0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000005c0), 0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @dev}, 0x10) semget(0x0, 0x0, 0x100) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000100), 0x4) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) recvmmsg(0xffffffffffffffff, 0x0, 0x103, 0x2000001000, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x31c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 09:55:23 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) capset(&(0x7f0000000200)={0x19980330}, &(0x7f0000000080)) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r1, 0x0, 0x100000008001) 09:55:23 executing program 2: ioctl$TIOCSSERIAL(0xffffffffffffffff, 0x541f, 0x0) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x78, 0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @dev}, 0x10) semctl$GETNCNT(0x0, 0x0, 0xe, 0x0) connect$inet(r0, &(0x7f0000000040), 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000100), 0x4) ioctl$PIO_CMAP(r0, 0x4b71, &(0x7f00000000c0)={0xc45, 0x4, 0x3f, 0x1, 0x6, 0x1}) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) 09:55:23 executing program 3: ioctl$TIOCSSERIAL(0xffffffffffffffff, 0x541f, 0x0) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x78, 0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @dev}, 0x10) semctl$GETNCNT(0x0, 0x0, 0xe, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) ioctl$PIO_CMAP(r0, 0x4b71, &(0x7f00000000c0)={0xc45, 0x4, 0x3f, 0x1, 0x6, 0x1}) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) 09:55:23 executing program 5: syz_mount_image$jfs(&(0x7f00000001c0)='jfs\x00', &(0x7f0000000280)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)={[{@errors_remount='errors=remount-ro'}, {@noquota='noquota'}, {@integrity='integrity'}], [], 0x2010}) 09:55:23 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) capset(&(0x7f0000000200)={0x19980330}, &(0x7f0000000080)) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(0xffffffffffffffff, r1, 0x0, 0x100000008001) [ 542.173173][T32324] jfs: Unrecognized mount option "" or missing value 09:55:23 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) capset(&(0x7f0000000200)={0x19980330}, &(0x7f0000000080)) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r1, 0x0, 0x100000008001) 09:55:23 executing program 2: ioctl$TIOCSSERIAL(0xffffffffffffffff, 0x541f, 0x0) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x78, 0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @dev}, 0x10) semctl$GETNCNT(0x0, 0x0, 0xe, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) ioctl$PIO_CMAP(r0, 0x4b71, &(0x7f00000000c0)={0xc45, 0x4, 0x3f, 0x1, 0x6, 0x1}) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) 09:55:23 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) capset(&(0x7f0000000200)={0x19980330}, &(0x7f0000000080)) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(0xffffffffffffffff, r1, 0x0, 0x100000008001) 09:55:23 executing program 5: syz_mount_image$jfs(&(0x7f00000001c0)='jfs\x00', &(0x7f0000000280)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)={[{@errors_remount='errors=remount-ro'}, {@noquota='noquota'}, {@integrity='integrity'}], [], 0x2500}) 09:55:23 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) capset(&(0x7f0000000200)={0x19980330}, &(0x7f0000000080)) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(0xffffffffffffffff, r1, 0x0, 0x100000008001) 09:55:23 executing program 1: connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) capset(&(0x7f0000000200)={0x19980330}, &(0x7f0000000080)) r0 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(0xffffffffffffffff, r0, 0x0, 0x100000008001) 09:55:24 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x78, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e23, @dev}, 0x10) semget(0x0, 0x0, 0x100) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000100), 0x4) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) recvmmsg(0xffffffffffffffff, 0x0, 0x103, 0x2000001000, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x31c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 09:55:24 executing program 1: connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) capset(&(0x7f0000000200)={0x19980330}, &(0x7f0000000080)) r0 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(0xffffffffffffffff, r0, 0x0, 0x100000008001) 09:55:24 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) capset(&(0x7f0000000200)={0x19980330}, &(0x7f0000000080)) syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, 0xffffffffffffffff, 0x0, 0x100000008001) 09:55:24 executing program 5: syz_mount_image$jfs(&(0x7f00000001c0)='jfs\x00', &(0x7f0000000280)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)={[{@errors_remount='errors=remount-ro'}, {@noquota='noquota'}, {@integrity='integrity'}], [], 0x3e0f}) 09:55:24 executing program 3: ioctl$TIOCSSERIAL(0xffffffffffffffff, 0x541f, 0x0) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x78, 0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @dev}, 0x10) semctl$GETNCNT(0x0, 0x0, 0xe, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000100), 0x4) ioctl$PIO_CMAP(0xffffffffffffffff, 0x4b71, &(0x7f00000000c0)={0xc45, 0x4, 0x3f, 0x1, 0x6, 0x1}) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) 09:55:24 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) capset(&(0x7f0000000200)={0x19980330}, &(0x7f0000000080)) syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, 0xffffffffffffffff, 0x0, 0x100000008001) 09:55:24 executing program 1: connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) capset(&(0x7f0000000200)={0x19980330}, &(0x7f0000000080)) r0 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(0xffffffffffffffff, r0, 0x0, 0x100000008001) [ 543.058470][T32367] jfs: Unrecognized mount option "" or missing value 09:55:24 executing program 2: ioctl$TIOCSSERIAL(0xffffffffffffffff, 0x541f, 0x0) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x78, 0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @dev}, 0x10) semctl$GETNCNT(0x0, 0x0, 0xe, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) ioctl$PIO_CMAP(r0, 0x4b71, &(0x7f00000000c0)={0xc45, 0x4, 0x3f, 0x1, 0x6, 0x1}) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) 09:55:24 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x78, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e23, @dev}, 0x10) semget(0x0, 0x0, 0x100) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000100), 0x4) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) recvmmsg(0xffffffffffffffff, 0x0, 0x103, 0x2000001000, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x31c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 09:55:24 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) capset(&(0x7f0000000200)={0x19980330}, &(0x7f0000000080)) syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, 0xffffffffffffffff, 0x0, 0x100000008001) [ 543.241050][T32367] jfs: Unrecognized mount option "" or missing value 09:55:24 executing program 1: r0 = socket$inet6(0xa, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) capset(&(0x7f0000000200)={0x19980330}, &(0x7f0000000080)) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r1, 0x0, 0x100000008001) 09:55:24 executing program 5: syz_mount_image$jfs(&(0x7f00000001c0)='jfs\x00', &(0x7f0000000280)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)={[{@errors_remount='errors=remount-ro'}, {@noquota='noquota'}, {@integrity='integrity'}], [], 0x3f00}) 09:55:24 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x78, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e23, @dev}, 0x10) semget(0x0, 0x0, 0x100) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000100), 0x4) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) recvmmsg(0xffffffffffffffff, 0x0, 0x103, 0x2000001000, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x31c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 09:55:25 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) capset(&(0x7f0000000200)={0x19980330}, &(0x7f0000000080)) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r1, 0x0, 0x0) 09:55:25 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) capset(&(0x7f0000000200)={0x19980330}, &(0x7f0000000080)) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r1, 0x0, 0x0) 09:55:25 executing program 1: r0 = socket$inet6(0xa, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) capset(&(0x7f0000000200)={0x19980330}, &(0x7f0000000080)) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r1, 0x0, 0x100000008001) 09:55:25 executing program 3: ioctl$TIOCSSERIAL(0xffffffffffffffff, 0x541f, 0x0) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x78, 0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @dev}, 0x10) semctl$GETNCNT(0x0, 0x0, 0xe, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000100), 0x4) ioctl$PIO_CMAP(0xffffffffffffffff, 0x4b71, &(0x7f00000000c0)={0xc45, 0x4, 0x3f, 0x1, 0x6, 0x1}) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) 09:55:25 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) capset(&(0x7f0000000200)={0x19980330}, &(0x7f0000000080)) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r1, 0x0, 0x0) 09:55:25 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x78, 0x4) bind$inet(r0, 0x0, 0x0) semget(0x0, 0x0, 0x100) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000100), 0x4) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) recvmmsg(0xffffffffffffffff, 0x0, 0x103, 0x2000001000, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x31c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 09:55:25 executing program 2: connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) capset(&(0x7f0000000200)={0x19980330}, &(0x7f0000000080)) r0 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(0xffffffffffffffff, r0, 0x0, 0x100000008001) 09:55:25 executing program 1: r0 = socket$inet6(0xa, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) capset(&(0x7f0000000200)={0x19980330}, &(0x7f0000000080)) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r1, 0x0, 0x100000008001) 09:55:25 executing program 5: syz_mount_image$jfs(&(0x7f00000001c0)='jfs\x00', &(0x7f0000000280)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)={[{@errors_remount='errors=remount-ro'}, {@noquota='noquota'}, {@integrity='integrity'}], [], 0x4000}) 09:55:25 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) capset(&(0x7f0000000200)={0x19980330}, &(0x7f0000000080)) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(0xffffffffffffffff, r1, 0x0, 0x100000008001) 09:55:25 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x78, 0x4) bind$inet(r0, 0x0, 0x0) semget(0x0, 0x0, 0x100) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000100), 0x4) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) recvmmsg(0xffffffffffffffff, 0x0, 0x103, 0x2000001000, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x31c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 09:55:25 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) capset(&(0x7f0000000200)={0x19980330}, &(0x7f0000000080)) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(0xffffffffffffffff, r1, 0x0, 0x100000008001) 09:55:25 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) capset(&(0x7f0000000200)={0x19980330}, &(0x7f0000000080)) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r1, 0x0, 0x100000008001) 09:55:25 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) capset(&(0x7f0000000200)={0x19980330}, &(0x7f0000000080)) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x0, 0x0) ioctl$SG_GET_SG_TABLESIZE(0xffffffffffffffff, 0x227f, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) sendfile(r0, r1, 0x0, 0x100000008001) 09:55:25 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x78, 0x4) bind$inet(r0, 0x0, 0x0) semget(0x0, 0x0, 0x100) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000100), 0x4) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) recvmmsg(0xffffffffffffffff, 0x0, 0x103, 0x2000001000, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x31c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 09:55:26 executing program 3: ioctl$TIOCSSERIAL(0xffffffffffffffff, 0x541f, 0x0) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x78, 0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @dev}, 0x10) semctl$GETNCNT(0x0, 0x0, 0xe, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000100), 0x4) ioctl$PIO_CMAP(0xffffffffffffffff, 0x4b71, &(0x7f00000000c0)={0xc45, 0x4, 0x3f, 0x1, 0x6, 0x1}) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) 09:55:26 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) capset(&(0x7f0000000200)={0x19980330}, &(0x7f0000000080)) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x0, 0x0) ioctl$SG_GET_SG_TABLESIZE(0xffffffffffffffff, 0x227f, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clock_gettime(0x0, 0x0) sendfile(r0, r1, &(0x7f0000000000), 0x100000008001) 09:55:26 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) capset(&(0x7f0000000200)={0x19980330}, &(0x7f0000000080)) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r1, 0x0, 0x100000008001) 09:55:26 executing program 5: syz_mount_image$jfs(&(0x7f00000001c0)='jfs\x00', &(0x7f0000000280)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)={[{@errors_remount='errors=remount-ro'}, {@noquota='noquota'}, {@integrity='integrity'}], [], 0x4800}) 09:55:26 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x78, 0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0x0, @dev}, 0x10) semget(0x0, 0x0, 0x100) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000100), 0x4) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) recvmmsg(0xffffffffffffffff, 0x0, 0x103, 0x2000001000, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x31c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 09:55:26 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) capset(&(0x7f0000000200)={0x19980330}, &(0x7f0000000080)) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x0, 0x0) ioctl$SG_GET_SG_TABLESIZE(0xffffffffffffffff, 0x227f, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clock_gettime(0x0, 0x0) sendfile(r0, r1, &(0x7f0000000000), 0x100000008001) 09:55:26 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) capset(&(0x7f0000000200)={0x19980330}, &(0x7f0000000080)) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r1, 0x0, 0x100000008001) 09:55:26 executing program 5: syz_mount_image$jfs(&(0x7f00000001c0)='jfs\x00', &(0x7f0000000280)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)={[{@errors_remount='errors=remount-ro'}, {@noquota='noquota'}, {@integrity='integrity'}], [], 0x4c00}) 09:55:26 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x78, 0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0x0, @dev}, 0x10) semget(0x0, 0x0, 0x100) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000100), 0x4) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) recvmmsg(0xffffffffffffffff, 0x0, 0x103, 0x2000001000, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x31c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 09:55:26 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, 0x0, 0x0) capset(&(0x7f0000000200)={0x19980330}, &(0x7f0000000080)) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r1, 0x0, 0x100000008001) 09:55:26 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) capset(&(0x7f0000000200)={0x19980330}, &(0x7f0000000080)) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x0, 0x0) ioctl$SG_GET_SG_TABLESIZE(0xffffffffffffffff, 0x227f, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clock_gettime(0x0, 0x0) sendfile(r0, r1, &(0x7f0000000000), 0x100000008001) 09:55:26 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x78, 0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0x0, @dev}, 0x10) semget(0x0, 0x0, 0x100) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000100), 0x4) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) recvmmsg(0xffffffffffffffff, 0x0, 0x103, 0x2000001000, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x31c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 09:55:27 executing program 3: ioctl$TIOCSSERIAL(0xffffffffffffffff, 0x541f, 0x0) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x78, 0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @dev}, 0x10) semctl$GETNCNT(0x0, 0x0, 0xe, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000100), 0x4) ioctl$PIO_CMAP(r0, 0x4b71, 0x0) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) 09:55:27 executing program 5: syz_mount_image$jfs(&(0x7f00000001c0)='jfs\x00', &(0x7f0000000280)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)={[{@errors_remount='errors=remount-ro'}, {@noquota='noquota'}, {@integrity='integrity'}], [], 0x5c00}) 09:55:27 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, 0x0, 0x0) capset(&(0x7f0000000200)={0x19980330}, &(0x7f0000000080)) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r1, 0x0, 0x100000008001) 09:55:27 executing program 2: ioctl$TIOCSSERIAL(0xffffffffffffffff, 0x541f, 0x0) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, 0x0, 0x0) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @dev}, 0x10) semctl$GETNCNT(0x0, 0x0, 0xe, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000100), 0x4) ioctl$PIO_CMAP(r0, 0x4b71, &(0x7f00000000c0)={0xc45, 0x4, 0x3f, 0x1, 0x6, 0x1}) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) 09:55:27 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x78, 0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @dev}, 0x10) semget(0xffffffffffffffff, 0x0, 0x100) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000100), 0x4) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) recvmmsg(0xffffffffffffffff, 0x0, 0x103, 0x2000001000, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x31c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 09:55:27 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, 0x0, 0x0) capset(&(0x7f0000000200)={0x19980330}, &(0x7f0000000080)) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r1, 0x0, 0x100000008001) 09:55:27 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) capset(&(0x7f0000000200)={0x19980330}, &(0x7f0000000080)) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x0, 0x0) ioctl$SG_GET_SG_TABLESIZE(0xffffffffffffffff, 0x227f, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clock_gettime(0x0, 0x0) sendfile(r0, r1, &(0x7f0000000000), 0x100000008001) 09:55:27 executing program 5: syz_mount_image$jfs(&(0x7f00000001c0)='jfs\x00', &(0x7f0000000280)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)={[{@errors_remount='errors=remount-ro'}, {@noquota='noquota'}, {@integrity='integrity'}], [], 0x6800}) 09:55:27 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev}, 0x1c) capset(&(0x7f0000000200)={0x19980330}, &(0x7f0000000080)) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r1, 0x0, 0x100000008001) 09:55:27 executing program 5: syz_mount_image$jfs(&(0x7f00000001c0)='jfs\x00', &(0x7f0000000280)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)={[{@errors_remount='errors=remount-ro'}, {@noquota='noquota'}, {@integrity='integrity'}], [], 0x6c00}) 09:55:27 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev}, 0x1c) capset(&(0x7f0000000200)={0x19980330}, &(0x7f0000000080)) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r1, 0x0, 0x100000008001) 09:55:27 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev}, 0x1c) capset(&(0x7f0000000200)={0x19980330}, &(0x7f0000000080)) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r1, 0x0, 0x100000008001) 09:55:28 executing program 3: ioctl$TIOCSSERIAL(0xffffffffffffffff, 0x541f, 0x0) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x78, 0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @dev}, 0x10) semctl$GETNCNT(0x0, 0x0, 0xe, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000100), 0x4) ioctl$PIO_CMAP(r0, 0x4b71, 0x0) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) 09:55:28 executing program 5: syz_mount_image$jfs(&(0x7f00000001c0)='jfs\x00', &(0x7f0000000280)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)={[{@errors_remount='errors=remount-ro'}, {@noquota='noquota'}, {@integrity='integrity'}], [], 0x7400}) 09:55:28 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) capset(0x0, &(0x7f0000000080)) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r1, 0x0, 0x100000008001) 09:55:28 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) capset(&(0x7f0000000200)={0x19980330}, &(0x7f0000000080)) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x0, 0x0) ioctl$SG_GET_SG_TABLESIZE(0xffffffffffffffff, 0x227f, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clock_gettime(0x0, 0x0) sendfile(r0, r1, &(0x7f0000000000), 0x100000008001) 09:55:28 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x78, 0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @dev}, 0x10) semget(0xffffffffffffffff, 0x0, 0x100) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000100), 0x4) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) recvmmsg(0xffffffffffffffff, 0x0, 0x103, 0x2000001000, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x31c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 09:55:28 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x78, 0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @dev}, 0x10) semget(0xffffffffffffffff, 0x0, 0x100) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000100), 0x4) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) recvmmsg(0xffffffffffffffff, 0x0, 0x103, 0x2000001000, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x31c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 09:55:28 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) capset(0x0, &(0x7f0000000080)) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r1, 0x0, 0x100000008001) 09:55:28 executing program 5: syz_mount_image$jfs(&(0x7f00000001c0)='jfs\x00', &(0x7f0000000280)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)={[{@errors_remount='errors=remount-ro'}, {@noquota='noquota'}, {@integrity='integrity'}], [], 0x7a00}) 09:55:28 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) capset(0x0, &(0x7f0000000080)) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r1, 0x0, 0x100000008001) 09:55:28 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) capset(&(0x7f0000000200), &(0x7f0000000080)) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r1, 0x0, 0x100000008001) 09:55:28 executing program 5: syz_mount_image$jfs(&(0x7f00000001c0)='jfs\x00', &(0x7f0000000280)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)={[{@errors_remount='errors=remount-ro'}, {@noquota='noquota'}, {@integrity='integrity'}], [], 0xedc0}) [ 547.290333][T32609] jfs: Unrecognized mount option "À" or missing value 09:55:28 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) capset(&(0x7f0000000200)={0x19980330}, &(0x7f0000000080)) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x0, 0x0) ioctl$SG_GET_SG_TABLESIZE(0xffffffffffffffff, 0x227f, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clock_gettime(0x0, 0x0) sendfile(r0, r1, &(0x7f0000000000), 0x100000008001) [ 547.343810][T32609] jfs: Unrecognized mount option "À" or missing value 09:55:29 executing program 3: ioctl$TIOCSSERIAL(0xffffffffffffffff, 0x541f, 0x0) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x78, 0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @dev}, 0x10) semctl$GETNCNT(0x0, 0x0, 0xe, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000100), 0x4) ioctl$PIO_CMAP(r0, 0x4b71, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) 09:55:29 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) capset(&(0x7f0000000200), &(0x7f0000000080)) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r1, 0x0, 0x100000008001) 09:55:29 executing program 5: syz_mount_image$jfs(&(0x7f00000001c0)='jfs\x00', &(0x7f0000000280)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)={[{@errors_remount='errors=remount-ro'}, {@noquota='noquota'}, {@integrity='integrity'}], [], 0xff0f}) 09:55:29 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x78, 0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @dev}, 0x10) semget(0x0, 0x0, 0x100) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000100), 0x4) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) recvmmsg(0xffffffffffffffff, 0x0, 0x103, 0x2000001000, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x31c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 09:55:29 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x78, 0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @dev}, 0x10) semget(0xffffffffffffffff, 0x0, 0x100) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000100), 0x4) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) recvmmsg(0xffffffffffffffff, 0x0, 0x103, 0x2000001000, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x31c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) [ 547.662036][T32627] jfs: Unrecognized mount option "" or missing value 09:55:29 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) capset(&(0x7f0000000200), &(0x7f0000000080)) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r1, 0x0, 0x100000008001) [ 547.765062][T32627] jfs: Unrecognized mount option "" or missing value 09:55:29 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) capset(&(0x7f0000000200)={0x19980330}, &(0x7f0000000080)) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x0, 0x0) ioctl$SG_GET_SG_TABLESIZE(0xffffffffffffffff, 0x227f, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clock_gettime(0x0, 0x0) sendfile(r0, r1, &(0x7f0000000000), 0x100000008001) 09:55:29 executing program 5: syz_mount_image$jfs(&(0x7f00000001c0)='jfs\x00', &(0x7f0000000280)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)={[{@errors_remount='errors=remount-ro'}, {@noquota='noquota'}, {@integrity='integrity'}], [], 0x80000}) 09:55:29 executing program 3: ioctl$TIOCSSERIAL(0xffffffffffffffff, 0x541f, 0x0) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x78, 0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @dev}, 0x10) semctl$GETNCNT(0x0, 0x0, 0xe, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000100), 0x4) ioctl$PIO_CMAP(r0, 0x4b71, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) 09:55:29 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) capset(&(0x7f0000000200)={0x19980330}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r1, 0x0, 0x100000008001) 09:55:29 executing program 3: ioctl$TIOCSSERIAL(0xffffffffffffffff, 0x541f, 0x0) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x78, 0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @dev}, 0x10) semctl$GETNCNT(0x0, 0x0, 0xe, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000100), 0x4) ioctl$PIO_CMAP(r0, 0x4b71, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) 09:55:29 executing program 5: syz_mount_image$jfs(&(0x7f00000001c0)='jfs\x00', &(0x7f0000000280)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)={[{@errors_remount='errors=remount-ro'}, {@noquota='noquota'}, {@integrity='integrity'}], [], 0x800000}) 09:55:29 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) capset(&(0x7f0000000200)={0x19980330}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r1, 0x0, 0x100000008001) 09:55:29 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) capset(&(0x7f0000000200)={0x19980330}, &(0x7f0000000080)) syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x0, 0x0) ioctl$SG_GET_SG_TABLESIZE(0xffffffffffffffff, 0x227f, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clock_gettime(0x0, 0x0) 09:55:29 executing program 3: ioctl$TIOCSSERIAL(0xffffffffffffffff, 0x541f, 0x0) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x78, 0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @dev}, 0x10) semctl$GETNCNT(0x0, 0x0, 0xe, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000100), 0x4) ioctl$PIO_CMAP(r0, 0x4b71, 0x0) write$binfmt_elf64(r0, 0x0, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) 09:55:30 executing program 4: ioctl$TIOCSSERIAL(0xffffffffffffffff, 0x541f, 0x0) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x78, 0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @dev}, 0x10) semctl$GETNCNT(0x0, 0x0, 0xe, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000100), 0x4) ioctl$PIO_CMAP(r0, 0x4b71, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) 09:55:30 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x78, 0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @dev}, 0x10) semget(0x0, 0x0, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000100), 0x4) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) recvmmsg(0xffffffffffffffff, 0x0, 0x103, 0x2000001000, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x31c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 09:55:30 executing program 5: syz_mount_image$jfs(&(0x7f00000001c0)='jfs\x00', &(0x7f0000000280)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)={[{@errors_remount='errors=remount-ro'}, {@noquota='noquota'}, {@integrity='integrity'}], [], 0x1000000}) 09:55:30 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) capset(&(0x7f0000000200)={0x19980330}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r1, 0x0, 0x100000008001) 09:55:30 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) capset(&(0x7f0000000200)={0x19980330}, &(0x7f0000000080)) r1 = syz_open_procfs(0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000008001) 09:55:30 executing program 3: ioctl$TIOCSSERIAL(0xffffffffffffffff, 0x541f, 0x0) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x78, 0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @dev}, 0x10) semctl$GETNCNT(0x0, 0x0, 0xe, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000100), 0x4) ioctl$PIO_CMAP(r0, 0x4b71, 0x0) write$binfmt_elf64(r0, 0x0, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) 09:55:30 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x78, 0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @dev}, 0x10) semget(0xffffffffffffffff, 0x0, 0x100) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000100), 0x4) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) recvmmsg(0xffffffffffffffff, 0x0, 0x103, 0x2000001000, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x31c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 09:55:30 executing program 5: syz_mount_image$jfs(&(0x7f00000001c0)='jfs\x00', &(0x7f0000000280)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)={[{@errors_remount='errors=remount-ro'}, {@noquota='noquota'}, {@integrity='integrity'}], [], 0x2000000}) 09:55:30 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) capset(&(0x7f0000000200)={0x19980330}, &(0x7f0000000080)) r1 = syz_open_procfs(0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000008001) 09:55:30 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) capset(&(0x7f0000000200)={0x19980330}, &(0x7f0000000080)) syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x0, 0x0) ioctl$SG_GET_SG_TABLESIZE(0xffffffffffffffff, 0x227f, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clock_gettime(0x0, 0x0) 09:55:30 executing program 3: ioctl$TIOCSSERIAL(0xffffffffffffffff, 0x541f, 0x0) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x78, 0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @dev}, 0x10) semctl$GETNCNT(0x0, 0x0, 0xe, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000100), 0x4) ioctl$PIO_CMAP(r0, 0x4b71, 0x0) write$binfmt_elf64(r0, 0x0, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) 09:55:30 executing program 3: ioctl$TIOCSSERIAL(0xffffffffffffffff, 0x541f, 0x0) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x78, 0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @dev}, 0x10) semctl$GETNCNT(0x0, 0x0, 0xe, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000100), 0x4) ioctl$PIO_CMAP(r0, 0x4b71, 0x0) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[], 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) 09:55:30 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) capset(&(0x7f0000000200)={0x19980330}, &(0x7f0000000080)) r1 = syz_open_procfs(0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000008001) 09:55:31 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x78, 0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @dev}, 0x10) semget(0x0, 0x0, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000100), 0x4) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) recvmmsg(0xffffffffffffffff, 0x0, 0x103, 0x2000001000, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x31c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 09:55:31 executing program 5: syz_mount_image$jfs(&(0x7f00000001c0)='jfs\x00', &(0x7f0000000280)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)={[{@errors_remount='errors=remount-ro'}, {@noquota='noquota'}, {@integrity='integrity'}], [], 0x2040000}) 09:55:31 executing program 3: ioctl$TIOCSSERIAL(0xffffffffffffffff, 0x541f, 0x0) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x78, 0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @dev}, 0x10) semctl$GETNCNT(0x0, 0x0, 0xe, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000100), 0x4) ioctl$PIO_CMAP(r0, 0x4b71, 0x0) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[], 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) 09:55:31 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) capset(&(0x7f0000000200)={0x19980330}, &(0x7f0000000080)) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(0xffffffffffffffff, r1, 0x0, 0x100000008001) 09:55:31 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) capset(&(0x7f0000000200)={0x19980330}, &(0x7f0000000080)) syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x0, 0x0) ioctl$SG_GET_SG_TABLESIZE(0xffffffffffffffff, 0x227f, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:55:31 executing program 4: ioctl$TIOCSSERIAL(0xffffffffffffffff, 0x541f, 0x0) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x78, 0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @dev}, 0x10) semctl$GETNCNT(0x0, 0x0, 0xe, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000100), 0x4) ioctl$PIO_CMAP(r0, 0x4b71, 0x0) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[], 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) 09:55:31 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) capset(&(0x7f0000000200)={0x19980330}, &(0x7f0000000080)) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(0xffffffffffffffff, r1, 0x0, 0x100000008001) 09:55:31 executing program 3: ioctl$TIOCSSERIAL(0xffffffffffffffff, 0x541f, 0x0) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x78, 0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @dev}, 0x10) semctl$GETNCNT(0x0, 0x0, 0xe, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000100), 0x4) ioctl$PIO_CMAP(r0, 0x4b71, 0x0) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[], 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) 09:55:31 executing program 5: syz_mount_image$jfs(&(0x7f00000001c0)='jfs\x00', &(0x7f0000000280)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)={[{@errors_remount='errors=remount-ro'}, {@noquota='noquota'}, {@integrity='integrity'}], [], 0x3000000}) 09:55:31 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) capset(&(0x7f0000000200)={0x19980330}, &(0x7f0000000080)) syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x0, 0x0) ioctl$SG_GET_SG_TABLESIZE(0xffffffffffffffff, 0x227f, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:55:31 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) capset(&(0x7f0000000200)={0x19980330}, &(0x7f0000000080)) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(0xffffffffffffffff, r1, 0x0, 0x100000008001) 09:55:31 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) capset(&(0x7f0000000200)={0x19980330}, &(0x7f0000000080)) syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, 0xffffffffffffffff, 0x0, 0x100000008001) 09:55:32 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x78, 0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @dev}, 0x10) semget(0x0, 0x0, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000100), 0x4) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) recvmmsg(0xffffffffffffffff, 0x0, 0x103, 0x2000001000, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x31c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 09:55:32 executing program 5: syz_mount_image$jfs(&(0x7f00000001c0)='jfs\x00', &(0x7f0000000280)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)={[{@errors_remount='errors=remount-ro'}, {@noquota='noquota'}, {@integrity='integrity'}], [], 0x4000000}) 09:55:32 executing program 4: ioctl$TIOCSSERIAL(0xffffffffffffffff, 0x541f, 0x0) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x78, 0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @dev}, 0x10) semctl$GETNCNT(0x0, 0x0, 0xe, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000100), 0x4) ioctl$PIO_CMAP(r0, 0x4b71, 0x0) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[], 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) 09:55:32 executing program 3: ioctl$TIOCSSERIAL(0xffffffffffffffff, 0x541f, 0x0) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x78, 0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @dev}, 0x10) semctl$GETNCNT(0x0, 0x0, 0xe, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000100), 0x4) ioctl$PIO_CMAP(r0, 0x4b71, 0x0) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) 09:55:32 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) capset(&(0x7f0000000200)={0x19980330}, &(0x7f0000000080)) syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, 0xffffffffffffffff, 0x0, 0x100000008001) 09:55:32 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) capset(&(0x7f0000000200)={0x19980330}, &(0x7f0000000080)) syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x0, 0x0) ioctl$SG_GET_SG_TABLESIZE(0xffffffffffffffff, 0x227f, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:55:32 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) capset(&(0x7f0000000200)={0x19980330}, &(0x7f0000000080)) syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, 0xffffffffffffffff, 0x0, 0x100000008001) 09:55:32 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) capset(&(0x7f0000000200)={0x19980330}, &(0x7f0000000080)) syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x0, 0x0) ioctl$SG_GET_SG_TABLESIZE(0xffffffffffffffff, 0x227f, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:55:32 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x78, 0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @dev}, 0x10) semget(0x0, 0x0, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000100), 0x4) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) recvmmsg(0xffffffffffffffff, 0x0, 0x103, 0x2000001000, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x31c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 09:55:32 executing program 5: syz_mount_image$jfs(&(0x7f00000001c0)='jfs\x00', &(0x7f0000000280)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)={[{@errors_remount='errors=remount-ro'}, {@noquota='noquota'}, {@integrity='integrity'}], [], 0x5000000}) 09:55:32 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) capset(&(0x7f0000000200)={0x19980330}, &(0x7f0000000080)) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r1, 0x0, 0x0) 09:55:32 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) capset(&(0x7f0000000200)={0x19980330}, &(0x7f0000000080)) syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x0, 0x0) ioctl$SG_GET_SG_TABLESIZE(0xffffffffffffffff, 0x227f, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:55:32 executing program 5: syz_mount_image$jfs(&(0x7f00000001c0)='jfs\x00', &(0x7f0000000280)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)={[{@errors_remount='errors=remount-ro'}, {@noquota='noquota'}, {@integrity='integrity'}], [], 0x6000000}) 09:55:32 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) capset(&(0x7f0000000200)={0x19980330}, &(0x7f0000000080)) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r1, 0x0, 0x0) 09:55:32 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) capset(&(0x7f0000000200)={0x19980330}, &(0x7f0000000080)) syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:55:32 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x78, 0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @dev}, 0x10) semget(0x0, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000100), 0x4) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) recvmmsg(0xffffffffffffffff, 0x0, 0x103, 0x2000001000, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x31c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 09:55:32 executing program 3: ioctl$TIOCSSERIAL(0xffffffffffffffff, 0x541f, 0x0) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x78, 0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @dev}, 0x10) semctl$GETNCNT(0x0, 0x0, 0xe, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000100), 0x4) ioctl$PIO_CMAP(r0, 0x4b71, 0x0) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) 09:55:33 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) capset(&(0x7f0000000200)={0x19980330}, &(0x7f0000000080)) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r1, 0x0, 0x0) 09:55:33 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x78, 0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @dev}, 0x10) semget(0x0, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000100), 0x4) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) recvmmsg(0xffffffffffffffff, 0x0, 0x103, 0x2000001000, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x31c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 09:55:33 executing program 5: syz_mount_image$jfs(&(0x7f00000001c0)='jfs\x00', &(0x7f0000000280)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)={[{@errors_remount='errors=remount-ro'}, {@noquota='noquota'}, {@integrity='integrity'}], [], 0x6040000}) 09:55:33 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x78, 0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @dev}, 0x10) semget(0x0, 0x0, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000100), 0x4) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) recvmmsg(0xffffffffffffffff, 0x0, 0x103, 0x2000001000, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x31c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 09:55:33 executing program 1: ioctl$TIOCSSERIAL(0xffffffffffffffff, 0x541f, 0x0) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x78, 0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @dev}, 0x10) semctl$GETNCNT(0x0, 0x0, 0xe, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000100), 0x4) ioctl$PIO_CMAP(r0, 0x4b71, 0x0) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) 09:55:33 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x78, 0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @dev}, 0x10) semget(0x0, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000100), 0x4) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) recvmmsg(0xffffffffffffffff, 0x0, 0x103, 0x2000001000, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x31c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 09:55:33 executing program 5: syz_mount_image$jfs(&(0x7f00000001c0)='jfs\x00', &(0x7f0000000280)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)={[{@errors_remount='errors=remount-ro'}, {@noquota='noquota'}, {@integrity='integrity'}], [], 0x7000000}) 09:55:33 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) capset(&(0x7f0000000200)={0x19980330}, &(0x7f0000000080)) syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:55:33 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x78, 0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @dev}, 0x10) semget(0x0, 0x0, 0x0) connect$inet(r0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000100), 0x4) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) recvmmsg(0xffffffffffffffff, 0x0, 0x103, 0x2000001000, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x31c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 09:55:33 executing program 3: ioctl$TIOCSSERIAL(0xffffffffffffffff, 0x541f, 0x0) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x78, 0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @dev}, 0x10) semctl$GETNCNT(0x0, 0x0, 0xe, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000100), 0x4) ioctl$PIO_CMAP(r0, 0x4b71, 0x0) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) 09:55:33 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x78, 0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @dev}, 0x10) semget(0x0, 0x0, 0x0) connect$inet(r0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000100), 0x4) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) recvmmsg(0xffffffffffffffff, 0x0, 0x103, 0x2000001000, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x31c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 09:55:33 executing program 5: syz_mount_image$jfs(&(0x7f00000001c0)='jfs\x00', &(0x7f0000000280)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)={[{@errors_remount='errors=remount-ro'}, {@noquota='noquota'}, {@integrity='integrity'}], [], 0x8000000}) 09:55:34 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x78, 0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @dev}, 0x10) semget(0x0, 0x0, 0x0) connect$inet(r0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000100), 0x4) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) recvmmsg(0xffffffffffffffff, 0x0, 0x103, 0x2000001000, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x31c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 09:55:34 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) capset(&(0x7f0000000200)={0x19980330}, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:55:34 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) capset(&(0x7f0000000200)={0x19980330}, &(0x7f0000000080)) syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:55:34 executing program 4: ioctl$TIOCSSERIAL(0xffffffffffffffff, 0x541f, 0x0) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x78, 0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @dev}, 0x10) semctl$GETNCNT(0x0, 0x0, 0xe, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000100), 0x4) ioctl$PIO_CMAP(r0, 0x4b71, 0x0) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) 09:55:34 executing program 5: syz_mount_image$jfs(&(0x7f00000001c0)='jfs\x00', &(0x7f0000000280)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)={[{@errors_remount='errors=remount-ro'}, {@noquota='noquota'}, {@integrity='integrity'}], [], 0x9000000}) 09:55:34 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x78, 0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @dev}, 0x10) semget(0x0, 0x0, 0x0) connect$inet(r0, &(0x7f0000000040), 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000100), 0x4) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) recvmmsg(0xffffffffffffffff, 0x0, 0x103, 0x2000001000, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x31c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 09:55:34 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) capset(&(0x7f0000000200)={0x19980330}, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:55:34 executing program 5: syz_mount_image$jfs(&(0x7f00000001c0)='jfs\x00', &(0x7f0000000280)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)={[{@errors_remount='errors=remount-ro'}, {@noquota='noquota'}, {@integrity='integrity'}], [], 0xa000000}) 09:55:34 executing program 3: ioctl$TIOCSSERIAL(0xffffffffffffffff, 0x541f, 0x0) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x78, 0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @dev}, 0x10) semctl$GETNCNT(0x0, 0x0, 0xe, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000100), 0x4) ioctl$PIO_CMAP(r0, 0x4b71, 0x0) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1) mknod$loop(0x0, 0x0, 0xffffffffffffffff) 09:55:34 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x78, 0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @dev}, 0x10) semget(0x0, 0x0, 0x0) connect$inet(r0, &(0x7f0000000040), 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000100), 0x4) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) recvmmsg(0xffffffffffffffff, 0x0, 0x103, 0x2000001000, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x31c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 09:55:34 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) capset(&(0x7f0000000200)={0x19980330}, &(0x7f0000000080)) syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:55:35 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x78, 0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @dev}, 0x10) semget(0x0, 0x0, 0x0) connect$inet(r0, &(0x7f0000000040), 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000100), 0x4) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) recvmmsg(0xffffffffffffffff, 0x0, 0x103, 0x2000001000, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x31c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 09:55:35 executing program 5: syz_mount_image$jfs(&(0x7f00000001c0)='jfs\x00', &(0x7f0000000280)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)={[{@errors_remount='errors=remount-ro'}, {@noquota='noquota'}, {@integrity='integrity'}], [], 0xb000000}) 09:55:35 executing program 1: readv(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, 0x0) 09:55:35 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) capset(&(0x7f0000000200)={0x19980330}, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:55:35 executing program 4: rt_sigprocmask(0x0, &(0x7f0000834000)={0x7fffffff}, 0x0, 0x8) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$cont(0x80000000001f, r0, 0x0, 0x7) 09:55:35 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x78, 0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @dev}, 0x10) semget(0x0, 0x0, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) recvmmsg(0xffffffffffffffff, 0x0, 0x103, 0x2000001000, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x31c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 09:55:35 executing program 1: r0 = socket(0x11, 0x803, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x89a2, &(0x7f00000002c0)={'bridge0\x00\x00\x01\x00', 0x7}) 09:55:35 executing program 5: syz_mount_image$jfs(&(0x7f00000001c0)='jfs\x00', &(0x7f0000000280)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)={[{@errors_remount='errors=remount-ro'}, {@noquota='noquota'}, {@integrity='integrity'}], [], 0xc000000}) 09:55:35 executing program 4: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x7) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000000040), 0xffb0, 0x0, 0x0, 0xffa8) [ 554.187813][ T526] dccp_xmit_packet: Payload too large (65456) for featneg. 09:55:35 executing program 1: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 09:55:35 executing program 3: ioctl$TIOCSSERIAL(0xffffffffffffffff, 0x541f, 0x0) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x78, 0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @dev}, 0x10) semctl$GETNCNT(0x0, 0x0, 0xe, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000100), 0x4) ioctl$PIO_CMAP(r0, 0x4b71, 0x0) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1) mknod$loop(0x0, 0x0, 0xffffffffffffffff) 09:55:35 executing program 5: syz_mount_image$jfs(&(0x7f00000001c0)='jfs\x00', &(0x7f0000000280)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)={[{@errors_remount='errors=remount-ro'}, {@noquota='noquota'}, {@integrity='integrity'}], [], 0xd000000}) 09:55:35 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:55:35 executing program 4: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x7) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000000040), 0xffb0, 0x0, 0x0, 0xffa8) 09:55:36 executing program 1: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x7) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000000040), 0xffb0, 0x0, 0x0, 0xffa8) [ 554.527690][ T547] dccp_xmit_packet: Payload too large (65456) for featneg. 09:55:36 executing program 5: syz_mount_image$jfs(&(0x7f00000001c0)='jfs\x00', &(0x7f0000000280)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)={[{@errors_remount='errors=remount-ro'}, {@noquota='noquota'}, {@integrity='integrity'}], [], 0xe000000}) 09:55:36 executing program 4: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x7) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000000040), 0xffb0, 0x0, 0x0, 0xffa8) [ 554.646407][ T552] dccp_xmit_packet: Payload too large (65456) for featneg. 09:55:36 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x78, 0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @dev}, 0x10) semget(0x0, 0x0, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) recvmmsg(0xffffffffffffffff, 0x0, 0x103, 0x2000001000, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x31c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 09:55:36 executing program 1: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x7) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000000040), 0xffb0, 0x0, 0x0, 0xffa8) [ 554.825000][ T561] dccp_xmit_packet: Payload too large (65456) for featneg. [ 554.936634][ T567] dccp_xmit_packet: Payload too large (65456) for featneg. 09:55:36 executing program 5: syz_mount_image$jfs(&(0x7f00000001c0)='jfs\x00', &(0x7f0000000280)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)={[{@errors_remount='errors=remount-ro'}, {@noquota='noquota'}, {@integrity='integrity'}], [], 0xf000000}) 09:55:36 executing program 4: lstat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)) fstat(0xffffffffffffffff, 0x0) fstat(0xffffffffffffff9c, &(0x7f0000000440)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xbb6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x80000000000003, 0x8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'ip6_vti0\x00', 0x0}) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000380)=0xd95, 0x4) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) 09:55:36 executing program 1: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x7) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000000040), 0xffb0, 0x0, 0x0, 0xffa8) [ 555.159949][ T580] dccp_xmit_packet: Payload too large (65456) for featneg. 09:55:36 executing program 3: ioctl$TIOCSSERIAL(0xffffffffffffffff, 0x541f, 0x0) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x78, 0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @dev}, 0x10) semctl$GETNCNT(0x0, 0x0, 0xe, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000100), 0x4) ioctl$PIO_CMAP(r0, 0x4b71, 0x0) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1) mknod$loop(0x0, 0x0, 0xffffffffffffffff) 09:55:36 executing program 2: socket$inet6(0xa, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:55:36 executing program 1: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x7) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 09:55:36 executing program 5: syz_mount_image$jfs(&(0x7f00000001c0)='jfs\x00', &(0x7f0000000280)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)={[{@errors_remount='errors=remount-ro'}, {@noquota='noquota'}, {@integrity='integrity'}], [], 0x10000000}) 09:55:36 executing program 1: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x7) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 09:55:37 executing program 5: syz_mount_image$jfs(&(0x7f00000001c0)='jfs\x00', &(0x7f0000000280)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)={[{@errors_remount='errors=remount-ro'}, {@noquota='noquota'}, {@integrity='integrity'}], [], 0x11000000}) 09:55:37 executing program 2: syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:55:37 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x78, 0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @dev}, 0x10) semget(0x0, 0x0, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) recvmmsg(0xffffffffffffffff, 0x0, 0x103, 0x2000001000, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x31c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 09:55:37 executing program 1: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x7) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 09:55:37 executing program 1: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x7) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 09:55:37 executing program 4: lstat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)) fstat(0xffffffffffffffff, 0x0) fstat(0xffffffffffffff9c, &(0x7f0000000440)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xbb6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x80000000000003, 0x8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'ip6_vti0\x00', 0x0}) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000380)=0xd95, 0x4) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) 09:55:37 executing program 5: syz_mount_image$jfs(&(0x7f00000001c0)='jfs\x00', &(0x7f0000000280)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)={[{@errors_remount='errors=remount-ro'}, {@noquota='noquota'}, {@integrity='integrity'}], [], 0x12000000}) 09:55:37 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x78, 0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @dev}, 0x10) semget(0x0, 0x0, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) recvmmsg(0xffffffffffffffff, 0x0, 0x103, 0x2000001000, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x31c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 09:55:37 executing program 1: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 09:55:37 executing program 2: syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:55:37 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mq_notify(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x2}) 09:55:37 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x78, 0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @dev}, 0x10) semget(0x0, 0x0, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) recvmmsg(0xffffffffffffffff, 0x0, 0x103, 0x2000001000, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x31c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 09:55:37 executing program 1: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 09:55:37 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000640)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\xe3\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\x00\x87\xac\xad\x80\xa3P\x8c\xea\x17f%;\x9c\xc7\x00\xeb\xf4X#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80\x1d\x95WM\x9a\xc6\x95\x98\xed\xe9\xca\x9e\xe6\xcb\x8e\xef\xf659-\xef\xb5\xc9\xf2\"\x15\xb39T\x81\x19\xcc\xcd\xb5\r\x10G\x16(~\x15\xd1\xde\x9e\xb1s\xa0\x864hb\xaa\xa3\x18V\x17xE\xbd\xc2QD\xa5P\x0f\x8e\x1f\x888\xb6\xee\xc6N\xd2\x136\xeb\xa4\x1d\xaap\xc6\x9e\xdc\x007h\f\x96g\"_\xb1\x1b\xdb\x86\xc6\xc9\xb1\xcc\xa1\x9f\xd8h\xcc\x12\xf1k\xe8\x86:D\xd2\xd1\x02I\xfe\x96t\xe5C\x86)\xf0M\xc4\xa35\xcc\x9b\x9e\xbb5\x18[\x958D\\~3\xcaO\x97M\xaf\x930\xfd\x13\xa3\xde\xce0\x1d5I\xba\xc5;T\xdc\xaf\xc8\xa6\n\x92\x0e6>\x19*') openat$cgroup_ro(r0, &(0x7f0000000480)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\xfb\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed0x0}) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000380)=0xd95, 0x4) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) 09:55:38 executing program 5: syz_mount_image$jfs(&(0x7f00000001c0)='jfs\x00', &(0x7f0000000280)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)={[{@errors_remount='errors=remount-ro'}, {@noquota='noquota'}, {@integrity='integrity'}], [], 0x20000000}) 09:55:38 executing program 2: syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:55:38 executing program 1: r0 = socket$inet6(0xa, 0x40000080806, 0x0) listen(r0, 0x7) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 09:55:38 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x78, 0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @dev}, 0x10) semget(0x0, 0x0, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) write$binfmt_elf64(r0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x103, 0x2000001000, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x31c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 09:55:38 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000640)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\xe3\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\x00\x87\xac\xad\x80\xa3P\x8c\xea\x17f%;\x9c\xc7\x00\xeb\xf4X#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80\x1d\x95WM\x9a\xc6\x95\x98\xed\xe9\xca\x9e\xe6\xcb\x8e\xef\xf659-\xef\xb5\xc9\xf2\"\x15\xb39T\x81\x19\xcc\xcd\xb5\r\x10G\x16(~\x15\xd1\xde\x9e\xb1s\xa0\x864hb\xaa\xa3\x18V\x17xE\xbd\xc2QD\xa5P\x0f\x8e\x1f\x888\xb6\xee\xc6N\xd2\x136\xeb\xa4\x1d\xaap\xc6\x9e\xdc\x007h\f\x96g\"_\xb1\x1b\xdb\x86\xc6\xc9\xb1\xcc\xa1\x9f\xd8h\xcc\x12\xf1k\xe8\x86:D\xd2\xd1\x02I\xfe\x96t\xe5C\x86)\xf0M\xc4\xa35\xcc\x9b\x9e\xbb5\x18[\x958D\\~3\xcaO\x97M\xaf\x930\xfd\x13\xa3\xde\xce0\x1d5I\xba\xc5;T\xdc\xaf\xc8\xa6\n\x92\x0e6>\x19*') openat$cgroup_ro(r0, &(0x7f0000000480)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\xfb\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed0x0}) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000380)=0xd95, 0x4) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) 09:55:39 executing program 5: syz_mount_image$jfs(&(0x7f00000001c0)='jfs\x00', &(0x7f0000000280)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)={[{@errors_remount='errors=remount-ro'}, {@noquota='noquota'}, {@integrity='integrity'}], [], 0x25000000}) 09:55:39 executing program 1: bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(0xffffffffffffffff, 0x7) r0 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 09:55:39 executing program 3: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = socket$inet(0x2, 0x3, 0x1) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e24, @multicast1}, 0x10) bind$inet(r2, &(0x7f00000002c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0x40a85323, &(0x7f0000000140)={{0x1, 0x2}, 'port1\x00', 0x4, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, 0x6, 0x3}) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) 09:55:39 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x78, 0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @dev}, 0x10) semget(0x0, 0x0, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[], 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x103, 0x2000001000, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x31c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 09:55:39 executing program 2: socket$inet6(0xa, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:55:39 executing program 1: bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(0xffffffffffffffff, 0x7) r0 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 09:55:39 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x78, 0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @dev}, 0x10) semget(0x0, 0x0, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[], 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x103, 0x2000001000, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x31c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 09:55:39 executing program 5: syz_mount_image$jfs(&(0x7f00000001c0)='jfs\x00', &(0x7f0000000280)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)={[{@errors_remount='errors=remount-ro'}, {@noquota='noquota'}, {@integrity='integrity'}], [], 0x3e0f0000}) 09:55:39 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x78, 0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @dev}, 0x10) semget(0x0, 0x0, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) recvmmsg(0xffffffffffffffff, 0x0, 0x103, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x31c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 09:55:39 executing program 2: socket$inet6(0xa, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:55:39 executing program 1: bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(0xffffffffffffffff, 0x7) r0 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) [ 558.548876][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 558.554745][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 558.560611][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 558.566432][ C1] protocol 88fb is buggy, dev hsr_slave_1 09:55:40 executing program 4: lstat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)) fstat(0xffffffffffffffff, 0x0) fstat(0xffffffffffffff9c, &(0x7f0000000440)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xbb6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x80000000000003, 0x8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'ip6_vti0\x00', 0x0}) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) 09:55:40 executing program 5: syz_mount_image$jfs(&(0x7f00000001c0)='jfs\x00', &(0x7f0000000280)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)={[{@errors_remount='errors=remount-ro'}, {@noquota='noquota'}, {@integrity='integrity'}], [], 0x3f000000}) 09:55:40 executing program 1: r0 = socket$inet6(0xa, 0x0, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x7) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 09:55:40 executing program 3: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = socket$inet(0x2, 0x3, 0x1) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e24, @multicast1}, 0x10) bind$inet(r2, &(0x7f00000002c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0x40a85323, &(0x7f0000000140)={{0x1, 0x2}, 'port1\x00', 0x4, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, 0x6, 0x3}) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) 09:55:40 executing program 2: socket$inet6(0xa, 0x0, 0x0) syz_open_procfs(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:55:40 executing program 5: syz_mount_image$jfs(&(0x7f00000001c0)='jfs\x00', &(0x7f0000000280)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)={[{@errors_remount='errors=remount-ro'}, {@noquota='noquota'}, {@integrity='integrity'}], [], 0x40000000}) 09:55:40 executing program 1: r0 = socket$inet6(0xa, 0x0, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x7) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 09:55:40 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x78, 0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @dev}, 0x10) semget(0x0, 0x0, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) recvmmsg(0xffffffffffffffff, 0x0, 0x103, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x31c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 09:55:40 executing program 2: socket$inet6(0xa, 0x0, 0x0) syz_open_procfs(0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:55:41 executing program 5: syz_mount_image$jfs(&(0x7f00000001c0)='jfs\x00', &(0x7f0000000280)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)={[{@errors_remount='errors=remount-ro'}, {@noquota='noquota'}, {@integrity='integrity'}], [], 0x48000000}) 09:55:41 executing program 1: r0 = socket$inet6(0xa, 0x0, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x7) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) [ 559.588840][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 559.594696][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 559.600571][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 559.606351][ C0] protocol 88fb is buggy, dev hsr_slave_1 09:55:41 executing program 2: socket$inet6(0xa, 0x0, 0x0) syz_open_procfs(0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:55:41 executing program 4: lstat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)) fstat(0xffffffffffffffff, 0x0) fstat(0xffffffffffffff9c, &(0x7f0000000440)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xbb6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x80000000000003, 0x8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'ip6_vti0\x00', 0x0}) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) 09:55:41 executing program 5: syz_mount_image$jfs(&(0x7f00000001c0)='jfs\x00', &(0x7f0000000280)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)={[{@errors_remount='errors=remount-ro'}, {@noquota='noquota'}, {@integrity='integrity'}], [], 0x4c000000}) 09:55:41 executing program 1: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x7) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 09:55:41 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r1, 0xffffffff00000000, 0xd4, &(0x7f0000000000), 0x4) 09:55:41 executing program 2: socket$inet6(0xa, 0x0, 0x0) syz_open_procfs(0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:55:41 executing program 1: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x7) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 09:55:41 executing program 4: lstat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)) fstat(0xffffffffffffffff, 0x0) fstat(0xffffffffffffff9c, &(0x7f0000000440)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xbb6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x80000000000003, 0x8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'ip6_vti0\x00', 0x0}) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) 09:55:41 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x78, 0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @dev}, 0x10) semget(0x0, 0x0, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) recvmmsg(0xffffffffffffffff, 0x0, 0x103, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x31c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 09:55:41 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f00000000c0)=0x2, 0x4) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f0000000000)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) 09:55:41 executing program 5: syz_mount_image$jfs(&(0x7f00000001c0)='jfs\x00', &(0x7f0000000280)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)={[{@errors_remount='errors=remount-ro'}, {@noquota='noquota'}, {@integrity='integrity'}], [], 0x5c000000}) 09:55:41 executing program 1: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x7) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 09:55:41 executing program 2: socket$inet6(0xa, 0x0, 0x0) syz_open_procfs(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:55:41 executing program 4: lstat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)) fstat(0xffffffffffffffff, 0x0) fstat(0xffffffffffffff9c, &(0x7f0000000440)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xbb6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x80000000000003, 0x8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'ip6_vti0\x00'}) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000380)=0xd95, 0x4) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) 09:55:41 executing program 1: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, 0x0, 0x0) listen(r0, 0x7) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 09:55:42 executing program 4: lstat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)) fstat(0xffffffffffffffff, 0x0) fstat(0xffffffffffffff9c, &(0x7f0000000440)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xbb6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x80000000000003, 0x8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'ip6_vti0\x00'}) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000380)=0xd95, 0x4) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) 09:55:42 executing program 2: socket$inet6(0xa, 0x0, 0x0) syz_open_procfs(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:55:42 executing program 1: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, 0x0, 0x0) listen(r0, 0x7) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 09:55:42 executing program 5: syz_mount_image$jfs(&(0x7f00000001c0)='jfs\x00', &(0x7f0000000280)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)={[{@errors_remount='errors=remount-ro'}, {@noquota='noquota'}, {@integrity='integrity'}], [], 0x68000000}) 09:55:42 executing program 3: r0 = open(&(0x7f00003b6ff8)='./file0\x00', 0x10000000080040, 0x0) fcntl$setlease(r0, 0x400, 0x0) rename(&(0x7f0000fdbff8)='./file0\x00', &(0x7f0000000000)='./file1\x00') chown(&(0x7f0000000240)='./file1\x00', 0x0, 0x0) 09:55:42 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x78, 0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @dev}, 0x10) semget(0x0, 0x0, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) recvmmsg(0xffffffffffffffff, 0x0, 0x103, 0x2000001000, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 09:55:42 executing program 4: lstat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)) fstat(0xffffffffffffffff, 0x0) fstat(0xffffffffffffff9c, &(0x7f0000000440)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xbb6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x80000000000003, 0x8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'ip6_vti0\x00'}) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000380)=0xd95, 0x4) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) 09:55:42 executing program 1: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, 0x0, 0x0) listen(r0, 0x7) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 09:55:42 executing program 2: socket$inet6(0xa, 0x0, 0x0) syz_open_procfs(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:55:42 executing program 5: syz_mount_image$jfs(&(0x7f00000001c0)='jfs\x00', &(0x7f0000000280)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)={[{@errors_remount='errors=remount-ro'}, {@noquota='noquota'}, {@integrity='integrity'}], [], 0x6c000000}) 09:55:42 executing program 3: r0 = open(&(0x7f00003b6ff8)='./file0\x00', 0x10000000080040, 0x0) fcntl$setlease(r0, 0x400, 0x0) rename(&(0x7f0000fdbff8)='./file0\x00', &(0x7f0000000000)='./file1\x00') chown(&(0x7f0000000240)='./file1\x00', 0x0, 0x0) 09:55:42 executing program 1: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000), 0x1c) listen(r0, 0x7) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 09:55:42 executing program 4: lstat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)) fstat(0xffffffffffffffff, 0x0) fstat(0xffffffffffffff9c, &(0x7f0000000440)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xbb6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x80000000000003, 0x8) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000380)=0xd95, 0x4) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) 09:55:42 executing program 3: r0 = open(&(0x7f00003b6ff8)='./file0\x00', 0x10000000080040, 0x0) fcntl$setlease(r0, 0x400, 0x0) rename(&(0x7f0000fdbff8)='./file0\x00', &(0x7f0000000000)='./file1\x00') chown(&(0x7f0000000240)='./file1\x00', 0x0, 0x0) 09:55:42 executing program 2: socket$inet6(0xa, 0x0, 0x0) syz_open_procfs(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:55:43 executing program 5: syz_mount_image$jfs(&(0x7f00000001c0)='jfs\x00', &(0x7f0000000280)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)={[{@errors_remount='errors=remount-ro'}, {@noquota='noquota'}, {@integrity='integrity'}], [], 0x74000000}) 09:55:43 executing program 1: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000), 0x1c) listen(r0, 0x7) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 09:55:43 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x78, 0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @dev}, 0x10) semget(0x0, 0x0, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) recvmmsg(0xffffffffffffffff, 0x0, 0x103, 0x2000001000, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 09:55:43 executing program 4: lstat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)) fstat(0xffffffffffffffff, 0x0) fstat(0xffffffffffffff9c, &(0x7f0000000440)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xbb6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x80000000000003, 0x8) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000380)=0xd95, 0x4) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) 09:55:43 executing program 2: socket$inet6(0xa, 0x0, 0x0) syz_open_procfs(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:55:43 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0099020200130002000000000000000010000105000600200000000a00000000000000000500e50000070000001f0000000000000300000000000002000100f5000000000000420000000005000500000000000a00000000f48d000000000000000000001700"/128], 0x80}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x400000000000002, 0x0) 09:55:43 executing program 1: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000), 0x1c) listen(r0, 0x7) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 09:55:43 executing program 5: syz_mount_image$jfs(&(0x7f00000001c0)='jfs\x00', &(0x7f0000000280)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)={[{@errors_remount='errors=remount-ro'}, {@noquota='noquota'}, {@integrity='integrity'}], [], 0x7a000000}) 09:55:43 executing program 1: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(0xffffffffffffffff, 0x7) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 09:55:43 executing program 4: lstat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)) fstat(0xffffffffffffffff, 0x0) fstat(0xffffffffffffff9c, &(0x7f0000000440)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xbb6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x80000000000003, 0x8) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000380)=0xd95, 0x4) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) 09:55:43 executing program 2: socket$inet6(0xa, 0x0, 0x0) syz_open_procfs(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:55:43 executing program 3: r0 = socket$kcm(0x2b, 0x1, 