: 00000000004dc3d0 R15: 00000000ffffffff [ 1718.963216] memory: usage 307168kB, limit 307200kB, failcnt 13220 [ 1718.969886] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1718.977107] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1718.983687] Memory cgroup stats for /syz1: cache:0KB rss:256772KB rss_huge:227328KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:8KB active_anon:256948KB inactive_file:0KB active_file:4KB unevictable:0KB 14:23:09 executing program 1: socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/btrfs-control\x00', 0x20000, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000240)='/dev/snd/pcmC#D#p\x00', 0x703b131f, 0x0) pipe2(&(0x7f00000002c0), 0x84800) syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x9, 0x680000) syz_open_dev$mouse(&(0x7f0000000380)='/dev/input/mouse#\x00', 0x152400000000000, 0x4840) openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/dlm_plock\x00', 0x200040, 0x0) syz_open_dev$vcsn(&(0x7f0000000400)='/dev/vcs#\x00', 0x1, 0x40000) r1 = syz_open_dev$admmidi(&(0x7f0000000440)='/dev/admmidi#\x00', 0x1, 0x8001) ioctl$TIOCSWINSZ(r1, 0x5414, 0x0) r2 = openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000081, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) fchdir(r3) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) setfsuid(0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000140)) umount2(&(0x7f0000000280)='./file0\x00', 0x0) msync(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1) write$P9_RXATTRCREATE(r2, &(0x7f0000000080)={0x7, 0x21, 0x1}, 0x7) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000200)='/dev/mISDNtimer\x00', 0x0, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0x8000, 0x0) r4 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$DRM_IOCTL_VERSION(r4, 0xc0406400, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 14:23:09 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000bd7000)={&(0x7f0000c07e98)=ANY=[@ANYBLOB="000000000000000000000000000000000000000033000000ffffffff0000000000000000000000000000000000000000000000000000000000000000002949000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020001007d00000000000000480001006d64350000000000000000000019000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000"], 0x1}}, 0x0) 14:23:09 executing program 2: syz_emit_ethernet(0x140, &(0x7f0000000000)={@local, @random="8a37962a294f", [], {@ipv6={0x86dd, {0x500000000000000, 0x6, "110c11", 0x30, 0x21, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x6, [], {0x41, 0x6, "cb155d", 0x0, 0x0, 0x0, @mcast2, @dev}}}}}}}, 0x0) [ 1719.005036] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=15003,uid=0 [ 1719.020621] Memory cgroup out of memory: Kill process 15003 (syz-executor.1) score 138 or sacrifice child [ 1719.034064] Killed process 15008 (syz-executor.1) total-vm:72580kB, anon-rss:7548kB, file-rss:35808kB, shmem-rss:0kB [ 1719.054215] oom_reaper: reaped process 15008 (syz-executor.1), now anon-rss:0kB, file-rss:34848kB, shmem-rss:0kB 14:23:09 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee4050c00000f0000008bc36f7d79ce3263dac37b7403242189c609", 0x23}], 0x1}, 0x0) 14:23:09 executing program 3: syz_emit_ethernet(0x140, &(0x7f0000000000)={@local, @random="8a37962a294f", [], {@ipv6={0x86dd, {0x400000000000000, 0x6, "110c11", 0x30, 0x21, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x6, [], {0x0, 0x6, "cb155d", 0x0, 0x0, 0x0, @mcast2, @dev}}}}}}}, 0x0) 14:23:09 executing program 0: r0 = socket$packet(0x11, 0x8003, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000000)=[{0x80000006}]}, 0x10) r1 = socket$pppoe(0x18, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x42180, 0x0) setsockopt$RDS_RECVERR(r3, 0x114, 0x5, &(0x7f0000000180)=0x1, 0x4) r4 = dup2(r2, r2) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f00000000c0)={0x6, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {0x0}]}) ioctl$DRM_IOCTL_GET_CTX(r3, 0xc0086423, &(0x7f0000000100)={r5}) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f00000001c0)=[@timestamp, @sack_perm], 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) connect$pppoe(r1, &(0x7f0000000040)={0x18, 0x0, {0x2, @local, 'batadv0\x00'}}, 0x1e) sendmmsg(r1, &(0x7f0000005b40), 0x40000000000014d, 0x0) 14:23:09 executing program 2: syz_emit_ethernet(0x140, &(0x7f0000000000)={@local, @random="8a37962a294f", [], {@ipv6={0x86dd, {0x600000000000000, 0x6, "110c11", 0x30, 0x21, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x6, [], {0x41, 0x6, "cb155d", 0x0, 0x0, 0x0, @mcast2, @dev}}}}}}}, 0x0) [ 1719.163513] __nla_parse: 10 callbacks suppressed [ 1719.163524] netlink: 7 bytes leftover after parsing attributes in process `syz-executor.4'. 14:23:09 executing program 3: syz_emit_ethernet(0x140, &(0x7f0000000000)={@local, @random="8a37962a294f", [], {@ipv6={0x86dd, {0x500000000000000, 0x6, "110c11", 0x30, 0x21, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x6, [], {0x0, 0x6, "cb155d", 0x0, 0x0, 0x0, @mcast2, @dev}}}}}}}, 0x0) 14:23:09 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000bd7000)={&(0x7f0000c07e98)=ANY=[@ANYBLOB="000000000000000000000000000000000000000033000000ffffffff00000000000000000000000000000000000000000000000000000000000000000029490000000000000000000000000000000000000000000000f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020001007d00000000000000480001006d64350000000000000000000019000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000"], 0x1}}, 0x0) 14:23:09 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee4050c00000f0000008bc36f7d79ce3263dac37b7403242189c609", 0x23}], 0x1}, 0x0) 14:23:09 executing program 3: syz_emit_ethernet(0x140, &(0x7f0000000000)={@local, @random="8a37962a294f", [], {@ipv6={0x86dd, {0x600000000000000, 0x6, "110c11", 0x30, 0x21, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x6, [], {0x0, 0x6, "cb155d", 0x0, 0x0, 0x0, @mcast2, @dev}}}}}}}, 0x0) 14:23:10 executing program 2: syz_emit_ethernet(0x140, &(0x7f0000000000)={@local, @random="8a37962a294f", [], {@ipv6={0x86dd, {0x700000000000000, 0x6, "110c11", 0x30, 0x21, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x6, [], {0x41, 0x6, "cb155d", 0x0, 0x0, 0x0, @mcast2, @dev}}}}}}}, 0x0) [ 1719.419432] netlink: 7 bytes leftover after parsing attributes in process `syz-executor.4'. 14:23:10 executing program 1: syz_emit_ethernet(0x140, &(0x7f0000000000)={@local, @random="8a37962a294f", [], {@ipv6={0x86dd, {0x600000000000000, 0x6, "110c11", 0x30, 0x21, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x6, [], {0x41, 0x6, "cb155d", 0x0, 0x0, 0x0, @mcast2, @dev}}}}}}}, 0x0) 14:23:10 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000bd7000)={&(0x7f0000c07e98)=ANY=[@ANYBLOB="000000000000000000000000000000000000000033000000ffffffff0000000000000000000000000000000000000000000000000000000000000000002949000000000000000000000000000000000000000000000071150000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020001007d00000000000000480001006d64350000000000000000000019000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000"], 0x1}}, 0x0) 14:23:10 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000000)=[{0x80000006}]}, 0x10) r1 = socket$pppoe(0x18, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_dev$admmidi(&(0x7f0000000080)='/dev/admmidi#\x00', 0xe1, 0x2) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffff9c, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x35}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000140)={r4, @in={{0x2, 0x4e20, @loopback}}, 0x80000000, 0x1f10, 0x8, 0x9, 0x80}, 0x98) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) connect$pppoe(r1, &(0x7f0000000040)={0x18, 0x0, {0x2, @local, 'batadv0\x00'}}, 0x1e) sendmmsg(r1, &(0x7f0000005b40), 0x40000000000014d, 0x0) 14:23:10 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee4050c00000f0000008bc36f7d79ce3263dac37b7403242189c609", 0x23}], 0x1}, 0x0) 14:23:10 executing program 3: syz_emit_ethernet(0x140, &(0x7f0000000000)={@local, @random="8a37962a294f", [], {@ipv6={0x86dd, {0x700000000000000, 0x6, "110c11", 0x30, 0x21, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x6, [], {0x0, 0x6, "cb155d", 0x0, 0x0, 0x0, @mcast2, @dev}}}}}}}, 0x0) [ 1719.601866] netlink: 7 bytes leftover after parsing attributes in process `syz-executor.4'. 14:23:10 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000bd7000)={&(0x7f0000c07e98)=ANY=[@ANYBLOB="000000000000000000000000000000000000000033000000ffffffff0000000000000000000000000000000000000000000000000000000000000000002949000000000000000000000000000000000000000000000015710000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020001007d00000000000000480001006d64350000000000000000000019000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000"], 0x1}}, 0x0) 14:23:10 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee4050c00000f0000008bc36f7d79ce3263dac37b7403242189c609", 0x23}], 0x1}, 0x0) 14:23:10 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x1000000000004) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f0000000540)='./file0\x00', &(0x7f00000005c0)='trusted.overlay.redirect\x00', &(0x7f0000000980)='./file0\x00', 0x8, 0x1) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x1, 0x865e, 0x8, 0x6, 0x0, 0x80000001, 0x20, 0x8, 0x800, 0x80, 0xffffffff, 0x9, 0x2000000000, 0x9, 0xaf3, 0x4, 0x0, 0x5, 0x9, 0x2, 0x6, 0x6, 0x2538, 0x4, 0x7ff, 0x1, 0xffffffffffffffff, 0x5, 0xffffffff, 0x40, 0x0, 0x7, 0x8, 0x4, 0xfffffffffffffffb, 0x400, 0x0, 0x1, 0x2, @perf_config_ext={0x6, 0xad84}, 0x101, 0x4, 0x101, 0x2, 0xfff, 0x81, 0x9}, 0x0, 0xe, r3, 0x2) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/mls\x00', 0x0, 0x0) write$FUSE_NOTIFY_STORE(r4, &(0x7f0000000280)={0x2c, 0x4, 0x0, {0x6, 0xfffffffffffffff8, 0x4, 0x0, [0x0, 0x0, 0x0, 0x0]}}, 0x2c) r5 = syz_open_dev$sg(&(0x7f00000002c0)='/dev/sg#\x00', 0x0, 0x0) r6 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000000000)) tkill(r6, 0x1004000000016) close(r5) ioctl$VIDIOC_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f00000001c0)={0x0, @reserved}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000580), &(0x7f0000000600)=0xc) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r4, 0x84, 0x20, &(0x7f0000000300), &(0x7f0000000340)=0x4) write$UHID_INPUT2(0xffffffffffffffff, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x1) syz_kvm_setup_cpu$x86(r4, r4, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, &(0x7f0000000440)="400f23314b0fc76e080f00d30f6ef6250000008048b8f7ee0000000000000f23d00f21f835100000070f23f8b9800000c00f3235000400000f300f35b805000000b9e4ce857b0f01c1420f01cb", 0x4d}], 0x1, 0x50, &(0x7f0000000500)=[@dstype3={0x7, 0xb}, @cr4={0x1, 0x50}], 0x2) ioctl$KVM_SET_PIT2(r2, 0x4070aea0, &(0x7f0000000100)={[{0x7, 0x2, 0x3, 0x0, 0xffffffffffffff81, 0x4, 0x4, 0x0, 0x10000, 0x1, 0x0, 0x2}, {0x0, 0x7, 0x8, 0x8, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x2, 0x6b74, 0x8000}, {0x0, 0xffffffffffffd10c, 0x0, 0xea7, 0x5, 0x0, 0x0, 0x1, 0x80000001, 0x81, 0x0, 0x0, 0x2}]}) r7 = dup3(0xffffffffffffffff, r2, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) openat$md(0xffffffffffffff9c, &(0x7f0000000080)='/dev/md0\x00', 0x10800, 0x0) sysfs$1(0x1, &(0x7f0000000400)='/dev/md0\x00') writev(r0, &(0x7f00000a8000)=[{&(0x7f0000aef000)="580000001400192300bb4b80040d8c56286932324ba7e680129643c218fe59a2e04a03ca8164243e890000000a215a0004fbf50dfff90003a5000004000000005e0000001d30221f1000010007008a96ff0000ec6b0f536e", 0x58}], 0x1) write$P9_RWALK(r7, &(0x7f0000000040)={0x3d, 0x6f, 0x2, {0x4, [{0x4, 0x1}, {0x9, 0x10001, 0x1}, {0x0, 0x0, 0x7}, {0x20, 0x1, 0x2}]}}, 0x3d) 14:23:10 executing program 2: syz_emit_ethernet(0x140, &(0x7f0000000000)={@local, @random="8a37962a294f", [], {@ipv6={0x86dd, {0x800000000000000, 0x6, "110c11", 0x30, 0x21, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x6, [], {0x41, 0x6, "cb155d", 0x0, 0x0, 0x0, @mcast2, @dev}}}}}}}, 0x0) 14:23:10 executing program 3: syz_emit_ethernet(0x140, &(0x7f0000000000)={@local, @random="8a37962a294f", [], {@ipv6={0x86dd, {0x800000000000000, 0x6, "110c11", 0x30, 0x21, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x6, [], {0x0, 0x6, "cb155d", 0x0, 0x0, 0x0, @mcast2, @dev}}}}}}}, 0x0) [ 1719.794529] netlink: 7 bytes leftover after parsing attributes in process `syz-executor.4'. 