0x0) close(0xffffffffffffffff) socket$kcm(0x2, 0x0, 0x84) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0}, 0x10) getpid() perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0xe6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x7e4, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x2761, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x4030582a, &(0x7f0000000000)) 09:55:43 executing program 5: syz_mount_image$jfs(&(0x7f00000001c0)='jfs\x00', &(0x7f0000000280)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)={[{@errors_remount='errors=remount-ro'}, {@noquota='noquota'}, {@integrity='integrity'}], [], 0x8cffffff}) 09:55:43 executing program 1: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(0xffffffffffffffff, 0x7) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) [ 562.543885][ T1043] jfs: Unrecognized mount option "ÿ" or missing value [ 562.639616][ T1043] jfs: Unrecognized mount option "ÿ" or missing value 09:55:44 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x78, 0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @dev}, 0x10) semget(0x0, 0x0, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) recvmmsg(0xffffffffffffffff, 0x0, 0x103, 0x2000001000, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 09:55:44 executing program 2: socket$inet6(0xa, 0x0, 0x0) syz_open_procfs(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:55:44 executing program 1: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(0xffffffffffffffff, 0x7) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 09:55:44 executing program 4: lstat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)) fstat(0xffffffffffffffff, 0x0) fstat(0xffffffffffffff9c, &(0x7f0000000440)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xbb6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'ip6_vti0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, r0, 0x1, 0x0, 0x6, @link_local}, 0x14) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000380)=0xd95, 0x4) sendmmsg(0xffffffffffffffff, &(0x7f0000000d00), 0x400004e, 0x0) 09:55:44 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r2 = socket$kcm(0x10, 0x3, 0x0) setsockopt$sock_attach_bpf(r2, 0x10e, 0x4, &(0x7f0000000000)=r0, 0x4) r3 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x40) openat$cgroup_ro(r3, &(0x7f0000000140)='cpuset.effective_cpus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r4 = getpid() perf_event_open(0x0, r4, 0x3, 0xffffffffffffffff, 0x1) r5 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) gettid() r6 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r6, &(0x7f0000000540)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @ipv4}, 0x80, 0x0}, 0x24000001) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000080)='cgroup.type\x00', 0x2, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f00000002c0)='threaded\x00', 0x9) write$cgroup_int(r5, 0x0, 0x0) write$cgroup_int(r5, 0x0, 0x0) 09:55:44 executing program 5: syz_mount_image$jfs(&(0x7f00000001c0)='jfs\x00', &(0x7f0000000280)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)={[{@errors_remount='errors=remount-ro'}, {@noquota='noquota'}, {@integrity='integrity'}], [], 0x97ffffff}) 09:55:44 executing program 4: lstat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)) fstat(0xffffffffffffffff, 0x0) fstat(0xffffffffffffff9c, &(0x7f0000000440)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xbb6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'ip6_vti0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, r0, 0x1, 0x0, 0x6, @link_local}, 0x14) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000380)=0xd95, 0x4) sendmmsg(0xffffffffffffffff, &(0x7f0000000d00), 0x400004e, 0x0) 09:55:44 executing program 1: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) [ 563.078210][ T1085] jfs: Unrecognized mount option "ÿ" or missing value [ 563.208160][ T1079] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 563.218425][ T1079] CPU: 1 PID: 1079 Comm: syz-executor.3 Not tainted 5.2.0+ #37 [ 563.225960][ T1079] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 563.236010][ T1079] Call Trace: [ 563.239315][ T1079] dump_stack+0x1d8/0x2f8 [ 563.243636][ T1079] dump_header+0xd8/0x970 [ 563.247953][ T1079] oom_kill_process+0xcd/0x320 [ 563.252714][ T1079] out_of_memory+0x5e1/0x8a0 [ 563.257299][ T1079] ? unregister_oom_notifier+0x20/0x20 [ 563.262795][ T1079] ? __kasan_check_read+0x11/0x20 [ 563.267846][ T1079] try_charge+0x134a/0x17b0 [ 563.272370][ T1079] ? __memcg_kmem_charge_memcg+0x180/0x180 [ 563.278697][ T1079] ? __lock_acquire+0x4750/0x4750 [ 563.283728][ T1079] ? rcu_lock_release+0x15/0x20 [ 563.288588][ T1079] ? get_mem_cgroup_from_mm+0x15e/0x170 [ 563.294132][ T1079] mem_cgroup_try_charge+0x216/0x560 [ 563.299434][ T1079] mem_cgroup_try_charge_delay+0x25/0xa0 [ 563.305125][ T1079] handle_mm_fault+0x31f3/0x6080 [ 563.310066][ T1079] ? finish_fault+0x230/0x230 [ 563.314749][ T1079] ? vmacache_find+0x566/0x5b0 [ 563.319527][ T1079] ? vmacache_update+0xb7/0x120 [ 563.324383][ T1079] do_user_addr_fault+0x589/0xaf0 [ 563.329428][ T1079] __do_page_fault+0xd3/0x1f0 [ 563.334107][ T1079] do_page_fault+0x99/0xb0 [ 563.338519][ T1079] page_fault+0x39/0x40 [ 563.342671][ T1079] RIP: 0033:0x41115f 09:55:44 executing program 5: syz_mount_image$jfs(&(0x7f00000001c0)='jfs\x00', &(0x7f0000000280)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)={[{@errors_remount='errors=remount-ro'}, {@noquota='noquota'}, {@integrity='integrity'}], [], 0xc0ed0000}) 09:55:44 executing program 4: lstat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)) fstat(0xffffffffffffffff, 0x0) fstat(0xffffffffffffff9c, &(0x7f0000000440)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xbb6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'ip6_vti0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, r0, 0x1, 0x0, 0x6, @link_local}, 0x14) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000380)=0xd95, 0x4) sendmmsg(0xffffffffffffffff, &(0x7f0000000d00), 0x400004e, 0x0) [ 563.346559][ T1079] Code: 0f 84 c8 02 00 00 48 83 bd 78 ff ff ff 00 0f 84 f9 04 00 00 48 8b 95 68 ff ff ff 44 89 95 38 ff ff ff 4c 8d ac 10 00 f7 ff ff <49> 89 85 90 06 00 00 49 8d 85 10 03 00 00 49 89 95 98 06 00 00 41 [ 563.366152][ T1079] RSP: 002b:00007ffced109340 EFLAGS: 00010206 [ 563.372205][ T1079] RAX: 00007ff8fe388000 RBX: 0000000000020000 RCX: 000000000045986a [ 563.380168][ T1079] RDX: 0000000000021000 RSI: 0000000000021000 RDI: 0000000000000000 [ 563.388131][ T1079] RBP: 00007ffced109420 R08: ffffffffffffffff R09: 0000000000000000 [ 563.396098][ T1079] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffced109510 [ 563.404070][ T1079] R13: 00007ff8fe3a8700 R14: 0000000000000001 R15: 000000000075bfd4 [ 563.412107][ T1079] memory: usage 6020kB, limit 0kB, failcnt 8 [ 563.418106][ T1079] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 563.424991][ T1079] Memory cgroup stats for /syz3: [ 563.425072][ T1079] anon 2187264 [ 563.425072][ T1079] file 0 [ 563.425072][ T1079] kernel_stack 65536 [ 563.425072][ T1079] slab 3563520 [ 563.425072][ T1079] sock 0 [ 563.425072][ T1079] shmem 0 [ 563.425072][ T1079] file_mapped 0 [ 563.425072][ T1079] file_dirty 135168 [ 563.425072][ T1079] file_writeback 0 [ 563.425072][ T1079] anon_thp 2097152 [ 563.425072][ T1079] inactive_anon 0 [ 563.425072][ T1079] active_anon 2113536 [ 563.425072][ T1079] inactive_file 0 [ 563.425072][ T1079] active_file 0 [ 563.425072][ T1079] unevictable 0 [ 563.425072][ T1079] slab_reclaimable 1486848 [ 563.425072][ T1079] slab_unreclaimable 2076672 [ 563.425072][ T1079] pgfault 77682 [ 563.425072][ T1079] pgmajfault 0 [ 563.425072][ T1079] workingset_refault 0 [ 563.425072][ T1079] workingset_activate 0 [ 563.425072][ T1079] workingset_nodereclaim 0 [ 563.425072][ T1079] pgrefill 0 [ 563.425072][ T1079] pgscan 0 [ 563.425072][ T1079] pgsteal 0 [ 563.425072][ T1079] pgactivate 0 [ 563.519412][ T1079] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=1079,uid=0 [ 563.534810][ T1079] Memory cgroup out of memory: Killed process 1079 (syz-executor.3) total-vm:72704kB, anon-rss:2152kB, file-rss:34816kB, shmem-rss:0kB [ 563.550828][ T1057] oom_reaper: reaped process 1079 (syz-executor.3), now anon-rss:0kB, file-rss:33856kB, shmem-rss:0kB 09:55:45 executing program 1: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 09:55:45 executing program 2: socket$inet6(0xa, 0x0, 0x0) syz_open_procfs(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 563.882586][ T7985] syz-executor.3 invoked oom-killer: gfp_mask=0x40cc0(GFP_KERNEL|__GFP_COMP), order=1, oom_score_adj=0 [ 563.893971][ T7985] CPU: 1 PID: 7985 Comm: syz-executor.3 Not tainted 5.2.0+ #37 [ 563.901520][ T7985] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 563.911578][ T7985] Call Trace: [ 563.914884][ T7985] dump_stack+0x1d8/0x2f8 [ 563.919211][ T7985] dump_header+0xd8/0x970 [ 563.923540][ T7985] oom_kill_process+0xcd/0x320 [ 563.928312][ T7985] out_of_memory+0x5e1/0x8a0 [ 563.932911][ T7985] ? unregister_oom_notifier+0x20/0x20 [ 563.938372][ T7985] ? __kasan_check_read+0x11/0x20 [ 563.943393][ T7985] try_charge+0x134a/0x17b0 [ 563.947930][ T7985] ? __memcg_kmem_charge_memcg+0x180/0x180 [ 563.953735][ T7985] ? rcu_read_lock_sched_held+0x127/0x1c0 [ 563.959468][ T7985] ? trace_mm_page_alloc+0x187/0x1d0 [ 563.964768][ T7985] __memcg_kmem_charge_memcg+0x78/0x180 [ 563.970413][ T7985] ? memcg_kmem_put_cache+0x50/0x50 [ 563.975608][ T7985] ? kmem_freepages+0x580/0x580 [ 563.980480][ T7985] kmem_getpages+0x411/0x970 [ 563.985052][ T7985] cache_grow_begin+0x7e/0x2c0 [ 563.989795][ T7985] ? __cpuset_node_allowed+0x198/0x530 [ 563.995234][ T7985] fallback_alloc+0x134/0x1c0 [ 563.999895][ T7985] ____cache_alloc_node+0x22a/0x250 [ 564.005076][ T7985] kmem_cache_alloc+0x157/0x2e0 [ 564.009903][ T7985] ? sk_prot_alloc+0x60/0x290 [ 564.014558][ T7985] sk_prot_alloc+0x60/0x290 [ 564.019055][ T7985] sk_alloc+0x38/0x960 [ 564.023105][ T7985] inet6_create+0x57f/0xea0 [ 564.027590][ T7985] __sock_create+0x5d5/0x910 [ 564.032163][ T7985] __sys_socket+0x115/0x350 [ 564.036645][ T7985] ? fpregs_assert_state_consistent+0xb7/0xe0 [ 564.042693][ T7985] ? sock_create_kern+0x50/0x50 [ 564.047561][ T7985] ? prepare_exit_to_usermode+0x1f7/0x580 [ 564.053261][ T7985] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 564.058693][ T7985] ? trace_irq_disable_rcuidle+0x23/0x1c0 [ 564.064388][ T7985] ? do_syscall_64+0x1d/0x140 [ 564.069062][ T7985] __x64_sys_socket+0x7a/0x90 [ 564.073749][ T7985] do_syscall_64+0xfe/0x140 [ 564.078233][ T7985] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 564.084115][ T7985] RIP: 0033:0x45c367 [ 564.088010][ T7985] Code: 00 00 00 49 89 ca b8 36 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 9a 8c fb ff c3 66 0f 1f 84 00 00 00 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 7d 8c fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 564.107635][ T7985] RSP: 002b:00007ffced108e48 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 564.116025][ T7985] RAX: ffffffffffffffda RBX: 0000000000710b00 RCX: 000000000045c367 [ 564.123983][ T7985] RDX: 0000000000000006 RSI: 0000000000000001 RDI: 000000000000000a [ 564.131936][ T7985] RBP: 0000000000000b4f R08: 00000000000002d8 R09: 0000000000004000 [ 564.139894][ T7985] R10: 0000000000714820 R11: 0000000000000246 R12: 0000000000000000 [ 564.147847][ T7985] R13: 00007ffced109610 R14: 0000000000000029 R15: 00007ffced109620 [ 564.156111][ T7985] memory: usage 3672kB, limit 0kB, failcnt 21 [ 564.162239][ T7985] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 564.169337][ T7985] Memory cgroup stats for /syz3: [ 564.169772][ T7985] anon 81920 [ 564.169772][ T7985] file 0 [ 564.169772][ T7985] kernel_stack 0 [ 564.169772][ T7985] slab 3563520 [ 564.169772][ T7985] sock 0 [ 564.169772][ T7985] shmem 0 [ 564.169772][ T7985] file_mapped 0 [ 564.169772][ T7985] file_dirty 135168 [ 564.169772][ T7985] file_writeback 0 [ 564.169772][ T7985] anon_thp 0 [ 564.169772][ T7985] inactive_anon 0 [ 564.169772][ T7985] active_anon 8192 [ 564.169772][ T7985] inactive_file 0 [ 564.169772][ T7985] active_file 0 [ 564.169772][ T7985] unevictable 0 [ 564.169772][ T7985] slab_reclaimable 1486848 [ 564.169772][ T7985] slab_unreclaimable 2076672 09:55:45 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x78, 0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @dev}, 0x10) semget(0x0, 0x0, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) recvmmsg(0xffffffffffffffff, 0x0, 0x103, 0x2000001000, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x31c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 09:55:45 executing program 1: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 09:55:45 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r2 = socket$kcm(0x10, 0x3, 0x0) setsockopt$sock_attach_bpf(r2, 0x10e, 0x4, &(0x7f0000000000)=r0, 0x4) r3 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x40) openat$cgroup_ro(r3, &(0x7f0000000140)='cpuset.effective_cpus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r4 = getpid() perf_event_open(0x0, r4, 0x3, 0xffffffffffffffff, 0x1) r5 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) gettid() r6 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r6, &(0x7f0000000540)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @ipv4}, 0x80, 0x0}, 0x24000001) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000080)='cgroup.type\x00', 0x2, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f00000002c0)='threaded\x00', 0x9) write$cgroup_int(r5, 0x0, 0x0) write$cgroup_int(r5, 0x0, 0x0) 09:55:45 executing program 4: lstat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)) fstat(0xffffffffffffffff, 0x0) fstat(0xffffffffffffff9c, &(0x7f0000000440)) r0 = socket(0x200000000000011, 0x80000000000003, 0x8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'ip6_vti0\x00', 0x0}) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000380)=0xd95, 0x4) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) 09:55:45 executing program 5: syz_mount_image$jfs(&(0x7f00000001c0)='jfs\x00', &(0x7f0000000280)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)={[{@errors_remount='errors=remount-ro'}, {@noquota='noquota'}, {@integrity='integrity'}], [], 0xebffffff}) [ 564.169772][ T7985] pgfault 77715 [ 564.169772][ T7985] pgmajfault 0 [ 564.169772][ T7985] workingset_refault 0 [ 564.169772][ T7985] workingset_activate 0 [ 564.169772][ T7985] workingset_nodereclaim 0 [ 564.169772][ T7985] pgrefill 0 [ 564.169772][ T7985] pgscan 0 [ 564.169772][ T7985] pgsteal 0 [ 564.169772][ T7985] pgactivate 0 [ 564.264675][ T7985] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=7985,uid=0 [ 564.280804][ T7985] Memory cgroup out of memory: Killed process 7985 (syz-executor.3) total-vm:72440kB, anon-rss:104kB, file-rss:35776kB, shmem-rss:0kB [ 564.295735][ T1057] oom_reaper: reaped process 7985 (syz-executor.3), now anon-rss:0kB, file-rss:34880kB, shmem-rss:0kB 09:55:45 executing program 1: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x7) r1 = socket$inet6(0xa, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 09:55:45 executing program 2: socket$inet6(0xa, 0x0, 0x0) syz_open_procfs(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 564.417368][ T1133] jfs: Unrecognized mount option "ÿ" or missing value 09:55:46 executing program 1: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x7) r1 = socket$inet6(0xa, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) [ 564.550289][ T1133] jfs: Unrecognized mount option "ÿ" or missing value 09:55:46 executing program 5: syz_mount_image$jfs(&(0x7f00000001c0)='jfs\x00', &(0x7f0000000280)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)={[{@errors_remount='errors=remount-ro'}, {@noquota='noquota'}, {@integrity='integrity'}], [], 0xf4ffffff}) [ 564.777902][ T1163] jfs: Unrecognized mount option "ÿ" or missing value 09:55:46 executing program 4: lstat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)) fstat(0xffffffffffffffff, 0x0) fstat(0xffffffffffffff9c, &(0x7f0000000440)) r0 = socket(0x200000000000011, 0x80000000000003, 0x8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'ip6_vti0\x00', 0x0}) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000380)=0xd95, 0x4) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) 09:55:46 executing program 1: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x7) r1 = socket$inet6(0xa, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) [ 564.885160][ T1163] jfs: Unrecognized mount option "ÿ" or missing value 09:55:46 executing program 2: socket$inet6(0xa, 0x0, 0x0) syz_open_procfs(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:55:46 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x78, 0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @dev}, 0x10) semget(0x0, 0x0, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) recvmmsg(0xffffffffffffffff, 0x0, 0x103, 0x2000001000, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x31c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 09:55:46 executing program 5: syz_mount_image$jfs(&(0x7f00000001c0)='jfs\x00', &(0x7f0000000280)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)={[{@errors_remount='errors=remount-ro'}, {@noquota='noquota'}, {@integrity='integrity'}], [], 0xf6ffffff}) 09:55:46 executing program 1: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x7) socket$inet6(0xa, 0x6, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 09:55:46 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r2 = socket$kcm(0x10, 0x3, 0x0) setsockopt$sock_attach_bpf(r2, 0x10e, 0x4, &(0x7f0000000000)=r0, 0x4) r3 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x40) openat$cgroup_ro(r3, &(0x7f0000000140)='cpuset.effective_cpus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r4 = getpid() perf_event_open(0x0, r4, 0x3, 0xffffffffffffffff, 0x1) r5 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) gettid() r6 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r6, &(0x7f0000000540)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @ipv4}, 0x80, 0x0}, 0x24000001) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000080)='cgroup.type\x00', 0x2, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f00000002c0)='threaded\x00', 0x9) write$cgroup_int(r5, 0x0, 0x0) write$cgroup_int(r5, 0x0, 0x0) 09:55:46 executing program 4: lstat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)) fstat(0xffffffffffffffff, 0x0) fstat(0xffffffffffffff9c, &(0x7f0000000440)) r0 = socket(0x200000000000011, 0x80000000000003, 0x8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'ip6_vti0\x00', 0x0}) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000380)=0xd95, 0x4) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) 09:55:46 executing program 2: socket$inet6(0xa, 0x0, 0x0) syz_open_procfs(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 565.265636][ T1194] jfs: Unrecognized mount option "ÿ" or missing value [ 565.361406][ T1194] jfs: Unrecognized mount option "ÿ" or missing value 09:55:46 executing program 1: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x7) socket$inet6(0xa, 0x6, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 09:55:46 executing program 5: syz_mount_image$jfs(&(0x7f00000001c0)='jfs\x00', &(0x7f0000000280)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)={[{@errors_remount='errors=remount-ro'}, {@noquota='noquota'}, {@integrity='integrity'}], [], 0xf9fdffff}) 09:55:47 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r2 = socket$kcm(0x10, 0x3, 0x0) setsockopt$sock_attach_bpf(r2, 0x10e, 0x4, &(0x7f0000000000)=r0, 0x4) r3 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x40) openat$cgroup_ro(r3, &(0x7f0000000140)='cpuset.effective_cpus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r4 = getpid() perf_event_open(0x0, r4, 0x3, 0xffffffffffffffff, 0x1) r5 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) gettid() r6 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r6, &(0x7f0000000540)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @ipv4}, 0x80, 0x0}, 0x24000001) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000080)='cgroup.type\x00', 0x2, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f00000002c0)='threaded\x00', 0x9) write$cgroup_int(r5, 0x0, 0x0) write$cgroup_int(r5, 0x0, 0x0) 09:55:47 executing program 2: socket$inet6(0xa, 0x0, 0x0) syz_open_procfs(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:55:47 executing program 1: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x7) socket$inet6(0xa, 0x6, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) [ 565.574643][ T1220] jfs: Unrecognized mount option "ÿ" or missing value 09:55:47 executing program 1: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x7) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, 0x0, 0x0) [ 565.724207][ T1220] jfs: Unrecognized mount option "ÿ" or missing value 09:55:47 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x78, 0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @dev}, 0x10) semget(0x0, 0x0, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) recvmmsg(0xffffffffffffffff, 0x0, 0x103, 0x2000001000, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x31c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 09:55:47 executing program 5: syz_mount_image$jfs(&(0x7f00000001c0)='jfs\x00', &(0x7f0000000280)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)={[{@errors_remount='errors=remount-ro'}, {@noquota='noquota'}, {@integrity='integrity'}], [], 0xfbffffff}) 09:55:47 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r2 = socket$kcm(0x10, 0x3, 0x0) setsockopt$sock_attach_bpf(r2, 0x10e, 0x4, &(0x7f0000000000)=r0, 0x4) r3 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x40) openat$cgroup_ro(r3, &(0x7f0000000140)='cpuset.effective_cpus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r4 = getpid() perf_event_open(0x0, r4, 0x3, 0xffffffffffffffff, 0x1) r5 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) gettid() r6 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r6, &(0x7f0000000540)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @ipv4}, 0x80, 0x0}, 0x24000001) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000080)='cgroup.type\x00', 0x2, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f00000002c0)='threaded\x00', 0x9) write$cgroup_int(r5, 0x0, 0x0) write$cgroup_int(r5, 0x0, 0x0) 09:55:47 executing program 1: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x7) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, 0x0, 0x0) 09:55:47 executing program 4: lstat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)) fstat(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xbb6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x80000000000003, 0x8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'ip6_vti0\x00', 0x0}) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000380)=0xd95, 0x4) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) [ 566.149038][ T1246] jfs: Unrecognized mount option "ÿ" or missing value 09:55:47 executing program 1: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x7) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, 0x0, 0x0) [ 566.288362][ T1245] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 566.298619][ T1245] CPU: 0 PID: 1245 Comm: syz-executor.2 Not tainted 5.2.0+ #37 [ 566.306149][ T1245] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 566.316203][ T1245] Call Trace: [ 566.319496][ T1245] dump_stack+0x1d8/0x2f8 [ 566.323844][ T1245] dump_header+0xd8/0x970 [ 566.328182][ T1245] oom_kill_process+0xcd/0x320 [ 566.332947][ T1245] out_of_memory+0x5e1/0x8a0 [ 566.337754][ T1245] ? unregister_oom_notifier+0x20/0x20 [ 566.343210][ T1245] ? __kasan_check_read+0x11/0x20 [ 566.348244][ T1245] try_charge+0x134a/0x17b0 [ 566.352767][ T1245] ? __memcg_kmem_charge_memcg+0x180/0x180 [ 566.358572][ T1245] ? __lock_acquire+0x4750/0x4750 [ 566.363592][ T1245] ? rcu_lock_release+0x15/0x20 [ 566.368430][ T1245] ? get_mem_cgroup_from_mm+0x15e/0x170 [ 566.373981][ T1245] mem_cgroup_try_charge+0x216/0x560 [ 566.379256][ T1245] mem_cgroup_try_charge_delay+0x25/0xa0 [ 566.384878][ T1245] handle_mm_fault+0x31f3/0x6080 [ 566.389855][ T1245] ? finish_fault+0x230/0x230 [ 566.394537][ T1245] ? vmacache_find+0x566/0x5b0 [ 566.399287][ T1245] ? vmacache_update+0xb7/0x120 [ 566.404140][ T1245] do_user_addr_fault+0x589/0xaf0 [ 566.409196][ T1245] __do_page_fault+0xd3/0x1f0 [ 566.413900][ T1245] do_page_fault+0x99/0xb0 [ 566.418318][ T1245] page_fault+0x39/0x40 [ 566.422467][ T1245] RIP: 0033:0x41115f [ 566.426357][ T1245] Code: 0f 84 c8 02 00 00 48 83 bd 78 ff ff ff 00 0f 84 f9 04 00 00 48 8b 95 68 ff ff ff 44 89 95 38 ff ff ff 4c 8d ac 10 00 f7 ff ff <49> 89 85 90 06 00 00 49 8d 85 10 03 00 00 49 89 95 98 06 00 00 41 [ 566.445959][ T1245] RSP: 002b:00007ffd762952c0 EFLAGS: 00010206 [ 566.452013][ T1245] RAX: 00007f0e0176d000 RBX: 0000000000020000 RCX: 000000000045986a [ 566.459978][ T1245] RDX: 0000000000021000 RSI: 0000000000021000 RDI: 0000000000000000 [ 566.467963][ T1245] RBP: 00007ffd762953a0 R08: ffffffffffffffff R09: 0000000000000000 [ 566.467995][ T1245] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd76295490 [ 566.468005][ T1245] R13: 00007f0e0178d700 R14: 0000000000000001 R15: 000000000075bfd4 [ 566.484120][ T1245] memory: usage 96152kB, limit 0kB, failcnt 8 [ 566.498076][ T1245] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 566.505073][ T1245] Memory cgroup stats for /syz2: [ 566.505156][ T1245] anon 86433792 [ 566.505156][ T1245] file 12288 [ 566.505156][ T1245] kernel_stack 1376256 [ 566.505156][ T1245] slab 4304896 [ 566.505156][ T1245] sock 0 [ 566.505156][ T1245] shmem 86016 [ 566.505156][ T1245] file_mapped 135168 [ 566.505156][ T1245] file_dirty 135168 [ 566.505156][ T1245] file_writeback 0 [ 566.505156][ T1245] anon_thp 81788928 [ 566.505156][ T1245] inactive_anon 0 [ 566.505156][ T1245] active_anon 86433792 [ 566.505156][ T1245] inactive_file 135168 [ 566.505156][ T1245] active_file 135168 [ 566.505156][ T1245] unevictable 0 [ 566.505156][ T1245] slab_reclaimable 1216512 [ 566.505156][ T1245] slab_unreclaimable 3088384 [ 566.505156][ T1245] pgfault 61281 [ 566.505156][ T1245] pgmajfault 0 [ 566.505156][ T1245] workingset_refault 0 [ 566.505156][ T1245] workingset_activate 0 [ 566.505156][ T1245] workingset_nodereclaim 0 [ 566.505156][ T1245] pgrefill 0 [ 566.505156][ T1245] pgscan 0 [ 566.505156][ T1245] pgsteal 0 [ 566.598812][ T1245] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=1233,uid=0 [ 566.614232][ T1245] Memory cgroup out of memory: Killed process 1233 (syz-executor.2) total-vm:72704kB, anon-rss:2204kB, file-rss:34816kB, shmem-rss:0kB 09:55:48 executing program 1: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x7) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) [ 566.636154][ T1057] oom_reaper: reaped process 1233 (syz-executor.2), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB 09:55:48 executing program 1: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x7) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) [ 566.787766][ T1245] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 566.798105][ T1245] CPU: 1 PID: 1245 Comm: syz-executor.2 Not tainted 5.2.0+ #37 [ 566.805642][ T1245] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 566.815689][ T1245] Call Trace: [ 566.818972][ T1245] dump_stack+0x1d8/0x2f8 [ 566.823309][ T1245] dump_header+0xd8/0x970 [ 566.827661][ T1245] oom_kill_process+0xcd/0x320 [ 566.832423][ T1245] out_of_memory+0x5e1/0x8a0 [ 566.837017][ T1245] ? unregister_oom_notifier+0x20/0x20 [ 566.842478][ T1245] ? __kasan_check_read+0x11/0x20 [ 566.847501][ T1245] try_charge+0x134a/0x17b0 [ 566.852031][ T1245] ? __memcg_kmem_charge_memcg+0x180/0x180 [ 566.857835][ T1245] ? __lock_acquire+0x4750/0x4750 [ 566.862853][ T1245] ? rcu_lock_release+0x15/0x20 [ 566.867707][ T1245] ? get_mem_cgroup_from_mm+0x15e/0x170 [ 566.873248][ T1245] mem_cgroup_try_charge+0x216/0x560 [ 566.878540][ T1245] mem_cgroup_try_charge_delay+0x25/0xa0 [ 566.884165][ T1245] handle_mm_fault+0x31f3/0x6080 [ 566.889103][ T1245] ? finish_fault+0x230/0x230 [ 566.893800][ T1245] ? vmacache_find+0x566/0x5b0 [ 566.898547][ T1245] ? vmacache_update+0xb7/0x120 [ 566.903388][ T1245] do_user_addr_fault+0x589/0xaf0 [ 566.908409][ T1245] __do_page_fault+0xd3/0x1f0 [ 566.913118][ T1245] do_page_fault+0x99/0xb0 [ 566.917549][ T1245] page_fault+0x39/0x40 [ 566.921697][ T1245] RIP: 0033:0x41115f [ 566.925590][ T1245] Code: 0f 84 c8 02 00 00 48 83 bd 78 ff ff ff 00 0f 84 f9 04 00 00 48 8b 95 68 ff ff ff 44 89 95 38 ff ff ff 4c 8d ac 10 00 f7 ff ff <49> 89 85 90 06 00 00 49 8d 85 10 03 00 00 49 89 95 98 06 00 00 41 [ 566.945180][ T1245] RSP: 002b:00007ffd762952c0 EFLAGS: 00010206 [ 566.951236][ T1245] RAX: 00007f0e0176d000 RBX: 0000000000020000 RCX: 000000000045986a [ 566.959194][ T1245] RDX: 0000000000021000 RSI: 0000000000021000 RDI: 0000000000000000 [ 566.967167][ T1245] RBP: 00007ffd762953a0 R08: ffffffffffffffff R09: 0000000000000000 [ 566.975144][ T1245] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd76295490 [ 566.983107][ T1245] R13: 00007f0e0178d700 R14: 0000000000000001 R15: 000000000075bfd4 [ 566.991615][ T1245] memory: usage 93824kB, limit 0kB, failcnt 14 [ 566.997789][ T1245] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 567.004707][ T1245] Memory cgroup stats for /syz2: [ 567.004787][ T1245] anon 84312064 [ 567.004787][ T1245] file 12288 [ 567.004787][ T1245] kernel_stack 1376256 [ 567.004787][ T1245] slab 4304896 [ 567.004787][ T1245] sock 0 [ 567.004787][ T1245] shmem 86016 [ 567.004787][ T1245] file_mapped 135168 [ 567.004787][ T1245] file_dirty 135168 [ 567.004787][ T1245] file_writeback 0 [ 567.004787][ T1245] anon_thp 79691776 [ 567.004787][ T1245] inactive_anon 0 [ 567.004787][ T1245] active_anon 84312064 [ 567.004787][ T1245] inactive_file 135168 [ 567.004787][ T1245] active_file 135168 [ 567.004787][ T1245] unevictable 0 [ 567.004787][ T1245] slab_reclaimable 1216512 [ 567.004787][ T1245] slab_unreclaimable 3088384 [ 567.004787][ T1245] pgfault 61281 [ 567.004787][ T1245] pgmajfault 0 [ 567.004787][ T1245] workingset_refault 0 [ 567.004787][ T1245] workingset_activate 0 [ 567.004787][ T1245] workingset_nodereclaim 0 [ 567.004787][ T1245] pgrefill 0 [ 567.004787][ T1245] pgscan 0 [ 567.004787][ T1245] pgsteal 0 [ 567.098408][ T1245] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=1212,uid=0 [ 567.113801][ T1245] Memory cgroup out of memory: Killed process 1212 (syz-executor.2) total-vm:72704kB, anon-rss:2204kB, file-rss:34816kB, shmem-rss:0kB [ 567.128553][ T1057] oom_reaper: reaped process 1212 (syz-executor.2), now anon-rss:0kB, file-rss:34688kB, shmem-rss:0kB [ 567.192440][ T1245] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 567.202748][ T1245] CPU: 1 PID: 1245 Comm: syz-executor.2 Not tainted 5.2.0+ #37 [ 567.210290][ T1245] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 567.220336][ T1245] Call Trace: [ 567.223618][ T1245] dump_stack+0x1d8/0x2f8 [ 567.227961][ T1245] dump_header+0xd8/0x970 [ 567.232301][ T1245] oom_kill_process+0xcd/0x320 [ 567.235864][ T1246] jfs: Unrecognized mount option "ÿ" or missing value [ 567.237069][ T1245] out_of_memory+0x5e1/0x8a0 [ 567.248381][ T1245] ? unregister_oom_notifier+0x20/0x20 [ 567.253833][ T1245] ? __kasan_check_read+0x11/0x20 [ 567.258864][ T1245] try_charge+0x134a/0x17b0 [ 567.263387][ T1245] ? __memcg_kmem_charge_memcg+0x180/0x180 [ 567.269211][ T1245] ? __lock_acquire+0x4750/0x4750 [ 567.274227][ T1245] ? rcu_lock_release+0x15/0x20 [ 567.279049][ T1245] ? get_mem_cgroup_from_mm+0x15e/0x170 [ 567.284566][ T1245] mem_cgroup_try_charge+0x216/0x560 [ 567.289829][ T1245] mem_cgroup_try_charge_delay+0x25/0xa0 [ 567.295439][ T1245] handle_mm_fault+0x31f3/0x6080 [ 567.300359][ T1245] ? finish_fault+0x230/0x230 [ 567.305010][ T1245] ? vmacache_find+0x566/0x5b0 [ 567.309758][ T1245] ? vmacache_update+0xb7/0x120 [ 567.314588][ T1245] do_user_addr_fault+0x589/0xaf0 [ 567.319600][ T1245] __do_page_fault+0xd3/0x1f0 [ 567.324247][ T1245] do_page_fault+0x99/0xb0 [ 567.328647][ T1245] page_fault+0x39/0x40 [ 567.332785][ T1245] RIP: 0033:0x41115f [ 567.336648][ T1245] Code: 0f 84 c8 02 00 00 48 83 bd 78 ff ff ff 00 0f 84 f9 04 00 00 48 8b 95 68 ff ff ff 44 89 95 38 ff ff ff 4c 8d ac 10 00 f7 ff ff <49> 89 85 90 06 00 00 49 8d 85 10 03 00 00 49 89 95 98 06 00 00 41 [ 567.356219][ T1245] RSP: 002b:00007ffd762952c0 EFLAGS: 00010206 [ 567.362259][ T1245] RAX: 00007f0e0176d000 RBX: 0000000000020000 RCX: 000000000045986a [ 567.370200][ T1245] RDX: 0000000000021000 RSI: 0000000000021000 RDI: 0000000000000000 [ 567.378150][ T1245] RBP: 00007ffd762953a0 R08: ffffffffffffffff R09: 0000000000000000 [ 567.386102][ T1245] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd76295490 [ 567.394042][ T1245] R13: 00007f0e0178d700 R14: 0000000000000001 R15: 000000000075bfd4 [ 567.402575][ T1245] memory: usage 91492kB, limit 0kB, failcnt 20 [ 567.408720][ T1245] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 567.416128][ T1245] Memory cgroup stats for /syz2: [ 567.416198][ T1245] anon 82096128 [ 567.416198][ T1245] file 12288 [ 567.416198][ T1245] kernel_stack 1376256 [ 567.416198][ T1245] slab 4304896 [ 567.416198][ T1245] sock 0 [ 567.416198][ T1245] shmem 86016 [ 567.416198][ T1245] file_mapped 135168 [ 567.416198][ T1245] file_dirty 135168 [ 567.416198][ T1245] file_writeback 0 [ 567.416198][ T1245] anon_thp 77594624 [ 567.416198][ T1245] inactive_anon 0 [ 567.416198][ T1245] active_anon 82096128 [ 567.416198][ T1245] inactive_file 135168 [ 567.416198][ T1245] active_file 135168 [ 567.416198][ T1245] unevictable 0 [ 567.416198][ T1245] slab_reclaimable 1216512 [ 567.416198][ T1245] slab_unreclaimable 3088384 [ 567.416198][ T1245] pgfault 61281 [ 567.416198][ T1245] pgmajfault 0 [ 567.416198][ T1245] workingset_refault 0 [ 567.416198][ T1245] workingset_activate 0 [ 567.416198][ T1245] workingset_nodereclaim 0 [ 567.416198][ T1245] pgrefill 0 [ 567.416198][ T1245] pgscan 0 [ 567.416198][ T1245] pgsteal 0 [ 567.509685][ T1245] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=1160,uid=0 [ 567.525075][ T1245] Memory cgroup out of memory: Killed process 1160 (syz-executor.2) total-vm:72704kB, anon-rss:2204kB, file-rss:34816kB, shmem-rss:0kB [ 567.539705][ T1057] oom_reaper: reaped process 1160 (syz-executor.2), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 567.541214][ T1245] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 567.561027][ T1245] CPU: 1 PID: 1245 Comm: syz-executor.2 Not tainted 5.2.0+ #37 [ 567.568567][ T1245] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 567.578601][ T1245] Call Trace: [ 567.581882][ T1245] dump_stack+0x1d8/0x2f8 [ 567.586214][ T1245] dump_header+0xd8/0x970 [ 567.590548][ T1245] oom_kill_process+0xcd/0x320 [ 567.595308][ T1245] out_of_memory+0x5e1/0x8a0 [ 567.599895][ T1245] ? unregister_oom_notifier+0x20/0x20 [ 567.605354][ T1245] ? __kasan_check_read+0x11/0x20 [ 567.610375][ T1245] try_charge+0x134a/0x17b0 [ 567.614885][ T1245] ? __memcg_kmem_charge_memcg+0x180/0x180 [ 567.620696][ T1245] ? __lock_acquire+0x4750/0x4750 [ 567.625723][ T1245] ? rcu_lock_release+0x15/0x20 [ 567.630566][ T1245] ? get_mem_cgroup_from_mm+0x15e/0x170 [ 567.636132][ T1245] mem_cgroup_try_charge+0x216/0x560 [ 567.641427][ T1245] mem_cgroup_try_charge_delay+0x25/0xa0 [ 567.647059][ T1245] handle_mm_fault+0x31f3/0x6080 [ 567.651998][ T1245] ? finish_fault+0x230/0x230 [ 567.656686][ T1245] ? vmacache_find+0x566/0x5b0 [ 567.661436][ T1245] ? vmacache_update+0xb7/0x120 [ 567.666296][ T1245] do_user_addr_fault+0x589/0xaf0 [ 567.671317][ T1245] __do_page_fault+0xd3/0x1f0 [ 567.675984][ T1245] do_page_fault+0x99/0xb0 [ 567.680388][ T1245] page_fault+0x39/0x40 [ 567.684534][ T1245] RIP: 0033:0x41115f [ 567.688415][ T1245] Code: 0f 84 c8 02 00 00 48 83 bd 78 ff ff ff 00 0f 84 f9 04 00 00 48 8b 95 68 ff ff ff 44 89 95 38 ff ff ff 4c 8d ac 10 00 f7 ff ff <49> 89 85 90 06 00 00 49 8d 85 10 03 00 00 49 89 95 98 06 00 00 41 [ 567.708036][ T1245] RSP: 002b:00007ffd762952c0 EFLAGS: 00010206 [ 567.714086][ T1245] RAX: 00007f0e0176d000 RBX: 0000000000020000 RCX: 000000000045986a [ 567.722042][ T1245] RDX: 0000000000021000 RSI: 0000000000021000 RDI: 0000000000000000 [ 567.729998][ T1245] RBP: 00007ffd762953a0 R08: ffffffffffffffff R09: 0000000000000000 [ 567.737954][ T1245] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd76295490 [ 567.745907][ T1245] R13: 00007f0e0178d700 R14: 0000000000000001 R15: 000000000075bfd4 [ 567.753931][ T1245] memory: usage 89160kB, limit 0kB, failcnt 26 [ 567.760110][ T1245] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 567.766937][ T1245] Memory cgroup stats for /syz2: [ 567.767014][ T1245] anon 79880192 [ 567.767014][ T1245] file 12288 [ 567.767014][ T1245] kernel_stack 1376256 [ 567.767014][ T1245] slab 4304896 [ 567.767014][ T1245] sock 0 [ 567.767014][ T1245] shmem 86016 [ 567.767014][ T1245] file_mapped 135168 [ 567.767014][ T1245] file_dirty 135168 [ 567.767014][ T1245] file_writeback 0 [ 567.767014][ T1245] anon_thp 75497472 [ 567.767014][ T1245] inactive_anon 0 [ 567.767014][ T1245] active_anon 79880192 [ 567.767014][ T1245] inactive_file 135168 [ 567.767014][ T1245] active_file 135168 [ 567.767014][ T1245] unevictable 0 [ 567.767014][ T1245] slab_reclaimable 1216512 [ 567.767014][ T1245] slab_unreclaimable 3088384 [ 567.767014][ T1245] pgfault 61281 [ 567.767014][ T1245] pgmajfault 0 [ 567.767014][ T1245] workingset_refault 0 [ 567.767014][ T1245] workingset_activate 0 [ 567.767014][ T1245] workingset_nodereclaim 0 [ 567.767014][ T1245] pgrefill 0 [ 567.767014][ T1245] pgscan 0 [ 567.767014][ T1245] pgsteal 0 [ 567.860538][ T1245] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=1126,uid=0 [ 567.875891][ T1245] Memory cgroup out of memory: Killed process 1126 (syz-executor.2) total-vm:72704kB, anon-rss:2204kB, file-rss:34816kB, shmem-rss:0kB [ 567.890777][ T1057] oom_reaper: reaped process 1126 (syz-executor.2), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 567.900647][ T1251] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 567.912824][ T1251] CPU: 1 PID: 1251 Comm: syz-executor.2 Not tainted 5.2.0+ #37 [ 567.920346][ T1251] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 567.930368][ T1251] Call Trace: [ 567.933624][ T1251] dump_stack+0x1d8/0x2f8 [ 567.937958][ T1251] dump_header+0xd8/0x970 [ 567.942264][ T1251] oom_kill_process+0xcd/0x320 [ 567.946997][ T1251] out_of_memory+0x5e1/0x8a0 [ 567.951556][ T1251] ? unregister_oom_notifier+0x20/0x20 [ 567.957033][ T1251] ? trace_hardirqs_on+0x74/0x80 [ 567.961958][ T1251] memory_max_write+0x537/0x6a0 [ 567.966779][ T1251] ? lock_acquire+0x158/0x250 [ 567.971431][ T1251] ? memory_max_show+0xa0/0xa0 [ 567.976172][ T1251] ? lockdep_hardirqs_on+0x3c5/0x7d0 [ 567.981429][ T1251] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 567.986868][ T1251] ? trace_hardirqs_on_caller+0x74/0x80 [ 567.992387][ T1251] ? memory_max_show+0xa0/0xa0 [ 567.997120][ T1251] cgroup_file_write+0x27b/0x6e0 [ 568.002030][ T1251] ? rcu_irq_exit+0xe3/0x260 [ 568.006635][ T1251] ? cgroup_seqfile_stop+0xc0/0xc0 [ 568.011716][ T1251] ? cgroup_seqfile_stop+0xc0/0xc0 [ 568.016804][ T1251] ? kernfs_fop_write+0x349/0x4f0 [ 568.021818][ T1251] ? cgroup_file_write+0x1/0x6e0 [ 568.026756][ T1251] ? cgroup_seqfile_stop+0xc0/0xc0 [ 568.031843][ T1251] kernfs_fop_write+0x3e4/0x4f0 [ 568.036663][ T1251] ? kernfs_fop_read+0x580/0x580 [ 568.041570][ T1251] __vfs_write+0xf9/0x7d0 [ 568.045870][ T1251] ? __kernel_write+0x350/0x350 [ 568.050699][ T1251] ? __sb_start_write+0x39c/0x440 [ 568.055708][ T1251] vfs_write+0x275/0x590 [ 568.059938][ T1251] ksys_write+0x16b/0x2a0 [ 568.064242][ T1251] ? __ia32_sys_read+0x90/0x90 [ 568.068977][ T1251] ? prepare_exit_to_usermode+0x1f7/0x580 [ 568.074668][ T1251] ? trace_irq_disable_rcuidle+0x23/0x1c0 [ 568.080391][ T1251] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 568.085823][ T1251] ? trace_irq_disable_rcuidle+0x23/0x1c0 [ 568.091544][ T1251] ? do_syscall_64+0x1d/0x140 [ 568.096203][ T1251] __x64_sys_write+0x7b/0x90 [ 568.100780][ T1251] do_syscall_64+0xfe/0x140 [ 568.105259][ T1251] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 568.111126][ T1251] RIP: 0033:0x459819 [ 568.115013][ T1251] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 568.134607][ T1251] RSP: 002b:00007f0e017adc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 568.143001][ T1251] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459819 [ 568.150960][ T1251] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 568.158905][ T1251] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 568.166852][ T1251] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f0e017ae6d4 [ 568.174794][ T1251] R13: 00000000004c9774 R14: 00000000004e0b70 R15: 00000000ffffffff [ 568.182852][ T1251] memory: usage 86832kB, limit 0kB, failcnt 32 [ 568.189429][ T1251] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 568.196317][ T1251] Memory cgroup stats for /syz2: [ 568.196662][ T1251] anon 77664256 [ 568.196662][ T1251] file 12288 [ 568.196662][ T1251] kernel_stack 1310720 [ 568.196662][ T1251] slab 4304896 [ 568.196662][ T1251] sock 0 [ 568.196662][ T1251] shmem 86016 [ 568.196662][ T1251] file_mapped 135168 [ 568.196662][ T1251] file_dirty 135168 [ 568.196662][ T1251] file_writeback 0 [ 568.196662][ T1251] anon_thp 73400320 [ 568.196662][ T1251] inactive_anon 0 [ 568.196662][ T1251] active_anon 77664256 [ 568.196662][ T1251] inactive_file 135168 [ 568.196662][ T1251] active_file 135168 [ 568.196662][ T1251] unevictable 0 [ 568.196662][ T1251] slab_reclaimable 1216512 [ 568.196662][ T1251] slab_unreclaimable 3088384 [ 568.196662][ T1251] pgfault 61281 [ 568.196662][ T1251] pgmajfault 0 [ 568.196662][ T1251] workingset_refault 0 [ 568.196662][ T1251] workingset_activate 0 [ 568.196662][ T1251] workingset_nodereclaim 0 [ 568.196662][ T1251] pgrefill 0 [ 568.196662][ T1251] pgscan 0 [ 568.196662][ T1251] pgsteal 0 [ 568.294818][ T1251] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=1095,uid=0 [ 568.311298][ T1251] Memory cgroup out of memory: Killed process 1095 (syz-executor.2) total-vm:72704kB, anon-rss:2204kB, file-rss:34816kB, shmem-rss:0kB [ 568.329139][ T1057] oom_reaper: reaped process 1095 (syz-executor.2), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 568.329866][ T1251] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 568.350387][ T1251] CPU: 1 PID: 1251 Comm: syz-executor.2 Not tainted 5.2.0+ #37 [ 568.357924][ T1251] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 568.367960][ T1251] Call Trace: [ 568.371235][ T1251] dump_stack+0x1d8/0x2f8 [ 568.375555][ T1251] dump_header+0xd8/0x970 [ 568.379868][ T1251] oom_kill_process+0xcd/0x320 [ 568.384618][ T1251] out_of_memory+0x5e1/0x8a0 [ 568.389191][ T1251] ? unregister_oom_notifier+0x20/0x20 [ 568.394635][ T1251] memory_max_write+0x537/0x6a0 [ 568.399491][ T1251] ? lock_acquire+0x158/0x250 [ 568.404174][ T1251] ? memory_max_show+0xa0/0xa0 [ 568.408927][ T1251] ? lockdep_hardirqs_on+0x3c5/0x7d0 [ 568.414284][ T1251] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 568.419741][ T1251] ? trace_hardirqs_on_caller+0x74/0x80 [ 568.425265][ T1251] ? memory_max_show+0xa0/0xa0 [ 568.430011][ T1251] cgroup_file_write+0x27b/0x6e0 [ 568.434938][ T1251] ? rcu_irq_exit+0xe3/0x260 [ 568.439513][ T1251] ? cgroup_seqfile_stop+0xc0/0xc0 [ 568.444606][ T1251] ? cgroup_seqfile_stop+0xc0/0xc0 [ 568.449703][ T1251] ? kernfs_fop_write+0x349/0x4f0 [ 568.454720][ T1251] ? cgroup_file_write+0x1/0x6e0 [ 568.459644][ T1251] ? cgroup_seqfile_stop+0xc0/0xc0 [ 568.464745][ T1251] kernfs_fop_write+0x3e4/0x4f0 [ 568.469578][ T1251] ? kernfs_fop_read+0x580/0x580 [ 568.474494][ T1251] __vfs_write+0xf9/0x7d0 [ 568.478812][ T1251] ? __kernel_write+0x350/0x350 [ 568.483683][ T1251] ? __sb_start_write+0x39c/0x440 [ 568.488757][ T1251] vfs_write+0x275/0x590 [ 568.493007][ T1251] ksys_write+0x16b/0x2a0 [ 568.497332][ T1251] ? __ia32_sys_read+0x90/0x90 [ 568.502102][ T1251] ? prepare_exit_to_usermode+0x1f7/0x580 [ 568.507831][ T1251] ? trace_irq_disable_rcuidle+0x23/0x1c0 [ 568.513545][ T1251] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 568.518987][ T1251] ? trace_irq_disable_rcuidle+0x23/0x1c0 [ 568.524713][ T1251] ? do_syscall_64+0x1d/0x140 [ 568.529376][ T1251] __x64_sys_write+0x7b/0x90 [ 568.533951][ T1251] do_syscall_64+0xfe/0x140 [ 568.538440][ T1251] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 568.544319][ T1251] RIP: 0033:0x459819 [ 568.548193][ T1251] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 568.567783][ T1251] RSP: 002b:00007f0e017adc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 568.576186][ T1251] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459819 [ 568.584153][ T1251] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 568.592111][ T1251] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 568.600078][ T1251] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f0e017ae6d4 [ 568.608032][ T1251] R13: 00000000004c9774 R14: 00000000004e0b70 R15: 00000000ffffffff [ 568.616092][ T1251] memory: usage 84504kB, limit 0kB, failcnt 32 [ 568.622363][ T1251] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 568.629317][ T1251] Memory cgroup stats for /syz2: [ 568.630255][ T1251] anon 75448320 [ 568.630255][ T1251] file 12288 [ 568.630255][ T1251] kernel_stack 1310720 [ 568.630255][ T1251] slab 4304896 [ 568.630255][ T1251] sock 0 [ 568.630255][ T1251] shmem 86016 [ 568.630255][ T1251] file_mapped 135168 [ 568.630255][ T1251] file_dirty 135168 [ 568.630255][ T1251] file_writeback 0 [ 568.630255][ T1251] anon_thp 71303168 [ 568.630255][ T1251] inactive_anon 0 [ 568.630255][ T1251] active_anon 75448320 [ 568.630255][ T1251] inactive_file 135168 [ 568.630255][ T1251] active_file 135168 [ 568.630255][ T1251] unevictable 0 [ 568.630255][ T1251] slab_reclaimable 1216512 [ 568.630255][ T1251] slab_unreclaimable 3088384 [ 568.630255][ T1251] pgfault 61281 [ 568.630255][ T1251] pgmajfault 0 [ 568.630255][ T1251] workingset_refault 0 [ 568.630255][ T1251] workingset_activate 0 [ 568.630255][ T1251] workingset_nodereclaim 0 [ 568.630255][ T1251] pgrefill 0 [ 568.630255][ T1251] pgscan 0 [ 568.630255][ T1251] pgsteal 0 [ 568.723871][ T1251] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=1054,uid=0 [ 568.739607][ T1251] Memory cgroup out of memory: Killed process 1054 (syz-executor.2) total-vm:72704kB, anon-rss:2204kB, file-rss:34944kB, shmem-rss:0kB [ 568.755923][ T1057] oom_reaper: reaped process 1054 (syz-executor.2), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 568.764880][ T1245] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 568.777419][ T1245] CPU: 1 PID: 1245 Comm: syz-executor.2 Not tainted 5.2.0+ #37 [ 568.784977][ T1245] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 568.795036][ T1245] Call Trace: [ 568.798323][ T1245] dump_stack+0x1d8/0x2f8 [ 568.802651][ T1245] dump_header+0xd8/0x970 [ 568.806956][ T1245] oom_kill_process+0xcd/0x320 [ 568.811689][ T1245] out_of_memory+0x5e1/0x8a0 [ 568.816265][ T1245] ? unregister_oom_notifier+0x20/0x20 [ 568.821692][ T1245] ? __kasan_check_read+0x11/0x20 [ 568.826712][ T1245] try_charge+0x134a/0x17b0 [ 568.831212][ T1245] ? __memcg_kmem_charge_memcg+0x180/0x180 [ 568.837017][ T1245] ? __lock_acquire+0x4750/0x4750 [ 568.842039][ T1245] ? rcu_lock_release+0x15/0x20 [ 568.846860][ T1245] ? get_mem_cgroup_from_mm+0x15e/0x170 [ 568.852375][ T1245] mem_cgroup_try_charge+0x216/0x560 [ 568.857629][ T1245] mem_cgroup_try_charge_delay+0x25/0xa0 [ 568.863229][ T1245] handle_mm_fault+0x31f3/0x6080 [ 568.868137][ T1245] ? finish_fault+0x230/0x230 [ 568.872803][ T1245] ? vmacache_find+0x566/0x5b0 [ 568.877536][ T1245] ? vmacache_update+0xb7/0x120 [ 568.882369][ T1245] do_user_addr_fault+0x589/0xaf0 [ 568.887391][ T1245] __do_page_fault+0xd3/0x1f0 [ 568.892040][ T1245] do_page_fault+0x99/0xb0 [ 568.896425][ T1245] page_fault+0x39/0x40 [ 568.900561][ T1245] RIP: 0033:0x41115f [ 568.904442][ T1245] Code: 0f 84 c8 02 00 00 48 83 bd 78 ff ff ff 00 0f 84 f9 04 00 00 48 8b 95 68 ff ff ff 44 89 95 38 ff ff ff 4c 8d ac 10 00 f7 ff ff <49> 89 85 90 06 00 00 49 8d 85 10 03 00 00 49 89 95 98 06 00 00 41 [ 568.924039][ T1245] RSP: 002b:00007ffd762952c0 EFLAGS: 00010206 [ 568.930076][ T1245] RAX: 00007f0e0176d000 RBX: 0000000000020000 RCX: 000000000045986a [ 568.938030][ T1245] RDX: 0000000000021000 RSI: 0000000000021000 RDI: 0000000000000000 [ 568.945993][ T1245] RBP: 00007ffd762953a0 R08: ffffffffffffffff R09: 0000000000000000 [ 568.953937][ T1245] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd76295490 [ 568.961882][ T1245] R13: 00007f0e0178d700 R14: 0000000000000001 R15: 000000000075bfd4 [ 568.970176][ T1245] memory: usage 82152kB, limit 0kB, failcnt 32 [ 568.976349][ T1245] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 568.983260][ T1245] Memory cgroup stats for /syz2: [ 568.983366][ T1245] anon 73232384 [ 568.983366][ T1245] file 12288 [ 568.983366][ T1245] kernel_stack 1245184 [ 568.983366][ T1245] slab 4304896 [ 568.983366][ T1245] sock 0 [ 568.983366][ T1245] shmem 86016 [ 568.983366][ T1245] file_mapped 135168 [ 568.983366][ T1245] file_dirty 135168 [ 568.983366][ T1245] file_writeback 0 [ 568.983366][ T1245] anon_thp 69206016 [ 568.983366][ T1245] inactive_anon 0 [ 568.983366][ T1245] active_anon 73232384 [ 568.983366][ T1245] inactive_file 135168 [ 568.983366][ T1245] active_file 135168 [ 568.983366][ T1245] unevictable 0 [ 568.983366][ T1245] slab_reclaimable 1216512 [ 568.983366][ T1245] slab_unreclaimable 3088384 [ 568.983366][ T1245] pgfault 61281 [ 568.983366][ T1245] pgmajfault 0 [ 568.983366][ T1245] workingset_refault 0 [ 568.983366][ T1245] workingset_activate 0 [ 568.983366][ T1245] workingset_nodereclaim 0 [ 568.983366][ T1245] pgrefill 0 [ 568.983366][ T1245] pgscan 0 [ 568.983366][ T1245] pgsteal 0 [ 569.076829][ T1245] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=1025,uid=0 [ 569.092193][ T1245] Memory cgroup out of memory: Killed process 1025 (syz-executor.2) total-vm:72704kB, anon-rss:2204kB, file-rss:34816kB, shmem-rss:0kB [ 569.112098][ T1057] oom_reaper: reaped process 1025 (syz-executor.2), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 569.133580][ T1251] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 569.143949][ T1251] CPU: 1 PID: 1251 Comm: syz-executor.2 Not tainted 5.2.0+ #37 [ 569.151491][ T1251] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 569.161537][ T1251] Call Trace: [ 569.164820][ T1251] dump_stack+0x1d8/0x2f8 [ 569.169144][ T1251] dump_header+0xd8/0x970 [ 569.173465][ T1251] oom_kill_process+0xcd/0x320 [ 569.178213][ T1251] out_of_memory+0x5e1/0x8a0 [ 569.182801][ T1251] ? unregister_oom_notifier+0x20/0x20 [ 569.188246][ T1251] memory_max_write+0x537/0x6a0 [ 569.193075][ T1251] ? lock_acquire+0x158/0x250 [ 569.197772][ T1251] ? memory_max_show+0xa0/0xa0 [ 569.202513][ T1251] ? lockdep_hardirqs_on+0x3c5/0x7d0 [ 569.207774][ T1251] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 569.213220][ T1251] ? trace_hardirqs_on_caller+0x74/0x80 [ 569.218754][ T1251] ? memory_max_show+0xa0/0xa0 [ 569.223507][ T1251] cgroup_file_write+0x27b/0x6e0 [ 569.228432][ T1251] ? rcu_irq_exit+0xe3/0x260 [ 569.233023][ T1251] ? cgroup_seqfile_stop+0xc0/0xc0 [ 569.238119][ T1251] ? cgroup_seqfile_stop+0xc0/0xc0 [ 569.243232][ T1251] ? kernfs_fop_write+0x349/0x4f0 [ 569.248252][ T1251] ? cgroup_file_write+0x1/0x6e0 [ 569.253165][ T1251] ? cgroup_seqfile_stop+0xc0/0xc0 [ 569.258255][ T1251] kernfs_fop_write+0x3e4/0x4f0 [ 569.263087][ T1251] ? kernfs_fop_read+0x580/0x580 [ 569.268008][ T1251] __vfs_write+0xf9/0x7d0 [ 569.272324][ T1251] ? __kernel_write+0x350/0x350 [ 569.277682][ T1251] ? __sb_start_write+0x39c/0x440 [ 569.282686][ T1251] vfs_write+0x275/0x590 [ 569.286910][ T1251] ksys_write+0x16b/0x2a0 [ 569.291222][ T1251] ? __ia32_sys_read+0x90/0x90 [ 569.295967][ T1251] ? prepare_exit_to_usermode+0x1f7/0x580 [ 569.301689][ T1251] ? trace_irq_disable_rcuidle+0x23/0x1c0 [ 569.307385][ T1251] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 569.312825][ T1251] ? trace_irq_disable_rcuidle+0x23/0x1c0 [ 569.318527][ T1251] ? do_syscall_64+0x1d/0x140 [ 569.323182][ T1251] __x64_sys_write+0x7b/0x90 [ 569.327753][ T1251] do_syscall_64+0xfe/0x140 [ 569.332248][ T1251] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 569.338117][ T1251] RIP: 0033:0x459819 [ 569.342004][ T1251] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 569.361586][ T1251] RSP: 002b:00007f0e017adc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 569.369988][ T1251] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459819 [ 569.377948][ T1251] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 569.385929][ T1251] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 569.393885][ T1251] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f0e017ae6d4 [ 569.401835][ T1251] R13: 00000000004c9774 R14: 00000000004e0b70 R15: 00000000ffffffff [ 569.410384][ T1251] memory: usage 79852kB, limit 0kB, failcnt 39 [ 569.416633][ T1251] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 569.423600][ T1251] Memory cgroup stats for /syz2: [ 569.424756][ T1251] anon 71118848 [ 569.424756][ T1251] file 12288 [ 569.424756][ T1251] kernel_stack 1245184 [ 569.424756][ T1251] slab 4304896 [ 569.424756][ T1251] sock 0 [ 569.424756][ T1251] shmem 86016 [ 569.424756][ T1251] file_mapped 135168 [ 569.424756][ T1251] file_dirty 135168 [ 569.424756][ T1251] file_writeback 0 [ 569.424756][ T1251] anon_thp 67108864 [ 569.424756][ T1251] inactive_anon 0 [ 569.424756][ T1251] active_anon 71118848 [ 569.424756][ T1251] inactive_file 135168 [ 569.424756][ T1251] active_file 135168 [ 569.424756][ T1251] unevictable 0 [ 569.424756][ T1251] slab_reclaimable 1216512 [ 569.424756][ T1251] slab_unreclaimable 3088384 [ 569.424756][ T1251] pgfault 61281 [ 569.424756][ T1251] pgmajfault 0 [ 569.424756][ T1251] workingset_refault 0 [ 569.424756][ T1251] workingset_activate 0 [ 569.424756][ T1251] workingset_nodereclaim 0 [ 569.424756][ T1251] pgrefill 0 [ 569.424756][ T1251] pgscan 0 [ 569.424756][ T1251] pgsteal 0 [ 569.518585][ T1251] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=989,uid=0 [ 569.535187][ T1251] Memory cgroup out of memory: Killed process 989 (syz-executor.2) total-vm:72704kB, anon-rss:2204kB, file-rss:34816kB, shmem-rss:0kB [ 569.551929][ T1057] oom_reaper: reaped process 989 (syz-executor.2), now anon-rss:0kB, file-rss:34688kB, shmem-rss:0kB [ 569.596186][ T1273] IPVS: ftp: loaded support on port[0] = 21 [ 569.637849][ T7983] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 569.647926][ T7983] CPU: 1 PID: 7983 Comm: syz-executor.2 Not tainted 5.2.0+ #37 [ 569.655464][ T7983] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 569.655472][ T7983] Call Trace: [ 569.668796][ T7983] dump_stack+0x1d8/0x2f8 [ 569.668810][ T7983] dump_header+0xd8/0x970 [ 569.668822][ T7983] oom_kill_process+0xcd/0x320 [ 569.668834][ T7983] out_of_memory+0x5e1/0x8a0 [ 569.677458][ T7983] ? unregister_oom_notifier+0x20/0x20 [ 569.686766][ T7983] ? __kasan_check_read+0x11/0x20 [ 569.697209][ T7983] try_charge+0x134a/0x17b0 [ 569.701718][ T7983] ? __memcg_kmem_charge_memcg+0x180/0x180 [ 569.701735][ T7983] ? __lock_acquire+0x4750/0x4750 [ 569.712524][ T7983] ? rcu_lock_release+0x15/0x20 [ 569.712534][ T7983] ? get_mem_cgroup_from_mm+0x15e/0x170 [ 569.712547][ T7983] mem_cgroup_try_charge+0x216/0x560 [ 569.722901][ T7983] mem_cgroup_try_charge_delay+0x25/0xa0 [ 569.722919][ T7983] wp_page_copy+0x367/0x18c0 [ 569.722937][ T7983] ? rcu_lock_release+0x30/0x30 [ 569.733813][ T7983] ? __lock_acquire+0x4750/0x4750 [ 569.733824][ T7983] ? __kasan_check_read+0x11/0x20 [ 569.733849][ T7983] ? do_raw_spin_unlock+0x49/0x260 [ 569.743236][ T7983] do_wp_page+0x2c9/0x1ce0 [ 569.743251][ T7983] ? __rwlock_init+0x130/0x130 [ 569.743273][ T7983] ? count_memcg_event_mm+0x300/0x300 [ 569.753280][ T7983] handle_mm_fault+0x2bcf/0x6080 [ 569.753301][ T7983] ? finish_fault+0x230/0x230 [ 569.762807][ T7983] ? vmacache_find+0x251/0x5b0 [ 569.762830][ T7983] do_user_addr_fault+0x589/0xaf0 [ 569.772950][ T7983] __do_page_fault+0xd3/0x1f0 [ 569.772961][ T7983] do_page_fault+0x99/0xb0 [ 569.772975][ T7983] page_fault+0x39/0x40 [ 569.782545][ T7983] RIP: 0033:0x40702e [ 569.782555][ T7983] Code: 08 ff ff ff 8b 54 24 04 49 8b 37 31 c0 bf af e9 4b 00 e8 55 ac ff ff 8b 44 24 6c 49 8d 4f 60 ba 40 00 00 00 44 89 f6 44 89 e7 <41> 89 87 b4 00 00 00 48 8d 84 24 80 00 00 00 49 89 87 b8 00 00 00 [ 569.782560][ T7983] RSP: 002b:00007ffd76294dd0 EFLAGS: 00010202 [ 569.792320][ T7983] RAX: 0000000000000004 RBX: 00007ffd76294df0 RCX: 0000000000712d20 [ 569.792325][ T7983] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000003 [ 569.792330][ T7983] RBP: 0000000000714e80 R08: 0000000000006000 R09: 0000000000004000 [ 569.792335][ T7983] R10: 00007ffd76294ef0 R11: 0000000000000216 R12: 0000000000000003 [ 569.792340][ T7983] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000712cc0 [ 569.792402][ T7983] memory: usage 75128kB, limit 0kB, failcnt 47 [ 569.829123][ T7983] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 569.829128][ T7983] Memory cgroup stats for /syz2: [ 569.829201][ T7983] anon 66768896 [ 569.829201][ T7983] file 12288 [ 569.829201][ T7983] kernel_stack 1114112 [ 569.829201][ T7983] slab 4304896 [ 569.829201][ T7983] sock 0 [ 569.829201][ T7983] shmem 86016 [ 569.829201][ T7983] file_mapped 135168 [ 569.829201][ T7983] file_dirty 135168 [ 569.829201][ T7983] file_writeback 0 [ 569.829201][ T7983] anon_thp 62914560 [ 569.829201][ T7983] inactive_anon 0 [ 569.829201][ T7983] active_anon 66699264 [ 569.829201][ T7983] inactive_file 135168 [ 569.829201][ T7983] active_file 135168 [ 569.829201][ T7983] unevictable 0 [ 569.829201][ T7983] slab_reclaimable 1216512 [ 569.829201][ T7983] slab_unreclaimable 3088384 [ 569.829201][ T7983] pgfault 61281 [ 569.829201][ T7983] pgmajfault 0 [ 569.829201][ T7983] workingset_refault 0 [ 569.829201][ T7983] workingset_activate 0 [ 569.829201][ T7983] workingset_nodereclaim 0 [ 569.829201][ T7983] pgrefill 0 [ 569.829201][ T7983] pgscan 0 [ 569.829201][ T7983] pgsteal 0 [ 569.843256][ T7983] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=969,uid=0 [ 569.859263][ T7983] Memory cgroup out of memory: Killed process 969 (syz-executor.2) total-vm:72704kB, anon-rss:2204kB, file-rss:34816kB, shmem-rss:0kB [ 569.876431][ T1057] oom_reaper: reaped process 969 (syz-executor.2), now anon-rss:0kB, file-rss:34688kB, shmem-rss:0kB [ 569.890332][ T7983] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 569.981774][ T7983] CPU: 1 PID: 7983 Comm: syz-executor.2 Not tainted 5.2.0+ #37 [ 569.981784][ T7983] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 570.010715][ T7983] Call Trace: [ 570.010756][ T7983] dump_stack+0x1d8/0x2f8 [ 570.010775][ T7983] dump_header+0xd8/0x970 [ 570.031501][ T7983] oom_kill_process+0xcd/0x320 [ 570.031511][ T7983] out_of_memory+0x5e1/0x8a0 [ 570.031523][ T7983] ? unregister_oom_notifier+0x20/0x20 [ 570.049088][ T7983] ? __kasan_check_read+0x11/0x20 [ 570.049104][ T7983] try_charge+0x134a/0x17b0 [ 570.049130][ T7983] ? __memcg_kmem_charge_memcg+0x180/0x180 [ 570.056710][ T7983] ? __lock_acquire+0x4750/0x4750 [ 570.065805][ T7983] ? rcu_lock_release+0x15/0x20 [ 570.075804][ T7983] ? get_mem_cgroup_from_mm+0x15e/0x170 [ 570.085293][ T7983] mem_cgroup_try_charge+0x216/0x560 [ 570.096084][ T7983] mem_cgroup_try_charge_delay+0x25/0xa0 [ 570.117317][ T7983] wp_page_copy+0x367/0x18c0 [ 570.121936][ T7983] ? rcu_lock_release+0x30/0x30 [ 570.126777][ T7983] ? __lock_acquire+0x4750/0x4750 [ 570.131792][ T7983] ? __kasan_check_read+0x11/0x20 [ 570.131802][ T7983] ? do_raw_spin_unlock+0x49/0x260 [ 570.131815][ T7983] do_wp_page+0x2c9/0x1ce0 [ 570.131835][ T7983] ? __rwlock_init+0x130/0x130 [ 570.141925][ T7983] ? count_memcg_event_mm+0x300/0x300 [ 570.141941][ T7983] handle_mm_fault+0x2bcf/0x6080 [ 570.141962][ T7983] ? finish_fault+0x230/0x230 [ 570.151113][ T7983] ? vmacache_find+0x251/0x5b0 [ 570.151134][ T7983] do_user_addr_fault+0x589/0xaf0 [ 570.161397][ T7983] __do_page_fault+0xd3/0x1f0 [ 570.161407][ T7983] do_page_fault+0x99/0xb0 [ 570.161420][ T7983] page_fault+0x39/0x40 [ 570.171013][ T7983] RIP: 0033:0x40702e [ 570.171023][ T7983] Code: 08 ff ff ff 8b 54 24 04 49 8b 37 31 c0 bf af e9 4b 00 e8 55 ac ff ff 8b 44 24 6c 49 8d 4f 60 ba 40 00 00 00 44 89 f6 44 89 e7 <41> 89 87 b4 00 00 00 48 8d 84 24 80 00 00 00 49 89 87 b8 00 00 00 [ 570.171027][ T7983] RSP: 002b:00007ffd76294dd0 EFLAGS: 00010202 [ 570.171040][ T7983] RAX: 0000000000000004 RBX: 00007ffd76294df0 RCX: 0000000000712d20 [ 570.180695][ T7983] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000003 [ 570.180712][ T7983] RBP: 0000000000714e80 R08: 0000000000006000 R09: 0000000000004000 [ 570.180716][ T7983] R10: 00007ffd76294ef0 R11: 0000000000000216 R12: 0000000000000003 [ 570.180721][ T7983] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000712cc0 [ 570.181025][ T7983] memory: usage 72800kB, limit 0kB, failcnt 53 [ 570.189285][ T7983] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 570.189289][ T7983] Memory cgroup stats for /syz2: [ 570.189373][ T7983] anon 64552960 [ 570.189373][ T7983] file 12288 [ 570.189373][ T7983] kernel_stack 1048576 [ 570.189373][ T7983] slab 4304896 [ 570.189373][ T7983] sock 0 [ 570.189373][ T7983] shmem 86016 [ 570.189373][ T7983] file_mapped 135168 [ 570.189373][ T7983] file_dirty 135168 [ 570.189373][ T7983] file_writeback 0 [ 570.189373][ T7983] anon_thp 60817408 [ 570.189373][ T7983] inactive_anon 0 [ 570.189373][ T7983] active_anon 64483328 [ 570.189373][ T7983] inactive_file 135168 [ 570.189373][ T7983] active_file 135168 [ 570.189373][ T7983] unevictable 0 [ 570.189373][ T7983] slab_reclaimable 1216512 [ 570.189373][ T7983] slab_unreclaimable 3088384 [ 570.189373][ T7983] pgfault 61281 [ 570.189373][ T7983] pgmajfault 0 [ 570.189373][ T7983] workingset_refault 0 [ 570.189373][ T7983] workingset_activate 0 [ 570.189373][ T7983] workingset_nodereclaim 0 [ 570.189373][ T7983] pgrefill 0 [ 570.189373][ T7983] pgscan 0 [ 570.189373][ T7983] pgsteal 0 [ 570.189386][ T7983] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=937,uid=0 [ 570.189470][ T7983] Memory cgroup out of memory: Killed process 937 (syz-executor.2) total-vm:72704kB, anon-rss:2204kB, file-rss:34816kB, shmem-rss:0kB [ 570.190613][ T1057] oom_reaper: reaped process 937 (syz-executor.2), now anon-rss:0kB, file-rss:34688kB, shmem-rss:0kB [ 570.225092][ T7983] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 570.235319][ T7983] CPU: 1 PID: 7983 Comm: syz-executor.2 Not tainted 5.2.0+ #37 [ 570.251187][ T7983] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 570.251192][ T7983] Call Trace: [ 570.251206][ T7983] dump_stack+0x1d8/0x2f8 [ 570.251223][ T7983] dump_header+0xd8/0x970 [ 570.279372][ T7983] oom_kill_process+0xcd/0x320 [ 570.279382][ T7983] out_of_memory+0x5e1/0x8a0 [ 570.279393][ T7983] ? unregister_oom_notifier+0x20/0x20 [ 570.279403][ T7983] ? __kasan_check_read+0x11/0x20 [ 570.279418][ T7983] try_charge+0x134a/0x17b0 [ 570.279445][ T7983] ? __memcg_kmem_charge_memcg+0x180/0x180 [ 570.279468][ T7983] ? __lock_acquire+0x4750/0x4750 [ 570.279482][ T7983] ? rcu_lock_release+0x15/0x20 [ 570.279491][ T7983] ? get_mem_cgroup_from_mm+0x15e/0x170 [ 570.279501][ T7983] mem_cgroup_try_charge+0x216/0x560 [ 570.279514][ T7983] mem_cgroup_try_charge_delay+0x25/0xa0 [ 570.279524][ T7983] wp_page_copy+0x367/0x18c0 [ 570.279542][ T7983] ? rcu_lock_release+0x30/0x30 [ 570.279553][ T7983] ? __lock_acquire+0x4750/0x4750 [ 570.279564][ T7983] ? __kasan_check_read+0x11/0x20 [ 570.279573][ T7983] ? do_raw_spin_unlock+0x49/0x260 [ 570.279584][ T7983] do_wp_page+0x2c9/0x1ce0 [ 570.279599][ T7983] ? __rwlock_init+0x130/0x130 [ 570.279608][ T7983] ? count_memcg_event_mm+0x300/0x300 [ 570.279622][ T7983] handle_mm_fault+0x2bcf/0x6080 [ 570.279642][ T7983] ? finish_fault+0x230/0x230 [ 570.279658][ T7983] ? vmacache_find+0x251/0x5b0 [ 570.279674][ T7983] do_user_addr_fault+0x589/0xaf0 [ 570.279691][ T7983] __do_page_fault+0xd3/0x1f0 [ 570.279701][ T7983] do_page_fault+0x99/0xb0 [ 570.279712][ T7983] page_fault+0x39/0x40 [ 570.279720][ T7983] RIP: 0033:0x40702e [ 570.279728][ T7983] Code: 08 ff ff ff 8b 54 24 04 49 8b 37 31 c0 bf af e9 4b 00 e8 55 ac ff ff 8b 44 24 6c 49 8d 4f 60 ba 40 00 00 00 44 89 f6 44 89 e7 <41> 89 87 b4 00 00 00 48 8d 84 24 80 00 00 00 49 89 87 b8 00 00 00 [ 570.279734][ T7983] RSP: 002b:00007ffd76294dd0 EFLAGS: 00010202 [ 570.279741][ T7983] RAX: 0000000000000004 RBX: 00007ffd76294df0 RCX: 0000000000712d20 [ 570.279747][ T7983] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000003 [ 570.279752][ T7983] RBP: 0000000000714e80 R08: 0000000000006000 R09: 0000000000004000 [ 570.279758][ T7983] R10: 00007ffd76294ef0 R11: 0000000000000216 R12: 0000000000000003 [ 570.279763][ T7983] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000712cc0 [ 570.279974][ T7983] memory: usage 70472kB, limit 0kB, failcnt 59 [ 570.383591][ T7983] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 570.408144][ T7983] Memory cgroup stats for /syz2: [ 570.408245][ T7983] anon 62337024 [ 570.408245][ T7983] file 12288 [ 570.408245][ T7983] kernel_stack 1048576 [ 570.408245][ T7983] slab 4304896 [ 570.408245][ T7983] sock 0 [ 570.408245][ T7983] shmem 86016 [ 570.408245][ T7983] file_mapped 135168 [ 570.408245][ T7983] file_dirty 135168 [ 570.408245][ T7983] file_writeback 0 [ 570.408245][ T7983] anon_thp 58720256 [ 570.408245][ T7983] inactive_anon 0 [ 570.408245][ T7983] active_anon 62267392 [ 570.408245][ T7983] inactive_file 135168 [ 570.408245][ T7983] active_file 135168 [ 570.408245][ T7983] unevictable 0 [ 570.408245][ T7983] slab_reclaimable 1216512 [ 570.408245][ T7983] slab_unreclaimable 3088384 [ 570.408245][ T7983] pgfault 61281 [ 570.408245][ T7983] pgmajfault 0 [ 570.408245][ T7983] workingset_refault 0 [ 570.408245][ T7983] workingset_activate 0 [ 570.408245][ T7983] workingset_nodereclaim 0 [ 570.408245][ T7983] pgrefill 0 [ 570.408245][ T7983] pgscan 0 [ 570.408245][ T7983] pgsteal 0 [ 570.425612][ T7983] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=913,uid=0 [ 570.439020][ T7983] Memory cgroup out of memory: Killed process 913 (syz-executor.2) total-vm:72704kB, anon-rss:2204kB, file-rss:34816kB, shmem-rss:0kB [ 570.449034][ T1057] oom_reaper: reaped process 913 (syz-executor.2), now anon-rss:0kB, file-rss:34688kB, shmem-rss:0kB [ 570.468155][ T7983] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 570.477765][ T7983] CPU: 1 PID: 7983 Comm: syz-executor.2 Not tainted 5.2.0+ #37 [ 570.487594][ T7983] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 570.487601][ T7983] Call Trace: [ 570.498391][ T7983] dump_stack+0x1d8/0x2f8 [ 570.508555][ T7983] dump_header+0xd8/0x970 [ 570.518412][ T7983] oom_kill_process+0xcd/0x320 [ 570.528515][ T7983] out_of_memory+0x5e1/0x8a0 [ 570.537669][ T7983] ? unregister_oom_notifier+0x20/0x20 [ 570.547922][ T7983] ? __kasan_check_read+0x11/0x20 [ 570.557315][ T7983] try_charge+0x134a/0x17b0 [ 570.566975][ T7983] ? __memcg_kmem_charge_memcg+0x180/0x180 [ 570.575527][ T7983] ? __lock_acquire+0x4750/0x4750 [ 570.598986][ T7983] ? rcu_lock_release+0x15/0x20 [ 570.598995][ T7983] ? get_mem_cgroup_from_mm+0x15e/0x170 [ 570.599005][ T7983] mem_cgroup_try_charge+0x216/0x560 [ 570.612997][ T7983] mem_cgroup_try_charge_delay+0x25/0xa0 [ 570.613008][ T7983] wp_page_copy+0x367/0x18c0 [ 570.613036][ T7983] ? rcu_lock_release+0x30/0x30 [ 570.628940][ T7983] ? __lock_acquire+0x4750/0x4750 [ 570.628951][ T7983] ? __kasan_check_read+0x11/0x20 [ 570.628960][ T7983] ? do_raw_spin_unlock+0x49/0x260 [ 570.628983][ T7983] do_wp_page+0x2c9/0x1ce0 [ 570.644938][ T7983] ? __rwlock_init+0x130/0x130 [ 570.644947][ T7983] ? count_memcg_event_mm+0x300/0x300 [ 570.644960][ T7983] handle_mm_fault+0x2bcf/0x6080 [ 570.644979][ T7983] ? finish_fault+0x230/0x230 [ 570.657965][ T7983] ? vmacache_find+0x251/0x5b0 [ 570.751392][ T7983] do_user_addr_fault+0x589/0xaf0 [ 570.751416][ T7983] __do_page_fault+0xd3/0x1f0 [ 570.780257][ T7983] do_page_fault+0x99/0xb0 [ 570.780268][ T7983] page_fault+0x39/0x40 [ 570.780280][ T7983] RIP: 0033:0x40702e [ 570.800956][ T7983] Code: 08 ff ff ff 8b 54 24 04 49 8b 37 31 c0 bf af e9 4b 00 e8 55 ac ff ff 8b 44 24 6c 49 8d 4f 60 ba 40 00 00 00 44 89 f6 44 89 e7 <41> 89 87 b4 00 00 00 48 8d 84 24 80 00 00 00 49 89 87 b8 00 00 00 [ 570.800962][ T7983] RSP: 002b:00007ffd76294dd0 EFLAGS: 00010202 [ 570.800969][ T7983] RAX: 0000000000000004 RBX: 00007ffd76294df0 RCX: 0000000000712d20 [ 570.800974][ T7983] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000003 [ 570.800979][ T7983] RBP: 0000000000714e80 R08: 0000000000006000 R09: 0000000000004000 [ 570.800989][ T7983] R10: 00007ffd76294ef0 R11: 0000000000000216 R12: 0000000000000003 [ 570.818548][ T7983] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000712cc0 [ 570.818707][ T7983] memory: usage 68144kB, limit 0kB, failcnt 65 [ 570.826216][ T7983] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 570.835305][ T7983] Memory cgroup stats for /syz2: [ 570.835375][ T7983] anon 60121088 [ 570.835375][ T7983] file 12288 [ 570.835375][ T7983] kernel_stack 983040 [ 570.835375][ T7983] slab 4304896 [ 570.835375][ T7983] sock 0 [ 570.835375][ T7983] shmem 86016 [ 570.835375][ T7983] file_mapped 135168 [ 570.835375][ T7983] file_dirty 135168 [ 570.835375][ T7983] file_writeback 0 [ 570.835375][ T7983] anon_thp 56623104 [ 570.835375][ T7983] inactive_anon 0 [ 570.835375][ T7983] active_anon 60051456 [ 570.835375][ T7983] inactive_file 135168 [ 570.835375][ T7983] active_file 135168 [ 570.835375][ T7983] unevictable 0 [ 570.835375][ T7983] slab_reclaimable 1216512 [ 570.835375][ T7983] slab_unreclaimable 3088384 [ 570.835375][ T7983] pgfault 61281 [ 570.835375][ T7983] pgmajfault 0 [ 570.835375][ T7983] workingset_refault 0 [ 570.835375][ T7983] workingset_activate 0 [ 570.835375][ T7983] workingset_nodereclaim 0 [ 570.835375][ T7983] pgrefill 0 [ 570.835375][ T7983] pgscan 0 [ 570.835375][ T7983] pgsteal 0 [ 570.845369][ T7983] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=786,uid=0 [ 570.854919][ T7983] Memory cgroup out of memory: Killed process 786 (syz-executor.2) total-vm:72704kB, anon-rss:2204kB, file-rss:34816kB, shmem-rss:0kB [ 570.867254][ T1057] oom_reaper: reaped process 786 (syz-executor.2), now anon-rss:0kB, file-rss:34688kB, shmem-rss:0kB [ 570.892326][ T7983] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 570.901651][ T7983] CPU: 1 PID: 7983 Comm: syz-executor.2 Not tainted 5.2.0+ #37 [ 570.911729][ T7983] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 570.911733][ T7983] Call Trace: [ 570.911748][ T7983] dump_stack+0x1d8/0x2f8 [ 570.911767][ T7983] dump_header+0xd8/0x970 [ 570.920908][ T7983] oom_kill_process+0xcd/0x320 [ 570.920919][ T7983] out_of_memory+0x5e1/0x8a0 [ 570.920933][ T7983] ? unregister_oom_notifier+0x20/0x20 [ 570.931212][ T7983] ? __kasan_check_read+0x11/0x20 [ 570.931228][ T7983] try_charge+0x134a/0x17b0 [ 570.931256][ T7983] ? __memcg_kmem_charge_memcg+0x180/0x180 [ 570.940659][ T7983] ? __lock_acquire+0x4750/0x4750 [ 570.940674][ T7983] ? rcu_lock_release+0x15/0x20 [ 570.940686][ T7983] ? get_mem_cgroup_from_mm+0x15e/0x170 [ 570.950350][ T7983] mem_cgroup_try_charge+0x216/0x560 [ 570.950363][ T7983] mem_cgroup_try_charge_delay+0x25/0xa0 [ 570.950377][ T7983] wp_page_copy+0x367/0x18c0 [ 570.958910][ T7983] ? rcu_lock_release+0x30/0x30 [ 570.958921][ T7983] ? __lock_acquire+0x4750/0x4750 [ 570.958933][ T7983] ? __kasan_check_read+0x11/0x20 [ 570.982392][ T7983] ? do_raw_spin_unlock+0x49/0x260 [ 570.982403][ T7983] do_wp_page+0x2c9/0x1ce0 [ 570.982420][ T7983] ? __rwlock_init+0x130/0x130 [ 570.996418][ T7983] ? count_memcg_event_mm+0x300/0x300 [ 570.996433][ T7983] handle_mm_fault+0x2bcf/0x6080 [ 570.996459][ T7983] ? finish_fault+0x230/0x230 [ 571.012381][ T7983] ? vmacache_find+0x251/0x5b0 [ 571.012401][ T7983] do_user_addr_fault+0x589/0xaf0 [ 571.028347][ T7983] __do_page_fault+0xd3/0x1f0 [ 571.041390][ T7983] do_page_fault+0x99/0xb0 [ 571.041402][ T7983] page_fault+0x39/0x40 [ 571.041417][ T7983] RIP: 0033:0x40702e [ 571.134763][ T7983] Code: 08 ff ff ff 8b 54 24 04 49 8b 37 31 c0 bf af e9 4b 00 e8 55 ac ff ff 8b 44 24 6c 49 8d 4f 60 ba 40 00 00 00 44 89 f6 44 89 e7 <41> 89 87 b4 00 00 00 48 8d 84 24 80 00 00 00 49 89 87 b8 00 00 00 [ 571.134770][ T7983] RSP: 002b:00007ffd76294dd0 EFLAGS: 00010202 [ 571.134778][ T7983] RAX: 0000000000000004 RBX: 00007ffd76294df0 RCX: 0000000000712d20 [ 571.134783][ T7983] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000003 [ 571.134788][ T7983] RBP: 0000000000714e80 R08: 0000000000006000 R09: 0000000000004000 [ 571.134794][ T7983] R10: 00007ffd76294ef0 R11: 0000000000000216 R12: 0000000000000003 [ 571.134799][ T7983] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000712cc0 [ 571.135174][ T7983] memory: usage 65812kB, limit 0kB, failcnt 71 [ 571.163742][ T7983] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 571.184485][ T7983] Memory cgroup stats for /syz2: [ 571.184570][ T7983] anon 57905152 [ 571.184570][ T7983] file 12288 [ 571.184570][ T7983] kernel_stack 983040 [ 571.184570][ T7983] slab 4304896 [ 571.184570][ T7983] sock 0 [ 571.184570][ T7983] shmem 86016 [ 571.184570][ T7983] file_mapped 135168 [ 571.184570][ T7983] file_dirty 135168 [ 571.184570][ T7983] file_writeback 0 [ 571.184570][ T7983] anon_thp 54525952 [ 571.184570][ T7983] inactive_anon 0 [ 571.184570][ T7983] active_anon 57835520 [ 571.184570][ T7983] inactive_file 135168 [ 571.184570][ T7983] active_file 135168 [ 571.184570][ T7983] unevictable 0 [ 571.184570][ T7983] slab_reclaimable 1216512 [ 571.184570][ T7983] slab_unreclaimable 3088384 [ 571.184570][ T7983] pgfault 61281 [ 571.184570][ T7983] pgmajfault 0 [ 571.184570][ T7983] workingset_refault 0 [ 571.184570][ T7983] workingset_activate 0 [ 571.184570][ T7983] workingset_nodereclaim 0 [ 571.184570][ T7983] pgrefill 0 [ 571.184570][ T7983] pgscan 0 [ 571.184570][ T7983] pgsteal 0 [ 571.202100][ T7983] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=755,uid=0 [ 571.209765][ T7983] Memory cgroup out of memory: Killed process 755 (syz-executor.2) total-vm:72704kB, anon-rss:2204kB, file-rss:34816kB, shmem-rss:0kB [ 571.220298][ T1057] oom_reaper: reaped process 755 (syz-executor.2), now anon-rss:0kB, file-rss:34688kB, shmem-rss:0kB [ 571.231793][ T7983] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 571.238434][ T7983] CPU: 1 PID: 7983 Comm: syz-executor.2 Not tainted 5.2.0+ #37 [ 571.249212][ T7983] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 571.249217][ T7983] Call Trace: [ 571.249233][ T7983] dump_stack+0x1d8/0x2f8 [ 571.249247][ T7983] dump_header+0xd8/0x970 [ 571.259613][ T7983] oom_kill_process+0xcd/0x320 [ 571.259644][ T7983] out_of_memory+0x5e1/0x8a0 [ 571.259662][ T7983] ? unregister_oom_notifier+0x20/0x20 [ 571.270559][ T7983] ? __kasan_check_read+0x11/0x20 [ 571.270575][ T7983] try_charge+0x134a/0x17b0 [ 571.270603][ T7983] ? __memcg_kmem_charge_memcg+0x180/0x180 [ 571.280472][ T7983] ? __lock_acquire+0x4750/0x4750 [ 571.280501][ T7983] ? rcu_lock_release+0x15/0x20 [ 571.290505][ T7983] ? get_mem_cgroup_from_mm+0x15e/0x170 [ 571.290515][ T7983] mem_cgroup_try_charge+0x216/0x560 [ 571.290545][ T7983] mem_cgroup_try_charge_delay+0x25/0xa0 [ 571.300045][ T7983] wp_page_copy+0x367/0x18c0 [ 571.300064][ T7983] ? rcu_lock_release+0x30/0x30 [ 571.300077][ T7983] ? __lock_acquire+0x4750/0x4750 [ 571.310165][ T7983] ? __kasan_check_read+0x11/0x20 [ 571.310173][ T7983] ? do_raw_spin_unlock+0x49/0x260 [ 571.310188][ T7983] do_wp_page+0x2c9/0x1ce0 [ 571.319772][ T7983] ? __rwlock_init+0x130/0x130 [ 571.319781][ T7983] ? count_memcg_event_mm+0x300/0x300 [ 571.319796][ T7983] handle_mm_fault+0x2bcf/0x6080 [ 571.329547][ T7983] ? finish_fault+0x230/0x230 [ 571.329564][ T7983] ? vmacache_find+0x251/0x5b0 [ 571.338612][ T7983] do_user_addr_fault+0x589/0xaf0 [ 571.346613][ T7983] __do_page_fault+0xd3/0x1f0 [ 571.372258][ T7983] do_page_fault+0x99/0xb0 [ 571.372270][ T7983] page_fault+0x39/0x40 [ 571.372279][ T7983] RIP: 0033:0x40702e [ 571.372291][ T7983] Code: 08 ff ff ff 8b 54 24 04 49 8b 37 31 c0 bf af e9 4b 00 e8 55 ac ff ff 8b 44 24 6c 49 8d 4f 60 ba 40 00 00 00 44 89 f6 44 89 e7 <41> 89 87 b4 00 00 00 48 8d 84 24 80 00 00 00 49 89 87 b8 00 00 00 [ 571.388207][ T7983] RSP: 002b:00007ffd76294dd0 EFLAGS: 00010202 [ 571.404122][ T7983] RAX: 0000000000000004 RBX: 00007ffd76294df0 RCX: 0000000000712d20 [ 571.404129][ T7983] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000003 [ 571.404134][ T7983] RBP: 0000000000714e80 R08: 0000000000006000 R09: 0000000000004000 [ 571.404140][ T7983] R10: 00007ffd76294ef0 R11: 0000000000000216 R12: 0000000000000003 [ 571.404145][ T7983] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000712cc0 [ 571.404335][ T7983] memory: usage 63644kB, limit 0kB, failcnt 77 [ 571.418282][ T7983] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 571.430118][ T7983] Memory cgroup stats for /syz2: [ 571.430193][ T7983] anon 55689216 [ 571.430193][ T7983] file 12288 [ 571.430193][ T7983] kernel_stack 983040 [ 571.430193][ T7983] slab 4304896 [ 571.430193][ T7983] sock 0 [ 571.430193][ T7983] shmem 86016 [ 571.430193][ T7983] file_mapped 135168 [ 571.430193][ T7983] file_dirty 135168 [ 571.430193][ T7983] file_writeback 0 [ 571.430193][ T7983] anon_thp 52428800 [ 571.430193][ T7983] inactive_anon 0 [ 571.430193][ T7983] active_anon 55619584 [ 571.430193][ T7983] inactive_file 135168 [ 571.430193][ T7983] active_file 135168 [ 571.430193][ T7983] unevictable 0 [ 571.430193][ T7983] slab_reclaimable 1216512 [ 571.430193][ T7983] slab_unreclaimable 3088384 [ 571.430193][ T7983] pgfault 61281 [ 571.430193][ T7983] pgmajfault 0 [ 571.430193][ T7983] workingset_refault 0 [ 571.430193][ T7983] workingset_activate 0 [ 571.430193][ T7983] workingset_nodereclaim 0 [ 571.430193][ T7983] pgrefill 0 [ 571.430193][ T7983] pgscan 0 [ 571.430193][ T7983] pgsteal 0 [ 571.533782][ T7983] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=730,uid=0 [ 571.558400][ T7983] Memory cgroup out of memory: Killed process 730 (syz-executor.2) total-vm:72704kB, anon-rss:2204kB, file-rss:34816kB, shmem-rss:0kB [ 571.578026][ T1057] oom_reaper: reaped process 730 (syz-executor.2), now anon-rss:0kB, file-rss:34688kB, shmem-rss:0kB [ 571.609446][ T7983] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 571.617821][ T7983] CPU: 1 PID: 7983 Comm: syz-executor.2 Not tainted 5.2.0+ #37 [ 571.628084][ T7983] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 571.628092][ T7983] Call Trace: [ 571.637941][ T7983] dump_stack+0x1d8/0x2f8 [ 571.648734][ T7983] dump_header+0xd8/0x970 [ 571.658932][ T7983] oom_kill_process+0xcd/0x320 [ 571.658944][ T7983] out_of_memory+0x5e1/0x8a0 [ 571.658955][ T7983] ? unregister_oom_notifier+0x20/0x20 [ 571.668826][ T7983] ? __kasan_check_read+0x11/0x20 [ 571.668840][ T7983] try_charge+0x134a/0x17b0 [ 571.668864][ T7983] ? __memcg_kmem_charge_memcg+0x180/0x180 [ 571.678963][ T7983] ? __lock_acquire+0x4750/0x4750 [ 571.678978][ T7983] ? rcu_lock_release+0x15/0x20 [ 571.678991][ T7983] ? get_mem_cgroup_from_mm+0x15e/0x170 [ 571.688145][ T7983] mem_cgroup_try_charge+0x216/0x560 [ 571.698437][ T7983] mem_cgroup_try_charge_delay+0x25/0xa0 [ 571.707855][ T7983] wp_page_copy+0x367/0x18c0 [ 571.717515][ T7983] ? rcu_lock_release+0x30/0x30 [ 571.726060][ T7983] ? __lock_acquire+0x4750/0x4750 [ 571.749549][ T7983] ? __kasan_check_read+0x11/0x20 [ 571.749558][ T7983] ? do_raw_spin_unlock+0x49/0x260 [ 571.749572][ T7983] do_wp_page+0x2c9/0x1ce0 [ 571.763587][ T7983] ? __rwlock_init+0x130/0x130 [ 571.763597][ T7983] ? count_memcg_event_mm+0x300/0x300 [ 571.763613][ T7983] handle_mm_fault+0x2bcf/0x6080 [ 571.779547][ T7983] ? finish_fault+0x230/0x230 [ 571.779564][ T7983] ? vmacache_find+0x251/0x5b0 [ 571.795477][ T7983] do_user_addr_fault+0x589/0xaf0 [ 571.795499][ T7983] __do_page_fault+0xd3/0x1f0 [ 571.808468][ T7983] do_page_fault+0x99/0xb0 [ 571.901831][ T7983] page_fault+0x39/0x40 [ 571.901840][ T7983] RIP: 0033:0x40702e [ 571.901850][ T7983] Code: 08 ff ff ff 8b 54 24 04 49 8b 37 31 c0 bf af e9 4b 00 e8 55 ac ff ff 8b 44 24 6c 49 8d 4f 60 ba 40 00 00 00 44 89 f6 44 89 e7 <41> 89 87 b4 00 00 00 48 8d 84 24 80 00 00 00 49 89 87 b8 00 00 00 [ 571.901859][ T7983] RSP: 002b:00007ffd76294dd0 EFLAGS: 00010202 [ 571.930727][ T7983] RAX: 0000000000000004 RBX: 00007ffd76294df0 RCX: 0000000000712d20 [ 571.930732][ T7983] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000003 [ 571.930738][ T7983] RBP: 0000000000714e80 R08: 0000000000006000 R09: 0000000000004000 [ 571.930743][ T7983] R10: 00007ffd76294ef0 R11: 0000000000000216 R12: 0000000000000003 [ 571.930748][ T7983] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000712cc0 [ 571.930996][ T7983] memory: usage 61312kB, limit 0kB, failcnt 83 [ 571.951541][ T7983] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 571.969165][ T7983] Memory cgroup stats for /syz2: [ 571.969252][ T7983] anon 53473280 [ 571.969252][ T7983] file 12288 [ 571.969252][ T7983] kernel_stack 917504 [ 571.969252][ T7983] slab 4304896 [ 571.969252][ T7983] sock 0 [ 571.969252][ T7983] shmem 86016 [ 571.969252][ T7983] file_mapped 135168 [ 571.969252][ T7983] file_dirty 135168 [ 571.969252][ T7983] file_writeback 0 [ 571.969252][ T7983] anon_thp 50331648 [ 571.969252][ T7983] inactive_anon 0 [ 571.969252][ T7983] active_anon 53403648 [ 571.969252][ T7983] inactive_file 135168 [ 571.969252][ T7983] active_file 135168 [ 571.969252][ T7983] unevictable 0 [ 571.969252][ T7983] slab_reclaimable 1216512 [ 571.969252][ T7983] slab_unreclaimable 3088384 [ 571.969252][ T7983] pgfault 61281 [ 571.969252][ T7983] pgmajfault 0 [ 571.969252][ T7983] workingset_refault 0 [ 571.969252][ T7983] workingset_activate 0 [ 571.969252][ T7983] workingset_nodereclaim 0 [ 571.969252][ T7983] pgrefill 0 [ 571.969252][ T7983] pgscan 0 [ 571.969252][ T7983] pgsteal 0 [ 571.976751][ T7983] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=1188,uid=0 [ 571.985897][ T7983] Memory cgroup out of memory: Killed process 1188 (syz-executor.2) total-vm:72572kB, anon-rss:2196kB, file-rss:34816kB, shmem-rss:0kB [ 572.002004][ T1057] oom_reaper: reaped process 1188 (syz-executor.2), now anon-rss:0kB, file-rss:34688kB, shmem-rss:0kB [ 572.026189][ T7983] Memory cgroup out of memory: Killed process 812 (syz-executor.2) total-vm:72572kB, anon-rss:2196kB, file-rss:34816kB, shmem-rss:0kB [ 572.033093][ T1057] oom_reaper: reaped process 812 (syz-executor.2), now anon-rss:0kB, file-rss:34688kB, shmem-rss:0kB [ 572.059625][ T7983] Memory cgroup out of memory: Killed process 703 (syz-executor.2) total-vm:72572kB, anon-rss:2196kB, file-rss:34816kB, shmem-rss:0kB [ 572.090409][ T1057] oom_reaper: reaped process 703 (syz-executor.2), now anon-rss:0kB, file-rss:34688kB, shmem-rss:0kB [ 572.136897][ T7983] Memory cgroup out of memory: Killed process 656 (syz-executor.2) total-vm:72572kB, anon-rss:2196kB, file-rss:34816kB, shmem-rss:0kB [ 572.149519][ T1057] oom_reaper: reaped process 656 (syz-executor.2), now anon-rss:0kB, file-rss:34688kB, shmem-rss:0kB [ 572.171589][ T7983] Memory cgroup out of memory: Killed process 622 (syz-executor.2) total-vm:72572kB, anon-rss:2196kB, file-rss:34816kB, shmem-rss:0kB [ 572.185721][ T1057] oom_reaper: reaped process 622 (syz-executor.2), now anon-rss:0kB, file-rss:34688kB, shmem-rss:0kB [ 572.197731][ T7983] Memory cgroup out of memory: Killed process 599 (syz-executor.2) total-vm:72572kB, anon-rss:2196kB, file-rss:34816kB, shmem-rss:0kB [ 572.295609][ T1057] oom_reaper: reaped process 599 (syz-executor.2), now anon-rss:0kB, file-rss:34688kB, shmem-rss:0kB [ 572.384157][ T7983] Memory cgroup out of memory: Killed process 554 (syz-executor.2) total-vm:72572kB, anon-rss:2196kB, file-rss:34816kB, shmem-rss:0kB [ 572.403995][ T1057] oom_reaper: reaped process 554 (syz-executor.2), now anon-rss:0kB, file-rss:34688kB, shmem-rss:0kB [ 572.448002][ T7983] Memory cgroup out of memory: Killed process 520 (syz-executor.2) total-vm:72572kB, anon-rss:2196kB, file-rss:34816kB, shmem-rss:0kB [ 572.472014][ T1057] oom_reaper: reaped process 520 (syz-executor.2), now anon-rss:0kB, file-rss:34688kB, shmem-rss:0kB [ 572.517401][ T1273] chnl_net:caif_netlink_parms(): no params data found [ 572.517718][ T7983] Memory cgroup out of memory: Killed process 487 (syz-executor.2) total-vm:72572kB, anon-rss:2196kB, file-rss:34816kB, shmem-rss:0kB [ 572.539040][ T1057] oom_reaper: reaped process 487 (syz-executor.2), now anon-rss:0kB, file-rss:34688kB, shmem-rss:0kB [ 572.575985][ T1273] bridge0: port 1(bridge_slave_0) entered blocking state [ 572.580371][ T7983] Memory cgroup out of memory: Killed process 455 (syz-executor.2) total-vm:72572kB, anon-rss:2196kB, file-rss:34816kB, shmem-rss:0kB [ 572.583115][ T1273] bridge0: port 1(bridge_slave_0) entered disabled state [ 572.598297][ T1057] oom_reaper: reaped process 455 (syz-executor.2), now anon-rss:0kB, file-rss:34688kB, shmem-rss:0kB [ 572.621790][ T1273] device bridge_slave_0 entered promiscuous mode [ 572.632978][ T1273] bridge0: port 2(bridge_slave_1) entered blocking state [ 572.634173][ T7983] Memory cgroup out of memory: Killed process 435 (syz-executor.2) total-vm:72572kB, anon-rss:2196kB, file-rss:34816kB, shmem-rss:0kB [ 572.640098][ T1273] bridge0: port 2(bridge_slave_1) entered disabled state [ 572.655220][ T1057] oom_reaper: reaped process 435 (syz-executor.2), now anon-rss:0kB, file-rss:34688kB, shmem-rss:0kB [ 572.661657][ T1273] device bridge_slave_1 entered promiscuous mode [ 572.675396][ T7983] Memory cgroup out of memory: Killed process 403 (syz-executor.2) total-vm:72572kB, anon-rss:2196kB, file-rss:34816kB, shmem-rss:0kB [ 572.693313][ T1057] oom_reaper: reaped process 403 (syz-executor.2), now anon-rss:0kB, file-rss:34688kB, shmem-rss:0kB [ 572.707143][ T7983] Memory cgroup out of memory: Killed process 372 (syz-executor.2) total-vm:72572kB, anon-rss:2196kB, file-rss:34816kB, shmem-rss:0kB [ 572.721673][ T1057] oom_reaper: reaped process 372 (syz-executor.2), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 572.747563][ T1273] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 572.751048][ T7983] Memory cgroup out of memory: Killed process 360 (syz-executor.2) total-vm:72572kB, anon-rss:2196kB, file-rss:34816kB, shmem-rss:0kB [ 572.770577][ T1273] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 572.788580][ T7983] Memory cgroup out of memory: Killed process 340 (syz-executor.2) total-vm:72572kB, anon-rss:2196kB, file-rss:34816kB, shmem-rss:0kB [ 572.803805][ T1057] oom_reaper: reaped process 340 (syz-executor.2), now anon-rss:0kB, file-rss:34688kB, shmem-rss:0kB [ 572.811449][ T7983] Memory cgroup out of memory: Killed process 316 (syz-executor.2) total-vm:72572kB, anon-rss:2196kB, file-rss:34816kB, shmem-rss:0kB [ 572.830589][ T1057] oom_reaper: reaped process 316 (syz-executor.2), now anon-rss:0kB, file-rss:34688kB, shmem-rss:0kB [ 572.849673][ T1273] team0: Port device team_slave_0 added [ 572.858042][ T1273] team0: Port device team_slave_1 added [ 572.877073][ T7983] Memory cgroup out of memory: Killed process 32755 (syz-executor.2) total-vm:72572kB, anon-rss:2196kB, file-rss:34816kB, shmem-rss:0kB [ 572.891900][ T1057] oom_reaper: reaped process 32755 (syz-executor.2), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 572.898755][ T7983] Memory cgroup out of memory: Killed process 32733 (syz-executor.2) total-vm:72572kB, anon-rss:2196kB, file-rss:34816kB, shmem-rss:0kB [ 572.917924][ T1057] oom_reaper: reaped process 32733 (syz-executor.2), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 572.924139][ T7983] Memory cgroup out of memory: Killed process 32691 (syz-executor.2) total-vm:72572kB, anon-rss:2196kB, file-rss:34816kB, shmem-rss:0kB [ 572.944868][ T1273] device hsr_slave_0 entered promiscuous mode [ 572.958316][ T7983] Memory cgroup out of memory: Killed process 32656 (syz-executor.2) total-vm:72572kB, anon-rss:2196kB, file-rss:34816kB, shmem-rss:0kB [ 572.972680][ T1057] oom_reaper: reaped process 32656 (syz-executor.2), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 572.974979][ T7983] Memory cgroup out of memory: Killed process 32620 (syz-executor.2) total-vm:72572kB, anon-rss:2196kB, file-rss:34816kB, shmem-rss:0kB [ 572.984158][ T1273] device hsr_slave_1 entered promiscuous mode [ 573.018451][ T7983] Memory cgroup out of memory: Killed process 32595 (syz-executor.2) total-vm:72572kB, anon-rss:2196kB, file-rss:34816kB, shmem-rss:0kB [ 573.032673][ T1273] debugfs: Directory 'hsr0' with parent '/' already present! [ 573.042297][ T7983] Memory cgroup out of memory: Killed process 32492 (syz-executor.2) total-vm:72572kB, anon-rss:2196kB, file-rss:34816kB, shmem-rss:0kB [ 573.056592][ T1057] oom_reaper: reaped process 32492 (syz-executor.2), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 573.065963][ T7983] Memory cgroup out of memory: Killed process 32464 (syz-executor.2) total-vm:72572kB, anon-rss:2196kB, file-rss:34816kB, shmem-rss:0kB [ 573.082545][ T1057] oom_reaper: reaped process 32464 (syz-executor.2), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 573.113370][ T7983] Memory cgroup out of memory: Killed process 7983 (syz-executor.2) total-vm:72440kB, anon-rss:104kB, file-rss:35776kB, shmem-rss:0kB [ 573.128070][ T1057] oom_reaper: reaped process 7983 (syz-executor.2), now anon-rss:0kB, file-rss:34880kB, shmem-rss:0kB [ 573.181726][ T1273] 8021q: adding VLAN 0 to HW filter on device bond0 [ 573.199633][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 573.207291][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 573.217843][ T1273] 8021q: adding VLAN 0 to HW filter on device team0 [ 573.416116][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 573.424757][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 573.433312][ T1277] bridge0: port 1(bridge_slave_0) entered blocking state [ 573.440469][ T1277] bridge0: port 1(bridge_slave_0) entered forwarding state [ 573.448141][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 573.456597][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 573.464829][ T1277] bridge0: port 2(bridge_slave_1) entered blocking state [ 573.471919][ T1277] bridge0: port 2(bridge_slave_1) entered forwarding state [ 573.479457][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 573.502680][ T1273] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 573.513338][ T1273] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 573.556345][ T1273] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 573.573602][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 573.581414][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 573.589856][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 573.598198][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 573.606565][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 573.614984][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 573.623322][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 573.631555][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 573.639827][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 573.648117][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 573.663792][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 573.671703][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 573.812572][ T1288] oom_kill_process: 24 callbacks suppressed [ 573.812598][ T1288] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 573.828881][ T1288] CPU: 0 PID: 1288 Comm: syz-executor.3 Not tainted 5.2.0+ #37 [ 573.836419][ T1288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 573.846461][ T1288] Call Trace: [ 573.849747][ T1288] dump_stack+0x1d8/0x2f8 [ 573.854098][ T1288] dump_header+0xd8/0x970 [ 573.858429][ T1288] oom_kill_process+0xcd/0x320 [ 573.863183][ T1288] out_of_memory+0x5e1/0x8a0 [ 573.867762][ T1288] ? unregister_oom_notifier+0x20/0x20 [ 573.873228][ T1288] ? memset_erms+0xb/0x10 [ 573.877547][ T1288] memory_max_write+0x537/0x6a0 [ 573.882432][ T1288] ? lockdep_hardirqs_on+0x3c5/0x7d0 [ 573.887735][ T1288] ? memory_max_show+0xa0/0xa0 [ 573.892495][ T1288] ? rcu_irq_exit+0xe3/0x260 [ 573.897080][ T1288] ? memory_max_show+0xa0/0xa0 [ 573.901840][ T1288] ? cgroup_file_write+0x1a6/0x6e0 [ 573.906946][ T1288] ? cgroup_file_write+0x267/0x6e0 [ 573.912053][ T1288] ? memory_max_show+0xa0/0xa0 [ 573.916802][ T1288] cgroup_file_write+0x27b/0x6e0 [ 573.921733][ T1288] ? cgroup_seqfile_stop+0xc0/0xc0 [ 573.926838][ T1288] ? cgroup_seqfile_stop+0xc0/0xc0 [ 573.931938][ T1288] kernfs_fop_write+0x3e4/0x4f0 [ 573.936783][ T1288] ? kernfs_fop_read+0x580/0x580 [ 573.941714][ T1288] __vfs_write+0xf9/0x7d0 [ 573.946062][ T1288] ? __lock_acquire+0x4750/0x4750 [ 573.951083][ T1288] ? __kernel_write+0x350/0x350 [ 573.955934][ T1288] ? trace_lock_acquire+0x154/0x1b0 [ 573.961153][ T1288] ? __sb_start_write+0x39c/0x440 [ 573.966281][ T1288] ? __kasan_check_read+0x11/0x20 [ 573.971295][ T1288] vfs_write+0x275/0x590 [ 573.975539][ T1288] ksys_write+0x16b/0x2a0 [ 573.979859][ T1288] ? __ia32_sys_read+0x90/0x90 [ 573.984619][ T1288] ? retint_kernel+0x10/0x10 [ 573.989232][ T1288] __x64_sys_write+0x7b/0x90 [ 573.993817][ T1288] do_syscall_64+0xfe/0x140 [ 573.998320][ T1288] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 574.004198][ T1288] RIP: 0033:0x459819 [ 574.008084][ T1288] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 574.027664][ T1288] RSP: 002b:00007f5d5e265c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 574.036056][ T1288] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459819 [ 574.044028][ T1288] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 574.051988][ T1288] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 574.059942][ T1288] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f5d5e2666d4 [ 574.067920][ T1288] R13: 00000000004c9774 R14: 00000000004e0b70 R15: 00000000ffffffff [ 574.076044][ T1288] memory: usage 5532kB, limit 0kB, failcnt 22 [ 574.082234][ T1288] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 574.089319][ T1288] Memory cgroup stats for /syz3: [ 574.089530][ T1288] anon 2093056 [ 574.089530][ T1288] file 0 [ 574.089530][ T1288] kernel_stack 0 [ 574.089530][ T1288] slab 3158016 [ 574.089530][ T1288] sock 0 [ 574.089530][ T1288] shmem 0 [ 574.089530][ T1288] file_mapped 0 [ 574.089530][ T1288] file_dirty 135168 [ 574.089530][ T1288] file_writeback 0 [ 574.089530][ T1288] anon_thp 2097152 [ 574.089530][ T1288] inactive_anon 0 [ 574.089530][ T1288] active_anon 2154496 [ 574.089530][ T1288] inactive_file 0 [ 574.089530][ T1288] active_file 0 [ 574.089530][ T1288] unevictable 0 [ 574.089530][ T1288] slab_reclaimable 1351680 [ 574.089530][ T1288] slab_unreclaimable 1806336 [ 574.089530][ T1288] pgfault 77781 [ 574.089530][ T1288] pgmajfault 0 [ 574.089530][ T1288] workingset_refault 0 [ 574.089530][ T1288] workingset_activate 0 [ 574.089530][ T1288] workingset_nodereclaim 0 [ 574.089530][ T1288] pgrefill 0 [ 574.089530][ T1288] pgscan 0 [ 574.089530][ T1288] pgsteal 0 [ 574.089530][ T1288] pgactivate 0 [ 574.184285][ T1288] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=1286,uid=0 [ 574.200409][ T1288] Memory cgroup out of memory: Killed process 1286 (syz-executor.3) total-vm:72708kB, anon-rss:2136kB, file-rss:34816kB, shmem-rss:0kB [ 574.216340][ T1057] oom_reaper: reaped process 1286 (syz-executor.3), now anon-rss:0kB, file-rss:34848kB, shmem-rss:0kB 09:55:55 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r2 = socket$kcm(0x10, 0x3, 0x0) setsockopt$sock_attach_bpf(r2, 0x10e, 0x4, &(0x7f0000000000)=r0, 0x4) r3 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x40) openat$cgroup_ro(r3, &(0x7f0000000140)='cpuset.effective_cpus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r4 = getpid() perf_event_open(0x0, r4, 0x3, 0xffffffffffffffff, 0x1) r5 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) gettid() r6 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r6, &(0x7f0000000540)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @ipv4}, 0x80, 0x0}, 0x24000001) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000080)='cgroup.type\x00', 0x2, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f00000002c0)='threaded\x00', 0x9) write$cgroup_int(r5, 0x0, 0x0) 09:55:55 executing program 1: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x7) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) 09:55:55 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x78, 0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @dev}, 0x10) semget(0x0, 0x0, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) recvmmsg(0xffffffffffffffff, 0x0, 0x103, 0x2000001000, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 09:55:55 executing program 4: lstat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)) fstat(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xbb6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x80000000000003, 0x8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'ip6_vti0\x00', 0x0}) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000380)=0xd95, 0x4) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) 09:55:55 executing program 5: syz_mount_image$jfs(&(0x7f00000001c0)='jfs\x00', &(0x7f0000000280)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)={[{@errors_remount='errors=remount-ro'}, {@noquota='noquota'}, {@integrity='integrity'}], [], 0xfdfdffff}) 09:55:55 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x2, 0x9, 0x0, 0xffffffffffffffff, 0x2}, 0x10}}, 0x0) [ 574.382400][ T1273] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 574.392607][ T1273] CPU: 0 PID: 1273 Comm: syz-executor.3 Not tainted 5.2.0+ #37 [ 574.400140][ T1273] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 574.410181][ T1273] Call Trace: [ 574.413463][ T1273] dump_stack+0x1d8/0x2f8 [ 574.417813][ T1273] dump_header+0xd8/0x970 [ 574.422140][ T1273] oom_kill_process+0xcd/0x320 [ 574.426899][ T1273] out_of_memory+0x5e1/0x8a0 [ 574.431523][ T1273] ? unregister_oom_notifier+0x20/0x20 [ 574.437030][ T1273] ? __kasan_check_read+0x11/0x20 [ 574.442051][ T1273] try_charge+0x134a/0x17b0 [ 574.446567][ T1273] ? __memcg_kmem_charge_memcg+0x180/0x180 [ 574.452375][ T1273] ? __lock_acquire+0x4750/0x4750 [ 574.457407][ T1273] ? rcu_lock_release+0x15/0x20 [ 574.462250][ T1273] ? get_mem_cgroup_from_mm+0x15e/0x170 [ 574.462261][ T1273] mem_cgroup_try_charge+0x216/0x560 [ 574.462276][ T1273] mem_cgroup_try_charge_delay+0x25/0xa0 [ 574.462288][ T1273] wp_page_copy+0x367/0x18c0 [ 574.462310][ T1273] ? rcu_lock_release+0x30/0x30 [ 574.473134][ T1273] ? __lock_acquire+0x4750/0x4750 [ 574.473147][ T1273] ? __kasan_check_read+0x11/0x20 [ 574.473156][ T1273] ? do_raw_spin_unlock+0x49/0x260 [ 574.473169][ T1273] do_wp_page+0x2c9/0x1ce0 [ 574.473196][ T1273] ? __rwlock_init+0x130/0x130 [ 574.473205][ T1273] ? count_memcg_event_mm+0x300/0x300 [ 574.473221][ T1273] handle_mm_fault+0x2bcf/0x6080 [ 574.473243][ T1273] ? finish_fault+0x230/0x230 [ 574.473261][ T1273] ? vmacache_find+0x566/0x5b0 [ 574.473269][ T1273] ? vmacache_update+0xb7/0x120 [ 574.473284][ T1273] do_user_addr_fault+0x589/0xaf0 [ 574.473314][ T1273] __do_page_fault+0xd3/0x1f0 [ 574.473323][ T1273] do_page_fault+0x99/0xb0 [ 574.473334][ T1273] page_fault+0x39/0x40 [ 574.473343][ T1273] RIP: 0033:0x4308f6 [ 574.473353][ T1273] Code: 1f 44 00 00 48 29 e8 31 c9 48 81 fb 40 56 71 00 0f 95 c1 48 8d 34 2a 48 83 cd 01 48 c1 e1 02 48 83 c8 01 48 09 e9 48 89 73 58 <48> 89 4a 08 48 89 46 08 48 8d 4a 10 8b 05 6c 46 64 00 85 c0 0f 84 [ 574.473358][ T1273] RSP: 002b:00007ffe95f15140 EFLAGS: 00010206 [ 574.473366][ T1273] RAX: 0000000000019691 RBX: 0000000000715640 RCX: 0000000000008041 [ 574.473372][ T1273] RDX: 0000555555ad0930 RSI: 0000555555ad8970 RDI: 0000000000000003 [ 574.473378][ T1273] RBP: 0000000000008041 R08: 0000000000000001 R09: 0000555555acf940 [ 574.473396][ T1273] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000715698 [ 574.473402][ T1273] R13: 0000000000715698 R14: 0000000000000000 R15: 0000000000002710 [ 574.473476][ T1273] memory: usage 3200kB, limit 0kB, failcnt 39 [ 574.631368][ T1273] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 574.638230][ T1273] Memory cgroup stats for /syz3: [ 574.638325][ T1273] anon 0 [ 574.638325][ T1273] file 0 [ 574.638325][ T1273] kernel_stack 0 [ 574.638325][ T1273] slab 3158016 [ 574.638325][ T1273] sock 0 [ 574.638325][ T1273] shmem 0 [ 574.638325][ T1273] file_mapped 0 [ 574.638325][ T1273] file_dirty 135168 [ 574.638325][ T1273] file_writeback 0 [ 574.638325][ T1273] anon_thp 0 [ 574.638325][ T1273] inactive_anon 0 [ 574.638325][ T1273] active_anon 0 [ 574.638325][ T1273] inactive_file 0 [ 574.638325][ T1273] active_file 0 [ 574.638325][ T1273] unevictable 0 [ 574.638325][ T1273] slab_reclaimable 1351680 [ 574.638325][ T1273] slab_unreclaimable 1806336 [ 574.638325][ T1273] pgfault 77781 [ 574.638325][ T1273] pgmajfault 0 [ 574.638325][ T1273] workingset_refault 0 [ 574.638325][ T1273] workingset_activate 0 [ 574.638325][ T1273] workingset_nodereclaim 0 [ 574.638325][ T1273] pgrefill 0 [ 574.638325][ T1273] pgscan 0 [ 574.638325][ T1273] pgsteal 0 [ 574.638325][ T1273] pgactivate 0 [ 574.638325][ T1273] pgdeactivate 0 09:55:56 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6100) truncate(&(0x7f00000000c0)='./bus\x00', 0x800) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x22, &(0x7f0000000040), &(0x7f0000000080)=0x4) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000100)={0x0, {{0x2, 0x0, @loopback}}}, 0x88) r2 = inotify_init() dup3(r2, r1, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000300)) syz_open_procfs(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) socket$packet(0x11, 0x2, 0x300) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f0000000040)=0x74, 0x4) bind$inet(r3, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x1000000004e23, @local}, 0x10) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000)=0xda8, 0x4) write$binfmt_elf64(r3, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a) recvfrom(r3, &(0x7f0000000640)=""/69, 0x8e4ad9a73ceba073, 0x0, &(0x7f00000005c0)=@pppoe={0x18, 0x0, {0x0, @local, 'bridge0\x00'}}, 0xfdd3) lseek(0xffffffffffffffff, 0x0, 0x2) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000fffffffe) r4 = socket$inet6(0xa, 0x400000000003, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r4) request_key(&(0x7f0000000100)='rxrpc\x00', &(0x7f00000001c0)={'syz', 0x1}, &(0x7f0000000200)='ppp0)+eth1\x00', 0xfffffffffffffffd) [ 574.664383][ T1296] jfs: Unrecognized mount option "ÿ" or missing value [ 574.734159][ T1273] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=1273,uid=0 [ 574.734232][ T1273] Memory cgroup out of memory: Killed process 1273 (syz-executor.3) total-vm:72444kB, anon-rss:68kB, file-rss:34832kB, shmem-rss:0kB [ 574.771227][ T1057] oom_reaper: reaped process 1273 (syz-executor.3), now anon-rss:0kB, file-rss:33936kB, shmem-rss:0kB 09:55:56 executing program 4: lstat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)) fstat(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xbb6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x80000000000003, 0x8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'ip6_vti0\x00', 0x0}) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000380)=0xd95, 0x4) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) [ 575.012767][ T1296] jfs: Unrecognized mount option "ÿ" or missing value 09:55:56 executing program 5: syz_mount_image$jfs(&(0x7f00000001c0)='jfs\x00', &(0x7f0000000280)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)={[{@errors_remount='errors=remount-ro'}, {@noquota='noquota'}, {@integrity='integrity'}], [], 0xfdffffff}) [ 575.139797][ T1304] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 575.150083][ T1304] CPU: 0 PID: 1304 Comm: syz-executor.1 Not tainted 5.2.0+ #37 [ 575.157619][ T1304] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 575.167667][ T1304] Call Trace: [ 575.170995][ T1304] dump_stack+0x1d8/0x2f8 [ 575.175328][ T1304] dump_header+0xd8/0x970 [ 575.179657][ T1304] oom_kill_process+0xcd/0x320 [ 575.184512][ T1304] out_of_memory+0x5e1/0x8a0 [ 575.189110][ T1304] ? unregister_oom_notifier+0x20/0x20 [ 575.194568][ T1304] ? __kasan_check_read+0x11/0x20 [ 575.199599][ T1304] try_charge+0x134a/0x17b0 [ 575.204116][ T1304] ? __memcg_kmem_charge_memcg+0x180/0x180 [ 575.209932][ T1304] ? __lock_acquire+0x4750/0x4750 [ 575.214971][ T1304] ? rcu_lock_release+0x15/0x20 [ 575.219817][ T1304] ? get_mem_cgroup_from_mm+0x15e/0x170 [ 575.225345][ T1304] mem_cgroup_try_charge+0x216/0x560 [ 575.230614][ T1304] mem_cgroup_try_charge_delay+0x25/0xa0 [ 575.236227][ T1304] handle_mm_fault+0x31f3/0x6080 [ 575.241141][ T1304] ? do_mprotect_pkey+0x496/0x980 [ 575.246169][ T1304] ? finish_fault+0x230/0x230 [ 575.250833][ T1304] ? vmacache_find+0x566/0x5b0 [ 575.255586][ T1304] ? vmacache_update+0xb7/0x120 [ 575.260436][ T1304] do_user_addr_fault+0x589/0xaf0 [ 575.265449][ T1304] __do_page_fault+0xd3/0x1f0 [ 575.270119][ T1304] do_page_fault+0x99/0xb0 [ 575.274521][ T1304] page_fault+0x39/0x40 [ 575.278906][ T1304] RIP: 0033:0x45c1cd [ 575.282778][ T1304] Code: 5b 5d f3 c3 66 0f 1f 84 00 00 00 00 00 48 c7 c0 ea ff ff ff 48 85 ff 0f 84 30 8e fb ff 48 85 f6 0f 84 27 8e fb ff 48 83 ee 10 <48> 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 [ 575.302370][ T1304] RSP: 002b:00007ffcb496ec28 EFLAGS: 00010202 [ 575.308408][ T1304] RAX: ffffffffffffffea RBX: 00007f6773dfe700 RCX: 00007f6773dfe700 [ 575.316355][ T1304] RDX: 00000000003d0f00 RSI: 00007f6773dfddb0 RDI: 0000000000410550 [ 575.324302][ T1304] RBP: 00007ffcb496ee40 R08: 00007f6773dfe9d0 R09: 00007f6773dfe700 [ 575.332258][ T1304] R10: 00007f6773dfddc0 R11: 0000000000000246 R12: 0000000000000000 [ 575.340217][ T1304] R13: 00007ffcb496ecdf R14: 00007f6773dfe9c0 R15: 000000000075c07c [ 575.348536][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 575.348598][ T1304] memory: usage 307204kB, limit 307200kB, failcnt 212 [ 575.354343][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 575.361075][ T1304] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 575.361080][ T1304] Memory cgroup stats for /syz1: [ 575.361177][ T1304] anon 279904256 [ 575.361177][ T1304] file 122880 [ 575.361177][ T1304] kernel_stack 4259840 [ 575.361177][ T1304] slab 11632640 [ 575.361177][ T1304] sock 0 [ 575.361177][ T1304] shmem 131072 [ 575.361177][ T1304] file_mapped 0 [ 575.361177][ T1304] file_dirty 0 [ 575.361177][ T1304] file_writeback 0 [ 575.361177][ T1304] anon_thp 266338304 [ 575.361177][ T1304] inactive_anon 135168 [ 575.361177][ T1304] active_anon 279904256 [ 575.361177][ T1304] inactive_file 135168 [ 575.361177][ T1304] active_file 8192 [ 575.361177][ T1304] unevictable 0 [ 575.361177][ T1304] slab_reclaimable 3108864 [ 575.361177][ T1304] slab_unreclaimable 8523776 [ 575.361177][ T1304] pgfault 77748 [ 575.361177][ T1304] pgmajfault 0 [ 575.361177][ T1304] workingset_refault 0 [ 575.361177][ T1304] workingset_activate 0 [ 575.361177][ T1304] workingset_nodereclaim 0 [ 575.361177][ T1304] pgrefill 101 [ 575.361177][ T1304] pgscan 98 [ 575.361177][ T1304] pgsteal 85 [ 575.366872][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 575.373666][ T1304] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=28204,uid=0 [ 575.378616][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 575.467425][ T1304] Memory cgroup out of memory: Killed process 28204 (syz-executor.1) total-vm:72572kB, anon-rss:4244kB, file-rss:35792kB, shmem-rss:0kB [ 575.510063][ T1057] oom_reaper: reaped process 28204 (syz-executor.1), now anon-rss:0kB, file-rss:34832kB, shmem-rss:0kB [ 575.781039][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 575.786849][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 575.792677][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 575.798450][ C1] protocol 88fb is buggy, dev hsr_slave_1 09:55:57 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x78, 0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @dev}, 0x10) semget(0x0, 0x0, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) recvmmsg(0xffffffffffffffff, 0x0, 0x103, 0x2000001000, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) [ 575.871429][ T1319] jfs: Unrecognized mount option "ÿ" or missing value 09:55:57 executing program 4: lstat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)) fstat(0xffffffffffffff9c, &(0x7f0000000440)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xbb6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x80000000000003, 0x8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'ip6_vti0\x00', 0x0}) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000380)=0xd95, 0x4) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) [ 575.953905][ T1319] jfs: Unrecognized mount option "ÿ" or missing value 09:55:57 executing program 5: syz_mount_image$jfs(&(0x7f00000001c0)='jfs\x00', &(0x7f0000000280)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)={[{@errors_remount='errors=remount-ro'}, {@noquota='noquota'}, {@integrity='integrity'}], [], 0xfeffffff}) [ 576.204802][ T1333] jfs: Unrecognized mount option "ÿ" or missing value [ 576.293595][ T1333] jfs: Unrecognized mount option "ÿ" or missing value 09:55:58 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r2 = socket$kcm(0x10, 0x3, 0x0) setsockopt$sock_attach_bpf(r2, 0x10e, 0x4, &(0x7f0000000000)=r0, 0x4) r3 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x40) openat$cgroup_ro(r3, &(0x7f0000000140)='cpuset.effective_cpus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r4 = getpid() perf_event_open(0x0, r4, 0x3, 0xffffffffffffffff, 0x1) r5 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) gettid() r6 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r6, &(0x7f0000000540)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @ipv4}, 0x80, 0x0}, 0x24000001) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000080)='cgroup.type\x00', 0x2, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f00000002c0)='threaded\x00', 0x9) write$cgroup_int(r5, 0x0, 0x0) 09:55:58 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6100) truncate(&(0x7f00000000c0)='./bus\x00', 0x800) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x22, &(0x7f0000000040), &(0x7f0000000080)=0x4) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000100)={0x0, {{0x2, 0x0, @loopback}}}, 0x88) r2 = inotify_init() dup3(r2, r1, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000300)) syz_open_procfs(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) socket$packet(0x11, 0x2, 0x300) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f0000000040)=0x74, 0x4) bind$inet(r3, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x1000000004e23, @local}, 0x10) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000)=0xda8, 0x4) write$binfmt_elf64(r3, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a) recvfrom(r3, &(0x7f0000000640)=""/69, 0x8e4ad9a73ceba073, 0x0, &(0x7f00000005c0)=@pppoe={0x18, 0x0, {0x0, @local, 'bridge0\x00'}}, 0xfdd3) lseek(0xffffffffffffffff, 0x0, 0x2) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000fffffffe) r4 = socket$inet6(0xa, 0x400000000003, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r4) request_key(&(0x7f0000000100)='rxrpc\x00', &(0x7f00000001c0)={'syz', 0x1}, &(0x7f0000000200)='ppp0)+eth1\x00', 0xfffffffffffffffd) 09:55:58 executing program 5: syz_mount_image$jfs(&(0x7f00000001c0)='jfs\x00', &(0x7f0000000280)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)={[{@errors_remount='errors=remount-ro'}, {@noquota='noquota'}, {@integrity='integrity'}], [], 0xff0f0000}) 09:55:58 executing program 4: lstat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)) fstat(0xffffffffffffff9c, &(0x7f0000000440)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xbb6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x80000000000003, 0x8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'ip6_vti0\x00', 0x0}) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000380)=0xd95, 0x4) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) 09:55:58 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x78, 0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @dev}, 0x10) semget(0x0, 0x0, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) recvmmsg(0xffffffffffffffff, 0x0, 0x103, 0x2000001000, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) [ 576.791888][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 576.797944][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 577.265761][ T1368] IPVS: ftp: loaded support on port[0] = 21 [ 577.625827][ T1368] chnl_net:caif_netlink_parms(): no params data found [ 577.732510][ T1368] bridge0: port 1(bridge_slave_0) entered blocking state [ 577.739613][ T1368] bridge0: port 1(bridge_slave_0) entered disabled state [ 577.747152][ T1368] device bridge_slave_0 entered promiscuous mode [ 577.842608][ T1368] bridge0: port 2(bridge_slave_1) entered blocking state [ 577.850105][ T1368] bridge0: port 2(bridge_slave_1) entered disabled state [ 577.857765][ T1368] device bridge_slave_1 entered promiscuous mode [ 577.875237][ T1368] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 577.962411][ T1368] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 577.981580][ T1368] team0: Port device team_slave_0 added [ 577.988448][ T1368] team0: Port device team_slave_1 added [ 578.040744][ T1368] device hsr_slave_0 entered promiscuous mode [ 578.098958][ T1368] device hsr_slave_1 entered promiscuous mode [ 578.168875][ T1368] debugfs: Directory 'hsr0' with parent '/' already present! [ 578.179016][T28257] device bridge_slave_1 left promiscuous mode [ 578.185691][T28257] bridge0: port 2(bridge_slave_1) entered disabled state [ 578.232112][T28257] device bridge_slave_0 left promiscuous mode [ 578.238338][T28257] bridge0: port 1(bridge_slave_0) entered disabled state [ 579.919627][T28257] device hsr_slave_0 left promiscuous mode [ 579.979583][T28257] device hsr_slave_1 left promiscuous mode [ 580.028860][T28257] team0 (unregistering): Port device team_slave_1 removed [ 580.041790][T28257] team0 (unregistering): Port device team_slave_0 removed [ 580.052830][T28257] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 580.103470][T28257] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 580.182917][T28257] bond0 (unregistering): Released all slaves [ 580.298133][ T1368] bridge0: port 2(bridge_slave_1) entered blocking state [ 580.305206][ T1368] bridge0: port 2(bridge_slave_1) entered forwarding state [ 580.312603][ T1368] bridge0: port 1(bridge_slave_0) entered blocking state [ 580.319730][ T1368] bridge0: port 1(bridge_slave_0) entered forwarding state [ 580.330859][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 580.338479][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 580.378716][ T1368] 8021q: adding VLAN 0 to HW filter on device bond0 [ 580.431163][ T1153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 580.438896][ T1153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 580.449340][ T1368] 8021q: adding VLAN 0 to HW filter on device team0 [ 580.464785][ T1153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 580.473733][ T1153] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 580.482123][ T1153] bridge0: port 1(bridge_slave_0) entered blocking state [ 580.489204][ T1153] bridge0: port 1(bridge_slave_0) entered forwarding state [ 580.522268][ T1368] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 580.532654][ T1368] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 580.550358][ T1153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 580.559052][ T1153] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 580.567369][ T1153] bridge0: port 2(bridge_slave_1) entered blocking state [ 580.574470][ T1153] bridge0: port 2(bridge_slave_1) entered forwarding state [ 580.582552][ T1153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 580.591146][ T1153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 580.599726][ T1153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 580.608301][ T1153] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 580.616688][ T1153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 580.625298][ T1153] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 580.633704][ T1153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 580.642053][ T1153] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 580.650546][ T1153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 580.658886][ T1153] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 580.675341][ T1153] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 580.683396][ T1153] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 580.695847][ T1368] 8021q: adding VLAN 0 to HW filter on device batadv0 09:56:02 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x20000000, &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x5004, 0x0) mount$bpf(0x20000000, &(0x7f00000004c0)='./file0/file0\x00', 0x0, 0x588e, 0x0) mount$bpf(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='bpf\x00', 0x1000004, 0x0) 09:56:02 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r2 = socket$kcm(0x10, 0x3, 0x0) setsockopt$sock_attach_bpf(r2, 0x10e, 0x4, &(0x7f0000000000)=r0, 0x4) r3 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x40) openat$cgroup_ro(r3, &(0x7f0000000140)='cpuset.effective_cpus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r4 = getpid() perf_event_open(0x0, r4, 0x3, 0xffffffffffffffff, 0x1) r5 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) gettid() r6 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r6, &(0x7f0000000540)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @ipv4}, 0x80, 0x0}, 0x24000001) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000080)='cgroup.type\x00', 0x2, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f00000002c0)='threaded\x00', 0x9) write$cgroup_int(r5, 0x0, 0x0) 09:56:02 executing program 5: syz_mount_image$jfs(&(0x7f00000001c0)='jfs\x00', &(0x7f0000000280)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)={[{@errors_remount='errors=remount-ro'}, {@noquota='noquota'}, {@integrity='integrity'}], [], 0xffefffff}) 09:56:02 executing program 4: lstat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)) fstat(0xffffffffffffff9c, &(0x7f0000000440)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xbb6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x80000000000003, 0x8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'ip6_vti0\x00', 0x0}) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000380)=0xd95, 0x4) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) 09:56:02 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6100) truncate(&(0x7f00000000c0)='./bus\x00', 0x800) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x22, &(0x7f0000000040), &(0x7f0000000080)=0x4) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000100)={0x0, {{0x2, 0x0, @loopback}}}, 0x88) r2 = inotify_init() dup3(r2, r1, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000300)) syz_open_procfs(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) socket$packet(0x11, 0x2, 0x300) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f0000000040)=0x74, 0x4) bind$inet(r3, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x1000000004e23, @local}, 0x10) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000)=0xda8, 0x4) write$binfmt_elf64(r3, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a) recvfrom(r3, &(0x7f0000000640)=""/69, 0x8e4ad9a73ceba073, 0x0, &(0x7f00000005c0)=@pppoe={0x18, 0x0, {0x0, @local, 'bridge0\x00'}}, 0xfdd3) lseek(0xffffffffffffffff, 0x0, 0x2) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000fffffffe) r4 = socket$inet6(0xa, 0x400000000003, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r4) request_key(&(0x7f0000000100)='rxrpc\x00', &(0x7f00000001c0)={'syz', 0x1}, &(0x7f0000000200)='ppp0)+eth1\x00', 0xfffffffffffffffd) 09:56:02 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x78, 0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @dev}, 0x10) semget(0x0, 0x0, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) recvmmsg(0xffffffffffffffff, 0x0, 0x103, 0x2000001000, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x31c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) [ 581.069606][ T1384] jfs: Unrecognized mount option "ÿ" or missing value [ 581.088868][ C0] net_ratelimit: 2 callbacks suppressed [ 581.088874][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 581.100217][ C0] protocol 88fb is buggy, dev hsr_slave_1 09:56:02 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f0000000540)=[{&(0x7f00000003c0)=""/176, 0xb0}], 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000100)) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)) [ 581.207590][ T1384] jfs: Unrecognized mount option "ÿ" or missing value 09:56:02 executing program 5: syz_mount_image$jfs(&(0x7f00000001c0)='jfs\x00', &(0x7f0000000280)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)={[{@errors_remount='errors=remount-ro'}, {@noquota='noquota'}, {@integrity='integrity'}], [], 0xffff0000}) [ 581.588843][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 581.594693][ C1] protocol 88fb is buggy, dev hsr_slave_1 09:56:03 executing program 2: [ 581.668842][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 581.674680][ C1] protocol 88fb is buggy, dev hsr_slave_1 09:56:03 executing program 5: syz_mount_image$jfs(&(0x7f00000001c0)='jfs\x00', &(0x7f0000000280)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)={[{@errors_remount='errors=remount-ro'}, {@noquota='noquota'}, {@integrity='integrity'}], [], 0xffffefff}) [ 581.837075][ T1421] jfs: Unrecognized mount option "ÿ" or missing value 09:56:03 executing program 2: 09:56:03 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x78, 0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @dev}, 0x10) semget(0x0, 0x0, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) recvmmsg(0xffffffffffffffff, 0x0, 0x103, 0x2000001000, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x31c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) [ 581.910563][ T1421] jfs: Unrecognized mount option "ÿ" or missing value 09:56:03 executing program 5: syz_mount_image$jfs(&(0x7f00000001c0)='jfs\x00', &(0x7f0000000280)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)={[{@errors_remount='errors=remount-ro'}, {@noquota='noquota'}, {@integrity='integrity'}], [], 0xfffffdf9}) [ 582.119476][ T1433] jfs: Unrecognized mount option "ù" or missing value [ 582.194151][ T1433] jfs: Unrecognized mount option "ù" or missing value [ 583.587303][ T1449] IPVS: ftp: loaded support on port[0] = 21 [ 583.715097][ T1449] chnl_net:caif_netlink_parms(): no params data found [ 583.819270][ T1449] bridge0: port 1(bridge_slave_0) entered blocking state [ 583.826328][ T1449] bridge0: port 1(bridge_slave_0) entered disabled state [ 583.833937][ T1449] device bridge_slave_0 entered promiscuous mode [ 583.842664][ T1449] bridge0: port 2(bridge_slave_1) entered blocking state [ 583.849908][ T1449] bridge0: port 2(bridge_slave_1) entered disabled state [ 583.857383][ T1449] device bridge_slave_1 entered promiscuous mode [ 583.947276][ T1449] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 583.957920][ T1449] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 583.977712][ T1449] team0: Port device team_slave_0 added [ 584.056073][ T1449] team0: Port device team_slave_1 added [ 584.091845][ T1449] device hsr_slave_0 entered promiscuous mode [ 584.129033][ T1449] device hsr_slave_1 entered promiscuous mode [ 584.168834][ T1449] debugfs: Directory 'hsr0' with parent '/' already present! [ 584.257619][ T1449] bridge0: port 2(bridge_slave_1) entered blocking state [ 584.264698][ T1449] bridge0: port 2(bridge_slave_1) entered forwarding state [ 584.272042][ T1449] bridge0: port 1(bridge_slave_0) entered blocking state [ 584.279134][ T1449] bridge0: port 1(bridge_slave_0) entered forwarding state [ 584.314128][ T1449] 8021q: adding VLAN 0 to HW filter on device bond0 [ 584.402605][ T1449] 8021q: adding VLAN 0 to HW filter on device team0 [ 584.409546][ T1153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 584.417489][ T1153] bridge0: port 1(bridge_slave_0) entered disabled state [ 584.425224][ T1153] bridge0: port 2(bridge_slave_1) entered disabled state [ 584.434205][ T1153] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 584.445446][T28257] device bridge_slave_1 left promiscuous mode [ 584.451794][T28257] bridge0: port 2(bridge_slave_1) entered disabled state [ 584.499630][T28257] device bridge_slave_0 left promiscuous mode [ 584.505788][T28257] bridge0: port 1(bridge_slave_0) entered disabled state [ 586.279716][T28257] device hsr_slave_0 left promiscuous mode [ 586.349117][T28257] device hsr_slave_1 left promiscuous mode [ 586.407518][T28257] team0 (unregistering): Port device team_slave_1 removed [ 586.418389][T28257] team0 (unregistering): Port device team_slave_0 removed [ 586.430904][T28257] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 586.474192][T28257] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 586.545267][T28257] bond0 (unregistering): Released all slaves [ 586.654613][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 586.662861][ T1277] bridge0: port 1(bridge_slave_0) entered blocking state [ 586.669951][ T1277] bridge0: port 1(bridge_slave_0) entered forwarding state [ 586.677493][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 586.686024][ T1277] bridge0: port 2(bridge_slave_1) entered blocking state [ 586.693103][ T1277] bridge0: port 2(bridge_slave_1) entered forwarding state [ 586.704109][ T1341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 586.712848][ T1341] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 586.721480][ T1341] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 586.734290][ T1341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 586.742942][ T1341] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 586.753865][ T1341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 586.762620][ T1341] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 586.774182][ T1341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 586.782912][ T1341] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 586.820676][ T1449] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 586.844643][ T1449] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 586.991784][ T1458] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 587.002103][ T1458] CPU: 0 PID: 1458 Comm: syz-executor.3 Not tainted 5.2.0+ #37 [ 587.009746][ T1458] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 587.019791][ T1458] Call Trace: [ 587.023079][ T1458] dump_stack+0x1d8/0x2f8 [ 587.027408][ T1458] dump_header+0xd8/0x970 [ 587.031737][ T1458] oom_kill_process+0xcd/0x320 [ 587.036506][ T1458] out_of_memory+0x5e1/0x8a0 [ 587.041092][ T1458] ? unregister_oom_notifier+0x20/0x20 [ 587.046551][ T1458] memory_max_write+0x537/0x6a0 [ 587.051407][ T1458] ? memory_max_show+0xa0/0xa0 [ 587.056182][ T1458] ? memory_max_show+0xa0/0xa0 [ 587.060965][ T1458] cgroup_file_write+0x27b/0x6e0 [ 587.065909][ T1458] ? cgroup_seqfile_stop+0xc0/0xc0 [ 587.071023][ T1458] ? cgroup_seqfile_stop+0xc0/0xc0 [ 587.076137][ T1458] kernfs_fop_write+0x3e4/0x4f0 [ 587.081001][ T1458] ? kernfs_fop_read+0x580/0x580 [ 587.085938][ T1458] __vfs_write+0xf9/0x7d0 [ 587.090288][ T1458] ? __kernel_write+0x350/0x350 [ 587.095156][ T1458] ? __sb_start_write+0x39c/0x440 [ 587.100184][ T1458] ? __kasan_check_read+0x11/0x20 [ 587.105207][ T1458] vfs_write+0x275/0x590 [ 587.109457][ T1458] ksys_write+0x16b/0x2a0 [ 587.113786][ T1458] ? __ia32_sys_read+0x90/0x90 [ 587.118578][ T1458] ? retint_kernel+0x10/0x10 [ 587.123172][ T1458] __x64_sys_write+0x7b/0x90 [ 587.127762][ T1458] do_syscall_64+0xfe/0x140 [ 587.132267][ T1458] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 587.138160][ T1458] RIP: 0033:0x459819 [ 587.142054][ T1458] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 587.161676][ T1458] RSP: 002b:00007f161267cc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 587.170129][ T1458] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459819 [ 587.178103][ T1458] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 587.186074][ T1458] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 587.194051][ T1458] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f161267d6d4 [ 587.202065][ T1458] R13: 00000000004c9774 R14: 00000000004e0b70 R15: 00000000ffffffff [ 587.223079][ T1458] memory: usage 5076kB, limit 0kB, failcnt 40 [ 587.229349][ T1458] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 587.236315][ T1458] Memory cgroup stats for /syz3: [ 587.238156][ T1458] anon 2072576 [ 587.238156][ T1458] file 0 [ 587.238156][ T1458] kernel_stack 65536 [ 587.238156][ T1458] slab 2752512 [ 587.238156][ T1458] sock 0 [ 587.238156][ T1458] shmem 0 [ 587.238156][ T1458] file_mapped 0 [ 587.238156][ T1458] file_dirty 135168 [ 587.238156][ T1458] file_writeback 0 [ 587.238156][ T1458] anon_thp 2097152 [ 587.238156][ T1458] inactive_anon 0 [ 587.238156][ T1458] active_anon 2072576 [ 587.238156][ T1458] inactive_file 0 [ 587.238156][ T1458] active_file 0 [ 587.238156][ T1458] unevictable 0 [ 587.238156][ T1458] slab_reclaimable 1216512 [ 587.238156][ T1458] slab_unreclaimable 1536000 [ 587.238156][ T1458] pgfault 77847 [ 587.238156][ T1458] pgmajfault 0 [ 587.238156][ T1458] workingset_refault 0 [ 587.238156][ T1458] workingset_activate 0 [ 587.238156][ T1458] workingset_nodereclaim 0 [ 587.238156][ T1458] pgrefill 0 [ 587.238156][ T1458] pgscan 0 [ 587.238156][ T1458] pgsteal 0 [ 587.238156][ T1458] pgactivate 0 [ 587.333009][ T1458] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=1457,uid=0 [ 587.349006][ T1458] Memory cgroup out of memory: Killed process 1457 (syz-executor.3) total-vm:72576kB, anon-rss:2136kB, file-rss:34816kB, shmem-rss:0kB [ 587.365121][ T1057] oom_reaper: reaped process 1457 (syz-executor.3), now anon-rss:0kB, file-rss:34832kB, shmem-rss:0kB [ 587.515927][ T1449] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 587.525891][ T1449] CPU: 0 PID: 1449 Comm: syz-executor.3 Not tainted 5.2.0+ #37 [ 587.533433][ T1449] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 587.543478][ T1449] Call Trace: [ 587.546767][ T1449] dump_stack+0x1d8/0x2f8 [ 587.551102][ T1449] dump_header+0xd8/0x970 [ 587.555435][ T1449] oom_kill_process+0xcd/0x320 [ 587.560201][ T1449] out_of_memory+0x5e1/0x8a0 [ 587.564793][ T1449] ? unregister_oom_notifier+0x20/0x20 [ 587.570258][ T1449] ? __kasan_check_read+0x11/0x20 [ 587.575296][ T1449] try_charge+0x134a/0x17b0 [ 587.579813][ T1449] ? __memcg_kmem_charge_memcg+0x180/0x180 [ 587.585624][ T1449] ? __lock_acquire+0x4750/0x4750 [ 587.590650][ T1449] ? rcu_lock_release+0x15/0x20 [ 587.595504][ T1449] ? get_mem_cgroup_from_mm+0x15e/0x170 [ 587.601047][ T1449] mem_cgroup_try_charge+0x216/0x560 [ 587.601063][ T1449] mem_cgroup_try_charge_delay+0x25/0xa0 [ 587.601076][ T1449] wp_page_copy+0x367/0x18c0 [ 587.601096][ T1449] ? rcu_lock_release+0x30/0x30 [ 587.601108][ T1449] ? __lock_acquire+0x4750/0x4750 [ 587.601122][ T1449] ? __kasan_check_read+0x11/0x20 [ 587.601131][ T1449] ? do_raw_spin_unlock+0x49/0x260 [ 587.601145][ T1449] do_wp_page+0x2c9/0x1ce0 [ 587.601162][ T1449] ? __rwlock_init+0x130/0x130 [ 587.601172][ T1449] ? count_memcg_event_mm+0x300/0x300 [ 587.601193][ T1449] handle_mm_fault+0x2bcf/0x6080 [ 587.612088][ T1449] ? finish_fault+0x230/0x230 [ 587.612107][ T1449] ? vmacache_find+0x566/0x5b0 [ 587.612115][ T1449] ? vmacache_update+0xb7/0x120 [ 587.612135][ T1449] do_user_addr_fault+0x589/0xaf0 [ 587.675448][ T1449] __do_page_fault+0xd3/0x1f0 [ 587.680143][ T1449] do_page_fault+0x99/0xb0 [ 587.684558][ T1449] page_fault+0x39/0x40 [ 587.688722][ T1449] RIP: 0033:0x4308f6 [ 587.692601][ T1449] Code: 1f 44 00 00 48 29 e8 31 c9 48 81 fb 40 56 71 00 0f 95 c1 48 8d 34 2a 48 83 cd 01 48 c1 e1 02 48 83 c8 01 48 09 e9 48 89 73 58 <48> 89 4a 08 48 89 46 08 48 8d 4a 10 8b 05 6c 46 64 00 85 c0 0f 84 [ 587.712188][ T1449] RSP: 002b:00007ffd5c51b300 EFLAGS: 00010206 [ 587.718248][ T1449] RAX: 0000000000019691 RBX: 0000000000715640 RCX: 0000000000008041 [ 587.726208][ T1449] RDX: 0000555555c4a930 RSI: 0000555555c52970 RDI: 0000000000000003 [ 587.734161][ T1449] RBP: 0000000000008041 R08: 0000000000000001 R09: 0000555555c49940 [ 587.742115][ T1449] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000715698 [ 587.750103][ T1449] R13: 0000000000715698 R14: 0000000000000000 R15: 0000000000002710 [ 587.758781][ T1449] memory: usage 2740kB, limit 0kB, failcnt 48 [ 587.764853][ T1449] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 587.771738][ T1449] Memory cgroup stats for /syz3: [ 587.771803][ T1449] anon 0 [ 587.771803][ T1449] file 0 [ 587.771803][ T1449] kernel_stack 65536 [ 587.771803][ T1449] slab 2752512 [ 587.771803][ T1449] sock 0 [ 587.771803][ T1449] shmem 0 [ 587.771803][ T1449] file_mapped 0 [ 587.771803][ T1449] file_dirty 135168 [ 587.771803][ T1449] file_writeback 0 [ 587.771803][ T1449] anon_thp 0 [ 587.771803][ T1449] inactive_anon 0 [ 587.771803][ T1449] active_anon 0 [ 587.771803][ T1449] inactive_file 0 [ 587.771803][ T1449] active_file 0 [ 587.771803][ T1449] unevictable 0 [ 587.771803][ T1449] slab_reclaimable 1216512 [ 587.771803][ T1449] slab_unreclaimable 1536000 [ 587.771803][ T1449] pgfault 77847 [ 587.771803][ T1449] pgmajfault 0 [ 587.771803][ T1449] workingset_refault 0 [ 587.771803][ T1449] workingset_activate 0 [ 587.771803][ T1449] workingset_nodereclaim 0 [ 587.771803][ T1449] pgrefill 0 [ 587.771803][ T1449] pgscan 0 [ 587.771803][ T1449] pgsteal 0 [ 587.771803][ T1449] pgactivate 0 09:56:09 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r2 = socket$kcm(0x10, 0x3, 0x0) setsockopt$sock_attach_bpf(r2, 0x10e, 0x4, &(0x7f0000000000)=r0, 0x4) r3 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x40) openat$cgroup_ro(r3, &(0x7f0000000140)='cpuset.effective_cpus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r4 = getpid() perf_event_open(0x0, r4, 0x3, 0xffffffffffffffff, 0x1) r5 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) gettid() r6 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r6, &(0x7f0000000540)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @ipv4}, 0x80, 0x0}, 0x24000001) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000080)='cgroup.type\x00', 0x2, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f00000002c0)='threaded\x00', 0x9) write$cgroup_int(r5, 0x0, 0x0) 09:56:09 executing program 1: 09:56:09 executing program 4: fstat(0xffffffffffffffff, 0x0) fstat(0xffffffffffffff9c, &(0x7f0000000440)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xbb6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x80000000000003, 0x8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'ip6_vti0\x00', 0x0}) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000380)=0xd95, 0x4) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) 09:56:09 executing program 2: 09:56:09 executing program 5: syz_mount_image$jfs(&(0x7f00000001c0)='jfs\x00', &(0x7f0000000280)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)={[{@errors_remount='errors=remount-ro'}, {@noquota='noquota'}, {@integrity='integrity'}], [], 0xfffffdfd}) 09:56:09 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x78, 0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @dev}, 0x10) semget(0x0, 0x0, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) recvmmsg(0xffffffffffffffff, 0x0, 0x103, 0x2000001000, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x31c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 09:56:09 executing program 2: 09:56:09 executing program 1: [ 587.771803][ T1449] pgdeactivate 0 [ 587.867883][ T1449] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=1449,uid=0 [ 587.867939][ T1449] Memory cgroup out of memory: Killed process 1449 (syz-executor.3) total-vm:72444kB, anon-rss:68kB, file-rss:34832kB, shmem-rss:0kB [ 587.907640][ T1464] jfs: Unrecognized mount option "ý" or missing value 09:56:09 executing program 2: 09:56:09 executing program 1: [ 588.002201][ T1464] jfs: Unrecognized mount option "ý" or missing value 09:56:09 executing program 5: syz_mount_image$jfs(&(0x7f00000001c0)='jfs\x00', &(0x7f0000000280)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)={[{@errors_remount='errors=remount-ro'}, {@noquota='noquota'}, {@integrity='integrity'}], [], 0xffffff7f}) 09:56:09 executing program 1: [ 588.211087][ T1483] jfs: Unrecognized mount option "" or missing value [ 588.330329][ T1483] jfs: Unrecognized mount option "" or missing value 09:56:10 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r2 = socket$kcm(0x10, 0x3, 0x0) setsockopt$sock_attach_bpf(r2, 0x10e, 0x4, &(0x7f0000000000)=r0, 0x4) r3 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x40) openat$cgroup_ro(r3, &(0x7f0000000140)='cpuset.effective_cpus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r4 = getpid() perf_event_open(0x0, r4, 0x3, 0xffffffffffffffff, 0x1) r5 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) gettid() r6 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r6, &(0x7f0000000540)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @ipv4}, 0x80, 0x0}, 0x24000001) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000080)='cgroup.type\x00', 0x2, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f00000002c0)='threaded\x00', 0x9) write$cgroup_int(r5, 0x0, 0x0) 09:56:10 executing program 4: fstat(0xffffffffffffffff, 0x0) fstat(0xffffffffffffff9c, &(0x7f0000000440)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xbb6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x80000000000003, 0x8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'ip6_vti0\x00', 0x0}) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000380)=0xd95, 0x4) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) 09:56:10 executing program 2: 09:56:10 executing program 1: 09:56:10 executing program 5: syz_mount_image$jfs(&(0x7f00000001c0)='jfs\x00', &(0x7f0000000280)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)={[{@errors_remount='errors=remount-ro'}, {@noquota='noquota'}, {@integrity='integrity'}], [], 0xffffff8c}) 09:56:10 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x78, 0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @dev}, 0x10) semget(0x0, 0x0, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) recvmmsg(0xffffffffffffffff, 0x0, 0x103, 0x2000001000, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x31c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 09:56:10 executing program 2: 09:56:10 executing program 1: [ 588.524336][ T1500] jfs: Unrecognized mount option "Œ" or missing value 09:56:10 executing program 2: 09:56:10 executing program 5: syz_mount_image$jfs(&(0x7f00000001c0)='jfs\x00', &(0x7f0000000280)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)={[{@errors_remount='errors=remount-ro'}, {@noquota='noquota'}, {@integrity='integrity'}], [], 0xffffff97}) [ 588.629116][ T1500] jfs: Unrecognized mount option "Œ" or missing value 09:56:10 executing program 1: 09:56:10 executing program 2: [ 588.784433][ T1526] jfs: Unrecognized mount option "—" or missing value [ 588.899511][ T1526] jfs: Unrecognized mount option "—" or missing value [ 590.315573][ T1542] IPVS: ftp: loaded support on port[0] = 21 [ 590.457171][ T1542] chnl_net:caif_netlink_parms(): no params data found [ 590.561742][ T1542] bridge0: port 1(bridge_slave_0) entered blocking state [ 590.568865][ T1542] bridge0: port 1(bridge_slave_0) entered disabled state [ 590.576601][ T1542] device bridge_slave_0 entered promiscuous mode [ 590.584235][ T1542] bridge0: port 2(bridge_slave_1) entered blocking state [ 590.591368][ T1542] bridge0: port 2(bridge_slave_1) entered disabled state [ 590.598933][ T1542] device bridge_slave_1 entered promiscuous mode [ 590.698532][ T1542] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 590.709302][ T1542] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 590.730922][ T1542] team0: Port device team_slave_0 added [ 590.737783][ T1542] team0: Port device team_slave_1 added [ 590.791372][ T1542] device hsr_slave_0 entered promiscuous mode [ 590.839179][ T1542] device hsr_slave_1 entered promiscuous mode [ 590.878851][ T1542] debugfs: Directory 'hsr0' with parent '/' already present! [ 590.887230][ T821] device bridge_slave_1 left promiscuous mode [ 590.893578][ T821] bridge0: port 2(bridge_slave_1) entered disabled state [ 590.951297][ T821] device bridge_slave_0 left promiscuous mode [ 590.957515][ T821] bridge0: port 1(bridge_slave_0) entered disabled state [ 592.639693][ T821] device hsr_slave_0 left promiscuous mode [ 592.679547][ T821] device hsr_slave_1 left promiscuous mode [ 592.727166][ T821] team0 (unregistering): Port device team_slave_1 removed [ 592.739266][ T821] team0 (unregistering): Port device team_slave_0 removed [ 592.750557][ T821] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 592.793633][ T821] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 592.869469][ T821] bond0 (unregistering): Released all slaves [ 592.998196][ T1542] 8021q: adding VLAN 0 to HW filter on device bond0 [ 593.011174][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 593.019304][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 593.030858][ T1542] 8021q: adding VLAN 0 to HW filter on device team0 [ 593.044706][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 593.053362][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 593.061952][ T1277] bridge0: port 1(bridge_slave_0) entered blocking state [ 593.069026][ T1277] bridge0: port 1(bridge_slave_0) entered forwarding state [ 593.142427][ T1542] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 593.152803][ T1542] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 593.165342][ T1153] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 593.173285][ T1153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 593.181990][ T1153] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 593.192333][ T1153] bridge0: port 2(bridge_slave_1) entered blocking state [ 593.199431][ T1153] bridge0: port 2(bridge_slave_1) entered forwarding state [ 593.206938][ T1153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 593.215603][ T1153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 593.224244][ T1153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 593.232887][ T1153] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 593.241337][ T1153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 593.249996][ T1153] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 593.258403][ T1153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 593.266765][ T1153] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 593.275153][ T1153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 593.283736][ T1153] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 593.305325][ T1542] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 593.313269][ T1153] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 593.321429][ T1153] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 593.508806][ T1550] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 593.519290][ T1550] CPU: 1 PID: 1550 Comm: syz-executor.3 Not tainted 5.2.0+ #37 [ 593.526828][ T1550] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 593.536893][ T1550] Call Trace: [ 593.540211][ T1550] dump_stack+0x1d8/0x2f8 [ 593.544537][ T1550] dump_header+0xd8/0x970 [ 593.548877][ T1550] oom_kill_process+0xcd/0x320 [ 593.553626][ T1550] out_of_memory+0x5e1/0x8a0 [ 593.558225][ T1550] ? unregister_oom_notifier+0x20/0x20 [ 593.563704][ T1550] memory_max_write+0x537/0x6a0 [ 593.568545][ T1550] ? lock_acquire+0x158/0x250 [ 593.573237][ T1550] ? memory_max_show+0xa0/0xa0 [ 593.577999][ T1550] ? trace_lock_acquire+0x154/0x1b0 [ 593.583186][ T1550] ? lock_acquire+0x158/0x250 [ 593.587853][ T1550] ? kernfs_fop_write+0x22e/0x4f0 [ 593.592863][ T1550] ? memory_max_show+0xa0/0xa0 [ 593.597622][ T1550] cgroup_file_write+0x27b/0x6e0 [ 593.602557][ T1550] ? cgroup_seqfile_stop+0xc0/0xc0 [ 593.607665][ T1550] ? cgroup_seqfile_stop+0xc0/0xc0 [ 593.612765][ T1550] kernfs_fop_write+0x3e4/0x4f0 [ 593.617608][ T1550] ? kernfs_fop_read+0x580/0x580 [ 593.622529][ T1550] __vfs_write+0xf9/0x7d0 [ 593.626846][ T1550] ? retint_kernel+0x10/0x10 [ 593.631437][ T1550] ? __kernel_write+0x350/0x350 [ 593.636279][ T1550] ? rcu_irq_exit+0xe3/0x260 [ 593.640869][ T1550] ? __sb_start_write+0x39c/0x440 [ 593.645880][ T1550] ? __fdget_pos+0x1c5/0x2e0 [ 593.650493][ T1550] vfs_write+0x275/0x590 [ 593.654737][ T1550] ksys_write+0x16b/0x2a0 [ 593.659067][ T1550] ? __ia32_sys_read+0x90/0x90 [ 593.663829][ T1550] ? prepare_exit_to_usermode+0x1f7/0x580 [ 593.669538][ T1550] ? trace_irq_disable_rcuidle+0x23/0x1c0 [ 593.675250][ T1550] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 593.680697][ T1550] ? trace_irq_disable_rcuidle+0x23/0x1c0 [ 593.686401][ T1550] ? do_syscall_64+0x1d/0x140 [ 593.691067][ T1550] __x64_sys_write+0x7b/0x90 [ 593.695643][ T1550] do_syscall_64+0xfe/0x140 [ 593.700144][ T1550] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 593.706047][ T1550] RIP: 0033:0x459819 [ 593.709973][ T1550] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 593.729585][ T1550] RSP: 002b:00007faab490bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 593.737996][ T1550] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459819 [ 593.745972][ T1550] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 593.753930][ T1550] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 593.761885][ T1550] R10: 0000000000000000 R11: 0000000000000246 R12: 00007faab490c6d4 [ 593.769854][ T1550] R13: 00000000004c9774 R14: 00000000004e0b70 R15: 00000000ffffffff [ 593.778603][ T1550] memory: usage 4652kB, limit 0kB, failcnt 49 [ 593.784763][ T1550] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 593.791679][ T1550] Memory cgroup stats for /syz3: [ 593.792697][ T1550] anon 2052096 [ 593.792697][ T1550] file 0 [ 593.792697][ T1550] kernel_stack 65536 [ 593.792697][ T1550] slab 2482176 [ 593.792697][ T1550] sock 0 [ 593.792697][ T1550] shmem 0 [ 593.792697][ T1550] file_mapped 0 [ 593.792697][ T1550] file_dirty 135168 [ 593.792697][ T1550] file_writeback 0 [ 593.792697][ T1550] anon_thp 2097152 [ 593.792697][ T1550] inactive_anon 0 [ 593.792697][ T1550] active_anon 2052096 [ 593.792697][ T1550] inactive_file 0 [ 593.792697][ T1550] active_file 0 [ 593.792697][ T1550] unevictable 0 [ 593.792697][ T1550] slab_reclaimable 1081344 [ 593.792697][ T1550] slab_unreclaimable 1400832 [ 593.792697][ T1550] pgfault 77913 [ 593.792697][ T1550] pgmajfault 0 [ 593.792697][ T1550] workingset_refault 0 [ 593.792697][ T1550] workingset_activate 0 [ 593.792697][ T1550] workingset_nodereclaim 0 [ 593.792697][ T1550] pgrefill 0 [ 593.792697][ T1550] pgscan 0 [ 593.792697][ T1550] pgsteal 0 [ 593.792697][ T1550] pgactivate 0 [ 593.887105][ T1550] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=1549,uid=0 [ 593.902939][ T1550] Memory cgroup out of memory: Killed process 1549 (syz-executor.3) total-vm:72576kB, anon-rss:2180kB, file-rss:35792kB, shmem-rss:0kB [ 593.919976][ T1057] oom_reaper: reaped process 1549 (syz-executor.3), now anon-rss:0kB, file-rss:34832kB, shmem-rss:0kB 09:56:15 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r2 = socket$kcm(0x10, 0x3, 0x0) setsockopt$sock_attach_bpf(r2, 0x10e, 0x4, &(0x7f0000000000)=r0, 0x4) r3 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x40) openat$cgroup_ro(r3, &(0x7f0000000140)='cpuset.effective_cpus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r4 = getpid() perf_event_open(0x0, r4, 0x3, 0xffffffffffffffff, 0x1) r5 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) gettid() r6 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r6, &(0x7f0000000540)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @ipv4}, 0x80, 0x0}, 0x24000001) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000080)='cgroup.type\x00', 0x2, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f00000002c0)='threaded\x00', 0x9) write$cgroup_int(r5, 0x0, 0x0) 09:56:15 executing program 1: 09:56:15 executing program 2: 09:56:15 executing program 5: syz_mount_image$jfs(&(0x7f00000001c0)='jfs\x00', &(0x7f0000000280)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)={[{@errors_remount='errors=remount-ro'}, {@noquota='noquota'}, {@integrity='integrity'}], [], 0xffffffeb}) 09:56:15 executing program 4: fstat(0xffffffffffffffff, 0x0) fstat(0xffffffffffffff9c, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xbb6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x80000000000003, 0x8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'ip6_vti0\x00', 0x0}) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000380)=0xd95, 0x4) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) 09:56:15 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x78, 0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @dev}, 0x10) semget(0x0, 0x0, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) recvmmsg(0xffffffffffffffff, 0x0, 0x103, 0x2000001000, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x31c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) [ 594.083423][ T1542] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 594.093456][ T1542] CPU: 1 PID: 1542 Comm: syz-executor.3 Not tainted 5.2.0+ #37 [ 594.101015][ T1542] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 594.111054][ T1542] Call Trace: [ 594.114331][ T1542] dump_stack+0x1d8/0x2f8 [ 594.118648][ T1542] dump_header+0xd8/0x970 [ 594.122966][ T1542] oom_kill_process+0xcd/0x320 [ 594.127728][ T1542] out_of_memory+0x5e1/0x8a0 [ 594.132318][ T1542] ? unregister_oom_notifier+0x20/0x20 [ 594.137765][ T1542] ? __kasan_check_read+0x11/0x20 [ 594.142785][ T1542] try_charge+0x134a/0x17b0 [ 594.147293][ T1542] ? __memcg_kmem_charge_memcg+0x180/0x180 [ 594.153116][ T1542] ? __lock_acquire+0x4750/0x4750 [ 594.158129][ T1542] ? rcu_lock_release+0x15/0x20 [ 594.162964][ T1542] ? get_mem_cgroup_from_mm+0x15e/0x170 [ 594.168515][ T1542] mem_cgroup_try_charge+0x216/0x560 [ 594.174050][ T1542] mem_cgroup_try_charge_delay+0x25/0xa0 [ 594.179693][ T1542] handle_mm_fault+0x31f3/0x6080 [ 594.184626][ T1542] ? finish_fault+0x230/0x230 [ 594.189306][ T1542] ? vmacache_find+0x566/0x5b0 [ 594.194083][ T1542] ? vmacache_update+0xb7/0x120 [ 594.198929][ T1542] do_user_addr_fault+0x589/0xaf0 [ 594.203953][ T1542] __do_page_fault+0xd3/0x1f0 [ 594.208640][ T1542] do_page_fault+0x99/0xb0 [ 594.213048][ T1542] page_fault+0x39/0x40 [ 594.217194][ T1542] RIP: 0033:0x403442 [ 594.221079][ T1542] Code: 55 41 54 49 89 fc 55 53 48 81 ec b8 10 00 00 64 48 8b 04 25 28 00 00 00 48 89 84 24 a8 10 00 00 31 c0 be 02 00 00 00 4c 89 e7 f9 8d 05 00 85 c0 0f 84 00 03 00 00 4c 89 e7 e8 19 43 05 00 48 [ 594.240676][ T1542] RSP: 002b:00007ffedf85ce20 EFLAGS: 00010246 [ 594.246748][ T1542] RAX: 0000000000000000 RBX: 0000000000090e48 RCX: 0000000000413420 [ 594.254708][ T1542] RDX: 000000000000000c RSI: 0000000000000002 RDI: 00007ffedf85df50 [ 594.263752][ T1542] RBP: 0000000000000002 R08: 0000000000000001 R09: 00005555560be940 [ 594.271706][ T1542] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffedf85df50 [ 594.280212][ T1542] R13: 00007ffedf85df40 R14: 0000000000000000 R15: 00007ffedf85df50 [ 594.288240][ T1542] memory: usage 2328kB, limit 0kB, failcnt 57 [ 594.294327][ T1542] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 594.301198][ T1542] Memory cgroup stats for /syz3: [ 594.301261][ T1542] anon 0 [ 594.301261][ T1542] file 0 [ 594.301261][ T1542] kernel_stack 0 [ 594.301261][ T1542] slab 2482176 [ 594.301261][ T1542] sock 0 [ 594.301261][ T1542] shmem 0 [ 594.301261][ T1542] file_mapped 0 [ 594.301261][ T1542] file_dirty 135168 [ 594.301261][ T1542] file_writeback 0 [ 594.301261][ T1542] anon_thp 0 [ 594.301261][ T1542] inactive_anon 0 [ 594.301261][ T1542] active_anon 0 [ 594.301261][ T1542] inactive_file 0 [ 594.301261][ T1542] active_file 0 [ 594.301261][ T1542] unevictable 0 [ 594.301261][ T1542] slab_reclaimable 1081344 [ 594.301261][ T1542] slab_unreclaimable 1400832 [ 594.301261][ T1542] pgfault 77913 [ 594.301261][ T1542] pgmajfault 0 [ 594.301261][ T1542] workingset_refault 0 [ 594.301261][ T1542] workingset_activate 0 [ 594.301261][ T1542] workingset_nodereclaim 0 [ 594.301261][ T1542] pgrefill 0 [ 594.301261][ T1542] pgscan 0 [ 594.301261][ T1542] pgsteal 0 [ 594.301261][ T1542] pgactivate 0 [ 594.301261][ T1542] pgdeactivate 0 [ 594.397019][ T1542] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=1542,uid=0 [ 594.412395][ T1542] Memory cgroup out of memory: Killed process 1542 (syz-executor.3) total-vm:72444kB, anon-rss:68kB, file-rss:34832kB, shmem-rss:0kB [ 594.426825][ T1057] oom_reaper: reaped process 1542 (syz-executor.3), now anon-rss:0kB, file-rss:33936kB, shmem-rss:0kB 09:56:16 executing program 1: 09:56:16 executing program 2: [ 594.473390][ T1556] jfs: Unrecognized mount option "ë" or missing value [ 594.526666][ T1556] jfs: Unrecognized mount option "ë" or missing value 09:56:16 executing program 2: 09:56:16 executing program 1: 09:56:16 executing program 5: syz_mount_image$jfs(&(0x7f00000001c0)='jfs\x00', &(0x7f0000000280)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)={[{@errors_remount='errors=remount-ro'}, {@noquota='noquota'}, {@integrity='integrity'}], [], 0xfffffff4}) 09:56:16 executing program 2: [ 594.889948][ T1574] jfs: Unrecognized mount option "ô" or missing value [ 594.982149][ T1574] jfs: Unrecognized mount option "ô" or missing value 09:56:16 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r2 = socket$kcm(0x10, 0x3, 0x0) setsockopt$sock_attach_bpf(r2, 0x10e, 0x4, &(0x7f0000000000)=r0, 0x4) r3 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x40) openat$cgroup_ro(r3, &(0x7f0000000140)='cpuset.effective_cpus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r4 = getpid() perf_event_open(0x0, r4, 0x3, 0xffffffffffffffff, 0x1) r5 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) gettid() r6 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r6, &(0x7f0000000540)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @ipv4}, 0x80, 0x0}, 0x24000001) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000080)='cgroup.type\x00', 0x2, 0x0) write$cgroup_int(r5, 0x0, 0x0) write$cgroup_int(r5, 0x0, 0x0) 09:56:16 executing program 1: 09:56:16 executing program 2: 09:56:16 executing program 5: syz_mount_image$jfs(&(0x7f00000001c0)='jfs\x00', &(0x7f0000000280)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)={[{@errors_remount='errors=remount-ro'}, {@noquota='noquota'}, {@integrity='integrity'}], [], 