14:23:10 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000bd7000)={&(0x7f0000c07e98)=ANY=[@ANYBLOB="000000000000000000000000000000000000000033000000ffffffff0000000000000000000000000000000000000000000000000000000000000000002949000000000000000000000000000000000000000000000000f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020001007d00000000000000480001006d64350000000000000000000019000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000"], 0x1}}, 0x0) 14:23:10 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee4050c00000f0000008bc36f7d79ce3263dac37b7403242189c609", 0x23}], 0x1}, 0x0) 14:23:10 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000000)=[{0x80000006}]}, 0x10) r1 = socket$pppoe(0x18, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_dev$usbmon(&(0x7f0000000280)='/dev/usbmon#\x00', 0xb, 0x4000) ioctl$KVM_SET_NESTED_STATE(r3, 0x4080aebf, &(0x7f00000002c0)={0x3, 0x0, 0x2080, {0x105000, 0x3}, [], "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", "cd360a4e61f8e22a758ff8b681611067af85b0def4f16d1a6058c0a70668bea8cbbbcc327770c92c7b3fcc8f8750ff2a040214d8c126280ba94e5c3fa894e0f9d0289f7c7c9f4f904828acd045f7c058da3d2795890380a145321169f9ed7e0d1f34db7f1863285c287ef2ef37fdd7d931e149b684d76afe41e04cb777ccb9ac385fc157f9f9a691ecc48564b948d3f24497276133d0066ba8e327ad2f53bdb87609e20dc03eb6059b1335b5ed7586a304666afce679c2b3e6a97480ef2519f08dbccdbfb418061b731af27fe5eb39b2414318eaf9c730124741f19aebdf16a1be53ea9d7776f9a073babe171d05e0da51a84b999ddba0af4a9c65aca0b48671b0403f3e2205492c610be7b7ad07ceab1fcccb8fa5c6a276a605640e190a8063be68dc47349c00833ebfaaddb8aeb6e1649e2d84adc66940fc80dbe4a604c12e82cd327f55bc122f4d71515fae276a49a83903dfc13ad111a3186290ecfb0e1a881097eebb86ab92555daa3c137f19ee9915cddf7eb87d13452a4b47250f1c0662a27d8cf41d55b8be1dfe86db1553db3f81ed5f01d6ace43bac209beefbd580ac17f7b8f5c178aad91d3701cc3f5ab15419d63040d67f8200d7ffbfdf39d31643337896e278fb7ca27f775de6a5112d3e472e59f75296575d77e0cf3c26342f53430da279a722935958ad305fd4d3c5a7d412cee4022af9722ec0e1e1ba90580ec072894ea17c7899dce6c59e95b85dea9b8624e2ec9d87c4fe433b3ec9bc8ee9e01d842e4049443fe2477a4f4a532b4338206f586de429e4153cbc722596b26a45d3157d53650501ff2db0723e6c7c9a2aa1af6de0d0b9d17361b2e2b33a377fb38864d8a36547a09bcee3f1fd62bda039ef8cdf29a10beb1605b1a4d228e5aa6647445048e4f95311bad298253a2108767b3fb31c28fe061b5ca71abc0f2303dffe69ff5066f50de87c6692af53afbed3ad81bc7563bedceb8630ef4a4d7ae52f99ee946932a701f3c637bcb71204f78deafd6d4c773d5dee36ef299f51498dff9e28539de4831be2dc99180f1878c77aa541728013cb778106dc841c8c49cf89e2d20d9b07c60ca7e3ad57675e94be78bc5903105462210d5dd6ebb886461ab75b3b3de80810a2b67e2927777cfed102ca174b5f529186307c325a66ec127e2ed598e5510e57e4a22c59c253ffe85ab5df70f11d03afa166abce64f9b01dbcd969c3b5b70d31c5b82a0fbab15f59044b432e2b7b1a0b4c05a9e7ee716020267c802328dface0cb95f3bd605ab38c83d7eaf50bb989e17a2ff660d75a53bdee3af6d1fcc54b7670587a0acf8405b85d06bfbfa4d0620a0d6f786961a1c9dcc055c168076708b81b87279ab00839e68fb20f18a6117c77d24d3bec47d9bd75a77519de1ac205355a5b7412057c7a91cb7a5ea0feff821f303c7eca95ee90c490bf339a03eb2aede9ae83d21cdecee063a5ba22a98c1d089d0c66c3e72b7da1c8370f9ed1fe8df6e2996a437bfce5c48d4810528ed33f65888286ba4f5ba7cf42dfa444bf6ef3ace93461db062d2c93e791fcb99a104a8086a4840d1452ab0da8cc3f2d116d969d8b882c4a641c579bb943fe4bb0523ed23008f469d8773f483a22d0716e75bf59ee9380f932419da35947ebd9910d0990f5085265e2f70c1dd257ed674970bf8ae0a8df699f44d6ede78fea64b1cc7f1de9d10b5dbe09bc856be56b9763091803a5dc536966c45f6916afe1a092a873f3ce2139cc6cd8eee44cd7f75f618a0bd0898c1fd31182fbc6ec22b4cdfa43c10c51b7028fce14a07e71cae45df065f58f07aca21079e89d4e983e40ef1066a907d96fdf721d6958b410fc934f8cdb341ffb6443237af930752eb2357ceb483ceae5198894e3cd4673c32c7063f072575b48641c9fca67d46e4ae82017c4d23a6a2def11e5f89376fb1dc9640955a2d657276952dc7572e66a866425423e66d0b7aae85f1703ea627152147e3c34b863e188af311be05575114b05391bd0c10646896bc5da601f541cd22edfd12a9f65ed33216114b9e2df67d3b1c7de854d1f61f08c764362506293c750539f1bbffe45d514e1c50e1e63c0d0ae1396127d1564094fc441dbc7e585e597d30a803e883f89c1de9927206571bc37cd0219ea6c85ff7fedf72d643fe901e2f4b19346b93165ccc2d113d3cdfe853089882e536f02ff801604b243c55ea459a74857181fc58e010a8f7b5750e8661f153a610953066c37518bfd386fd7eb48904f3ff07e97465a2b8d105e5e11ed22cc6f6372928797c62fb18d5a2c652e7e832303eebf2319b1c22dc4c774d9a1d7eb0d9673aa74638e2d3908f214afa29503f741cb5cb250152cdb14e8aff0b963670c10741eeb640f6981778824b7f0f049f88ac36df07aeb46cc078db23badcfe879e2751feb91b82e766665f0883412ded94c1beaabe91dd7da60b9eb1bd6c69c03f15a912f4eca7dba3c4e679de3a020820cd2d603f88949f783786b3eccd17064178acf7e47db27c191343d37c8a99f1772d8744d2ddee88c3b04522779eb47a57d1363a303702a81dbcf5938e3f1c8ed92465615df53e97cc911acdb0e86fa39f0cb0cede6c8cd7768693b9dc05e7f76c56cd9dc938b0a620df8fe5bfaa0168a9300fdd04e49e9f9a2b1dccfdbd280bcd4580299343ad7a99a2ba9c5a46e6e938aadf59993f823df971c7b84d6352678e9ca92a6d8a7b1a73338684261d712ee407db642cbd9a90fa85a5c731c2ac6577f67cf665081ae34e84cf66f9f11070ecbc42e9be08bd03f5f7d89cf0411d83e1cb8cc4755e495a3e94cd077ed59541c3f1cd394944935dac5c32b3d305502d0bc543c1ade7fe55e0fb25fb2a31cbcf1431219606ebe63aa16d8943d6daca39b037c77039fa9efe0a4709b10e890882564923a65d9a4224bdc9d971978cc8a63657c5839b8e435389f3e902ae6f787db6ba8ab5f64a395c544ae979272e1907b77790a96afc561f497cddbf7d58d61986031f1d95c808338c74de1ff3eee51a9d04d32629c111afdcd6faf6200655aaf10445b021a4a3f89ec5f894d1f4bb6c5aca972849a9d889e37e705e2a4eb6f87813cd1fedd2932afe0a20f548bf22751dfbe14fc9cf767ba6d076c4a95e8992aca11ef672c80333b8f15b125ed23340bfc8be8474ca2b99506d3572aa7f01e6fb1c62c2fd5821d9d96fdfc720df05195e89cce24aac02449c374b3e4a197611244db40a02948015de633694fa2ec1547b5b003944bb58a6b37c814420c55268510226809bbce20564694f9cf23c66ad4404e3e2482b17e8204c8b96edf15d07bbdf6aba603369e728706db73cb077994ad41aca3e9ad9a193eafed6463e245a80547f75272d687f229d505a4a174a4d471d57e1fb7450dbe3c1a755bea8594cebc34f035d2c692f5cc27a89353c852edf567593a5504c7089a983a98d31984a791b997594d6715f0087285c540236234f45b19658ae88c40a7defe0af4a17dba52dd8f634585f1096c4ad7481c16a56e82ccab23a10429cd6738da55935bb6bfb8f2247b40708250b281582e5fce690839436d05d7872a51d5ff405d4a1fdf91139ede9afd53d0cda41fe7cf0f68efe17914429122d87ce9a9dda20960aafae00ce34be3201cf5eae8c0981853e593423ddc6abded507209a3160ce72977e3aaf114e3d26db78b44462f06e9c4e2e58dd0f9108926e994ad24e6b97e9088f8bca6c7a21a614c57b1f1d3ec5a10067d48257d4a97fc61b72b63c4e6ed342a9a0967ab3a58c3d990ea5cd433ee2874e8f94a156da91a08ff32345d518f8adba3be95a1c7bedeebc90bb6312aac796495fc219c4f461faf5cacbee36a5b53a2bbc265e63476e50d20538e89de3cf8454b4d07843f2b746083be791bacd8ad77c5b5b3ddcfc56de18d152cf085f9a14a2163682b77be19c80fb938b763fc19ce56ea440b424b2e09360af4e553cb507271bf50289a7a92640e3dd410697db7a892b9f2697b6f1155140bff5b02902c95b5f76bf42a9885d9b1fbbd40eb3f09725444096a0c40400bee09069f8819d77b0dcb46c0388e9392014fb8f914a78026f42a69119a3ad127467be18d365b6ba5cfad6daa5bedd0ecb78f7a0515f9af368c8d6b8d8705651cb8fdc05d9409b49ffeda58a5d0bc09425c95b215431303f8f0a6eff5bb70dfb97a863910d11c96046f51ff4144b06b790408baa3958e8fbf0c9b4319eec11da6a18581c3880bcff8762d98e405ecbcf3cc5d6d03e4c8c28c140782f8ba12f2075650e522af00a00064bb1c0c1824c935e928ae6789591325f1b21cff85c4252eb9172cbe7da41f7c034a455e70cc33ba4adde9f2ef476ccd2cc39cdf8be000836e7a88ac5886945d1714869d8c1d733a227b44dab196ece3546eea8f706a08082a637d166e4a0d727a8e88766fe3c76b5dc30846fdd339b70c206a255a36e2635fa56fa0c9230f70076e3faba2bc124d11ef59849796066686dc90b98d7b0ac5d6a04f121e69de4378ca6ad64b7556d8255b14cd44be819849f0ef3c773d749586a2c5b8ff07f5e986c1a0007fe25974679e6cf28f61a48ec11618a25ca6fdc32af6dba6fea6950d0831188db0eb23d4d2054a68b1bd356a01ded8d23cc9c64cdd2931a1f10c3daa865f1defa1d41af2398aad37b139db44befa5ce3caf6109340a059d81402bda821124f6b46a47382db78fb9619d046db3f69307ad556da540ed866c72fe78db71b3448dc0b00408441e896358406fd5912caf25563faff00504f6cc9d352e00d46bd99624d893317c1621be0128819645dbf9acac29eedfe7551a85c124d45ab775d4904a0ed9bf0a133b6d91e80cca129f9d7ba1ab3112659104a5b15c42cbb5ef2d0bb511355bbc194e13a5228dc3388813477168c8044e12cfa9de61c398e648fb028ca0bcf75e43f9cda60802dea14efd23b3b50099fef492ca24dfa07743b2ec074902d93b452a4fcf1a0addc219b73bf9f931608dbd29363de71665c34445a83a88f460c22e2903f74b5f5052e517655d960818e9478729a7e53483e4b96be3ba1943670149bfa44ef67a3c1c943652b3d2c634b15075d3c83a1e9c8bd08d74d36669149a6b27cdc4b90f174a1bf9d2d02eefe0796d4270b4535240762142fd70a7a2c2fe828feb7f523e777d2c062bd1f2773b8ed2fee21988532051caea31e0a97f65938db5e4497a47e1a726e133cd4e5a1700a6a29df0f5fb2dee3b6b09763d88eee34a29debfbf101a7812a48814126591b7f1f3eaa4f85609b56c110f8a45bddf7de08ea73f77020d445afceb50b5eac6e2e1a53df65fe6ff03458539b74f84d9e1b8f48cec33953618e50cce74df09af26955a2b71a5a7ef055eb05490b14eaee2e36e760a79df2fea5243496fbe603db93c5a8493e7cabde8ceff276d4bbb9f5f532e56429e0f8d6ff61af60984791f99b0a77a14296fcb0c9fb5cf2dc2950381e1b52c5ed40d653ca9ce1a98a002dde27d0e31dcd58ce9cfa00dd8ccfd708f04121815ebc7f1169c65c7113a1018abf6f8982d7cbf8e09099e40fcd03c49bf693652a843a69cc0d4486df1ef361714a67104226737f313635a7b6f048d52525b2f3015e63155c0cf0aea905fa5ed78e3e840e67be4ed20fee3ec4abcfcb5a71dde23a1fbdd89fc4f8165cdbbb4349db6c30b1468544b6cb4ba2f8d355f8fa9d1062d02cfee6ca111a2e300eb5280a74f72cd9a4e388660fbf80218839604556b3fe36dc0a4336b178d7207d6097952fcf5a318447c4d6"}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r4 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/commit_pending_bools\x00', 0x1, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000002380)={0x0, 0x11, 0xfa00, {0x41, &(0x7f0000002400)={0xffffffffffffffff}, 0x12f, 0x1009}}, 0xffffffffffffff34) write$RDMA_USER_CM_CMD_ACCEPT(r4, &(0x7f0000000140)={0x8, 0x120, 0xfa00, {0x1, {0x194b357100, 0xffffffff7fffffff, "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", 0xa0, 0x8, 0x8, 0x2, 0x7, 0x70, 0x1, 0x1}, r5}}, 0x128) connect$pppoe(r1, &(0x7f0000000040)={0x18, 0x0, {0x4, @random="cd23f187a229", 'ip6_vti0\x00'}}, 0x1e) sendmmsg(r1, &(0x7f0000005b40), 0x40000000000014d, 0x0) ioctl$UDMABUF_CREATE_LIST(r3, 0x40087543, &(0x7f0000002440)={0x1, 0x9, [{r4, 0x0, 0x100000000, 0x4000}, {r3, 0x0, 0x1000, 0xfffffffffffff000}, {r3, 0x0, 0x2000, 0xfffff000}, {r4, 0x0, 0x912227c6190da2f1, 0xfffff000}, {r3, 0x0, 0xfffffffffffff000, 0x100000000}, {r3, 0x0, 0x0, 0x8000}, {r3, 0x0, 0x0, 0xfffff000}, {r3, 0x0, 0xfffffffff0000000, 0x11000}, {r3, 0x0, 0xfffff000, 0xfffffffffffff000}]}) 14:23:10 executing program 2: syz_emit_ethernet(0x140, &(0x7f0000000000)={@local, @random="8a37962a294f", [], {@ipv6={0x86dd, {0x806000000000000, 0x6, "110c11", 0x30, 0x21, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x6, [], {0x41, 0x6, "cb155d", 0x0, 0x0, 0x0, @mcast2, @dev}}}}}}}, 0x0) 14:23:10 executing program 3: syz_emit_ethernet(0x140, &(0x7f0000000000)={@local, @random="8a37962a294f", [], {@ipv6={0x86dd, {0x806000000000000, 0x6, "110c11", 0x30, 0x21, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x6, [], {0x0, 0x6, "cb155d", 0x0, 0x0, 0x0, @mcast2, @dev}}}}}}}, 0x0) [ 1720.091274] netlink: 7 bytes leftover after parsing attributes in process `syz-executor.4'. 14:23:10 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000bd7000)={&(0x7f0000c07e98)=ANY=[@ANYBLOB="000000000000000000000000000000000000000033000000ffffffff00000000000000000000000000000000000000000000000000000000000000000029490000000000000000000000000000000000000000000000fffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020001007d00000000000000480001006d64350000000000000000000019000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000"], 0x1}}, 0x0) 14:23:10 executing program 2: syz_emit_ethernet(0x140, &(0x7f0000000000)={@local, @random="8a37962a294f", [], {@ipv6={0x86dd, {0x900000000000000, 0x6, "110c11", 0x30, 0x21, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x6, [], {0x41, 0x6, "cb155d", 0x0, 0x0, 0x0, @mcast2, @dev}}}}}}}, 0x0) 14:23:10 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee4050c00000f0000008bc36f7d79ce3263dac37b7403242189c609", 0x23}], 0x1}, 0x0) 14:23:10 executing program 3: syz_emit_ethernet(0x140, &(0x7f0000000000)={@local, @random="8a37962a294f", [], {@ipv6={0x86dd, {0x900000000000000, 0x6, "110c11", 0x30, 0x21, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x6, [], {0x0, 0x6, "cb155d", 0x0, 0x0, 0x0, @mcast2, @dev}}}}}}}, 0x0) 14:23:10 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffc000/0x2000)=nil}) openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/context\x00', 0x2, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socketpair$unix(0x1, 0x4000000002, 0x0, &(0x7f0000003b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000280)={0x77, 0x0, [0x4b564d03, 0x1, 0x1a0]}) 14:23:10 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000bd7000)={&(0x7f0000c07e98)=ANY=[@ANYBLOB="000000000000000000000000000000000000000033000000ffffffff0000000000000000000000000000000000000000000000000000000000000000002949000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020001007d00000000000000480001006d64350000000000000000000019000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000"], 0x1}}, 0x0) 14:23:11 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000000)=[{0x80000006}]}, 0x10) r1 = socket$pppoe(0x18, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) connect$pppoe(r1, &(0x7f0000000040)={0x18, 0x0, {0x2, @local, 'batadv0\x00'}}, 0x1e) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f0000000080)={0x7fff, 0x0, {0x1, 0x8b548413e9e9ca2c, 0x4, 0x2, 0x1}}) sendmmsg(r1, &(0x7f0000005b40), 0x40000000000014d, 0x0) [ 1720.422813] netlink: 7 bytes leftover after parsing attributes in process `syz-executor.4'. 14:23:11 executing program 2: syz_emit_ethernet(0x140, &(0x7f0000000000)={@local, @random="8a37962a294f", [], {@ipv6={0x86dd, {0xd00000000000000, 0x6, "110c11", 0x30, 0x21, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x6, [], {0x41, 0x6, "cb155d", 0x0, 0x0, 0x0, @mcast2, @dev}}}}}}}, 0x0) 14:23:11 executing program 3: syz_emit_ethernet(0x140, &(0x7f0000000000)={@local, @random="8a37962a294f", [], {@ipv6={0x86dd, {0xd00000000000000, 0x6, "110c11", 0x30, 0x21, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x6, [], {0x0, 0x6, "cb155d", 0x0, 0x0, 0x0, @mcast2, @dev}}}}}}}, 0x0) 14:23:11 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000bd7000)={&(0x7f0000c07e98)=ANY=[@ANYBLOB="000000000000000000000000000000000000000033000000ffffffff0000000000000000000000000000000000000000000000000000000000000000002949000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020001007d00000000000000480001006d64350000000000000000000019000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000"], 0x1}}, 0x0) 14:23:11 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee4050c00000f0000008bc36f7d79ce3263dac37b7403242189c609", 0x23}], 0x1}, 0x0) 14:23:11 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x9, 0x4, 0x2, 0x5, 0x0, 0x1}, 0x2c) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x10020000000, 0x0}, 0x2c) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x10020000000, 0x0}, 0x2c) r0 = syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x1000, 0x20000) r1 = gettid() ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f00000000c0)=r1) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$SIOCGSTAMPNS(r2, 0x8907, &(0x7f0000000040)) 14:23:11 executing program 2: syz_emit_ethernet(0x140, &(0x7f0000000000)={@local, @random="8a37962a294f", [], {@ipv6={0x86dd, {0x2000000000000000, 0x6, "110c11", 0x30, 0x21, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x6, [], {0x41, 0x6, "cb155d", 0x0, 0x0, 0x0, @mcast2, @dev}}}}}}}, 0x0) 14:23:11 executing program 3: syz_emit_ethernet(0x140, &(0x7f0000000000)={@local, @random="8a37962a294f", [], {@ipv6={0x86dd, {0x2000000000000000, 0x6, "110c11", 0x30, 0x21, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x6, [], {0x0, 0x6, "cb155d", 0x0, 0x0, 0x0, @mcast2, @dev}}}}}}}, 0x0) 14:23:11 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000bd7000)={&(0x7f0000c07e98)=ANY=[@ANYBLOB="000000000000000000000000000000000000000033000000ffffffff0000000000000000000000000000000000000000000000000000000000000000002949000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020001007d00000000000000480001006d64350000000000000000000019000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000"], 0x1}}, 0x0) [ 1720.728075] netlink: 7 bytes leftover after parsing attributes in process `syz-executor.4'. 14:23:11 executing program 2: syz_emit_ethernet(0x140, &(0x7f0000000000)={@local, @random="8a37962a294f", [], {@ipv6={0x86dd, {0x2100000000000000, 0x6, "110c11", 0x30, 0x21, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x6, [], {0x41, 0x6, "cb155d", 0x0, 0x0, 0x0, @mcast2, @dev}}}}}}}, 0x0) 14:23:11 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee4050c00000f0000008bc36f7d79ce3263dac37b7403242189c609", 0x23}], 0x1}, 0x0) 14:23:11 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x8000, 0x0) ioctl$KDADDIO(r1, 0x4b34, 0x8199) sendfile(r0, r0, &(0x7f0000000040)=0x19, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x4f, 0x618, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 14:23:11 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000000)=[{0x80000006, 0x0, 0x3}]}, 0x10) r1 = socket$pppoe(0x18, 0x1, 0x0) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) connect$pppoe(r1, &(0x7f0000000040)={0x18, 0x0, {0x2, @local, 'batadv0\x00'}}, 0x1e) sendmmsg(r2, &(0x7f00000013c0), 0x5a, 0x4) 14:23:11 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000bd7000)={&(0x7f0000c07e98)=ANY=[@ANYBLOB="000000000000000000000000000000000000000033000000ffffffff0000000000000000000000000000000000000000000000000000000000000000002949000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020001007d00000000000000480001006d64350000000000000000000019000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000"], 0x1}}, 0x0) 14:23:11 executing program 3: syz_emit_ethernet(0x140, &(0x7f0000000000)={@local, @random="8a37962a294f", [], {@ipv6={0x86dd, {0x2100000000000000, 0x6, "110c11", 0x30, 0x21, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x6, [], {0x0, 0x6, "cb155d", 0x0, 0x0, 0x0, @mcast2, @dev}}}}}}}, 0x0) 14:23:11 executing program 2: syz_emit_ethernet(0x140, &(0x7f0000000000)={@local, @random="8a37962a294f", [], {@ipv6={0x86dd, {0x2800000000000000, 0x6, "110c11", 0x30, 0x21, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x6, [], {0x41, 0x6, "cb155d", 0x0, 0x0, 0x0, @mcast2, @dev}}}}}}}, 0x0) 14:23:11 executing program 1: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x0, 0x0) r1 = gettid() ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000100)=r1) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x80000, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$TIOCEXCL(r2, 0x540c) r3 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) ioctl$KDMKTONE(r3, 0x4b30, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) keyctl$session_to_parent(0x12) [ 1721.016309] netlink: 7 bytes leftover after parsing attributes in process `syz-executor.4'. 14:23:11 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000bd7000)={&(0x7f0000c07e98)=ANY=[@ANYBLOB="000000000000000000000000000000000000000033000000ffffffff0000000000000000000000000000000000000000000000000000000000000000002949000000000000000000000000000000000000000000000000001571000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020001007d00000000000000480001006d64350000000000000000000019000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000"], 0x1}}, 0x0) 14:23:11 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee4050c00000f0000008bc36f7d79ce3263dac37b7403242189c609", 0x23}], 0x1}, 0x0) 14:23:11 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000000)=[{0x80000006, 0x0, 0xffffffffffffffff}]}, 0x10) r1 = socket$pppoe(0x18, 0x1, 0x0) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x4001fe) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f00000002c0)) bind$unix(r2, &(0x7f0000000200)=@abs={0x0, 0x0, 0x4e23}, 0x6e) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000100)={@in={{0x2, 0x4e21, @local}}, 0x0, 0x2, 0x0, "3debec51e84cac6bf07c329c60c5418d5165db626d7268c8a42428aaa5e74d16a4bf748cfc3e7e7d2b176715dea4d3333c9cfbee6fec9bb82b15da8ad80b76516b2f86415d239898e1eee44da8ed231b"}, 0xd8) write$P9_RSYMLINK(r2, &(0x7f0000000300)={0x14, 0x11, 0x2, {0x20, 0x1, 0x5}}, 0x14) connect$pppoe(r1, &(0x7f0000000040)={0x18, 0x0, {0x2, @local, 'batadv0\x00'}}, 0x1e) ioctl$SIOCX25SCUDMATCHLEN(r3, 0x89e7, &(0x7f0000000280)={0x5}) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/current\x00', 0x2, 0x0) sendmmsg(r1, &(0x7f0000005b40), 0x0, 0x0) 14:23:11 executing program 3: syz_emit_ethernet(0x140, &(0x7f0000000000)={@local, @random="8a37962a294f", [], {@ipv6={0x86dd, {0x2800000000000000, 0x6, "110c11", 0x30, 0x21, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x6, [], {0x0, 0x6, "cb155d", 0x0, 0x0, 0x0, @mcast2, @dev}}}}}}}, 0x0) 14:23:11 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000bd7000)={&(0x7f0000c07e98)=ANY=[@ANYBLOB="000000000000000000000000000000000000000033000000ffffffff00000000000000000000000000000000000000000000000000000000000000000029490000000000000000000000000000000000000000000000ffffff9e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020001007d00000000000000480001006d64350000000000000000000019000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000"], 0x1}}, 0x0) 14:23:11 executing program 2: syz_emit_ethernet(0x140, &(0x7f0000000000)={@local, @random="8a37962a294f", [], {@ipv6={0x86dd, {0x3201000000000000, 0x6, "110c11", 0x30, 0x21, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x6, [], {0x41, 0x6, "cb155d", 0x0, 0x0, 0x0, @mcast2, @dev}}}}}}}, 0x0) [ 1721.258470] netlink: 7 bytes leftover after parsing attributes in process `syz-executor.4'. 14:23:11 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee4050c00000f0000008bc36f7d79ce3263dac37b7403242189c609", 0x23}], 0x1}, 0x0) 14:23:11 executing program 1: socket$inet6(0xa, 0x0, 0x8010000000000084) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x6, 0x0) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, &(0x7f0000000100)={0x7, 0x1, 0x56b8, 0x7}) bind$inet6(0xffffffffffffffff, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000440)={'vcan0\x00', 0x0}) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f00000000c0)=0x2, 0xc6) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x2000, 0x1000}, 0x48) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f00000008c0)=0x8, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f00000002c0)=0x80, 0x4) bind$xdp(r3, &(0x7f0000000300)={0x2c, 0x0, r2}, 0x10) dup3(r1, r3, 0x0) [ 1721.375139] net_ratelimit: 91 callbacks suppressed [ 1721.375151] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 1721.429881] dccp_v6_rcv: dropped packet with invalid checksum [ 1721.460004] dccp_v6_rcv: dropped packet with invalid checksum 14:23:12 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000bd7000)={&(0x7f0000c07e98)=ANY=[@ANYBLOB="000000000000000000000000000000000000000033000000ffffffff00000000000000000000000000000000000000000000000000000000000000000029490000000000000000000000000000000000000000000000fffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020001007d00000000000000480001006d64350000000000000000000019000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000"], 0x1}}, 0x0) 14:23:12 executing program 2: syz_emit_ethernet(0x140, &(0x7f0000000000)={@local, @random="8a37962a294f", [], {@ipv6={0x86dd, {0x3f00000000000000, 0x6, "110c11", 0x30, 0x21, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x6, [], {0x41, 0x6, "cb155d", 0x0, 0x0, 0x0, @mcast2, @dev}}}}}}}, 0x0) [ 1721.475619] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 1721.488613] netlink: 7 bytes leftover after parsing attributes in process `syz-executor.4'. 14:23:12 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/enforce\x00', 0x100, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000280)={r1, 0x50, &(0x7f0000000200)}, 0x10) ioctl$SG_GET_TIMEOUT(r1, 0x2202, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000000)=[{0x80000006}]}, 0x10) r2 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x1000, 0x840) ioctl$GIO_CMAP(r2, 0x4b70, &(0x7f0000000180)) getsockopt$EBT_SO_GET_INFO(r2, 0x0, 0x80, &(0x7f0000000300)={'broute\x00'}, &(0x7f0000000380)=0x78) accept$unix(r2, &(0x7f00000000c0)=@abs, &(0x7f0000000140)=0x6e) r3 = socket$pppoe(0x18, 0x1, 0x0) socketpair$unix(0x1, 0x101, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) delete_module(&(0x7f00000002c0)='*nodeveth0.-[selinux.!\x00', 0x800) ioctl$FS_IOC_ENABLE_VERITY(r4, 0x6685) connect$pppoe(r3, &(0x7f0000000040)={0x18, 0x0, {0x2, @local, 'batadv0\x00'}}, 0x1e) sendmmsg(r3, &(0x7f0000005b40), 0x40000000000014d, 0x0) 14:23:12 executing program 3: syz_emit_ethernet(0x140, &(0x7f0000000000)={@local, @random="8a37962a294f", [], {@ipv6={0x86dd, {0x3201000000000000, 0x6, "110c11", 0x30, 0x21, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x6, [], {0x0, 0x6, "cb155d", 0x0, 0x0, 0x0, @mcast2, @dev}}}}}}}, 0x0) 14:23:12 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee4050c00000f0000008bc36f7d79ce3263dac37b7403242189c609", 0x23}], 0x1}, 0x0) 14:23:12 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0xfb, 0x40000000004, 0x201}, 0x2c) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000a80)={r0, &(0x7f00000008c0), 0x0}, 0x18) r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0xffffffffffffffc0, 0x0) ioctl$KVM_ASSIGN_PCI_DEVICE(r1, 0x8040ae69, &(0x7f0000000100)={0x800, 0x2, 0x903, 0x3, 0x40}) ioctl$EVIOCGSW(r1, 0x8040451b, &(0x7f0000000040)=""/178) [ 1721.711326] dccp_v6_rcv: dropped packet with invalid checksum [ 1721.722554] protocol 88fb is buggy, dev hsr_slave_0 [ 1721.722592] protocol 88fb is buggy, dev hsr_slave_0 [ 1721.727704] protocol 88fb is buggy, dev hsr_slave_1 [ 1721.732674] protocol 88fb is buggy, dev hsr_slave_1 [ 1721.737737] protocol 88fb is buggy, dev hsr_slave_0 14:23:12 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000bd7000)={&(0x7f0000c07e98)=ANY=[@ANYBLOB="000000000000000000000000000000000000000033000000ffffffff0000000000000000000000000000000000000000000000000000000000000000002949000000000000000000000000000000000000000000000000f0ffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020001007d00000000000000480001006d64350000000000000000000019000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000"], 0x1}}, 0x0) 14:23:12 executing program 3: syz_emit_ethernet(0x140, &(0x7f0000000000)={@local, @random="8a37962a294f", [], {@ipv6={0x86dd, {0x4000000000000000, 0x6, "110c11", 0x30, 0x21, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x6, [], {0x0, 0x6, "cb155d", 0x0, 0x0, 0x0, @mcast2, @dev}}}}}}}, 0x0) 14:23:12 executing program 2: syz_emit_ethernet(0x140, &(0x7f0000000000)={@local, @random="8a37962a294f", [], {@ipv6={0x86dd, {0x4000000000000000, 0x6, "110c11", 0x30, 0x21, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x6, [], {0x41, 0x6, "cb155d", 0x0, 0x0, 0x0, @mcast2, @dev}}}}}}}, 0x0) 14:23:12 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee4050c00000f0000008bc36f7d79ce3263dac37b7403242189c609", 0x23}], 0x1}, 0x0) 14:23:12 executing program 2: syz_emit_ethernet(0x140, &(0x7f0000000000)={@local, @random="8a37962a294f", [], {@ipv6={0x86dd, {0x4305000000000000, 0x6, "110c11", 0x30, 0x21, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x6, [], {0x41, 0x6, "cb155d", 0x0, 0x0, 0x0, @mcast2, @dev}}}}}}}, 0x0) 14:23:12 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000012c0)={&(0x7f0000000000), 0xc, &(0x7f0000001280)={&(0x7f0000000900)=@newlink={0x38, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_ENCAP_DPORT={0x8}]]}}}]}, 0x38}}, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x2, 0x0) 14:23:12 executing program 3: syz_emit_ethernet(0x140, &(0x7f0000000000)={@local, @random="8a37962a294f", [], {@ipv6={0x86dd, {0x4305000000000000, 0x6, "110c11", 0x30, 0x21, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x6, [], {0x0, 0x6, "cb155d", 0x0, 0x0, 0x0, @mcast2, @dev}}}}}}}, 0x0) 14:23:12 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000bd7000)={&(0x7f0000c07e98)=ANY=[@ANYBLOB="000000000000000000000000000000000000000033000000ffffffff000000000000000000000000000000000000000000000000000000000000000000294900000000000000000000000000000000000000000000007fffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020001007d00000000000000480001006d64350000000000000000000019000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000"], 0x1}}, 0x0) 14:23:12 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee4050c00000f0000008bc36f7d79ce3263dac37b7403242189c609", 0x23}], 0x1}, 0x0) 14:23:12 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) r1 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video2\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r1, 0xc040564a, &(0x7f0000000240)={0x4000000, 0x0, 0x300b, 0x0, 0xfec, 0x3ff, 0x2, 0x1}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x20000198, &(0x7f0000000200)=[{0x80000006, 0x8001}]}, 0x10) r2 = socket$pppoe(0x18, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_dev$radio(&(0x7f0000000300)='/dev/radio#\x00', 0x0, 0x2) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000400)=ANY=[@ANYBLOB="01000000000000000001000000ffffff6000000000000000ef8f6fbeaf0959727a982a25d788b0d0b924261a9b2664cca157801d97e3bb478cfd8c5a8664763cea859859fa287ad553b12468a75a3fef4896e9ae9baa5e64c1ab36a587a913304924f963a1c595c7c2c7b737623ebc119e6620fb91b8f00fba311086744fb0f690a63fc8aacdc332edc5d5db5315a4c6aa77b648041f635eb20fbc833c62243d58cab75aaaacdf57afb4f06d9edea5ba9a8291911f4edbcb2ff2e1c286d4aaa162fc81816e9c212e4f160a", @ANYPTR=&(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004ab000000000000000000000000000000000000000000000cbfc40e363b66fa7adc3a419142f69a5779a9c20ee6a6af10b9de217f80ec92408916e51e4107381a76e3b8909eaa0b3f57aa54420964f91780de7f07aaf171f0befe37a6a94dc8d4cb02902e0970cae97"], @ANYBLOB="0000020000400000"]) ioctl$VIDIOC_QUERYSTD(0xffffffffffffffff, 0x8008563f, &(0x7f00000000c0)=0x0) ioctl$VIDIOC_S_STD(r4, 0x40085618, &(0x7f0000000100)=r5) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) accept(r3, &(0x7f0000000140)=@pptp={0x18, 0x2, {0x0, @multicast1}}, &(0x7f00000001c0)=0x80) connect$pppoe(r2, &(0x7f0000000040)={0x18, 0x0, {0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}, '\x00\x00\x04\x00'}}, 0xfffffffffffffcbe) sendmmsg(r2, &(0x7f0000005b40), 0x40000000000014d, 0x0) 14:23:12 executing program 2: syz_emit_ethernet(0x140, &(0x7f0000000000)={@local, @random="8a37962a294f", [], {@ipv6={0x86dd, {0x6000000000000000, 0x6, "110c11", 0x30, 0x21, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x6, [], {0x41, 0x6, "cb155d", 0x0, 0x0, 0x0, @mcast2, @dev}}}}}}}, 0x0) 14:23:12 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000bd7000)={&(0x7f0000c07e98)=ANY=[@ANYBLOB="000000000000000000000000000000000000000033000000ffffffff000000000000000000000000000000000000000000000000000000000000000000294900000000000000000000000000000000000000000000009effffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020001007d00000000000000480001006d64350000000000000000000019000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000"], 0x1}}, 0x0) [ 1722.153569] netlink: 'syz-executor.1': attribute type 18 has an invalid length. [ 1722.189018] netlink: 'syz-executor.1': attribute type 18 has an invalid length. 