0xfffffff6}) 09:56:16 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x78, 0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @dev}, 0x10) semget(0x0, 0x0, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) recvmmsg(0xffffffffffffffff, 0x0, 0x103, 0x2000001000, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x31c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 09:56:16 executing program 4: fstat(0xffffffffffffffff, 0x0) fstat(0xffffffffffffff9c, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x80000000000003, 0x8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'ip6_vti0\x00', 0x0}) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000380)=0xd95, 0x4) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) 09:56:16 executing program 1: 09:56:16 executing program 2: [ 595.414629][ T1589] jfs: Unrecognized mount option "ö" or missing value [ 595.508549][ T1589] jfs: Unrecognized mount option "ö" or missing value 09:56:17 executing program 1: 09:56:17 executing program 2: 09:56:17 executing program 5: syz_mount_image$jfs(&(0x7f00000001c0)='jfs\x00', &(0x7f0000000280)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)={[{@errors_remount='errors=remount-ro'}, {@noquota='noquota'}, {@integrity='integrity'}], [], 0xfffffffb}) 09:56:17 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r2 = socket$kcm(0x10, 0x3, 0x0) setsockopt$sock_attach_bpf(r2, 0x10e, 0x4, &(0x7f0000000000)=r0, 0x4) r3 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x40) openat$cgroup_ro(r3, &(0x7f0000000140)='cpuset.effective_cpus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r4 = getpid() perf_event_open(0x0, r4, 0x3, 0xffffffffffffffff, 0x1) r5 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) gettid() r6 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r6, &(0x7f0000000540)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @ipv4}, 0x80, 0x0}, 0x24000001) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000080)='cgroup.type\x00', 0x2, 0x0) write$cgroup_int(r5, 0x0, 0x0) write$cgroup_int(r5, 0x0, 0x0) 09:56:17 executing program 1: 09:56:17 executing program 2: [ 595.868852][ T1611] jfs: Unrecognized mount option "û" or missing value 09:56:17 executing program 1: [ 595.999321][ T1611] jfs: Unrecognized mount option "û" or missing value 09:56:17 executing program 2: 09:56:17 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x78, 0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @dev}, 0x10) semget(0x0, 0x0, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) recvmmsg(0xffffffffffffffff, 0x0, 0x103, 0x2000001000, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x31c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 09:56:17 executing program 5: syz_mount_image$jfs(&(0x7f00000001c0)='jfs\x00', &(0x7f0000000280)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)={[{@errors_remount='errors=remount-ro'}, {@noquota='noquota'}, {@integrity='integrity'}], [], 0xfffffffd}) 09:56:17 executing program 2: 09:56:17 executing program 1: 09:56:17 executing program 4: fstat(0xffffffffffffffff, 0x0) fstat(0xffffffffffffff9c, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x0, 0x80000000000003, 0x8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'ip6_vti0\x00', 0x0}) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000380)=0xd95, 0x4) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) 09:56:17 executing program 1: [ 596.365018][ T1635] jfs: Unrecognized mount option "ý" or missing value 09:56:17 executing program 2: [ 596.480701][ T1635] jfs: Unrecognized mount option "ý" or missing value [ 597.829851][ T821] device bridge_slave_1 left promiscuous mode [ 597.836257][ T821] bridge0: port 2(bridge_slave_1) entered disabled state [ 597.870074][ T821] device bridge_slave_0 left promiscuous mode [ 597.876351][ T821] bridge0: port 1(bridge_slave_0) entered disabled state [ 599.559708][ T821] device hsr_slave_0 left promiscuous mode [ 599.600471][ T821] device hsr_slave_1 left promiscuous mode [ 599.648937][ T821] team0 (unregistering): Port device team_slave_1 removed [ 599.660802][ T821] team0 (unregistering): Port device team_slave_0 removed [ 599.673776][ T821] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 599.722581][ T821] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 599.790875][ T821] bond0 (unregistering): Released all slaves [ 599.886272][ T1655] IPVS: ftp: loaded support on port[0] = 21 [ 599.955909][ T1655] chnl_net:caif_netlink_parms(): no params data found [ 599.987047][ T1655] bridge0: port 1(bridge_slave_0) entered blocking state [ 599.994371][ T1655] bridge0: port 1(bridge_slave_0) entered disabled state [ 600.002146][ T1655] device bridge_slave_0 entered promiscuous mode [ 600.009991][ T1655] bridge0: port 2(bridge_slave_1) entered blocking state [ 600.017123][ T1655] bridge0: port 2(bridge_slave_1) entered disabled state [ 600.024968][ T1655] device bridge_slave_1 entered promiscuous mode [ 600.042384][ T1655] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 600.053509][ T1655] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 600.071822][ T1655] team0: Port device team_slave_0 added [ 600.079201][ T1655] team0: Port device team_slave_1 added [ 600.261131][ T1655] device hsr_slave_0 entered promiscuous mode [ 600.419932][ T1655] device hsr_slave_1 entered promiscuous mode [ 600.648954][ T1655] debugfs: Directory 'hsr0' with parent '/' already present! [ 600.674435][ T1655] bridge0: port 2(bridge_slave_1) entered blocking state [ 600.681537][ T1655] bridge0: port 2(bridge_slave_1) entered forwarding state [ 600.689076][ T1655] bridge0: port 1(bridge_slave_0) entered blocking state [ 600.696294][ T1655] bridge0: port 1(bridge_slave_0) entered forwarding state [ 600.746270][ T1655] 8021q: adding VLAN 0 to HW filter on device bond0 [ 600.760652][ T1153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 600.769394][ T1153] bridge0: port 1(bridge_slave_0) entered disabled state [ 600.777134][ T1153] bridge0: port 2(bridge_slave_1) entered disabled state [ 600.797842][ T1655] 8021q: adding VLAN 0 to HW filter on device team0 [ 600.809407][ T1341] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 600.817940][ T1341] bridge0: port 1(bridge_slave_0) entered blocking state [ 600.825065][ T1341] bridge0: port 1(bridge_slave_0) entered forwarding state [ 600.864416][ T1655] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 600.874836][ T1655] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 600.898343][ T1341] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 600.906690][ T1341] bridge0: port 2(bridge_slave_1) entered blocking state [ 600.914080][ T1341] bridge0: port 2(bridge_slave_1) entered forwarding state [ 600.922162][ T1341] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 600.930680][ T1341] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 600.939786][ T1341] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 600.948216][ T1341] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 600.957539][ T1341] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 600.965557][ T1341] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 600.980285][ T1655] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 601.152115][ T1663] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 601.162435][ T1663] CPU: 1 PID: 1663 Comm: syz-executor.3 Not tainted 5.2.0+ #37 [ 601.169992][ T1663] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 601.180048][ T1663] Call Trace: [ 601.183486][ T1663] dump_stack+0x1d8/0x2f8 [ 601.187815][ T1663] dump_header+0xd8/0x970 [ 601.192266][ T1663] oom_kill_process+0xcd/0x320 [ 601.197124][ T1663] out_of_memory+0x5e1/0x8a0 [ 601.201749][ T1663] ? unregister_oom_notifier+0x20/0x20 [ 601.207248][ T1663] memory_max_write+0x537/0x6a0 [ 601.212214][ T1663] ? memory_max_show+0xa0/0xa0 [ 601.217376][ T1663] ? memory_max_show+0xa0/0xa0 [ 601.222143][ T1663] cgroup_file_write+0x27b/0x6e0 [ 601.227105][ T1663] ? cgroup_seqfile_stop+0xc0/0xc0 [ 601.232316][ T1663] ? bpf_prepare_filter+0xa30/0x13d0 [ 601.237618][ T1663] ? cgroup_seqfile_stop+0xc0/0xc0 [ 601.242738][ T1663] kernfs_fop_write+0x3e4/0x4f0 [ 601.247608][ T1663] ? kernfs_fop_read+0x580/0x580 [ 601.252559][ T1663] __vfs_write+0xf9/0x7d0 [ 601.256895][ T1663] ? retint_kernel+0x10/0x10 [ 601.261714][ T1663] ? __kernel_write+0x350/0x350 [ 601.266609][ T1663] ? rcu_irq_exit+0xe3/0x260 [ 601.271512][ T1663] ? __sb_start_write+0x39c/0x440 [ 601.276532][ T1663] ? __kasan_check_read+0x11/0x20 [ 601.282036][ T1663] vfs_write+0x275/0x590 [ 601.286361][ T1663] ksys_write+0x16b/0x2a0 [ 601.290721][ T1663] ? __ia32_sys_read+0x90/0x90 [ 601.295544][ T1663] ? prepare_exit_to_usermode+0x1f7/0x580 [ 601.301254][ T1663] ? trace_irq_disable_rcuidle+0x23/0x1c0 [ 601.306957][ T1663] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 601.312412][ T1663] ? trace_irq_disable_rcuidle+0x23/0x1c0 [ 601.318263][ T1663] ? do_syscall_64+0x1d/0x140 [ 601.322937][ T1663] __x64_sys_write+0x7b/0x90 [ 601.327526][ T1663] do_syscall_64+0xfe/0x140 [ 601.332027][ T1663] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 601.337921][ T1663] RIP: 0033:0x459819 [ 601.341929][ T1663] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 601.361845][ T1663] RSP: 002b:00007f047a965c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 601.370403][ T1663] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459819 [ 601.378478][ T1663] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 601.386830][ T1663] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 601.394957][ T1663] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f047a9666d4 [ 601.403065][ T1663] R13: 00000000004c9774 R14: 00000000004e0b70 R15: 00000000ffffffff [ 601.411351][ T1663] memory: usage 4428kB, limit 0kB, failcnt 66 [ 601.417496][ T1663] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 601.424600][ T1663] Memory cgroup stats for /syz3: [ 601.424856][ T1663] anon 2138112 [ 601.424856][ T1663] file 0 [ 601.424856][ T1663] kernel_stack 0 [ 601.424856][ T1663] slab 2072576 [ 601.424856][ T1663] sock 0 [ 601.424856][ T1663] shmem 0 [ 601.424856][ T1663] file_mapped 0 [ 601.424856][ T1663] file_dirty 135168 [ 601.424856][ T1663] file_writeback 0 [ 601.424856][ T1663] anon_thp 2097152 [ 601.424856][ T1663] inactive_anon 0 [ 601.424856][ T1663] active_anon 2138112 [ 601.424856][ T1663] inactive_file 0 [ 601.424856][ T1663] active_file 0 [ 601.424856][ T1663] unevictable 0 [ 601.424856][ T1663] slab_reclaimable 946176 [ 601.424856][ T1663] slab_unreclaimable 1126400 [ 601.424856][ T1663] pgfault 77979 [ 601.424856][ T1663] pgmajfault 0 [ 601.424856][ T1663] workingset_refault 0 [ 601.424856][ T1663] workingset_activate 0 [ 601.424856][ T1663] workingset_nodereclaim 0 [ 601.424856][ T1663] pgrefill 0 [ 601.424856][ T1663] pgscan 0 [ 601.424856][ T1663] pgsteal 0 [ 601.424856][ T1663] pgactivate 0 [ 601.519768][ T1663] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=1662,uid=0 [ 601.535572][ T1663] Memory cgroup out of memory: Killed process 1662 (syz-executor.3) total-vm:72708kB, anon-rss:2140kB, file-rss:34816kB, shmem-rss:0kB [ 601.553025][ T1057] oom_reaper: reaped process 1662 (syz-executor.3), now anon-rss:0kB, file-rss:34832kB, shmem-rss:0kB 09:56:23 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r2 = socket$kcm(0x10, 0x3, 0x0) setsockopt$sock_attach_bpf(r2, 0x10e, 0x4, &(0x7f0000000000)=r0, 0x4) r3 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x40) openat$cgroup_ro(r3, &(0x7f0000000140)='cpuset.effective_cpus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r4 = getpid() perf_event_open(0x0, r4, 0x3, 0xffffffffffffffff, 0x1) r5 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) gettid() r6 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r6, &(0x7f0000000540)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @ipv4}, 0x80, 0x0}, 0x24000001) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000080)='cgroup.type\x00', 0x2, 0x0) write$cgroup_int(r5, 0x0, 0x0) write$cgroup_int(r5, 0x0, 0x0) 09:56:23 executing program 4: fstat(0xffffffffffffffff, 0x0) fstat(0xffffffffffffff9c, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x0, 0x80000000000003, 0x8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'ip6_vti0\x00', 0x0}) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000380)=0xd95, 0x4) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) 09:56:23 executing program 1: 09:56:23 executing program 2: 09:56:23 executing program 5: syz_mount_image$jfs(&(0x7f00000001c0)='jfs\x00', &(0x7f0000000280)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)={[{@errors_remount='errors=remount-ro'}, {@noquota='noquota'}, {@integrity='integrity'}], [], 0xfffffffe}) 09:56:23 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x78, 0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @dev}, 0x10) semget(0x0, 0x0, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) recvmmsg(0xffffffffffffffff, 0x0, 0x103, 0x2000001000, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x31c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) [ 601.636216][ T1655] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 601.646423][ T1655] CPU: 0 PID: 1655 Comm: syz-executor.3 Not tainted 5.2.0+ #37 [ 601.654451][ T1655] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 601.664819][ T1655] Call Trace: [ 601.668219][ T1655] dump_stack+0x1d8/0x2f8 [ 601.672593][ T1655] dump_header+0xd8/0x970 [ 601.676943][ T1655] oom_kill_process+0xcd/0x320 [ 601.681758][ T1655] out_of_memory+0x5e1/0x8a0 [ 601.686459][ T1655] ? unregister_oom_notifier+0x20/0x20 [ 601.692147][ T1655] ? __kasan_check_read+0x11/0x20 [ 601.697288][ T1655] try_charge+0x134a/0x17b0 [ 601.702340][ T1655] ? __memcg_kmem_charge_memcg+0x180/0x180 [ 601.708253][ T1655] ? __lock_acquire+0x4750/0x4750 [ 601.713294][ T1655] ? rcu_lock_release+0x15/0x20 [ 601.718174][ T1655] ? get_mem_cgroup_from_mm+0x15e/0x170 [ 601.723725][ T1655] mem_cgroup_try_charge+0x216/0x560 [ 601.729102][ T1655] mem_cgroup_try_charge_delay+0x25/0xa0 [ 601.734737][ T1655] handle_mm_fault+0x31f3/0x6080 [ 601.739912][ T1655] ? finish_fault+0x230/0x230 [ 601.744597][ T1655] ? vmacache_find+0x251/0x5b0 [ 601.749365][ T1655] do_user_addr_fault+0x589/0xaf0 [ 601.754704][ T1655] __do_page_fault+0xd3/0x1f0 [ 601.759391][ T1655] do_page_fault+0x99/0xb0 [ 601.763812][ T1655] page_fault+0x39/0x40 [ 601.768044][ T1655] RIP: 0033:0x403442 [ 601.772038][ T1655] Code: 55 41 54 49 89 fc 55 53 48 81 ec b8 10 00 00 64 48 8b 04 25 28 00 00 00 48 89 84 24 a8 10 00 00 31 c0 be 02 00 00 00 4c 89 e7 f9 8d 05 00 85 c0 0f 84 00 03 00 00 4c 89 e7 e8 19 43 05 00 48 [ 601.791848][ T1655] RSP: 002b:00007ffe1ccd2f10 EFLAGS: 00010246 [ 601.797991][ T1655] RAX: 0000000000000000 RBX: 0000000000092c1d RCX: 0000000000413420 [ 601.806070][ T1655] RDX: 000000000000000c RSI: 0000000000000002 RDI: 00007ffe1ccd4040 [ 601.814032][ T1655] RBP: 0000000000000002 R08: 0000000000000001 R09: 0000555557007940 [ 601.821995][ T1655] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe1ccd4040 09:56:23 executing program 2: 09:56:23 executing program 1: [ 601.829963][ T1655] R13: 00007ffe1ccd4030 R14: 0000000000000000 R15: 00007ffe1ccd4040 [ 601.838035][ T1655] memory: usage 2024kB, limit 0kB, failcnt 75 [ 601.844293][ T1655] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 601.851212][ T1655] Memory cgroup stats for /syz3: [ 601.851313][ T1655] anon 40960 [ 601.851313][ T1655] file 0 [ 601.851313][ T1655] kernel_stack 0 [ 601.851313][ T1655] slab 2072576 [ 601.851313][ T1655] sock 0 [ 601.851313][ T1655] shmem 0 [ 601.851313][ T1655] file_mapped 0 [ 601.851313][ T1655] file_dirty 135168 [ 601.851313][ T1655] file_writeback 0 [ 601.851313][ T1655] anon_thp 0 [ 601.851313][ T1655] inactive_anon 0 [ 601.851313][ T1655] active_anon 40960 [ 601.851313][ T1655] inactive_file 0 [ 601.851313][ T1655] active_file 0 [ 601.851313][ T1655] unevictable 0 [ 601.851313][ T1655] slab_reclaimable 946176 [ 601.851313][ T1655] slab_unreclaimable 1126400 [ 601.851313][ T1655] pgfault 77979 [ 601.851313][ T1655] pgmajfault 0 [ 601.851313][ T1655] workingset_refault 0 [ 601.851313][ T1655] workingset_activate 0 [ 601.851313][ T1655] workingset_nodereclaim 0 [ 601.851313][ T1655] pgrefill 0 [ 601.851313][ T1655] pgscan 0 [ 601.851313][ T1655] pgsteal 0 [ 601.851313][ T1655] pgactivate 0 [ 601.945041][ T1655] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=1655,uid=0 [ 601.960545][ T1655] Memory cgroup out of memory: Killed process 1655 (syz-executor.3) total-vm:72444kB, anon-rss:72kB, file-rss:34832kB, shmem-rss:0kB [ 601.976073][ T1057] oom_reaper: reaped process 1655 (syz-executor.3), now anon-rss:0kB, file-rss:33936kB, shmem-rss:0kB 09:56:23 executing program 2: 09:56:23 executing program 4: fstat(0xffffffffffffffff, 0x0) fstat(0xffffffffffffff9c, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x0, 0x80000000000003, 0x8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'ip6_vti0\x00', 0x0}) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000380)=0xd95, 0x4) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) [ 602.021429][ T1672] jfs: Unrecognized mount option "þ" or missing value 09:56:23 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000640)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\xe3\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\x00\x87\xac\xad\x80\xa3P\x8c\xea\x17f%;\x9c\xc7\x00\xeb\xf4X#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80\x1d\x95WM\x9a\xc6\x95\x98\xed\xe9\xca\x9e\xe6\xcb\x8e\xef\xf659-\xef\xb5\xc9\xf2\"\x15\xb39T\x81\x19\xcc\xcd\xb5\r\x10G\x16(~\x15\xd1\xde\x9e\xb1s\xa0\x864hb\xaa\xa3\x18V\x17xE\xbd\xc2QD\xa5P\x0f\x8e\x1f\x888\xb6\xee\xc6N\xd2\x136\xeb\xa4\x1d\xaap\xc6\x9e\xdc\x007h\f\x96g\"_\xb1\x1b\xdb\x86\xc6\xc9\xb1\xcc\xa1\x9f\xd8h\xcc\x12\xf1k\xe8\x86:D\xd2\xd1\x02I\xfe\x96t\xe5C\x86)\xf0M\xc4\xa35\xcc\x9b\x9e\xbb5\x18[\x958D\\~3\xcaO\x97M\xaf\x930\xfd\x13\xa3\xde\xce0\x1d5I\xba\xc5;T\xdc\xaf\xc8\xa6\n\x92\x0e6>\x19*') openat$cgroup_ro(r0, &(0x7f0000000480)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\xfb\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed0x0}) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000380)=0xd95, 0x4) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) 09:56:24 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r2 = socket$kcm(0x10, 0x3, 0x0) setsockopt$sock_attach_bpf(r2, 0x10e, 0x4, &(0x7f0000000000)=r0, 0x4) r3 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x40) openat$cgroup_ro(r3, &(0x7f0000000140)='cpuset.effective_cpus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r4 = getpid() perf_event_open(0x0, r4, 0x3, 0xffffffffffffffff, 0x1) r5 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) gettid() r6 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r6, &(0x7f0000000540)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @ipv4}, 0x80, 0x0}, 0x24000001) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f00000002c0)='threaded\x00', 0x9) write$cgroup_int(r5, 0x0, 0x0) write$cgroup_int(r5, 0x0, 0x0) 09:56:24 executing program 5: syz_mount_image$jfs(&(0x7f00000001c0)='jfs\x00', &(0x7f0000000280)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)={[{@errors_remount='errors=remount-ro'}, {@noquota='noquota'}, {@integrity='integrity'}], [], 0x1000000000}) 09:56:24 executing program 2: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg(r0, &(0x7f0000006900)=[{{&(0x7f0000000100)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha512\x00'}, 0x80, 0x0}}], 0x1, 0x0) 09:56:24 executing program 4: fstat(0xffffffffffffffff, 0x0) fstat(0xffffffffffffff9c, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x0, 0x8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'ip6_vti0\x00', 0x0}) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000380)=0xd95, 0x4) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) 09:56:24 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x78, 0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @dev}, 0x10) semget(0x0, 0x0, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) recvmmsg(0xffffffffffffffff, 0x0, 0x103, 0x2000001000, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x31c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) [ 602.779383][ T1695] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 602.789809][ T1695] CPU: 1 PID: 1695 Comm: syz-executor.1 Not tainted 5.2.0+ #37 [ 602.797348][ T1695] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 602.807397][ T1695] Call Trace: [ 602.810685][ T1695] dump_stack+0x1d8/0x2f8 [ 602.815010][ T1695] dump_header+0xd8/0x970 [ 602.819338][ T1695] oom_kill_process+0xcd/0x320 [ 602.824094][ T1695] out_of_memory+0x5e1/0x8a0 [ 602.828707][ T1695] ? unregister_oom_notifier+0x20/0x20 [ 602.834181][ T1695] ? __kasan_check_read+0x11/0x20 [ 602.839196][ T1695] try_charge+0x134a/0x17b0 [ 602.843717][ T1695] ? __memcg_kmem_charge_memcg+0x180/0x180 [ 602.849534][ T1695] ? __lock_acquire+0x4750/0x4750 [ 602.854550][ T1695] ? rcu_lock_release+0x15/0x20 [ 602.859404][ T1695] ? get_mem_cgroup_from_mm+0x15e/0x170 [ 602.864983][ T1695] mem_cgroup_try_charge+0x216/0x560 [ 602.870263][ T1695] mem_cgroup_try_charge_delay+0x25/0xa0 [ 602.875888][ T1695] handle_mm_fault+0x31f3/0x6080 [ 602.880830][ T1695] ? finish_fault+0x230/0x230 [ 602.885523][ T1695] __get_user_pages+0x10ad/0x1720 [ 602.890564][ T1695] ? populate_vma_page_range+0x250/0x250 [ 602.896223][ T1695] ? lock_acquire+0x158/0x250 [ 602.900898][ T1695] ? __access_remote_vm+0xa7/0x590 [ 602.906009][ T1695] get_user_pages_remote+0xdb/0x4b0 [ 602.911197][ T1695] ? down_read+0x50/0x50 [ 602.915530][ T1695] __access_remote_vm+0x1a1/0x590 [ 602.920559][ T1695] ? generic_access_phys+0x230/0x230 [ 602.925847][ T1695] access_remote_vm+0x37/0x50 [ 602.930515][ T1695] mem_rw+0x38c/0x580 [ 602.934501][ T1695] ? trace_hardirqs_on_caller+0x74/0x80 [ 602.940032][ T1695] ? mem_open+0xb0/0xb0 [ 602.944167][ T1695] ? mem_read+0x40/0x40 [ 602.948308][ T1695] ? __sb_start_write+0x393/0x440 [ 602.953329][ T1695] mem_write+0x33/0x40 [ 602.957373][ T1695] ? mem_read+0x40/0x40 [ 602.961509][ T1695] __vfs_write+0xf9/0x7d0 [ 602.965814][ T1695] ? retint_kernel+0x10/0x10 [ 602.970396][ T1695] ? __kernel_write+0x350/0x350 [ 602.975242][ T1695] ? lock_is_held_type+0x25c/0x2b0 [ 602.980340][ T1695] ? __sb_start_write+0x39c/0x440 [ 602.985356][ T1695] vfs_write+0x275/0x590 [ 602.989585][ T1695] ksys_write+0x16b/0x2a0 [ 602.993898][ T1695] ? __ia32_sys_read+0x90/0x90 [ 602.998653][ T1695] ? trace_hardirqs_off+0x74/0x80 [ 603.003695][ T1695] ? rcu_irq_exit_irqson+0xc3/0x110 [ 603.008873][ T1695] ? do_syscall_64+0x1d/0x140 [ 603.013535][ T1695] __x64_sys_write+0x7b/0x90 [ 603.018107][ T1695] do_syscall_64+0xfe/0x140 [ 603.022595][ T1695] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 603.028473][ T1695] RIP: 0033:0x459819 [ 603.032362][ T1695] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 603.051968][ T1695] RSP: 002b:00007f6773e3fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 603.060378][ T1695] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459819 [ 603.068332][ T1695] RDX: 000000002000008f RSI: 0000000020000080 RDI: 0000000000000005 09:56:24 executing program 2: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x0, 0x1) r2 = socket$packet(0x11, 0x3, 0x300) openat$full(0xffffffffffffff9c, 0x0, 0x2000, 0x0) ioctl$KVM_GET_LAPIC(0xffffffffffffffff, 0x8400ae8e, &(0x7f0000000340)={"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"}) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffe}, 0x4) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r3, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r3, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r3, 0x5501, 0x0) 09:56:24 executing program 4: fstat(0xffffffffffffffff, 0x0) fstat(0xffffffffffffff9c, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x0, 0x8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'ip6_vti0\x00', 0x0}) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000380)=0xd95, 0x4) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) 09:56:24 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r2 = socket$kcm(0x10, 0x3, 0x0) setsockopt$sock_attach_bpf(r2, 0x10e, 0x4, &(0x7f0000000000)=r0, 0x4) r3 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x40) openat$cgroup_ro(r3, &(0x7f0000000140)='cpuset.effective_cpus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r4 = getpid() perf_event_open(0x0, r4, 0x3, 0xffffffffffffffff, 0x1) r5 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) gettid() r6 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r6, &(0x7f0000000540)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @ipv4}, 0x80, 0x0}, 0x24000001) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f00000002c0)='threaded\x00', 0x9) write$cgroup_int(r5, 0x0, 0x0) write$cgroup_int(r5, 0x0, 0x0) [ 603.076282][ T1695] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 603.084234][ T1695] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f6773e406d4 [ 603.092184][ T1695] R13: 00000000004c9492 R14: 00000000004e0660 R15: 00000000ffffffff [ 603.100230][ T1695] memory: usage 307200kB, limit 307200kB, failcnt 387 [ 603.107018][ T1695] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 603.113899][ T1695] Memory cgroup stats for /syz1: [ 603.114116][ T1695] anon 281206784 [ 603.114116][ T1695] file 122880 [ 603.114116][ T1695] kernel_stack 4259840 [ 603.114116][ T1695] slab 10817536 [ 603.114116][ T1695] sock 65536 [ 603.114116][ T1695] shmem 131072 [ 603.114116][ T1695] file_mapped 0 [ 603.114116][ T1695] file_dirty 0 [ 603.114116][ T1695] file_writeback 0 [ 603.114116][ T1695] anon_thp 262144000 [ 603.114116][ T1695] inactive_anon 135168 [ 603.114116][ T1695] active_anon 281214976 [ 603.114116][ T1695] inactive_file 0 [ 603.114116][ T1695] active_file 0 [ 603.114116][ T1695] unevictable 0 [ 603.114116][ T1695] slab_reclaimable 2703360 [ 603.114116][ T1695] slab_unreclaimable 8114176 [ 603.114116][ T1695] pgfault 80289 [ 603.114116][ T1695] pgmajfault 0 [ 603.114116][ T1695] workingset_refault 0 [ 603.114116][ T1695] workingset_activate 0 [ 603.114116][ T1695] workingset_nodereclaim 0 [ 603.114116][ T1695] pgrefill 1432 [ 603.114116][ T1695] pgscan 2238 [ 603.114116][ T1695] pgsteal 371 [ 603.207965][ T1695] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=1693,uid=0 [ 603.208914][ T1695] Memory cgroup out of memory: Killed process 1693 (syz-executor.1) total-vm:72704kB, anon-rss:7552kB, file-rss:34816kB, shmem-rss:0kB [ 603.246873][ T1057] oom_reaper: reaped process 1693 (syz-executor.1), now anon-rss:0kB, file-rss:34828kB, shmem-rss:0kB 09:56:24 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000640)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\xe3\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\x00\x87\xac\xad\x80\xa3P\x8c\xea\x17f%;\x9c\xc7\x00\xeb\xf4X#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80\x1d\x95WM\x9a\xc6\x95\x98\xed\xe9\xca\x9e\xe6\xcb\x8e\xef\xf659-\xef\xb5\xc9\xf2\"\x15\xb39T\x81\x19\xcc\xcd\xb5\r\x10G\x16(~\x15\xd1\xde\x9e\xb1s\xa0\x864hb\xaa\xa3\x18V\x17xE\xbd\xc2QD\xa5P\x0f\x8e\x1f\x888\xb6\xee\xc6N\xd2\x136\xeb\xa4\x1d\xaap\xc6\x9e\xdc\x007h\f\x96g\"_\xb1\x1b\xdb\x86\xc6\xc9\xb1\xcc\xa1\x9f\xd8h\xcc\x12\xf1k\xe8\x86:D\xd2\xd1\x02I\xfe\x96t\xe5C\x86)\xf0M\xc4\xa35\xcc\x9b\x9e\xbb5\x18[\x958D\\~3\xcaO\x97M\xaf\x930\xfd\x13\xa3\xde\xce0\x1d5I\xba\xc5;T\xdc\xaf\xc8\xa6\n\x92\x0e6>\x19*') openat$cgroup_ro(r0, &(0x7f0000000480)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\xfb\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed0x0}) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000380)=0xd95, 0x4) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) 09:56:24 executing program 5: syz_mount_image$jfs(&(0x7f00000001c0)='jfs\x00', &(0x7f0000000280)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)={[{@errors_remount='errors=remount-ro'}, {@noquota='noquota'}, {@integrity='integrity'}], [], 0x80000000000}) [ 603.478872][ T1728] input: syz1 as /devices/virtual/input/input6 09:56:25 executing program 5: syz_mount_image$jfs(&(0x7f00000001c0)='jfs\x00', &(0x7f0000000280)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)={[{@errors_remount='errors=remount-ro'}, {@noquota='noquota'}, {@integrity='integrity'}], [], 0xedc000000000}) 09:56:25 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x78, 0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @dev}, 0x10) semget(0x0, 0x0, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) recvmmsg(0xffffffffffffffff, 0x0, 0x103, 0x2000001000, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x31c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) [ 603.988895][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 603.994716][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 603.998836][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 604.006216][ C1] protocol 88fb is buggy, dev hsr_slave_1 09:56:25 executing program 4: fstat(0xffffffffffffffff, 0x0) fstat(0xffffffffffffff9c, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x80000000000003, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'ip6_vti0\x00', 0x0}) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000380)=0xd95, 0x4) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) 09:56:25 executing program 5: syz_mount_image$jfs(&(0x7f00000001c0)='jfs\x00', &(0x7f0000000280)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)={[{@errors_remount='errors=remount-ro'}, {@noquota='noquota'}, {@integrity='integrity'}], [], 0x1000000000000}) 09:56:25 executing program 2: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) write$P9_RWRITE(r0, 0x0, 0x0) 09:56:25 executing program 4: fstat(0xffffffffffffffff, 0x0) fstat(0xffffffffffffff9c, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x80000000000003, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'ip6_vti0\x00', 0x0}) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000380)=0xd95, 0x4) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) 09:56:26 executing program 5: syz_mount_image$jfs(&(0x7f00000001c0)='jfs\x00', &(0x7f0000000280)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)={[{@errors_remount='errors=remount-ro'}, {@noquota='noquota'}, {@integrity='integrity'}], [], 0x7ffffffffffff}) 09:56:26 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000640)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\xe3\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\x00\x87\xac\xad\x80\xa3P\x8c\xea\x17f%;\x9c\xc7\x00\xeb\xf4X#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80\x1d\x95WM\x9a\xc6\x95\x98\xed\xe9\xca\x9e\xe6\xcb\x8e\xef\xf659-\xef\xb5\xc9\xf2\"\x15\xb39T\x81\x19\xcc\xcd\xb5\r\x10G\x16(~\x15\xd1\xde\x9e\xb1s\xa0\x864hb\xaa\xa3\x18V\x17xE\xbd\xc2QD\xa5P\x0f\x8e\x1f\x888\xb6\xee\xc6N\xd2\x136\xeb\xa4\x1d\xaap\xc6\x9e\xdc\x007h\f\x96g\"_\xb1\x1b\xdb\x86\xc6\xc9\xb1\xcc\xa1\x9f\xd8h\xcc\x12\xf1k\xe8\x86:D\xd2\xd1\x02I\xfe\x96t\xe5C\x86)\xf0M\xc4\xa35\xcc\x9b\x9e\xbb5\x18[\x958D\\~3\xcaO\x97M\xaf\x930\xfd\x13\xa3\xde\xce0\x1d5I\xba\xc5;T\xdc\xaf\xc8\xa6\n\x92\x0e6>\x19*') openat$cgroup_ro(r0, &(0x7f0000000480)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\xfb\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 605.717118][ T1779] RSP: 002b:00007f6773e3fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 605.725517][ T1779] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459819 [ 605.733479][ T1779] RDX: 000000002000008f RSI: 0000000020000080 RDI: 0000000000000005 [ 605.741432][ T1779] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 605.749381][ T1779] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f6773e406d4 [ 605.757328][ T1779] R13: 00000000004c9492 R14: 00000000004e0660 R15: 00000000ffffffff [ 605.765624][ T1779] memory: usage 307200kB, limit 307200kB, failcnt 612 [ 605.772422][ T1779] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 605.779299][ T1779] Memory cgroup stats for /syz1: [ 605.779369][ T1779] anon 281104384 [ 605.779369][ T1779] file 122880 [ 605.779369][ T1779] kernel_stack 4194304 [ 605.779369][ T1779] slab 10817536 [ 605.779369][ T1779] sock 65536 [ 605.779369][ T1779] shmem 131072 [ 605.779369][ T1779] file_mapped 0 [ 605.779369][ T1779] file_dirty 0 [ 605.779369][ T1779] file_writeback 0 [ 605.779369][ T1779] anon_thp 260046848 [ 605.779369][ T1779] inactive_anon 135168 [ 605.779369][ T1779] active_anon 281174016 [ 605.779369][ T1779] inactive_file 12288 [ 605.779369][ T1779] active_file 0 [ 605.779369][ T1779] unevictable 0 [ 605.779369][ T1779] slab_reclaimable 2703360 [ 605.779369][ T1779] slab_unreclaimable 8114176 [ 605.779369][ T1779] pgfault 83457 [ 605.779369][ T1779] pgmajfault 0 [ 605.779369][ T1779] workingset_refault 0 [ 605.779369][ T1779] workingset_activate 0 [ 605.779369][ T1779] workingset_nodereclaim 0 [ 605.779369][ T1779] pgrefill 2100 [ 605.779369][ T1779] pgscan 3928 [ 605.779369][ T1779] pgsteal 1414 [ 605.873518][ T1779] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=1778,uid=0 [ 605.888858][ T1779] Memory cgroup out of memory: Killed process 1779 (syz-executor.1) total-vm:72704kB, anon-rss:7596kB, file-rss:35800kB, shmem-rss:0kB [ 605.908368][ T1057] oom_reaper: reaped process 1779 (syz-executor.1), now anon-rss:0kB, file-rss:34840kB, shmem-rss:0kB [ 606.061928][ T1794] IPVS: ftp: loaded support on port[0] = 21 [ 606.269769][ T1794] chnl_net:caif_netlink_parms(): no params data found [ 606.297204][ T1794] bridge0: port 1(bridge_slave_0) entered blocking state [ 606.304437][ T1794] bridge0: port 1(bridge_slave_0) entered disabled state [ 606.312278][ T1794] device bridge_slave_0 entered promiscuous mode [ 606.404544][ T1794] bridge0: port 2(bridge_slave_1) entered blocking state [ 606.411741][ T1794] bridge0: port 2(bridge_slave_1) entered disabled state [ 606.419600][ T1794] device bridge_slave_1 entered promiscuous mode [ 606.438149][ T1794] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 606.448600][ T1794] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 606.467010][ T1794] team0: Port device team_slave_0 added [ 606.474514][ T1794] team0: Port device team_slave_1 added [ 606.600628][ T1794] device hsr_slave_0 entered promiscuous mode [ 606.659241][ T1794] device hsr_slave_1 entered promiscuous mode [ 606.699070][ T1794] debugfs: Directory 'hsr0' with parent '/' already present! [ 606.782214][ T1794] bridge0: port 2(bridge_slave_1) entered blocking state [ 606.789288][ T1794] bridge0: port 2(bridge_slave_1) entered forwarding state [ 606.796525][ T1794] bridge0: port 1(bridge_slave_0) entered blocking state [ 606.803602][ T1794] bridge0: port 1(bridge_slave_0) entered forwarding state [ 606.914261][ T1794] 8021q: adding VLAN 0 to HW filter on device bond0 [ 606.925279][ T2823] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 606.934865][ T2823] bridge0: port 1(bridge_slave_0) entered disabled state [ 606.943372][ T2823] bridge0: port 2(bridge_slave_1) entered disabled state [ 606.951963][ T2823] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 606.963558][ T821] device bridge_slave_1 left promiscuous mode [ 606.969889][ T821] bridge0: port 2(bridge_slave_1) entered disabled state [ 607.010574][ T821] device bridge_slave_0 left promiscuous mode [ 607.016862][ T821] bridge0: port 1(bridge_slave_0) entered disabled state [ 608.719750][ T821] device hsr_slave_0 left promiscuous mode [ 608.759279][ T821] device hsr_slave_1 left promiscuous mode [ 608.807592][ T821] team0 (unregistering): Port device team_slave_1 removed [ 608.818595][ T821] team0 (unregistering): Port device team_slave_0 removed [ 608.830078][ T821] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 608.882808][ T821] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 608.952769][ T821] bond0 (unregistering): Released all slaves [ 609.030539][ T1794] 8021q: adding VLAN 0 to HW filter on device team0 [ 609.040578][ T2823] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 609.049573][ T2823] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 609.057905][ T2823] bridge0: port 1(bridge_slave_0) entered blocking state [ 609.065026][ T2823] bridge0: port 1(bridge_slave_0) entered forwarding state [ 609.075053][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 609.083695][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 609.092033][ T1277] bridge0: port 2(bridge_slave_1) entered blocking state [ 609.099103][ T1277] bridge0: port 2(bridge_slave_1) entered forwarding state [ 609.109158][ T2823] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 609.129373][ T2823] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 609.137907][ T2823] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 609.146616][ T2823] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 609.154993][ T2823] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 609.163318][ T2823] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 609.171735][ T2823] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 609.179910][ T2823] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 609.188337][ T2823] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 609.197776][ T2823] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 609.206157][ T2823] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 609.216356][ T1794] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 609.280884][ T1794] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 609.437046][ T1811] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 609.447437][ T1811] CPU: 0 PID: 1811 Comm: syz-executor.3 Not tainted 5.2.0+ #37 [ 609.454977][ T1811] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 609.465038][ T1811] Call Trace: [ 609.468328][ T1811] dump_stack+0x1d8/0x2f8 [ 609.472649][ T1811] dump_header+0xd8/0x970 [ 609.476966][ T1811] oom_kill_process+0xcd/0x320 [ 609.481720][ T1811] out_of_memory+0x5e1/0x8a0 [ 609.486299][ T1811] ? unregister_oom_notifier+0x20/0x20 [ 609.491764][ T1811] memory_max_write+0x537/0x6a0 [ 609.496602][ T1811] ? lock_acquire+0x158/0x250 [ 609.501267][ T1811] ? memory_max_show+0xa0/0xa0 [ 609.506042][ T1811] ? trace_lock_acquire+0x154/0x1b0 [ 609.511236][ T1811] ? lock_acquire+0x158/0x250 [ 609.515896][ T1811] ? kernfs_fop_write+0x22e/0x4f0 [ 609.520901][ T1811] ? memory_max_show+0xa0/0xa0 [ 609.525660][ T1811] cgroup_file_write+0x27b/0x6e0 [ 609.530589][ T1811] ? cgroup_seqfile_stop+0xc0/0xc0 [ 609.535697][ T1811] ? kernfs_get_active+0x1/0x2b0 [ 609.540619][ T1811] ? cgroup_seqfile_stop+0xc0/0xc0 [ 609.545719][ T1811] kernfs_fop_write+0x3e4/0x4f0 [ 609.550556][ T1811] ? kernfs_fop_read+0x580/0x580 [ 609.555494][ T1811] __vfs_write+0xf9/0x7d0 [ 609.559823][ T1811] ? __kernel_write+0x350/0x350 [ 609.564678][ T1811] ? __sb_start_write+0x39c/0x440 [ 609.569693][ T1811] ? __kasan_check_read+0x11/0x20 [ 609.574709][ T1811] vfs_write+0x275/0x590 [ 609.578998][ T1811] ksys_write+0x16b/0x2a0 [ 609.583319][ T1811] ? __ia32_sys_read+0x90/0x90 [ 609.588069][ T1811] ? prepare_exit_to_usermode+0x1f7/0x580 [ 609.593793][ T1811] ? trace_irq_disable_rcuidle+0x23/0x1c0 [ 609.599526][ T1811] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 609.604991][ T1811] ? trace_irq_disable_rcuidle+0x23/0x1c0 [ 609.610698][ T1811] ? do_syscall_64+0x1d/0x140 [ 609.615371][ T1811] __x64_sys_write+0x7b/0x90 [ 609.619948][ T1811] do_syscall_64+0xfe/0x140 [ 609.624441][ T1811] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 609.630315][ T1811] RIP: 0033:0x459819 [ 609.634207][ T1811] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 609.653799][ T1811] RSP: 002b:00007fc9cba89c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 609.662228][ T1811] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459819 [ 609.670222][ T1811] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 609.678190][ T1811] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 609.686157][ T1811] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc9cba8a6d4 [ 609.694124][ T1811] R13: 00000000004c9774 R14: 00000000004e0b70 R15: 00000000ffffffff [ 609.702231][ T1811] memory: usage 4036kB, limit 0kB, failcnt 76 [ 609.708391][ T1811] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 609.715317][ T1811] Memory cgroup stats for /syz3: [ 609.716825][ T1811] anon 2158592 [ 609.716825][ T1811] file 0 [ 609.716825][ T1811] kernel_stack 0 [ 609.716825][ T1811] slab 1802240 [ 609.716825][ T1811] sock 0 [ 609.716825][ T1811] shmem 0 [ 609.716825][ T1811] file_mapped 0 [ 609.716825][ T1811] file_dirty 135168 [ 609.716825][ T1811] file_writeback 0 [ 609.716825][ T1811] anon_thp 2097152 [ 609.716825][ T1811] inactive_anon 0 [ 609.716825][ T1811] active_anon 2158592 [ 609.716825][ T1811] inactive_file 0 [ 609.716825][ T1811] active_file 0 [ 609.716825][ T1811] unevictable 0 [ 609.716825][ T1811] slab_reclaimable 811008 [ 609.716825][ T1811] slab_unreclaimable 991232 [ 609.716825][ T1811] pgfault 78045 [ 609.716825][ T1811] pgmajfault 0 [ 609.716825][ T1811] workingset_refault 0 [ 609.716825][ T1811] workingset_activate 0 [ 609.716825][ T1811] workingset_nodereclaim 0 [ 609.716825][ T1811] pgrefill 0 [ 609.716825][ T1811] pgscan 0 [ 609.716825][ T1811] pgsteal 0 [ 609.716825][ T1811] pgactivate 0 [ 609.810811][ T1811] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=1809,uid=0 [ 609.826603][ T1811] Memory cgroup out of memory: Killed process 1809 (syz-executor.3) total-vm:72708kB, anon-rss:2140kB, file-rss:34816kB, shmem-rss:0kB [ 609.844381][ T1057] oom_reaper: reaped process 1809 (syz-executor.3), now anon-rss:0kB, file-rss:34832kB, shmem-rss:0kB 09:56:31 executing program 4: fstat(0xffffffffffffffff, 0x0) fstat(0xffffffffffffff9c, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x80000000000003, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'ip6_vti0\x00', 0x0}) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000380)=0xd95, 0x4) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) 09:56:31 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f0000000000), 0x100000008001) 09:56:31 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r2 = socket$kcm(0x10, 0x3, 0x0) setsockopt$sock_attach_bpf(r2, 0x10e, 0x4, &(0x7f0000000000)=r0, 0x4) r3 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x40) openat$cgroup_ro(r3, &(0x7f0000000140)='cpuset.effective_cpus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r4 = getpid() perf_event_open(0x0, r4, 0x3, 0xffffffffffffffff, 0x1) r5 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) gettid() r6 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r6, &(0x7f0000000540)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @ipv4}, 0x80, 0x0}, 0x24000001) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f00000002c0)='threaded\x00', 0x9) write$cgroup_int(r5, 0x0, 0x0) write$cgroup_int(r5, 0x0, 0x0) 09:56:31 executing program 5: syz_mount_image$jfs(&(0x7f00000001c0)='jfs\x00', &(0x7f0000000280)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)={[{@errors_remount='errors=remount-ro'}, {@noquota='noquota'}, {@integrity='integrity'}], [], 0x80000000000000}) 09:56:31 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x78, 0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @dev}, 0x10) semget(0x0, 0x0, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) recvmmsg(0xffffffffffffffff, 0x0, 0x103, 0x2000001000, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x31c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 09:56:31 executing program 1: fstat(0xffffffffffffffff, 0x0) fstat(0xffffffffffffff9c, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x80000000000003, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'ip6_vti0\x00', 0x0}) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000380)=0xd95, 0x4) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) [ 610.002843][ T1794] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 610.012790][ T1794] CPU: 0 PID: 1794 Comm: syz-executor.3 Not tainted 5.2.0+ #37 [ 610.020322][ T1794] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 610.030379][ T1794] Call Trace: [ 610.033672][ T1794] dump_stack+0x1d8/0x2f8 [ 610.038007][ T1794] dump_header+0xd8/0x970 [ 610.042333][ T1794] oom_kill_process+0xcd/0x320 [ 610.047095][ T1794] out_of_memory+0x5e1/0x8a0 [ 610.051683][ T1794] ? unregister_oom_notifier+0x20/0x20 [ 610.057135][ T1794] ? __kasan_check_read+0x11/0x20 [ 610.062161][ T1794] try_charge+0x134a/0x17b0 [ 610.066676][ T1794] ? __memcg_kmem_charge_memcg+0x180/0x180 [ 610.072506][ T1794] ? __lock_acquire+0x4750/0x4750 [ 610.077541][ T1794] ? rcu_lock_release+0x15/0x20 [ 610.082385][ T1794] ? get_mem_cgroup_from_mm+0x15e/0x170 [ 610.087920][ T1794] mem_cgroup_try_charge+0x216/0x560 [ 610.093216][ T1794] mem_cgroup_try_charge_delay+0x25/0xa0 [ 610.098852][ T1794] handle_mm_fault+0x31f3/0x6080 [ 610.103798][ T1794] ? finish_fault+0x230/0x230 [ 610.108483][ T1794] ? vmacache_find+0x251/0x5b0 [ 610.113299][ T1794] do_user_addr_fault+0x589/0xaf0 [ 610.118329][ T1794] __do_page_fault+0xd3/0x1f0 [ 610.123018][ T1794] do_page_fault+0x99/0xb0 [ 610.127433][ T1794] page_fault+0x39/0x40 [ 610.131586][ T1794] RIP: 0033:0x42fd47 [ 610.135473][ T1794] Code: 00 be 28 31 4e 00 bf d0 38 4e 00 e8 e3 b8 ff ff 0f 1f 00 48 83 fe bf 0f 87 63 08 00 00 48 89 f0 41 57 41 56 48 83 c0 17 41 55 <41> 54 55 53 48 89 c5 48 83 e5 f0 48 89 fb 48 81 ec 98 00 00 00 48 [ 610.155070][ T1794] RSP: 002b:00007fff1b31d000 EFLAGS: 00010206 [ 610.161135][ T1794] RAX: 0000000000008047 RBX: 0000000000715640 RCX: 0000000000458b84 [ 610.169100][ T1794] RDX: 00007fff1b31d040 RSI: 0000000000008030 RDI: 0000000000715640 [ 610.177595][ T1794] RBP: 0000000000008030 R08: 0000000000000001 R09: 000055555678d940 [ 610.185734][ T1794] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff1b31e220 [ 610.193699][ T1794] R13: 00007fff1b31e210 R14: 0000000000000000 R15: 00007fff1b31e220 [ 610.201737][ T1794] memory: usage 1708kB, limit 0kB, failcnt 93 [ 610.207793][ T1794] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 610.214670][ T1794] Memory cgroup stats for /syz3: [ 610.214745][ T1794] anon 0 [ 610.214745][ T1794] file 0 [ 610.214745][ T1794] kernel_stack 0 [ 610.214745][ T1794] slab 1802240 [ 610.214745][ T1794] sock 0 [ 610.214745][ T1794] shmem 0 [ 610.214745][ T1794] file_mapped 0 [ 610.214745][ T1794] file_dirty 135168 [ 610.214745][ T1794] file_writeback 0 [ 610.214745][ T1794] anon_thp 0 [ 610.214745][ T1794] inactive_anon 0 [ 610.214745][ T1794] active_anon 0 [ 610.214745][ T1794] inactive_file 0 [ 610.214745][ T1794] active_file 0 [ 610.214745][ T1794] unevictable 0 [ 610.214745][ T1794] slab_reclaimable 811008 [ 610.214745][ T1794] slab_unreclaimable 991232 [ 610.214745][ T1794] pgfault 78045 [ 610.214745][ T1794] pgmajfault 0 [ 610.214745][ T1794] workingset_refault 0 [ 610.214745][ T1794] workingset_activate 0 [ 610.214745][ T1794] workingset_nodereclaim 0 [ 610.214745][ T1794] pgrefill 0 [ 610.214745][ T1794] pgscan 0 [ 610.214745][ T1794] pgsteal 0 [ 610.214745][ T1794] pgactivate 0 [ 610.214745][ T1794] pgdeactivate 0 [ 610.310374][ T1794] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=1794,uid=0 [ 610.310450][ T1794] Memory cgroup out of memory: Killed process 1794 (syz-executor.3) total-vm:72444kB, anon-rss:72kB, file-rss:34832kB, shmem-rss:0kB [ 610.311602][ T1057] oom_reaper: reaped process 1794 (syz-executor.3), now anon-rss:0kB, file-rss:33936kB, shmem-rss:0kB 09:56:31 executing program 4: fstat(0xffffffffffffffff, 0x0) fstat(0xffffffffffffff9c, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x80000000000003, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000380)=0xd95, 0x4) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) 09:56:31 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f0000000000), 0x100000008001) 09:56:32 executing program 5: syz_mount_image$jfs(&(0x7f00000001c0)='jfs\x00', &(0x7f0000000280)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)={[{@errors_remount='errors=remount-ro'}, {@noquota='noquota'}, {@integrity='integrity'}], [], 0x100000000000000}) 09:56:32 executing program 4: fstat(0xffffffffffffffff, 0x0) fstat(0xffffffffffffff9c, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x80000000000003, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000380)=0xd95, 0x4) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) 09:56:32 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f0000000000), 0x100000008001) 09:56:32 executing program 5: syz_mount_image$jfs(&(0x7f00000001c0)='jfs\x00', &(0x7f0000000280)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)={[{@errors_remount='errors=remount-ro'}, {@noquota='noquota'}, {@integrity='integrity'}], [], 0x200000000000000}) 09:56:32 executing program 4: fstat(0xffffffffffffffff, 0x0) fstat(0xffffffffffffff9c, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x80000000000003, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000380)=0xd95, 0x4) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) 09:56:32 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x78, 0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @dev}, 0x10) semget(0x0, 0x0, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) recvmmsg(0xffffffffffffffff, 0x0, 0x103, 0x2000001000, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x31c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 09:56:33 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r2 = socket$kcm(0x10, 0x3, 0x0) setsockopt$sock_attach_bpf(r2, 0x10e, 0x4, &(0x7f0000000000)=r0, 0x4) r3 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x40) openat$cgroup_ro(r3, &(0x7f0000000140)='cpuset.effective_cpus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r4 = getpid() perf_event_open(0x0, r4, 0x3, 0xffffffffffffffff, 0x1) r5 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) gettid() r6 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r6, &(0x7f0000000540)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @ipv4}, 0x80, 0x0}, 0x24000001) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000080)='cgroup.type\x00', 0x2, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f00000002c0)='threaded\x00', 0x9) write$cgroup_int(r5, 0x0, 0x0) write$cgroup_int(r5, 0x0, 0x0) 09:56:33 executing program 1: fstat(0xffffffffffffffff, 0x0) fstat(0xffffffffffffff9c, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x80000000000003, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'ip6_vti0\x00', 0x0}) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000380)=0xd95, 0x4) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) 09:56:33 executing program 4: fstat(0xffffffffffffffff, 0x0) fstat(0xffffffffffffff9c, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x80000000000003, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'ip6_vti0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000380)=0xd95, 0x4) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) 09:56:33 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x78, 0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @dev}, 0x10) semget(0x0, 0x0, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) recvmmsg(0xffffffffffffffff, 0x0, 0x103, 0x2000001000, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x31c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 09:56:33 executing program 5: syz_mount_image$jfs(&(0x7f00000001c0)='jfs\x00', &(0x7f0000000280)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)={[{@errors_remount='errors=remount-ro'}, {@noquota='noquota'}, {@integrity='integrity'}], [], 0x204000000000000}) 09:56:33 executing program 4: fstat(0xffffffffffffffff, 0x0) fstat(0xffffffffffffff9c, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x80000000000003, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'ip6_vti0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000380)=0xd95, 0x4) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) 09:56:33 executing program 5: syz_mount_image$jfs(&(0x7f00000001c0)='jfs\x00', &(0x7f0000000280)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)={[{@errors_remount='errors=remount-ro'}, {@noquota='noquota'}, {@integrity='integrity'}], [], 0x300000000000000}) 09:56:33 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r2 = socket$kcm(0x10, 0x3, 0x0) setsockopt$sock_attach_bpf(r2, 0x10e, 0x4, &(0x7f0000000000)=r0, 0x4) r3 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x40) openat$cgroup_ro(r3, &(0x7f0000000140)='cpuset.effective_cpus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r4 = getpid() perf_event_open(0x0, r4, 0x3, 0xffffffffffffffff, 0x1) r5 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) gettid() r6 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r6, &(0x7f0000000540)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @ipv4}, 0x80, 0x0}, 0x24000001) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000080)='cgroup.type\x00', 0x2, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f00000002c0)='threaded\x00', 0x9) write$cgroup_int(r5, 0x0, 0x0) write$cgroup_int(r5, 0x0, 0x0) 09:56:33 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x78, 0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @dev}, 0x10) semget(0x0, 0x0, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) recvmmsg(0xffffffffffffffff, 0x0, 0x103, 0x2000001000, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x31c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 09:56:33 executing program 4: fstat(0xffffffffffffffff, 0x0) fstat(0xffffffffffffff9c, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x80000000000003, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'ip6_vti0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000380)=0xd95, 0x4) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) 09:56:33 executing program 5: syz_mount_image$jfs(&(0x7f00000001c0)='jfs\x00', &(0x7f0000000280)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)={[{@errors_remount='errors=remount-ro'}, {@noquota='noquota'}, {@integrity='integrity'}], [], 0x400000000000000}) 09:56:33 executing program 4: fstat(0xffffffffffffffff, 0x0) fstat(0xffffffffffffff9c, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x80000000000003, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'ip6_vti0\x00'}) bind$packet(r0, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000380)=0xd95, 0x4) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) 09:56:33 executing program 5: syz_mount_image$jfs(&(0x7f00000001c0)='jfs\x00', &(0x7f0000000280)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)={[{@errors_remount='errors=remount-ro'}, {@noquota='noquota'}, {@integrity='integrity'}], [], 0x500000000000000}) 09:56:33 executing program 1: fstat(0xffffffffffffffff, 0x0) fstat(0xffffffffffffff9c, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x80000000000003, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'ip6_vti0\x00', 0x0}) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000380)=0xd95, 0x4) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) 09:56:33 executing program 4: fstat(0xffffffffffffffff, 0x0) fstat(0xffffffffffffff9c, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x80000000000003, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'ip6_vti0\x00'}) bind$packet(r0, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000380)=0xd95, 0x4) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) 09:56:34 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r2 = socket$kcm(0x10, 0x3, 0x0) setsockopt$sock_attach_bpf(r2, 0x10e, 0x4, &(0x7f0000000000)=r0, 0x4) r3 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x40) openat$cgroup_ro(r3, &(0x7f0000000140)='cpuset.effective_cpus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r4 = getpid() perf_event_open(0x0, r4, 0x3, 0xffffffffffffffff, 0x1) r5 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) gettid() r6 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r6, &(0x7f0000000540)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @ipv4}, 0x80, 0x0}, 0x24000001) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f00000002c0)='threaded\x00', 0x9) write$cgroup_int(r5, 0x0, 0x0) write$cgroup_int(r5, 0x0, 0x0) 09:56:34 executing program 5: syz_mount_image$jfs(&(0x7f00000001c0)='jfs\x00', &(0x7f0000000280)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)={[{@errors_remount='errors=remount-ro'}, {@noquota='noquota'}, {@integrity='integrity'}], [], 0x600000000000000}) 09:56:34 executing program 4: fstat(0xffffffffffffffff, 0x0) fstat(0xffffffffffffff9c, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x80000000000003, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'ip6_vti0\x00'}) bind$packet(r0, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000380)=0xd95, 0x4) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) [ 612.892689][ T1920] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 612.903048][ T1920] CPU: 0 PID: 1920 Comm: syz-executor.2 Not tainted 5.2.0+ #37 [ 612.910592][ T1920] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 612.920632][ T1920] Call Trace: [ 612.923913][ T1920] dump_stack+0x1d8/0x2f8 [ 612.928711][ T1920] dump_header+0xd8/0x970 [ 612.933026][ T1920] oom_kill_process+0xcd/0x320 [ 612.937773][ T1920] out_of_memory+0x5e1/0x8a0 [ 612.942347][ T1920] ? unregister_oom_notifier+0x20/0x20 [ 612.947807][ T1920] ? __kasan_check_read+0x11/0x20 [ 612.952854][ T1920] try_charge+0x134a/0x17b0 [ 612.957357][ T1920] ? __memcg_kmem_charge_memcg+0x180/0x180 [ 612.963154][ T1920] ? __lock_acquire+0x4750/0x4750 [ 612.968166][ T1920] ? rcu_lock_release+0x15/0x20 [ 612.973018][ T1920] ? get_mem_cgroup_from_mm+0x15e/0x170 [ 612.978545][ T1920] mem_cgroup_try_charge+0x216/0x560 [ 612.983811][ T1920] mem_cgroup_try_charge_delay+0x25/0xa0 [ 612.989434][ T1920] handle_mm_fault+0x31f3/0x6080 [ 612.994360][ T1920] ? finish_fault+0x230/0x230 [ 612.999039][ T1920] ? vmacache_find+0x566/0x5b0 [ 613.003793][ T1920] ? vmacache_update+0xb7/0x120 [ 613.008644][ T1920] do_user_addr_fault+0x589/0xaf0 [ 613.013668][ T1920] __do_page_fault+0xd3/0x1f0 [ 613.018326][ T1920] do_page_fault+0x99/0xb0 [ 613.022725][ T1920] page_fault+0x39/0x40 [ 613.026859][ T1920] RIP: 0033:0x41115f [ 613.030735][ T1920] Code: 0f 84 c8 02 00 00 48 83 bd 78 ff ff ff 00 0f 84 f9 04 00 00 48 8b 95 68 ff ff ff 44 89 95 38 ff ff ff 4c 8d ac 10 00 f7 ff ff <49> 89 85 90 06 00 00 49 8d 85 10 03 00 00 49 89 95 98 06 00 00 41 [ 613.050324][ T1920] RSP: 002b:00007ffe0e974ca0 EFLAGS: 00010206 [ 613.056371][ T1920] RAX: 00007f5012692000 RBX: 0000000000020000 RCX: 000000000045986a [ 613.064344][ T1920] RDX: 0000000000021000 RSI: 0000000000021000 RDI: 0000000000000000 [ 613.072318][ T1920] RBP: 00007ffe0e974d80 R08: ffffffffffffffff R09: 0000000000000000 [ 613.080268][ T1920] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe0e974e70 [ 613.088235][ T1920] R13: 00007f50126b2700 R14: 0000000000000001 R15: 000000000075bfd4 [ 613.096255][ T1920] memory: usage 6068kB, limit 0kB, failcnt 236 [ 613.102427][ T1920] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 613.109298][ T1920] Memory cgroup stats for /syz2: [ 613.109419][ T1920] anon 2248704 [ 613.109419][ T1920] file 12288 [ 613.109419][ T1920] kernel_stack 65536 [ 613.109419][ T1920] slab 3760128 [ 613.109419][ T1920] sock 0 [ 613.109419][ T1920] shmem 86016 [ 613.109419][ T1920] file_mapped 135168 [ 613.109419][ T1920] file_dirty 135168 [ 613.109419][ T1920] file_writeback 0 [ 613.109419][ T1920] anon_thp 2097152 [ 613.109419][ T1920] inactive_anon 0 [ 613.109419][ T1920] active_anon 2174976 [ 613.109419][ T1920] inactive_file 135168 [ 613.109419][ T1920] active_file 135168 [ 613.109419][ T1920] unevictable 0 [ 613.109419][ T1920] slab_reclaimable 1351680 [ 613.109419][ T1920] slab_unreclaimable 2408448 [ 613.109419][ T1920] pgfault 62799 [ 613.109419][ T1920] pgmajfault 0 [ 613.109419][ T1920] workingset_refault 0 [ 613.109419][ T1920] workingset_activate 0 [ 613.109419][ T1920] workingset_nodereclaim 0 [ 613.109419][ T1920] pgrefill 0 [ 613.109419][ T1920] pgscan 0 [ 613.109419][ T1920] pgsteal 0 [ 613.202489][ T1920] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=1920,uid=0 [ 613.217874][ T1920] Memory cgroup out of memory: Killed process 1920 (syz-executor.2) total-vm:72704kB, anon-rss:2152kB, file-rss:34816kB, shmem-rss:0kB 09:56:34 executing program 4: fstat(0xffffffffffffffff, 0x0) fstat(0xffffffffffffff9c, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x80000000000003, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'ip6_vti0\x00'}) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000380)=0xd95, 0x4) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) [ 613.240807][ T1057] oom_reaper: reaped process 1920 (syz-executor.2), now anon-rss:0kB, file-rss:33856kB, shmem-rss:0kB [ 613.604599][ T1368] syz-executor.2 invoked oom-killer: gfp_mask=0x40cc0(GFP_KERNEL|__GFP_COMP), order=1, oom_score_adj=0 [ 613.615737][ T1368] CPU: 1 PID: 1368 Comm: syz-executor.2 Not tainted 5.2.0+ #37 [ 613.623267][ T1368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 613.633309][ T1368] Call Trace: [ 613.636616][ T1368] dump_stack+0x1d8/0x2f8 [ 613.640972][ T1368] dump_header+0xd8/0x970 [ 613.645314][ T1368] oom_kill_process+0xcd/0x320 [ 613.650077][ T1368] out_of_memory+0x5e1/0x8a0 [ 613.654668][ T1368] ? unregister_oom_notifier+0x20/0x20 [ 613.660122][ T1368] ? __kasan_check_read+0x11/0x20 [ 613.665147][ T1368] try_charge+0x134a/0x17b0 [ 613.669665][ T1368] ? __memcg_kmem_charge_memcg+0x180/0x180 [ 613.675476][ T1368] ? rcu_read_lock_sched_held+0x127/0x1c0 [ 613.681190][ T1368] ? trace_mm_page_alloc+0x187/0x1d0 [ 613.686491][ T1368] __memcg_kmem_charge_memcg+0x78/0x180 [ 613.692060][ T1368] ? memcg_kmem_put_cache+0x50/0x50 [ 613.697265][ T1368] ? kmem_freepages+0x580/0x580 [ 613.702138][ T1368] kmem_getpages+0x411/0x970 [ 613.706725][ T1368] cache_grow_begin+0x7e/0x2c0 [ 613.711494][ T1368] ? __cpuset_node_allowed+0x198/0x530 [ 613.716951][ T1368] fallback_alloc+0x134/0x1c0 [ 613.721626][ T1368] ____cache_alloc_node+0x22a/0x250 [ 613.726823][ T1368] kmem_cache_alloc_node_trace+0x1eb/0x2c0 [ 613.732622][ T1368] ? __kmalloc_node+0x3c/0x60 [ 613.737297][ T1368] __kmalloc_node+0x3c/0x60 [ 613.741808][ T1368] kvmalloc_node+0xcc/0x130 [ 613.746307][ T1368] xt_alloc_table_info+0x45/0xb0 [ 613.751215][ T1368] do_ip6t_set_ctl+0x285/0x5b0 [ 613.755968][ T1368] ? mutex_lock_io_nested+0x60/0x60 [ 613.761140][ T1368] ? cleanup_entry+0x4d0/0x4d0 [ 613.765870][ T1368] ? __mutex_unlock_slowpath+0x18c/0x630 [ 613.771477][ T1368] nf_setsockopt+0x286/0x2b0 [ 613.776036][ T1368] ipv6_setsockopt+0x9e/0x170 [ 613.780695][ T1368] tcp_setsockopt+0xbe/0xd0 [ 613.785180][ T1368] sock_common_setsockopt+0x99/0xb0 [ 613.790347][ T1368] ? sock_common_recvmsg+0x240/0x240 [ 613.795597][ T1368] __sys_setsockopt+0x683/0x870 [ 613.800417][ T1368] ? rcu_lock_release+0x30/0x30 [ 613.805250][ T1368] ? __kasan_check_read+0x11/0x20 [ 613.810244][ T1368] ? fpregs_assert_state_consistent+0xb7/0xe0 [ 613.816278][ T1368] ? prepare_exit_to_usermode+0x1f7/0x580 [ 613.821972][ T1368] ? trace_irq_disable_rcuidle+0x23/0x1c0 [ 613.827659][ T1368] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 613.833087][ T1368] ? trace_irq_disable_rcuidle+0x23/0x1c0 [ 613.838787][ T1368] __x64_sys_setsockopt+0xbf/0xd0 [ 613.843783][ T1368] do_syscall_64+0xfe/0x140 [ 613.848255][ T1368] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 613.854130][ T1368] RIP: 0033:0x45c34a [ 613.857995][ T1368] Code: 49 89 ca b8 37 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 ba 8c fb ff c3 66 0f 1f 84 00 00 00 00 00 49 89 ca b8 36 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 9a 8c fb ff c3 66 0f 1f 84 00 00 00 00 00 [ 613.877567][ T1368] RSP: 002b:00007ffe0e9747a8 EFLAGS: 00000202 ORIG_RAX: 0000000000000036 [ 613.885945][ T1368] RAX: ffffffffffffffda RBX: 00007ffe0e9747d0 RCX: 000000000045c34a [ 613.893890][ T1368] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 613.901842][ T1368] RBP: 0000000000712cc0 R08: 00000000000002e8 R09: 0000000000004000 [ 613.909781][ T1368] R10: 0000000000711fa0 R11: 0000000000000202 R12: 0000000000000003 [ 613.917730][ T1368] R13: 0000000000000000 R14: 0000000000000029 R15: 0000000000711f40 [ 613.926782][ T1368] memory: usage 3676kB, limit 0kB, failcnt 249 [ 613.933007][ T1368] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 613.939882][ T1368] Memory cgroup stats for /syz2: [ 613.939981][ T1368] anon 147456 [ 613.939981][ T1368] file 12288 [ 613.939981][ T1368] kernel_stack 0 [ 613.939981][ T1368] slab 3760128 [ 613.939981][ T1368] sock 0 [ 613.939981][ T1368] shmem 86016 [ 613.939981][ T1368] file_mapped 135168 [ 613.939981][ T1368] file_dirty 135168 [ 613.939981][ T1368] file_writeback 0 [ 613.939981][ T1368] anon_thp 0 [ 613.939981][ T1368] inactive_anon 0 [ 613.939981][ T1368] active_anon 73728 [ 613.939981][ T1368] inactive_file 135168 [ 613.939981][ T1368] active_file 135168 [ 613.939981][ T1368] unevictable 0 [ 613.939981][ T1368] slab_reclaimable 1351680 [ 613.939981][ T1368] slab_unreclaimable 2408448 [ 613.939981][ T1368] pgfault 62832 [ 613.939981][ T1368] pgmajfault 0 [ 613.939981][ T1368] workingset_refault 0 [ 613.939981][ T1368] workingset_activate 0 [ 613.939981][ T1368] workingset_nodereclaim 0 [ 613.939981][ T1368] pgrefill 0 [ 613.939981][ T1368] pgscan 0 [ 613.939981][ T1368] pgsteal 0 [ 613.939981][ T1368] pgactivate 0 [ 614.035210][ T1368] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=1368,uid=0 [ 614.050554][ T1368] Memory cgroup out of memory: Killed process 1368 (syz-executor.2) total-vm:72440kB, anon-rss:104kB, file-rss:35776kB, shmem-rss:0kB [ 614.065290][ T1057] oom_reaper: reaped process 1368 (syz-executor.2), now anon-rss:0kB, file-rss:34880kB, shmem-rss:0kB [ 614.078009][ T1368] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 614.742086][ T1949] IPVS: ftp: loaded support on port[0] = 21 [ 614.803263][ T1949] chnl_net:caif_netlink_parms(): no params data found [ 614.902712][ T1949] bridge0: port 1(bridge_slave_0) entered blocking state [ 614.909901][ T1949] bridge0: port 1(bridge_slave_0) entered disabled state [ 614.917326][ T1949] device bridge_slave_0 entered promiscuous mode [ 614.999408][ T1949] bridge0: port 2(bridge_slave_1) entered blocking state [ 615.006458][ T1949] bridge0: port 2(bridge_slave_1) entered disabled state [ 615.014334][ T1949] device bridge_slave_1 entered promiscuous mode [ 615.030774][ T1949] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 615.041623][ T1949] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 615.133915][ T1949] team0: Port device team_slave_0 added [ 615.140937][ T1949] team0: Port device team_slave_1 added [ 615.181666][ T1949] device hsr_slave_0 entered promiscuous mode [ 615.208986][ T1949] device hsr_slave_1 entered promiscuous mode [ 615.248856][ T1949] debugfs: Directory 'hsr0' with parent '/' already present! [ 615.367873][ T1949] 8021q: adding VLAN 0 to HW filter on device bond0 [ 615.459450][ T1949] 8021q: adding VLAN 0 to HW filter on device team0 [ 615.466407][ T1197] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 615.474188][ T1197] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 615.484069][ T1197] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 615.492726][ T1197] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 615.501575][ T1197] bridge0: port 1(bridge_slave_0) entered blocking state [ 615.508604][ T1197] bridge0: port 1(bridge_slave_0) entered forwarding state [ 615.516801][ T1197] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 615.526131][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 615.534744][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 615.543107][ T1277] bridge0: port 2(bridge_slave_1) entered blocking state [ 615.550197][ T1277] bridge0: port 2(bridge_slave_1) entered forwarding state [ 615.570098][ T1197] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 615.578664][ T1197] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 615.587087][ T1197] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 615.595438][ T1197] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 615.603602][ T1197] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 615.612125][ T1197] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 615.620491][ T1197] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 615.628583][ T1197] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 615.636644][ T1197] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 615.644761][ T1197] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 615.654462][ T821] device bridge_slave_1 left promiscuous mode [ 615.660736][ T821] bridge0: port 2(bridge_slave_1) entered disabled state [ 615.710082][ T821] device bridge_slave_0 left promiscuous mode [ 615.716362][ T821] bridge0: port 1(bridge_slave_0) entered disabled state [ 617.479751][ T821] device hsr_slave_0 left promiscuous mode [ 617.539443][ T821] device hsr_slave_1 left promiscuous mode [ 617.587208][ T821] team0 (unregistering): Port device team_slave_1 removed [ 617.597989][ T821] team0 (unregistering): Port device team_slave_0 removed [ 617.608181][ T821] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 617.665262][ T821] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 617.748994][ T821] bond0 (unregistering): Released all slaves [ 617.893655][ T1949] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 617.901430][ T1341] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 617.922051][ T1949] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 618.027729][ T1957] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 618.037960][ T1957] CPU: 0 PID: 1957 Comm: syz-executor.3 Not tainted 5.2.0+ #37 [ 618.045488][ T1957] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 618.055526][ T1957] Call Trace: [ 618.058821][ T1957] dump_stack+0x1d8/0x2f8 [ 618.063147][ T1957] dump_header+0xd8/0x970 [ 618.067482][ T1957] oom_kill_process+0xcd/0x320 [ 618.072240][ T1957] out_of_memory+0x5e1/0x8a0 [ 618.076809][ T1957] ? unregister_oom_notifier+0x20/0x20 [ 618.082250][ T1957] memory_max_write+0x537/0x6a0 [ 618.087091][ T1957] ? lock_acquire+0x1b2/0x250 [ 618.091777][ T1957] ? memory_max_show+0xa0/0xa0 [ 618.096550][ T1957] ? trace_lock_acquire+0x154/0x1b0 [ 618.101758][ T1957] ? lock_acquire+0x158/0x250 [ 618.106469][ T1957] ? kernfs_fop_write+0x22e/0x4f0 [ 618.111505][ T1957] ? memory_max_show+0xa0/0xa0 [ 618.116258][ T1957] cgroup_file_write+0x27b/0x6e0 [ 618.121200][ T1957] ? cgroup_seqfile_stop+0xc0/0xc0 [ 618.126322][ T1957] ? cgroup_seqfile_stop+0xc0/0xc0 [ 618.131412][ T1957] kernfs_fop_write+0x3e4/0x4f0 [ 618.136252][ T1957] ? kernfs_fop_read+0x580/0x580 [ 618.141186][ T1957] __vfs_write+0xf9/0x7d0 [ 618.145510][ T1957] ? __lock_acquire+0x4750/0x4750 [ 618.150539][ T1957] ? __kernel_write+0x350/0x350 [ 618.155384][ T1957] ? trace_lock_acquire+0x154/0x1b0 [ 618.160564][ T1957] ? __sb_start_write+0x39c/0x440 [ 618.165583][ T1957] ? __kasan_check_read+0x11/0x20 [ 618.170826][ T1957] vfs_write+0x275/0x590 [ 618.175071][ T1957] ksys_write+0x16b/0x2a0 [ 618.179398][ T1957] ? __ia32_sys_read+0x90/0x90 [ 618.184145][ T1957] ? prepare_exit_to_usermode+0x1f7/0x580 [ 618.189849][ T1957] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 618.195328][ T1957] ? trace_irq_disable_rcuidle+0x23/0x1c0 [ 618.201054][ T1957] ? do_syscall_64+0x1d/0x140 [ 618.205708][ T1957] __x64_sys_write+0x7b/0x90 [ 618.210277][ T1957] do_syscall_64+0xfe/0x140 [ 618.214770][ T1957] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 618.220657][ T1957] RIP: 0033:0x459819 [ 618.224528][ T1957] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 618.244108][ T1957] RSP: 002b:00007fd2fd60ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 618.252500][ T1957] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459819 [ 618.260456][ T1957] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 618.268427][ T1957] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 618.276398][ T1957] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd2fd60f6d4 [ 618.284381][ T1957] R13: 00000000004c9774 R14: 00000000004e0b70 R15: 00000000ffffffff [ 618.295654][ T1957] memory: usage 3684kB, limit 0kB, failcnt 102 [ 618.301941][ T1957] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 618.308910][ T1957] Memory cgroup stats for /syz3: [ 618.310783][ T1957] anon 2097152 [ 618.310783][ T1957] file 0 [ 618.310783][ T1957] kernel_stack 65536 [ 618.310783][ T1957] slab 1396736 [ 618.310783][ T1957] sock 0 [ 618.310783][ T1957] shmem 0 [ 618.310783][ T1957] file_mapped 0 [ 618.310783][ T1957] file_dirty 135168 [ 618.310783][ T1957] file_writeback 0 [ 618.310783][ T1957] anon_thp 2097152 [ 618.310783][ T1957] inactive_anon 0 [ 618.310783][ T1957] active_anon 2097152 [ 618.310783][ T1957] inactive_file 0 [ 618.310783][ T1957] active_file 0 [ 618.310783][ T1957] unevictable 0 [ 618.310783][ T1957] slab_reclaimable 540672 [ 618.310783][ T1957] slab_unreclaimable 856064 [ 618.310783][ T1957] pgfault 78111 [ 618.310783][ T1957] pgmajfault 0 [ 618.310783][ T1957] workingset_refault 0 [ 618.310783][ T1957] workingset_activate 0 [ 618.310783][ T1957] workingset_nodereclaim 0 [ 618.310783][ T1957] pgrefill 0 [ 618.310783][ T1957] pgscan 0 [ 618.310783][ T1957] pgsteal 0 [ 618.310783][ T1957] pgactivate 0 [ 618.405063][ T1957] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=1956,uid=0 [ 618.420805][ T1957] Memory cgroup out of memory: Killed process 1956 (syz-executor.3) total-vm:72708kB, anon-rss:2144kB, file-rss:34816kB, shmem-rss:0kB [ 618.436763][ T1057] oom_reaper: reaped process 1956 (syz-executor.3), now anon-rss:0kB, file-rss:34832kB, shmem-rss:0kB 09:56:40 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r2 = socket$kcm(0x10, 0x3, 0x0) setsockopt$sock_attach_bpf(r2, 0x10e, 0x4, &(0x7f0000000000)=r0, 0x4) r3 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x40) openat$cgroup_ro(r3, &(0x7f0000000140)='cpuset.effective_cpus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r4 = getpid() perf_event_open(0x0, r4, 0x3, 0xffffffffffffffff, 0x1) r5 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) gettid() r6 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r6, &(0x7f0000000540)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @ipv4}, 0x80, 0x0}, 0x24000001) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000080)='cgroup.type\x00', 0x2, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f00000002c0)='threaded\x00', 0x9) write$cgroup_int(r5, 0x0, 0x0) write$cgroup_int(r5, 0x0, 0x0) 09:56:40 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x78, 0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @dev}, 0x10) semget(0x0, 0x0, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) recvmmsg(0xffffffffffffffff, 0x0, 0x103, 0x2000001000, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x31c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 09:56:40 executing program 5: syz_mount_image$jfs(&(0x7f00000001c0)='jfs\x00', &(0x7f0000000280)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)={[{@errors_remount='errors=remount-ro'}, {@noquota='noquota'}, {@integrity='integrity'}], [], 0x604000000000000}) 09:56:40 executing program 4: fstat(0xffffffffffffffff, 0x0) fstat(0xffffffffffffff9c, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x80000000000003, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'ip6_vti0\x00'}) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000380)=0xd95, 0x4) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) 09:56:40 executing program 1: fstat(0xffffffffffffffff, 0x0) fstat(0xffffffffffffff9c, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x80000000000003, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'ip6_vti0\x00', 0x0}) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) 09:56:40 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r2 = socket$kcm(0x10, 0x3, 0x0) setsockopt$sock_attach_bpf(r2, 0x10e, 0x4, &(0x7f0000000000)=r0, 0x4) r3 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x40) openat$cgroup_ro(r3, &(0x7f0000000140)='cpuset.effective_cpus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r4 = getpid() perf_event_open(0x0, r4, 0x3, 0xffffffffffffffff, 0x1) r5 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) gettid() r6 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r6, &(0x7f0000000540)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @ipv4}, 0x80, 0x0}, 0x24000001) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f00000002c0)='threaded\x00', 0x9) write$cgroup_int(r5, 0x0, 0x0) write$cgroup_int(r5, 0x0, 0x0) [ 618.633622][ T1949] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 618.643596][ T1949] CPU: 1 PID: 1949 Comm: syz-executor.3 Not tainted 5.2.0+ #37 [ 618.651170][ T1949] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 618.661223][ T1949] Call Trace: [ 618.664519][ T1949] dump_stack+0x1d8/0x2f8 [ 618.668840][ T1949] dump_header+0xd8/0x970 [ 618.673163][ T1949] oom_kill_process+0xcd/0x320 [ 618.677918][ T1949] out_of_memory+0x5e1/0x8a0 [ 618.682503][ T1949] ? unregister_oom_notifier+0x20/0x20 [ 618.687950][ T1949] ? __kasan_check_read+0x11/0x20 [ 618.692974][ T1949] try_charge+0x134a/0x17b0 [ 618.697489][ T1949] ? __memcg_kmem_charge_memcg+0x180/0x180 [ 618.703293][ T1949] ? __lock_acquire+0x4750/0x4750 [ 618.708337][ T1949] ? rcu_lock_release+0x15/0x20 [ 618.713180][ T1949] ? get_mem_cgroup_from_mm+0x15e/0x170 [ 618.718724][ T1949] mem_cgroup_try_charge+0x216/0x560 [ 618.723999][ T1949] mem_cgroup_try_charge_delay+0x25/0xa0 [ 618.729628][ T1949] wp_page_copy+0x367/0x18c0 [ 618.734216][ T1949] ? rcu_lock_release+0x30/0x30 [ 618.739056][ T1949] ? __lock_acquire+0x4750/0x4750 [ 618.744066][ T1949] ? __kasan_check_read+0x11/0x20 [ 618.749084][ T1949] ? do_raw_spin_unlock+0x49/0x260 [ 618.754188][ T1949] do_wp_page+0x2c9/0x1ce0 [ 618.758594][ T1949] ? __rwlock_init+0x130/0x130 [ 618.763357][ T1949] ? count_memcg_event_mm+0x300/0x300 [ 618.768732][ T1949] handle_mm_fault+0x2bcf/0x6080 [ 618.773667][ T1949] ? finish_fault+0x230/0x230 [ 618.778349][ T1949] ? vmacache_find+0x566/0x5b0 [ 618.783093][ T1949] ? vmacache_update+0xb7/0x120 [ 618.787934][ T1949] do_user_addr_fault+0x589/0xaf0 [ 618.792953][ T1949] __do_page_fault+0xd3/0x1f0 [ 618.797617][ T1949] do_page_fault+0x99/0xb0 [ 618.802032][ T1949] page_fault+0x39/0x40 [ 618.806173][ T1949] RIP: 0033:0x4308f6 [ 618.810062][ T1949] Code: 1f 44 00 00 48 29 e8 31 c9 48 81 fb 40 56 71 00 0f 95 c1 48 8d 34 2a 48 83 cd 01 48 c1 e1 02 48 83 c8 01 48 09 e9 48 89 73 58 <48> 89 4a 08 48 89 46 08 48 8d 4a 10 8b 05 6c 46 64 00 85 c0 0f 84 [ 618.829652][ T1949] RSP: 002b:00007ffde43be900 EFLAGS: 00010206 [ 618.835703][ T1949] RAX: 0000000000019691 RBX: 0000000000715640 RCX: 0000000000008041 [ 618.843748][ T1949] RDX: 0000555556a2a930 RSI: 0000555556a32970 RDI: 0000000000000003 [ 618.851719][ T1949] RBP: 0000000000008041 R08: 0000000000000001 R09: 0000555556a29940 [ 618.859680][ T1949] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000715698 [ 618.867648][ T1949] R13: 0000000000715698 R14: 0000000000000000 R15: 0000000000002710 [ 618.877301][ T1949] memory: usage 1356kB, limit 0kB, failcnt 113 [ 618.883494][ T1949] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 618.890389][ T1949] Memory cgroup stats for /syz3: [ 618.890464][ T1949] anon 0 [ 618.890464][ T1949] file 0 [ 618.890464][ T1949] kernel_stack 0 [ 618.890464][ T1949] slab 1396736 [ 618.890464][ T1949] sock 0 [ 618.890464][ T1949] shmem 0 [ 618.890464][ T1949] file_mapped 0 [ 618.890464][ T1949] file_dirty 135168 [ 618.890464][ T1949] file_writeback 0 [ 618.890464][ T1949] anon_thp 0 [ 618.890464][ T1949] inactive_anon 0 [ 618.890464][ T1949] active_anon 0 [ 618.890464][ T1949] inactive_file 0 [ 618.890464][ T1949] active_file 0 [ 618.890464][ T1949] unevictable 0 [ 618.890464][ T1949] slab_reclaimable 540672 [ 618.890464][ T1949] slab_unreclaimable 856064 [ 618.890464][ T1949] pgfault 78111 [ 618.890464][ T1949] pgmajfault 0 [ 618.890464][ T1949] workingset_refault 0 [ 618.890464][ T1949] workingset_activate 0 [ 618.890464][ T1949] workingset_nodereclaim 0 [ 618.890464][ T1949] pgrefill 0 [ 618.890464][ T1949] pgscan 0 [ 618.890464][ T1949] pgsteal 0 [ 618.890464][ T1949] pgactivate 0 [ 618.890464][ T1949] pgdeactivate 0 [ 618.986048][ T1949] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=1949,uid=0 [ 619.001423][ T1949] Memory cgroup out of memory: Killed process 1949 (syz-executor.3) total-vm:72444kB, anon-rss:76kB, file-rss:34832kB, shmem-rss:0kB [ 619.016595][ T1057] oom_reaper: reaped process 1949 (syz-executor.3), now anon-rss:0kB, file-rss:33936kB, shmem-rss:0kB 09:56:40 executing program 4: fstat(0xffffffffffffffff, 0x0) fstat(0xffffffffffffff9c, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x80000000000003, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'ip6_vti0\x00'}) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000380)=0xd95, 0x4) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) 09:56:40 executing program 5: syz_mount_image$jfs(&(0x7f00000001c0)='jfs\x00', &(0x7f0000000280)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)={[{@errors_remount='errors=remount-ro'}, {@noquota='noquota'}, {@integrity='integrity'}], [], 0x700000000000000}) 09:56:40 executing program 4: fstat(0xffffffffffffffff, 0x0) fstat(0xffffffffffffff9c, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x80000000000003, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'ip6_vti0\x00', 0x0}) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000380)=0xd95, 0x4) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) 09:56:41 executing program 5: syz_mount_image$jfs(&(0x7f00000001c0)='jfs\x00', &(0x7f0000000280)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)={[{@errors_remount='errors=remount-ro'}, {@noquota='noquota'}, {@integrity='integrity'}], [], 0x800000000000000}) 09:56:41 executing program 1: fstat(0xffffffffffffffff, 0x0) fstat(0xffffffffffffff9c, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x80000000000003, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'ip6_vti0\x00', 0x0}) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) 09:56:41 executing program 5: syz_mount_image$jfs(&(0x7f00000001c0)='jfs\x00', &(0x7f0000000280)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)={[{@errors_remount='errors=remount-ro'}, {@noquota='noquota'}, {@integrity='integrity'}], [], 0x900000000000000}) 09:56:41 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r2 = socket$kcm(0x10, 0x3, 0x0) setsockopt$sock_attach_bpf(r2, 0x10e, 0x4, &(0x7f0000000000)=r0, 0x4) r3 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x40) openat$cgroup_ro(r3, &(0x7f0000000140)='cpuset.effective_cpus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r4 = getpid() perf_event_open(0x0, r4, 0x3, 0xffffffffffffffff, 0x1) r5 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) gettid() sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @ipv4}, 0x80, 0x0}, 0x24000001) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000080)='cgroup.type\x00', 0x2, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f00000002c0)='threaded\x00', 0x9) write$cgroup_int(r5, 0x0, 0x0) write$cgroup_int(r5, 0x0, 0x0) 09:56:41 executing program 4: fstat(0xffffffffffffffff, 0x0) fstat(0xffffffffffffff9c, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x80000000000003, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'ip6_vti0\x00', 0x0}) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000380)=0xd95, 0x4) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) 09:56:41 executing program 0: syz_mount_image$jfs(&(0x7f00000001c0)='jfs\x00', &(0x7f0000000280)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)={[{@errors_remount='errors=remount-ro'}, {@noquota='noquota'}, {@integrity='integrity'}], [], 0x80000000000}) 09:56:41 executing program 5: syz_mount_image$jfs(&(0x7f00000001c0)='jfs\x00', &(0x7f0000000280)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)={[{@errors_remount='errors=remount-ro'}, {@noquota='noquota'}, {@integrity='integrity'}], [], 0xa00000000000000}) 09:56:41 executing program 1: fstat(0xffffffffffffffff, 0x0) fstat(0xffffffffffffff9c, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x80000000000003, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'ip6_vti0\x00', 0x0}) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) [ 621.344698][ T2025] IPVS: ftp: loaded support on port[0] = 21 [ 621.405639][ T2025] chnl_net:caif_netlink_parms(): no params data found [ 621.436370][ T2025] bridge0: port 1(bridge_slave_0) entered blocking state [ 621.443506][ T2025] bridge0: port 1(bridge_slave_0) entered disabled state [ 621.451384][ T2025] device bridge_slave_0 entered promiscuous mode [ 621.770465][ T2025] bridge0: port 2(bridge_slave_1) entered blocking state [ 621.777540][ T2025] bridge0: port 2(bridge_slave_1) entered disabled state [ 621.785555][ T2025] device bridge_slave_1 entered promiscuous mode [ 621.804891][ T2025] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 621.815741][ T2025] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 621.997116][ T2025] team0: Port device team_slave_0 added [ 622.005049][ T2025] team0: Port device team_slave_1 added [ 622.051225][ T2025] device hsr_slave_0 entered promiscuous mode [ 622.089067][ T2025] device hsr_slave_1 entered promiscuous mode [ 622.128916][ T2025] debugfs: Directory 'hsr0' with parent '/' already present! [ 622.287489][ T2025] bridge0: port 2(bridge_slave_1) entered blocking state [ 622.294610][ T2025] bridge0: port 2(bridge_slave_1) entered forwarding state [ 622.302069][ T2025] bridge0: port 1(bridge_slave_0) entered blocking state [ 622.309173][ T2025] bridge0: port 1(bridge_slave_0) entered forwarding state [ 622.471142][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 622.479271][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 622.499803][ T2025] 8021q: adding VLAN 0 to HW filter on device bond0 [ 622.513014][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 622.520739][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 622.652096][ T2025] 8021q: adding VLAN 0 to HW filter on device team0 [ 622.662084][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 622.670729][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 622.679440][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 622.686498][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 622.696538][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 622.705308][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 622.713651][ T1278] bridge0: port 2(bridge_slave_1) entered blocking state [ 622.720730][ T1278] bridge0: port 2(bridge_slave_1) entered forwarding state [ 622.870215][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 622.878726][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 622.887318][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 622.895631][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 622.903868][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 622.912412][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 622.920604][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 622.928864][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 622.937322][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 622.947438][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 622.955760][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 623.097561][ T2025] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 623.117656][ T2025] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 623.348442][ T2033] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 623.369366][ T2033] CPU: 1 PID: 2033 Comm: syz-executor.2 Not tainted 5.2.0+ #37 [ 623.376926][ T2033] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 623.386983][ T2033] Call Trace: [ 623.390269][ T2033] dump_stack+0x1d8/0x2f8 [ 623.394605][ T2033] dump_header+0xd8/0x970 [ 623.398930][ T2033] oom_kill_process+0xcd/0x320 [ 623.403683][ T2033] out_of_memory+0x5e1/0x8a0 [ 623.408262][ T2033] ? unregister_oom_notifier+0x20/0x20 [ 623.413708][ T2033] ? trace_hardirqs_on+0x74/0x80 [ 623.418644][ T2033] memory_max_write+0x537/0x6a0 [ 623.423486][ T2033] ? lock_acquire+0x1b2/0x250 [ 623.428156][ T2033] ? memory_max_show+0xa0/0xa0 [ 623.432912][ T2033] ? trace_lock_acquire+0x154/0x1b0 [ 623.438098][ T2033] ? lock_acquire+0x158/0x250 [ 623.442761][ T2033] ? kernfs_fop_write+0x22e/0x4f0 [ 623.447771][ T2033] ? memory_max_show+0xa0/0xa0 [ 623.452529][ T2033] cgroup_file_write+0x27b/0x6e0 [ 623.457462][ T2033] ? cgroup_seqfile_stop+0xc0/0xc0 [ 623.462576][ T2033] ? cgroup_seqfile_stop+0xc0/0xc0 [ 623.467694][ T2033] kernfs_fop_write+0x3e4/0x4f0 [ 623.472540][ T2033] ? kernfs_fop_read+0x580/0x580 [ 623.477472][ T2033] __vfs_write+0xf9/0x7d0 [ 623.481801][ T2033] ? retint_kernel+0x10/0x10 [ 623.486409][ T2033] ? __kernel_write+0x350/0x350 [ 623.491248][ T2033] ? rcu_irq_exit+0xe3/0x260 [ 623.495829][ T2033] ? retint_kernel+0x10/0x10 [ 623.500413][ T2033] ? __sb_start_write+0x286/0x440 [ 623.505440][ T2033] ? __sb_start_write+0x37f/0x440 [ 623.510454][ T2033] ? __sb_start_write+0x39c/0x440 [ 623.515480][ T2033] ? __kasan_check_read+0x11/0x20 [ 623.520495][ T2033] vfs_write+0x275/0x590 [ 623.524752][ T2033] ksys_write+0x16b/0x2a0 [ 623.529082][ T2033] ? __ia32_sys_read+0x90/0x90 [ 623.533836][ T2033] ? prepare_exit_to_usermode+0x1f7/0x580 [ 623.539544][ T2033] ? trace_irq_disable_rcuidle+0x23/0x1c0 [ 623.545305][ T2033] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 623.550758][ T2033] ? trace_irq_disable_rcuidle+0x23/0x1c0 [ 623.556480][ T2033] ? do_syscall_64+0x1d/0x140 [ 623.561147][ T2033] __x64_sys_write+0x7b/0x90 [ 623.565732][ T2033] do_syscall_64+0xfe/0x140 [ 623.570226][ T2033] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 623.576103][ T2033] RIP: 0033:0x459819 [ 623.580003][ T2033] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 623.599727][ T2033] RSP: 002b:00007f9f6a6afc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 623.608128][ T2033] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459819 [ 623.616084][ T2033] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 623.624045][ T2033] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 623.632006][ T2033] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f9f6a6b06d4 [ 623.639969][ T2033] R13: 00000000004c9774 R14: 00000000004e0b70 R15: 00000000ffffffff [ 623.648011][ T2033] memory: usage 5524kB, limit 0kB, failcnt 262 [ 623.654377][ T2033] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 623.661340][ T2033] Memory cgroup stats for /syz2: [ 623.662395][ T2033] anon 2244608 [ 623.662395][ T2033] file 12288 [ 623.662395][ T2033] kernel_stack 65536 [ 623.662395][ T2033] slab 3219456 [ 623.662395][ T2033] sock 0 [ 623.662395][ T2033] shmem 86016 [ 623.662395][ T2033] file_mapped 135168 [ 623.662395][ T2033] file_dirty 135168 [ 623.662395][ T2033] file_writeback 0 [ 623.662395][ T2033] anon_thp 2097152 [ 623.662395][ T2033] inactive_anon 0 [ 623.662395][ T2033] active_anon 2244608 [ 623.662395][ T2033] inactive_file 135168 [ 623.662395][ T2033] active_file 135168 [ 623.662395][ T2033] unevictable 0 [ 623.662395][ T2033] slab_reclaimable 1351680 [ 623.662395][ T2033] slab_unreclaimable 1867776 [ 623.662395][ T2033] pgfault 62898 [ 623.662395][ T2033] pgmajfault 0 [ 623.662395][ T2033] workingset_refault 0 [ 623.662395][ T2033] workingset_activate 0 [ 623.662395][ T2033] workingset_nodereclaim 0 [ 623.662395][ T2033] pgrefill 0 [ 623.662395][ T2033] pgscan 0 [ 623.662395][ T2033] pgsteal 0 [ 623.755575][ T2033] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=2032,uid=0 [ 623.771267][ T2033] Memory cgroup out of memory: Killed process 2032 (syz-executor.2) total-vm:72708kB, anon-rss:2140kB, file-rss:34816kB, shmem-rss:0kB [ 623.786622][ T1057] oom_reaper: reaped process 2032 (syz-executor.2), now anon-rss:0kB, file-rss:34848kB, shmem-rss:0kB 09:56:45 executing program 2: fstat(0xffffffffffffffff, 0x0) fstat(0xffffffffffffff9c, &(0x7f0000000440)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xbb6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x80000000000003, 0x8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'ip6_vti0\x00', 0x0}) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000380)=0xd95, 0x4) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) 09:56:45 executing program 0: fstat(0xffffffffffffffff, 0x0) fstat(0xffffffffffffff9c, &(0x7f0000000440)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xbb6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x80000000000003, 0x8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'ip6_vti0\x00', 0x0}) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000380)=0xd95, 0x4) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) 09:56:45 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r2 = socket$kcm(0x10, 0x3, 0x0) setsockopt$sock_attach_bpf(r2, 0x10e, 0x4, &(0x7f0000000000)=r0, 0x4) r3 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x40) openat$cgroup_ro(r3, &(0x7f0000000140)='cpuset.effective_cpus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r4 = getpid() perf_event_open(0x0, r4, 0x3, 0xffffffffffffffff, 0x1) r5 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) gettid() sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @ipv4}, 0x80, 0x0}, 0x24000001) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000080)='cgroup.type\x00', 0x2, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f00000002c0)='threaded\x00', 0x9) write$cgroup_int(r5, 0x0, 0x0) write$cgroup_int(r5, 0x0, 0x0) 09:56:45 executing program 4: fstat(0xffffffffffffffff, 0x0) fstat(0xffffffffffffff9c, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x80000000000003, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'ip6_vti0\x00', 0x0}) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000380)=0xd95, 0x4) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) 09:56:45 executing program 5: syz_mount_image$jfs(&(0x7f00000001c0)='jfs\x00', &(0x7f0000000280)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)={[{@errors_remount='errors=remount-ro'}, {@noquota='noquota'}, {@integrity='integrity'}], [], 0xb00000000000000}) 09:56:45 executing program 1: fstat(0xffffffffffffffff, 0x0) fstat(0xffffffffffffff9c, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x80000000000003, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'ip6_vti0\x00'}) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000380)=0xd95, 0x4) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) [ 623.860398][ T821] device bridge_slave_1 left promiscuous mode [ 623.866592][ T821] bridge0: port 2(bridge_slave_1) entered disabled state [ 623.893637][ T2025] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 623.903622][ T2025] CPU: 1 PID: 2025 Comm: syz-executor.2 Not tainted 5.2.0+ #37 [ 623.911155][ T2025] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 623.921202][ T2025] Call Trace: [ 623.924569][ T2025] dump_stack+0x1d8/0x2f8 [ 623.928946][ T2025] dump_header+0xd8/0x970 [ 623.933295][ T2025] oom_kill_process+0xcd/0x320 [ 623.938032][ T2025] out_of_memory+0x5e1/0x8a0 [ 623.942604][ T2025] ? unregister_oom_notifier+0x20/0x20 [ 623.948055][ T2025] ? __kasan_check_read+0x11/0x20 [ 623.953070][ T2025] try_charge+0x134a/0x17b0 [ 623.957583][ T2025] ? __memcg_kmem_charge_memcg+0x180/0x180 [ 623.963380][ T2025] ? __lock_acquire+0x4750/0x4750 [ 623.968409][ T2025] ? rcu_lock_release+0x15/0x20 [ 623.973247][ T2025] ? get_mem_cgroup_from_mm+0x15e/0x170 [ 623.978777][ T2025] mem_cgroup_try_charge+0x216/0x560 [ 623.984061][ T2025] mem_cgroup_try_charge_delay+0x25/0xa0 [ 623.989674][ T2025] wp_page_copy+0x367/0x18c0 [ 623.994238][ T2025] ? rcu_lock_release+0x30/0x30 [ 623.999069][ T2025] ? __lock_acquire+0x4750/0x4750 [ 624.004084][ T2025] ? __kasan_check_read+0x11/0x20 [ 624.009086][ T2025] ? do_raw_spin_unlock+0x49/0x260 [ 624.014169][ T2025] do_wp_page+0x2c9/0x1ce0 [ 624.018573][ T2025] ? __rwlock_init+0x130/0x130 [ 624.023314][ T2025] ? count_memcg_event_mm+0x300/0x300 [ 624.028671][ T2025] handle_mm_fault+0x2bcf/0x6080 [ 624.033643][ T2025] ? finish_fault+0x230/0x230 [ 624.038317][ T2025] ? vmacache_find+0x251/0x5b0 [ 624.043071][ T2025] do_user_addr_fault+0x589/0xaf0 [ 624.048090][ T2025] __do_page_fault+0xd3/0x1f0 [ 624.052747][ T2025] do_page_fault+0x99/0xb0 [ 624.057175][ T2025] page_fault+0x39/0x40 [ 624.061313][ T2025] RIP: 0033:0x4308f6 [ 624.065201][ T2025] Code: 1f 44 00 00 48 29 e8 31 c9 48 81 fb 40 56 71 00 0f 95 c1 48 8d 34 2a 48 83 cd 01 48 c1 e1 02 48 83 c8 01 48 09 e9 48 89 73 58 <48> 89 4a 08 48 89 46 08 48 8d 4a 10 8b 05 6c 46 64 00 85 c0 0f 84 [ 624.084794][ T2025] RSP: 002b:00007ffd08f3e200 EFLAGS: 00010206 [ 624.090852][ T2025] RAX: 0000000000019691 RBX: 0000000000715640 RCX: 0000000000008041 [ 624.098802][ T2025] RDX: 0000555556036930 RSI: 000055555603e970 RDI: 0000000000000003 [ 624.106759][ T2025] RBP: 0000000000008041 R08: 0000000000000001 R09: 0000555556035940 [ 624.114704][ T2025] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000715698 [ 624.122653][ T2025] R13: 0000000000715698 R14: 0000000000000000 R15: 0000000000002710 [ 624.130684][ T2025] memory: usage 3196kB, limit 0kB, failcnt 271 [ 624.136842][ T2025] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 624.143712][ T2025] Memory cgroup stats for /syz2: [ 624.143800][ T2025] anon 0 [ 624.143800][ T2025] file 12288 [ 624.143800][ T2025] kernel_stack 65536 [ 624.143800][ T2025] slab 3219456 [ 624.143800][ T2025] sock 0 [ 624.143800][ T2025] shmem 86016 [ 624.143800][ T2025] file_mapped 135168 [ 624.143800][ T2025] file_dirty 135168 [ 624.143800][ T2025] file_writeback 0 [ 624.143800][ T2025] anon_thp 0 [ 624.143800][ T2025] inactive_anon 0 [ 624.143800][ T2025] active_anon 0 [ 624.143800][ T2025] inactive_file 135168 [ 624.143800][ T2025] active_file 135168 [ 624.143800][ T2025] unevictable 0 [ 624.143800][ T2025] slab_reclaimable 1351680 [ 624.143800][ T2025] slab_unreclaimable 1867776 [ 624.143800][ T2025] pgfault 62898 [ 624.143800][ T2025] pgmajfault 0 [ 624.143800][ T2025] workingset_refault 0 [ 624.143800][ T2025] workingset_activate 0 [ 624.143800][ T2025] workingset_nodereclaim 0 [ 624.143800][ T2025] pgrefill 0 [ 624.143800][ T2025] pgscan 0 [ 624.143800][ T2025] pgsteal 0 [ 624.143800][ T2025] pgactivate 0 [ 624.238780][ T2025] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=2025,uid=0 [ 624.254187][ T2025] Memory cgroup out of memory: Killed process 2025 (syz-executor.2) total-vm:72444kB, anon-rss:72kB, file-rss:34832kB, shmem-rss:0kB [ 624.268587][ T1057] oom_reaper: reaped process 2025 (syz-executor.2), now anon-rss:0kB, file-rss:33936kB, shmem-rss:0kB [ 624.282132][ T821] device bridge_slave_0 left promiscuous mode [ 624.288293][ T821] bridge0: port 1(bridge_slave_0) entered disabled state 09:56:45 executing program 1: fstat(0xffffffffffffffff, 0x0) fstat(0xffffffffffffff9c, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x80000000000003, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'ip6_vti0\x00'}) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000380)=0xd95, 0x4) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) [ 624.373576][ T821] device bridge_slave_1 left promiscuous mode [ 624.379899][ T821] bridge0: port 2(bridge_slave_1) entered disabled state [ 624.434850][ T821] device bridge_slave_0 left promiscuous mode [ 624.441292][ T821] bridge0: port 1(bridge_slave_0) entered disabled state 09:56:46 executing program 1: fstat(0xffffffffffffffff, 0x0) fstat(0xffffffffffffff9c, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x80000000000003, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'ip6_vti0\x00'}) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000380)=0xd95, 0x4) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) 09:56:46 executing program 5: syz_mount_image$jfs(&(0x7f00000001c0)='jfs\x00', &(0x7f0000000280)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)={[{@errors_remount='errors=remount-ro'}, {@noquota='noquota'}, {@integrity='integrity'}], [], 0xc00000000000000}) 09:56:46 executing program 4: fstat(0xffffffffffffffff, 0x0) fstat(0xffffffffffffff9c, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x80000000000003, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'ip6_vti0\x00', 0x0}) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, 0x0, 0x0) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) 09:56:46 executing program 1: fstat(0xffffffffffffffff, 0x0) fstat(0xffffffffffffff9c, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x80000000000003, 0x0) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000380)=0xd95, 0x4) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) 09:56:46 executing program 1: fstat(0xffffffffffffffff, 0x0) fstat(0xffffffffffffff9c, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x80000000000003, 0x0) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000380)=0xd95, 0x4) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) [ 628.309273][ T821] device hsr_slave_0 left promiscuous mode [ 628.348931][ T821] device hsr_slave_1 left promiscuous mode [ 628.415534][ T821] team0 (unregistering): Port device team_slave_1 removed [ 628.429088][ T821] team0 (unregistering): Port device team_slave_0 removed [ 628.440631][ T821] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 628.482234][ T821] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 628.569038][ T821] bond0 (unregistering): Released all slaves [ 628.729363][ T821] device hsr_slave_0 left promiscuous mode [ 628.779170][ T821] device hsr_slave_1 left promiscuous mode [ 628.831401][ T821] team0 (unregistering): Port device team_slave_1 removed [ 628.843470][ T821] team0 (unregistering): Port device team_slave_0 removed [ 628.854898][ T821] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 628.902757][ T821] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 628.996079][ T821] bond0 (unregistering): Released all slaves [ 629.167644][ T2076] IPVS: ftp: loaded support on port[0] = 21 09:56:50 executing program 2: fstat(0xffffffffffffffff, 0x0) fstat(0xffffffffffffff9c, &(0x7f0000000440)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xbb6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x80000000000003, 0x8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'ip6_vti0\x00', 0x0}) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000380)=0xd95, 0x4) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) 09:56:50 executing program 1: fstat(0xffffffffffffffff, 0x0) fstat(0xffffffffffffff9c, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x80000000000003, 0x0) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000380)=0xd95, 0x4) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) [ 629.389503][ T2076] chnl_net:caif_netlink_parms(): no params data found [ 629.446623][ T2076] bridge0: port 1(bridge_slave_0) entered blocking state [ 629.453815][ T2076] bridge0: port 1(bridge_slave_0) entered disabled state [ 629.461611][ T2076] device bridge_slave_0 entered promiscuous mode [ 629.476892][ T2076] bridge0: port 2(bridge_slave_1) entered blocking state [ 629.484136][ T2076] bridge0: port 2(bridge_slave_1) entered disabled state [ 629.491907][ T2076] device bridge_slave_1 entered promiscuous mode [ 629.520068][ T2076] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 629.531601][ T2076] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 629.552791][ T2076] team0: Port device team_slave_0 added [ 629.560733][ T2076] team0: Port device team_slave_1 added [ 629.641431][ T2076] device hsr_slave_0 entered promiscuous mode [ 629.705265][ T2076] device hsr_slave_1 entered promiscuous mode [ 629.848842][ T2076] debugfs: Directory 'hsr0' with parent '/' already present! [ 629.876014][ T2076] bridge0: port 2(bridge_slave_1) entered blocking state [ 629.883138][ T2076] bridge0: port 2(bridge_slave_1) entered forwarding state [ 629.890515][ T2076] bridge0: port 1(bridge_slave_0) entered blocking state [ 629.897562][ T2076] bridge0: port 1(bridge_slave_0) entered forwarding state [ 629.970328][ T2076] 8021q: adding VLAN 0 to HW filter on device bond0 [ 629.998686][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 630.012974][ T1278] bridge0: port 1(bridge_slave_0) entered disabled state [ 630.022978][ T1278] bridge0: port 2(bridge_slave_1) entered disabled state [ 630.044968][ T2076] 8021q: adding VLAN 0 to HW filter on device team0 [ 630.062598][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 630.071198][ T1278] bridge0: port 1(bridge_slave_0) entered blocking state [ 630.078261][ T1278] bridge0: port 1(bridge_slave_0) entered forwarding state [ 630.116787][ T2076] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 630.127307][ T2076] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 630.140027][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 630.149885][ T1278] bridge0: port 2(bridge_slave_1) entered blocking state [ 630.156927][ T1278] bridge0: port 2(bridge_slave_1) entered forwarding state [ 630.165060][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 630.174525][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 630.183028][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 630.191522][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 630.200605][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 630.208225][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 630.228664][ T2076] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 630.403886][ T2087] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 630.414371][ T2087] CPU: 0 PID: 2087 Comm: syz-executor.3 Not tainted 5.2.0+ #37 [ 630.421917][ T2087] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 630.431973][ T2087] Call Trace: [ 630.435281][ T2087] dump_stack+0x1d8/0x2f8 [ 630.439616][ T2087] dump_header+0xd8/0x970 [ 630.443957][ T2087] oom_kill_process+0xcd/0x320 [ 630.448730][ T2087] out_of_memory+0x5e1/0x8a0 [ 630.453325][ T2087] ? unregister_oom_notifier+0x20/0x20 [ 630.458775][ T2087] ? trace_hardirqs_on+0x74/0x80 [ 630.463723][ T2087] memory_max_write+0x537/0x6a0 [ 630.468586][ T2087] ? memory_max_show+0xa0/0xa0 [ 630.473358][ T2087] ? lock_acquire+0x1b2/0x250 [ 630.478047][ T2087] ? memory_max_show+0xa0/0xa0 [ 630.482808][ T2087] cgroup_file_write+0x27b/0x6e0 [ 630.487751][ T2087] ? cgroup_seqfile_stop+0xc0/0xc0 [ 630.492858][ T2087] ? rxrpc_conn_retransmit_call+0x360/0x1320 [ 630.498824][ T2087] ? cgroup_seqfile_stop+0xc0/0xc0 [ 630.503954][ T2087] kernfs_fop_write+0x3e4/0x4f0 [ 630.508821][ T2087] ? kernfs_fop_read+0x580/0x580 [ 630.513754][ T2087] __vfs_write+0xf9/0x7d0 [ 630.518064][ T2087] ? retint_kernel+0x10/0x10 [ 630.522649][ T2087] ? __kernel_write+0x350/0x350 [ 630.527492][ T2087] ? rcu_irq_exit+0xe3/0x260 [ 630.532071][ T2087] ? __sb_start_write+0x39c/0x440 [ 630.537083][ T2087] ? retint_kernel+0x10/0x10 [ 630.541685][ T2087] vfs_write+0x275/0x590 [ 630.545944][ T2087] ksys_write+0x16b/0x2a0 [ 630.550293][ T2087] ? __ia32_sys_read+0x90/0x90 [ 630.555057][ T2087] ? prepare_exit_to_usermode+0x1f7/0x580 [ 630.560796][ T2087] ? trace_irq_disable_rcuidle+0x23/0x1c0 [ 630.566516][ T2087] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 630.571966][ T2087] ? trace_irq_disable_rcuidle+0x23/0x1c0 [ 630.577670][ T2087] ? do_syscall_64+0x1d/0x140 [ 630.582341][ T2087] __x64_sys_write+0x7b/0x90 [ 630.586933][ T2087] do_syscall_64+0xfe/0x140 [ 630.591443][ T2087] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 630.597323][ T2087] RIP: 0033:0x459819 [ 630.601216][ T2087] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 630.620815][ T2087] RSP: 002b:00007f8d25d96c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 630.629216][ T2087] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459819 [ 630.637183][ T2087] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 630.645153][ T2087] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 630.653115][ T2087] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f8d25d976d4 [ 630.661077][ T2087] R13: 00000000004c9774 R14: 00000000004e0b70 R15: 00000000ffffffff [ 630.669817][ T2087] memory: usage 3476kB, limit 0kB, failcnt 122 [ 630.676074][ T2087] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 630.683035][ T2087] Memory cgroup stats for /syz3: [ 630.684569][ T2087] anon 2199552 [ 630.684569][ T2087] file 0 [ 630.684569][ T2087] kernel_stack 0 [ 630.684569][ T2087] slab 1261568 [ 630.684569][ T2087] sock 0 [ 630.684569][ T2087] shmem 0 [ 630.684569][ T2087] file_mapped 0 [ 630.684569][ T2087] file_dirty 0 [ 630.684569][ T2087] file_writeback 0 [ 630.684569][ T2087] anon_thp 2097152 [ 630.684569][ T2087] inactive_anon 0 [ 630.684569][ T2087] active_anon 2199552 [ 630.684569][ T2087] inactive_file 0 [ 630.684569][ T2087] active_file 0 [ 630.684569][ T2087] unevictable 0 [ 630.684569][ T2087] slab_reclaimable 405504 [ 630.684569][ T2087] slab_unreclaimable 856064 [ 630.684569][ T2087] pgfault 78144 [ 630.684569][ T2087] pgmajfault 0 [ 630.684569][ T2087] workingset_refault 0 [ 630.684569][ T2087] workingset_activate 0 [ 630.684569][ T2087] workingset_nodereclaim 0 [ 630.684569][ T2087] pgrefill 0 [ 630.684569][ T2087] pgscan 0 [ 630.684569][ T2087] pgsteal 0 [ 630.684569][ T2087] pgactivate 0 [ 630.780842][ T2087] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=2085,uid=0 [ 630.797059][ T2087] Memory cgroup out of memory: Killed process 2085 (syz-executor.3) total-vm:72708kB, anon-rss:2144kB, file-rss:34816kB, shmem-rss:0kB [ 630.815601][ T1057] oom_reaper: reaped process 2085 (syz-executor.3), now anon-rss:0kB, file-rss:34828kB, shmem-rss:0kB 09:56:52 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r2 = socket$kcm(0x10, 0x3, 0x0) setsockopt$sock_attach_bpf(r2, 0x10e, 0x4, &(0x7f0000000000)=r0, 0x4) r3 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x40) openat$cgroup_ro(r3, &(0x7f0000000140)='cpuset.effective_cpus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r4 = getpid() perf_event_open(0x0, r4, 0x3, 0xffffffffffffffff, 0x1) r5 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) gettid() sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @ipv4}, 0x80, 0x0}, 0x24000001) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000080)='cgroup.type\x00', 0x2, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f00000002c0)='threaded\x00', 0x9) write$cgroup_int(r5, 0x0, 0x0) write$cgroup_int(r5, 0x0, 0x0) 09:56:52 executing program 5: syz_mount_image$jfs(&(0x7f00000001c0)='jfs\x00', &(0x7f0000000280)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)={[{@errors_remount='errors=remount-ro'}, {@noquota='noquota'}, {@integrity='integrity'}], [], 0xd00000000000000}) 09:56:52 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r2 = socket$kcm(0x10, 0x3, 0x0) setsockopt$sock_attach_bpf(r2, 0x10e, 0x4, &(0x7f0000000000)=r0, 0x4) r3 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x40) openat$cgroup_ro(r3, &(0x7f0000000140)='cpuset.effective_cpus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r4 = getpid() perf_event_open(0x0, r4, 0x3, 0xffffffffffffffff, 0x1) r5 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) gettid() r6 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r6, &(0x7f0000000540)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @ipv4}, 0x80, 0x0}, 0x24000001) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000080)='cgroup.type\x00', 0x2, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f00000002c0)='threaded\x00', 0x9) write$cgroup_int(r5, 0x0, 0x0) 09:56:52 executing program 4: fstat(0xffffffffffffffff, 0x0) fstat(0xffffffffffffff9c, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x80000000000003, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'ip6_vti0\x00', 0x0}) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, 0x0, 0x0) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) 09:56:52 executing program 2: fstat(0xffffffffffffffff, 0x0) fstat(0xffffffffffffff9c, &(0x7f0000000440)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xbb6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x80000000000003, 0x8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'ip6_vti0\x00', 0x0}) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000380)=0xd95, 0x4) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) 09:56:52 executing program 1: fstat(0xffffffffffffffff, 0x0) fstat(0xffffffffffffff9c, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'ip6_vti0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, r0, 0x1, 0x0, 0x6, @link_local}, 0x14) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000380)=0xd95, 0x4) sendmmsg(0xffffffffffffffff, &(0x7f0000000d00), 0x400004e, 0x0) [ 630.960779][ T2076] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 630.970792][ T2076] CPU: 1 PID: 2076 Comm: syz-executor.3 Not tainted 5.2.0+ #37 [ 630.978340][ T2076] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 630.988375][ T2076] Call Trace: [ 630.991662][ T2076] dump_stack+0x1d8/0x2f8 [ 630.995996][ T2076] dump_header+0xd8/0x970 [ 631.000329][ T2076] oom_kill_process+0xcd/0x320 [ 631.005080][ T2076] out_of_memory+0x5e1/0x8a0 [ 631.009694][ T2076] ? unregister_oom_notifier+0x20/0x20 [ 631.015186][ T2076] ? __kasan_check_read+0x11/0x20 [ 631.020208][ T2076] try_charge+0x134a/0x17b0 [ 631.024698][ T2076] ? __memcg_kmem_charge_memcg+0x180/0x180 [ 631.030535][ T2076] ? __lock_acquire+0x4750/0x4750 [ 631.035545][ T2076] ? rcu_lock_release+0x15/0x20 [ 631.040386][ T2076] ? get_mem_cgroup_from_mm+0x15e/0x170 [ 631.045910][ T2076] mem_cgroup_try_charge+0x216/0x560 [ 631.051189][ T2076] mem_cgroup_try_charge_delay+0x25/0xa0 [ 631.056809][ T2076] wp_page_copy+0x367/0x18c0 [ 631.061387][ T2076] ? rcu_lock_release+0x30/0x30 [ 631.066215][ T2076] ? __lock_acquire+0x4750/0x4750 [ 631.071223][ T2076] ? __kasan_check_read+0x11/0x20 [ 631.076224][ T2076] ? do_raw_spin_unlock+0x49/0x260 [ 631.081342][ T2076] do_wp_page+0x2c9/0x1ce0 [ 631.085747][ T2076] ? __rwlock_init+0x130/0x130 [ 631.090508][ T2076] ? count_memcg_event_mm+0x300/0x300 [ 631.095882][ T2076] handle_mm_fault+0x2bcf/0x6080 [ 631.100814][ T2076] ? finish_fault+0x230/0x230 [ 631.105472][ T2076] ? vmacache_find+0x251/0x5b0 [ 631.110220][ T2076] do_user_addr_fault+0x589/0xaf0 [ 631.115274][ T2076] __do_page_fault+0xd3/0x1f0 [ 631.119961][ T2076] do_page_fault+0x99/0xb0 [ 631.124357][ T2076] page_fault+0x39/0x40 [ 631.128500][ T2076] RIP: 0033:0x4308f6 [ 631.132392][ T2076] Code: 1f 44 00 00 48 29 e8 31 c9 48 81 fb 40 56 71 00 0f 95 c1 48 8d 34 2a 48 83 cd 01 48 c1 e1 02 48 83 c8 01 48 09 e9 48 89 73 58 <48> 89 4a 08 48 89 46 08 48 8d 4a 10 8b 05 6c 46 64 00 85 c0 0f 84 [ 631.151974][ T2076] RSP: 002b:00007ffe18e688e0 EFLAGS: 00010206 [ 631.158039][ T2076] RAX: 0000000000019691 RBX: 0000000000715640 RCX: 0000000000008041 [ 631.165981][ T2076] RDX: 000055555608d930 RSI: 0000555556095970 RDI: 0000000000000003 [ 631.173947][ T2076] RBP: 0000000000008041 R08: 0000000000000001 R09: 000055555608c940 [ 631.181887][ T2076] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000715698 [ 631.189827][ T2076] R13: 0000000000715698 R14: 0000000000000000 R15: 0000000000002710 [ 631.197879][ T2076] memory: usage 1140kB, limit 0kB, failcnt 131 [ 631.204045][ T2076] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 631.210923][ T2076] Memory cgroup stats for /syz3: [ 631.210962][ T2076] anon 98304 [ 631.210962][ T2076] file 0 [ 631.210962][ T2076] kernel_stack 0 [ 631.210962][ T2076] slab 1261568 [ 631.210962][ T2076] sock 0 [ 631.210962][ T2076] shmem 0 [ 631.210962][ T2076] file_mapped 0 [ 631.210962][ T2076] file_dirty 0 [ 631.210962][ T2076] file_writeback 0 [ 631.210962][ T2076] anon_thp 0 [ 631.210962][ T2076] inactive_anon 0 [ 631.210962][ T2076] active_anon 98304 [ 631.210962][ T2076] inactive_file 0 [ 631.210962][ T2076] active_file 0 [ 631.210962][ T2076] unevictable 0 [ 631.210962][ T2076] slab_reclaimable 405504 [ 631.210962][ T2076] slab_unreclaimable 856064 [ 631.210962][ T2076] pgfault 78144 [ 631.210962][ T2076] pgmajfault 0 [ 631.210962][ T2076] workingset_refault 0 [ 631.210962][ T2076] workingset_activate 0 [ 631.210962][ T2076] workingset_nodereclaim 0 [ 631.210962][ T2076] pgrefill 0 [ 631.210962][ T2076] pgscan 0 [ 631.210962][ T2076] pgsteal 0 [ 631.210962][ T2076] pgactivate 0 [ 631.210962][ T2076] pgdeactivate 0 [ 631.307097][ T2076] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=2076,uid=0 [ 631.322512][ T2076] Memory cgroup out of memory: Killed process 2076 (syz-executor.3) total-vm:72444kB, anon-rss:76kB, file-rss:34832kB, shmem-rss:0kB [ 631.336971][ T1057] oom_reaper: reaped process 2076 (syz-executor.3), now anon-rss:0kB, file-rss:33936kB, shmem-rss:0kB 09:56:52 executing program 1: fstat(0xffffffffffffffff, 0x0) fstat(0xffffffffffffff9c, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'ip6_vti0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, r0, 0x1, 0x0, 0x6, @link_local}, 0x14) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000380)=0xd95, 0x4) sendmmsg(0xffffffffffffffff, &(0x7f0000000d00), 0x400004e, 0x0) [ 631.608847][ T2092] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 631.619253][ T2092] CPU: 0 PID: 2092 Comm: syz-executor.0 Not tainted 5.2.0+ #37 [ 631.626806][ T2092] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 631.636857][ T2092] Call Trace: [ 631.640151][ T2092] dump_stack+0x1d8/0x2f8 [ 631.644491][ T2092] dump_header+0xd8/0x970 [ 631.648827][ T2092] oom_kill_process+0xcd/0x320 [ 631.653597][ T2092] out_of_memory+0x5e1/0x8a0 [ 631.658204][ T2092] ? unregister_oom_notifier+0x20/0x20 [ 631.663669][ T2092] memory_max_write+0x537/0x6a0 [ 631.668520][ T2092] ? lock_acquire+0x158/0x250 [ 631.673207][ T2092] ? memory_max_show+0xa0/0xa0 [ 631.677973][ T2092] ? trace_lock_acquire+0x154/0x1b0 [ 631.683188][ T2092] ? lock_acquire+0x158/0x250 [ 631.687869][ T2092] ? kernfs_fop_write+0x22e/0x4f0 [ 631.692899][ T2092] ? memory_max_show+0xa0/0xa0 [ 631.697680][ T2092] cgroup_file_write+0x27b/0x6e0 [ 631.702650][ T2092] ? cgroup_seqfile_stop+0xc0/0xc0 09:56:53 executing program 1: fstat(0xffffffffffffffff, 0x0) fstat(0xffffffffffffff9c, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'ip6_vti0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, r0, 0x1, 0x0, 0x6, @link_local}, 0x14) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000380)=0xd95, 0x4) sendmmsg(0xffffffffffffffff, &(0x7f0000000d00), 0x400004e, 0x0) [ 631.707784][ T2092] ? cgroup_seqfile_stop+0xc0/0xc0 [ 631.712893][ T2092] kernfs_fop_write+0x3e4/0x4f0 [ 631.717759][ T2092] ? kernfs_fop_read+0x580/0x580 [ 631.722692][ T2092] __vfs_write+0xf9/0x7d0 [ 631.727026][ T2092] ? retint_kernel+0x10/0x10 [ 631.731619][ T2092] ? __kernel_write+0x350/0x350 [ 631.736466][ T2092] ? rcu_irq_exit+0xe3/0x260 [ 631.741076][ T2092] ? retint_kernel+0x10/0x10 [ 631.745670][ T2092] ? __sb_start_write+0x286/0x440 [ 631.750701][ T2092] ? __sb_start_write+0x38a/0x440 [ 631.755725][ T2092] ? __sb_start_write+0x39c/0x440 [ 631.760763][ T2092] vfs_write+0x275/0x590 [ 631.765029][ T2092] ksys_write+0x16b/0x2a0 [ 631.769378][ T2092] ? __ia32_sys_read+0x90/0x90 [ 631.774160][ T2092] ? prepare_exit_to_usermode+0x1f7/0x580 [ 631.779882][ T2092] ? trace_irq_disable_rcuidle+0x23/0x1c0 [ 631.785608][ T2092] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 631.791064][ T2092] ? trace_irq_disable_rcuidle+0x23/0x1c0 [ 631.796784][ T2092] ? do_syscall_64+0x1d/0x140 [ 631.801455][ T2092] __x64_sys_write+0x7b/0x90 [ 631.806043][ T2092] do_syscall_64+0xfe/0x140 [ 631.810561][ T2092] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 631.816477][ T2092] RIP: 0033:0x459819 [ 631.820369][ T2092] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 631.839965][ T2092] RSP: 002b:00007f3347d55c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 631.848376][ T2092] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459819 [ 631.856341][ T2092] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 631.864338][ T2092] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 631.872305][ T2092] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f3347d566d4 [ 631.880270][ T2092] R13: 00000000004c9774 R14: 00000000004e0b70 R15: 00000000ffffffff [ 631.888371][ T2092] memory: usage 4504kB, limit 0kB, failcnt 0 [ 631.894546][ T2092] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 631.901477][ T2092] Memory cgroup stats for /syz0: [ 631.902751][ T2092] anon 2195456 [ 631.902751][ T2092] file 135168 [ 631.902751][ T2092] kernel_stack 65536 [ 631.902751][ T2092] slab 2240512 [ 631.902751][ T2092] sock 0 [ 631.902751][ T2092] shmem 0 [ 631.902751][ T2092] file_mapped 0 [ 631.902751][ T2092] file_dirty 0 [ 631.902751][ T2092] file_writeback 0 [ 631.902751][ T2092] anon_thp 2097152 [ 631.902751][ T2092] inactive_anon 0 [ 631.902751][ T2092] active_anon 2195456 [ 631.902751][ T2092] inactive_file 0 [ 631.902751][ T2092] active_file 0 [ 631.902751][ T2092] unevictable 0 [ 631.902751][ T2092] slab_reclaimable 811008 [ 631.902751][ T2092] slab_unreclaimable 1429504 [ 631.902751][ T2092] pgfault 51579 [ 631.902751][ T2092] pgmajfault 0 [ 631.902751][ T2092] workingset_refault 0 [ 631.902751][ T2092] workingset_activate 0 [ 631.902751][ T2092] workingset_nodereclaim 0 [ 631.902751][ T2092] pgrefill 0 [ 631.902751][ T2092] pgscan 0 [ 631.902751][ T2092] pgsteal 0 [ 631.902751][ T2092] pgactivate 0 [ 631.997189][ T2092] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=2088,uid=0 [ 632.013050][ T2092] Memory cgroup out of memory: Killed process 2088 (syz-executor.0) total-vm:72572kB, anon-rss:2144kB, file-rss:34816kB, shmem-rss:0kB [ 632.030610][ T1057] oom_reaper: reaped process 2088 (syz-executor.0), now anon-rss:0kB, file-rss:34848kB, shmem-rss:0kB 09:56:53 executing program 4: fstat(0xffffffffffffffff, 0x0) fstat(0xffffffffffffff9c, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x80000000000003, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'ip6_vti0\x00', 0x0}) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, 0x0, 0x0) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) 09:56:53 executing program 5: syz_mount_image$jfs(&(0x7f00000001c0)='jfs\x00', &(0x7f0000000280)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)={[{@errors_remount='errors=remount-ro'}, {@noquota='noquota'}, {@integrity='integrity'}], [], 0xe00000000000000}) 09:56:53 executing program 1: fstat(0xffffffffffffffff, 0x0) fstat(0xffffffffffffff9c, 0x0) r0 = socket(0x200000000000011, 0x80000000000003, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'ip6_vti0\x00', 0x0}) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000380)=0xd95, 0x4) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) 09:56:53 executing program 5: syz_mount_image$jfs(&(0x7f00000001c0)='jfs\x00', &(0x7f0000000280)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)={[{@errors_remount='errors=remount-ro'}, {@noquota='noquota'}, {@integrity='integrity'}], [], 0xf00000000000000}) [ 632.805586][ T7978] syz-executor.0 invoked oom-killer: gfp_mask=0x40cc0(GFP_KERNEL|__GFP_COMP), order=1, oom_score_adj=0 [ 632.816828][ T7978] CPU: 1 PID: 7978 Comm: syz-executor.0 Not tainted 5.2.0+ #37 [ 632.824359][ T7978] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 632.834425][ T7978] Call Trace: [ 632.837715][ T7978] dump_stack+0x1d8/0x2f8 [ 632.842041][ T7978] dump_header+0xd8/0x970 [ 632.846367][ T7978] oom_kill_process+0xcd/0x320 [ 632.851123][ T7978] out_of_memory+0x5e1/0x8a0 [ 632.855703][ T7978] ? unregister_oom_notifier+0x20/0x20 [ 632.861159][ T7978] ? __kasan_check_read+0x11/0x20 [ 632.866180][ T7978] try_charge+0x134a/0x17b0 [ 632.870702][ T7978] ? __memcg_kmem_charge_memcg+0x180/0x180 [ 632.876536][ T7978] ? rcu_read_lock_sched_held+0x127/0x1c0 [ 632.882258][ T7978] ? rcu_lock_acquire+0x30/0x30 [ 632.887109][ T7978] __memcg_kmem_charge_memcg+0x78/0x180 [ 632.892654][ T7978] ? __lock_acquire+0x4750/0x4750 [ 632.897667][ T7978] ? memcg_kmem_put_cache+0x50/0x50 [ 632.902867][ T7978] kmem_getpages+0x411/0x970 [ 632.907452][ T7978] cache_grow_begin+0x7e/0x2c0 [ 632.912209][ T7978] ? __cpuset_node_allowed+0x198/0x530 [ 632.917663][ T7978] fallback_alloc+0x134/0x1c0 [ 632.922335][ T7978] ____cache_alloc_node+0x22a/0x250 [ 632.927541][ T7978] kmem_cache_alloc+0x157/0x2e0 [ 632.932385][ T7978] ? sk_prot_alloc+0x60/0x290 [ 632.937058][ T7978] sk_prot_alloc+0x60/0x290 [ 632.941549][ T7978] sk_alloc+0x38/0x960 [ 632.945615][ T7978] inet_create+0x5d3/0xdb0 [ 632.945674][ T7978] __sock_create+0x5d5/0x910 [ 632.954663][ T7978] __sys_socket+0x115/0x350 [ 632.954674][ T7978] ? fpregs_assert_state_consistent+0xb7/0xe0 [ 632.954689][ T7978] ? sock_create_kern+0x50/0x50 [ 632.970097][ T7978] ? prepare_exit_to_usermode+0x1f7/0x580 [ 632.975815][ T7978] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 632.981295][ T7978] ? trace_irq_disable_rcuidle+0x23/0x1c0 [ 632.987011][ T7978] ? do_syscall_64+0x1d/0x140 [ 632.987025][ T7978] __x64_sys_socket+0x7a/0x90 [ 632.987037][ T7978] do_syscall_64+0xfe/0x140 [ 632.987051][ T7978] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 632.987066][ T7978] RIP: 0033:0x45c367 [ 632.996393][ T7978] Code: 00 00 00 49 89 ca b8 36 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 9a 8c fb ff c3 66 0f 1f 84 00 00 00 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 7d 8c fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 633.030212][ T7978] RSP: 002b:00007ffe73ac8598 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 633.038656][ T7978] RAX: ffffffffffffffda RBX: 00000000ffffffff RCX: 000000000045c367 [ 633.046634][ T7978] RDX: 0000000000000006 RSI: 0000000000000001 RDI: 0000000000000002 [ 633.054597][ T7978] RBP: 0000000000000875 R08: 0000000000000000 R09: 000000000000000a [ 633.062561][ T7978] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000000 [ 633.070530][ T7978] R13: 00007ffe73ac8cb0 R14: 000000000009a0b1 R15: 00007ffe73ac8cc0 [ 633.078632][ T7978] memory: usage 2152kB, limit 0kB, failcnt 12 [ 633.084774][ T7978] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 633.091654][ T7978] Memory cgroup stats for /syz0: [ 633.091738][ T7978] anon 90112 [ 633.091738][ T7978] file 135168 [ 633.091738][ T7978] kernel_stack 0 [ 633.091738][ T7978] slab 2240512 [ 633.091738][ T7978] sock 0 [ 633.091738][ T7978] shmem 0 [ 633.091738][ T7978] file_mapped 0 [ 633.091738][ T7978] file_dirty 0 [ 633.091738][ T7978] file_writeback 0 [ 633.091738][ T7978] anon_thp 0 [ 633.091738][ T7978] inactive_anon 0 [ 633.091738][ T7978] active_anon 90112 [ 633.091738][ T7978] inactive_file 0 [ 633.091738][ T7978] active_file 0 [ 633.091738][ T7978] unevictable 0 [ 633.091738][ T7978] slab_reclaimable 811008 [ 633.091738][ T7978] slab_unreclaimable 1429504 [ 633.091738][ T7978] pgfault 51579 [ 633.091738][ T7978] pgmajfault 0 [ 633.091738][ T7978] workingset_refault 0 [ 633.091738][ T7978] workingset_activate 0 [ 633.091738][ T7978] workingset_nodereclaim 0 [ 633.091738][ T7978] pgrefill 0 [ 633.091738][ T7978] pgscan 0 [ 633.091738][ T7978] pgsteal 0 [ 633.091738][ T7978] pgactivate 0 [ 633.184823][ T7978] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=7978,uid=0 [ 633.200472][ T7978] Memory cgroup out of memory: Killed process 7978 (syz-executor.0) total-vm:72440kB, anon-rss:96kB, file-rss:35776kB, shmem-rss:0kB [ 633.214824][ T1057] oom_reaper: reaped process 7978 (syz-executor.0), now anon-rss:0kB, file-rss:34880kB, shmem-rss:0kB 09:56:55 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r2 = socket$kcm(0x10, 0x3, 0x0) setsockopt$sock_attach_bpf(r2, 0x10e, 0x4, &(0x7f0000000000)=r0, 0x4) r3 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x40) openat$cgroup_ro(r3, &(0x7f0000000140)='cpuset.effective_cpus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r4 = getpid() perf_event_open(0x0, r4, 0x3, 0xffffffffffffffff, 0x1) r5 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) r6 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r6, &(0x7f0000000540)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @ipv4}, 0x80, 0x0}, 0x24000001) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000080)='cgroup.type\x00', 0x2, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f00000002c0)='threaded\x00', 0x9) write$cgroup_int(r5, 0x0, 0x0) write$cgroup_int(r5, 0x0, 0x0) 09:56:55 executing program 5: syz_mount_image$jfs(&(0x7f00000001c0)='jfs\x00', &(0x7f0000000280)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)={[{@errors_remount='errors=remount-ro'}, {@noquota='noquota'}, {@integrity='integrity'}], [], 0x1000000000000000}) 09:56:55 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r2 = socket$kcm(0x10, 0x3, 0x0) setsockopt$sock_attach_bpf(r2, 0x10e, 0x4, &(0x7f0000000000)=r0, 0x4) r3 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x40) openat$cgroup_ro(r3, &(0x7f0000000140)='cpuset.effective_cpus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r4 = getpid() perf_event_open(0x0, r4, 0x3, 0xffffffffffffffff, 0x1) r5 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) gettid() r6 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r6, &(0x7f0000000540)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @ipv4}, 0x80, 0x0}, 0x24000001) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000080)='cgroup.type\x00', 0x2, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f00000002c0)='threaded\x00', 0x9) write$cgroup_int(r5, 0x0, 0x0) 09:56:55 executing program 4: fstat(0xffffffffffffffff, 0x0) fstat(0xffffffffffffff9c, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x80000000000003, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'ip6_vti0\x00', 0x0}) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000380), 0x4) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) [ 634.210635][ T2147] IPVS: ftp: loaded support on port[0] = 21 [ 634.272514][ T2147] chnl_net:caif_netlink_parms(): no params data found [ 634.773077][ T2147] bridge0: port 1(bridge_slave_0) entered blocking state [ 634.780436][ T2147] bridge0: port 1(bridge_slave_0) entered disabled state [ 634.788059][ T2147] device bridge_slave_0 entered promiscuous mode [ 634.796930][ T2147] bridge0: port 2(bridge_slave_1) entered blocking state [ 634.804192][ T2147] bridge0: port 2(bridge_slave_1) entered disabled state [ 634.811998][ T2147] device bridge_slave_1 entered promiscuous mode [ 635.054540][ T2147] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 635.065230][ T2147] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 635.086204][ T2147] team0: Port device team_slave_0 added [ 635.093384][ T2147] team0: Port device team_slave_1 added [ 635.411891][ T2147] device hsr_slave_0 entered promiscuous mode [ 635.449166][ T2147] device hsr_slave_1 entered promiscuous mode [ 635.488906][ T2147] debugfs: Directory 'hsr0' with parent '/' already present! [ 635.501383][ T2150] IPVS: ftp: loaded support on port[0] = 21 [ 635.745398][ T2147] 8021q: adding VLAN 0 to HW filter on device bond0 [ 635.984170][ T1341] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 635.997963][ T2147] 8021q: adding VLAN 0 to HW filter on device team0 [ 636.009894][ T2143] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 636.017475][ T2143] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 636.240069][ T2143] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 636.248392][ T2143] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 636.257014][ T2143] bridge0: port 1(bridge_slave_0) entered blocking state [ 636.264150][ T2143] bridge0: port 1(bridge_slave_0) entered forwarding state [ 636.281356][ T1451] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 636.292199][ T1341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 636.300799][ T1341] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 636.309385][ T1341] bridge0: port 2(bridge_slave_1) entered blocking state [ 636.316434][ T1341] bridge0: port 2(bridge_slave_1) entered forwarding state [ 636.328206][ T2150] chnl_net:caif_netlink_parms(): no params data found [ 636.597192][ T1451] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 636.608204][ T1341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 636.617225][ T2150] bridge0: port 1(bridge_slave_0) entered blocking state [ 636.624455][ T2150] bridge0: port 1(bridge_slave_0) entered disabled state [ 636.631987][ T2150] device bridge_slave_0 entered promiscuous mode [ 636.888457][ T2147] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 636.898879][ T2147] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 636.910366][ T2823] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 636.918694][ T2823] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 636.927023][ T2823] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 636.935306][ T2823] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 636.943671][ T2823] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 636.951795][ T2823] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 636.960264][ T2823] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 636.968496][ T2823] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 636.977048][ T2150] bridge0: port 2(bridge_slave_1) entered blocking state [ 636.984230][ T2150] bridge0: port 2(bridge_slave_1) entered disabled state [ 636.991994][ T2150] device bridge_slave_1 entered promiscuous mode [ 636.998818][ T2823] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 637.006500][ T2823] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 637.266600][ T2150] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 637.280559][ T2150] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 637.307232][ T2147] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 637.315477][ T821] device bridge_slave_1 left promiscuous mode [ 637.321870][ T821] bridge0: port 2(bridge_slave_1) entered disabled state [ 637.360462][ T821] device bridge_slave_0 left promiscuous mode [ 637.366648][ T821] bridge0: port 1(bridge_slave_0) entered disabled state [ 637.410023][ T821] device bridge_slave_1 left promiscuous mode [ 637.416259][ T821] bridge0: port 2(bridge_slave_1) entered disabled state [ 637.459656][ T821] device bridge_slave_0 left promiscuous mode [ 637.465775][ T821] bridge0: port 1(bridge_slave_0) entered disabled state [ 637.510558][ T821] device bridge_slave_1 left promiscuous mode [ 637.516677][ T821] bridge0: port 2(bridge_slave_1) entered disabled state [ 637.570582][ T821] device bridge_slave_0 left promiscuous mode [ 637.576697][ T821] bridge0: port 1(bridge_slave_0) entered disabled state [ 642.519870][ T821] device hsr_slave_0 left promiscuous mode [ 642.560394][ T821] device hsr_slave_1 left promiscuous mode [ 642.608505][ T821] team0 (unregistering): Port device team_slave_1 removed [ 642.621591][ T821] team0 (unregistering): Port device team_slave_0 removed [ 642.632457][ T821] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 642.694493][ T821] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 642.789880][ T821] bond0 (unregistering): Released all slaves [ 642.929429][ T821] device hsr_slave_0 left promiscuous mode [ 642.968932][ T821] device hsr_slave_1 left promiscuous mode [ 643.016150][ T821] team0 (unregistering): Port device team_slave_1 removed [ 643.028297][ T821] team0 (unregistering): Port device team_slave_0 removed [ 643.041475][ T821] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 643.073655][ T821] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 643.151987][ T821] bond0 (unregistering): Released all slaves [ 643.279884][ T821] device hsr_slave_0 left promiscuous mode [ 643.319740][ T821] device hsr_slave_1 left promiscuous mode [ 643.367911][ T821] team0 (unregistering): Port device team_slave_1 removed [ 643.378401][ T821] team0 (unregistering): Port device team_slave_0 removed [ 643.390808][ T821] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 643.423735][ T821] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 643.489008][ T821] bond0 (unregistering): Released all slaves [ 643.582605][ T2150] team0: Port device team_slave_0 added [ 643.594631][ T2150] team0: Port device team_slave_1 added [ 643.651508][ T2150] device hsr_slave_0 entered promiscuous mode [ 643.689099][ T2150] device hsr_slave_1 entered promiscuous mode [ 643.831641][ T2150] 8021q: adding VLAN 0 to HW filter on device bond0 [ 643.844685][ T2150] 8021q: adding VLAN 0 to HW filter on device team0 [ 643.853727][ T1341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 643.861636][ T1341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 643.883440][ T2823] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 643.892229][ T2823] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 643.900630][ T2823] bridge0: port 1(bridge_slave_0) entered blocking state [ 643.907681][ T2823] bridge0: port 1(bridge_slave_0) entered forwarding state [ 644.009897][ T1197] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 644.017802][ T1197] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 644.026625][ T1197] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 644.035120][ T1197] bridge0: port 2(bridge_slave_1) entered blocking state [ 644.042196][ T1197] bridge0: port 2(bridge_slave_1) entered forwarding state [ 644.049740][ T1197] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 644.058369][ T1197] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 644.066944][ T1197] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 644.075712][ T1197] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 644.084095][ T1197] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 644.092753][ T1197] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 644.101241][ T1197] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 644.109512][ T1197] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 644.153304][ T2150] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 644.161348][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready 09:57:05 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000240)={@remote}, 0x14) 09:57:05 executing program 1: fstat(0xffffffffffffffff, 0x0) fstat(0xffffffffffffff9c, 0x0) r0 = socket(0x200000000000011, 0x80000000000003, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'ip6_vti0\x00', 0x0}) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000380)=0xd95, 0x4) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) 09:57:05 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r2 = socket$kcm(0x10, 0x3, 0x0) setsockopt$sock_attach_bpf(r2, 0x10e, 0x4, &(0x7f0000000000)=r0, 0x4) r3 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x40) openat$cgroup_ro(r3, &(0x7f0000000140)='cpuset.effective_cpus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r4 = getpid() perf_event_open(0x0, r4, 0x3, 0xffffffffffffffff, 0x1) r5 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) gettid() r6 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r6, &(0x7f0000000540)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @ipv4}, 0x80, 0x0}, 0x24000001) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000080)='cgroup.type\x00', 0x2, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f00000002c0)='threaded\x00', 0x9) write$cgroup_int(r5, 0x0, 0x0) 09:57:05 executing program 4: fstat(0xffffffffffffffff, 0x0) fstat(0xffffffffffffff9c, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x80000000000003, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'ip6_vti0\x00', 0x0}) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000380), 0x4) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) 09:57:05 executing program 5: syz_mount_image$jfs(&(0x7f00000001c0)='jfs\x00', &(0x7f0000000280)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)={[{@errors_remount='errors=remount-ro'}, {@noquota='noquota'}, {@integrity='integrity'}], [], 0x1100000000000000}) [ 644.201229][ T2150] 8021q: adding VLAN 0 to HW filter on device batadv0 09:57:05 executing program 5: syz_mount_image$jfs(&(0x7f00000001c0)='jfs\x00', &(0x7f0000000280)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)={[{@errors_remount='errors=remount-ro'}, {@noquota='noquota'}, {@integrity='integrity'}], [], 0x1200000000000000}) 09:57:06 executing program 2: clock_nanosleep(0x2, 0x0, &(0x7f0000000140)={0x0, 0x989680}, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x800040000000015) syz_genetlink_get_family_id$tipc(0x0) restart_syscall() 09:57:06 executing program 4: fstat(0xffffffffffffffff, 0x0) fstat(0xffffffffffffff9c, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x80000000000003, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'ip6_vti0\x00', 0x0}) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000380), 0x4) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) [ 644.785322][ T2191] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 644.795631][ T2191] CPU: 1 PID: 2191 Comm: syz-executor.3 Not tainted 5.2.0+ #37 [ 644.803175][ T2191] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 644.813223][ T2191] Call Trace: [ 644.816524][ T2191] dump_stack+0x1d8/0x2f8 [ 644.820855][ T2191] dump_header+0xd8/0x970 [ 644.825195][ T2191] oom_kill_process+0xcd/0x320 [ 644.829950][ T2191] out_of_memory+0x5e1/0x8a0 [ 644.834547][ T2191] ? unregister_oom_notifier+0x20/0x20 [ 644.840004][ T2191] memory_max_write+0x537/0x6a0 [ 644.844849][ T2191] ? lock_acquire+0x158/0x250 [ 644.849525][ T2191] ? memory_max_show+0xa0/0xa0 [ 644.854280][ T2191] ? trace_hardirqs_on_caller+0x74/0x80 [ 644.859830][ T2191] ? trace_lock_acquire+0x154/0x1b0 [ 644.865025][ T2191] ? lock_acquire+0x158/0x250 [ 644.869692][ T2191] ? kernfs_fop_write+0x22e/0x4f0 [ 644.874716][ T2191] ? memory_max_show+0xa0/0xa0 [ 644.879474][ T2191] cgroup_file_write+0x27b/0x6e0 [ 644.884433][ T2191] ? cgroup_seqfile_stop+0xc0/0xc0 [ 644.889549][ T2191] ? cgroup_seqfile_stop+0xc0/0xc0 [ 644.894661][ T2191] kernfs_fop_write+0x3e4/0x4f0 [ 644.899514][ T2191] ? kernfs_fop_read+0x580/0x580 [ 644.904449][ T2191] __vfs_write+0xf9/0x7d0 [ 644.908786][ T2191] ? rcu_irq_exit+0xe3/0x260 [ 644.913373][ T2191] ? __kernel_write+0x350/0x350 [ 644.918242][ T2191] ? __sb_start_write+0x39c/0x440 [ 644.923291][ T2191] ? __kasan_check_read+0x11/0x20 [ 644.928305][ T2191] vfs_write+0x275/0x590 [ 644.932569][ T2191] ksys_write+0x16b/0x2a0 [ 644.936900][ T2191] ? __ia32_sys_read+0x90/0x90 [ 644.941652][ T2191] ? prepare_exit_to_usermode+0x1f7/0x580 [ 644.947386][ T2191] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 644.952833][ T2191] ? trace_irq_disable_rcuidle+0x23/0x1c0 [ 644.958540][ T2191] ? do_syscall_64+0x1d/0x140 [ 644.963203][ T2191] __x64_sys_write+0x7b/0x90 [ 644.967780][ T2191] do_syscall_64+0xfe/0x140 [ 644.972274][ T2191] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 644.978151][ T2191] RIP: 0033:0x459819 [ 644.982037][ T2191] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 645.001632][ T2191] RSP: 002b:00007fd3f1deec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 645.010039][ T2191] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459819 [ 645.018007][ T2191] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 645.025971][ T2191] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 645.033929][ T2191] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd3f1def6d4 [ 645.041897][ T2191] R13: 00000000004c9774 R14: 00000000004e0b70 R15: 00000000ffffffff [ 645.050082][ T2191] memory: usage 3308kB, limit 0kB, failcnt 132 [ 645.056389][ T2191] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 645.063375][ T2191] Memory cgroup stats for /syz3: [ 645.064242][ T2191] anon 2203648 [ 645.064242][ T2191] file 0 [ 645.064242][ T2191] kernel_stack 65536 [ 645.064242][ T2191] slab 1126400 [ 645.064242][ T2191] sock 0 [ 645.064242][ T2191] shmem 0 [ 645.064242][ T2191] file_mapped 0 [ 645.064242][ T2191] file_dirty 0 [ 645.064242][ T2191] file_writeback 0 [ 645.064242][ T2191] anon_thp 2097152 [ 645.064242][ T2191] inactive_anon 0 [ 645.064242][ T2191] active_anon 2203648 [ 645.064242][ T2191] inactive_file 0 [ 645.064242][ T2191] active_file 0 [ 645.064242][ T2191] unevictable 0 [ 645.064242][ T2191] slab_reclaimable 405504 [ 645.064242][ T2191] slab_unreclaimable 720896 [ 645.064242][ T2191] pgfault 78243 [ 645.064242][ T2191] pgmajfault 0 [ 645.064242][ T2191] workingset_refault 0 [ 645.064242][ T2191] workingset_activate 0 [ 645.064242][ T2191] workingset_nodereclaim 0 [ 645.064242][ T2191] pgrefill 0 [ 645.064242][ T2191] pgscan 0 [ 645.064242][ T2191] pgsteal 0 [ 645.064242][ T2191] pgactivate 0 [ 645.158175][ T2191] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=2188,uid=0 [ 645.174115][ T2191] Memory cgroup out of memory: Killed process 2188 (syz-executor.3) total-vm:72576kB, anon-rss:2140kB, file-rss:34816kB, shmem-rss:0kB [ 645.191331][ T1057] oom_reaper: reaped process 2188 (syz-executor.3), now anon-rss:0kB, file-rss:33856kB, shmem-rss:0kB 09:57:07 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r2 = socket$kcm(0x10, 0x3, 0x0) setsockopt$sock_attach_bpf(r2, 0x10e, 0x4, &(0x7f0000000000)=r0, 0x4) r3 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x40) openat$cgroup_ro(r3, &(0x7f0000000140)='cpuset.effective_cpus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r4 = getpid() perf_event_open(0x0, r4, 0x3, 0xffffffffffffffff, 0x1) r5 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) r6 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r6, &(0x7f0000000540)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @ipv4}, 0x80, 0x0}, 0x24000001) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000080)='cgroup.type\x00', 0x2, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f00000002c0)='threaded\x00', 0x9) write$cgroup_int(r5, 0x0, 0x0) write$cgroup_int(r5, 0x0, 0x0) 09:57:07 executing program 5: syz_mount_image$jfs(&(0x7f00000001c0)='jfs\x00', &(0x7f0000000280)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)={[{@errors_remount='errors=remount-ro'}, {@noquota='noquota'}, {@integrity='integrity'}], [], 0x1f00000000000000}) 09:57:07 executing program 1: fstat(0xffffffffffffffff, 0x0) fstat(0xffffffffffffff9c, 0x0) r0 = socket(0x200000000000011, 0x80000000000003, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'ip6_vti0\x00', 0x0}) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000380)=0xd95, 0x4) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) 09:57:07 executing program 4: fstat(0xffffffffffffffff, 0x0) fstat(0xffffffffffffff9c, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x80000000000003, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'ip6_vti0\x00', 0x0}) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000380)=0xd95, 0x4) sendmmsg(0xffffffffffffffff, &(0x7f0000000d00), 0x400004e, 0x0) 09:57:07 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224) clone(0x4000000040100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000040)={@local, 0x0, 0x2, 0x3}, 0x20) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x1) fcntl$setstatus(r1, 0x4, 0x42802) [ 645.816482][ T2150] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 645.826616][ T2150] CPU: 0 PID: 2150 Comm: syz-executor.3 Not tainted 5.2.0+ #37 [ 645.834161][ T2150] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 645.844212][ T2150] Call Trace: [ 645.847509][ T2150] dump_stack+0x1d8/0x2f8 [ 645.851844][ T2150] dump_header+0xd8/0x970 [ 645.856184][ T2150] oom_kill_process+0xcd/0x320 [ 645.860948][ T2150] out_of_memory+0x5e1/0x8a0 [ 645.865562][ T2150] ? unregister_oom_notifier+0x20/0x20 [ 645.871038][ T2150] ? __kasan_check_read+0x11/0x20 [ 645.876061][ T2150] try_charge+0x134a/0x17b0 [ 645.880574][ T2150] ? __memcg_kmem_charge_memcg+0x180/0x180 [ 645.886372][ T2150] ? __lock_acquire+0x4750/0x4750 [ 645.891389][ T2150] ? rcu_lock_release+0x15/0x20 [ 645.896230][ T2150] ? get_mem_cgroup_from_mm+0x15e/0x170 [ 645.901762][ T2150] mem_cgroup_try_charge+0x216/0x560 [ 645.907037][ T2150] mem_cgroup_try_charge_delay+0x25/0xa0 [ 645.912690][ T2150] wp_page_copy+0x367/0x18c0 [ 645.917289][ T2150] ? rcu_lock_release+0x30/0x30 [ 645.922130][ T2150] ? __lock_acquire+0x4750/0x4750 [ 645.927150][ T2150] ? __kasan_check_read+0x11/0x20 [ 645.932186][ T2150] ? do_raw_spin_unlock+0x49/0x260 [ 645.937305][ T2150] do_wp_page+0x2c9/0x1ce0 [ 645.941737][ T2150] ? __rwlock_init+0x130/0x130 [ 645.946487][ T2150] ? count_memcg_event_mm+0x300/0x300 [ 645.951863][ T2150] handle_mm_fault+0x2bcf/0x6080 [ 645.956852][ T2150] ? finish_fault+0x230/0x230 [ 645.961524][ T2150] ? vmacache_find+0x251/0x5b0 [ 645.966293][ T2150] do_user_addr_fault+0x589/0xaf0 [ 645.971319][ T2150] __do_page_fault+0xd3/0x1f0 [ 645.976019][ T2150] do_page_fault+0x99/0xb0 [ 645.980427][ T2150] page_fault+0x39/0x40 [ 645.984607][ T2150] RIP: 0033:0x4308f6 [ 645.988492][ T2150] Code: 1f 44 00 00 48 29 e8 31 c9 48 81 fb 40 56 71 00 0f 95 c1 48 8d 34 2a 48 83 cd 01 48 c1 e1 02 48 83 c8 01 48 09 e9 48 89 73 58 <48> 89 4a 08 48 89 46 08 48 8d 4a 10 8b 05 6c 46 64 00 85 c0 0f 84 [ 646.008099][ T2150] RSP: 002b:00007ffff93c97c0 EFLAGS: 00010206 [ 646.014172][ T2150] RAX: 0000000000019691 RBX: 0000000000715640 RCX: 0000000000008041 [ 646.022164][ T2150] RDX: 0000555556d09930 RSI: 0000555556d11970 RDI: 0000000000000003 [ 646.030135][ T2150] RBP: 0000000000008041 R08: 0000000000000001 R09: 0000555556d08940 [ 646.038105][ T2150] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000715698 [ 646.046073][ T2150] R13: 0000000000715698 R14: 0000000000000000 R15: 0000000000002710 [ 646.054119][ T2150] memory: usage 980kB, limit 0kB, failcnt 144 [ 646.060216][ T2150] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 646.067070][ T2150] Memory cgroup stats for /syz3: [ 646.067155][ T2150] anon 0 [ 646.067155][ T2150] file 0 [ 646.067155][ T2150] kernel_stack 0 [ 646.067155][ T2150] slab 1126400 [ 646.067155][ T2150] sock 0 [ 646.067155][ T2150] shmem 0 [ 646.067155][ T2150] file_mapped 0 [ 646.067155][ T2150] file_dirty 0 [ 646.067155][ T2150] file_writeback 0 [ 646.067155][ T2150] anon_thp 0 [ 646.067155][ T2150] inactive_anon 0 [ 646.067155][ T2150] active_anon 0 [ 646.067155][ T2150] inactive_file 0 [ 646.067155][ T2150] active_file 0 [ 646.067155][ T2150] unevictable 0 [ 646.067155][ T2150] slab_reclaimable 405504 [ 646.067155][ T2150] slab_unreclaimable 720896 [ 646.067155][ T2150] pgfault 78243 [ 646.067155][ T2150] pgmajfault 0 [ 646.067155][ T2150] workingset_refault 0 [ 646.067155][ T2150] workingset_activate 0 [ 646.067155][ T2150] workingset_nodereclaim 0 [ 646.067155][ T2150] pgrefill 0 [ 646.067155][ T2150] pgscan 0 [ 646.067155][ T2150] pgsteal 0 [ 646.067155][ T2150] pgactivate 0 [ 646.067155][ T2150] pgdeactivate 0 09:57:07 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f0000000040)=0x8, 0x4) setsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f0000000000)=0x5, 0x4) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x44e20}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20040000, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) [ 646.162351][ T2150] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=2150,uid=0 [ 646.162427][ T2150] Memory cgroup out of memory: Killed process 2150 (syz-executor.3) total-vm:72444kB, anon-rss:72kB, file-rss:34832kB, shmem-rss:0kB [ 646.163628][ T1057] oom_reaper: reaped process 2150 (syz-executor.3), now anon-rss:0kB, file-rss:33936kB, shmem-rss:0kB [ 646.369289][ T2227] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 646.782554][ T2234] IPVS: ftp: loaded support on port[0] = 21 [ 646.838588][ T2234] chnl_net:caif_netlink_parms(): no params data found [ 646.890717][ T2234] bridge0: port 1(bridge_slave_0) entered blocking state [ 646.897822][ T2234] bridge0: port 1(bridge_slave_0) entered disabled state [ 646.905827][ T2234] device bridge_slave_0 entered promiscuous mode [ 646.915178][ T2234] bridge0: port 2(bridge_slave_1) entered blocking state [ 646.922306][ T2234] bridge0: port 2(bridge_slave_1) entered disabled state [ 646.930209][ T2234] device bridge_slave_1 entered promiscuous mode [ 646.950988][ T2234] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 646.962373][ T2234] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 646.987893][ T2234] team0: Port device team_slave_0 added [ 646.995623][ T2234] team0: Port device team_slave_1 added [ 647.061288][ T2234] device hsr_slave_0 entered promiscuous mode [ 647.139088][ T2234] device hsr_slave_1 entered promiscuous mode [ 647.178843][ T2234] debugfs: Directory 'hsr0' with parent '/' already present! [ 647.205920][ T2234] bridge0: port 2(bridge_slave_1) entered blocking state [ 647.213025][ T2234] bridge0: port 2(bridge_slave_1) entered forwarding state [ 647.220381][ T2234] bridge0: port 1(bridge_slave_0) entered blocking state [ 647.227427][ T2234] bridge0: port 1(bridge_slave_0) entered forwarding state [ 647.307246][ T2234] 8021q: adding VLAN 0 to HW filter on device bond0 [ 647.326607][ T1153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 647.337560][ T1153] bridge0: port 1(bridge_slave_0) entered disabled state [ 647.352079][ T1153] bridge0: port 2(bridge_slave_1) entered disabled state [ 647.369321][ T2234] 8021q: adding VLAN 0 to HW filter on device team0 [ 647.380234][ T1153] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 647.388438][ T1153] bridge0: port 1(bridge_slave_0) entered blocking state [ 647.395502][ T1153] bridge0: port 1(bridge_slave_0) entered forwarding state [ 647.408557][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 647.417046][ T1278] bridge0: port 2(bridge_slave_1) entered blocking state [ 647.424158][ T1278] bridge0: port 2(bridge_slave_1) entered forwarding state [ 647.447344][ T2234] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 647.457793][ T2234] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 647.471125][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 647.479664][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 647.487964][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 647.496453][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 647.505105][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 647.513218][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 647.528321][ T2234] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 647.620042][ T2241] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 647.631235][ T2241] CPU: 0 PID: 2241 Comm: syz-executor.0 Not tainted 5.2.0+ #37 [ 647.638767][ T2241] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 647.648813][ T2241] Call Trace: [ 647.652102][ T2241] dump_stack+0x1d8/0x2f8 [ 647.656466][ T2241] dump_header+0xd8/0x970 [ 647.660802][ T2241] oom_kill_process+0xcd/0x320 [ 647.665549][ T2241] out_of_memory+0x5e1/0x8a0 [ 647.670123][ T2241] ? unregister_oom_notifier+0x20/0x20 [ 647.675561][ T2241] ? trace_hardirqs_on+0x74/0x80 [ 647.680485][ T2241] memory_max_write+0x537/0x6a0 [ 647.685314][ T2241] ? lock_acquire+0x1b2/0x250 [ 647.690023][ T2241] ? memory_max_show+0xa0/0xa0 [ 647.694783][ T2241] ? trace_lock_acquire+0x154/0x1b0 [ 647.699970][ T2241] ? lock_acquire+0x158/0x250 [ 647.704629][ T2241] ? kernfs_fop_write+0x22e/0x4f0 [ 647.709632][ T2241] ? memory_max_show+0xa0/0xa0 [ 647.714404][ T2241] cgroup_file_write+0x27b/0x6e0 [ 647.719349][ T2241] ? cgroup_seqfile_stop+0xc0/0xc0 [ 647.724446][ T2241] ? cgroup_seqfile_stop+0xc0/0xc0 [ 647.729568][ T2241] kernfs_fop_write+0x3e4/0x4f0 [ 647.734398][ T2241] ? kernfs_fop_read+0x580/0x580 [ 647.739357][ T2241] __vfs_write+0xf9/0x7d0 [ 647.743690][ T2241] ? retint_kernel+0x10/0x10 [ 647.748280][ T2241] ? __kernel_write+0x350/0x350 [ 647.753109][ T2241] ? rcu_irq_exit+0xe3/0x260 [ 647.757693][ T2241] ? __sb_start_write+0x39c/0x440 [ 647.762707][ T2241] vfs_write+0x275/0x590 [ 647.766941][ T2241] ksys_write+0x16b/0x2a0 [ 647.771263][ T2241] ? __ia32_sys_read+0x90/0x90 [ 647.776013][ T2241] ? prepare_exit_to_usermode+0x1f7/0x580 [ 647.781710][ T2241] ? trace_irq_disable_rcuidle+0x23/0x1c0 [ 647.787420][ T2241] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 647.792856][ T2241] ? trace_irq_disable_rcuidle+0x23/0x1c0 [ 647.798565][ T2241] ? do_syscall_64+0x1d/0x140 [ 647.803221][ T2241] __x64_sys_write+0x7b/0x90 [ 647.807790][ T2241] do_syscall_64+0xfe/0x140 [ 647.812275][ T2241] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 647.818144][ T2241] RIP: 0033:0x459819 [ 647.822017][ T2241] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 647.841609][ T2241] RSP: 002b:00007f9deca43c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 647.850044][ T2241] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459819 [ 647.858007][ T2241] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 647.865958][ T2241] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 647.873910][ T2241] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f9deca446d4 [ 647.881870][ T2241] R13: 00000000004c9774 R14: 00000000004e0b70 R15: 00000000ffffffff [ 647.905123][ T2241] memory: usage 4060kB, limit 0kB, failcnt 13 [ 647.911333][ T2241] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 647.918349][ T2241] Memory cgroup stats for /syz0: [ 647.918846][ T2241] anon 2174976 [ 647.918846][ T2241] file 135168 [ 647.918846][ T2241] kernel_stack 65536 [ 647.918846][ T2241] slab 1699840 [ 647.918846][ T2241] sock 0 [ 647.918846][ T2241] shmem 0 [ 647.918846][ T2241] file_mapped 0 [ 647.918846][ T2241] file_dirty 0 [ 647.918846][ T2241] file_writeback 0 [ 647.918846][ T2241] anon_thp 2097152 [ 647.918846][ T2241] inactive_anon 0 [ 647.918846][ T2241] active_anon 2174976 [ 647.918846][ T2241] inactive_file 0 [ 647.918846][ T2241] active_file 0 [ 647.918846][ T2241] unevictable 0 [ 647.918846][ T2241] slab_reclaimable 675840 [ 647.918846][ T2241] slab_unreclaimable 1024000 [ 647.918846][ T2241] pgfault 51678 [ 647.918846][ T2241] pgmajfault 0 [ 647.918846][ T2241] workingset_refault 0 [ 647.918846][ T2241] workingset_activate 0 [ 647.918846][ T2241] workingset_nodereclaim 0 [ 647.918846][ T2241] pgrefill 0 [ 647.918846][ T2241] pgscan 0 [ 647.918846][ T2241] pgsteal 0 [ 647.918846][ T2241] pgactivate 0 [ 648.013203][ T2241] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=2240,uid=0 [ 648.029036][ T2241] Memory cgroup out of memory: Killed process 2240 (syz-executor.0) total-vm:72576kB, anon-rss:2140kB, file-rss:34816kB, shmem-rss:0kB [ 648.046328][ T1057] oom_reaper: reaped process 2240 (syz-executor.0), now anon-rss:0kB, file-rss:34848kB, shmem-rss:0kB [ 648.105626][ T2234] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 648.115624][ T2234] CPU: 0 PID: 2234 Comm: syz-executor.0 Not tainted 5.2.0+ #37 [ 648.123167][ T2234] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 648.133213][ T2234] Call Trace: [ 648.136520][ T2234] dump_stack+0x1d8/0x2f8 [ 648.140853][ T2234] dump_header+0xd8/0x970 [ 648.145182][ T2234] oom_kill_process+0xcd/0x320 [ 648.149938][ T2234] out_of_memory+0x5e1/0x8a0 [ 648.154518][ T2234] ? unregister_oom_notifier+0x20/0x20 [ 648.159968][ T2234] ? __kasan_check_read+0x11/0x20 [ 648.165010][ T2234] try_charge+0x134a/0x17b0 [ 648.170018][ T2234] ? __memcg_kmem_charge_memcg+0x180/0x180 [ 648.175832][ T2234] ? __lock_acquire+0x4750/0x4750 [ 648.180842][ T2234] ? rcu_lock_release+0x15/0x20 [ 648.185691][ T2234] ? get_mem_cgroup_from_mm+0x15e/0x170 [ 648.191258][ T2234] mem_cgroup_try_charge+0x216/0x560 [ 648.196556][ T2234] mem_cgroup_try_charge_delay+0x25/0xa0 [ 648.202180][ T2234] wp_page_copy+0x367/0x18c0 [ 648.206773][ T2234] ? rcu_lock_release+0x30/0x30 [ 648.211630][ T2234] ? __lock_acquire+0x4750/0x4750 [ 648.216652][ T2234] ? __kasan_check_read+0x11/0x20 [ 648.221673][ T2234] ? do_raw_spin_unlock+0x49/0x260 [ 648.226769][ T2234] do_wp_page+0x2c9/0x1ce0 [ 648.231177][ T2234] ? __rwlock_init+0x130/0x130 [ 648.235935][ T2234] ? count_memcg_event_mm+0x300/0x300 [ 648.241308][ T2234] handle_mm_fault+0x2bcf/0x6080 [ 648.246259][ T2234] ? finish_fault+0x230/0x230 [ 648.250931][ T2234] ? vmacache_find+0x251/0x5b0 [ 648.255689][ T2234] do_user_addr_fault+0x589/0xaf0 [ 648.260724][ T2234] __do_page_fault+0xd3/0x1f0 [ 648.265382][ T2234] do_page_fault+0x99/0xb0 [ 648.269784][ T2234] page_fault+0x39/0x40 [ 648.273952][ T2234] RIP: 0033:0x4308f6 [ 648.277839][ T2234] Code: 1f 44 00 00 48 29 e8 31 c9 48 81 fb 40 56 71 00 0f 95 c1 48 8d 34 2a 48 83 cd 01 48 c1 e1 02 48 83 c8 01 48 09 e9 48 89 73 58 <48> 89 4a 08 48 89 46 08 48 8d 4a 10 8b 05 6c 46 64 00 85 c0 0f 84 [ 648.297431][ T2234] RSP: 002b:00007ffe0e5d4260 EFLAGS: 00010206 [ 648.303504][ T2234] RAX: 0000000000019691 RBX: 0000000000715640 RCX: 0000000000008041 [ 648.311465][ T2234] RDX: 0000555556020930 RSI: 0000555556028970 RDI: 0000000000000003 [ 648.319448][ T2234] RBP: 0000000000008041 R08: 0000000000000001 R09: 000055555601f940 [ 648.327409][ T2234] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000715698 [ 648.335366][ T2234] R13: 0000000000715698 R14: 0000000000000000 R15: 0000000000002710 [ 648.343438][ T2234] memory: usage 1732kB, limit 0kB, failcnt 21 [ 648.343445][ T2234] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 648.343449][ T2234] Memory cgroup stats for /syz0: [ 648.343510][ T2234] anon 32768 [ 648.343510][ T2234] file 135168 [ 648.343510][ T2234] kernel_stack 0 [ 648.343510][ T2234] slab 1699840 [ 648.343510][ T2234] sock 0 [ 648.343510][ T2234] shmem 0 [ 648.343510][ T2234] file_mapped 0 [ 648.343510][ T2234] file_dirty 0 [ 648.343510][ T2234] file_writeback 0 [ 648.343510][ T2234] anon_thp 0 [ 648.343510][ T2234] inactive_anon 0 [ 648.343510][ T2234] active_anon 32768 [ 648.343510][ T2234] inactive_file 0 [ 648.343510][ T2234] active_file 0 [ 648.343510][ T2234] unevictable 0 [ 648.343510][ T2234] slab_reclaimable 675840 [ 648.343510][ T2234] slab_unreclaimable 1024000 [ 648.343510][ T2234] pgfault 51678 [ 648.343510][ T2234] pgmajfault 0 [ 648.343510][ T2234] workingset_refault 0 [ 648.343510][ T2234] workingset_activate 0 [ 648.343510][ T2234] workingset_nodereclaim 0 [ 648.343510][ T2234] pgrefill 0 [ 648.343510][ T2234] pgscan 0 [ 648.343510][ T2234] pgsteal 0 [ 648.343510][ T2234] pgactivate 0 09:57:09 executing program 0: perf_event_open$cgroup(&(0x7f0000000140)={0x0, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x9, 0x1, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SMI(r2, 0xaeb7) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:57:09 executing program 4: fstat(0xffffffffffffffff, 0x0) fstat(0xffffffffffffff9c, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x80000000000003, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'ip6_vti0\x00', 0x0}) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000380)=0xd95, 0x4) sendmmsg(0xffffffffffffffff, &(0x7f0000000d00), 0x400004e, 0x0) 09:57:09 executing program 5: syz_mount_image$jfs(&(0x7f00000001c0)='jfs\x00', &(0x7f0000000280)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)={[{@errors_remount='errors=remount-ro'}, {@noquota='noquota'}, {@integrity='integrity'}], [], 0x2000000000000000}) 09:57:09 executing program 1: fstat(0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x80000000000003, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'ip6_vti0\x00', 0x0}) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000380)=0xd95, 0x4) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) 09:57:09 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x1c0c) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) fcntl$setstatus(r1, 0x4, 0x42803) ioctl$int_in(r1, 0x5452, &(0x7f0000000040)=0x7) 09:57:09 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r2 = socket$kcm(0x10, 0x3, 0x0) setsockopt$sock_attach_bpf(r2, 0x10e, 0x4, &(0x7f0000000000)=r0, 0x4) r3 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x40) openat$cgroup_ro(r3, &(0x7f0000000140)='cpuset.effective_cpus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r4 = getpid() perf_event_open(0x0, r4, 0x3, 0xffffffffffffffff, 0x1) r5 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) r6 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r6, &(0x7f0000000540)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @ipv4}, 0x80, 0x0}, 0x24000001) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000080)='cgroup.type\x00', 0x2, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f00000002c0)='threaded\x00', 0x9) write$cgroup_int(r5, 0x0, 0x0) write$cgroup_int(r5, 0x0, 0x0) [ 648.356399][ T2234] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=2234,uid=0 [ 648.464695][ T2234] Memory cgroup out of memory: Killed process 2234 (syz-executor.0) total-vm:72444kB, anon-rss:72kB, file-rss:34832kB, shmem-rss:0kB [ 648.482305][ T1057] oom_reaper: reaped process 2234 (syz-executor.0), now anon-rss:0kB, file-rss:33936kB, shmem-rss:0kB 09:57:10 executing program 4: fstat(0xffffffffffffffff, 0x0) fstat(0xffffffffffffff9c, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x80000000000003, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'ip6_vti0\x00', 0x0}) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000380)=0xd95, 0x4) sendmmsg(0xffffffffffffffff, &(0x7f0000000d00), 0x400004e, 0x0) 09:57:10 executing program 5: syz_mount_image$jfs(&(0x7f00000001c0)='jfs\x00', &(0x7f0000000280)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)={[{@errors_remount='errors=remount-ro'}, {@noquota='noquota'}, {@integrity='integrity'}], [], 0x2010000000000000}) 09:57:10 executing program 4: fstat(0xffffffffffffffff, 0x0) fstat(0xffffffffffffff9c, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x80000000000003, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'ip6_vti0\x00', 0x0}) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000380)=0xd95, 0x4) sendmmsg(r0, 0x0, 0x0, 0x0) 09:57:10 executing program 2: openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x4) sendmsg$kcm(r1, &(0x7f0000003d00)={&(0x7f0000000380)=@in={0x2, 0x4e23, @multicast1}, 0x80, 0x0}, 0xfd00) write$cgroup_subtree(r1, 0x0, 0x0) 09:57:10 executing program 1: fstat(0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x80000000000003, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'ip6_vti0\x00', 0x0}) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000380)=0xd95, 0x4) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) 09:57:10 executing program 5: syz_mount_image$jfs(&(0x7f00000001c0)='jfs\x00', &(0x7f0000000280)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)={[{@errors_remount='errors=remount-ro'}, {@noquota='noquota'}, {@integrity='integrity'}], [], 0x2500000000000000}) 09:57:11 executing program 0: 09:57:11 executing program 4: fstat(0xffffffffffffffff, 0x0) fstat(0xffffffffffffff9c, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x80000000000003, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'ip6_vti0\x00', 0x0}) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000380)=0xd95, 0x4) sendmmsg(r0, 0x0, 0x0, 0x0) 09:57:11 executing program 1: fstat(0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x80000000000003, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'ip6_vti0\x00', 0x0}) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000380)=0xd95, 0x4) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) 09:57:11 executing program 5: syz_mount_image$jfs(&(0x7f00000001c0)='jfs\x00', &(0x7f0000000280)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)={[{@errors_remount='errors=remount-ro'}, {@noquota='noquota'}, {@integrity='integrity'}], [], 0x3e0f000000000000}) 09:57:11 executing program 4: fstat(0xffffffffffffffff, 0x0) fstat(0xffffffffffffff9c, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x80000000000003, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'ip6_vti0\x00', 0x0}) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000380)=0xd95, 0x4) sendmmsg(r0, 0x0, 0x0, 0x0) [ 650.540628][ T2310] IPVS: ftp: loaded support on port[0] = 21 [ 650.662445][ T2310] chnl_net:caif_netlink_parms(): no params data found [ 650.752314][ T2310] bridge0: port 1(bridge_slave_0) entered blocking state [ 650.759413][ T2310] bridge0: port 1(bridge_slave_0) entered disabled state [ 650.766994][ T2310] device bridge_slave_0 entered promiscuous mode [ 650.775345][ T2310] bridge0: port 2(bridge_slave_1) entered blocking state [ 650.782441][ T2310] bridge0: port 2(bridge_slave_1) entered disabled state [ 650.790548][ T2310] device bridge_slave_1 entered promiscuous mode [ 650.802839][ T821] device bridge_slave_1 left promiscuous mode [ 650.809095][ T821] bridge0: port 2(bridge_slave_1) entered disabled state [ 650.869498][ T821] device bridge_slave_0 left promiscuous mode [ 650.875614][ T821] bridge0: port 1(bridge_slave_0) entered disabled state [ 652.859617][ T821] device hsr_slave_0 left promiscuous mode [ 652.908947][ T821] device hsr_slave_1 left promiscuous mode [ 652.967454][ T821] team0 (unregistering): Port device team_slave_1 removed [ 652.977544][ T821] team0 (unregistering): Port device team_slave_0 removed [ 652.988611][ T821] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 653.052829][ T821] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 653.141396][ T821] bond0 (unregistering): Released all slaves [ 653.247074][ T2310] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 653.258463][ T2310] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 653.278296][ T2310] team0: Port device team_slave_0 added [ 653.290694][ T2310] team0: Port device team_slave_1 added [ 653.331081][ T2310] device hsr_slave_0 entered promiscuous mode [ 653.379134][ T2310] device hsr_slave_1 entered promiscuous mode [ 653.530113][ T2310] 8021q: adding VLAN 0 to HW filter on device bond0 [ 653.554011][ T1153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 653.562002][ T1153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 653.577947][ T2310] 8021q: adding VLAN 0 to HW filter on device team0 [ 653.592212][ T1153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 653.601181][ T1153] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 653.609536][ T1153] bridge0: port 1(bridge_slave_0) entered blocking state [ 653.616575][ T1153] bridge0: port 1(bridge_slave_0) entered forwarding state [ 653.624323][ T1153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 653.632889][ T1153] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 653.641290][ T1153] bridge0: port 2(bridge_slave_1) entered blocking state [ 653.648339][ T1153] bridge0: port 2(bridge_slave_1) entered forwarding state [ 653.687042][ T2310] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 653.697671][ T2310] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 653.726802][ T2310] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 653.741767][ T1153] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 653.749696][ T1153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 653.758272][ T1153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 653.767299][ T1153] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 653.775813][ T1153] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 653.784147][ T1153] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 653.792506][ T1153] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 653.802764][ T1153] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 653.810397][ T1153] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 653.976793][ T2318] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 653.987170][ T2318] CPU: 0 PID: 2318 Comm: syz-executor.3 Not tainted 5.2.0+ #37 [ 653.994711][ T2318] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 654.004756][ T2318] Call Trace: [ 654.008039][ T2318] dump_stack+0x1d8/0x2f8 [ 654.012374][ T2318] dump_header+0xd8/0x970 [ 654.016702][ T2318] oom_kill_process+0xcd/0x320 [ 654.021458][ T2318] out_of_memory+0x5e1/0x8a0 [ 654.026046][ T2318] ? unregister_oom_notifier+0x20/0x20 [ 654.031495][ T2318] ? trace_hardirqs_on+0x74/0x80 [ 654.036431][ T2318] memory_max_write+0x537/0x6a0 [ 654.041267][ T2318] ? lock_acquire+0x1b2/0x250 [ 654.045938][ T2318] ? memory_max_show+0xa0/0xa0 [ 654.050693][ T2318] ? trace_lock_acquire+0x154/0x1b0 [ 654.055891][ T2318] ? lock_acquire+0x158/0x250 [ 654.060552][ T2318] ? kernfs_fop_write+0x22e/0x4f0 [ 654.065560][ T2318] ? memory_max_show+0xa0/0xa0 [ 654.070307][ T2318] cgroup_file_write+0x27b/0x6e0 [ 654.075257][ T2318] ? cgroup_seqfile_stop+0xc0/0xc0 [ 654.080371][ T2318] ? cgroup_seqfile_stop+0xc0/0xc0 [ 654.085473][ T2318] kernfs_fop_write+0x3e4/0x4f0 [ 654.090313][ T2318] ? kernfs_fop_read+0x580/0x580 [ 654.095242][ T2318] __vfs_write+0xf9/0x7d0 [ 654.099646][ T2318] ? lockdep_hardirqs_on+0x3c5/0x7d0 [ 654.104936][ T2318] ? __kernel_write+0x350/0x350 [ 654.109787][ T2318] ? trace_lock_acquire+0x154/0x1b0 [ 654.114997][ T2318] ? __sb_start_write+0x39c/0x440 [ 654.120019][ T2318] vfs_write+0x275/0x590 [ 654.124271][ T2318] ksys_write+0x16b/0x2a0 [ 654.128606][ T2318] ? __ia32_sys_read+0x90/0x90 [ 654.133378][ T2318] ? prepare_exit_to_usermode+0x1f7/0x580 [ 654.139089][ T2318] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 654.144538][ T2318] ? trace_irq_disable_rcuidle+0x23/0x1c0 [ 654.150273][ T2318] ? do_syscall_64+0x1d/0x140 [ 654.154938][ T2318] __x64_sys_write+0x7b/0x90 [ 654.159517][ T2318] do_syscall_64+0xfe/0x140 [ 654.164014][ T2318] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 654.170418][ T2318] RIP: 0033:0x459819 [ 654.174301][ T2318] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 654.193889][ T2318] RSP: 002b:00007f3ba8fa2c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 654.202297][ T2318] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459819 [ 654.210255][ T2318] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 654.218213][ T2318] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 654.226172][ T2318] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f3ba8fa36d4 [ 654.234128][ T2318] R13: 00000000004c9774 R14: 00000000004e0b70 R15: 00000000ffffffff [ 654.242244][ T2318] memory: usage 3264kB, limit 0kB, failcnt 145 [ 654.248524][ T2318] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 654.255470][ T2318] Memory cgroup stats for /syz3: [ 654.256076][ T2318] anon 2199552 [ 654.256076][ T2318] file 0 [ 654.256076][ T2318] kernel_stack 0 [ 654.256076][ T2318] slab 856064 [ 654.256076][ T2318] sock 0 [ 654.256076][ T2318] shmem 0 [ 654.256076][ T2318] file_mapped 0 [ 654.256076][ T2318] file_dirty 0 [ 654.256076][ T2318] file_writeback 0 [ 654.256076][ T2318] anon_thp 2097152 [ 654.256076][ T2318] inactive_anon 0 [ 654.256076][ T2318] active_anon 2199552 [ 654.256076][ T2318] inactive_file 0 [ 654.256076][ T2318] active_file 0 [ 654.256076][ T2318] unevictable 0 [ 654.256076][ T2318] slab_reclaimable 270336 [ 654.256076][ T2318] slab_unreclaimable 585728 [ 654.256076][ T2318] pgfault 78276 [ 654.256076][ T2318] pgmajfault 0 [ 654.256076][ T2318] workingset_refault 0 [ 654.256076][ T2318] workingset_activate 0 [ 654.256076][ T2318] workingset_nodereclaim 0 [ 654.256076][ T2318] pgrefill 0 [ 654.256076][ T2318] pgscan 0 [ 654.256076][ T2318] pgsteal 0 [ 654.256076][ T2318] pgactivate 0 [ 654.349532][ T2318] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=2317,uid=0 [ 654.365425][ T2318] Memory cgroup out of memory: Killed process 2317 (syz-executor.3) total-vm:72708kB, anon-rss:2136kB, file-rss:34816kB, shmem-rss:0kB [ 654.383748][ T1057] oom_reaper: reaped process 2317 (syz-executor.3), now anon-rss:0kB, file-rss:34832kB, shmem-rss:0kB 09:57:16 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r1 = socket$kcm(0x10, 0x3, 0x0) setsockopt$sock_attach_bpf(r1, 0x10e, 0x4, &(0x7f0000000000)=r0, 0x4) r2 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x40) openat$cgroup_ro(r2, &(0x7f0000000140)='cpuset.effective_cpus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r3 = getpid() perf_event_open(0x0, r3, 0x3, 0xffffffffffffffff, 0x1) r4 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r4, &(0x7f0000000540)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @ipv4}, 0x80, 0x0}, 0x24000001) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000080)='cgroup.type\x00', 0x2, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f00000002c0)='threaded\x00', 0x9) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) 09:57:16 executing program 2: 09:57:16 executing program 0: 09:57:16 executing program 5: syz_mount_image$jfs(&(0x7f00000001c0)='jfs\x00', &(0x7f0000000280)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)={[{@errors_remount='errors=remount-ro'}, {@noquota='noquota'}, {@integrity='integrity'}], [], 0x3f00000000000000}) 09:57:16 executing program 4: 09:57:16 executing program 1: fstat(0xffffffffffffff9c, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x80000000000003, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'ip6_vti0\x00', 0x0}) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000380)=0xd95, 0x4) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) [ 654.556665][ T2310] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 654.566647][ T2310] CPU: 0 PID: 2310 Comm: syz-executor.3 Not tainted 5.2.0+ #37 [ 654.574189][ T2310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 654.584253][ T2310] Call Trace: [ 654.587541][ T2310] dump_stack+0x1d8/0x2f8 [ 654.591874][ T2310] dump_header+0xd8/0x970 [ 654.596198][ T2310] oom_kill_process+0xcd/0x320 [ 654.600966][ T2310] out_of_memory+0x5e1/0x8a0 [ 654.605562][ T2310] ? unregister_oom_notifier+0x20/0x20 [ 654.605574][ T2310] ? __kasan_check_read+0x11/0x20 [ 654.605589][ T2310] try_charge+0x134a/0x17b0 [ 654.605618][ T2310] ? __memcg_kmem_charge_memcg+0x180/0x180 [ 654.605634][ T2310] ? __lock_acquire+0x4750/0x4750 [ 654.605649][ T2310] ? rcu_lock_release+0x15/0x20 [ 654.616101][ T2310] ? get_mem_cgroup_from_mm+0x15e/0x170 [ 654.641739][ T2310] mem_cgroup_try_charge+0x216/0x560 [ 654.647027][ T2310] mem_cgroup_try_charge_delay+0x25/0xa0 [ 654.652656][ T2310] wp_page_copy+0x367/0x18c0 09:57:16 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000012c0)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) close(r1) accept4$alg(r0, 0x0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='/\x02roup.stap\x00', 0x2761, 0x0) write$binfmt_misc(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="73797a21777916fb276cef12efd1ce5425245d"], 0x13) r3 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) write$cgroup_int(r3, &(0x7f00000001c0), 0x12) sendfile(r1, r3, 0x0, 0x2000000000000005) [ 654.657271][ T2310] ? rcu_lock_release+0x30/0x30 [ 654.662128][ T2310] ? __lock_acquire+0x4750/0x4750 [ 654.667166][ T2310] ? __kasan_check_read+0x11/0x20 [ 654.672391][ T2310] ? do_raw_spin_unlock+0x49/0x260 [ 654.677513][ T2310] do_wp_page+0x2c9/0x1ce0 [ 654.681937][ T2310] ? __rwlock_init+0x130/0x130 [ 654.686721][ T2310] ? count_memcg_event_mm+0x300/0x300 [ 654.692099][ T2310] handle_mm_fault+0x2bcf/0x6080 [ 654.697047][ T2310] ? finish_fault+0x230/0x230 [ 654.701740][ T2310] ? vmacache_find+0x566/0x5b0 [ 654.706526][ T2310] ? vmacache_update+0xb7/0x120 [ 654.711376][ T2310] do_user_addr_fault+0x589/0xaf0 [ 654.716396][ T2310] __do_page_fault+0xd3/0x1f0 [ 654.721074][ T2310] do_page_fault+0x99/0xb0 [ 654.725494][ T2310] page_fault+0x39/0x40 [ 654.729647][ T2310] RIP: 0033:0x4308f6 [ 654.733535][ T2310] Code: 1f 44 00 00 48 29 e8 31 c9 48 81 fb 40 56 71 00 0f 95 c1 48 8d 34 2a 48 83 cd 01 48 c1 e1 02 48 83 c8 01 48 09 e9 48 89 73 58 <48> 89 4a 08 48 89 46 08 48 8d 4a 10 8b 05 6c 46 64 00 85 c0 0f 84 [ 654.753130][ T2310] RSP: 002b:00007ffdf9395230 EFLAGS: 00010206 [ 654.759186][ T2310] RAX: 0000000000019691 RBX: 0000000000715640 RCX: 0000000000008041 [ 654.767158][ T2310] RDX: 0000555557183930 RSI: 000055555718b970 RDI: 0000000000000003 [ 654.775134][ T2310] RBP: 0000000000008041 R08: 0000000000000001 R09: 0000555557182940 [ 654.783105][ T2310] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000715698 [ 654.791056][ T2310] R13: 0000000000715698 R14: 0000000000000000 R15: 0000000000002710 [ 654.800429][ T2310] memory: usage 928kB, limit 0kB, failcnt 162 [ 654.806500][ T2310] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 654.813401][ T2310] Memory cgroup stats for /syz3: [ 654.813470][ T2310] anon 0 [ 654.813470][ T2310] file 0 [ 654.813470][ T2310] kernel_stack 0 [ 654.813470][ T2310] slab 856064 [ 654.813470][ T2310] sock 0 [ 654.813470][ T2310] shmem 0 [ 654.813470][ T2310] file_mapped 0 [ 654.813470][ T2310] file_dirty 0 [ 654.813470][ T2310] file_writeback 0 [ 654.813470][ T2310] anon_thp 0 [ 654.813470][ T2310] inactive_anon 0 [ 654.813470][ T2310] active_anon 0 09:57:16 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x8, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000001000000000000000000004e000000000000009502000000000000"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) [ 654.813470][ T2310] inactive_file 0 [ 654.813470][ T2310] active_file 0 [ 654.813470][ T2310] unevictable 0 [ 654.813470][ T2310] slab_reclaimable 270336 [ 654.813470][ T2310] slab_unreclaimable 585728 [ 654.813470][ T2310] pgfault 78276 [ 654.813470][ T2310] pgmajfault 0 [ 654.813470][ T2310] workingset_refault 0 [ 654.813470][ T2310] workingset_activate 0 [ 654.813470][ T2310] workingset_nodereclaim 0 [ 654.813470][ T2310] pgrefill 0 [ 654.813470][ T2310] pgscan 0 [ 654.813470][ T2310] pgsteal 0 [ 654.813470][ T2310] pgactivate 0 [ 654.813470][ T2310] pgdeactivate 0 [ 654.908529][ T2310] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=2310,uid=0 [ 654.923888][ T2310] Memory cgroup out of memory: Killed process 2310 (syz-executor.3) total-vm:72444kB, anon-rss:68kB, file-rss:34832kB, shmem-rss:0kB [ 654.933431][ T1057] oom_reaper: reaped process 2310 (syz-executor.3), now anon-rss:0kB, file-rss:33936kB, shmem-rss:0kB 09:57:16 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$kcm(0x2, 0x2, 0x73) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) getsockname(r1, &(0x7f0000001780)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f0000001800)=0x80) 09:57:16 executing program 5: syz_mount_image$jfs(&(0x7f00000001c0)='jfs\x00', &(0x7f0000000280)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)={[{@errors_remount='errors=remount-ro'}, {@noquota='noquota'}, {@integrity='integrity'}], [], 0x4000000000000000}) 09:57:16 executing program 1: fstat(0xffffffffffffff9c, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x80000000000003, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'ip6_vti0\x00', 0x0}) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000380)=0xd95, 0x4) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) 09:57:16 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$kcm(0x2, 0x2, 0x73) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) getsockname(r1, &(0x7f0000001780)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f0000001800)=0x80) 09:57:17 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r1 = socket$kcm(0x10, 0x3, 0x0) setsockopt$sock_attach_bpf(r1, 0x10e, 0x4, &(0x7f0000000000)=r0, 0x4) r2 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x40) openat$cgroup_ro(r2, &(0x7f0000000140)='cpuset.effective_cpus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r3 = getpid() perf_event_open(0x0, r3, 0x3, 0xffffffffffffffff, 0x1) r4 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r4, &(0x7f0000000540)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @ipv4}, 0x80, 0x0}, 0x24000001) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000080)='cgroup.type\x00', 0x2, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f00000002c0)='threaded\x00', 0x9) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) 09:57:17 executing program 2: sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00008feff0)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x4, 0x0, &(0x7f00008feff0)={&(0x7f0000000380)=ANY=[@ANYBLOB="020d0000100000002f3144e800000000030006000720000002004000e0000001000000f5000000000800120002000200000000000000000030006c000203009f7eae02000000adb20200000000152c000000000000000001020014bb00000000000000000000000003000500002000000200ed00e0000001000000ba0000800083e30f510b9d8efd6eadf31561988c77cf152ea8bb43ddbd7d03dac7f4c0af8345a652d3f8b063daeb15b11df58d2b220046820cd437fb9525e63abd1f39479d824920968cd59f74db36376d80641d4c75fe6f4ede5fb105595e851949ee63a7ba7184cef93a0fcc835820d96008f866fb4d28bc7ef9f8062f9db55b8128159cdcfd0c171bcf9e868c603d7f8542cbd8c5d2e29b90ddf7f6d9525cbc5b20d8b6f661130c526af0320acd6f005f535d7e160b5669dd7f1237cc427d1d35826f68073a437965d66df2f2d4bff069f7d039c721484d89f3684064363829137869865cce84240b9ec5cf2faf907a440931d08e9e65d7b8597e57292ac7c4f1c02db1c2e4f7104d1a982cf40045d0f4431963df216018cd09bb08ad3d5892b7b45695d5f782adaeac178f69a3247fd3bf2ef5d6862908eb0cd1f08974ad"], 0x80}}, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = socket$key(0xf, 0x3, 0x2) sendmmsg(r1, &(0x7f0000000180), 0x400024c, 0x0) [ 656.860204][ T2373] IPVS: ftp: loaded support on port[0] = 21 [ 657.067208][ T2373] chnl_net:caif_netlink_parms(): no params data found [ 657.095454][ T2373] bridge0: port 1(bridge_slave_0) entered blocking state [ 657.102592][ T2373] bridge0: port 1(bridge_slave_0) entered disabled state [ 657.110296][ T2373] device bridge_slave_0 entered promiscuous mode [ 657.117764][ T2373] bridge0: port 2(bridge_slave_1) entered blocking state [ 657.124923][ T2373] bridge0: port 2(bridge_slave_1) entered disabled state [ 657.132934][ T2373] device bridge_slave_1 entered promiscuous mode [ 657.290955][ T2373] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 657.301887][ T2373] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 657.319296][ T2373] team0: Port device team_slave_0 added [ 657.326252][ T2373] team0: Port device team_slave_1 added [ 657.531323][ T2373] device hsr_slave_0 entered promiscuous mode [ 657.569095][ T2373] device hsr_slave_1 entered promiscuous mode [ 657.618811][ T2373] debugfs: Directory 'hsr0' with parent '/' already present! [ 657.776890][ T2373] bridge0: port 2(bridge_slave_1) entered blocking state [ 657.784015][ T2373] bridge0: port 2(bridge_slave_1) entered forwarding state [ 657.791326][ T2373] bridge0: port 1(bridge_slave_0) entered blocking state [ 657.798377][ T2373] bridge0: port 1(bridge_slave_0) entered forwarding state [ 657.987661][ T2373] 8021q: adding VLAN 0 to HW filter on device bond0 [ 658.146291][ T1153] bridge0: port 1(bridge_slave_0) entered disabled state [ 658.154653][ T1153] bridge0: port 2(bridge_slave_1) entered disabled state [ 658.164643][ T1153] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 658.177566][ T1153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 658.185289][ T1153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 658.350421][ T2373] 8021q: adding VLAN 0 to HW filter on device team0 [ 658.359128][ T2161] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 658.367702][ T2161] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 658.376016][ T2161] bridge0: port 1(bridge_slave_0) entered blocking state [ 658.383091][ T2161] bridge0: port 1(bridge_slave_0) entered forwarding state [ 658.558906][ T1153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 658.567474][ T1153] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 658.576034][ T1153] bridge0: port 2(bridge_slave_1) entered blocking state [ 658.583102][ T1153] bridge0: port 2(bridge_slave_1) entered forwarding state [ 658.590674][ T1153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 658.599359][ T1153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 658.607954][ T1153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 658.616571][ T1153] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 658.624858][ T1153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 658.633410][ T1153] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 658.642572][ T1153] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 658.652356][ T821] device bridge_slave_1 left promiscuous mode [ 658.658533][ T821] bridge0: port 2(bridge_slave_1) entered disabled state [ 658.680732][ T821] device bridge_slave_0 left promiscuous mode [ 658.686873][ T821] bridge0: port 1(bridge_slave_0) entered disabled state [ 658.732471][ T821] device bridge_slave_1 left promiscuous mode [ 658.738636][ T821] bridge0: port 2(bridge_slave_1) entered disabled state [ 658.779570][ T821] device bridge_slave_0 left promiscuous mode [ 658.785686][ T821] bridge0: port 1(bridge_slave_0) entered disabled state [ 662.109616][ T821] device hsr_slave_0 left promiscuous mode [ 662.178928][ T821] device hsr_slave_1 left promiscuous mode [ 662.225254][ T821] team0 (unregistering): Port device team_slave_1 removed [ 662.238642][ T821] team0 (unregistering): Port device team_slave_0 removed [ 662.249270][ T821] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 662.276312][ T821] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 662.364026][ T821] bond0 (unregistering): Released all slaves [ 662.530058][ T821] device hsr_slave_0 left promiscuous mode [ 662.578891][ T821] device hsr_slave_1 left promiscuous mode [ 662.637561][ T821] team0 (unregistering): Port device team_slave_1 removed [ 662.651111][ T821] team0 (unregistering): Port device team_slave_0 removed [ 662.663554][ T821] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 662.707077][ T821] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 662.778989][ T821] bond0 (unregistering): Released all slaves [ 662.909149][ T2373] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 662.919640][ T2373] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 662.932293][ T2143] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 662.940670][ T2143] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 662.949450][ T2143] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 662.957615][ T2143] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 662.966224][ T2143] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 662.995028][ T2373] 8021q: adding VLAN 0 to HW filter on device batadv0 09:57:24 executing program 4: r0 = socket$kcm(0x2b, 0x2000000000000001, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r1, 0x88, 0x67, &(0x7f0000000140)=r1, 0x4) sendmsg$kcm(r1, &(0x7f0000000480)={&(0x7f0000000080)=@in6={0xa, 0x4e20, 0x0, @mcast2={0xff, 0x2, [0xe803, 0x7fffef55, 0xffffffff00000000]}, 0xd}, 0x80, &(0x7f0000000340), 0x2b, &(0x7f0000000180), 0x2}, 0x900) 09:57:24 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000012c0)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) close(r1) accept4$alg(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x0, 0x0, 0x0, 0x0, {{}, 0x0, 0x800b, 0x0, {0x8}}}, 0x24}}, 0x0) 09:57:24 executing program 5: syz_mount_image$jfs(&(0x7f00000001c0)='jfs\x00', &(0x7f0000000280)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)={[{@errors_remount='errors=remount-ro'}, {@noquota='noquota'}, {@integrity='integrity'}], [], 0x4800000000000000}) 09:57:24 executing program 1: fstat(0xffffffffffffff9c, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x80000000000003, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'ip6_vti0\x00', 0x0}) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000380)=0xd95, 0x4) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) 09:57:24 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r1 = socket$kcm(0x10, 0x3, 0x0) setsockopt$sock_attach_bpf(r1, 0x10e, 0x4, &(0x7f0000000000)=r0, 0x4) r2 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x40) openat$cgroup_ro(r2, &(0x7f0000000140)='cpuset.effective_cpus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r3 = getpid() perf_event_open(0x0, r3, 0x3, 0xffffffffffffffff, 0x1) r4 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r4, &(0x7f0000000540)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @ipv4}, 0x80, 0x0}, 0x24000001) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000080)='cgroup.type\x00', 0x2, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f00000002c0)='threaded\x00', 0x9) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) 09:57:24 executing program 2: syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @random="4ee7bf96f4a5", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0xffffff84, 0x0, @rand_addr, @multicast1}, @icmp=@address_reply={0x8}}}}}, 0x0) 09:57:24 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000100)=[{&(0x7f0000000280)="800000003806000019000300e60100006c000000000500000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53efb2491ac1405f8ef84d089017d66444740a8956552dd3ce0727903cf3862c08cb746d5715265c407d", 0x62, 0x400}], 0x0, 0x0) 09:57:24 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000012c0)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) close(r1) accept4$alg(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x0, 0x0, 0x0, 0x0, {{}, 0x0, 0x800b, 0x0, {0x8}}}, 0x24}}, 0x0) 09:57:24 executing program 5: syz_mount_image$jfs(&(0x7f00000001c0)='jfs\x00', &(0x7f0000000280)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)={[{@errors_remount='errors=remount-ro'}, {@noquota='noquota'}, {@integrity='integrity'}], [], 0x4c00000000000000}) 09:57:24 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000012c0)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) close(r1) accept4$alg(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x0, 0x0, 0x0, 0x0, {{}, 0x0, 0x800b, 0x0, {0x8}}}, 0x24}}, 0x0) [ 663.384697][ T2401] EXT4-fs (loop2): Couldn't mount because of unsupported optional features (1800) 09:57:24 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000012c0)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) close(r1) accept4$alg(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x0, 0x0, 0x0, 0x0, {{}, 0x0, 0x800b, 0x0, {0x8}}}, 0x24}}, 0x0) 09:57:25 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000012c0)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) close(r1) accept4$alg(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x0, 0x0, 0x0, 0x0, {{}, 0x0, 0x800b, 0x0, {0x8}}}, 0x24}}, 0x0) 09:57:25 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000012c0)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) close(r1) accept4$alg(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x0, 0x0, 0x0, 0x0, {{}, 0x0, 0x800b, 0x0, {0x8}}}, 0x24}}, 0x0) 09:57:25 executing program 5: syz_mount_image$jfs(&(0x7f00000001c0)='jfs\x00', &(0x7f0000000280)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)={[{@errors_remount='errors=remount-ro'}, {@noquota='noquota'}, {@integrity='integrity'}], [], 0x5c00000000000000}) [ 663.625155][ T2416] EXT4-fs (loop2): Couldn't mount because of unsupported optional features (1800) 09:57:25 executing program 1: fstat(0xffffffffffffffff, 0x0) fstat(0xffffffffffffff9c, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x0, 0x80000000000003, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'ip6_vti0\x00', 0x0}) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000380)=0xd95, 0x4) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) [ 665.445121][ T2447] IPVS: ftp: loaded support on port[0] = 21 [ 665.505513][ T2447] chnl_net:caif_netlink_parms(): no params data found [ 665.533273][ T2447] bridge0: port 1(bridge_slave_0) entered blocking state [ 665.540374][ T2447] bridge0: port 1(bridge_slave_0) entered disabled state [ 665.547967][ T2447] device bridge_slave_0 entered promiscuous mode [ 665.556206][ T2447] bridge0: port 2(bridge_slave_1) entered blocking state [ 665.563301][ T2447] bridge0: port 2(bridge_slave_1) entered disabled state [ 665.571283][ T2447] device bridge_slave_1 entered promiscuous mode [ 665.588157][ T2447] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 665.599170][ T2447] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 665.615961][ T2447] team0: Port device team_slave_0 added [ 665.622798][ T2447] team0: Port device team_slave_1 added [ 665.671626][ T2447] device hsr_slave_0 entered promiscuous mode [ 665.729113][ T2447] device hsr_slave_1 entered promiscuous mode [ 665.778789][ T2447] bridge0: port 2(bridge_slave_1) entered blocking state [ 665.785825][ T2447] bridge0: port 2(bridge_slave_1) entered forwarding state [ 665.793209][ T2447] bridge0: port 1(bridge_slave_0) entered blocking state [ 665.800299][ T2447] bridge0: port 1(bridge_slave_0) entered forwarding state [ 665.834948][ T2447] 8021q: adding VLAN 0 to HW filter on device bond0 [ 665.846312][ T1451] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 665.854916][ T1451] bridge0: port 1(bridge_slave_0) entered disabled state [ 665.863285][ T1451] bridge0: port 2(bridge_slave_1) entered disabled state [ 665.872305][ T1451] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 665.885216][ T2447] 8021q: adding VLAN 0 to HW filter on device team0 [ 665.896377][ T1451] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 665.904681][ T1451] bridge0: port 1(bridge_slave_0) entered blocking state [ 665.911769][ T1451] bridge0: port 1(bridge_slave_0) entered forwarding state [ 665.929719][ T1451] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 665.937984][ T1451] bridge0: port 2(bridge_slave_1) entered blocking state [ 665.945116][ T1451] bridge0: port 2(bridge_slave_1) entered forwarding state [ 665.955811][ T2162] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 665.971291][ T2162] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 665.979972][ T2162] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 665.988479][ T2162] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 666.000693][ T2162] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 666.012031][ T2447] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 666.031280][ T2447] 8021q: adding VLAN 0 to HW filter on device batadv0 09:57:27 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r2 = socket$kcm(0x10, 0x3, 0x0) setsockopt$sock_attach_bpf(r2, 0x10e, 0x4, &(0x7f0000000000)=r0, 0x4) r3 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x40) openat$cgroup_ro(r3, &(0x7f0000000140)='cpuset.effective_cpus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) getpid() r4 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) r5 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r5, &(0x7f0000000540)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @ipv4}, 0x80, 0x0}, 0x24000001) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000080)='cgroup.type\x00', 0x2, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f00000002c0)='threaded\x00', 0x9) write$cgroup_int(r4, 0x0, 0x0) write$cgroup_int(r4, 0x0, 0x0) 09:57:27 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000100)=[{&(0x7f0000000280)="800000003806000019000300e60100006c000000000500000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53efb2491ac1405f8ef84d089017d66444740a8956552dd3ce0727903cf3862c08cb746d5715265c407d", 0x62, 0x400}], 0x0, 0x0) 09:57:27 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000012c0)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) close(r1) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x0, 0x0, 0x0, 0x0, {{}, 0x0, 0x800b, 0x0, {0x8}}}, 0x24}}, 0x0) 09:57:27 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000012c0)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) close(r1) accept4$alg(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x0, 0x0, 0x0, 0x0, {{}, 0x0, 0x800b, 0x0, {0x8}}}, 0x24}}, 0x0) 09:57:27 executing program 1: fstat(0xffffffffffffffff, 0x0) fstat(0xffffffffffffff9c, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x0, 0x80000000000003, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'ip6_vti0\x00', 0x0}) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000380)=0xd95, 0x4) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) 09:57:27 executing program 5: syz_mount_image$jfs(&(0x7f00000001c0)='jfs\x00', &(0x7f0000000280)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)={[{@errors_remount='errors=remount-ro'}, {@noquota='noquota'}, {@integrity='integrity'}], [], 0x6800000000000000}) [ 666.207542][ T2462] EXT4-fs (loop2): Couldn't mount because of unsupported optional features (1800) 09:57:27 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000012c0)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) close(r1) accept4$alg(r0, 0x0, 0x0, 0x0) 09:57:27 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000012c0)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) close(r1) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x0, 0x0, 0x0, 0x0, {{}, 0x0, 0x800b, 0x0, {0x8}}}, 0x24}}, 0x0) 09:57:27 executing program 1: fstat(0xffffffffffffffff, 0x0) fstat(0xffffffffffffff9c, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x0, 0x80000000000003, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'ip6_vti0\x00', 0x0}) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000380)=0xd95, 0x4) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) [ 666.385060][ T2476] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 666.395407][ T2476] CPU: 0 PID: 2476 Comm: syz-executor.3 Not tainted 5.2.0+ #37 [ 666.402952][ T2476] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 666.413016][ T2476] Call Trace: [ 666.416330][ T2476] dump_stack+0x1d8/0x2f8 [ 666.420673][ T2476] dump_header+0xd8/0x970 [ 666.425021][ T2476] oom_kill_process+0xcd/0x320 [ 666.429787][ T2476] out_of_memory+0x5e1/0x8a0 09:57:28 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000012c0)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) close(r1) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x0, 0x0, 0x0, 0x0, {{}, 0x0, 0x800b, 0x0, {0x8}}}, 0x24}}, 0x0) [ 666.434387][ T2476] ? unregister_oom_notifier+0x20/0x20 [ 666.439853][ T2476] memory_max_write+0x537/0x6a0 [ 666.444818][ T2476] ? memory_max_show+0xa0/0xa0 [ 666.449594][ T2476] ? lock_acquire+0x1b2/0x250 [ 666.454278][ T2476] ? memory_max_show+0xa0/0xa0 [ 666.459049][ T2476] cgroup_file_write+0x27b/0x6e0 [ 666.464008][ T2476] ? cgroup_seqfile_stop+0xc0/0xc0 [ 666.469130][ T2476] ? cgroup_seqfile_stop+0xc0/0xc0 [ 666.474254][ T2476] kernfs_fop_write+0x3e4/0x4f0 [ 666.479118][ T2476] ? kernfs_fop_read+0x580/0x580 09:57:28 executing program 1: fstat(0xffffffffffffffff, 0x0) fstat(0xffffffffffffff9c, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'ip6_vti0\x00', 0x0}) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000380)=0xd95, 0x4) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) [ 666.484063][ T2476] __vfs_write+0xf9/0x7d0 [ 666.488396][ T2476] ? retint_kernel+0x10/0x10 [ 666.493004][ T2476] ? __kernel_write+0x350/0x350 [ 666.497858][ T2476] ? rcu_irq_exit+0xe3/0x260 [ 666.502448][ T2476] ? retint_kernel+0x10/0x10 [ 666.507062][ T2476] ? __sb_start_write+0x393/0x440 [ 666.512118][ T2476] ? __sb_start_write+0x39c/0x440 [ 666.517166][ T2476] ? __sanitizer_cov_trace_pc+0x2e/0x50 [ 666.522718][ T2476] ? __sb_start_write+0x39c/0x440 [ 666.527745][ T2476] ? __kasan_check_read+0x11/0x20 [ 666.532771][ T2476] vfs_write+0x275/0x590 [ 666.537021][ T2476] ksys_write+0x16b/0x2a0 [ 666.541375][ T2476] ? __ia32_sys_read+0x90/0x90 [ 666.546138][ T2476] ? prepare_exit_to_usermode+0x1f7/0x580 [ 666.546154][ T2476] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 666.557331][ T2476] ? trace_irq_disable_rcuidle+0x23/0x1c0 [ 666.563076][ T2476] ? do_syscall_64+0x1d/0x140 [ 666.567750][ T2476] __x64_sys_write+0x7b/0x90 [ 666.572350][ T2476] do_syscall_64+0xfe/0x140 [ 666.576854][ T2476] entry_SYSCALL_64_after_hwframe+0x49/0xbe 09:57:28 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000012c0)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) accept4$alg(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x0, 0x0, 0x0, 0x0, {{}, 0x0, 0x800b, 0x0, {0x8}}}, 0x24}}, 0x0) [ 666.582740][ T2476] RIP: 0033:0x459819 [ 666.586631][ T2476] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 666.606233][ T2476] RSP: 002b:00007f3c3d3aac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 666.614642][ T2476] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459819 [ 666.622607][ T2476] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 666.630579][ T2476] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 666.638551][ T2476] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f3c3d3ab6d4 [ 666.646548][ T2476] R13: 00000000004c9774 R14: 00000000004e0b70 R15: 00000000ffffffff [ 666.669804][ T2476] memory: usage 3304kB, limit 0kB, failcnt 163 [ 666.676063][ T2476] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 666.683012][ T2476] Memory cgroup stats for /syz3: [ 666.683807][ T2476] anon 2248704 [ 666.683807][ T2476] file 0 [ 666.683807][ T2476] kernel_stack 0 [ 666.683807][ T2476] slab 856064 [ 666.683807][ T2476] sock 0 [ 666.683807][ T2476] shmem 0 [ 666.683807][ T2476] file_mapped 0 [ 666.683807][ T2476] file_dirty 0 [ 666.683807][ T2476] file_writeback 0 [ 666.683807][ T2476] anon_thp 2097152 [ 666.683807][ T2476] inactive_anon 0 [ 666.683807][ T2476] active_anon 2183168 [ 666.683807][ T2476] inactive_file 0 [ 666.683807][ T2476] active_file 0 [ 666.683807][ T2476] unevictable 0 [ 666.683807][ T2476] slab_reclaimable 270336 [ 666.683807][ T2476] slab_unreclaimable 585728 [ 666.683807][ T2476] pgfault 78408 [ 666.683807][ T2476] pgmajfault 0 [ 666.683807][ T2476] workingset_refault 0 [ 666.683807][ T2476] workingset_activate 0 [ 666.683807][ T2476] workingset_nodereclaim 0 [ 666.683807][ T2476] pgrefill 0 [ 666.683807][ T2476] pgscan 0 [ 666.683807][ T2476] pgsteal 0 [ 666.683807][ T2476] pgactivate 0 [ 666.777251][ T2476] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=2474,uid=0 [ 666.793043][ T2476] Memory cgroup out of memory: Killed process 2474 (syz-executor.3) total-vm:72704kB, anon-rss:2144kB, file-rss:34816kB, shmem-rss:0kB [ 666.819913][ T1057] oom_reaper: reaped process 2474 (syz-executor.3), now anon-rss:0kB, file-rss:34832kB, shmem-rss:0kB 09:57:28 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 09:57:28 executing program 5: syz_mount_image$jfs(&(0x7f00000001c0)='jfs\x00', &(0x7f0000000280)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)={[{@errors_remount='errors=remount-ro'}, {@noquota='noquota'}, {@integrity='integrity'}], [], 0x6c00000000000000}) 09:57:28 executing program 1: fstat(0xffffffffffffffff, 0x0) fstat(0xffffffffffffff9c, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'ip6_vti0\x00', 0x0}) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000380)=0xd95, 0x4) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) 09:57:28 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000012c0)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) close(r1) 09:57:28 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000012c0)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) accept4$alg(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x0, 0x0, 0x0, 0x0, {{}, 0x0, 0x800b, 0x0, {0x8}}}, 0x24}}, 0x0) 09:57:28 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r2 = socket$kcm(0x10, 0x3, 0x0) setsockopt$sock_attach_bpf(r2, 0x10e, 0x4, &(0x7f0000000000)=r0, 0x4) r3 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x40) openat$cgroup_ro(r3, &(0x7f0000000140)='cpuset.effective_cpus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) getpid() r4 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) r5 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r5, &(0x7f0000000540)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @ipv4}, 0x80, 0x0}, 0x24000001) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000080)='cgroup.type\x00', 0x2, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f00000002c0)='threaded\x00', 0x9) write$cgroup_int(r4, 0x0, 0x0) write$cgroup_int(r4, 0x0, 0x0) 09:57:28 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000012c0)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) socket$inet_udplite(0x2, 0x2, 0x88) 09:57:28 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000012c0)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) accept4$alg(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x0, 0x0, 0x0, 0x0, {{}, 0x0, 0x800b, 0x0, {0x8}}}, 0x24}}, 0x0) 09:57:28 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000012c0)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) 09:57:28 executing program 1: fstat(0xffffffffffffffff, 0x0) fstat(0xffffffffffffff9c, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'ip6_vti0\x00', 0x0}) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000380)=0xd95, 0x4) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) 09:58:28 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000012c0)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) close(0xffffffffffffffff) accept4$alg(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_NETID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x0, 0x0, 0x0, 0x0, {{}, 0x0, 0x800b, 0x0, {0x8}}}, 0x24}}, 0x0) 09:58:30 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r2 = socket$kcm(0x10, 0x3, 0x0) setsockopt$sock_attach_bpf(r2, 0x10e, 0x4, &(0x7f0000000000)=r0, 0x4) r3 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x40) openat$cgroup_ro(r3, &(0x7f0000000140)='cpuset.effective_cpus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) getpid() r4 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) r5 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r5, &(0x7f0000000540)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @ipv4}, 0x80, 0x0}, 0x24000001) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000080)='cgroup.type\x00', 0x2, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f00000002c0)='threaded\x00', 0x9) write$cgroup_int(r4, 0x0, 0x0) write$cgroup_int(r4, 0x0, 0x0) 09:58:31 executing program 2: sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioperm(0x0, 0xab, 0x7) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000080), 0xfffffffffffffffd) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0xb2) write$P9_RAUTH(0xffffffffffffffff, 0x0, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/4\x00') close(0xffffffffffffffff) syz_genetlink_get_family_id$tipc(&(0x7f0000000240)='TIPC\x00') syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000c85000)) 09:58:31 executing program 5: syz_mount_image$jfs(&(0x7f00000001c0)='jfs\x00', &(0x7f0000000280)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)={[{@errors_remount='errors=remount-ro'}, {@noquota='noquota'}, {@integrity='integrity'}], [], 0x7400000000000000}) 09:58:31 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000012c0)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) close(0xffffffffffffffff) accept4$alg(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_NETID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x0, 0x0, 0x0, 0x0, {{}, 0x0, 0x800b, 0x0, {0x8}}}, 0x24}}, 0x0) 09:58:32 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000012c0)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) 09:58:32 executing program 1: fstat(0xffffffffffffffff, 0x0) fstat(0xffffffffffffff9c, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x80000000000003, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'ip6_vti0\x00', 0x0}) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000380)=0xd95, 0x4) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) [ 731.217970][ T2522] IPVS: ftp: loaded support on port[0] = 21 [ 731.442949][ T2522] chnl_net:caif_netlink_parms(): no params data found [ 731.690924][ T2525] IPVS: ftp: loaded support on port[0] = 21 [ 732.016045][ T2522] bridge0: port 1(bridge_slave_0) entered blocking state [ 732.023270][ T2522] bridge0: port 1(bridge_slave_0) entered disabled state [ 732.030816][ T2522] device bridge_slave_0 entered promiscuous mode [ 732.040910][ T2522] bridge0: port 2(bridge_slave_1) entered blocking state [ 732.047980][ T2522] bridge0: port 2(bridge_slave_1) entered disabled state [ 732.055862][ T2522] device bridge_slave_1 entered promiscuous mode [ 732.162817][ T2522] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 732.177309][ T2528] IPVS: ftp: loaded support on port[0] = 21 [ 732.195627][ T2522] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 732.207316][ T2529] IPVS: ftp: loaded support on port[0] = 21 [ 732.224402][ T821] device bridge_slave_1 left promiscuous mode [ 732.230650][ T821] bridge0: port 2(bridge_slave_1) entered disabled state [ 732.253877][ T821] device bridge_slave_0 left promiscuous mode [ 732.260189][ T821] bridge0: port 1(bridge_slave_0) entered disabled state [ 734.069655][ T821] device hsr_slave_0 left promiscuous mode [ 734.109432][ T821] device hsr_slave_1 left promiscuous mode [ 734.157597][ T821] team0 (unregistering): Port device team_slave_1 removed [ 734.168053][ T821] team0 (unregistering): Port device team_slave_0 removed [ 734.181513][ T821] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 734.233131][ T821] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 734.311450][ T821] bond0 (unregistering): Released all slaves [ 734.465672][ T2531] IPVS: ftp: loaded support on port[0] = 21 [ 734.474062][ T2533] IPVS: ftp: loaded support on port[0] = 21 [ 734.483181][ T2522] team0: Port device team_slave_0 added [ 734.502686][ T2525] chnl_net:caif_netlink_parms(): no params data found [ 734.514406][ T2522] team0: Port device team_slave_1 added [ 734.610993][ T2522] device hsr_slave_0 entered promiscuous mode [ 734.649590][ T2522] device hsr_slave_1 entered promiscuous mode [ 734.804873][ T2525] bridge0: port 1(bridge_slave_0) entered blocking state [ 734.812135][ T2525] bridge0: port 1(bridge_slave_0) entered disabled state [ 734.820071][ T2525] device bridge_slave_0 entered promiscuous mode [ 734.911795][ T2525] bridge0: port 2(bridge_slave_1) entered blocking state [ 734.918918][ T2525] bridge0: port 2(bridge_slave_1) entered disabled state [ 734.926774][ T2525] device bridge_slave_1 entered promiscuous mode [ 734.975862][ T2533] chnl_net:caif_netlink_parms(): no params data found [ 734.994129][ T2528] chnl_net:caif_netlink_parms(): no params data found [ 735.036042][ T2529] chnl_net:caif_netlink_parms(): no params data found [ 735.086718][ T2533] bridge0: port 1(bridge_slave_0) entered blocking state [ 735.093853][ T2533] bridge0: port 1(bridge_slave_0) entered disabled state [ 735.101766][ T2533] device bridge_slave_0 entered promiscuous mode [ 735.110916][ T2525] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 735.168546][ T2522] 8021q: adding VLAN 0 to HW filter on device bond0 [ 735.190824][ T2528] bridge0: port 1(bridge_slave_0) entered blocking state [ 735.197926][ T2528] bridge0: port 1(bridge_slave_0) entered disabled state [ 735.206462][ T2528] device bridge_slave_0 entered promiscuous mode [ 735.215945][ T2525] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 735.236636][ T2533] bridge0: port 2(bridge_slave_1) entered blocking state [ 735.243711][ T2533] bridge0: port 2(bridge_slave_1) entered disabled state [ 735.251542][ T2533] device bridge_slave_1 entered promiscuous mode [ 735.275630][ T2528] bridge0: port 2(bridge_slave_1) entered blocking state [ 735.283224][ T2528] bridge0: port 2(bridge_slave_1) entered disabled state [ 735.291129][ T2528] device bridge_slave_1 entered promiscuous mode [ 735.317053][ T2529] bridge0: port 1(bridge_slave_0) entered blocking state [ 735.324194][ T2529] bridge0: port 1(bridge_slave_0) entered disabled state [ 735.332007][ T2529] device bridge_slave_0 entered promiscuous mode [ 735.354569][ T2533] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 735.376876][ T2162] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 735.384817][ T2162] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 735.392735][ T2529] bridge0: port 2(bridge_slave_1) entered blocking state [ 735.399838][ T2529] bridge0: port 2(bridge_slave_1) entered disabled state [ 735.407602][ T2529] device bridge_slave_1 entered promiscuous mode [ 735.417194][ T2531] chnl_net:caif_netlink_parms(): no params data found [ 735.432798][ T2525] team0: Port device team_slave_0 added [ 735.440060][ T2533] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 735.453480][ T2525] team0: Port device team_slave_1 added [ 735.474936][ T2528] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 735.485985][ T2522] 8021q: adding VLAN 0 to HW filter on device team0 [ 735.513940][ T1153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 735.522506][ T1153] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 735.530942][ T1153] bridge0: port 1(bridge_slave_0) entered blocking state [ 735.537976][ T1153] bridge0: port 1(bridge_slave_0) entered forwarding state [ 735.569181][ T2533] team0: Port device team_slave_0 added [ 735.631103][ T2525] device hsr_slave_0 entered promiscuous mode [ 735.659123][ T2525] device hsr_slave_1 entered promiscuous mode [ 735.698935][ T2525] debugfs: Directory 'hsr0' with parent '/' already present! [ 735.707781][ T2528] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 735.720799][ T2529] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 735.735732][ T2533] team0: Port device team_slave_1 added [ 735.743739][ T1451] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 735.759413][ T1451] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 735.767943][ T1451] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 735.777282][ T1451] bridge0: port 2(bridge_slave_1) entered blocking state [ 735.784364][ T1451] bridge0: port 2(bridge_slave_1) entered forwarding state [ 735.791941][ T1451] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 735.800531][ T1451] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 735.809186][ T1451] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 735.817693][ T1451] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 735.826119][ T1451] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 735.834761][ T1451] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 735.843218][ T1451] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 735.851615][ T1451] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 735.865508][ T1451] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 735.900374][ T2531] bridge0: port 1(bridge_slave_0) entered blocking state [ 735.907499][ T2531] bridge0: port 1(bridge_slave_0) entered disabled state [ 735.915411][ T2531] device bridge_slave_0 entered promiscuous mode [ 735.930464][ T2529] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 735.941894][ T2528] team0: Port device team_slave_0 added [ 735.949366][ T2528] team0: Port device team_slave_1 added [ 735.973195][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 735.982485][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 735.993297][ T2522] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 736.052190][ T2533] device hsr_slave_0 entered promiscuous mode [ 736.089241][ T2533] device hsr_slave_1 entered promiscuous mode [ 736.128893][ T2533] debugfs: Directory 'hsr0' with parent '/' already present! [ 736.157351][ T2531] bridge0: port 2(bridge_slave_1) entered blocking state [ 736.164542][ T2531] bridge0: port 2(bridge_slave_1) entered disabled state [ 736.172732][ T2531] device bridge_slave_1 entered promiscuous mode [ 736.216974][ T2522] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 736.225721][ T2529] team0: Port device team_slave_0 added [ 736.272048][ T2528] device hsr_slave_0 entered promiscuous mode [ 736.299331][ T2528] device hsr_slave_1 entered promiscuous mode [ 736.348887][ T2528] debugfs: Directory 'hsr0' with parent '/' already present! [ 736.370597][ T2529] team0: Port device team_slave_1 added [ 736.414228][ T2531] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 736.432961][ T2525] 8021q: adding VLAN 0 to HW filter on device bond0 [ 736.512777][ T2529] device hsr_slave_0 entered promiscuous mode [ 736.569642][ T2529] device hsr_slave_1 entered promiscuous mode [ 736.608938][ T2529] debugfs: Directory 'hsr0' with parent '/' already present! [ 736.642303][ T2531] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 736.659607][ T2162] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 736.667349][ T2162] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 736.681781][ T2533] 8021q: adding VLAN 0 to HW filter on device bond0 [ 736.693040][ T2525] 8021q: adding VLAN 0 to HW filter on device team0 [ 736.726245][ T2533] 8021q: adding VLAN 0 to HW filter on device team0 [ 736.751546][ T2531] team0: Port device team_slave_0 added [ 736.758463][ T2531] team0: Port device team_slave_1 added [ 736.770957][ T2162] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 736.778718][ T2162] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 736.806308][ T2162] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 736.815077][ T2162] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 736.823445][ T2162] bridge0: port 1(bridge_slave_0) entered blocking state [ 736.830533][ T2162] bridge0: port 1(bridge_slave_0) entered forwarding state [ 736.838017][ T2162] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 736.846556][ T2162] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 736.854830][ T2162] bridge0: port 2(bridge_slave_1) entered blocking state [ 736.861912][ T2162] bridge0: port 2(bridge_slave_1) entered forwarding state [ 736.869459][ T2162] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 736.908746][ T2525] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 736.920824][ T2525] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 736.942226][ T2162] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 736.951377][ T2162] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 736.955853][ T2546] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 736.960071][ T2162] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 736.960850][ T2162] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 736.961393][ T2162] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 736.962058][ T2162] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 736.962617][ T2162] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 736.972690][ T2546] CPU: 0 PID: 2546 Comm: syz-executor.3 Not tainted 5.2.0+ #37 [ 736.981013][ T2162] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 736.988319][ T2546] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 736.988327][ T2546] Call Trace: [ 736.996567][ T2162] bridge0: port 1(bridge_slave_0) entered blocking state [ 737.004010][ T2546] dump_stack+0x1d8/0x2f8 [ 737.004030][ T2546] dump_header+0xd8/0x970 [ 737.004042][ T2546] oom_kill_process+0xcd/0x320 [ 737.012142][ T2162] bridge0: port 1(bridge_slave_0) entered forwarding state [ 737.019633][ T2546] out_of_memory+0x5e1/0x8a0 [ 737.019644][ T2546] ? unregister_oom_notifier+0x20/0x20 [ 737.019663][ T2546] memory_max_write+0x537/0x6a0 [ 737.027986][ T2162] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 737.037686][ T2546] ? memory_max_show+0xa0/0xa0 [ 737.037702][ T2546] ? lockdep_hardirqs_on+0x3c5/0x7d0 [ 737.037717][ T2546] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 737.041556][ T2162] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 737.047994][ T2546] ? retint_kernel+0x10/0x10 [ 737.052968][ T2162] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 737.056669][ T2546] ? memory_max_show+0xa0/0xa0 [ 737.061936][ T2162] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 737.068578][ T2546] cgroup_file_write+0x27b/0x6e0 [ 737.144149][ T2546] ? cgroup_seqfile_stop+0xc0/0xc0 [ 737.149260][ T2546] ? cgroup_seqfile_stop+0xc0/0xc0 [ 737.154360][ T2546] kernfs_fop_write+0x3e4/0x4f0 [ 737.159200][ T2546] ? kernfs_fop_read+0x580/0x580 [ 737.164132][ T2546] __vfs_write+0xf9/0x7d0 [ 737.168451][ T2546] ? retint_kernel+0x10/0x10 [ 737.173036][ T2546] ? __kernel_write+0x350/0x350 [ 737.178025][ T2546] ? rcu_irq_exit+0xe3/0x260 [ 737.183572][ T2546] ? __sb_start_write+0x39c/0x440 [ 737.188582][ T2546] ? __kasan_check_read+0x11/0x20 [ 737.193605][ T2546] vfs_write+0x275/0x590 [ 737.197863][ T2546] ksys_write+0x16b/0x2a0 [ 737.202205][ T2546] ? __ia32_sys_read+0x90/0x90 [ 737.206975][ T2546] ? prepare_exit_to_usermode+0x1f7/0x580 [ 737.212696][ T2546] ? trace_irq_disable_rcuidle+0x23/0x1c0 [ 737.218400][ T2546] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 737.223842][ T2546] ? trace_irq_disable_rcuidle+0x23/0x1c0 [ 737.229558][ T2546] ? do_syscall_64+0x1d/0x140 [ 737.234243][ T2546] __x64_sys_write+0x7b/0x90 [ 737.238846][ T2546] do_syscall_64+0xfe/0x140 [ 737.243351][ T2546] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 737.249240][ T2546] RIP: 0033:0x459819 [ 737.253128][ T2546] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 737.272747][ T2546] RSP: 002b:00007f4526052c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 737.281406][ T2546] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459819 [ 737.289370][ T2546] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000007 [ 737.297328][ T2546] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 737.305282][ T2546] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f45260536d4 [ 737.313257][ T2546] R13: 00000000004c9774 R14: 00000000004e0b70 R15: 00000000ffffffff [ 737.321416][ T2546] memory: usage 3344kB, limit 0kB, failcnt 560223 [ 737.327937][ T2546] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 737.334944][ T2546] Memory cgroup stats for /syz3: [ 737.335236][ T2546] anon 2179072 [ 737.335236][ T2546] file 0 [ 737.335236][ T2546] kernel_stack 65536 [ 737.335236][ T2546] slab 856064 [ 737.335236][ T2546] sock 0 [ 737.335236][ T2546] shmem 0 [ 737.335236][ T2546] file_mapped 0 [ 737.335236][ T2546] file_dirty 0 [ 737.335236][ T2546] file_writeback 0 [ 737.335236][ T2546] anon_thp 2097152 [ 737.335236][ T2546] inactive_anon 0 [ 737.335236][ T2546] active_anon 2113536 [ 737.335236][ T2546] inactive_file 0 [ 737.335236][ T2546] active_file 0 [ 737.335236][ T2546] unevictable 0 [ 737.335236][ T2546] slab_reclaimable 270336 [ 737.335236][ T2546] slab_unreclaimable 585728 [ 737.335236][ T2546] pgfault 78507 [ 737.335236][ T2546] pgmajfault 0 [ 737.335236][ T2546] workingset_refault 0 [ 737.335236][ T2546] workingset_activate 0 [ 737.335236][ T2546] workingset_nodereclaim 0 [ 737.335236][ T2546] pgrefill 0 [ 737.335236][ T2546] pgscan 0 [ 737.335236][ T2546] pgsteal 0 [ 737.335236][ T2546] pgactivate 0 [ 737.429089][ T2546] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=2545,uid=0 [ 737.445032][ T2546] Memory cgroup out of memory: Killed process 2545 (syz-executor.3) total-vm:72708kB, anon-rss:2136kB, file-rss:34816kB, shmem-rss:0kB [ 737.460850][ T1057] oom_reaper: reaped process 2545 (syz-executor.3), now anon-rss:0kB, file-rss:34832kB, shmem-rss:0kB [ 737.492942][ T2531] device hsr_slave_0 entered promiscuous mode [ 737.522099][ T2531] device hsr_slave_1 entered promiscuous mode 09:58:39 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r2 = socket$kcm(0x10, 0x3, 0x0) setsockopt$sock_attach_bpf(r2, 0x10e, 0x4, &(0x7f0000000000)=r0, 0x4) r3 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x40) openat$cgroup_ro(r3, &(0x7f0000000140)='cpuset.effective_cpus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r4 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) r5 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r5, &(0x7f0000000540)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @ipv4}, 0x80, 0x0}, 0x24000001) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000080)='cgroup.type\x00', 0x2, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f00000002c0)='threaded\x00', 0x9) write$cgroup_int(r4, 0x0, 0x0) write$cgroup_int(r4, 0x0, 0x0) [ 737.579455][ T2531] debugfs: Directory 'hsr0' with parent '/' already present! [ 737.581560][ T2522] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 737.596774][ T2522] CPU: 0 PID: 2522 Comm: syz-executor.3 Not tainted 5.2.0+ #37 [ 737.599072][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 737.604303][ T2522] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 737.604311][ T2522] Call Trace: [ 737.612068][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 737.621542][ T2522] dump_stack+0x1d8/0x2f8 [ 737.621569][ T2522] dump_header+0xd8/0x970 [ 737.621594][ T2522] oom_kill_process+0xcd/0x320 [ 737.621604][ T2522] out_of_memory+0x5e1/0x8a0 [ 737.621615][ T2522] ? unregister_oom_notifier+0x20/0x20 [ 737.621627][ T2522] ? __kasan_check_read+0x11/0x20 [ 737.621643][ T2522] try_charge+0x134a/0x17b0 [ 737.621671][ T2522] ? __memcg_kmem_charge_memcg+0x180/0x180 [ 737.621688][ T2522] ? __lock_acquire+0x4750/0x4750 [ 737.621704][ T2522] ? rcu_lock_release+0x15/0x20 [ 737.621713][ T2522] ? get_mem_cgroup_from_mm+0x15e/0x170 [ 737.621723][ T2522] mem_cgroup_try_charge+0x216/0x560 [ 737.621737][ T2522] mem_cgroup_try_charge_delay+0x25/0xa0 [ 737.621749][ T2522] handle_mm_fault+0x31f3/0x6080 [ 737.621771][ T2522] ? finish_fault+0x230/0x230 [ 737.621790][ T2522] ? vmacache_find+0x251/0x5b0 [ 737.621807][ T2522] do_user_addr_fault+0x589/0xaf0 [ 737.621826][ T2522] __do_page_fault+0xd3/0x1f0 [ 737.621837][ T2522] do_page_fault+0x99/0xb0 [ 737.621853][ T2522] page_fault+0x39/0x40 [ 737.621862][ T2522] RIP: 0033:0x403442 [ 737.621872][ T2522] Code: 55 41 54 49 89 fc 55 53 48 81 ec b8 10 00 00 64 48 8b 04 25 28 00 00 00 48 89 84 24 a8 10 00 00 31 c0 be 02 00 00 00 4c 89 e7 f9 8d 05 00 85 c0 0f 84 00 03 00 00 4c 89 e7 e8 19 43 05 00 48 [ 737.621877][ T2522] RSP: 002b:00007ffffbfa8e90 EFLAGS: 00010246 [ 737.621886][ T2522] RAX: 0000000000000000 RBX: 00000000000b3f2c RCX: 0000000000413420 [ 737.621892][ T2522] RDX: 000000000000000c RSI: 0000000000000002 RDI: 00007ffffbfa9fc0 [ 737.621898][ T2522] RBP: 0000000000000002 R08: 0000000000000001 R09: 00005555569a5940 [ 737.621903][ T2522] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffffbfa9fc0 [ 737.621909][ T2522] R13: 00007ffffbfa9fb0 R14: 0000000000000000 R15: 00007ffffbfa9fc0 [ 737.621993][ T2522] memory: usage 964kB, limit 0kB, failcnt 560235 [ 737.622001][ T2522] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 737.622005][ T2522] Memory cgroup stats for /syz3: [ 737.622085][ T2522] anon 86016 [ 737.622085][ T2522] file 0 [ 737.622085][ T2522] kernel_stack 0 [ 737.622085][ T2522] slab 856064 [ 737.622085][ T2522] sock 0 [ 737.622085][ T2522] shmem 0 [ 737.622085][ T2522] file_mapped 0 [ 737.622085][ T2522] file_dirty 0 [ 737.622085][ T2522] file_writeback 0 [ 737.622085][ T2522] anon_thp 0 [ 737.622085][ T2522] inactive_anon 0 [ 737.622085][ T2522] active_anon 20480 [ 737.622085][ T2522] inactive_file 0 [ 737.622085][ T2522] active_file 0 [ 737.622085][ T2522] unevictable 0 [ 737.622085][ T2522] slab_reclaimable 270336 [ 737.622085][ T2522] slab_unreclaimable 585728 [ 737.622085][ T2522] pgfault 78507 [ 737.622085][ T2522] pgmajfault 0 [ 737.622085][ T2522] workingset_refault 0 [ 737.622085][ T2522] workingset_activate 0 [ 737.622085][ T2522] workingset_nodereclaim 0 [ 737.622085][ T2522] pgrefill 0 [ 737.622085][ T2522] pgscan 0 [ 737.622085][ T2522] pgsteal 0 [ 737.622085][ T2522] pgactivate 0 [ 737.622085][ T2522] pgdeactivate 0 [ 737.622099][ T2522] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=2522,uid=0 [ 737.622386][ T2522] Memory cgroup out of memory: Killed process 2522 (syz-executor.3) total-vm:72444kB, anon-rss:68kB, file-rss:34832kB, shmem-rss:0kB [ 737.623666][ T1057] oom_reaper: reaped process 2522 (syz-executor.3), now anon-rss:0kB, file-rss:33936kB, shmem-rss:0kB [ 737.626797][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 737.980242][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 737.988901][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 737.997229][ T1278] bridge0: port 2(bridge_slave_1) entered blocking state [ 738.004307][ T1278] bridge0: port 2(bridge_slave_1) entered forwarding state [ 738.012049][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 738.020790][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 738.029358][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 738.037851][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 738.046412][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 738.055834][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 738.064243][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 738.072504][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 738.095873][ T2528] 8021q: adding VLAN 0 to HW filter on device bond0 [ 738.312806][ T2554] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 738.325395][ T2525] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 738.356129][ T2528] 8021q: adding VLAN 0 to HW filter on device team0 [ 738.365532][ T2533] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 738.377254][ T2533] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready 09:58:40 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r2 = socket$kcm(0x10, 0x3, 0x0) setsockopt$sock_attach_bpf(r2, 