14:23:12 executing program 3: syz_emit_ethernet(0x140, &(0x7f0000000000)={@local, @random="8a37962a294f", [], {@ipv6={0x86dd, {0x6000000000000000, 0x6, "110c11", 0x30, 0x21, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x6, [], {0x0, 0x6, "cb155d", 0x0, 0x0, 0x0, @mcast2, @dev}}}}}}}, 0x0) 14:23:12 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee4050c00000f0000008bc36f7d79ce3263dac37b7403242189c609", 0x23}], 0x1}, 0x0) 14:23:12 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/checkreqprot\x00', 0x4000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x5) gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x80020, 0x4, @thr={&(0x7f0000000280)="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", &(0x7f0000001280)="7c5afa475e5783b66059fd17266a75a63cf017f74cd2f42f6c533332c4d1614cbc7437d41234ec30eab75a030d2e2d7efcfa69ffa62a51fcea88a3f03bdf7d468db8"}}, &(0x7f00000000c0)) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0xe4c}}, 0x0) io_pgetevents(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0), 0x8}) 14:23:12 executing program 2: syz_emit_ethernet(0x140, &(0x7f0000000000)={@local, @random="8a37962a294f", [], {@ipv6={0x86dd, {0x800e000000000000, 0x6, "110c11", 0x30, 0x21, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x6, [], {0x41, 0x6, "cb155d", 0x0, 0x0, 0x0, @mcast2, @dev}}}}}}}, 0x0) 14:23:12 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000bd7000)={&(0x7f0000c07e98)=ANY=[@ANYBLOB="000000000000000000000000000000000000000033000000ffffffff00000000000000000000000000000000000000000000000000000000000000000029490000000000000000000000000000000000000000000000f0ffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020001007d00000000000000480001006d64350000000000000000000019000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000"], 0x1}}, 0x0) 14:23:13 executing program 3: syz_emit_ethernet(0x140, &(0x7f0000000000)={@local, @random="8a37962a294f", [], {@ipv6={0x86dd, {0x800e000000000000, 0x6, "110c11", 0x30, 0x21, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x6, [], {0x0, 0x6, "cb155d", 0x0, 0x0, 0x0, @mcast2, @dev}}}}}}}, 0x0) 14:23:13 executing program 0: r0 = socket$inet6(0xa, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, r0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000004c0)='/selinux/policy\x00', 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x4) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x800, 0x0) syz_kvm_setup_cpu$x86(r2, r2, &(0x7f000032f000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000040)="0f2385ba210066edf40f35ba4300b07dee0f356465222c360f30baf80c66b845377e8a66efbafc0cb000ee66b9350900000f32", 0x33}], 0x1, 0x2, &(0x7f00000000c0)=[@flags={0x3, 0x10000}], 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = geteuid() ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r1, 0xc0bc5310, &(0x7f0000000280)) quotactl(0x6, &(0x7f0000000100)='./file0\x00', r3, &(0x7f0000000140)="63b8b30f703659b6c8a34f1da79cab64e42c8007fd650e28e149ea2134e0652dbc91d46fc677c652aff260ea5fb742a89c9f106804541ff396ee1ecf338474825558db4d338841f54a6906b91796772fc704346200ee79d8d8187cb0f85a6407e060f05fe2922aa28a248101efaedc0abea90aa3cd8d7c2e0d07523967b403264f780d67d62faea67e4d1dd7e4756ba59942f897ebfeefc332b09af5f8e07907d41b6cf01edcedd7bbd59731d4cf70b70ffd2b47c5735a37d3ed63a18272db296f9146b8f85b72fb756a54621f19") timer_create(0x7, &(0x7f0000000440)={0x0, 0x25, 0x0, @thr={&(0x7f0000000340)="cfe969734bdfb241e5f5751b3fd72de75514c2184ee8c9c6ef7be8bf4db0234a92a7b9347179359400193e291e0ead8a32a336fdcaefbb3c3df0bcf5ca8c9626b0134ca081b7eebd2f30f86c0998d334600300a4d5585f13afc90cb5a4050a7312fcd01a25c1a1ef5919ce155b8c229bdc57a1", &(0x7f00000003c0)="a31d782784cdbdb49671c1cf619bf9f262f87ac4fc1ea62ae8129a160fcf2194155f8dbc075384446fd1b5e99c6e5d58817973e1f7796e3af3c5dd060fc6d168705676be84b0c80a023ea5387546df7fbf726bfecfec94a61037f1a98d45b5792c78a29692a2e484d1e072590a6fb5f4d2bb37e233"}}, &(0x7f0000000480)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 14:23:13 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee4050c00000f0000008bc36f7d79ce3263dac37b7403242189c609", 0x23}], 0x1}, 0x0) 14:23:13 executing program 2: syz_emit_ethernet(0x140, &(0x7f0000000000)={@local, @random="8a37962a294f", [], {@ipv6={0x86dd, {0x8035000000000000, 0x6, "110c11", 0x30, 0x21, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x6, [], {0x41, 0x6, "cb155d", 0x0, 0x0, 0x0, @mcast2, @dev}}}}}}}, 0x0) 14:23:13 executing program 1: sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="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", 0x115, 0x0, 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000100)={'eql\x00'}) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c8, &(0x7f0000000100)) prctl$PR_GET_NO_NEW_PRIVS(0x27) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000200)='/dev/cachefiles\x00', 0x0, 0x0) write$binfmt_aout(r0, &(0x7f00000002c0)={{0x107, 0x7f, 0x401, 0xd5, 0xc, 0x5, 0xde, 0x400}, "9125a7fe7ff3e652417c1ea135a20843ea3d4708f867701637e4a6a82599d221138a4cfc25d1519a5f4676b0addca68ae4f12dbdf0f2377b6449b585d36fb46f67cbe695f57baefe5be21000ac45725cf97466e054", [[]]}, 0x175) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x61, &(0x7f0000000240)={'filter\x00', 0x4}, 0x68) syz_init_net_socket$bt_l2cap(0x1f, 0x7, 0x0) 14:23:13 executing program 3: syz_emit_ethernet(0x140, &(0x7f0000000000)={@local, @random="8a37962a294f", [], {@ipv6={0x86dd, {0x8035000000000000, 0x6, "110c11", 0x30, 0x21, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x6, [], {0x0, 0x6, "cb155d", 0x0, 0x0, 0x0, @mcast2, @dev}}}}}}}, 0x0) 14:23:13 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000bd7000)={&(0x7f0000c07e98)=ANY=[@ANYBLOB="000000000000000000000000000000000000000033000000ffffffff00000000000000000000000000000000000000000000000000000000000000000029490000000000000000000000000000000000000000000000fffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020001007d00000000000000480001006d64350000000000000000000019000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000"], 0x1}}, 0x0) 14:23:13 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee4050c00000f0000008bc36f7d79ce3263dac37b7403242189c609", 0x23}], 0x1}, 0x0) 14:23:13 executing program 2: syz_emit_ethernet(0x140, &(0x7f0000000000)={@local, @random="8a37962a294f", [], {@ipv6={0x86dd, {0x8100000000000000, 0x6, "110c11", 0x30, 0x21, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x6, [], {0x41, 0x6, "cb155d", 0x0, 0x0, 0x0, @mcast2, @dev}}}}}}}, 0x0) 14:23:13 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x0, 0x0) r0 = socket$inet(0x2b, 0x801, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e23}, 0x10) recvmmsg(r0, &(0x7f000000a500), 0x400000000000259, 0x0, &(0x7f000000a780)={0x77359400}) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) 14:23:13 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000bd7000)={&(0x7f0000c07e98)=ANY=[@ANYBLOB="000000000000000000000000000000000000000033000000ffffffff0000000000000000000000000000000000000000000000000000000000000000002949000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020001007d00000000000000480001006d64350000000000000000000019000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000"], 0x1}}, 0x0) 14:23:13 executing program 3: syz_emit_ethernet(0x140, &(0x7f0000000000)={@local, @random="8a37962a294f", [], {@ipv6={0x86dd, {0x8100000000000000, 0x6, "110c11", 0x30, 0x21, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x6, [], {0x0, 0x6, "cb155d", 0x0, 0x0, 0x0, @mcast2, @dev}}}}}}}, 0x0) 14:23:13 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee4050c00000f0000008bc36f7d79ce3263dac37b7403242189c609", 0x23}], 0x1}, 0x0) 14:23:15 executing program 0: r0 = accept(0xffffffffffffff9c, &(0x7f0000000040)=@rc, &(0x7f00000000c0)=0x80) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100), 0x10) r1 = socket$inet6(0xa, 0x10002, 0x100000001) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) setsockopt$sock_int(r1, 0x1, 0x2c, &(0x7f0000000140)=0xffffffffffffac6e, 0x4) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000200), 0x4) openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000006c0)='/pr\x86c/self/a\x03ockcr\x8bJ\x8e\xf6Eate\x00&\xc4\x90w\xbb\xcf\xee\x8fUn\xa9\'\x92\xfb}\xdc\xa8\v\xe7\x1f\xb3\xb6\x1a\xcb\xa2\xb3\n\xf8o\xaa\x8b\x00R\b*\xd6\x8bs\xef\'K\xd1\x8do\xc4\x95\x9dhD\xe3&\x01\xfbXt\xc0\xef^G0V~\x9f\xa1\x84\x12\b\x80B\f\x14\x16\x1c\v\xd0$Y\x9c8\x89`<\x82#iajp\x0e\xfd\xbd0\xe11\xedK\xb7\xc2c\xb6c5\xdd\x11\x97\x11\xe5,\x92\x0f&\xb5\xdb=\xe0\xabq\f\xf2\xaaj\xae\x0f\xd5\xa3\xae\xceJ\x15\xdf\a\xa7\x83q\xb8\xfc\\W\x98\xdf\x03\x1a\x9c>:\xdbf\xb1\x03O\xabF\xa8\np\x17\x98\x9eh\xea\x18\xa8=\x023\x0e\b\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff1|L\xcd\xb6\xe9\xda(\xd0\xa1\xe0D\x81\xde\xafT\xfc\x19\xf8\xebM\x05\xa232X\xbd}\xbaa\x9c\xd4O\xad]^)\xf4\x98\x1c<\xb0\xa4 sp,\xd3|\xd3N\xc3\x1a\xf1\xcd\xb8~\x10\xab\xe6\x18N\xf1Gi?1\x982\xffV\x9c\x82\x90p9(h\x16\x95\x99&=\x8a\xda\x8c\x17\xc4\x7f\xaa\xe5<9\xd0JAmOW8\xfe\xccr\x99\x81\x91M\xa1I$\x94\xfb-\xa7\xae\xe4\xd8\xe4B\xb3\x8c\xbb(IL\xdej\xcc\xb1S\xa1\xa2\x01N\xe7\xb0\xb5\xc6\xae\xde\xf9\xda0>;\xce>-%5\x84\xfd\xd2\xf6\xd6k)\x18\xd9\xe8w\x81\f \xa3\xe1A\xbf\xd5\xb4\x81\xba\xe5qv\xbb\xaa\xe7\x95\xd2\xa9DE\xf9\x00\nH\xc5\xee\xfa\x8a\xbf\xdbK\xcc*-\xdcQ\x8a\xf2\xa8\xd8\xa0\xc0:f\xf2\xaaT+]\xa0~zsg\xbd,\xaa\xd5\xacf\x11\x8bK\x1e\x83\xbaI\x84\x83h\xb9\x801\x98CO\xa4\xbb\"\xf3\x04*\b\xc31\xa1\x13A\xc7\xd2\xca2\x03\xdd\x9e\xce\x134\xd1\x1e\xbd\xb0\xa2\xe9\xe4Z\x81\xfe\xdbZ\xec\f\x84\xd0pV\xde\x83-I\xadl\xcf$\xde\x9dg\xbf6#k\x99\xc2\xba2;\x82t\x05\x17\r\xf3k\xc3\x9a!g\f\xb1\xff\x0e\xf0F;\xe1\x1c\xd9\xcd>\x8d\x03\xa7/_\x80\x14\xbe\xd6\xa6\xbb\r\xea_\x18\xc0o\xd4U:\xd1\x92\x9d\xa9\x8f\xed\xa9\xa2\xea\x7f\xa3\xff\x92\xba\xc0\xbe\x1ei\xb4\xc6s\x98!5\xe3\xbaD\xc9\xba\x12\xd7\x99rTY\x1c\x19\x8ad\xbf\xbe\x1e\x88\x85\xdb\x83Gf\xa5\xca\xa0\x14]\xcf\xcf_f\xcf\x93gb', 0x2, 0x0) 14:23:15 executing program 2: syz_emit_ethernet(0x140, &(0x7f0000000000)={@local, @random="8a37962a294f", [], {@ipv6={0x86dd, {0x86ddffff00000000, 0x6, "110c11", 0x30, 0x21, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x6, [], {0x41, 0x6, "cb155d", 0x0, 0x0, 0x0, @mcast2, @dev}}}}}}}, 0x0) 14:23:15 executing program 3: syz_emit_ethernet(0x140, &(0x7f0000000000)={@local, @random="8a37962a294f", [], {@ipv6={0x86dd, {0x86ddffff00000000, 0x6, "110c11", 0x30, 0x21, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x6, [], {0x0, 0x6, "cb155d", 0x0, 0x0, 0x0, @mcast2, @dev}}}}}}}, 0x0) 14:23:15 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000bd7000)={&(0x7f0000c07e98)=ANY=[@ANYBLOB="000000000000000000000000000000000000000033000000ffffffff0000000000000000000000000000000000000000000000000000000000000000002949000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020001007d00000000000000480001006d64350000000000000000000019000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000"], 0x1}}, 0x0) 14:23:15 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee4050c00000f0000008bc36f7d79ce3263dac37b7403242189c609", 0x23}], 0x1}, 0x0) 14:23:15 executing program 2: syz_emit_ethernet(0x140, &(0x7f0000000000)={@local, @random="8a37962a294f", [], {@ipv6={0x86dd, {0x8847000000000000, 0x6, "110c11", 0x30, 0x21, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x6, [], {0x41, 0x6, "cb155d", 0x0, 0x0, 0x0, @mcast2, @dev}}}}}}}, 0x0) [ 1724.750336] __nla_parse: 8 callbacks suppressed [ 1724.750347] netlink: 7 bytes leftover after parsing attributes in process `syz-executor.4'. 14:23:15 executing program 3: syz_emit_ethernet(0x140, &(0x7f0000000000)={@local, @random="8a37962a294f", [], {@ipv6={0x86dd, {0x8847000000000000, 0x6, "110c11", 0x30, 0x21, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x6, [], {0x0, 0x6, "cb155d", 0x0, 0x0, 0x0, @mcast2, @dev}}}}}}}, 0x0) 14:23:15 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000bd7000)={&(0x7f0000c07e98)=ANY=[@ANYBLOB="000000000000000000000000000000000000000033000000ffffffff0000000000000000000000000000000000000000000000000000000000000000002949000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020001007d00000000000000480001006d64350000000000000000000019000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000"], 0x1}}, 0x0) [ 1727.242562] net_ratelimit: 64 callbacks suppressed [ 1727.242568] protocol 88fb is buggy, dev hsr_slave_0 [ 1727.252647] protocol 88fb is buggy, dev hsr_slave_1 [ 1727.962558] protocol 88fb is buggy, dev hsr_slave_0 [ 1727.962565] protocol 88fb is buggy, dev hsr_slave_0 [ 1727.962667] protocol 88fb is buggy, dev hsr_slave_1 [ 1727.967739] protocol 88fb is buggy, dev hsr_slave_1 [ 1727.982788] protocol 88fb is buggy, dev hsr_slave_0 [ 1727.987864] protocol 88fb is buggy, dev hsr_slave_1 [ 1727.993030] protocol 88fb is buggy, dev hsr_slave_0 [ 1727.998145] protocol 88fb is buggy, dev hsr_slave_1 [ 1733.482652] net_ratelimit: 26 callbacks suppressed [ 1733.487654] protocol 88fb is buggy, dev hsr_slave_0 [ 1733.492754] protocol 88fb is buggy, dev hsr_slave_1 [ 1734.202614] protocol 88fb is buggy, dev hsr_slave_0 [ 1734.202630] protocol 88fb is buggy, dev hsr_slave_0 [ 1734.207751] protocol 88fb is buggy, dev hsr_slave_1 [ 1734.212768] protocol 88fb is buggy, dev hsr_slave_1 [ 1734.217756] protocol 88fb is buggy, dev hsr_slave_0 [ 1734.227767] protocol 88fb is buggy, dev hsr_slave_1 [ 1734.232925] protocol 88fb is buggy, dev hsr_slave_0 [ 1734.237999] protocol 88fb is buggy, dev hsr_slave_1 [ 1739.722550] net_ratelimit: 26 callbacks suppressed [ 1739.727681] protocol 88fb is buggy, dev hsr_slave_0 [ 1739.732798] protocol 88fb is buggy, dev hsr_slave_1 [ 1740.442623] protocol 88fb is buggy, dev hsr_slave_0 [ 1740.442628] protocol 88fb is buggy, dev hsr_slave_0 [ 1740.442736] protocol 88fb is buggy, dev hsr_slave_1 [ 1740.447760] protocol 88fb is buggy, dev hsr_slave_1 [ 1740.462960] protocol 88fb is buggy, dev hsr_slave_0 [ 1740.468116] protocol 88fb is buggy, dev hsr_slave_1 [ 1740.473391] protocol 88fb is buggy, dev hsr_slave_0 [ 1740.478484] protocol 88fb is buggy, dev hsr_slave_1 [ 1745.962563] net_ratelimit: 26 callbacks suppressed [ 1745.967565] protocol 88fb is buggy, dev hsr_slave_0 [ 1745.972752] protocol 88fb is buggy, dev hsr_slave_1 [ 1746.682540] protocol 88fb is buggy, dev hsr_slave_0 [ 1746.682553] protocol 88fb is buggy, dev hsr_slave_0 [ 1746.687662] protocol 88fb is buggy, dev hsr_slave_1 [ 1746.692700] protocol 88fb is buggy, dev hsr_slave_1 [ 1746.697711] protocol 88fb is buggy, dev hsr_slave_0 [ 1746.707743] protocol 88fb is buggy, dev hsr_slave_1 [ 1746.713035] protocol 88fb is buggy, dev hsr_slave_0 [ 1746.718226] protocol 88fb is buggy, dev hsr_slave_1 [ 1752.202575] net_ratelimit: 26 callbacks suppressed [ 1752.202581] protocol 88fb is buggy, dev hsr_slave_0 [ 1752.212617] protocol 88fb is buggy, dev hsr_slave_1 [ 1752.922547] protocol 88fb is buggy, dev hsr_slave_0 [ 1752.922562] protocol 88fb is buggy, dev hsr_slave_0 [ 1752.927795] protocol 88fb is buggy, dev hsr_slave_1 [ 1752.932931] protocol 88fb is buggy, dev hsr_slave_1 [ 1752.937981] protocol 88fb is buggy, dev hsr_slave_0 [ 1752.947977] protocol 88fb is buggy, dev hsr_slave_1 [ 1752.953069] protocol 88fb is buggy, dev hsr_slave_0 [ 1752.958147] protocol 88fb is buggy, dev hsr_slave_1 [ 1758.442627] net_ratelimit: 26 callbacks suppressed [ 1758.447647] protocol 88fb is buggy, dev hsr_slave_0 [ 1758.452750] protocol 88fb is buggy, dev hsr_slave_1 [ 1759.162609] protocol 88fb is buggy, dev hsr_slave_0 [ 1759.162616] protocol 88fb is buggy, dev hsr_slave_0 [ 1759.162671] protocol 88fb is buggy, dev hsr_slave_1 [ 1759.167807] protocol 88fb is buggy, dev hsr_slave_1 [ 1759.182865] protocol 88fb is buggy, dev hsr_slave_0 [ 1759.187974] protocol 88fb is buggy, dev hsr_slave_1 [ 1759.193227] protocol 88fb is buggy, dev hsr_slave_0 [ 1759.198279] protocol 88fb is buggy, dev hsr_slave_1 [ 1764.682636] net_ratelimit: 26 callbacks suppressed [ 1764.687658] protocol 88fb is buggy, dev hsr_slave_0 [ 1764.692746] protocol 88fb is buggy, dev hsr_slave_1 [ 1765.402592] protocol 88fb is buggy, dev hsr_slave_0 [ 1765.402650] protocol 88fb is buggy, dev hsr_slave_0 [ 1765.407717] protocol 88fb is buggy, dev hsr_slave_1 [ 1765.412835] protocol 88fb is buggy, dev hsr_slave_1 [ 1765.418034] protocol 88fb is buggy, dev hsr_slave_0 [ 1765.427971] protocol 88fb is buggy, dev hsr_slave_1 [ 1765.433076] protocol 88fb is buggy, dev hsr_slave_0 [ 1765.438177] protocol 88fb is buggy, dev hsr_slave_1 [ 1770.922566] net_ratelimit: 26 callbacks suppressed [ 1770.927545] protocol 88fb is buggy, dev hsr_slave_0 [ 1770.932608] protocol 88fb is buggy, dev hsr_slave_1 [ 1771.642549] protocol 88fb is buggy, dev hsr_slave_0 [ 1771.642580] protocol 88fb is buggy, dev hsr_slave_0 [ 1771.647761] protocol 88fb is buggy, dev hsr_slave_1 [ 1771.652914] protocol 88fb is buggy, dev hsr_slave_1 [ 1771.657875] protocol 88fb is buggy, dev hsr_slave_0 [ 1771.667948] protocol 88fb is buggy, dev hsr_slave_1 [ 1771.673042] protocol 88fb is buggy, dev hsr_slave_0 [ 1771.678087] protocol 88fb is buggy, dev hsr_slave_1 [ 1777.162595] net_ratelimit: 25 callbacks suppressed [ 1777.162601] protocol 88fb is buggy, dev hsr_slave_0 [ 1777.172636] protocol 88fb is buggy, dev hsr_slave_1 [ 1777.882543] protocol 88fb is buggy, dev hsr_slave_0 [ 1777.882725] protocol 88fb is buggy, dev hsr_slave_0 [ 1777.887637] protocol 88fb is buggy, dev hsr_slave_1 [ 1777.892694] protocol 88fb is buggy, dev hsr_slave_1 [ 1777.897747] protocol 88fb is buggy, dev hsr_slave_0 [ 1777.907799] protocol 88fb is buggy, dev hsr_slave_1 [ 1777.912947] protocol 88fb is buggy, dev hsr_slave_0 [ 1777.918013] protocol 88fb is buggy, dev hsr_slave_1 [ 1783.402567] net_ratelimit: 26 callbacks suppressed [ 1783.402573] protocol 88fb is buggy, dev hsr_slave_0 [ 1783.412943] protocol 88fb is buggy, dev hsr_slave_1 [ 1784.122573] protocol 88fb is buggy, dev hsr_slave_0 [ 1784.122688] protocol 88fb is buggy, dev hsr_slave_0 [ 1784.127899] protocol 88fb is buggy, dev hsr_slave_1 [ 1784.133339] protocol 88fb is buggy, dev hsr_slave_1 [ 1784.138442] protocol 88fb is buggy, dev hsr_slave_0 [ 1784.148489] protocol 88fb is buggy, dev hsr_slave_1 [ 1784.153605] protocol 88fb is buggy, dev hsr_slave_0 [ 1784.158645] protocol 88fb is buggy, dev hsr_slave_1 [ 1789.642628] net_ratelimit: 26 callbacks suppressed [ 1789.647742] protocol 88fb is buggy, dev hsr_slave_0 [ 1789.653015] protocol 88fb is buggy, dev hsr_slave_1 [ 1790.362630] protocol 88fb is buggy, dev hsr_slave_0 [ 1790.362636] protocol 88fb is buggy, dev hsr_slave_0 [ 1790.362713] protocol 88fb is buggy, dev hsr_slave_1 [ 1790.367946] protocol 88fb is buggy, dev hsr_slave_1 [ 1790.383060] protocol 88fb is buggy, dev hsr_slave_0 [ 1790.388175] protocol 88fb is buggy, dev hsr_slave_1 [ 1790.393332] protocol 88fb is buggy, dev hsr_slave_0 [ 1790.398444] protocol 88fb is buggy, dev hsr_slave_1 [ 1795.882718] net_ratelimit: 26 callbacks suppressed [ 1795.887764] protocol 88fb is buggy, dev hsr_slave_0 [ 1795.892870] protocol 88fb is buggy, dev hsr_slave_1 [ 1796.602641] protocol 88fb is buggy, dev hsr_slave_0 [ 1796.602646] protocol 88fb is buggy, dev hsr_slave_0 [ 1796.602754] protocol 88fb is buggy, dev hsr_slave_1 [ 1796.607750] protocol 88fb is buggy, dev hsr_slave_1 [ 1796.622853] protocol 88fb is buggy, dev hsr_slave_0 [ 1796.627922] protocol 88fb is buggy, dev hsr_slave_1 [ 1796.633116] protocol 88fb is buggy, dev hsr_slave_0 [ 1796.638170] protocol 88fb is buggy, dev hsr_slave_1 [ 1802.122669] net_ratelimit: 26 callbacks suppressed [ 1802.122675] protocol 88fb is buggy, dev hsr_slave_0 [ 1802.132907] protocol 88fb is buggy, dev hsr_slave_1 [ 1802.842592] protocol 88fb is buggy, dev hsr_slave_0 [ 1802.842619] protocol 88fb is buggy, dev hsr_slave_0 [ 1802.847723] protocol 88fb is buggy, dev hsr_slave_1 [ 1802.852821] protocol 88fb is buggy, dev hsr_slave_1 [ 1802.857828] protocol 88fb is buggy, dev hsr_slave_0 [ 1802.867940] protocol 88fb is buggy, dev hsr_slave_1 [ 1802.873961] protocol 88fb is buggy, dev hsr_slave_0 [ 1802.879948] protocol 88fb is buggy, dev hsr_slave_1 [ 1808.362699] net_ratelimit: 26 callbacks suppressed [ 1808.362706] protocol 88fb is buggy, dev hsr_slave_0 [ 1808.373019] protocol 88fb is buggy, dev hsr_slave_1 [ 1809.082614] protocol 88fb is buggy, dev hsr_slave_0 [ 1809.082634] protocol 88fb is buggy, dev hsr_slave_0 [ 1809.087776] protocol 88fb is buggy, dev hsr_slave_1 [ 1809.092810] protocol 88fb is buggy, dev hsr_slave_1 [ 1809.097821] protocol 88fb is buggy, dev hsr_slave_0 [ 1809.107839] protocol 88fb is buggy, dev hsr_slave_1 [ 1809.112957] protocol 88fb is buggy, dev hsr_slave_0 [ 1809.118043] protocol 88fb is buggy, dev hsr_slave_1 [ 1814.602656] net_ratelimit: 26 callbacks suppressed [ 1814.602663] protocol 88fb is buggy, dev hsr_slave_0 [ 1814.612888] protocol 88fb is buggy, dev hsr_slave_1 [ 1815.322626] protocol 88fb is buggy, dev hsr_slave_0 [ 1815.322631] protocol 88fb is buggy, dev hsr_slave_0 [ 1815.322710] protocol 88fb is buggy, dev hsr_slave_1 [ 1815.327811] protocol 88fb is buggy, dev hsr_slave_1 [ 1815.343033] protocol 88fb is buggy, dev hsr_slave_0 [ 1815.348114] protocol 88fb is buggy, dev hsr_slave_1 [ 1815.353370] protocol 88fb is buggy, dev hsr_slave_0 [ 1815.358511] protocol 88fb is buggy, dev hsr_slave_1 [ 1820.842680] net_ratelimit: 25 callbacks suppressed [ 1820.847690] protocol 88fb is buggy, dev hsr_slave_0 [ 1820.852867] protocol 88fb is buggy, dev hsr_slave_1 [ 1821.562713] protocol 88fb is buggy, dev hsr_slave_0 [ 1821.562730] protocol 88fb is buggy, dev hsr_slave_0 [ 1821.567863] protocol 88fb is buggy, dev hsr_slave_1 [ 1821.572843] protocol 88fb is buggy, dev hsr_slave_1 [ 1821.577888] protocol 88fb is buggy, dev hsr_slave_0 [ 1821.587913] protocol 88fb is buggy, dev hsr_slave_1 [ 1821.593200] protocol 88fb is buggy, dev hsr_slave_0 [ 1821.598317] protocol 88fb is buggy, dev hsr_slave_1 [ 1827.082690] net_ratelimit: 26 callbacks suppressed [ 1827.087724] protocol 88fb is buggy, dev hsr_slave_0 [ 1827.092899] protocol 88fb is buggy, dev hsr_slave_1 [ 1827.802699] protocol 88fb is buggy, dev hsr_slave_0 [ 1827.802705] protocol 88fb is buggy, dev hsr_slave_0 [ 1827.802835] protocol 88fb is buggy, dev hsr_slave_1 [ 1827.807856] protocol 88fb is buggy, dev hsr_slave_1 [ 1827.823092] protocol 88fb is buggy, dev hsr_slave_0 [ 1827.828177] protocol 88fb is buggy, dev hsr_slave_1 [ 1827.833404] protocol 88fb is buggy, dev hsr_slave_0 [ 1827.838505] protocol 88fb is buggy, dev hsr_slave_1 [ 1833.322646] net_ratelimit: 26 callbacks suppressed [ 1833.322652] protocol 88fb is buggy, dev hsr_slave_0 [ 1833.332912] protocol 88fb is buggy, dev hsr_slave_1 [ 1834.042699] protocol 88fb is buggy, dev hsr_slave_0 [ 1834.042705] protocol 88fb is buggy, dev hsr_slave_0 [ 1834.042815] protocol 88fb is buggy, dev hsr_slave_1 [ 1834.047816] protocol 88fb is buggy, dev hsr_slave_1 [ 1834.062975] protocol 88fb is buggy, dev hsr_slave_0 [ 1834.068038] protocol 88fb is buggy, dev hsr_slave_1 [ 1834.073276] protocol 88fb is buggy, dev hsr_slave_0 [ 1834.078333] protocol 88fb is buggy, dev hsr_slave_1 [ 1839.562701] net_ratelimit: 25 callbacks suppressed [ 1839.562706] protocol 88fb is buggy, dev hsr_slave_0 [ 1839.572728] protocol 88fb is buggy, dev hsr_slave_1 [ 1840.282583] protocol 88fb is buggy, dev hsr_slave_0 [ 1840.282642] protocol 88fb is buggy, dev hsr_slave_0 [ 1840.287795] protocol 88fb is buggy, dev hsr_slave_1 [ 1840.293675] protocol 88fb is buggy, dev hsr_slave_1 [ 1840.298668] protocol 88fb is buggy, dev hsr_slave_0 [ 1840.308629] protocol 88fb is buggy, dev hsr_slave_1 [ 1840.313713] protocol 88fb is buggy, dev hsr_slave_0 [ 1840.318775] protocol 88fb is buggy, dev hsr_slave_1 [ 1845.802632] net_ratelimit: 26 callbacks suppressed [ 1845.807734] protocol 88fb is buggy, dev hsr_slave_0 [ 1845.812821] protocol 88fb is buggy, dev hsr_slave_1 [ 1846.522622] protocol 88fb is buggy, dev hsr_slave_0 [ 1846.522697] protocol 88fb is buggy, dev hsr_slave_0 [ 1846.527893] protocol 88fb is buggy, dev hsr_slave_1 [ 1846.532926] protocol 88fb is buggy, dev hsr_slave_1 [ 1846.537918] protocol 88fb is buggy, dev hsr_slave_0 [ 1846.547934] protocol 88fb is buggy, dev hsr_slave_1 [ 1846.553075] protocol 88fb is buggy, dev hsr_slave_0 [ 1846.558124] protocol 88fb is buggy, dev hsr_slave_1 [ 1852.042634] net_ratelimit: 26 callbacks suppressed [ 1852.047615] protocol 88fb is buggy, dev hsr_slave_0 [ 1852.052673] protocol 88fb is buggy, dev hsr_slave_1 [ 1852.762684] protocol 88fb is buggy, dev hsr_slave_0 [ 1852.764299] protocol 88fb is buggy, dev hsr_slave_0 [ 1852.767939] protocol 88fb is buggy, dev hsr_slave_1 [ 1852.772945] protocol 88fb is buggy, dev hsr_slave_1 [ 1852.782973] protocol 88fb is buggy, dev hsr_slave_0 [ 1852.788020] protocol 88fb is buggy, dev hsr_slave_1 [ 1852.793228] protocol 88fb is buggy, dev hsr_slave_0 [ 1852.798284] protocol 88fb is buggy, dev hsr_slave_1 14:25:28 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x100000400000003a) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000800)=ANY=[@ANYBLOB], 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x3}, 0x1c) write(r0, &(0x7f0000000140)="00f3ffaf", 0x4) 14:25:28 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee4050c00000f0000008bc36f7d79ce3263dac37b7403242189c609", 0x23}], 0x1}, 0x0) 14:25:28 executing program 0: r0 = socket$tipc(0x1e, 0x2, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000200)={0x41}, 0x10) bind$tipc(r1, 0x0, 0x0) sendmsg$tipc(r0, &(0x7f00000024c0)={&(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10, 0x0}, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x43, 0x4, 0x3}, 0x10) 14:25:28 executing program 2: syz_emit_ethernet(0x140, &(0x7f0000000000)={@local, @random="8a37962a294f", [], {@ipv6={0x86dd, {0x8848000000000000, 0x6, "110c11", 0x30, 0x21, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x6, [], {0x41, 0x6, "cb155d", 0x0, 0x0, 0x0, @mcast2, @dev}}}}}}}, 0x0) 14:25:28 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000bd7000)={&(0x7f0000c07e98)=ANY=[@ANYBLOB="000000000000000000000000000000000000000033000000ffffffff0000000000000000000000000000000000000000000000000000000000000000002949000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020001007d00000000000000480001006d64350000000000000000000019000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000"], 0x1}}, 0x0) 14:25:28 executing program 3: syz_emit_ethernet(0x140, &(0x7f0000000000)={@local, @random="8a37962a294f", [], {@ipv6={0x86dd, {0x8848000000000000, 0x6, "110c11", 0x30, 0x21, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x6, [], {0x0, 0x6, "cb155d", 0x0, 0x0, 0x0, @mcast2, @dev}}}}}}}, 0x0) [ 1858.160377] net_ratelimit: 26 callbacks suppressed [ 1858.160384] dccp_v6_rcv: dropped packet with invalid checksum [ 1858.186735] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 14:25:28 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000bd7000)={&(0x7f0000c07e98)=ANY=[@ANYBLOB="000000000000000000000000000000000000000033000000ffffffff0000000000000000000000000000000000000000000000000000000000000000002949000000000000000000000000000000000000000000000000000000000015710000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020001007d00000000000000480001006d64350000000000000000000019000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000"], 0x1}}, 0x0) 14:25:28 executing program 3: syz_emit_ethernet(0x140, &(0x7f0000000000)={@local, @random="8a37962a294f", [], {@ipv6={0x86dd, {0x8864000000000000, 0x6, "110c11", 0x30, 0x21, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x6, [], {0x0, 0x6, "cb155d", 0x0, 0x0, 0x0, @mcast2, @dev}}}}}}}, 0x0) [ 1858.212826] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 1858.229935] dccp_v6_rcv: dropped packet with invalid checksum 14:25:28 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000bd7000)={&(0x7f0000c07e98)=ANY=[@ANYBLOB="000000000000000000000000000000000000000033000000ffffffff0000000000000000000000000000000000000000000000000000000000000000002949000000000000000000000000000000000000000000000000000000ffffff9e0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020001007d00000000000000480001006d64350000000000000000000019000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000"], 0x1}}, 0x0) 14:25:28 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x100000400000003a) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000800)=ANY=[@ANYBLOB], 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x3}, 0x1c) write(r0, &(0x7f0000000140)="00f3ffaf84af2d000000b67a0001008f2a5f329ffaa9fc5f", 0x18) 14:25:28 executing program 2: syz_emit_ethernet(0x140, &(0x7f0000000000)={@local, @random="8a37962a294f", [], {@ipv6={0x86dd, {0x8864000000000000, 0x6, "110c11", 0x30, 0x21, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x6, [], {0x41, 0x6, "cb155d", 0x0, 0x0, 0x0, @mcast2, @dev}}}}}}}, 0x0) [ 1858.282637] protocol 88fb is buggy, dev hsr_slave_0 [ 1858.287925] protocol 88fb is buggy, dev hsr_slave_1 [ 1858.353967] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 1858.391539] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 14:25:28 executing program 2: syz_emit_ethernet(0x140, &(0x7f0000000000)={@local, @random="8a37962a294f", [], {@ipv6={0x86dd, {0x88a8ffff00000000, 0x6, "110c11", 0x30, 0x21, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x6, [], {0x41, 0x6, "cb155d", 0x0, 0x0, 0x0, @mcast2, @dev}}}}}}}, 0x0) [ 1858.405568] dccp_v6_rcv: dropped packet with invalid checksum [ 1858.416270] dccp_v6_rcv: dropped packet with invalid checksum [ 1858.785219] netlink: 7 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1860.149778] IPVS: ftp: loaded support on port[0] = 21 [ 1860.186374] device bridge_slave_1 left promiscuous mode [ 1860.192044] bridge0: port 2(bridge_slave_1) entered disabled state [ 1860.245666] device bridge_slave_0 left promiscuous mode [ 1860.251848] bridge0: port 1(bridge_slave_0) entered disabled state [ 1863.162645] net_ratelimit: 23 callbacks suppressed [ 1863.162654] protocol 88fb is buggy, dev hsr_slave_0 [ 1863.162660] protocol 88fb is buggy, dev hsr_slave_0 [ 1863.162733] protocol 88fb is buggy, dev hsr_slave_1 [ 1863.167810] protocol 88fb is buggy, dev hsr_slave_1 [ 1863.187991] protocol 88fb is buggy, dev hsr_slave_0 [ 1863.193184] protocol 88fb is buggy, dev hsr_slave_1 [ 1863.198374] protocol 88fb is buggy, dev hsr_slave_0 [ 1863.203522] protocol 88fb is buggy, dev hsr_slave_1 [ 1863.808874] bond2 (unregistering): Released all slaves [ 1863.822159] bond1 (unregistering): Released all slaves [ 1864.176372] device hsr_slave_1 left promiscuous mode [ 1864.219283] device hsr_slave_0 left promiscuous mode [ 1864.259544] team0 (unregistering): Port device team_slave_1 removed [ 1864.271368] team0 (unregistering): Port device team_slave_0 removed [ 1864.285401] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1864.321186] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1864.418247] bond0 (unregistering): Released all slaves [ 1864.522676] protocol 88fb is buggy, dev hsr_slave_0 [ 1864.527806] protocol 88fb is buggy, dev hsr_slave_1 [ 1864.582016] chnl_net:caif_netlink_parms(): no params data found [ 1864.624773] bridge0: port 1(bridge_slave_0) entered blocking state [ 1864.631252] bridge0: port 1(bridge_slave_0) entered disabled state [ 1864.638414] device bridge_slave_0 entered promiscuous mode [ 1864.646149] bridge0: port 2(bridge_slave_1) entered blocking state [ 1864.652644] bridge0: port 2(bridge_slave_1) entered disabled state [ 1864.660119] device bridge_slave_1 entered promiscuous mode [ 1864.683020] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1864.692831] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1864.715248] team0: Port device team_slave_0 added [ 1864.721775] team0: Port device team_slave_1 added [ 1864.786045] device hsr_slave_0 entered promiscuous mode [ 1864.822873] device hsr_slave_1 entered promiscuous mode [ 1864.910212] bridge0: port 2(bridge_slave_1) entered blocking state [ 1864.916677] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1864.923396] bridge0: port 1(bridge_slave_0) entered blocking state [ 1864.929762] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1865.031299] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1865.047046] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1865.066916] bridge0: port 1(bridge_slave_0) entered disabled state [ 1865.089602] bridge0: port 2(bridge_slave_1) entered disabled state [ 1865.113979] 8021q: adding VLAN 0 to HW filter on device team0 [ 1865.128795] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1865.140873] bridge0: port 1(bridge_slave_0) entered blocking state [ 1865.147309] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1865.176128] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1865.184692] bridge0: port 2(bridge_slave_1) entered blocking state [ 1865.191088] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1865.223781] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1865.240356] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1865.249132] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1865.265942] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1865.281464] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1865.292659] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1865.324914] 8021q: adding VLAN 0 to HW filter on device batadv0 14:25:36 executing program 1: fsync(0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x100000000008005) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000080)) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) syncfs(r0) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000400)=0x0) wait4(r1, 0x0, 0x8, &(0x7f0000000440)) syz_open_dev$vcsa(&(0x7f00000003c0)='/dev/vcsa#\x00', 0x0, 0x8000) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x25) openat$rfkill(0xffffffffffffff9c, 0x0, 0x400, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f00000000c0)) prctl$PR_MCE_KILL(0x21, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='\x00\xea\x17') openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/attr/current\x00', 0x2, 0x0) ioctl$TIOCMBIS(r2, 0x5416, &(0x7f00000001c0)=0x73f8) read(r2, 0x0, 0x0) preadv(r2, &(0x7f0000000480), 0x100000000000022c, 0x0) syz_mount_image$iso9660(&(0x7f0000000280)='iso9660\x00', &(0x7f00000002c0)='./bus\x00', 0x5, 0x0, 0x0, 0x1000000, 0x0) 14:25:36 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000bd7000)={&(0x7f0000c07e98)=ANY=[@ANYBLOB="000000000000000000000000000000000000000033000000ffffffff0000000000000000000000000000000000000000000000000000000000000000002949000000000000000000000000000000000000000000000000000000fffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020001007d00000000000000480001006d64350000000000000000000019000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000"], 0x1}}, 0x0) 14:25:36 executing program 2: syz_emit_ethernet(0x140, &(0x7f0000000000)={@local, @random="8a37962a294f", [], {@ipv6={0x86dd, {0x88caffff00000000, 0x6, "110c11", 0x30, 0x21, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x6, [], {0x41, 0x6, "cb155d", 0x0, 0x0, 0x0, @mcast2, @dev}}}}}}}, 0x0) 14:25:36 executing program 3: syz_emit_ethernet(0x140, &(0x7f0000000000)={@local, @random="8a37962a294f", [], {@ipv6={0x86dd, {0x88a8ffff00000000, 0x6, "110c11", 0x30, 0x21, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x6, [], {0x0, 0x6, "cb155d", 0x0, 0x0, 0x0, @mcast2, @dev}}}}}}}, 0x0) 14:25:36 executing program 0: perf_event_open(&(0x7f0000000200)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 14:25:36 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee4050c00000f0000008bc36f7d79ce3263dac37b7403242189c609", 0x23}], 0x1}, 0x0) [ 1865.510947] netlink: 7 bytes leftover after parsing attributes in process `syz-executor.4'. 14:25:36 executing program 0: fsync(0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x100000000008005) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000080)) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) syncfs(r0) ioctl$TIOCGPGRP(r0, 0x540f, 0x0) syz_open_dev$vcsa(&(0x7f00000003c0)='/dev/vcsa#\x00', 0x0, 0x8000) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x25) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f00000000c0)) prctl$PR_MCE_KILL(0x21, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) openat$cgroup_procs(r1, &(0x7f0000000380)='cgroup.threads\x00', 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='\x00\xea\x17') openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/attr/current\x00', 0x2, 0x0) ioctl$TIOCMBIS(r2, 0x5416, &(0x7f00000001c0)=0x73f8) read(r2, &(0x7f0000000300)=""/98, 0x62) preadv(r2, &(0x7f0000000480), 0x100000000000022c, 0x0) syz_mount_image$iso9660(&(0x7f0000000280)='iso9660\x00', &(0x7f00000002c0)='./bus\x00', 0x5, 0x0, 0x0, 0x1000000, 0x0) 14:25:36 executing program 3: syz_emit_ethernet(0x140, &(0x7f0000000000)={@local, @random="8a37962a294f", [], {@ipv6={0x86dd, {0x88caffff00000000, 0x6, "110c11", 0x30, 0x21, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x6, [], {0x0, 0x6, "cb155d", 0x0, 0x0, 0x0, @mcast2, @dev}}}}}}}, 0x0) 14:25:36 executing program 2: syz_emit_ethernet(0x140, &(0x7f0000000000)={@local, @random="8a37962a294f", [], {@ipv6={0x86dd, {0x8906000000000000, 0x6, "110c11", 0x30, 0x21, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x6, [], {0x41, 0x6, "cb155d", 0x0, 0x0, 0x0, @mcast2, @dev}}}}}}}, 0x0) 14:25:36 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000bd7000)={&(0x7f0000c07e98)=ANY=[@ANYBLOB="000000000000000000000000000000000000000033000000ffffffff00000000000000000000000000000000000000000000000000000000000000000029490000000000000000000000000000000000000000000000000000007fffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020001007d00000000000000480001006d64350000000000000000000019000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000"], 0x1}}, 0x0) 14:25:36 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee4050c00000f0000008bc36f7d79ce3263dac37b7403242189c609", 0x23}], 0x1}, 0x0) 14:25:36 executing program 3: syz_emit_ethernet(0x140, &(0x7f0000000000)={@local, @random="8a37962a294f", [], {@ipv6={0x86dd, {0x8906000000000000, 0x6, "110c11", 0x30, 0x21, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x6, [], {0x0, 0x6, "cb155d", 0x0, 0x0, 0x0, @mcast2, @dev}}}}}}}, 0x0) [ 1865.853135] netlink: 7 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1866.060441] ISOFS: Unable to identify CD-ROM format. [ 1866.259172] ISOFS: Unable to identify CD-ROM format. 14:25:36 executing program 1: syz_open_dev$evdev(0x0, 0x0, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x1) r0 = socket(0x10, 0x2, 0x0) syslog(0x3, &(0x7f0000000000)=""/147, 0x93) open(0x0, 0x0, 0x0) mount(&(0x7f0000000180)=ANY=[], &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)=0x4) ftruncate(r0, 0x3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') sendfile(r0, r1, 0x0, 0x800000080000002) 14:25:36 executing program 2: syz_emit_ethernet(0x140, &(0x7f0000000000)={@local, @random="8a37962a294f", [], {@ipv6={0x86dd, {0x8dffffff00000000, 0x6, "110c11", 0x30, 0x21, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x6, [], {0x41, 0x6, "cb155d", 0x0, 0x0, 0x0, @mcast2, @dev}}}}}}}, 0x0) 14:25:36 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee4050c00000f0000008bc36f7d79ce3263dac37b7403242189c609", 0x23}], 0x1}, 0x0) 14:25:36 executing program 0: fsync(0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x100000000008005) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000080)) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) syncfs(r0) ioctl$TIOCGPGRP(r0, 0x540f, 0x0) syz_open_dev$vcsa(&(0x7f00000003c0)='/dev/vcsa#\x00', 0x0, 0x8000) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x25) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f00000000c0)) prctl$PR_MCE_KILL(0x21, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) openat$cgroup_procs(r1, &(0x7f0000000380)='cgroup.threads\x00', 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='\x00\xea\x17') openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/attr/current\x00', 0x2, 0x0) ioctl$TIOCMBIS(r2, 0x5416, &(0x7f00000001c0)=0x73f8) read(r2, &(0x7f0000000300)=""/98, 0x62) preadv(r2, &(0x7f0000000480), 0x100000000000022c, 0x0) syz_mount_image$iso9660(&(0x7f0000000280)='iso9660\x00', &(0x7f00000002c0)='./bus\x00', 0x5, 0x0, 0x0, 0x1000000, 0x0) 14:25:36 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000bd7000)={&(0x7f0000c07e98)=ANY=[@ANYBLOB="000000000000000000000000000000000000000033000000ffffffff0000000000000000000000000000000000000000000000000000000000000000002949000000000000000000000000000000000000000000000000f0ffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020001007d00000000000000480001006d64350000000000000000000019000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000"], 0x1}}, 0x0) 14:25:36 executing program 3: syz_emit_ethernet(0x140, &(0x7f0000000000)={@local, @random="8a37962a294f", [], {@ipv6={0x86dd, {0x8dffffff00000000, 0x6, "110c11", 0x30, 0x21, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x6, [], {0x0, 0x6, "cb155d", 0x0, 0x0, 0x0, @mcast2, @dev}}}}}}}, 0x0) [ 1866.411455] netlink: 7 bytes leftover after parsing attributes in process `syz-executor.4'. 14:25:37 executing program 3: syz_emit_ethernet(0x140, &(0x7f0000000000)={@local, @random="8a37962a294f", [], {@ipv6={0x86dd, {0xf5ffffff00000000, 0x6, "110c11", 0x30, 0x21, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x6, [], {0x0, 0x6, "cb155d", 0x0, 0x0, 0x0, @mcast2, @dev}}}}}}}, 0x0) 14:25:37 executing program 2: syz_emit_ethernet(0x140, &(0x7f0000000000)={@local, @random="8a37962a294f", [], {@ipv6={0x86dd, {0xf5ffffff00000000, 0x6, "110c11", 0x30, 0x21, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x6, [], {0x41, 0x6, "cb155d", 0x0, 0x0, 0x0, @mcast2, @dev}}}}}}}, 0x0) 14:25:37 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000bd7000)={&(0x7f0000c07e98)=ANY=[@ANYBLOB="000000000000000000000000000000000000000033000000ffffffff0000000000000000000000000000000000000000000000000000000000000000002949000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020001007d00000000000000480001006d64350000000000000000000019000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000"], 0x1}}, 0x0) 14:25:37 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee4050c00000f0000008bc36f7d79ce3263dac37b7403242189c609", 0x23}], 0x1}, 0x0) 14:25:37 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000bd7000)={&(0x7f0000c07e98)=ANY=[@ANYBLOB="000000000000000000000000000000000000000033000000ffffffff0000000000000000000000000000000000000000000000000000000000000000002949000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020001007d00000000000000480001006d64350000000000000000000019000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000"], 0x1}}, 0x0) 14:25:37 executing program 0: fsync(0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x100000000008005) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000080)) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) syncfs(r0) ioctl$TIOCGPGRP(r0, 0x540f, 0x0) syz_open_dev$vcsa(&(0x7f00000003c0)='/dev/vcsa#\x00', 0x0, 0x8000) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x25) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f00000000c0)) prctl$PR_MCE_KILL(0x21, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) openat$cgroup_procs(r1, &(0x7f0000000380)='cgroup.threads\x00', 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='\x00\xea\x17') openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/attr/current\x00', 0x2, 0x0) ioctl$TIOCMBIS(r2, 0x5416, &(0x7f00000001c0)=0x73f8) read(r2, &(0x7f0000000300)=""/98, 0x62) preadv(r2, &(0x7f0000000480), 0x100000000000022c, 0x0) syz_mount_image$iso9660(&(0x7f0000000280)='iso9660\x00', &(0x7f00000002c0)='./bus\x00', 0x5, 0x0, 0x0, 0x1000000, 0x0) [ 1866.798084] netlink: 7 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1866.925833] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=29231 sclass=netlink_route_socket pig=15461 comm=syz-executor.1 [ 1867.110956] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=25964 sclass=netlink_route_socket pig=15480 comm=syz-executor.1 14:25:37 executing program 1: 14:25:37 executing program 3: syz_emit_ethernet(0x140, &(0x7f0000000000)={@local, @random="8a37962a294f", [], {@ipv6={0x86dd, {0xfffffffffffff000, 0x6, "110c11", 0x30, 0x21, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x6, [], {0x0, 0x6, "cb155d", 0x0, 0x0, 0x0, @mcast2, @dev}}}}}}}, 0x0) 14:25:37 executing program 2: syz_emit_ethernet(0x140, &(0x7f0000000000)={@local, @random="8a37962a294f", [], {@ipv6={0x86dd, {0xfffffffffffff000, 0x6, "110c11", 0x30, 0x21, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x6, [], {0x41, 0x6, "cb155d", 0x0, 0x0, 0x0, @mcast2, @dev}}}}}}}, 0x0) 14:25:37 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000bd7000)={&(0x7f0000c07e98)=ANY=[@ANYBLOB="000000000000000000000000000000000000000033000000ffffffff0000000000000000000000000000000000000000000000000000000000000000002949000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020001007d00000000000000480001006d64350000000000000000000019000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000"], 0x1}}, 0x0) 14:25:37 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee4050c00000f0000008bc36f7d79ce3263dac37b7403242189c609", 0x23}], 0x1}, 0x0) 14:25:37 executing program 0: socketpair$unix(0x1, 0x400000000001, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x13102001fee, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x3) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x800, 0x0) munlockall() ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) [ 1867.274908] netlink: 7 bytes leftover after parsing attributes in process `syz-executor.4'. 14:25:37 executing program 0: 14:25:37 executing program 2: syz_emit_ethernet(0x140, &(0x7f0000000000)={@local, @random="8a37962a294f", [], {@ipv6={0x86dd, {0x0, 0x2, "110c11", 0x30, 0x21, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x6, [], {0x41, 0x6, "cb155d", 0x0, 0x0, 0x0, @mcast2, @dev}}}}}}}, 0x0) 14:25:37 executing program 3: syz_emit_ethernet(0x140, &(0x7f0000000000)={@local, @random="8a37962a294f", [], {@ipv6={0x86dd, {0x0, 0x2, "110c11", 0x30, 0x21, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x6, [], {0x0, 0x6, "cb155d", 0x0, 0x0, 0x0, @mcast2, @dev}}}}}}}, 0x0) 14:25:37 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000bd7000)={&(0x7f0000c07e98)=ANY=[@ANYBLOB="000000000000000000000000000000000000000033000000ffffffff0000000000000000000000000000000000000000000000000000000000000000002949000000000000000000000000000000000000000000000000f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020001007d00000000000000480001006d64350000000000000000000019000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000"], 0x1}}, 0x0) 14:25:38 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee4050c00000f0000008bc36f7d79ce3263dac37b7403242189c609", 0x23}], 0x1}, 0x0) 14:25:38 executing program 1: [ 1867.543628] netlink: 7 bytes leftover after parsing attributes in process `syz-executor.4'. 14:25:38 executing program 2: syz_emit_ethernet(0x140, &(0x7f0000000000)={@local, @random="8a37962a294f", [], {@ipv6={0x86dd, {0x0, 0x3, "110c11", 0x30, 0x21, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x6, [], {0x41, 0x6, "cb155d", 0x0, 0x0, 0x0, @mcast2, @dev}}}}}}}, 0x0) 14:25:38 executing program 3: syz_emit_ethernet(0x140, &(0x7f0000000000)={@local, @random="8a37962a294f", [], {@ipv6={0x86dd, {0x0, 0x3, "110c11", 0x30, 0x21, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x6, [], {0x0, 0x6, "cb155d", 0x0, 0x0, 0x0, @mcast2, @dev}}}}}}}, 0x0) 14:25:38 executing program 0: 14:25:38 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee4050c00000f0000008bc36f7d79ce3263dac37b7403242189c609", 0x23}], 0x1}, 0x0) 14:25:38 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000bd7000)={&(0x7f0000c07e98)=ANY=[@ANYBLOB="000000000000000000000000000000000000000033000000ffffffff0000000000000000000000000000000000000000000000000000000000000000002949000000000000000000000000000000000000000000000000711500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020001007d00000000000000480001006d64350000000000000000000019000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000"], 0x1}}, 0x0) 14:25:38 executing program 1: 14:25:38 executing program 2: syz_emit_ethernet(0x140, &(0x7f0000000000)={@local, @random="8a37962a294f", [], {@ipv6={0x86dd, {0x0, 0x4, "110c11", 0x30, 0x21, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x6, [], {0x41, 0x6, "cb155d", 0x0, 0x0, 0x0, @mcast2, @dev}}}}}}}, 0x0) 14:25:38 executing program 3: syz_emit_ethernet(0x140, &(0x7f0000000000)={@local, @random="8a37962a294f", [], {@ipv6={0x86dd, {0x0, 0x4, "110c11", 0x30, 0x21, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x6, [], {0x0, 0x6, "cb155d", 0x0, 0x0, 0x0, @mcast2, @dev}}}}}}}, 0x0) [ 1867.807142] netlink: 7 bytes leftover after parsing attributes in process `syz-executor.4'. 14:25:38 executing program 0: 14:25:38 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee4050c00000f0000008bc36f7d79ce3263dac37b7403242189c609", 0x23}], 0x1}, 0x0) 14:25:38 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000bd7000)={&(0x7f0000c07e98)=ANY=[@ANYBLOB="000000000000000000000000000000000000000033000000ffffffff0000000000000000000000000000000000000000000000000000000000000000002949000000000000000000000000000000000000000000000000157100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020001007d00000000000000480001006d64350000000000000000000019000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000"], 0x1}}, 0x0) 14:25:38 executing program 1: 14:25:38 executing program 2: syz_emit_ethernet(0x140, &(0x7f0000000000)={@local, @random="8a37962a294f", [], {@ipv6={0x86dd, {0x0, 0x5, "110c11", 0x30, 0x21, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x6, [], {0x41, 0x6, "cb155d", 0x0, 0x0, 0x0, @mcast2, @dev}}}}}}}, 0x0) [ 1868.056964] netlink: 7 bytes leftover after parsing attributes in process `syz-executor.4'. 14:25:38 executing program 3: syz_emit_ethernet(0x140, &(0x7f0000000000)={@local, @random="8a37962a294f", [], {@ipv6={0x86dd, {0x0, 0x5, "110c11", 0x30, 0x21, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x6, [], {0x0, 0x6, "cb155d", 0x0, 0x0, 0x0, @mcast2, @dev}}}}}}}, 0x0) 14:25:38 executing program 0: 14:25:38 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee4050c00000f0000008bc36f7d79ce3263dac37b7403242189c609", 0x23}], 0x1}, 0x0) 14:25:38 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000bd7000)={&(0x7f0000c07e98)=ANY=[@ANYBLOB="000000000000000000000000000000000000000033000000ffffffff000000000000000000000000000000000000000000000000000000000000000000294900000000000000000000000000000000000000000000000000f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020001007d00000000000000480001006d64350000000000000000000019000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000"], 0x1}}, 0x0) 14:25:38 executing program 2: syz_emit_ethernet(0x140, &(0x7f0000000000)={@local, @random="8a37962a294f", [], {@ipv6={0x86dd, {0x0, 0x8, "110c11", 0x30, 0x21, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x6, [], {0x41, 0x6, "cb155d", 0x0, 0x0, 0x0, @mcast2, @dev}}}}}}}, 0x0) 14:25:38 executing program 3: syz_emit_ethernet(0x140, &(0x7f0000000000)={@local, @random="8a37962a294f", [], {@ipv6={0x86dd, {0x0, 0x8, "110c11", 0x30, 0x21, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x6, [], {0x0, 0x6, "cb155d", 0x0, 0x0, 0x0, @mcast2, @dev}}}}}}}, 0x0) 14:25:38 executing program 1: 14:25:38 executing program 0: 14:25:39 executing program 1: [ 1868.434046] netlink: 7 bytes leftover after parsing attributes in process `syz-executor.4'. 14:25:39 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000bd7000)={&(0x7f0000c07e98)=ANY=[@ANYBLOB="000000000000000000000000000000000000000033000000ffffffff0000000000000000000000000000000000000000000000000000000000000000002949000000000000000000000000000000000000000000000000fffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020001007d00000000000000480001006d64350000000000000000000019000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000"], 0x1}}, 0x0) 14:25:39 executing program 0: 14:25:39 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee4050c00000f0000008bc36f7d79ce3263dac37b7403242189c609", 0x23}], 0x1}, 0x0) 14:25:39 executing program 3: syz_emit_ethernet(0x140, &(0x7f0000000000)={@local, @random="8a37962a294f", [], {@ipv6={0x86dd, {0x0, 0x9, "110c11", 0x30, 0x21, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x6, [], {0x0, 0x6, "cb155d", 0x0, 0x0, 0x0, @mcast2, @dev}}}}}}}, 0x0) 14:25:39 executing program 2: syz_emit_ethernet(0x140, &(0x7f0000000000)={@local, @random="8a37962a294f", [], {@ipv6={0x86dd, {0x0, 0x9, "110c11", 0x30, 0x21, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x6, [], {0x41, 0x6, "cb155d", 0x0, 0x0, 0x0, @mcast2, @dev}}}}}}}, 0x0) 14:25:39 executing program 1: [ 1868.682702] net_ratelimit: 50 callbacks suppressed [ 1868.682710] protocol 88fb is buggy, dev hsr_slave_0 [ 1868.685461] netlink: 7 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1868.687770] protocol 88fb is buggy, dev hsr_slave_1 14:25:39 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000bd7000)={&(0x7f0000c07e98)=ANY=[@ANYBLOB="000000000000000000000000000000000000000033000000ffffffff0000000000000000000000000000000000000000000000000000000000000000002949000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020001007d00000000000000480001006d64350000000000000000000019000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000"], 0x1}}, 0x0) 14:25:39 executing program 0: 14:25:39 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee4050c00000f0000008bc36f7d79ce3263dac37b7403242189c609", 0x23}], 0x1}, 0x0) 14:25:39 executing program 3: syz_emit_ethernet(0x140, &(0x7f0000000000)={@local, @random="8a37962a294f", [], {@ipv6={0x86dd, {0x0, 0xb, "110c11", 0x30, 0x21, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x6, [], {0x0, 0x6, "cb155d", 0x0, 0x0, 0x0, @mcast2, @dev}}}}}}}, 0x0) 14:25:39 executing program 1: 14:25:39 executing program 2: syz_emit_ethernet(0x140, &(0x7f0000000000)={@local, @random="8a37962a294f", [], {@ipv6={0x86dd, {0x0, 0xb, "110c11", 0x30, 0x21, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x6, [], {0x41, 0x6, "cb155d", 0x0, 0x0, 0x0, @mcast2, @dev}}}}}}}, 0x0) 14:25:39 executing program 0: 14:25:39 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000bd7000)={&(0x7f0000c07e98)=ANY=[@ANYBLOB="000000000000000000000000000000000000000033000000ffffffff0000000000000000000000000000000000000000000000000000000000000000002949000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020001007d00000000000000480001006d64350000000000000000000019000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000"], 0x1}}, 0x0) 14:25:39 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee4050c00000f0000008bc36f7d79ce3263dac37b7403242189c609", 0x23}], 0x1}, 0x0) 14:25:39 executing program 3: syz_emit_ethernet(0x140, &(0x7f0000000000)={@local, @random="8a37962a294f", [], {@ipv6={0x86dd, {0x0, 0x57, "110c11", 0x30, 0x21, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x6, [], {0x0, 0x6, "cb155d", 0x0, 0x0, 0x0, @mcast2, @dev}}}}}}}, 0x0) 14:25:39 executing program 1: 14:25:39 executing program 2: syz_emit_ethernet(0x140, &(0x7f0000000000)={@local, @random="8a37962a294f", [], {@ipv6={0x86dd, {0x0, 0x41, "110c11", 0x30, 0x21, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x6, [], {0x41, 0x6, "cb155d", 0x0, 0x0, 0x0, @mcast2, @dev}}}}}}}, 0x0) 14:25:39 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000bd7000)={&(0x7f0000c07e98)=ANY=[@ANYBLOB="000000000000000000000000000000000000000033000000ffffffff0000000000000000000000000000000000000000000000000000000000000000002949000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020001007d00000000000000480001006d64350000000000000000000019000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000"], 0x1}}, 0x0) 14:25:39 executing program 0: 14:25:39 executing program 3: syz_emit_ethernet(0x140, &(0x7f0000000000)={@local, @random="8a37962a294f", [], {@ipv6={0x86dd, {0x0, 0x5b, "110c11", 0x30, 0x21, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x6, [], {0x0, 0x6, "cb155d", 0x0, 0x0, 0x0, @mcast2, @dev}}}}}}}, 0x0) 14:25:39 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee4050c00000f0000008bc36f7d79ce3263dac37b7403242189c609", 0x23}], 0x1}, 0x0) 14:25:39 executing program 1: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e75781500000000f600000800000007000000402c11000000000009000007000000000000000000000000385a5800000000000000000000000000006dbd0060152443d6c70000000000000e00000048d79300c999ed5f5fbf91df5d2e6935f646ce45b9284210e2ff"], 0x76) 14:25:40 executing program 2: syz_emit_ethernet(0x140, &(0x7f0000000000)={@local, @random="8a37962a294f", [], {@ipv6={0x86dd, {0x0, 0x57, "110c11", 0x30, 0x21, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x6, [], {0x41, 0x6, "cb155d", 0x0, 0x0, 0x0, @mcast2, @dev}}}}}}}, 0x0) [ 1869.402630] protocol 88fb is buggy, dev hsr_slave_0 [ 1869.402679] protocol 88fb is buggy, dev hsr_slave_1 [ 1869.407765] protocol 88fb is buggy, dev hsr_slave_1 [ 1869.418052] protocol 88fb is buggy, dev hsr_slave_0 [ 1869.423246] protocol 88fb is buggy, dev hsr_slave_1 [ 1869.428403] protocol 88fb is buggy, dev hsr_slave_0 [ 1869.433535] protocol 88fb is buggy, dev hsr_slave_1 14:25:40 executing program 3: syz_emit_ethernet(0x140, &(0x7f0000000000)={@local, @random="8a37962a294f", [], {@ipv6={0x86dd, {0x0, 0x6, "0b0c11", 0x30, 0x21, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x6, [], {0x0, 0x6, "cb155d", 0x0, 0x0, 0x0, @mcast2, @dev}}}}}}}, 0x0) 14:25:40 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0) write(r0, &(0x7f00000001c0)="b156", 0x2) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r0, 0x0) sendfile(r0, r0, &(0x7f0000000200), 0xff8) mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 14:25:40 executing program 2: syz_emit_ethernet(0x140, &(0x7f0000000000)={@local, @random="8a37962a294f", [], {@ipv6={0x86dd, {0x0, 0x6, "0b0c11", 0x30, 0x21, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x6, [], {0x41, 0x6, "cb155d", 0x0, 0x0, 0x0, @mcast2, @dev}}}}}}}, 0x0) 14:25:40 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee4050c00000f0000008bc36f7d79ce3263dac37b7403242189c609", 0x23}], 0x1}, 0x0) 14:25:40 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000bd7000)={&(0x7f0000c07e98)=ANY=[@ANYBLOB="000000000000000000000000000000000000000033000000ffffffff0000000000000000000000000000000000000000000000000000000000000000002949000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020001007d00000000000000480001006d64350000000000000000000019000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000"], 0x1}}, 0x0) [ 1869.631111] SELinux: failed to load policy [ 1869.698498] SELinux: failed to load policy [ 1869.747006] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 14:25:40 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f000051cff6)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f00003fefff)=""/1, 0x1) r1 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000029000)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r0, &(0x7f00000002c0)=[{&(0x7f0000cd8000)=""/1, 0x2e171c03}], 0x1) ioctl$int_in(r2, 0x5452, &(0x7f0000b28000)=0x6) fcntl$setsig(r2, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r3}], 0x1, 0xffffffffffbffff8) dup2(r2, r3) fcntl$setown(r3, 0x8, r1) tkill(r1, 0x16) 14:25:40 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee4050c00000f0000008bc36f7d79ce3263dac37b7403242189c609", 0x23}], 0x1}, 0x0) 14:25:40 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000bd7000)={&(0x7f0000c07e98)=ANY=[@ANYBLOB="000000000000000000000000000000000000000033000000ffffffff0000000000000000000000000000000000000000000000000000000000000000002949000000000000000000000000000000000000000000000000000015710000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020001007d00000000000000480001006d64350000000000000000000019000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000"], 0x1}}, 0x0) 14:25:40 executing program 3: syz_emit_ethernet(0x140, &(0x7f0000000000)={@local, @random="8a37962a294f", [], {@ipv6={0x86dd, {0x0, 0x6, "5b0c11", 0x30, 0x21, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x6, [], {0x0, 0x6, "cb155d", 0x0, 0x0, 0x0, @mcast2, @dev}}}}}}}, 0x0) 14:25:40 executing program 2: syz_emit_ethernet(0x140, &(0x7f0000000000)={@local, @random="8a37962a294f", [], {@ipv6={0x86dd, {0x0, 0x6, "410c11", 0x30, 0x21, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x6, [], {0x41, 0x6, "cb155d", 0x0, 0x0, 0x0, @mcast2, @dev}}}}}}}, 0x0) 14:25:40 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee4050c00000f0000008bc36f7d79ce3263dac37b7403242189c609", 0x23}], 0x1}, 0x0) 14:25:40 executing program 3: syz_emit_ethernet(0x140, &(0x7f0000000000)={@local, @random="8a37962a294f", [], {@ipv6={0x86dd, {0x0, 0x6, "110b11", 0x30, 0x21, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x6, [], {0x0, 0x6, "cb155d", 0x0, 0x0, 0x0, @mcast2, @dev}}}}}}}, 0x0) 14:25:40 executing program 2: syz_emit_ethernet(0x140, &(0x7f0000000000)={@local, @random="8a37962a294f", [], {@ipv6={0x86dd, {0x0, 0x6, "110b11", 0x30, 0x21, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x6, [], {0x41, 0x6, "cb155d", 0x0, 0x0, 0x0, @mcast2, @dev}}}}}}}, 0x0) 14:25:40 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x1b, 0x0, &(0x7f0000000040)=0x5c04952a2335c25e) 14:25:40 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000bd7000)={&(0x7f0000c07e98)=ANY=[@ANYBLOB="000000000000000000000000000000000000000033000000ffffffff0000000000000000000000000000000000000000000000000000000000000000002949000000000000000000000000000000000000000000000000ffffff9e0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020001007d00000000000000480001006d64350000000000000000000019000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000"], 0x1}}, 0x0) 14:25:40 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee4050c00000f0000008bc36f7d79ce3263dac37b7403242189c609", 0x23}], 0x1}, 0x0) 14:25:40 executing program 3: syz_emit_ethernet(0x140, &(0x7f0000000000)={@local, @random="8a37962a294f", [], {@ipv6={0x86dd, {0x0, 0x6, "115b11", 0x30, 0x21, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x6, [], {0x0, 0x6, "cb155d", 0x0, 0x0, 0x0, @mcast2, @dev}}}}}}}, 0x0) [ 1870.567472] kasan: CONFIG_KASAN_INLINE enabled [ 1870.572635] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 1870.580012] general protection fault: 0000 [#1] PREEMPT SMP KASAN [ 1870.586239] CPU: 1 PID: 21 Comm: kworker/u4:1 Not tainted 5.0.0-rc6+ #70 [ 1870.593080] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1870.602432] Workqueue: netns cleanup_net [ 1870.606488] RIP: 0010:get_work_pool+0xed/0x1b0 [ 1870.611054] Code: e8 b8 05 26 00 4c 89 e0 5b 41 5c 5d c3 e8 ab 05 26 00 48 81 e3 00 fe ff ff 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 <80> 3c 02 00 0f 85 a0 00 00 00 4c 8b 23 e8 81 05 26 00 5b 4c 89 e0 [ 1870.629991] RSP: 0018:ffff8880a99efa00 EFLAGS: 00010006 [ 1870.635355] RAX: dffffc0000000000 RBX: 0000001ffffffe00 RCX: ffffffff8149db26 [ 1870.642617] RDX: 00000003ffffffc0 RSI: ffffffff8149db75 RDI: 0000000000000007 [ 1870.649883] RBP: ffff8880a99efa10 R08: ffff8880a99e0580 R09: ffffed1015d25bd0 [ 1870.657203] R10: ffffed1015d25bcf R11: ffff8880ae92de7b R12: 0000000000000004 [ 1870.664465] R13: ffff8880a99efb60 R14: 0000000000000000 R15: ffff888083dedc90 [ 1870.671738] FS: 0000000000000000(0000) GS:ffff8880ae900000(0000) knlGS:0000000000000000 [ 1870.679957] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1870.685844] CR2: 0000000000fb0010 CR3: 000000004c86f000 CR4: 00000000001426e0 [ 1870.693106] Call Trace: [ 1870.695695] __flush_work+0x11e/0x840 [ 1870.699484] ? insert_work+0x3a0/0x3a0 [ 1870.703366] ? lock_downgrade+0x810/0x810 [ 1870.707515] ? mark_held_locks+0xb1/0x100 [ 1870.711650] ? kfree+0x173/0x230 [ 1870.715014] ? xfrm_sysctl_fini+0x67/0x80 [ 1870.719154] ? kfree+0x173/0x230 [ 1870.722525] ? lockdep_hardirqs_on+0x415/0x5d0 [ 1870.727117] flush_work+0x18/0x20 [ 1870.730561] xfrm_policy_fini+0x2e/0x3a0 [ 1870.734635] ? xfrm_policy_fini+0x3a0/0x3a0 [ 1870.738956] xfrm_net_exit+0x1d/0x70 [ 1870.742677] ops_exit_list.isra.0+0xb0/0x160 [ 1870.747086] cleanup_net+0x3fb/0x960 [ 1870.750794] ? netns_install+0x1d0/0x1d0 [ 1870.754877] ? __lock_is_held+0xb6/0x140 [ 1870.758951] ? check_preemption_disabled+0x48/0x290 14:25:41 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000480)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept$alg(r0, 0x0, 0x0) sendmsg(r1, &(0x7f0000001900)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000240)="53295bf5184dcf2a5603ba89848460ac4446080ef575b43c9445fcb570bb87d9f93b2fc123a0be33fd65301503c02718f2c5b98791f3035c05578873ca1cb06e3a8fd933d6ef700fb0c763bbdc801a7965a7efddbf65b1a7dd23a6e245cb8afde93977333a00a1cadc7700d5269862b73279260541e8abd62041b8329e7656f6ce797fa6bfa1a84627aa74a33aa05dffbb9f4569e7b2ad8eb011", 0x9a}], 0x1}, 0x0) recvmmsg(r1, &(0x7f0000009940)=[{{0x0, 0x0, &(0x7f0000009780)=[{&(0x7f0000009340)=""/153, 0x99}], 0x1}}], 0x1, 0x0, 0x0) 14:25:41 executing program 2: syz_emit_ethernet(0x140, &(0x7f0000000000)={@local, @random="8a37962a294f", [], {@ipv6={0x86dd, {0x0, 0x6, "114111", 0x30, 0x21, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x6, [], {0x41, 0x6, "cb155d", 0x0, 0x0, 0x0, @mcast2, @dev}}}}}}}, 0x0) 14:25:41 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000bd7000)={&(0x7f0000c07e98)=ANY=[@ANYBLOB="000000000000000000000000000000000000000033000000ffffffff0000000000000000000000000000000000000000000000000000000000000000002949000000000000000000000000000000000000000000000000fffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020001007d00000000000000480001006d64350000000000000000000019000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000"], 0x1}}, 0x0) 14:25:41 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, &(0x7f00000000c0), &(0x7f0000000100)}}}], 0x97, 0x0, &(0x7f0000fedffe)}) 14:25:41 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee4050c00000f0000008bc36f7d79ce3263dac37b7403242189c609", 0x23}], 0x1}, 0x0) 14:25:41 executing program 3: syz_emit_ethernet(0x140, &(0x7f0000000000)={@local, @random="8a37962a294f", [], {@ipv6={0x86dd, {0x0, 0x6, "110c0b", 0x30, 0x21, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x6, [], {0x0, 0x6, "cb155d", 0x0, 0x0, 0x0, @mcast2, @dev}}}}}}}, 0x0) [ 1870.763984] ? rcu_lockdep_current_cpu_online+0xe3/0x130 [ 1870.769445] process_one_work+0x98e/0x1790 [ 1870.773699] ? pwq_dec_nr_in_flight+0x320/0x320 [ 1870.778369] ? lock_acquire+0x16f/0x3f0 [ 1870.782359] worker_thread+0x98/0xe40 [ 1870.786195] kthread+0x357/0x430 [ 1870.789574] ? process_one_work+0x1790/0x1790 [ 1870.794077] ? kthread_cancel_delayed_work_sync+0x20/0x20 [ 1870.799620] ret_from_fork+0x3a/0x50 [ 1870.803339] Modules linked in: [ 1870.806541] ---[ end trace bf5838274215447d ]--- [ 1870.811298] RIP: 0010:get_work_pool+0xed/0x1b0 [ 1870.815882] Code: e8 b8 05 26 00 4c 89 e0 5b 41 5c 5d c3 e8 ab 05 26 00 48 81 e3 00 fe ff ff 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 <80> 3c 02 00 0f 85 a0 00 00 00 4c 8b 23 e8 81 05 26 00 5b 4c 89 e0 [ 1870.834791] RSP: 0018:ffff8880a99efa00 EFLAGS: 00010006 [ 1870.840148] RAX: dffffc0000000000 RBX: 0000001ffffffe00 RCX: ffffffff8149db26 [ 1870.847419] RDX: 00000003ffffffc0 RSI: ffffffff8149db75 RDI: 0000000000000007 [ 1870.854695] RBP: ffff8880a99efa10 R08: ffff8880a99e0580 R09: ffffed1015d25bd0 [ 1870.861968] R10: ffffed1015d25bcf R11: ffff8880ae92de7b R12: 0000000000000004 [ 1870.869327] R13: ffff8880a99efb60 R14: 0000000000000000 R15: ffff888083dedc90 [ 1870.876599] FS: 0000000000000000(0000) GS:ffff8880ae900000(0000) knlGS:0000000000000000 [ 1870.884825] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1870.890702] CR2: 0000000000fb0010 CR3: 000000004c86f000 CR4: 00000000001426e0 [ 1870.897979] Kernel panic - not syncing: Fatal exception [ 1870.904383] Kernel Offset: disabled [ 1870.908006] Rebooting in 86400 seconds..