0x10e, 0x4, &(0x7f0000000000)=r0, 0x4) r3 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x40) openat$cgroup_ro(r3, &(0x7f0000000140)='cpuset.effective_cpus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r4 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) r5 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r5, &(0x7f0000000540)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @ipv4}, 0x80, 0x0}, 0x24000001) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000080)='cgroup.type\x00', 0x2, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f00000002c0)='threaded\x00', 0x9) write$cgroup_int(r4, 0x0, 0x0) write$cgroup_int(r4, 0x0, 0x0) [ 739.300077][ T2529] 8021q: adding VLAN 0 to HW filter on device bond0 [ 739.321048][ T1451] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 739.328721][ T1451] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 739.336655][ T1451] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready 09:58:40 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r2 = socket$kcm(0x10, 0x3, 0x0) setsockopt$sock_attach_bpf(r2, 0x10e, 0x4, &(0x7f0000000000)=r0, 0x4) r3 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x40) openat$cgroup_ro(r3, &(0x7f0000000140)='cpuset.effective_cpus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r4 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) r5 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r5, &(0x7f0000000540)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @ipv4}, 0x80, 0x0}, 0x24000001) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000080)='cgroup.type\x00', 0x2, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f00000002c0)='threaded\x00', 0x9) write$cgroup_int(r4, 0x0, 0x0) write$cgroup_int(r4, 0x0, 0x0) [ 739.345115][ T1451] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 740.099048][ T2555] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 740.107563][ T2555] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 740.115983][ T2555] bridge0: port 1(bridge_slave_0) entered blocking state [ 740.123082][ T2555] bridge0: port 1(bridge_slave_0) entered forwarding state [ 740.139053][ T2529] 8021q: adding VLAN 0 to HW filter on device team0 [ 740.159241][ T2533] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 740.571035][ T2554] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 740.579272][ T2554] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 740.587000][ T2554] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 740.594877][ T2554] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 740.603508][ T2554] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 740.611888][ T2554] bridge0: port 2(bridge_slave_1) entered blocking state [ 740.618957][ T2554] bridge0: port 2(bridge_slave_1) entered forwarding state [ 740.626459][ T2554] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 740.634894][ T2554] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 740.643213][ T2554] bridge0: port 1(bridge_slave_0) entered blocking state [ 740.650286][ T2554] bridge0: port 1(bridge_slave_0) entered forwarding state [ 740.657811][ T2554] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 740.666198][ T2554] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 740.674587][ T2554] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 740.683179][ T2554] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 740.691364][ T2554] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 740.700125][ T2554] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 740.708319][ T2554] bridge0: port 2(bridge_slave_1) entered blocking state [ 740.715397][ T2554] bridge0: port 2(bridge_slave_1) entered forwarding state [ 740.722782][ T2554] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 740.731399][ T2554] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 740.739726][ T2554] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 740.747991][ T2554] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 740.758682][ T2554] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 740.766613][ T2554] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 740.774492][ T2554] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 740.784408][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 740.793714][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready 09:58:42 executing program 2: ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000000)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000a201000000000000000000000000000000000000000000000530000000000000000000009df005f54667d0bc6893000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000fffffff7000000000000000000000000000000000000000000000900"/211]) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bpq0\x00', 0x21}) syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00') socketpair(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) [ 741.320413][ T2554] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 741.328855][ T2554] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 741.337246][ T2554] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 741.345684][ T2554] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 741.353915][ T2554] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 741.362156][ T2554] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 741.382945][ T2573] IPVS: ftp: loaded support on port[0] = 21 [ 741.392987][ T2529] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 741.407411][ T2528] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 741.417942][ T2528] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network 09:58:43 executing program 2: openat(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x10400003) 09:58:43 executing program 1: fstat(0xffffffffffffffff, 0x0) fstat(0xffffffffffffff9c, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x80000000000003, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'ip6_vti0\x00', 0x0}) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000380)=0xd95, 0x4) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) 09:58:43 executing program 1: fstat(0xffffffffffffffff, 0x0) fstat(0xffffffffffffff9c, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x80000000000003, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'ip6_vti0\x00', 0x0}) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000380)=0xd95, 0x4) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) 09:58:43 executing program 1: fstat(0xffffffffffffffff, 0x0) fstat(0xffffffffffffff9c, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x80000000000003, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000380)=0xd95, 0x4) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) [ 742.199487][ T2531] 8021q: adding VLAN 0 to HW filter on device bond0 [ 742.219189][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 742.227578][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 742.235858][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 742.243992][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 742.258212][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 742.287176][ T2531] 8021q: adding VLAN 0 to HW filter on device team0 [ 742.651183][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 742.658947][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 742.691507][ T2529] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 742.701777][ T2528] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 743.078054][ T1451] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 743.086675][ T1451] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 743.095048][ T1451] bridge0: port 1(bridge_slave_0) entered blocking state [ 743.102122][ T1451] bridge0: port 1(bridge_slave_0) entered forwarding state [ 743.110857][ T1451] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 743.119485][ T1451] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 743.127822][ T1451] bridge0: port 2(bridge_slave_1) entered blocking state [ 743.134912][ T1451] bridge0: port 2(bridge_slave_1) entered forwarding state [ 743.142412][ T1451] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 743.151080][ T1451] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 743.159843][ T1451] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 743.168216][ T1451] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 743.176730][ T1451] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 743.185297][ T1451] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 743.196080][ T1451] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 743.204075][ T1451] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 743.583875][ T2531] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 743.594425][ T2531] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 743.605984][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 743.614375][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 743.622751][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 743.630987][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready 09:58:45 executing program 5: syz_mount_image$jfs(&(0x7f00000001c0)='jfs\x00', &(0x7f0000000280)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)={[{@errors_remount='errors=remount-ro'}, {@noquota='noquota'}, {@integrity='integrity'}], [], 0x7a00000000000000}) 09:58:45 executing program 2: openat(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x10400003) [ 744.438921][ T2554] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 744.449437][ T2573] chnl_net:caif_netlink_parms(): no params data found [ 744.470208][ T2531] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 744.483759][ T821] device bridge_slave_1 left promiscuous mode [ 744.490837][ T821] bridge0: port 2(bridge_slave_1) entered disabled state [ 744.530458][ T821] device bridge_slave_0 left promiscuous mode [ 744.536647][ T821] bridge0: port 1(bridge_slave_0) entered disabled state [ 744.580933][ T821] device bridge_slave_1 left promiscuous mode [ 744.587108][ T821] bridge0: port 2(bridge_slave_1) entered disabled state [ 744.639702][ T821] device bridge_slave_0 left promiscuous mode [ 744.645866][ T821] bridge0: port 1(bridge_slave_0) entered disabled state [ 744.700788][ T821] device bridge_slave_1 left promiscuous mode [ 744.706972][ T821] bridge0: port 2(bridge_slave_1) entered disabled state [ 744.760142][ T821] device bridge_slave_0 left promiscuous mode [ 744.766317][ T821] bridge0: port 1(bridge_slave_0) entered disabled state [ 744.810404][ T821] device bridge_slave_1 left promiscuous mode [ 744.816622][ T821] bridge0: port 2(bridge_slave_1) entered disabled state [ 744.849933][ T821] device bridge_slave_0 left promiscuous mode [ 744.856101][ T821] bridge0: port 1(bridge_slave_0) entered disabled state [ 744.911770][ T821] device bridge_slave_1 left promiscuous mode [ 744.917928][ T821] bridge0: port 2(bridge_slave_1) entered disabled state [ 744.960327][ T821] device bridge_slave_0 left promiscuous mode [ 744.966473][ T821] bridge0: port 1(bridge_slave_0) entered disabled state [ 752.709700][ T821] device hsr_slave_0 left promiscuous mode [ 752.769509][ T821] device hsr_slave_1 left promiscuous mode [ 752.846470][ T821] team0 (unregistering): Port device team_slave_1 removed [ 752.861252][ T821] team0 (unregistering): Port device team_slave_0 removed [ 752.873427][ T821] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 752.926019][ T821] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 753.009726][ T821] bond0 (unregistering): Released all slaves [ 753.160128][ T821] device hsr_slave_0 left promiscuous mode [ 753.199065][ T821] device hsr_slave_1 left promiscuous mode [ 753.246770][ T821] team0 (unregistering): Port device team_slave_1 removed [ 753.260385][ T821] team0 (unregistering): Port device team_slave_0 removed [ 753.272812][ T821] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 753.296589][ T821] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 753.386999][ T821] bond0 (unregistering): Released all slaves [ 753.540374][ T821] device hsr_slave_0 left promiscuous mode [ 753.579143][ T821] device hsr_slave_1 left promiscuous mode [ 753.628414][ T821] team0 (unregistering): Port device team_slave_1 removed [ 753.642117][ T821] team0 (unregistering): Port device team_slave_0 removed [ 753.652441][ T821] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 753.685876][ T821] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 753.768911][ T821] bond0 (unregistering): Released all slaves [ 753.889323][ T821] device hsr_slave_0 left promiscuous mode [ 753.928983][ T821] device hsr_slave_1 left promiscuous mode [ 753.977973][ T821] team0 (unregistering): Port device team_slave_1 removed [ 753.991274][ T821] team0 (unregistering): Port device team_slave_0 removed [ 754.003076][ T821] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 754.044150][ T821] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 754.126053][ T821] bond0 (unregistering): Released all slaves [ 754.259901][ T821] device hsr_slave_0 left promiscuous mode [ 754.298901][ T821] device hsr_slave_1 left promiscuous mode [ 754.347489][ T821] team0 (unregistering): Port device team_slave_1 removed [ 754.361507][ T821] team0 (unregistering): Port device team_slave_0 removed [ 754.374393][ T821] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 754.404769][ T821] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 754.496159][ T821] bond0 (unregistering): Released all slaves [ 754.659228][ T2573] bridge0: port 1(bridge_slave_0) entered blocking state [ 754.666323][ T2573] bridge0: port 1(bridge_slave_0) entered disabled state [ 754.674239][ T2573] device bridge_slave_0 entered promiscuous mode [ 754.682806][ T2573] bridge0: port 2(bridge_slave_1) entered blocking state [ 754.689973][ T2573] bridge0: port 2(bridge_slave_1) entered disabled state [ 754.697552][ T2573] device bridge_slave_1 entered promiscuous mode [ 754.725553][ T2573] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 754.749702][ T2573] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 754.770113][ T2573] team0: Port device team_slave_0 added 09:58:56 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000012c0)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) 09:58:56 executing program 1: fstat(0xffffffffffffffff, 0x0) fstat(0xffffffffffffff9c, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x80000000000003, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000380)=0xd95, 0x4) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) 09:58:56 executing program 2: openat(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x10400003) 09:58:56 executing program 5: syz_mount_image$jfs(&(0x7f00000001c0)='jfs\x00', &(0x7f0000000280)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)={[{@errors_remount='errors=remount-ro'}, {@noquota='noquota'}, {@integrity='integrity'}], [], 0x7fffffffffffffff}) [ 754.783509][ T2573] team0: Port device team_slave_1 added [ 754.842821][ T2573] device hsr_slave_0 entered promiscuous mode [ 754.870089][ T2638] jfs: Unrecognized mount option "ÿ" or missing value [ 754.889030][ T2573] device hsr_slave_1 entered promiscuous mode [ 755.009389][ T2573] debugfs: Directory 'hsr0' with parent '/' already present! [ 755.082578][ T2573] bridge0: port 2(bridge_slave_1) entered blocking state [ 755.089699][ T2573] bridge0: port 2(bridge_slave_1) entered forwarding state [ 755.097028][ T2573] bridge0: port 1(bridge_slave_0) entered blocking state [ 755.104141][ T2573] bridge0: port 1(bridge_slave_0) entered forwarding state [ 755.313470][ T2573] 8021q: adding VLAN 0 to HW filter on device bond0 [ 755.328970][ T2160] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 755.338448][ T2160] bridge0: port 1(bridge_slave_0) entered disabled state [ 755.347215][ T2160] bridge0: port 2(bridge_slave_1) entered disabled state [ 755.358493][ T2160] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 755.374548][ T2573] 8021q: adding VLAN 0 to HW filter on device team0 [ 755.387168][ T2160] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 755.395622][ T2160] bridge0: port 1(bridge_slave_0) entered blocking state [ 755.402685][ T2160] bridge0: port 1(bridge_slave_0) entered forwarding state [ 755.445245][ T2573] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 755.455841][ T2573] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 755.477880][ T2160] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 755.486336][ T2160] bridge0: port 2(bridge_slave_1) entered blocking state [ 755.493446][ T2160] bridge0: port 2(bridge_slave_1) entered forwarding state [ 755.501518][ T2160] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 755.510100][ T2160] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 755.518386][ T2160] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 755.526799][ T2160] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 755.546118][ T2160] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 755.553895][ T2160] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 755.596743][ T2573] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 755.840272][ T2659] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 755.850588][ T2659] CPU: 1 PID: 2659 Comm: syz-executor.3 Not tainted 5.2.0+ #37 [ 755.858115][ T2659] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 755.868151][ T2659] Call Trace: [ 755.871434][ T2659] dump_stack+0x1d8/0x2f8 [ 755.875767][ T2659] dump_header+0xd8/0x970 [ 755.880106][ T2659] oom_kill_process+0xcd/0x320 [ 755.884877][ T2659] out_of_memory+0x5e1/0x8a0 [ 755.889456][ T2659] ? unregister_oom_notifier+0x20/0x20 [ 755.894912][ T2659] memory_max_write+0x537/0x6a0 [ 755.899763][ T2659] ? memory_max_show+0xa0/0xa0 [ 755.904524][ T2659] ? memory_max_show+0xa0/0xa0 [ 755.909291][ T2659] cgroup_file_write+0x27b/0x6e0 [ 755.914227][ T2659] ? cgroup_seqfile_stop+0xc0/0xc0 [ 755.919349][ T2659] ? kernfs_fop_write+0x328/0x4f0 [ 755.924356][ T2659] ? cgroup_seqfile_stop+0xc0/0xc0 [ 755.929450][ T2659] kernfs_fop_write+0x3e4/0x4f0 [ 755.934281][ T2659] ? kernfs_fop_read+0x580/0x580 [ 755.939239][ T2659] __vfs_write+0xf9/0x7d0 [ 755.943580][ T2659] ? retint_kernel+0x10/0x10 [ 755.948161][ T2659] ? __kernel_write+0x350/0x350 [ 755.953017][ T2659] ? rcu_irq_exit+0xe3/0x260 [ 755.957623][ T2659] ? __sb_start_write+0x39c/0x440 [ 755.962635][ T2659] vfs_write+0x275/0x590 [ 755.966871][ T2659] ksys_write+0x16b/0x2a0 [ 755.971189][ T2659] ? __ia32_sys_read+0x90/0x90 [ 755.975939][ T2659] ? prepare_exit_to_usermode+0x1f7/0x580 [ 755.981647][ T2659] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 755.987108][ T2659] ? trace_irq_disable_rcuidle+0x23/0x1c0 [ 755.992842][ T2659] ? do_syscall_64+0x1d/0x140 [ 755.997518][ T2659] __x64_sys_write+0x7b/0x90 [ 756.002111][ T2659] do_syscall_64+0xfe/0x140 [ 756.006604][ T2659] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 756.012481][ T2659] RIP: 0033:0x459819 [ 756.016372][ T2659] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 756.035961][ T2659] RSP: 002b:00007f90f2493c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 756.044361][ T2659] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459819 [ 756.052322][ T2659] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 756.060277][ T2659] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 756.068257][ T2659] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f90f24946d4 [ 756.076235][ T2659] R13: 00000000004c9774 R14: 00000000004e0b70 R15: 00000000ffffffff [ 756.084334][ T2659] memory: usage 3264kB, limit 0kB, failcnt 560236 [ 756.090945][ T2659] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 756.097840][ T2659] Memory cgroup stats for /syz3: [ 756.098858][ T2659] anon 2220032 [ 756.098858][ T2659] file 0 [ 756.098858][ T2659] kernel_stack 65536 [ 756.098858][ T2659] slab 856064 [ 756.098858][ T2659] sock 0 [ 756.098858][ T2659] shmem 0 [ 756.098858][ T2659] file_mapped 0 [ 756.098858][ T2659] file_dirty 0 [ 756.098858][ T2659] file_writeback 0 [ 756.098858][ T2659] anon_thp 2097152 [ 756.098858][ T2659] inactive_anon 0 [ 756.098858][ T2659] active_anon 2220032 [ 756.098858][ T2659] inactive_file 0 [ 756.098858][ T2659] active_file 0 [ 756.098858][ T2659] unevictable 0 [ 756.098858][ T2659] slab_reclaimable 270336 [ 756.098858][ T2659] slab_unreclaimable 585728 [ 756.098858][ T2659] pgfault 78573 [ 756.098858][ T2659] pgmajfault 0 [ 756.098858][ T2659] workingset_refault 0 [ 756.098858][ T2659] workingset_activate 0 [ 756.098858][ T2659] workingset_nodereclaim 0 [ 756.098858][ T2659] pgrefill 0 [ 756.098858][ T2659] pgscan 0 [ 756.098858][ T2659] pgsteal 0 [ 756.098858][ T2659] pgactivate 0 [ 756.192926][ T2659] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=2658,uid=0 [ 756.208648][ T2659] Memory cgroup out of memory: Killed process 2658 (syz-executor.3) total-vm:72708kB, anon-rss:2144kB, file-rss:34816kB, shmem-rss:0kB [ 756.224441][ T1057] oom_reaper: reaped process 2658 (syz-executor.3), now anon-rss:0kB, file-rss:34832kB, shmem-rss:0kB 09:58:57 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r2 = socket$kcm(0x10, 0x3, 0x0) setsockopt$sock_attach_bpf(r2, 0x10e, 0x4, &(0x7f0000000000)=r0, 0x4) r3 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x40) openat$cgroup_ro(r3, &(0x7f0000000140)='cpuset.effective_cpus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpid() r4 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) r5 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r5, &(0x7f0000000540)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @ipv4}, 0x80, 0x0}, 0x24000001) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000080)='cgroup.type\x00', 0x2, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f00000002c0)='threaded\x00', 0x9) write$cgroup_int(r4, 0x0, 0x0) write$cgroup_int(r4, 0x0, 0x0) 09:58:57 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000012c0)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) close(0xffffffffffffffff) accept4$alg(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_NETID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x0, 0x0, 0x0, 0x0, {{}, 0x0, 0x800b, 0x0, {0x8}}}, 0x24}}, 0x0) 09:58:57 executing program 1: fstat(0xffffffffffffffff, 0x0) fstat(0xffffffffffffff9c, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x80000000000003, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000380)=0xd95, 0x4) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) 09:58:57 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000012c0)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) 09:58:57 executing program 2: openat(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x10400003) 09:58:57 executing program 5: syz_mount_image$jfs(&(0x7f00000001c0)='jfs\x00', &(0x7f0000000280)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)={[{@errors_remount='errors=remount-ro'}, {@noquota='noquota'}, {@integrity='integrity'}], [], 0x8000000000000000}) [ 756.377425][ T2573] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 756.387440][ T2573] CPU: 1 PID: 2573 Comm: syz-executor.3 Not tainted 5.2.0+ #37 [ 756.394982][ T2573] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 756.405043][ T2573] Call Trace: [ 756.408316][ T2573] dump_stack+0x1d8/0x2f8 [ 756.412627][ T2573] dump_header+0xd8/0x970 [ 756.416950][ T2573] oom_kill_process+0xcd/0x320 [ 756.421709][ T2573] out_of_memory+0x5e1/0x8a0 [ 756.426291][ T2573] ? unregister_oom_notifier+0x20/0x20 [ 756.431739][ T2573] ? __kasan_check_read+0x11/0x20 [ 756.436745][ T2573] try_charge+0x134a/0x17b0 [ 756.441251][ T2573] ? __memcg_kmem_charge_memcg+0x180/0x180 [ 756.447060][ T2573] ? __lock_acquire+0x4750/0x4750 [ 756.452092][ T2573] ? rcu_lock_release+0x15/0x20 [ 756.456922][ T2573] ? get_mem_cgroup_from_mm+0x15e/0x170 [ 756.462456][ T2573] mem_cgroup_try_charge+0x216/0x560 [ 756.467738][ T2573] mem_cgroup_try_charge_delay+0x25/0xa0 [ 756.473347][ T2573] wp_page_copy+0x367/0x18c0 [ 756.477936][ T2573] ? rcu_lock_release+0x30/0x30 [ 756.482769][ T2573] ? __lock_acquire+0x4750/0x4750 [ 756.487775][ T2573] ? __kasan_check_read+0x11/0x20 [ 756.492800][ T2573] ? do_raw_spin_unlock+0x49/0x260 [ 756.497897][ T2573] do_wp_page+0x2c9/0x1ce0 [ 756.502311][ T2573] ? __rwlock_init+0x130/0x130 [ 756.507055][ T2573] ? count_memcg_event_mm+0x300/0x300 [ 756.512425][ T2573] handle_mm_fault+0x2bcf/0x6080 [ 756.517349][ T2573] ? finish_fault+0x230/0x230 [ 756.522012][ T2573] ? vmacache_find+0x251/0x5b0 [ 756.526762][ T2573] do_user_addr_fault+0x589/0xaf0 [ 756.531772][ T2573] __do_page_fault+0xd3/0x1f0 [ 756.536428][ T2573] do_page_fault+0x99/0xb0 [ 756.540829][ T2573] page_fault+0x39/0x40 [ 756.544993][ T2573] RIP: 0033:0x403442 [ 756.548868][ T2573] Code: 55 41 54 49 89 fc 55 53 48 81 ec b8 10 00 00 64 48 8b 04 25 28 00 00 00 48 89 84 24 a8 10 00 00 31 c0 be 02 00 00 00 4c 89 e7 f9 8d 05 00 85 c0 0f 84 00 03 00 00 4c 89 e7 e8 19 43 05 00 48 [ 756.568467][ T2573] RSP: 002b:00007ffff4e8bcf0 EFLAGS: 00010246 [ 756.574508][ T2573] RAX: 0000000000000000 RBX: 00000000000b8840 RCX: 0000000000413420 [ 756.582460][ T2573] RDX: 000000000000000c RSI: 0000000000000002 RDI: 00007ffff4e8ce20 [ 756.590410][ T2573] RBP: 0000000000000002 R08: 0000000000000001 R09: 00005555555c3940 [ 756.598372][ T2573] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffff4e8ce20 [ 756.606331][ T2573] R13: 00007ffff4e8ce10 R14: 0000000000000000 R15: 00007ffff4e8ce20 [ 756.614392][ T2573] memory: usage 940kB, limit 0kB, failcnt 560253 [ 756.620757][ T2573] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 756.627621][ T2573] Memory cgroup stats for /syz3: [ 756.627694][ T2573] anon 0 [ 756.627694][ T2573] file 0 [ 756.627694][ T2573] kernel_stack 0 [ 756.627694][ T2573] slab 856064 [ 756.627694][ T2573] sock 0 [ 756.627694][ T2573] shmem 0 [ 756.627694][ T2573] file_mapped 0 [ 756.627694][ T2573] file_dirty 0 [ 756.627694][ T2573] file_writeback 0 [ 756.627694][ T2573] anon_thp 0 [ 756.627694][ T2573] inactive_anon 0 [ 756.627694][ T2573] active_anon 0 [ 756.627694][ T2573] inactive_file 0 [ 756.627694][ T2573] active_file 0 [ 756.627694][ T2573] unevictable 0 [ 756.627694][ T2573] slab_reclaimable 270336 [ 756.627694][ T2573] slab_unreclaimable 585728 [ 756.627694][ T2573] pgfault 78573 [ 756.627694][ T2573] pgmajfault 0 [ 756.627694][ T2573] workingset_refault 0 [ 756.627694][ T2573] workingset_activate 0 [ 756.627694][ T2573] workingset_nodereclaim 0 [ 756.627694][ T2573] pgrefill 0 [ 756.627694][ T2573] pgscan 0 [ 756.627694][ T2573] pgsteal 0 [ 756.627694][ T2573] pgactivate 0 [ 756.627694][ T2573] pgdeactivate 0 [ 756.722925][ T2573] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=2573,uid=0 [ 756.738306][ T2573] Memory cgroup out of memory: Killed process 2573 (syz-executor.3) total-vm:72444kB, anon-rss:76kB, file-rss:34832kB, shmem-rss:0kB [ 756.752515][ T1057] oom_reaper: reaped process 2573 (syz-executor.3), now anon-rss:0kB, file-rss:33936kB, shmem-rss:0kB 09:58:58 executing program 4: bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00000012c0)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) 09:58:58 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(serpent)\x00'}, 0x58) r1 = socket$inet_udplite(0x2, 0x2, 0x88) close(r1) accept4$alg(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x0, 0x0, 0x0, 0x0, {{}, 0x0, 0x800b, 0x0, {0x8}}}, 0x24}}, 0x0) 09:58:58 executing program 1: fstat(0xffffffffffffffff, 0x0) fstat(0xffffffffffffff9c, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x80000000000003, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'ip6_vti0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000380)=0xd95, 0x4) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) 09:58:58 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(serpent)\x00'}, 0x58) r1 = socket$inet_udplite(0x2, 0x2, 0x88) close(r1) accept4$alg(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x0, 0x0, 0x0, 0x0, {{}, 0x0, 0x800b, 0x0, {0x8}}}, 0x24}}, 0x0) 09:58:58 executing program 5: syz_mount_image$jfs(&(0x7f00000001c0)='jfs\x00', &(0x7f0000000280)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)={[{@errors_remount='errors=remount-ro'}, {@noquota='noquota'}, {@integrity='integrity'}], [], 0x8cffffff00000000}) 09:58:58 executing program 4: bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00000012c0)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) 09:58:59 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(serpent)\x00'}, 0x58) r1 = socket$inet_udplite(0x2, 0x2, 0x88) close(r1) accept4$alg(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x0, 0x0, 0x0, 0x0, {{}, 0x0, 0x800b, 0x0, {0x8}}}, 0x24}}, 0x0) 09:58:59 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r2 = socket$kcm(0x10, 0x3, 0x0) setsockopt$sock_attach_bpf(r2, 0x10e, 0x4, &(0x7f0000000000)=r0, 0x4) r3 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x40) openat$cgroup_ro(r3, &(0x7f0000000140)='cpuset.effective_cpus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpid() r4 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) r5 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r5, &(0x7f0000000540)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @ipv4}, 0x80, 0x0}, 0x24000001) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000080)='cgroup.type\x00', 0x2, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f00000002c0)='threaded\x00', 0x9) write$cgroup_int(r4, 0x0, 0x0) write$cgroup_int(r4, 0x0, 0x0) 09:58:59 executing program 1: fstat(0xffffffffffffffff, 0x0) fstat(0xffffffffffffff9c, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x80000000000003, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'ip6_vti0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000380)=0xd95, 0x4) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) 09:58:59 executing program 2: openat(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000480), 0x10000000000002a1, 0x10400003) 09:58:59 executing program 4: bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00000012c0)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) 09:58:59 executing program 5: syz_mount_image$jfs(&(0x7f00000001c0)='jfs\x00', &(0x7f0000000280)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)={[{@errors_remount='errors=remount-ro'}, {@noquota='noquota'}, {@integrity='integrity'}], [], 0x97ffffff00000000}) 09:58:59 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000012c0)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) 09:58:59 executing program 2: openat(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000480), 0x10000000000002a1, 0x10400003) 09:58:59 executing program 1: fstat(0xffffffffffffffff, 0x0) fstat(0xffffffffffffff9c, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x80000000000003, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'ip6_vti0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000380)=0xd95, 0x4) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) 09:58:59 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000012c0)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) close(r1) accept4$alg(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x0, 0x0, 0x0, 0x0, {{}, 0x0, 0x800b, 0x0, {0x8}}}, 0x24}}, 0x0) 09:58:59 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000012c0)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) 09:58:59 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r2 = socket$kcm(0x10, 0x3, 0x0) setsockopt$sock_attach_bpf(r2, 0x10e, 0x4, &(0x7f0000000000)=r0, 0x4) r3 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x40) openat$cgroup_ro(r3, &(0x7f0000000140)='cpuset.effective_cpus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpid() r4 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) r5 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r5, &(0x7f0000000540)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @ipv4}, 0x80, 0x0}, 0x24000001) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000080)='cgroup.type\x00', 0x2, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f00000002c0)='threaded\x00', 0x9) write$cgroup_int(r4, 0x0, 0x0) write$cgroup_int(r4, 0x0, 0x0) 09:58:59 executing program 5: syz_mount_image$jfs(&(0x7f00000001c0)='jfs\x00', &(0x7f0000000280)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)={[{@errors_remount='errors=remount-ro'}, {@noquota='noquota'}, {@integrity='integrity'}], [], 0xebffffff00000000}) 09:58:59 executing program 2: openat(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000480), 0x10000000000002a1, 0x10400003) 09:58:59 executing program 1: fstat(0xffffffffffffffff, 0x0) fstat(0xffffffffffffff9c, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x80000000000003, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'ip6_vti0\x00'}) bind$packet(r0, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000380)=0xd95, 0x4) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) 09:58:59 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000012c0)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) close(r1) accept4$alg(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x0, 0x0, 0x0, 0x0, {{}, 0x0, 0x800b, 0x0, {0x8}}}, 0x24}}, 0x0) 09:58:59 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000012c0)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) 09:58:59 executing program 2: openat(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x10400003) 09:58:59 executing program 1: fstat(0xffffffffffffffff, 0x0) fstat(0xffffffffffffff9c, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x80000000000003, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'ip6_vti0\x00'}) bind$packet(r0, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000380)=0xd95, 0x4) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) 09:58:59 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000012c0)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) close(r1) accept4$alg(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x0, 0x0, 0x0, 0x0, {{}, 0x0, 0x800b, 0x0, {0x8}}}, 0x24}}, 0x0) 09:58:59 executing program 5: syz_mount_image$jfs(&(0x7f00000001c0)='jfs\x00', &(0x7f0000000280)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)={[{@errors_remount='errors=remount-ro'}, {@noquota='noquota'}, {@integrity='integrity'}], [], 0xf4ffffff00000000}) 09:58:59 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000012c0)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) 09:59:00 executing program 1: fstat(0xffffffffffffffff, 0x0) fstat(0xffffffffffffff9c, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x80000000000003, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'ip6_vti0\x00'}) bind$packet(r0, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000380)=0xd95, 0x4) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) [ 760.144736][ T2785] IPVS: ftp: loaded support on port[0] = 21 [ 760.531388][ T2785] chnl_net:caif_netlink_parms(): no params data found [ 760.716426][ T2785] bridge0: port 1(bridge_slave_0) entered blocking state [ 760.723562][ T2785] bridge0: port 1(bridge_slave_0) entered disabled state [ 760.731359][ T2785] device bridge_slave_0 entered promiscuous mode [ 760.894077][ T2785] bridge0: port 2(bridge_slave_1) entered blocking state [ 760.901386][ T2785] bridge0: port 2(bridge_slave_1) entered disabled state [ 760.909292][ T2785] device bridge_slave_1 entered promiscuous mode [ 760.925665][ T2785] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 760.936314][ T2785] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 760.956484][ T2785] team0: Port device team_slave_0 added [ 760.963210][ T2785] team0: Port device team_slave_1 added [ 761.180148][ T2785] device hsr_slave_0 entered promiscuous mode [ 761.250198][ T2785] device hsr_slave_1 entered promiscuous mode [ 761.288865][ T2785] debugfs: Directory 'hsr0' with parent '/' already present! [ 761.455459][ T2785] bridge0: port 2(bridge_slave_1) entered blocking state [ 761.462520][ T2785] bridge0: port 2(bridge_slave_1) entered forwarding state [ 761.469878][ T2785] bridge0: port 1(bridge_slave_0) entered blocking state [ 761.476894][ T2785] bridge0: port 1(bridge_slave_0) entered forwarding state [ 761.680465][ T2785] 8021q: adding VLAN 0 to HW filter on device bond0 [ 761.692286][ T1278] bridge0: port 1(bridge_slave_0) entered disabled state [ 761.699971][ T1278] bridge0: port 2(bridge_slave_1) entered disabled state [ 761.709869][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 761.724816][ T2785] 8021q: adding VLAN 0 to HW filter on device team0 [ 761.732398][ T2622] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 761.732836][ T2622] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 761.921369][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 761.930180][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 761.938579][ T1277] bridge0: port 1(bridge_slave_0) entered blocking state [ 761.945654][ T1277] bridge0: port 1(bridge_slave_0) entered forwarding state [ 761.953178][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 761.961775][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 761.970197][ T1277] bridge0: port 2(bridge_slave_1) entered blocking state [ 761.977219][ T1277] bridge0: port 2(bridge_slave_1) entered forwarding state [ 761.984798][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 761.993531][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 762.002257][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 762.010938][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 762.019422][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 762.028110][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 762.036553][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 762.045109][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 762.225584][ T2622] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 762.233502][ T2622] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 762.241997][ T2622] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 762.253922][ T2785] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 762.434518][ T2785] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 762.486622][ T821] device bridge_slave_1 left promiscuous mode [ 762.493034][ T821] bridge0: port 2(bridge_slave_1) entered disabled state [ 762.539882][ T821] device bridge_slave_0 left promiscuous mode [ 762.546124][ T821] bridge0: port 1(bridge_slave_0) entered disabled state [ 762.580635][ T2793] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 762.592026][ T2793] CPU: 0 PID: 2793 Comm: syz-executor.3 Not tainted 5.2.0+ #37 [ 762.599578][ T2793] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 762.609614][ T2793] Call Trace: [ 762.612889][ T2793] dump_stack+0x1d8/0x2f8 [ 762.617205][ T2793] dump_header+0xd8/0x970 [ 762.621540][ T2793] oom_kill_process+0xcd/0x320 [ 762.626298][ T2793] out_of_memory+0x5e1/0x8a0 [ 762.630894][ T2793] ? retint_kernel+0x10/0x10 [ 762.635463][ T2793] ? unregister_oom_notifier+0x20/0x20 [ 762.640914][ T2793] memory_max_write+0x537/0x6a0 [ 762.645767][ T2793] ? memory_max_show+0xa0/0xa0 [ 762.650540][ T2793] ? lock_acquire+0x1b2/0x250 [ 762.655220][ T2793] ? memory_max_show+0xa0/0xa0 [ 762.659986][ T2793] cgroup_file_write+0x27b/0x6e0 [ 762.664928][ T2793] ? cgroup_seqfile_stop+0xc0/0xc0 [ 762.670061][ T2793] ? cgroup_seqfile_stop+0xc0/0xc0 [ 762.675179][ T2793] kernfs_fop_write+0x3e4/0x4f0 [ 762.680046][ T2793] ? kernfs_fop_read+0x580/0x580 [ 762.684978][ T2793] __vfs_write+0xf9/0x7d0 [ 762.689295][ T2793] ? __lock_acquire+0x4750/0x4750 [ 762.694319][ T2793] ? __kernel_write+0x350/0x350 [ 762.699167][ T2793] ? trace_lock_acquire+0x154/0x1b0 [ 762.704403][ T2793] ? __sb_start_write+0x39c/0x440 [ 762.709444][ T2793] vfs_write+0x275/0x590 [ 762.713694][ T2793] ksys_write+0x16b/0x2a0 [ 762.718027][ T2793] ? __ia32_sys_read+0x90/0x90 [ 762.722795][ T2793] ? prepare_exit_to_usermode+0x1f7/0x580 [ 762.728505][ T2793] ? trace_irq_disable_rcuidle+0x23/0x1c0 [ 762.734215][ T2793] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 762.739690][ T2793] ? trace_irq_disable_rcuidle+0x23/0x1c0 [ 762.745403][ T2793] ? do_syscall_64+0x1d/0x140 [ 762.750087][ T2793] __x64_sys_write+0x7b/0x90 [ 762.754679][ T2793] do_syscall_64+0xfe/0x140 [ 762.759184][ T2793] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 762.765069][ T2793] RIP: 0033:0x459819 [ 762.768964][ T2793] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 762.788563][ T2793] RSP: 002b:00007fdee45b9c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 762.796953][ T2793] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459819 [ 762.804928][ T2793] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 762.812885][ T2793] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 762.820876][ T2793] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fdee45ba6d4 [ 762.828857][ T2793] R13: 00000000004c9774 R14: 00000000004e0b70 R15: 00000000ffffffff [ 762.836944][ T2793] memory: usage 3292kB, limit 0kB, failcnt 560262 [ 762.843563][ T2793] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 762.850543][ T2793] Memory cgroup stats for /syz3: [ 762.852410][ T2793] anon 2080768 [ 762.852410][ T2793] file 0 [ 762.852410][ T2793] kernel_stack 65536 [ 762.852410][ T2793] slab 856064 [ 762.852410][ T2793] sock 0 [ 762.852410][ T2793] shmem 0 [ 762.852410][ T2793] file_mapped 0 [ 762.852410][ T2793] file_dirty 0 [ 762.852410][ T2793] file_writeback 0 [ 762.852410][ T2793] anon_thp 2097152 [ 762.852410][ T2793] inactive_anon 0 [ 762.852410][ T2793] active_anon 2080768 [ 762.852410][ T2793] inactive_file 0 [ 762.852410][ T2793] active_file 0 [ 762.852410][ T2793] unevictable 0 [ 762.852410][ T2793] slab_reclaimable 270336 [ 762.852410][ T2793] slab_unreclaimable 585728 [ 762.852410][ T2793] pgfault 78639 [ 762.852410][ T2793] pgmajfault 0 [ 762.852410][ T2793] workingset_refault 0 [ 762.852410][ T2793] workingset_activate 0 [ 762.852410][ T2793] workingset_nodereclaim 0 [ 762.852410][ T2793] pgrefill 0 [ 762.852410][ T2793] pgscan 0 [ 762.852410][ T2793] pgsteal 0 [ 762.852410][ T2793] pgactivate 0 [ 762.946171][ T2793] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=2791,uid=0 [ 762.962357][ T2793] Memory cgroup out of memory: Killed process 2791 (syz-executor.3) total-vm:72708kB, anon-rss:2140kB, file-rss:34816kB, shmem-rss:0kB [ 762.978696][ T1057] oom_reaper: reaped process 2791 (syz-executor.3), now anon-rss:0kB, file-rss:34832kB, shmem-rss:0kB [ 762.990939][ T821] device bridge_slave_1 left promiscuous mode [ 762.997119][ T821] bridge0: port 2(bridge_slave_1) entered disabled state 09:59:04 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r2 = socket$kcm(0x10, 0x3, 0x0) setsockopt$sock_attach_bpf(r2, 0x10e, 0x4, &(0x7f0000000000)=r0, 0x4) r3 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x40) openat$cgroup_ro(r3, &(0x7f0000000140)='cpuset.effective_cpus\x00', 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) getpid() r4 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) r5 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r5, &(0x7f0000000540)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @ipv4}, 0x80, 0x0}, 0x24000001) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000080)='cgroup.type\x00', 0x2, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f00000002c0)='threaded\x00', 0x9) write$cgroup_int(r4, 0x0, 0x0) write$cgroup_int(r4, 0x0, 0x0) 09:59:04 executing program 0: bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00000012c0)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r0 = socket$inet_udplite(0x2, 0x2, 0x88) close(r0) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x0, 0x0, 0x0, 0x0, {{}, 0x0, 0x800b, 0x0, {0x8}}}, 0x24}}, 0x0) 09:59:04 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000012c0)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) 09:59:04 executing program 2: openat(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x10400003) 09:59:04 executing program 5: syz_mount_image$jfs(&(0x7f00000001c0)='jfs\x00', &(0x7f0000000280)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)={[{@errors_remount='errors=remount-ro'}, {@noquota='noquota'}, {@integrity='integrity'}], [], 0xf6ffffff00000000}) 09:59:04 executing program 1: fstat(0xffffffffffffffff, 0x0) fstat(0xffffffffffffff9c, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x80000000000003, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'ip6_vti0\x00'}) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000380)=0xd95, 0x4) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) [ 763.089323][ T2785] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 763.099338][ T2785] CPU: 1 PID: 2785 Comm: syz-executor.3 Not tainted 5.2.0+ #37 [ 763.106877][ T2785] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 763.116938][ T2785] Call Trace: [ 763.120236][ T2785] dump_stack+0x1d8/0x2f8 [ 763.124568][ T2785] dump_header+0xd8/0x970 [ 763.128911][ T2785] oom_kill_process+0xcd/0x320 [ 763.133675][ T2785] out_of_memory+0x5e1/0x8a0 [ 763.138253][ T2785] ? unregister_oom_notifier+0x20/0x20 [ 763.143694][ T2785] ? __kasan_check_read+0x11/0x20 [ 763.148713][ T2785] try_charge+0x134a/0x17b0 [ 763.153202][ T2785] ? __memcg_kmem_charge_memcg+0x180/0x180 [ 763.158986][ T2785] ? __lock_acquire+0x4750/0x4750 [ 763.164000][ T2785] ? rcu_lock_release+0x15/0x20 [ 763.168840][ T2785] ? get_mem_cgroup_from_mm+0x15e/0x170 [ 763.174354][ T2785] mem_cgroup_try_charge+0x216/0x560 [ 763.179614][ T2785] mem_cgroup_try_charge_delay+0x25/0xa0 [ 763.185234][ T2785] wp_page_copy+0x367/0x18c0 [ 763.189826][ T2785] ? rcu_lock_release+0x30/0x30 [ 763.194659][ T2785] ? __lock_acquire+0x4750/0x4750 [ 763.199654][ T2785] ? __kasan_check_read+0x11/0x20 [ 763.204650][ T2785] ? do_raw_spin_unlock+0x49/0x260 [ 763.209732][ T2785] do_wp_page+0x2c9/0x1ce0 [ 763.214121][ T2785] ? __rwlock_init+0x130/0x130 [ 763.218862][ T2785] ? count_memcg_event_mm+0x300/0x300 [ 763.224224][ T2785] handle_mm_fault+0x2bcf/0x6080 [ 763.229140][ T2785] ? finish_fault+0x230/0x230 [ 763.233795][ T2785] ? vmacache_find+0x50f/0x5b0 [ 763.238535][ T2785] ? vmacache_update+0xb7/0x120 [ 763.243362][ T2785] do_user_addr_fault+0x589/0xaf0 [ 763.248431][ T2785] __do_page_fault+0xd3/0x1f0 [ 763.253085][ T2785] do_page_fault+0x99/0xb0 [ 763.257475][ T2785] page_fault+0x39/0x40 [ 763.261601][ T2785] RIP: 0033:0x4308f6 [ 763.265471][ T2785] Code: 1f 44 00 00 48 29 e8 31 c9 48 81 fb 40 56 71 00 0f 95 c1 48 8d 34 2a 48 83 cd 01 48 c1 e1 02 48 83 c8 01 48 09 e9 48 89 73 58 <48> 89 4a 08 48 89 46 08 48 8d 4a 10 8b 05 6c 46 64 00 85 c0 0f 84 [ 763.285054][ T2785] RSP: 002b:00007ffe9c8cb660 EFLAGS: 00010206 [ 763.291106][ T2785] RAX: 0000000000019691 RBX: 0000000000715640 RCX: 0000000000008041 [ 763.299054][ T2785] RDX: 000055555638a930 RSI: 0000555556392970 RDI: 0000000000000003 [ 763.306996][ T2785] RBP: 0000000000008041 R08: 0000000000000001 R09: 0000555556389940 [ 763.314948][ T2785] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000715698 [ 763.322891][ T2785] R13: 0000000000715698 R14: 0000000000000000 R15: 0000000000002710 [ 763.330948][ T2785] memory: usage 964kB, limit 0kB, failcnt 560271 [ 763.337303][ T2785] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 763.344211][ T2785] Memory cgroup stats for /syz3: [ 763.344298][ T2785] anon 4096 [ 763.344298][ T2785] file 0 [ 763.344298][ T2785] kernel_stack 65536 [ 763.344298][ T2785] slab 856064 [ 763.344298][ T2785] sock 0 [ 763.344298][ T2785] shmem 0 [ 763.344298][ T2785] file_mapped 0 [ 763.344298][ T2785] file_dirty 0 [ 763.344298][ T2785] file_writeback 0 [ 763.344298][ T2785] anon_thp 0 [ 763.344298][ T2785] inactive_anon 0 [ 763.344298][ T2785] active_anon 4096 [ 763.344298][ T2785] inactive_file 0 [ 763.344298][ T2785] active_file 0 [ 763.344298][ T2785] unevictable 0 [ 763.344298][ T2785] slab_reclaimable 270336 [ 763.344298][ T2785] slab_unreclaimable 585728 [ 763.344298][ T2785] pgfault 78639 [ 763.344298][ T2785] pgmajfault 0 [ 763.344298][ T2785] workingset_refault 0 [ 763.344298][ T2785] workingset_activate 0 [ 763.344298][ T2785] workingset_nodereclaim 0 [ 763.344298][ T2785] pgrefill 0 [ 763.344298][ T2785] pgscan 0 [ 763.344298][ T2785] pgsteal 0 [ 763.344298][ T2785] pgactivate 0 [ 763.344298][ T2785] pgdeactivate 0 [ 763.440286][ T2785] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=2785,uid=0 [ 763.455640][ T2785] Memory cgroup out of memory: Killed process 2785 (syz-executor.3) total-vm:72444kB, anon-rss:72kB, file-rss:34832kB, shmem-rss:0kB [ 763.469918][ T1057] oom_reaper: reaped process 2785 (syz-executor.3), now anon-rss:0kB, file-rss:33936kB, shmem-rss:0kB [ 763.482105][ T821] device bridge_slave_0 left promiscuous mode 09:59:05 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000012c0)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) [ 763.488277][ T821] bridge0: port 1(bridge_slave_0) entered disabled state 09:59:05 executing program 0: bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00000012c0)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r0 = socket$inet_udplite(0x2, 0x2, 0x88) close(r0) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x0, 0x0, 0x0, 0x0, {{}, 0x0, 0x800b, 0x0, {0x8}}}, 0x24}}, 0x0) 09:59:05 executing program 1: fstat(0xffffffffffffffff, 0x0) fstat(0xffffffffffffff9c, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x80000000000003, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'ip6_vti0\x00'}) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000380)=0xd95, 0x4) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) 09:59:05 executing program 2: openat(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x10400003) 09:59:05 executing program 0: bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00000012c0)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r0 = socket$inet_udplite(0x2, 0x2, 0x88) close(r0) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x0, 0x0, 0x0, 0x0, {{}, 0x0, 0x800b, 0x0, {0x8}}}, 0x24}}, 0x0) 09:59:05 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00000012c0)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) [ 767.299984][ T821] device hsr_slave_0 left promiscuous mode [ 767.338892][ T821] device hsr_slave_1 left promiscuous mode [ 767.388703][ T821] team0 (unregistering): Port device team_slave_1 removed [ 767.399197][ T821] team0 (unregistering): Port device team_slave_0 removed [ 767.411144][ T821] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 767.463084][ T821] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 767.531608][ T821] bond0 (unregistering): Released all slaves [ 767.670810][ T821] device hsr_slave_0 left promiscuous mode [ 767.719100][ T821] device hsr_slave_1 left promiscuous mode [ 767.770071][ T821] team0 (unregistering): Port device team_slave_1 removed [ 767.782408][ T821] team0 (unregistering): Port device team_slave_0 removed [ 767.793674][ T821] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 767.833004][ T821] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 767.912829][ T821] bond0 (unregistering): Released all slaves 09:59:09 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r2 = socket$kcm(0x10, 0x3, 0x0) setsockopt$sock_attach_bpf(r2, 0x10e, 0x4, &(0x7f0000000000)=r0, 0x4) r3 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x40) openat$cgroup_ro(r3, &(0x7f0000000140)='cpuset.effective_cpus\x00', 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) getpid() r4 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) r5 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r5, &(0x7f0000000540)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @ipv4}, 0x80, 0x0}, 0x24000001) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000080)='cgroup.type\x00', 0x2, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f00000002c0)='threaded\x00', 0x9) write$cgroup_int(r4, 0x0, 0x0) write$cgroup_int(r4, 0x0, 0x0) 09:59:09 executing program 5: syz_mount_image$jfs(&(0x7f00000001c0)='jfs\x00', &(0x7f0000000280)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)={[{@errors_remount='errors=remount-ro'}, {@noquota='noquota'}, {@integrity='integrity'}], [], 0xf9fdffff00000000}) 09:59:09 executing program 1: fstat(0xffffffffffffffff, 0x0) fstat(0xffffffffffffff9c, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x80000000000003, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'ip6_vti0\x00'}) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000380)=0xd95, 0x4) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) 09:59:09 executing program 2: openat(0xffffffffffffffff, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x10400003) 09:59:09 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000012c0)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) close(r1) accept4$alg(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x0, 0x0, 0x0, 0x0, {{}, 0x0, 0x800b, 0x0, {0x8}}}, 0x24}}, 0x0) 09:59:09 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00000012c0)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) 09:59:09 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000012c0)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) close(r1) accept4$alg(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x0, 0x0, 0x0, 0x0, {{}, 0x0, 0x800b, 0x0, {0x8}}}, 0x24}}, 0x0) 09:59:09 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00000012c0)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) 09:59:09 executing program 1: fstat(0xffffffffffffffff, 0x0) fstat(0xffffffffffffff9c, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x80000000000003, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'ip6_vti0\x00', 0x0}) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000380)=0xd95, 0x4) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) 09:59:09 executing program 2: openat(0xffffffffffffffff, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x10400003) 09:59:10 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r2 = socket$kcm(0x10, 0x3, 0x0) setsockopt$sock_attach_bpf(r2, 0x10e, 0x4, &(0x7f0000000000)=r0, 0x4) r3 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x40) openat$cgroup_ro(r3, &(0x7f0000000140)='cpuset.effective_cpus\x00', 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) getpid() r4 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) r5 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r5, &(0x7f0000000540)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @ipv4}, 0x80, 0x0}, 0x24000001) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000080)='cgroup.type\x00', 0x2, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f00000002c0)='threaded\x00', 0x9) write$cgroup_int(r4, 0x0, 0x0) write$cgroup_int(r4, 0x0, 0x0) 09:59:10 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) 09:59:10 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000012c0)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) close(r1) accept4$alg(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x0, 0x0, 0x0, 0x0, {{}, 0x0, 0x800b, 0x0, {0x8}}}, 0x24}}, 0x0) 09:59:10 executing program 5: syz_mount_image$jfs(&(0x7f00000001c0)='jfs\x00', &(0x7f0000000280)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)={[{@errors_remount='errors=remount-ro'}, {@noquota='noquota'}, {@integrity='integrity'}], [], 0xfbffffff00000000}) 09:59:10 executing program 2: openat(0xffffffffffffffff, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x10400003) 09:59:10 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) 09:59:10 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000012c0)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) close(r1) accept4$alg(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x0, 0x0, 0x0, 0x0, {{}, 0x0, 0x800b, 0x0, {0x8}}}, 0x24}}, 0x0) 09:59:10 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) 09:59:10 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x10400003) 09:59:10 executing program 1: fstat(0xffffffffffffffff, 0x0) fstat(0xffffffffffffff9c, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x80000000000003, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'ip6_vti0\x00', 0x0}) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000380)=0xd95, 0x4) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) 09:59:10 executing program 5: syz_mount_image$jfs(&(0x7f00000001c0)='jfs\x00', &(0x7f0000000280)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)={[{@errors_remount='errors=remount-ro'}, {@noquota='noquota'}, {@integrity='integrity'}], [], 0xfdfdffff00000000}) 09:59:10 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000012c0)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) close(r1) accept4$alg(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x0, 0x0, 0x0, 0x0, {{}, 0x0, 0x800b, 0x0, {0x8}}}, 0x24}}, 0x0) [ 770.856658][ T2907] IPVS: ftp: loaded support on port[0] = 21 [ 770.920887][ T2907] chnl_net:caif_netlink_parms(): no params data found [ 770.948329][ T2907] bridge0: port 1(bridge_slave_0) entered blocking state [ 770.955482][ T2907] bridge0: port 1(bridge_slave_0) entered disabled state [ 770.963339][ T2907] device bridge_slave_0 entered promiscuous mode [ 770.971827][ T2907] bridge0: port 2(bridge_slave_1) entered blocking state [ 770.978998][ T2907] bridge0: port 2(bridge_slave_1) entered disabled state [ 770.986750][ T2907] device bridge_slave_1 entered promiscuous mode [ 771.004236][ T2907] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 771.014619][ T2907] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 771.034873][ T2907] team0: Port device team_slave_0 added [ 771.041629][ T2907] team0: Port device team_slave_1 added [ 771.251927][ T2907] device hsr_slave_0 entered promiscuous mode [ 771.299053][ T2907] device hsr_slave_1 entered promiscuous mode [ 771.419076][ T2907] bridge0: port 2(bridge_slave_1) entered blocking state [ 771.426128][ T2907] bridge0: port 2(bridge_slave_1) entered forwarding state [ 771.433453][ T2907] bridge0: port 1(bridge_slave_0) entered blocking state [ 771.440562][ T2907] bridge0: port 1(bridge_slave_0) entered forwarding state [ 771.476448][ T2907] 8021q: adding VLAN 0 to HW filter on device bond0 [ 771.489666][ T2162] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 771.498391][ T2162] bridge0: port 1(bridge_slave_0) entered disabled state [ 771.507132][ T2162] bridge0: port 2(bridge_slave_1) entered disabled state [ 771.516311][ T2162] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 771.604792][ T2907] 8021q: adding VLAN 0 to HW filter on device team0 [ 771.615509][ T1197] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 771.623950][ T1197] bridge0: port 1(bridge_slave_0) entered blocking state [ 771.631039][ T1197] bridge0: port 1(bridge_slave_0) entered forwarding state [ 771.646344][ T1153] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 771.654748][ T1153] bridge0: port 2(bridge_slave_1) entered blocking state [ 771.661850][ T1153] bridge0: port 2(bridge_slave_1) entered forwarding state [ 771.756061][ T1197] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 771.764723][ T1197] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 771.775629][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 771.873474][ T2907] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 771.883845][ T2907] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 771.895317][ T2622] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 771.903701][ T2622] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 771.913120][ T2622] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 772.007801][ T2907] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 772.226359][ T2916] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 772.236787][ T2916] CPU: 0 PID: 2916 Comm: syz-executor.3 Not tainted 5.2.0+ #37 [ 772.244322][ T2916] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 772.254359][ T2916] Call Trace: [ 772.257625][ T2916] dump_stack+0x1d8/0x2f8 [ 772.261946][ T2916] dump_header+0xd8/0x970 [ 772.266271][ T2916] oom_kill_process+0xcd/0x320 [ 772.271018][ T2916] out_of_memory+0x5e1/0x8a0 [ 772.275612][ T2916] ? unregister_oom_notifier+0x20/0x20 [ 772.281082][ T2916] ? trace_hardirqs_on+0x74/0x80 [ 772.286019][ T2916] memory_max_write+0x537/0x6a0 [ 772.290870][ T2916] ? lock_acquire+0x158/0x250 [ 772.295534][ T2916] ? memory_max_show+0xa0/0xa0 [ 772.300310][ T2916] ? trace_lock_acquire+0x154/0x1b0 [ 772.305495][ T2916] ? lock_acquire+0x158/0x250 [ 772.310152][ T2916] ? kernfs_fop_write+0x22e/0x4f0 [ 772.315170][ T2916] ? memory_max_show+0xa0/0xa0 [ 772.319914][ T2916] cgroup_file_write+0x27b/0x6e0 [ 772.324848][ T2916] ? cgroup_seqfile_stop+0xc0/0xc0 [ 772.329945][ T2916] ? cgroup_seqfile_stop+0xc0/0xc0 [ 772.335055][ T2916] kernfs_fop_write+0x3e4/0x4f0 [ 772.339893][ T2916] ? kernfs_fop_read+0x580/0x580 [ 772.344831][ T2916] __vfs_write+0xf9/0x7d0 [ 772.349160][ T2916] ? __lock_acquire+0x4750/0x4750 [ 772.354189][ T2916] ? __kernel_write+0x350/0x350 [ 772.359039][ T2916] ? trace_lock_acquire+0x154/0x1b0 [ 772.364229][ T2916] ? __sb_start_write+0x39c/0x440 [ 772.369237][ T2916] ? __kasan_check_read+0x11/0x20 [ 772.374245][ T2916] vfs_write+0x275/0x590 [ 772.378468][ T2916] ksys_write+0x16b/0x2a0 [ 772.382770][ T2916] ? __ia32_sys_read+0x90/0x90 [ 772.387506][ T2916] ? prepare_exit_to_usermode+0x1f7/0x580 [ 772.393222][ T2916] ? trace_irq_disable_rcuidle+0x23/0x1c0 [ 772.398936][ T2916] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 772.404376][ T2916] ? trace_irq_disable_rcuidle+0x23/0x1c0 [ 772.410092][ T2916] ? do_syscall_64+0x1d/0x140 [ 772.414754][ T2916] __x64_sys_write+0x7b/0x90 [ 772.419329][ T2916] do_syscall_64+0xfe/0x140 [ 772.423818][ T2916] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 772.429697][ T2916] RIP: 0033:0x459819 [ 772.433576][ T2916] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 772.453151][ T2916] RSP: 002b:00007fb6b2557c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 772.461534][ T2916] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459819 [ 772.469494][ T2916] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 772.477448][ T2916] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 772.485389][ T2916] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb6b25586d4 [ 772.493330][ T2916] R13: 00000000004c9774 R14: 00000000004e0b70 R15: 00000000ffffffff [ 772.501374][ T2916] memory: usage 3284kB, limit 0kB, failcnt 560280 [ 772.507773][ T2916] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 772.514654][ T2916] Memory cgroup stats for /syz3: [ 772.514727][ T2916] anon 2142208 [ 772.514727][ T2916] file 0 [ 772.514727][ T2916] kernel_stack 131072 [ 772.514727][ T2916] slab 856064 [ 772.514727][ T2916] sock 0 [ 772.514727][ T2916] shmem 0 [ 772.514727][ T2916] file_mapped 0 [ 772.514727][ T2916] file_dirty 0 [ 772.514727][ T2916] file_writeback 0 [ 772.514727][ T2916] anon_thp 2097152 [ 772.514727][ T2916] inactive_anon 0 [ 772.514727][ T2916] active_anon 2142208 [ 772.514727][ T2916] inactive_file 0 [ 772.514727][ T2916] active_file 0 [ 772.514727][ T2916] unevictable 0 [ 772.514727][ T2916] slab_reclaimable 270336 [ 772.514727][ T2916] slab_unreclaimable 585728 [ 772.514727][ T2916] pgfault 78705 [ 772.514727][ T2916] pgmajfault 0 [ 772.514727][ T2916] workingset_refault 0 [ 772.514727][ T2916] workingset_activate 0 [ 772.514727][ T2916] workingset_nodereclaim 0 [ 772.514727][ T2916] pgrefill 0 [ 772.514727][ T2916] pgscan 0 [ 772.514727][ T2916] pgsteal 0 [ 772.514727][ T2916] pgactivate 0 [ 772.608413][ T2916] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=2913,uid=0 [ 772.623768][ T2916] Memory cgroup out of memory: Killed process 2913 (syz-executor.3) total-vm:72840kB, anon-rss:2144kB, file-rss:34816kB, shmem-rss:0kB [ 772.645569][ T1057] oom_reaper: reaped process 2913 (syz-executor.3), now anon-rss:0kB, file-rss:34828kB, shmem-rss:0kB [ 772.766725][ T2907] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 772.776703][ T2907] CPU: 0 PID: 2907 Comm: syz-executor.3 Not tainted 5.2.0+ #37 [ 772.784250][ T2907] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 772.794304][ T2907] Call Trace: [ 772.797583][ T2907] dump_stack+0x1d8/0x2f8 [ 772.801901][ T2907] dump_header+0xd8/0x970 [ 772.806226][ T2907] oom_kill_process+0xcd/0x320 [ 772.810977][ T2907] out_of_memory+0x5e1/0x8a0 [ 772.815571][ T2907] ? unregister_oom_notifier+0x20/0x20 [ 772.821017][ T2907] ? __kasan_check_read+0x11/0x20 [ 772.826052][ T2907] try_charge+0x134a/0x17b0 [ 772.830575][ T2907] ? __memcg_kmem_charge_memcg+0x180/0x180 [ 772.836402][ T2907] ? __lock_acquire+0x4750/0x4750 [ 772.841427][ T2907] ? rcu_lock_release+0x15/0x20 [ 772.846290][ T2907] ? get_mem_cgroup_from_mm+0x15e/0x170 [ 772.851844][ T2907] mem_cgroup_try_charge+0x216/0x560 [ 772.857140][ T2907] mem_cgroup_try_charge_delay+0x25/0xa0 [ 772.862772][ T2907] wp_page_copy+0x367/0x18c0 [ 772.867365][ T2907] ? rcu_lock_release+0x30/0x30 [ 772.872233][ T2907] ? __lock_acquire+0x4750/0x4750 [ 772.877275][ T2907] ? __kasan_check_read+0x11/0x20 [ 772.882293][ T2907] ? do_raw_spin_unlock+0x49/0x260 [ 772.887393][ T2907] do_wp_page+0x2c9/0x1ce0 [ 772.891808][ T2907] ? __rwlock_init+0x130/0x130 [ 772.896559][ T2907] ? count_memcg_event_mm+0x300/0x300 [ 772.901922][ T2907] handle_mm_fault+0x2bcf/0x6080 [ 772.906868][ T2907] ? finish_fault+0x230/0x230 [ 772.911572][ T2907] ? vmacache_find+0x566/0x5b0 [ 772.916323][ T2907] ? vmacache_update+0xb7/0x120 [ 772.921180][ T2907] do_user_addr_fault+0x589/0xaf0 [ 772.926201][ T2907] __do_page_fault+0xd3/0x1f0 [ 772.930907][ T2907] do_page_fault+0x99/0xb0 [ 772.935315][ T2907] page_fault+0x39/0x40 [ 772.939462][ T2907] RIP: 0033:0x4308f6 [ 772.943411][ T2907] Code: 1f 44 00 00 48 29 e8 31 c9 48 81 fb 40 56 71 00 0f 95 c1 48 8d 34 2a 48 83 cd 01 48 c1 e1 02 48 83 c8 01 48 09 e9 48 89 73 58 <48> 89 4a 08 48 89 46 08 48 8d 4a 10 8b 05 6c 46 64 00 85 c0 0f 84 [ 772.963024][ T2907] RSP: 002b:00007ffd7382a840 EFLAGS: 00010206 [ 772.969085][ T2907] RAX: 0000000000019691 RBX: 0000000000715640 RCX: 0000000000008041 [ 772.977044][ T2907] RDX: 00005555569a2930 RSI: 00005555569aa970 RDI: 0000000000000003 [ 772.984998][ T2907] RBP: 0000000000008041 R08: 0000000000000001 R09: 00005555569a1940 [ 772.992972][ T2907] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000715698 [ 773.000936][ T2907] R13: 0000000000715698 R14: 0000000000000000 R15: 0000000000002710 [ 773.010166][ T2907] memory: usage 912kB, limit 0kB, failcnt 560293 [ 773.016491][ T2907] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 773.023363][ T2907] Memory cgroup stats for /syz3: [ 773.023453][ T2907] anon 0 [ 773.023453][ T2907] file 0 [ 773.023453][ T2907] kernel_stack 0 [ 773.023453][ T2907] slab 856064 [ 773.023453][ T2907] sock 0 [ 773.023453][ T2907] shmem 0 [ 773.023453][ T2907] file_mapped 0 [ 773.023453][ T2907] file_dirty 0 [ 773.023453][ T2907] file_writeback 0 [ 773.023453][ T2907] anon_thp 0 [ 773.023453][ T2907] inactive_anon 0 [ 773.023453][ T2907] active_anon 0 [ 773.023453][ T2907] inactive_file 0 [ 773.023453][ T2907] active_file 0 [ 773.023453][ T2907] unevictable 0 [ 773.023453][ T2907] slab_reclaimable 270336 [ 773.023453][ T2907] slab_unreclaimable 585728 [ 773.023453][ T2907] pgfault 78705 [ 773.023453][ T2907] pgmajfault 0 [ 773.023453][ T2907] workingset_refault 0 [ 773.023453][ T2907] workingset_activate 0 [ 773.023453][ T2907] workingset_nodereclaim 0 [ 773.023453][ T2907] pgrefill 0 [ 773.023453][ T2907] pgscan 0 [ 773.023453][ T2907] pgsteal 0 [ 773.023453][ T2907] pgactivate 0 [ 773.023453][ T2907] pgdeactivate 0 09:59:14 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r2 = socket$kcm(0x10, 0x3, 0x0) setsockopt$sock_attach_bpf(r2, 0x10e, 0x4, &(0x7f0000000000)=r0, 0x4) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x40) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) getpid() r3 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) r4 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r4, &(0x7f0000000540)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @ipv4}, 0x80, 0x0}, 0x24000001) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000080)='cgroup.type\x00', 0x2, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f00000002c0)='threaded\x00', 0x9) write$cgroup_int(r3, 0x0, 0x0) write$cgroup_int(r3, 0x0, 0x0) 09:59:14 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000012c0), 0x0) 09:59:14 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000012c0)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) close(r1) accept4$alg(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x0, 0x0, 0x0, 0x0, {{}, 0x0, 0x800b, 0x0, {0x8}}}, 0x24}}, 0x0) 09:59:14 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x10400003) 09:59:14 executing program 5: syz_mount_image$jfs(&(0x7f00000001c0)='jfs\x00', &(0x7f0000000280)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)={[{@errors_remount='errors=remount-ro'}, {@noquota='noquota'}, {@integrity='integrity'}], [], 0xfdffffff00000000}) 09:59:14 executing program 1: fstat(0xffffffffffffffff, 0x0) fstat(0xffffffffffffff9c, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x80000000000003, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'ip6_vti0\x00', 0x0}) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000380)=0xd95, 0x4) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) [ 773.118636][ T2907] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=2907,uid=0 [ 773.133973][ T2907] Memory cgroup out of memory: Killed process 2907 (syz-executor.3) total-vm:72444kB, anon-rss:76kB, file-rss:34832kB, shmem-rss:0kB 09:59:14 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00000012c0)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) close(r1) accept4$alg(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x0, 0x0, 0x0, 0x0, {{}, 0x0, 0x800b, 0x0, {0x8}}}, 0x24}}, 0x0) [ 773.158311][ T1057] oom_reaper: reaped process 2907 (syz-executor.3), now anon-rss:0kB, file-rss:33936kB, shmem-rss:0kB 09:59:14 executing program 2: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x10400003) 09:59:14 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000012c0), 0x0) [ 773.220254][ T821] device bridge_slave_1 left promiscuous mode [ 773.226433][ T821] bridge0: port 2(bridge_slave_1) entered disabled state 09:59:14 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00000012c0)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) close(r1) accept4$alg(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x0, 0x0, 0x0, 0x0, {{}, 0x0, 0x800b, 0x0, {0x8}}}, 0x24}}, 0x0) [ 773.281361][ T821] device bridge_slave_0 left promiscuous mode [ 773.287643][ T821] bridge0: port 1(bridge_slave_0) entered disabled state 09:59:14 executing program 1: fstat(0xffffffffffffffff, 0x0) fstat(0xffffffffffffff9c, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x80000000000003, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'ip6_vti0\x00', 0x0}) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, 0x0, 0x0) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) 09:59:14 executing program 5: syz_mount_image$jfs(&(0x7f00000001c0)='jfs\x00', &(0x7f0000000280)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)={[{@errors_remount='errors=remount-ro'}, {@noquota='noquota'}, {@integrity='integrity'}], [], 0xfeffffff00000000}) [ 775.249545][ T821] device hsr_slave_0 left promiscuous mode [ 775.289615][ T821] device hsr_slave_1 left promiscuous mode [ 775.338880][ T821] team0 (unregistering): Port device team_slave_1 removed [ 775.352442][ T821] team0 (unregistering): Port device team_slave_0 removed [ 775.364325][ T821] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 775.433386][ T821] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 775.502208][ T821] bond0 (unregistering): Released all slaves 09:59:17 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r2 = socket$kcm(0x10, 0x3, 0x0) setsockopt$sock_attach_bpf(r2, 0x10e, 0x4, &(0x7f0000000000)=r0, 0x4) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x40) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) getpid() r3 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) r4 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r4, &(0x7f0000000540)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @ipv4}, 0x80, 0x0}, 0x24000001) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000080)='cgroup.type\x00', 0x2, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f00000002c0)='threaded\x00', 0x9) write$cgroup_int(r3, 0x0, 0x0) write$cgroup_int(r3, 0x0, 0x0) 09:59:17 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000012c0), 0x0) 09:59:17 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00000012c0)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) close(r1) accept4$alg(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x0, 0x0, 0x0, 0x0, {{}, 0x0, 0x800b, 0x0, {0x8}}}, 0x24}}, 0x0) 09:59:17 executing program 2: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x10400003) 09:59:17 executing program 5: syz_mount_image$jfs(&(0x7f00000001c0)='jfs\x00', &(0x7f0000000280)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)={[{@errors_remount='errors=remount-ro'}, {@noquota='noquota'}, {@integrity='integrity'}], [], 0xff0f000000000000}) 09:59:17 executing program 1: fstat(0xffffffffffffffff, 0x0) fstat(0xffffffffffffff9c, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x80000000000003, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'ip6_vti0\x00', 0x0}) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, 0x0, 0x0) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) 09:59:17 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) close(r1) accept4$alg(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x0, 0x0, 0x0, 0x0, {{}, 0x0, 0x800b, 0x0, {0x8}}}, 0x24}}, 0x0) 09:59:17 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000012c0)="0a0775b005e381e5", 0x8) 09:59:17 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r2 = socket$kcm(0x10, 0x3, 0x0) setsockopt$sock_attach_bpf(r2, 0x10e, 0x4, &(0x7f0000000000)=r0, 0x4) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x40) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) getpid() r3 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) r4 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r4, &(0x7f0000000540)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @ipv4}, 0x80, 0x0}, 0x24000001) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000080)='cgroup.type\x00', 0x2, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f00000002c0)='threaded\x00', 0x9) write$cgroup_int(r3, 0x0, 0x0) write$cgroup_int(r3, 0x0, 0x0) 09:59:17 executing program 5: syz_mount_image$jfs(&(0x7f00000001c0)='jfs\x00', &(0x7f0000000280)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)={[{@errors_remount='errors=remount-ro'}, {@noquota='noquota'}, {@integrity='integrity'}], [], 0xffefffff00000000}) 09:59:17 executing program 2: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x10400003) 09:59:17 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) close(r1) accept4$alg(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x0, 0x0, 0x0, 0x0, {{}, 0x0, 0x800b, 0x0, {0x8}}}, 0x24}}, 0x0) 09:59:17 executing program 1: fstat(0xffffffffffffffff, 0x0) fstat(0xffffffffffffff9c, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x80000000000003, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'ip6_vti0\x00', 0x0}) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, 0x0, 0x0) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) 09:59:17 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000012c0)="0a0775b005e381e5", 0x8) 09:59:17 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000012c0)="0a0775b005e381e5", 0x8) 09:59:17 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) close(r1) accept4$alg(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x0, 0x0, 0x0, 0x0, {{}, 0x0, 0x800b, 0x0, {0x8}}}, 0x24}}, 0x0) 09:59:17 executing program 5: syz_mount_image$jfs(&(0x7f00000001c0)='jfs\x00', &(0x7f0000000280)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)={[{@errors_remount='errors=remount-ro'}, {@noquota='noquota'}, {@integrity='integrity'}], [], 0xffff000000000000}) 09:59:17 executing program 2: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x10400003) 09:59:18 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000012c0)="0a0775b005e381e5b3b60ced", 0xc) 09:59:18 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000012c0), 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) close(r1) accept4$alg(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x0, 0x0, 0x0, 0x0, {{}, 0x0, 0x800b, 0x0, {0x8}}}, 0x24}}, 0x0) [ 778.289567][ T3022] IPVS: ftp: loaded support on port[0] = 21 [ 778.431562][ T3022] chnl_net:caif_netlink_parms(): no params data found [ 778.458525][ T3022] bridge0: port 1(bridge_slave_0) entered blocking state [ 778.465677][ T3022] bridge0: port 1(bridge_slave_0) entered disabled state [ 778.473641][ T3022] device bridge_slave_0 entered promiscuous mode [ 778.481502][ T3022] bridge0: port 2(bridge_slave_1) entered blocking state [ 778.488560][ T3022] bridge0: port 2(bridge_slave_1) entered disabled state [ 778.496254][ T3022] device bridge_slave_1 entered promiscuous mode [ 778.583925][ T3022] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 778.594287][ T3022] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 778.611302][ T3022] team0: Port device team_slave_0 added [ 778.617761][ T3022] team0: Port device team_slave_1 added [ 778.741711][ T3022] device hsr_slave_0 entered promiscuous mode [ 778.779060][ T3022] device hsr_slave_1 entered promiscuous mode [ 778.818978][ T3022] debugfs: Directory 'hsr0' with parent '/' already present! [ 778.903344][ T3022] bridge0: port 2(bridge_slave_1) entered blocking state [ 778.910420][ T3022] bridge0: port 2(bridge_slave_1) entered forwarding state [ 778.917691][ T3022] bridge0: port 1(bridge_slave_0) entered blocking state [ 778.924766][ T3022] bridge0: port 1(bridge_slave_0) entered forwarding state [ 778.962288][ T3022] 8021q: adding VLAN 0 to HW filter on device bond0 [ 779.047534][ T3022] 8021q: adding VLAN 0 to HW filter on device team0 [ 779.054528][ T1153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 779.063737][ T1153] bridge0: port 1(bridge_slave_0) entered disabled state [ 779.071292][ T1153] bridge0: port 2(bridge_slave_1) entered disabled state [ 779.080416][ T1153] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 779.180896][ T2622] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 779.189347][ T2622] bridge0: port 1(bridge_slave_0) entered blocking state [ 779.196395][ T2622] bridge0: port 1(bridge_slave_0) entered forwarding state [ 779.203958][ T2622] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 779.212506][ T2622] bridge0: port 2(bridge_slave_1) entered blocking state [ 779.219601][ T2622] bridge0: port 2(bridge_slave_1) entered forwarding state [ 779.227763][ T2622] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 779.237593][ T2622] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 779.247727][ T2622] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 779.329620][ T2823] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 779.344755][ T3022] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 779.355662][ T3022] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 779.364914][ T1197] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 779.374642][ T821] device bridge_slave_1 left promiscuous mode [ 779.381120][ T821] bridge0: port 2(bridge_slave_1) entered disabled state [ 779.431729][ T821] device bridge_slave_0 left promiscuous mode [ 779.438021][ T821] bridge0: port 1(bridge_slave_0) entered disabled state [ 781.159719][ T821] device hsr_slave_0 left promiscuous mode [ 781.228978][ T821] device hsr_slave_1 left promiscuous mode [ 781.286080][ T821] team0 (unregistering): Port device team_slave_1 removed [ 781.299939][ T821] team0 (unregistering): Port device team_slave_0 removed [ 781.312746][ T821] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 781.364529][ T821] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 781.443217][ T821] bond0 (unregistering): Released all slaves [ 781.560318][ T3022] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 781.741373][ T3030] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 781.751801][ T3030] CPU: 0 PID: 3030 Comm: syz-executor.3 Not tainted 5.2.0+ #37 [ 781.759342][ T3030] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 781.769395][ T3030] Call Trace: [ 781.772691][ T3030] dump_stack+0x1d8/0x2f8 [ 781.777025][ T3030] dump_header+0xd8/0x970 [ 781.781369][ T3030] oom_kill_process+0xcd/0x320 [ 781.786144][ T3030] out_of_memory+0x5e1/0x8a0 [ 781.790743][ T3030] ? unregister_oom_notifier+0x20/0x20 [ 781.796215][ T3030] memory_max_write+0x537/0x6a0 [ 781.801074][ T3030] ? memory_max_show+0xa0/0xa0 [ 781.805842][ T3030] ? memory_max_show+0xa0/0xa0 [ 781.810602][ T3030] cgroup_file_write+0x27b/0x6e0 [ 781.815576][ T3030] ? cgroup_seqfile_stop+0xc0/0xc0 [ 781.820709][ T3030] ? kernfs_fop_write+0x349/0x4f0 [ 781.825735][ T3030] ? cgroup_seqfile_stop+0xc0/0xc0 [ 781.830851][ T3030] kernfs_fop_write+0x3e4/0x4f0 [ 781.835706][ T3030] ? kernfs_fop_read+0x580/0x580 [ 781.840645][ T3030] __vfs_write+0xf9/0x7d0 [ 781.844975][ T3030] ? retint_kernel+0x10/0x10 [ 781.849575][ T3030] ? __kernel_write+0x350/0x350 [ 781.854422][ T3030] ? rcu_irq_exit+0xe3/0x260 [ 781.859036][ T3030] ? __sb_start_write+0x39c/0x440 [ 781.864084][ T3030] vfs_write+0x275/0x590 [ 781.868332][ T3030] ksys_write+0x16b/0x2a0 [ 781.872659][ T3030] ? __ia32_sys_read+0x90/0x90 [ 781.877416][ T3030] ? prepare_exit_to_usermode+0x1f7/0x580 [ 781.883143][ T3030] ? trace_irq_disable_rcuidle+0x23/0x1c0 [ 781.888868][ T3030] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 781.894325][ T3030] ? trace_irq_disable_rcuidle+0x23/0x1c0 [ 781.900054][ T3030] ? do_syscall_64+0x1d/0x140 [ 781.904730][ T3030] __x64_sys_write+0x7b/0x90 [ 781.909321][ T3030] do_syscall_64+0xfe/0x140 [ 781.913827][ T3030] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 781.919714][ T3030] RIP: 0033:0x459819 [ 781.923600][ T3030] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 781.943200][ T3030] RSP: 002b:00007f00f04bdc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 781.951618][ T3030] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459819 [ 781.959584][ T3030] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 781.967566][ T3030] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 781.975538][ T3030] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f00f04be6d4 [ 781.983507][ T3030] R13: 00000000004c9774 R14: 00000000004e0b70 R15: 00000000ffffffff [ 782.001158][ T3030] memory: usage 3240kB, limit 0kB, failcnt 560302 [ 782.007743][ T3030] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 782.014863][ T3030] Memory cgroup stats for /syz3: [ 782.016820][ T3030] anon 2199552 [ 782.016820][ T3030] file 0 [ 782.016820][ T3030] kernel_stack 0 [ 782.016820][ T3030] slab 856064 [ 782.016820][ T3030] sock 0 [ 782.016820][ T3030] shmem 0 [ 782.016820][ T3030] file_mapped 0 [ 782.016820][ T3030] file_dirty 0 [ 782.016820][ T3030] file_writeback 0 [ 782.016820][ T3030] anon_thp 2097152 [ 782.016820][ T3030] inactive_anon 0 [ 782.016820][ T3030] active_anon 2199552 [ 782.016820][ T3030] inactive_file 0 [ 782.016820][ T3030] active_file 0 [ 782.016820][ T3030] unevictable 0 [ 782.016820][ T3030] slab_reclaimable 270336 [ 782.016820][ T3030] slab_unreclaimable 585728 [ 782.016820][ T3030] pgfault 78771 [ 782.016820][ T3030] pgmajfault 0 [ 782.016820][ T3030] workingset_refault 0 [ 782.016820][ T3030] workingset_activate 0 [ 782.016820][ T3030] workingset_nodereclaim 0 [ 782.016820][ T3030] pgrefill 0 [ 782.016820][ T3030] pgscan 0 [ 782.016820][ T3030] pgsteal 0 [ 782.016820][ T3030] pgactivate 0 [ 782.110364][ T3030] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=3029,uid=0 [ 782.126441][ T3030] Memory cgroup out of memory: Killed process 3029 (syz-executor.3) total-vm:72708kB, anon-rss:2140kB, file-rss:34816kB, shmem-rss:0kB [ 782.144684][ T1057] oom_reaper: reaped process 3029 (syz-executor.3), now anon-rss:0kB, file-rss:33856kB, shmem-rss:0kB 09:59:23 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r2 = socket$kcm(0x10, 0x3, 0x0) setsockopt$sock_attach_bpf(r2, 0x10e, 0x4, &(0x7f0000000000)=r0, 0x4) r3 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_ro(r3, &(0x7f0000000140)='cpuset.effective_cpus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) getpid() r4 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) r5 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r5, &(0x7f0000000540)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @ipv4}, 0x80, 0x0}, 0x24000001) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000080)='cgroup.type\x00', 0x2, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f00000002c0)='threaded\x00', 0x9) write$cgroup_int(r4, 0x0, 0x0) write$cgroup_int(r4, 0x0, 0x0) 09:59:23 executing program 2: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x10400003) 09:59:23 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000012c0)="0a0775b005e381e5b3b60ced", 0xc) 09:59:23 executing program 5: syz_mount_image$jfs(&(0x7f00000001c0)='jfs\x00', &(0x7f0000000280)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)={[{@errors_remount='errors=remount-ro'}, {@noquota='noquota'}, {@integrity='integrity'}], [], 0xffffff7f00000000}) 09:59:23 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000012c0), 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) close(r1) accept4$alg(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x0, 0x0, 0x0, 0x0, {{}, 0x0, 0x800b, 0x0, {0x8}}}, 0x24}}, 0x0) 09:59:23 executing program 1: fstat(0xffffffffffffffff, 0x0) fstat(0xffffffffffffff9c, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x80000000000003, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'ip6_vti0\x00', 0x0}) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000380), 0x4) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) [ 782.295751][ T3022] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 782.305771][ T3022] CPU: 1 PID: 3022 Comm: syz-executor.3 Not tainted 5.2.0+ #37 [ 782.313313][ T3022] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 782.323363][ T3022] Call Trace: [ 782.326658][ T3022] dump_stack+0x1d8/0x2f8 [ 782.330981][ T3022] dump_header+0xd8/0x970 [ 782.335308][ T3022] oom_kill_process+0xcd/0x320 [ 782.340063][ T3022] out_of_memory+0x5e1/0x8a0 [ 782.344644][ T3022] ? unregister_oom_notifier+0x20/0x20 [ 782.350122][ T3022] ? __kasan_check_read+0x11/0x20 [ 782.355151][ T3022] try_charge+0x134a/0x17b0 [ 782.359668][ T3022] ? __memcg_kmem_charge_memcg+0x180/0x180 [ 782.365473][ T3022] ? __lock_acquire+0x4750/0x4750 [ 782.370513][ T3022] ? rcu_lock_release+0x15/0x20 [ 782.375377][ T3022] ? get_mem_cgroup_from_mm+0x15e/0x170 [ 782.380926][ T3022] mem_cgroup_try_charge+0x216/0x560 [ 782.386209][ T3022] mem_cgroup_try_charge_delay+0x25/0xa0 [ 782.391839][ T3022] wp_page_copy+0x367/0x18c0 [ 782.396445][ T3022] ? rcu_lock_release+0x30/0x30 [ 782.401283][ T3022] ? __lock_acquire+0x4750/0x4750 [ 782.406295][ T3022] ? __kasan_check_read+0x11/0x20 [ 782.411300][ T3022] ? do_raw_spin_unlock+0x49/0x260 [ 782.416395][ T3022] do_wp_page+0x2c9/0x1ce0 [ 782.420803][ T3022] ? __rwlock_init+0x130/0x130 [ 782.425556][ T3022] ? count_memcg_event_mm+0x300/0x300 [ 782.430930][ T3022] handle_mm_fault+0x2bcf/0x6080 [ 782.435874][ T3022] ? finish_fault+0x230/0x230 [ 782.440546][ T3022] ? vmacache_find+0x566/0x5b0 [ 782.445299][ T3022] ? vmacache_update+0xb7/0x120 [ 782.450140][ T3022] do_user_addr_fault+0x589/0xaf0 [ 782.455154][ T3022] __do_page_fault+0xd3/0x1f0 [ 782.459824][ T3022] do_page_fault+0x99/0xb0 [ 782.464225][ T3022] page_fault+0x39/0x40 [ 782.468369][ T3022] RIP: 0033:0x4308f6 [ 782.472251][ T3022] Code: 1f 44 00 00 48 29 e8 31 c9 48 81 fb 40 56 71 00 0f 95 c1 48 8d 34 2a 48 83 cd 01 48 c1 e1 02 48 83 c8 01 48 09 e9 48 89 73 58 <48> 89 4a 08 48 89 46 08 48 8d 4a 10 8b 05 6c 46 64 00 85 c0 0f 84 [ 782.491841][ T3022] RSP: 002b:00007fff3a387310 EFLAGS: 00010206 [ 782.497888][ T3022] RAX: 0000000000019691 RBX: 0000000000715640 RCX: 0000000000008041 [ 782.505851][ T3022] RDX: 0000555555ada930 RSI: 0000555555ae2970 RDI: 0000000000000003 [ 782.513805][ T3022] RBP: 0000000000008041 R08: 0000000000000001 R09: 0000555555ad9940 [ 782.521795][ T3022] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000715698 [ 782.529761][ T3022] R13: 0000000000715698 R14: 0000000000000000 R15: 0000000000002710 [ 782.538023][ T3022] memory: usage 904kB, limit 0kB, failcnt 560315 [ 782.544381][ T3022] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 782.551315][ T3022] Memory cgroup stats for /syz3: [ 782.551384][ T3022] anon 61440 [ 782.551384][ T3022] file 0 [ 782.551384][ T3022] kernel_stack 0 [ 782.551384][ T3022] slab 856064 [ 782.551384][ T3022] sock 0 [ 782.551384][ T3022] shmem 0 [ 782.551384][ T3022] file_mapped 0 [ 782.551384][ T3022] file_dirty 0 [ 782.551384][ T3022] file_writeback 0 [ 782.551384][ T3022] anon_thp 0 [ 782.551384][ T3022] inactive_anon 0 [ 782.551384][ T3022] active_anon 61440 [ 782.551384][ T3022] inactive_file 0 [ 782.551384][ T3022] active_file 0 [ 782.551384][ T3022] unevictable 0 [ 782.551384][ T3022] slab_reclaimable 270336 [ 782.551384][ T3022] slab_unreclaimable 585728 [ 782.551384][ T3022] pgfault 78771 [ 782.551384][ T3022] pgmajfault 0 [ 782.551384][ T3022] workingset_refault 0 [ 782.551384][ T3022] workingset_activate 0 [ 782.551384][ T3022] workingset_nodereclaim 0 [ 782.551384][ T3022] pgrefill 0 [ 782.551384][ T3022] pgscan 0 [ 782.551384][ T3022] pgsteal 0 [ 782.551384][ T3022] pgactivate 0 [ 782.551384][ T3022] pgdeactivate 0 [ 782.647162][ T3022] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=3022,uid=0 [ 782.662564][ T3022] Memory cgroup out of memory: Killed process 3022 (syz-executor.3) total-vm:72444kB, anon-rss:72kB, file-rss:34832kB, shmem-rss:0kB [ 782.676865][ T1057] oom_reaper: reaped process 3022 (syz-executor.3), now anon-rss:0kB, file-rss:33936kB, shmem-rss:0kB 09:59:24 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000012c0)="0a0775b005e381e5b3b60ced", 0xc) 09:59:24 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000012c0), 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) close(r1) accept4$alg(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x0, 0x0, 0x0, 0x0, {{}, 0x0, 0x800b, 0x0, {0x8}}}, 0x24}}, 0x0) 09:59:24 executing program 5: syz_mount_image$jfs(&(0x7f00000001c0)='jfs\x00', &(0x7f0000000280)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)={[{@errors_remount='errors=remount-ro'}, {@noquota='noquota'}, {@integrity='integrity'}], [], 0xffffffff00000000}) 09:59:24 executing program 2: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x10400003) 09:59:24 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000012c0)="0a0775b005e381e5", 0x8) r1 = socket$inet_udplite(0x2, 0x2, 0x88) close(r1) accept4$alg(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x0, 0x0, 0x0, 0x0, {{}, 0x0, 0x800b, 0x0, {0x8}}}, 0x24}}, 0x0) 09:59:24 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000012c0)="0a0775b005e381e5b3b60ced5c54", 0xe) 09:59:25 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r2 = socket$kcm(0x10, 0x3, 0x0) setsockopt$sock_attach_bpf(r2, 0x10e, 0x4, &(0x7f0000000000)=r0, 0x4) r3 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_ro(r3, &(0x7f0000000140)='cpuset.effective_cpus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) getpid() r4 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) r5 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r5, &(0x7f0000000540)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @ipv4}, 0x80, 0x0}, 0x24000001) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000080)='cgroup.type\x00', 0x2, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f00000002c0)='threaded\x00', 0x9) write$cgroup_int(r4, 0x0, 0x0) write$cgroup_int(r4, 0x0, 0x0) 09:59:25 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000012c0)="0a0775b005e381e5", 0x8) r1 = socket$inet_udplite(0x2, 0x2, 0x88) close(r1) accept4$alg(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x0, 0x0, 0x0, 0x0, {{}, 0x0, 0x800b, 0x0, {0x8}}}, 0x24}}, 0x0) 09:59:25 executing program 1: fstat(0xffffffffffffffff, 0x0) fstat(0xffffffffffffff9c, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x80000000000003, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'ip6_vti0\x00', 0x0}) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000380), 0x4) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) 09:59:25 executing program 5: syz_mount_image$jfs(&(0x7f00000001c0)='jfs\x00', &(0x7f0000000280)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)={[{@errors_remount='errors=remount-ro'}, {@noquota='noquota'}, {@integrity='integrity'}], [], 0xffffffffffff0700}) 09:59:25 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x10400003) 09:59:25 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000012c0)="0a0775b005e381e5b3b60ced5c54", 0xe) 09:59:25 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000012c0)="0a0775b005e381e5", 0x8) r1 = socket$inet_udplite(0x2, 0x2, 0x88) close(r1) accept4$alg(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x0, 0x0, 0x0, 0x0, {{}, 0x0, 0x800b, 0x0, {0x8}}}, 0x24}}, 0x0) 09:59:25 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000012c0)="0a0775b005e381e5b3b60ced5c54", 0xe) 09:59:25 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r2 = socket$kcm(0x10, 0x3, 0x0) setsockopt$sock_attach_bpf(r2, 0x10e, 0x4, &(0x7f0000000000)=r0, 0x4) r3 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_ro(r3, &(0x7f0000000140)='cpuset.effective_cpus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) getpid() r4 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) r5 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r5, &(0x7f0000000540)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @ipv4}, 0x80, 0x0}, 0x24000001) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000080)='cgroup.type\x00', 0x2, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f00000002c0)='threaded\x00', 0x9) write$cgroup_int(r4, 0x0, 0x0) write$cgroup_int(r4, 0x0, 0x0) 09:59:25 executing program 5: syz_mount_image$jfs(&(0x7f00000001c0)='jfs\x00', &(0x7f0000000280)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)={[{@errors_remount='errors=remount-ro'}, {@noquota='noquota'}, {@integrity='integrity'}], [], 0xffffffffffffff7f}) 09:59:25 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x10400003) 09:59:25 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000012c0)="0a0775b005e381e5b3b60ced5c54db", 0xf) 09:59:25 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000012c0)="0a0775b005e381e5b3b60ced", 0xc) r1 = socket$inet_udplite(0x2, 0x2, 0x88) close(r1) accept4$alg(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x0, 0x0, 0x0, 0x0, {{}, 0x0, 0x800b, 0x0, {0x8}}}, 0x24}}, 0x0) [ 783.804556][ T3103] jfs: Unrecognized mount option "" or missing value 09:59:25 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000012c0)="0a0775b005e381e5b3b60ced5c54db", 0xf) 09:59:25 executing program 1: fstat(0xffffffffffffffff, 0x0) fstat(0xffffffffffffff9c, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x80000000000003, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'ip6_vti0\x00', 0x0}) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000380), 0x4) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) [ 783.915361][ T3103] jfs: Unrecognized mount option "" or missing value 09:59:25 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x10400003) 09:59:25 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000012c0)="0a0775b005e381e5b3b60ced", 0xc) r1 = socket$inet_udplite(0x2, 0x2, 0x88) close(r1) accept4$alg(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x0, 0x0, 0x0, 0x0, {{}, 0x0, 0x800b, 0x0, {0x8}}}, 0x24}}, 0x0) 09:59:25 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000012c0)="0a0775b005e381e5b3b60ced5c54db", 0xf) 09:59:25 executing program 5: syz_mount_image$jfs(&(0x7f00000001c0)='jfs\x00', &(0x7f0000000280)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)={[{@errors_remount='errors=remount-ro'}, {@noquota='noquota'}, {@integrity='integrity'}], [], 0xffffffffffffffff}) 09:59:25 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000012c0)="0a0775b005e381e5b3b60ced", 0xc) r1 = socket$inet_udplite(0x2, 0x2, 0x88) close(r1) accept4$alg(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x0, 0x0, 0x0, 0x0, {{}, 0x0, 0x800b, 0x0, {0x8}}}, 0x24}}, 0x0) [ 784.174203][ T3131] jfs: Unrecognized mount option "ÿ" or missing value [ 784.280996][ T3131] jfs: Unrecognized mount option "ÿ" or missing value [ 785.730418][ T3152] IPVS: ftp: loaded support on port[0] = 21 [ 785.865319][ T3152] chnl_net:caif_netlink_parms(): no params data found [ 785.893174][ T3152] bridge0: port 1(bridge_slave_0) entered blocking state [ 785.900268][ T3152] bridge0: port 1(bridge_slave_0) entered disabled state [ 785.907701][ T3152] device bridge_slave_0 entered promiscuous mode [ 785.915172][ T3152] bridge0: port 2(bridge_slave_1) entered blocking state [ 785.922315][ T3152] bridge0: port 2(bridge_slave_1) entered disabled state [ 785.930186][ T3152] device bridge_slave_1 entered promiscuous mode [ 785.941551][ T821] device bridge_slave_1 left promiscuous mode [ 785.947721][ T821] bridge0: port 2(bridge_slave_1) entered disabled state [ 785.990100][ T821] device bridge_slave_0 left promiscuous mode [ 785.996273][ T821] bridge0: port 1(bridge_slave_0) entered disabled state [ 787.759824][ T821] device hsr_slave_0 left promiscuous mode [ 787.808938][ T821] device hsr_slave_1 left promiscuous mode [ 787.874855][ T821] team0 (unregistering): Port device team_slave_1 removed [ 787.887399][ T821] team0 (unregistering): Port device team_slave_0 removed [ 787.898028][ T821] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 787.934149][ T821] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 788.000769][ T821] bond0 (unregistering): Released all slaves [ 788.118727][ T3152] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 788.129485][ T3152] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 788.145551][ T3152] team0: Port device team_slave_0 added [ 788.152615][ T3152] team0: Port device team_slave_1 added [ 788.201436][ T3152] device hsr_slave_0 entered promiscuous mode [ 788.248930][ T3152] device hsr_slave_1 entered promiscuous mode [ 788.364770][ T3152] 8021q: adding VLAN 0 to HW filter on device bond0 [ 788.408106][ T2823] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 788.419013][ T2823] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 788.426826][ T2823] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 788.438459][ T3152] 8021q: adding VLAN 0 to HW filter on device team0 [ 788.482891][ T2823] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 788.491573][ T2823] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 788.499914][ T2823] bridge0: port 1(bridge_slave_0) entered blocking state [ 788.506965][ T2823] bridge0: port 1(bridge_slave_0) entered forwarding state [ 788.514483][ T2823] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 788.523002][ T2823] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 788.531359][ T2823] bridge0: port 2(bridge_slave_1) entered blocking state [ 788.538412][ T2823] bridge0: port 2(bridge_slave_1) entered forwarding state [ 788.545923][ T2823] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 788.554501][ T2823] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 788.563199][ T2823] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 788.571733][ T2823] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 788.580024][ T2823] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 788.588192][ T2823] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 788.597738][ T2823] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 788.605761][ T2823] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 788.616663][ T3152] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 788.648288][ T3152] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 788.845236][ T3163] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 788.855591][ T3163] CPU: 0 PID: 3163 Comm: syz-executor.3 Not tainted 5.2.0+ #37 [ 788.863118][ T3163] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 788.873154][ T3163] Call Trace: [ 788.876457][ T3163] dump_stack+0x1d8/0x2f8 [ 788.880813][ T3163] dump_header+0xd8/0x970 [ 788.885130][ T3163] oom_kill_process+0xcd/0x320 [ 788.889917][ T3163] out_of_memory+0x5e1/0x8a0 [ 788.894498][ T3163] ? unregister_oom_notifier+0x20/0x20 [ 788.899989][ T3163] memory_max_write+0x537/0x6a0 [ 788.904840][ T3163] ? lock_acquire+0x158/0x250 [ 788.909515][ T3163] ? memory_max_show+0xa0/0xa0 [ 788.914265][ T3163] ? trace_hardirqs_on_caller+0x74/0x80 [ 788.919807][ T3163] ? trace_lock_acquire+0x154/0x1b0 [ 788.924994][ T3163] ? lock_acquire+0x158/0x250 [ 788.929655][ T3163] ? kernfs_fop_write+0x22e/0x4f0 [ 788.934663][ T3163] ? memory_max_show+0xa0/0xa0 [ 788.939440][ T3163] cgroup_file_write+0x27b/0x6e0 [ 788.944383][ T3163] ? cgroup_seqfile_stop+0xc0/0xc0 [ 788.949494][ T3163] ? cgroup_seqfile_stop+0xc0/0xc0 [ 788.954601][ T3163] kernfs_fop_write+0x3e4/0x4f0 [ 788.959447][ T3163] ? kernfs_fop_read+0x580/0x580 [ 788.964410][ T3163] __vfs_write+0xf9/0x7d0 [ 788.968730][ T3163] ? retint_kernel+0x10/0x10 [ 788.973323][ T3163] ? __kernel_write+0x350/0x350 [ 788.978223][ T3163] ? __sb_start_write+0x39c/0x440 [ 788.983263][ T3163] vfs_write+0x275/0x590 [ 788.987506][ T3163] ksys_write+0x16b/0x2a0 [ 788.991835][ T3163] ? __ia32_sys_read+0x90/0x90 [ 788.996587][ T3163] ? prepare_exit_to_usermode+0x1f7/0x580 [ 789.002299][ T3163] ? trace_irq_disable_rcuidle+0x23/0x1c0 [ 789.008014][ T3163] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 789.013482][ T3163] ? trace_irq_disable_rcuidle+0x23/0x1c0 [ 789.019223][ T3163] ? do_syscall_64+0x1d/0x140 [ 789.023924][ T3163] __x64_sys_write+0x7b/0x90 [ 789.028521][ T3163] do_syscall_64+0xfe/0x140 [ 789.033024][ T3163] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 789.038913][ T3163] RIP: 0033:0x459819 [ 789.042804][ T3163] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 789.062403][ T3163] RSP: 002b:00007f38caebcc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 789.070809][ T3163] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459819 [ 789.078771][ T3163] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 789.086736][ T3163] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 789.094712][ T3163] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f38caebd6d4 [ 789.102677][ T3163] R13: 00000000004c9774 R14: 00000000004e0b70 R15: 00000000ffffffff [ 789.114039][ T3163] memory: usage 3252kB, limit 0kB, failcnt 560316 [ 789.120566][ T3163] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 789.127460][ T3163] Memory cgroup stats for /syz3: [ 789.128492][ T3163] anon 2174976 [ 789.128492][ T3163] file 0 [ 789.128492][ T3163] kernel_stack 65536 [ 789.128492][ T3163] slab 856064 [ 789.128492][ T3163] sock 0 [ 789.128492][ T3163] shmem 0 [ 789.128492][ T3163] file_mapped 0 [ 789.128492][ T3163] file_dirty 0 [ 789.128492][ T3163] file_writeback 0 [ 789.128492][ T3163] anon_thp 2097152 [ 789.128492][ T3163] inactive_anon 0 [ 789.128492][ T3163] active_anon 2174976 [ 789.128492][ T3163] inactive_file 0 [ 789.128492][ T3163] active_file 0 [ 789.128492][ T3163] unevictable 0 [ 789.128492][ T3163] slab_reclaimable 270336 [ 789.128492][ T3163] slab_unreclaimable 585728 [ 789.128492][ T3163] pgfault 78837 [ 789.128492][ T3163] pgmajfault 0 [ 789.128492][ T3163] workingset_refault 0 [ 789.128492][ T3163] workingset_activate 0 [ 789.128492][ T3163] workingset_nodereclaim 0 [ 789.128492][ T3163] pgrefill 0 [ 789.128492][ T3163] pgscan 0 [ 789.128492][ T3163] pgsteal 0 [ 789.128492][ T3163] pgactivate 0 [ 789.222928][ T3163] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=3159,uid=0 [ 789.239602][ T3163] Memory cgroup out of memory: Killed process 3159 (syz-executor.3) total-vm:72708kB, anon-rss:2140kB, file-rss:34816kB, shmem-rss:0kB [ 789.256171][ T1057] oom_reaper: reaped process 3159 (syz-executor.3), now anon-rss:0kB, file-rss:34832kB, shmem-rss:0kB 09:59:30 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r2 = socket$kcm(0x10, 0x3, 0x0) setsockopt$sock_attach_bpf(r2, 0x10e, 0x4, &(0x7f0000000000)=r0, 0x4) sendmsg(0xffffffffffffffff, 0x0, 0x40) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuset.effective_cpus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) getpid() r3 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) r4 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r4, &(0x7f0000000540)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @ipv4}, 0x80, 0x0}, 0x24000001) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000080)='cgroup.type\x00', 0x2, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f00000002c0)='threaded\x00', 0x9) write$cgroup_int(r3, 0x0, 0x0) write$cgroup_int(r3, 0x0, 0x0) 09:59:30 executing program 4: ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x0, 0x0, 0x1a2, 0x0, 0x0, 0x3002}, {0x0, 0x0, 0x9}]}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)) r1 = syz_open_pts(r0, 0x0) write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0x5e0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000200)={0x17}) 09:59:30 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x10400003) 09:59:30 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000012c0)="0a0775b005e381e5b3b60ced5c54", 0xe) r1 = socket$inet_udplite(0x2, 0x2, 0x88) close(r1) accept4$alg(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x0, 0x0, 0x0, 0x0, {{}, 0x0, 0x800b, 0x0, {0x8}}}, 0x24}}, 0x0) 09:59:30 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x400000, 0x0) ppoll(&(0x7f0000000040)=[{r0, 0x82}], 0x1, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={0x4}, 0x8) syz_mount_image$jfs(&(0x7f00000001c0)='jfs\x00', &(0x7f0000000280)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)={[{@errors_remount='errors=remount-ro'}, {@noquota='noquota'}, {@integrity='integrity'}]}) 09:59:30 executing program 1: fstat(0xffffffffffffffff, 0x0) fstat(0xffffffffffffff9c, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x80000000000003, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'ip6_vti0\x00', 0x0}) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000380)=0xd95, 0x4) sendmmsg(0xffffffffffffffff, &(0x7f0000000d00), 0x400004e, 0x0) [ 789.392963][ T3152] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 789.403138][ T3152] CPU: 1 PID: 3152 Comm: syz-executor.3 Not tainted 5.2.0+ #37 [ 789.410676][ T3152] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 789.420718][ T3152] Call Trace: [ 789.423999][ T3152] dump_stack+0x1d8/0x2f8 [ 789.428322][ T3152] dump_header+0xd8/0x970 [ 789.432652][ T3152] oom_kill_process+0xcd/0x320 [ 789.437403][ T3152] out_of_memory+0x5e1/0x8a0 [ 789.441978][ T3152] ? unregister_oom_notifier+0x20/0x20 [ 789.447420][ T3152] ? __kasan_check_read+0x11/0x20 [ 789.452442][ T3152] try_charge+0x134a/0x17b0 [ 789.456941][ T3152] ? __memcg_kmem_charge_memcg+0x180/0x180 [ 789.462746][ T3152] ? __lock_acquire+0x4750/0x4750 [ 789.467777][ T3152] ? rcu_lock_release+0x15/0x20 [ 789.472617][ T3152] ? get_mem_cgroup_from_mm+0x15e/0x170 [ 789.478168][ T3152] mem_cgroup_try_charge+0x216/0x560 [ 789.483453][ T3152] mem_cgroup_try_charge_delay+0x25/0xa0 [ 789.489097][ T3152] handle_mm_fault+0x31f3/0x6080 [ 789.494032][ T3152] ? finish_fault+0x230/0x230 [ 789.498693][ T3152] ? vmacache_find+0x566/0x5b0 [ 789.503465][ T3152] ? vmacache_update+0xb7/0x120 [ 789.508312][ T3152] do_user_addr_fault+0x589/0xaf0 [ 789.513324][ T3152] __do_page_fault+0xd3/0x1f0 [ 789.517977][ T3152] do_page_fault+0x99/0xb0 [ 789.522371][ T3152] page_fault+0x39/0x40 [ 789.526503][ T3152] RIP: 0033:0x403442 [ 789.530377][ T3152] Code: 55 41 54 49 89 fc 55 53 48 81 ec b8 10 00 00 64 48 8b 04 25 28 00 00 00 48 89 84 24 a8 10 00 00 31 c0 be 02 00 00 00 4c 89 e7 f9 8d 05 00 85 c0 0f 84 00 03 00 00 4c 89 e7 e8 19 43 05 00 48 [ 789.549960][ T3152] RSP: 002b:00007ffd81baafc0 EFLAGS: 00010246 [ 789.556000][ T3152] RAX: 0000000000000000 RBX: 00000000000c0951 RCX: 0000000000413420 [ 789.563950][ T3152] RDX: 000000000000000c RSI: 0000000000000002 RDI: 00007ffd81bac0f0 [ 789.571897][ T3152] RBP: 0000000000000002 R08: 0000000000000001 R09: 00005555561ca940 [ 789.579845][ T3152] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd81bac0f0 [ 789.587788][ T3152] R13: 00007ffd81bac0e0 R14: 0000000000000000 R15: 00007ffd81bac0f0 [ 789.595812][ T3152] memory: usage 924kB, limit 0kB, failcnt 560333 [ 789.602193][ T3152] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 789.609088][ T3152] Memory cgroup stats for /syz3: [ 789.609164][ T3152] anon 36864 [ 789.609164][ T3152] file 0 [ 789.609164][ T3152] kernel_stack 65536 [ 789.609164][ T3152] slab 856064 [ 789.609164][ T3152] sock 0 [ 789.609164][ T3152] shmem 0 [ 789.609164][ T3152] file_mapped 0 [ 789.609164][ T3152] file_dirty 0 [ 789.609164][ T3152] file_writeback 0 [ 789.609164][ T3152] anon_thp 0 [ 789.609164][ T3152] inactive_anon 0 [ 789.609164][ T3152] active_anon 36864 [ 789.609164][ T3152] inactive_file 0 [ 789.609164][ T3152] active_file 0 [ 789.609164][ T3152] unevictable 0 [ 789.609164][ T3152] slab_reclaimable 270336 [ 789.609164][ T3152] slab_unreclaimable 585728 [ 789.609164][ T3152] pgfault 78837 [ 789.609164][ T3152] pgmajfault 0 [ 789.609164][ T3152] workingset_refault 0 [ 789.609164][ T3152] workingset_activate 0 [ 789.609164][ T3152] workingset_nodereclaim 0 [ 789.609164][ T3152] pgrefill 0 [ 789.609164][ T3152] pgscan 0 [ 789.609164][ T3152] pgsteal 0 [ 789.609164][ T3152] pgactivate 0 [ 789.609164][ T3152] pgdeactivate 0 [ 789.705480][ T3152] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=3152,uid=0 [ 789.720858][ T3152] Memory cgroup out of memory: Killed process 3152 (syz-executor.3) total-vm:72444kB, anon-rss:72kB, file-rss:34832kB, shmem-rss:0kB [ 789.734946][ T1057] oom_reaper: reaped process 3152 (syz-executor.3), now anon-rss:0kB, file-rss:33936kB, shmem-rss:0kB 09:59:31 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x10400003) 09:59:31 executing program 1: fstat(0xffffffffffffffff, 0x0) fstat(0xffffffffffffff9c, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x80000000000003, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'ip6_vti0\x00', 0x0}) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000380)=0xd95, 0x4) sendmmsg(0xffffffffffffffff, &(0x7f0000000d00), 0x400004e, 0x0) 09:59:31 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000012c0)="0a0775b005e381e5b3b60ced5c54", 0xe) r1 = socket$inet_udplite(0x2, 0x2, 0x88) close(r1) accept4$alg(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x0, 0x0, 0x0, 0x0, {{}, 0x0, 0x800b, 0x0, {0x8}}}, 0x24}}, 0x0) 09:59:31 executing program 4: ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x0, 0x0, 0x1a2, 0x0, 0x0, 0x3002}, {0x0, 0x0, 0x9}]}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)) r1 = syz_open_pts(r0, 0x0) write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0x5e0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000200)={0x17}) 09:59:31 executing program 1: fstat(0xffffffffffffffff, 0x0) fstat(0xffffffffffffff9c, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x80000000000003, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'ip6_vti0\x00', 0x0}) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000380)=0xd95, 0x4) sendmmsg(0xffffffffffffffff, &(0x7f0000000d00), 0x400004e, 0x0) 09:59:31 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000012c0)="0a0775b005e381e5b3b60ced5c54", 0xe) r1 = socket$inet_udplite(0x2, 0x2, 0x88) close(r1) accept4$alg(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x0, 0x0, 0x0, 0x0, {{}, 0x0, 0x800b, 0x0, {0x8}}}, 0x24}}, 0x0) 09:59:32 executing program 1: fstat(0xffffffffffffffff, 0x0) fstat(0xffffffffffffff9c, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x80000000000003, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'ip6_vti0\x00', 0x0}) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000380)=0xd95, 0x4) sendmmsg(r0, 0x0, 0x0, 0x0) 09:59:32 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x10400003) 09:59:32 executing program 4: ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x0, 0x0, 0x1a2, 0x0, 0x0, 0x3002}, {0x0, 0x0, 0x9}]}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)) r1 = syz_open_pts(r0, 0x0) write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0x5e0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000200)={0x17}) 09:59:32 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r2 = socket$kcm(0x10, 0x3, 0x0) setsockopt$sock_attach_bpf(r2, 0x10e, 0x4, &(0x7f0000000000)=r0, 0x4) sendmsg(0xffffffffffffffff, 0x0, 0x40) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuset.effective_cpus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) getpid() r3 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) r4 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r4, &(0x7f0000000540)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @ipv4}, 0x80, 0x0}, 0x24000001) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000080)='cgroup.type\x00', 0x2, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f00000002c0)='threaded\x00', 0x9) write$cgroup_int(r3, 0x0, 0x0) write$cgroup_int(r3, 0x0, 0x0) 09:59:32 executing program 5: syz_mount_image$jfs(&(0x7f00000001c0)='jfs\x00', &(0x7f0000000280)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)={[{@errors_remount='errors=remount-ro'}, {@noquota='noquota'}, {@integrity='integrity'}]}) lsetxattr$security_selinux(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)='security.selinux\x00', &(0x7f0000000080)='system_u:object_r:auditctl_exec_t:s0\x00', 0x25, 0x1) 09:59:32 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000012c0)="0a0775b005e381e5b3b60ced5c54db", 0xf) r1 = socket$inet_udplite(0x2, 0x2, 0x88) close(r1) accept4$alg(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x0, 0x0, 0x0, 0x0, {{}, 0x0, 0x800b, 0x0, {0x8}}}, 0x24}}, 0x0) 09:59:32 executing program 1: fstat(0xffffffffffffffff, 0x0) fstat(0xffffffffffffff9c, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x80000000000003, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'ip6_vti0\x00', 0x0}) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000380)=0xd95, 0x4) sendmmsg(r0, 0x0, 0x0, 0x0) 09:59:32 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r2 = socket$kcm(0x10, 0x3, 0x0) setsockopt$sock_attach_bpf(r2, 0x10e, 0x4, &(0x7f0000000000)=r0, 0x4) sendmsg(0xffffffffffffffff, 0x0, 0x40) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuset.effective_cpus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) getpid() r3 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) r4 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r4, &(0x7f0000000540)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @ipv4}, 0x80, 0x0}, 0x24000001) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000080)='cgroup.type\x00', 0x2, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f00000002c0)='threaded\x00', 0x9) write$cgroup_int(r3, 0x0, 0x0) write$cgroup_int(r3, 0x0, 0x0) 09:59:32 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x10400003) 09:59:32 executing program 4: ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x0, 0x0, 0x1a2, 0x0, 0x0, 0x3002}, {0x0, 0x0, 0x9}]}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)) r1 = syz_open_pts(r0, 0x0) write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0x5e0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000200)={0x17}) 09:59:32 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000012c0)="0a0775b005e381e5b3b60ced5c54db", 0xf) r1 = socket$inet_udplite(0x2, 0x2, 0x88) close(r1) accept4$alg(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x0, 0x0, 0x0, 0x0, {{}, 0x0, 0x800b, 0x0, {0x8}}}, 0x24}}, 0x0) 09:59:32 executing program 1: fstat(0xffffffffffffffff, 0x0) fstat(0xffffffffffffff9c, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x80000000000003, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'ip6_vti0\x00', 0x0}) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000380)=0xd95, 0x4) sendmmsg(r0, 0x0, 0x0, 0x0) 09:59:32 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x10400003) 09:59:32 executing program 5: r0 = syz_open_dev$midi(&(0x7f0000000180)='/dev/midi#\x00', 0x1, 0x2000) ioctl$EVIOCSABS0(r0, 0x401845c0, &(0x7f0000000200)={0x2, 0x80800, 0x8cf7, 0x3, 0x1000, 0x62}) syz_mount_image$jfs(&(0x7f00000001c0)='jfs\x00', &(0x7f0000000280)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)={[{@errors_remount='errors=remount-ro'}, {@noquota='noquota'}, {@integrity='integrity'}]}) r1 = syz_open_dev$sndpcmc(&(0x7f00000000c0)='/dev/snd/pcmC#D#c\x00', 0x3, 0x440) ioctl$DRM_IOCTL_GET_STATS(r1, 0x80f86406, &(0x7f0000000100)=""/71) r2 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0xe63, 0xc800) bind$unix(r2, &(0x7f0000000040)=@abs={0x0, 0x0, 0x4e21}, 0x6e) socket$caif_seqpacket(0x25, 0x5, 0x0) 09:59:32 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000012c0)="0a0775b005e381e5b3b60ced5c54db", 0xf) r1 = socket$inet_udplite(0x2, 0x2, 0x88) close(r1) accept4$alg(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x0, 0x0, 0x0, 0x0, {{}, 0x0, 0x800b, 0x0, {0x8}}}, 0x24}}, 0x0) 09:59:32 executing program 4: ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x0, 0x0, 0x1a2, 0x0, 0x0, 0x3002}, {0x0, 0x0, 0x9}]}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000200)={0x17}) 09:59:32 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000600)) r2 = syz_open_pts(r1, 0x0) write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[], 0x5e0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000200)={0x17}) 09:59:32 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000012c0)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) close(0xffffffffffffffff) accept4$alg(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x0, 0x0, 0x0, 0x0, {{}, 0x0, 0x800b, 0x0, {0x8}}}, 0x24}}, 0x0) 09:59:32 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x10400003) [ 792.510974][ T821] device bridge_slave_1 left promiscuous mode [ 792.517115][ T821] bridge0: port 2(bridge_slave_1) entered disabled state [ 792.569409][ T821] device bridge_slave_0 left promiscuous mode [ 792.575549][ T821] bridge0: port 1(bridge_slave_0) entered disabled state [ 794.220166][ T821] device hsr_slave_0 left promiscuous mode [ 794.269530][ T821] device hsr_slave_1 left promiscuous mode [ 794.337571][ T821] team0 (unregistering): Port device team_slave_1 removed [ 794.348824][ T821] team0 (unregistering): Port device team_slave_0 removed [ 794.361277][ T821] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 794.412955][ T821] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 794.490940][ T821] bond0 (unregistering): Released all slaves [ 794.577755][ T3293] IPVS: ftp: loaded support on port[0] = 21 [ 794.642921][ T3293] chnl_net:caif_netlink_parms(): no params data found [ 794.673638][ T3293] bridge0: port 1(bridge_slave_0) entered blocking state [ 794.680732][ T3293] bridge0: port 1(bridge_slave_0) entered disabled state [ 794.688543][ T3293] device bridge_slave_0 entered promiscuous mode [ 794.696430][ T3293] bridge0: port 2(bridge_slave_1) entered blocking state [ 794.703530][ T3293] bridge0: port 2(bridge_slave_1) entered disabled state [ 794.711025][ T3293] device bridge_slave_1 entered promiscuous mode [ 794.728509][ T3293] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 794.739294][ T3293] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 794.757933][ T3293] team0: Port device team_slave_0 added [ 794.764607][ T3293] team0: Port device team_slave_1 added [ 794.921440][ T3293] device hsr_slave_0 entered promiscuous mode [ 795.074974][ T3293] device hsr_slave_1 entered promiscuous mode [ 795.217603][ T3293] bridge0: port 2(bridge_slave_1) entered blocking state [ 795.224696][ T3293] bridge0: port 2(bridge_slave_1) entered forwarding state [ 795.232074][ T3293] bridge0: port 1(bridge_slave_0) entered blocking state [ 795.239149][ T3293] bridge0: port 1(bridge_slave_0) entered forwarding state [ 795.304189][ T3293] 8021q: adding VLAN 0 to HW filter on device bond0 [ 795.318269][ T1197] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 795.326842][ T1197] bridge0: port 1(bridge_slave_0) entered disabled state [ 795.335527][ T1197] bridge0: port 2(bridge_slave_1) entered disabled state [ 795.350620][ T3293] 8021q: adding VLAN 0 to HW filter on device team0 [ 795.361698][ T1197] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 795.370359][ T1197] bridge0: port 1(bridge_slave_0) entered blocking state [ 795.377396][ T1197] bridge0: port 1(bridge_slave_0) entered forwarding state [ 795.416871][ T3293] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 795.427319][ T3293] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 795.450175][ T1197] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 795.458647][ T1197] bridge0: port 2(bridge_slave_1) entered blocking state [ 795.465747][ T1197] bridge0: port 2(bridge_slave_1) entered forwarding state [ 795.474270][ T1197] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 795.482875][ T1197] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 795.491186][ T1197] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 795.499491][ T1197] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 795.518240][ T1197] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 795.526016][ T1197] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 795.550022][ T3293] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 795.709091][ T3304] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 795.719398][ T3304] CPU: 0 PID: 3304 Comm: syz-executor.3 Not tainted 5.2.0+ #37 [ 795.726929][ T3304] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 795.736967][ T3304] Call Trace: [ 795.740242][ T3304] dump_stack+0x1d8/0x2f8 [ 795.744575][ T3304] dump_header+0xd8/0x970 [ 795.748937][ T3304] oom_kill_process+0xcd/0x320 [ 795.753755][ T3304] out_of_memory+0x5e1/0x8a0 [ 795.758352][ T3304] ? unregister_oom_notifier+0x20/0x20 [ 795.763803][ T3304] ? trace_hardirqs_on+0x74/0x80 [ 795.768739][ T3304] memory_max_write+0x537/0x6a0 [ 795.773595][ T3304] ? lockdep_hardirqs_on+0x3c5/0x7d0 [ 795.778883][ T3304] ? memory_max_show+0xa0/0xa0 [ 795.783638][ T3304] ? rcu_irq_exit+0xe3/0x260 [ 795.788222][ T3304] ? trace_lock_acquire+0x154/0x1b0 [ 795.793419][ T3304] ? lock_acquire+0x158/0x250 [ 795.798078][ T3304] ? kernfs_fop_write+0x22e/0x4f0 [ 795.803101][ T3304] ? memory_max_show+0xa0/0xa0 [ 795.807865][ T3304] cgroup_file_write+0x27b/0x6e0 [ 795.812815][ T3304] ? cgroup_seqfile_stop+0xc0/0xc0 [ 795.817932][ T3304] ? cgroup_seqfile_stop+0xc0/0xc0 [ 795.823060][ T3304] kernfs_fop_write+0x3e4/0x4f0 [ 795.827915][ T3304] ? kernfs_fop_read+0x580/0x580 [ 795.832862][ T3304] __vfs_write+0xf9/0x7d0 [ 795.837205][ T3304] ? __lock_acquire+0x4750/0x4750 [ 795.842281][ T3304] ? __kernel_write+0x350/0x350 [ 795.847145][ T3304] ? trace_lock_acquire+0x154/0x1b0 [ 795.852359][ T3304] ? __sb_start_write+0x39c/0x440 [ 795.857389][ T3304] ? __kasan_check_read+0x11/0x20 [ 795.862424][ T3304] vfs_write+0x275/0x590 [ 795.866661][ T3304] ksys_write+0x16b/0x2a0 [ 795.870991][ T3304] ? __ia32_sys_read+0x90/0x90 [ 795.875784][ T3304] ? prepare_exit_to_usermode+0x1f7/0x580 [ 795.881515][ T3304] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 795.886963][ T3304] ? trace_irq_disable_rcuidle+0x23/0x1c0 [ 795.892681][ T3304] ? do_syscall_64+0x1d/0x140 [ 795.897355][ T3304] __x64_sys_write+0x7b/0x90 [ 795.901934][ T3304] do_syscall_64+0xfe/0x140 [ 795.906438][ T3304] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 795.912315][ T3304] RIP: 0033:0x459819 [ 795.916203][ T3304] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 795.935830][ T3304] RSP: 002b:00007fb133cf0c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 795.944244][ T3304] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459819 [ 795.952213][ T3304] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 795.960177][ T3304] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 795.968167][ T3304] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb133cf16d4 [ 795.976283][ T3304] R13: 00000000004c9774 R14: 00000000004e0b70 R15: 00000000ffffffff [ 795.986004][ T3304] memory: usage 3272kB, limit 0kB, failcnt 560342 [ 795.992696][ T3304] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 795.999790][ T3304] Memory cgroup stats for /syz3: [ 796.000162][ T3304] anon 2117632 [ 796.000162][ T3304] file 0 [ 796.000162][ T3304] kernel_stack 65536 [ 796.000162][ T3304] slab 856064 [ 796.000162][ T3304] sock 0 [ 796.000162][ T3304] shmem 0 [ 796.000162][ T3304] file_mapped 0 [ 796.000162][ T3304] file_dirty 135168 [ 796.000162][ T3304] file_writeback 0 [ 796.000162][ T3304] anon_thp 2097152 [ 796.000162][ T3304] inactive_anon 0 [ 796.000162][ T3304] active_anon 2117632 [ 796.000162][ T3304] inactive_file 0 [ 796.000162][ T3304] active_file 0 [ 796.000162][ T3304] unevictable 0 [ 796.000162][ T3304] slab_reclaimable 270336 [ 796.000162][ T3304] slab_unreclaimable 585728 [ 796.000162][ T3304] pgfault 78903 [ 796.000162][ T3304] pgmajfault 0 [ 796.000162][ T3304] workingset_refault 0 [ 796.000162][ T3304] workingset_activate 0 [ 796.000162][ T3304] workingset_nodereclaim 0 [ 796.000162][ T3304] pgrefill 0 [ 796.000162][ T3304] pgscan 0 [ 796.000162][ T3304] pgsteal 0 [ 796.000162][ T3304] pgactivate 0 [ 796.096298][ T3304] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=3303,uid=0 [ 796.112079][ T3304] Memory cgroup out of memory: Killed process 3303 (syz-executor.3) total-vm:72708kB, anon-rss:2140kB, file-rss:34816kB, shmem-rss:0kB [ 796.127967][ T1057] oom_reaper: reaped process 3303 (syz-executor.3), now anon-rss:0kB, file-rss:34832kB, shmem-rss:0kB 09:59:37 executing program 3: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) socket$kcm(0x10, 0x3, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x40) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuset.effective_cpus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) getpid() r1 = openat$cgroup_int(r0, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) r2 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r2, &(0x7f0000000540)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @ipv4}, 0x80, 0x0}, 0x24000001) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000080)='cgroup.type\x00', 0x2, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f00000002c0)='threaded\x00', 0x9) write$cgroup_int(r1, 0x0, 0x0) write$cgroup_int(r1, 0x0, 0x0) 09:59:37 executing program 4: ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x0, 0x0, 0x1a2, 0x0, 0x0, 0x3002}, {0x0, 0x0, 0x9}]}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000200)={0x17}) 09:59:37 executing program 5: syz_mount_image$jfs(&(0x7f00000001c0)='jfs\x00', &(0x7f0000000280)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='errors=remount-ro,noquota,i\x00']) 09:59:37 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000012c0)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) close(0xffffffffffffffff) accept4$alg(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x0, 0x0, 0x0, 0x0, {{}, 0x0, 0x800b, 0x0, {0x8}}}, 0x24}}, 0x0) 09:59:37 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x10400003) 09:59:37 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000600)) r2 = syz_open_pts(r1, 0x0) write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[], 0x5e0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000200)={0x17}) [ 796.286452][ T3293] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 796.296450][ T3293] CPU: 1 PID: 3293 Comm: syz-executor.3 Not tainted 5.2.0+ #37 [ 796.303979][ T3293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 796.314016][ T3293] Call Trace: [ 796.317325][ T3293] dump_stack+0x1d8/0x2f8 [ 796.321669][ T3293] dump_header+0xd8/0x970 [ 796.325987][ T3293] oom_kill_process+0xcd/0x320 [ 796.330741][ T3293] out_of_memory+0x5e1/0x8a0 [ 796.335392][ T3293] ? unregister_oom_notifier+0x20/0x20 [ 796.340844][ T3293] ? __kasan_check_read+0x11/0x20 [ 796.345862][ T3293] try_charge+0x134a/0x17b0 [ 796.350365][ T3293] ? __memcg_kmem_charge_memcg+0x180/0x180 [ 796.356158][ T3293] ? __lock_acquire+0x4750/0x4750 [ 796.361169][ T3293] ? rcu_lock_release+0x15/0x20 [ 796.366037][ T3293] ? get_mem_cgroup_from_mm+0x15e/0x170 [ 796.371573][ T3293] mem_cgroup_try_charge+0x216/0x560 [ 796.376849][ T3293] mem_cgroup_try_charge_delay+0x25/0xa0 [ 796.382467][ T3293] wp_page_copy+0x367/0x18c0 [ 796.387048][ T3293] ? rcu_lock_release+0x30/0x30 [ 796.391888][ T3293] ? __lock_acquire+0x4750/0x4750 [ 796.396895][ T3293] ? __kasan_check_read+0x11/0x20 [ 796.401911][ T3293] ? do_raw_spin_unlock+0x49/0x260 [ 796.407020][ T3293] do_wp_page+0x2c9/0x1ce0 [ 796.411417][ T3293] ? __rwlock_init+0x130/0x130 [ 796.416159][ T3293] ? count_memcg_event_mm+0x300/0x300 [ 796.421540][ T3293] handle_mm_fault+0x2bcf/0x6080 [ 796.426501][ T3293] ? finish_fault+0x230/0x230 [ 796.431156][ T3293] ? vmacache_find+0x251/0x5b0 [ 796.435896][ T3293] do_user_addr_fault+0x589/0xaf0 [ 796.440909][ T3293] __do_page_fault+0xd3/0x1f0 [ 796.445573][ T3293] do_page_fault+0x99/0xb0 [ 796.449963][ T3293] page_fault+0x39/0x40 [ 796.454091][ T3293] RIP: 0033:0x403442 [ 796.457953][ T3293] Code: 55 41 54 49 89 fc 55 53 48 81 ec b8 10 00 00 64 48 8b 04 25 28 00 00 00 48 89 84 24 a8 10 00 00 31 c0 be 02 00 00 00 4c 89 e7 f9 8d 05 00 85 c0 0f 84 00 03 00 00 4c 89 e7 e8 19 43 05 00 48 [ 796.477525][ T3293] RSP: 002b:00007fff2ca87cc0 EFLAGS: 00010246 [ 796.483571][ T3293] RAX: 0000000000000000 RBX: 00000000000c2429 RCX: 0000000000413420 [ 796.491541][ T3293] RDX: 000000000000000c RSI: 0000000000000002 RDI: 00007fff2ca88df0 [ 796.499486][ T3293] RBP: 0000000000000002 R08: 0000000000000001 R09: 00005555567ed940 [ 796.507431][ T3293] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff2ca88df0 [ 796.515398][ T3293] R13: 00007fff2ca88de0 R14: 0000000000000000 R15: 00007fff2ca88df0 [ 796.523425][ T3293] memory: usage 944kB, limit 0kB, failcnt 560351 [ 796.529785][ T3293] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 796.536628][ T3293] Memory cgroup stats for /syz3: [ 796.536669][ T3293] anon 0 [ 796.536669][ T3293] file 0 [ 796.536669][ T3293] kernel_stack 65536 [ 796.536669][ T3293] slab 856064 [ 796.536669][ T3293] sock 0 [ 796.536669][ T3293] shmem 0 [ 796.536669][ T3293] file_mapped 0 [ 796.536669][ T3293] file_dirty 135168 [ 796.536669][ T3293] file_writeback 0 [ 796.536669][ T3293] anon_thp 0 [ 796.536669][ T3293] inactive_anon 0 [ 796.536669][ T3293] active_anon 0 [ 796.536669][ T3293] inactive_file 0 [ 796.536669][ T3293] active_file 0 [ 796.536669][ T3293] unevictable 0 [ 796.536669][ T3293] slab_reclaimable 270336 [ 796.536669][ T3293] slab_unreclaimable 585728 [ 796.536669][ T3293] pgfault 78903 [ 796.536669][ T3293] pgmajfault 0 [ 796.536669][ T3293] workingset_refault 0 [ 796.536669][ T3293] workingset_activate 0 [ 796.536669][ T3293] workingset_nodereclaim 0 [ 796.536669][ T3293] pgrefill 0 [ 796.536669][ T3293] pgscan 0 [ 796.536669][ T3293] pgsteal 0 [ 796.536669][ T3293] pgactivate 0 [ 796.536669][ T3293] pgdeactivate 0 [ 796.632534][ T3293] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=3293,uid=0 [ 796.647906][ T3293] Memory cgroup out of memory: Killed process 3293 (syz-executor.3) total-vm:72444kB, anon-rss:72kB, file-rss:34832kB, shmem-rss:0kB [ 796.662025][ T1057] oom_reaper: reaped process 3293 (syz-executor.3), now anon-rss:0kB, file-rss:33936kB, shmem-rss:0kB 09:59:38 executing program 4: ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x0, 0x0, 0x1a2, 0x0, 0x0, 0x3002}, {0x0, 0x0, 0x9}]}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000200)={0x17}) [ 796.703012][ T3313] jfs: Unrecognized mount option "i" or missing value 09:59:38 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000012c0)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) close(0xffffffffffffffff) accept4$alg(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x0, 0x0, 0x0, 0x0, {{}, 0x0, 0x800b, 0x0, {0x8}}}, 0x24}}, 0x0) 09:59:38 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x10400003) [ 796.787556][ T3313] jfs: Unrecognized mount option "i" or missing value 09:59:38 executing program 1: r0 = openat(0xffffffffffffffff, 0x0, 0x8002, 0x42) getdents(r0, &(0x7f0000000040)=""/63, 0x3f) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') preadv(r1, &(0x7f0000000480), 0x10000000000002a1, 0x10400003) 09:59:38 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000012c0)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) close(r1) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x0, 0x0, 0x0, 0x0, {{}, 0x0, 0x800b, 0x0, {0x8}}}, 0x24}}, 0x0) 09:59:38 executing program 5: syz_mount_image$jfs(&(0x7f00000001c0)='jfs\x00', &(0x7f0000000280)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="6572726f72733d72656d6f75de0d00006f2c7e6f71756f74612c696e746567726974792c00"]) r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x6, 0x90082) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000140)={r0, &(0x7f0000000040)="657877005ebef480607a86bd6e87c358bc23745cabf79b9e02faff1daa", &(0x7f0000000080)=""/190}, 0x18) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) [ 797.229037][ T3345] JFS: remouÞ is an invalid error handler [ 797.338381][ T3345] JFS: remouÞ is an invalid error handler 09:59:39 executing program 3: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) socket$kcm(0x10, 0x3, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x40) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuset.effective_cpus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) getpid() r1 = openat$cgroup_int(r0, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) r2 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r2, &(0x7f0000000540)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @ipv4}, 0x80, 0x0}, 0x24000001) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000080)='cgroup.type\x00', 0x2, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f00000002c0)='threaded\x00', 0x9) write$cgroup_int(r1, 0x0, 0x0) write$cgroup_int(r1, 0x0, 0x0) 09:59:39 executing program 4: ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x0, 0x0, 0x1a2, 0x0, 0x0, 0x3002}, {0x0, 0x0, 0x9}]}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)) write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0x5e0) ioctl$TCSETSF(0xffffffffffffffff, 0x5412, &(0x7f0000000200)={0x17}) 09:59:39 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{0x0}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x10400003) 09:59:39 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000012c0)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) close(r1) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x0, 0x0, 0x0, 0x0, {{}, 0x0, 0x800b, 0x0, {0x8}}}, 0x24}}, 0x0) 09:59:39 executing program 1: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bpq0\x00', 0x21}) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00') getdents(r0, &(0x7f0000000040)=""/46, 0x2e) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) r2 = memfd_create(0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r2) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000600)) 09:59:39 executing program 5: syz_mount_image$jfs(&(0x7f00000001c0)='jfs\x00', &(0x7f0000000280)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)={[{@errors_remount='errors=remount-ro'}, {@noquota='noquota'}, {@integrity='integrity'}]}) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0xa00, 0x0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') fadvise64(r0, 0x7ffffffffffc, 0x2d, 0x2005) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r1, 0x800, 0x70bd2b, 0x25dfdbff, {{}, 0x0, 0x4109, 0x0, {0x4c, 0x18, {0x5f, @media='udp\x00'}}}, ["", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x800}, 0x40) 09:59:39 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{0x0}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x10400003) 09:59:39 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000012c0)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) close(r1) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x0, 0x0, 0x0, 0x0, {{}, 0x0, 0x800b, 0x0, {0x8}}}, 0x24}}, 0x0) 09:59:39 executing program 4: ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x0, 0x0, 0x1a2, 0x0, 0x0, 0x3002}, {0x0, 0x0, 0x9}]}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)) write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0x5e0) ioctl$TCSETSF(0xffffffffffffffff, 0x5412, &(0x7f0000000200)={0x17}) 09:59:39 executing program 1: clone(0x200, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f0000000100)='./file0\x00', 0x113d, 0x0) execve(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) r0 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/exec\x00', 0x2, 0x0) clone(0x2100001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pwrite64(r0, 0x0, 0x0, 0x0) 09:59:39 executing program 3: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) socket$kcm(0x10, 0x3, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x40) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuset.effective_cpus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) getpid() r1 = openat$cgroup_int(r0, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) r2 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r2, &(0x7f0000000540)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @ipv4}, 0x80, 0x0}, 0x24000001) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000080)='cgroup.type\x00', 0x2, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f00000002c0)='threaded\x00', 0x9) write$cgroup_int(r1, 0x0, 0x0) write$cgroup_int(r1, 0x0, 0x0) 09:59:39 executing program 5: syz_mount_image$jfs(&(0x7f00000001c0)='jfs\x00', &(0x7f0000000280)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="6572bc6ebcc27268fb886f756e742d726f2c6e6f71756f74612c696e746467726974792c00ea63d99f406b719fcfcbecff1441b826384d42dc64b4961f820101904d0c35d8563988e7a2c25495375e31a43d75736b0c801f5223672567a32d6a347090849da7c60bd5708acbf230"]) r0 = syz_open_dev$audion(&(0x7f00000007c0)='/dev/audio#\x00', 0x2, 0x400400) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000080)={&(0x7f0000000000)='./file1\x00', r0}, 0x10) ioctl$SIOCX25SCUDMATCHLEN(r0, 0x89e7, &(0x7f0000000700)={0x25}) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000040)={r0}) r2 = fcntl$getown(r0, 0x9) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000640)={0x0, 0x0}, &(0x7f0000001900)=0xc) sendmsg$nl_netfilter(r1, &(0x7f0000002c00)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8800000}, 0xc, &(0x7f0000002bc0)={&(0x7f0000001940)={0x1258, 0xc, 0xf, 0x100, 0x70bd27, 0x25dfdbfb, {0xb, 0x0, 0x1}, [@typed={0x8, 0x4a, @pid=r2}, @generic="f1a75fc5c315958122b7ea8972c490", @typed={0x8, 0x88, @ipv4=@multicast2}, @typed={0x8, 0x6a, @fd=r0}, @nested={0x11cc, 0x10, [@generic="6db2eb6977a188120ef70888e8d8e7a15fb15f4bd05eb69f66a2bb2bff172eafd22960b4dd665bdfa6e1d3ad5d598bda70d99c4126c231061791", @generic="bb259dd46d17140f36382d19cabd84e8c6a3d54fc96aebc28906d7221cf6f78ea03e21833d4d8447510adeb4b2ade82f5832d936e693719fd58fd7e652f9c706e9db02376f35872a2e5c62c916647420e7a1556c2c096e708510cea8fa0ec4d6642aaba09dea5e6bb337bca99d35551b4cdcb73da8e512dcae0642d29359d4bd2434f4c40b7bab2e3015df4142d9e2840d53d2", @generic="7d7139a79cec", @generic="96783eb6b8b234354ee188b22e1584044182d40630957736ab079ddaf57191032908b26734f877354f233932ee81dd98230ba11eb9d75bf061d63323df348d757d4c86459b4b516e81ed658735a48295a9d542327ed60ebdcda63a4fd16a502689b0802f", @generic, @typed={0x8, 0x18, @uid=r3}, @generic="d459bbfd65e04ecad1f651aac1711a55f1c009aa702b97676797fe13701bf7e1cf494a9420192af05cfea5c35be202262e62afb0bfd3c82fa93c313e448eb627de754565c1649d0b6acb86ad7221c68fd1fa659df681b96bacc11546f061abdc96ff229140b92284e8a6c720748b454e2f71ff870db7db5bc45f3c919228412cb9f929b3c7eff4b99579e3b44b21ce42d2e0c5a15b4e88f2a353d44184b8746ba3e681a083d3c3e825b2bb8a83799944f9d5988a78c2ab61b163bfd383e409fcd8de67d17a5b704b42972ac3a7e53cf8f9e8f70f58168c3e2da5600f6704030f1d71bf16462587040e1ace0a7503e4a3810edd461c98925f3778e086108f9eeaff4b66f0761b63d4e2cc7fc5033662b178cb6143e53dc8ef2a82559c7b2027babb947b34aa8759473a91f7b3f0d677d788b01cf8f179a50461359ae7ea1e13093dbfb8ce437bf866041654464d7ac7e441a933c94d8808735b3336716ffb279eb2eef15c2b97bfdbeeea0f9a8d426b899048ad0ac199ecfbbacf3a39c04a1b1d34816ac68ef793de923394c3bcc184a3f6cf5e9ed4ae914a26c2825124d1329ceacdef8977c0793492413e33ac37ef3115411cd6bbcfaf7b25ce97cd673280db168c2e6d489cf79f25bcde6a02b4f9e93d1bb8495588ae4399259ea735e18dd9e4c4f45ca5d15443f6e0da965d488cb53e32f6c357c9fa8e35a39105b67da1be98f2a0e170244afa9430ef16d533c9d0d98028fe1382bd828eba277026d96a8590ad58d6c132c30e8b75d3c41d6986aff05f1711de7fc98cc5109fb4809711c6a8f2014281a2fad412304034bf6ba42500242c44bfdef012fa5fa2e920ece49b3dfda798aa9b53d969acdef7e28a51185fbc986188c3fe2772edfd7fb684233ad3dbddcd24ec8948fa6093951cc270497fe4322a9a57263c1ac371d95272e863193b35200271bafb16ac6ff572eb6103964f6be60a312b26f5a8872f945813863137d35c90de549821edee0b58ad80af4d16143b2424f8bbff614d719243e1b3e367cf80384a4144bc7dd9e9c9032360baa96550aa2ec3f896cb215e4ed2b42f9cc0d379971bb22040f02d147e4fc19a93317c19a41b86fc5d540473fadf2fa1af4052a35a84cdff19b87dcf5563d1646e87bcb1ec4e70f1b3ec843bc82079a320b0765e376684d7a6941b15b8643a92d486391ddb1401324df2b751c45d56a3716614a36023b3d2de7a25a620839d5c669f408dd6728b7d5bbf4859170a440caddbf042e8e20a38b869a0ee562d5bacebf0d3ce46c9f0ea7d95487db42fccae0938b275a693bd2a536e0abf531956290d4c0582a90ae4152e4c1edff09a8913f188ac967dca0c1a100542147100e2a4cede4295f57cda0f685b26ae5674cab531b8dca332b7038aee94250a3317e7d7834105a32fc99468073fcefebbfca00d2da933dd112462563ad4fece953e03c971b8978f494796d7eed8be9446ff2bd827c29ec5b69cbbabb83cbf0628f4c86dbc6889a82b09c86725b760b3b0e33cb62863e36282419167d18e83e28455d5b7d51674cd2831f4ba7b3799d1925923d3847568aa42260f96623d088c848d2e3024996528251ea5418d06eb4c808b092d09bf7602bf9a8017f32f8465c39db9356cc4eccec2b26ed049581e218567f3049eec335571409d031bbdca08e95855cdd2357c715496a5b889f6582aab37b49426b4e5af1efce34ec10d43016941b2e8d08ae9345a7bf27f070d84f899953bb580acac66817fc4d46ffbf14271c6bd4a9963e377fa59f41d4e606e777c1b7b0012b8610714eac4aa15763441e91c00375d988f3e0e3c4b58fec1049326a9c435014515276d9de0b8c4dce41741c7ae79ee3cfec3e9ae57bb0d06ae524909a7abd48be8c2f26d4d84e4ffa12ab6d443f65f8db38e90463a2833f3ecd1b438857277a9900be8da5135aba84c182054f3b704018f0dc5c8226cea66b1036cb42fdd70773cc0adf21dbefa0bd541af52ef77b5c6716350308b3404776a4c863c40dae5e3222334468a1565646dd686bffac88bd80a0e697272eaf6d20e8e653ffbc634e7d8dc9407698432af9d79ae49941b346741bb21aa7a3e0e09665b0cae4e60c4c0ccd21665b4abe8a8fbda26f54126a5537af22f716a4269b879a6723e74c6824bd9890ab883488c581fc191d345884c173b0a11f9fff3f6335524db7330f2bf092f0c091b575b5d41d67593084e931443da0ba447ac4814eb8b3a8b0c7cdf31cbdf317bec39464f3310e16930e02aecd92f188b86d554c3b3fd5c2756e271a0936bc4b3f39d74fd32c18210b802f62a0e38d9537fb13f0d693d93174c2c1b79a2c745a98074dba9a96dd9f73421ec45fa1f68c9755943765bbe8624ec0818da9828f4a4e2975dc28759eea15cf416f159b04a552901054dfe35002faa927f3df3824c347808d527ff5f931c94702060990ffdfb3a49f78a1efb1d05b7769edaaa6a0056a2c16d6e926f2af9c5e3bb24b08f8e848535fd0406ca804219f9df13d8a8ec33cc75850033c062fec80b47fcffbd2d20af700d3ee583cbf946686c3c31c75907f548c0003934bf668e5b007ca83e8988fb9a5f69e23a6f0acebdcf3fc0a95b8a691c1c44062efd00495615421442d98a6f0a88a7beaa8dfde431f3e34ee144025031eacbf8f4e678278d3f0a30d17901fe4b9b3601c5e72cd5ed033b4036a6763338761cf1807e5ac6c51b577865b1f4013b82e158fbb7e29fe0f6782ebd12d517f93e421786755a68e268a58e27b83adf0bcb50af580e2726ce6cc081659924a75eacae9917565423619781cc00471456e5f33cd902cb484c72e0979d59bdf018f844025f5faa6ff42e2c644b0dbb31e2d6c5e5d8def6663aa0c99e47d4c4d40f9a9b6172dc51403ce184b81de7125ea6b76b570fc226a2fa8e3f2ed5dc52358933a3bcdb5f31148e619cd47eede904823456ca6795406eb4ee20c1487a54ef3ca7830864bd60644bf56322bab2d9ccf5ab86d4beaca13b750fd8611c9e4d910db897e1c77f3c61426d7d0b1e59f33d0243271e211cd059a9194c493a3cda955859a9dd0c7659f07b680247154bdbee237b4d62a82b0c8ad7a5f7e636a9e09e2e478bb5f23965e8c3cacdd0a7474899aa6bbdf14073adcb3dd983fb1052daabd85408fd123169c62a1df97bf95bb819d6e76c16eb2d2ea3803edb394812aac889318f9ca9b2f9006a38b8dbb7052332495c6ea0c0e68397780c09c58d3fb29dc940984c3ec780525b5191224f912aeed515e79a97720cfbd3bb1f783a691b8b677bdf6ab6a2deba121befd93ed2d78c7f80bec1b8f964e88b2c3c463e7f448bc6f0a2e83a918e06516f13d051d6ffda2539ab8ad2e5ff795e2b093ccba6e6a6417aacba9520ab6947bd0cd81e49befc021bf77d65927982c9aeaaafd27760e885c3436153e1835fb5a996f587c3c5d630b7c28b177b8128ae4aa8c2f170d6450a40c05390a62c55e0ede80c29103450a8b6ee49607f364a19b6ad1bb1eb4a99ca9537b5e626ecd4597de4b3cd8a54d8f7748a0ac2fa5e3eb42d5939b19fd2eb514c035e966a88f4699c96539ff906ab040b13e797609599e060b1e798c9da3a2c879e86263541eb7ae1b298ec457a91a8949047a54defa721c7111387e8b6d14d82c381b1edc7305d6a3cec79827e72705ab7b86c82ea2b2df3b28c32fbc2f084c3831e2063695917b7918854f9b026618cd57ac731f8c8a61b0d5aa516ab0e75c09b1d6623263c5be3e32724de058c5dadd2bb7cbcc3a6f886ebe1b4717f4830a5d8d2dd96a707e46583289dbb7ce31cdc8eaaf6944f374dd56bde6fdcb3017db3c0274977e0cc1e116c6375ca3dcbf190157e0032e2a265b94e04aa76a241084097b6c99ce079b796c1cb74a4294cdcf1b359d2b68096eea6c61ef0a720ac32a15196811cead9a7b6756f848d8ef5679eafac8aa2f4609a6082ccfd809734f28fc10520fd495863ad30592ee16285a6ea79dffad3017ec5fddcc3eac7f153e5b191a3790f1319c51a420a6e3f028cb8b998afafe091476f38a485fe234b08a400f7616b66825463e5cf6991562d0c4cf3644304a4fae166217d1ec806977966fad9144248835319383e5deccf0481245c5a3390731ff9f77b5c1e9140696d073d17885d5b77d6c1e75f29b48bfdfec8ef6790cc417f323420acc1a7e14742d3bec5c83c859aa1a660a6bcb56eb7d83b293d920d48f13ff7274e38095b707f469d4aaa9fac9b295f71916d4e6873a45dffbefc48421fa92861459443d58caf0f2053063a55163640849b4ee2b57e5064f52d6812024498234f7966df5bd2983527f24053b6f8d54d836cacdc31d040ebe1d921855747620f10c9e245797a2c1add9f5f05e6a85afba9b1a94e3ea0e9c76fbb549dd74dc8471e53f4aa402b54d9bc172f1938d4fae3058c437e05ce4f13b8e78fc2000063b515cc68336c905a94eb798a79459074c218b969644398400ef7417e6131f0a51a2b4bc546a2a05104e8de0b2057a37c633467d5a10fb2dac8bff6840b4886a4ca73739225777b82c24b0d87f3359a97eac5a900bb5807a9cea9398cf9344e41bcb4bb4cd3617d2c98d746a4b633844d22db4e72160fe7ce2c1858c766635294af4b5246decdb1a44a35d29b93ef4a030fab89e250bfb8a98b9dcb4a9a898d630cab630a2b95b7fc04241c76e0f2cf62aa90b2ee311d27c4294aa6f37235595d8f9c8717227e73d9818398a2bd66d1fef9d1db3e866ec5571ecd367216867c9600c2c8a1516eebd28a18063d7088b0f47fbc8dd881383692f38969a1d20e986f5a66d189c3163ac1dfd4be088c0b586311e56efa4995f136440dca745e7ac455729fdca43155967ef19f9aba8e754bb5bf5c35ba05482f590b9c978eebb29f12b507b966f8ec1757dabf2061eb8e9cea899add05e85283c775268f112ced1701b967e3710753d26ea3a7bd7cd57d876879fa11a71bd7e3a289f20ad718d62c7cc87ff9dfb27f7cef0b43a1b622de3a137b0f7507d1dbcb7a93b1c59fdd13227e23bc6d31c497018c67506607cf342a34c4b3681979e26df32542b729bed231c68af9c9bc4aa19c6d6174f5459f0d5fb9ce2109d6809623d0d93f80e0e5dc10f9603f651f13131dd57771d371c82cbdbc1b9c11aa57cfbf50c8b781183fb521d444f8236d3454d16cb9e5c9bc58cae3e5f2c712aeba945725a3b8f64360d36d6773dac7b374c4c20c14e46dd05a06d5c0ff23492ae3d13f5eeeadf43891db3d92d41351e0fb309c091522cbb1c6c0ac8217414b376cc73c2b10c14fe261ebf151ff5502107178ac18b3efb00957bc62d91a73d147b49f93e066e4261faec522a293c5c0584abc29e78a67fe2b2ebb5290b030549aef655a45ae02c8acfea9820487efa19a7e4c5d8ec6a039b8d478ab0d43ccbc2989cc40cf35a1dd603c1e76e7e87fff3b7bf70f05ca6ce66e5c432054a1d86cdfcc3170c885ba3b5ca9f1a10f052167e8a3313a6d05acdb13d02fe01fa5ea21b6deccbca97342bb6efa5590c9687fa63d3f0ecbc375e52d620a0e18cc64f7e6548b5b18fab760d93bf2b22773817ade352d2d6ed8a93b5ab3a931d266384f194e223a1be0d94b568457d79dd683c7c49a99cfa4ca76f4ea64c042d0bc4e62ecd21831c390927fc49dbf5e3007e9e9ca0f4ea7891b00cecadbedb94e02376e504ca663aff1257d630e841b12d479f617029d4b1d8580019fb494f97ae2ffc97fc6a07916348422f5eaddcdce08986997", @typed={0x10, 0x85, @binary="9e64f489ed0114d3b455b265"}, @generic="6475273ec47c5c3ae477f31db2ddc486f0e1fa261a135e9998f8d443fe4489bfe9d39bb81e5f48217b0c26705e3ae3041d1e7a2838c46fabcd1ecb4cb827f3ae03dc131be64edf5824fada4a8ba22589547cd0982020ad01f1052c0eec353cd5a2c52db430f527c87a6eaca67849516bf5958b515fcb50fe48"]}, @generic="4090b92b32a59e6e2c61400f9351adbc1fb11494b97294721b6a581f", @typed={0x14, 0x63, @ipv6=@mcast2}, @generic="27e99d7d765b3b1c67a34322cffc9885a3a5cd2cd3f6122aaf5a21c2ddff22c4"]}, 0x1258}, 0x1, 0x0, 0x0, 0x8800}, 0x8001) fstat(r0, &(0x7f0000001800)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$jfs(&(0x7f00000000c0)='jfs\x00', &(0x7f0000000100)='./file1\x00', 0x100, 0x8, &(0x7f0000000580)=[{&(0x7f0000000140)="835eb3a0d2ee55932e5aa6b5485774f3f863922a51471df35a2438748831a91b30dfbf477f9eff3c8a7b3e3b699402f6db0333b9e0257678f9ed0aab1b9f43277c3a9100dbd4910e2ef89b", 0x49, 0x8}, {&(0x7f0000000200)="0dde5e7e1fbe99ddbc044c693274dce0346ce3d0d3fb96219886a06eecead8932c13de0d4f7d3a80ffb9eb36e7e2cbcd7086a97be2e7d4126b", 0x39, 0x2f1}, {&(0x7f00000002c0)="936da56c535b152eee94940b043c2369ddd4c3ab86b2de3b0da0b964a2c12868fa0e82bcdb86f4e44a014b9e4408e599b5eb9b9ddf586fa2cc2cbe641e6223b49368ac372f3089b4f09c2752abab3563ea1c5c4e14df4f3215ddcd73c4d3c7", 0x5f, 0x10000}, {&(0x7f0000000340)="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", 0xff, 0x5}, {&(0x7f0000001880)="bb57f323468e80491fdcf1256026e72f479a95f4584c5e8c107c07c0b3dc54fde81cbcea8c06a01df2209c651762dd018b7e64", 0x33, 0x1000}, {&(0x7f0000000440)="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", 0xff, 0xff}, {&(0x7f0000000800)="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", 0x1000, 0x8}, {&(0x7f0000000540)="31a12048aa089969b4582b01f3d14220538b185cca39ebb9823e7dbb370f9e4a079e8a526a703b", 0x27, 0xfffffffffffffffa}], 0x8004, &(0x7f00000018c0)={[{@integrity='integrity'}, {@noquota='noquota'}, {@uid={'uid', 0x3d, r4}}], [{@hash='hash'}]}) socket$alg(0x26, 0x5, 0x0) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000740)={0x0, 0x3, 0x4, 0x40, {0x77359400}, {0x3, 0x2, 0x85b8000, 0x4, 0x80000001, 0x91f5, "35d107b9"}, 0x4, 0x3, @offset=0xce6, 0x4}) 09:59:39 executing program 4: ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x0, 0x0, 0x1a2, 0x0, 0x0, 0x3002}, {0x0, 0x0, 0x9}]}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)) write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0x5e0) ioctl$TCSETSF(0xffffffffffffffff, 0x5412, &(0x7f0000000200)={0x17}) 09:59:39 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{0x0}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x10400003) 09:59:39 executing program 1: r0 = socket$netlink(0x10, 0x3, 0xa) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000032000100000000e9ff000000000000001400018300000000000008000100696665000000"], 0x28}}, 0x0) 09:59:39 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000012c0)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) close(r1) accept4$alg(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_NETID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x0, 0x0, 0x0, 0x0, {{}, 0x0, 0x800b, 0x0, {0x8}}}, 0x24}}, 0x0) [ 797.928039][ T3399] jfs: Unrecognized mount option "er¼n¼Ârhûˆount-ro" or missing value [ 798.019040][ T3405] jfs: Unrecognized mount option "hash" or missing value 09:59:39 executing program 4: ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x0, 0x0, 0x1a2, 0x0, 0x0, 0x3002}, {0x0, 0x0, 0x9}]}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0) r1 = syz_open_pts(r0, 0x0) write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0x5e0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000200)={0x17}) 09:59:39 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000012c0)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) close(r1) accept4$alg(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_NETID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x0, 0x0, 0x0, 0x0, {{}, 0x0, 0x800b, 0x0, {0x8}}}, 0x24}}, 0x0) 09:59:39 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0) r0 = syz_open_procfs(0x0, 0x0) preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x10400003) 09:59:39 executing program 5: syz_mount_image$jfs(&(0x7f00000001c0)='jfs\x00', &(0x7f0000000280)='./file1\x00', 0xfffffffffffffffe, 0x0, 0x0, 0x1800000, &(0x7f00000007c0)=ANY=[@ANYBLOB='errors=re,integrity,\x00'/37]) 09:59:39 executing program 1: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x101002, 0x0) ioctl$FICLONERANGE(r0, 0x4020940d, 0x0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f00000002c0)=""/246) r2 = memfd_create(&(0x7f0000001ac0)='^\x00', 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r3, 0x10e, 0x1, &(0x7f0000000200), 0x4) pwritev(r2, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) sendfile(r1, r2, 0x0, 0x102002700) r4 = dup2(0xffffffffffffffff, r2) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000440)={0x0, 0x0}, 0x10) ioctl$TCSETA(r4, 0x5406, 0x0) 09:59:39 executing program 4: ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x0, 0x0, 0x1a2, 0x0, 0x0, 0x3002}, {0x0, 0x0, 0x9}]}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0) r1 = syz_open_pts(r0, 0x0) write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0x5e0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000200)={0x17}) [ 798.320595][ T3428] JFS: re is an invalid error handler [ 799.599744][ T821] device bridge_slave_1 left promiscuous mode [ 799.605898][ T821] bridge0: port 2(bridge_slave_1) entered disabled state [ 799.659851][ T821] device bridge_slave_0 left promiscuous mode [ 799.666002][ T821] bridge0: port 1(bridge_slave_0) entered disabled state [ 801.319256][ T821] device hsr_slave_0 left promiscuous mode [ 801.369496][ T821] device hsr_slave_1 left promiscuous mode [ 801.417313][ T821] team0 (unregistering): Port device team_slave_1 removed [ 801.429072][ T821] team0 (unregistering): Port device team_slave_0 removed [ 801.442027][ T821] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 801.473322][ T821] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 801.560100][ T821] bond0 (unregistering): Released all slaves [ 801.645565][ T3446] IPVS: ftp: loaded support on port[0] = 21 [ 801.716203][ T3446] chnl_net:caif_netlink_parms(): no params data found [ 801.786235][ T3446] bridge0: port 1(bridge_slave_0) entered blocking state [ 801.793349][ T3446] bridge0: port 1(bridge_slave_0) entered disabled state [ 801.801233][ T3446] device bridge_slave_0 entered promiscuous mode [ 801.816168][ T3446] bridge0: port 2(bridge_slave_1) entered blocking state [ 801.823271][ T3446] bridge0: port 2(bridge_slave_1) entered disabled state [ 801.831602][ T3446] device bridge_slave_1 entered promiscuous mode [ 801.867441][ T3446] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 801.880223][ T3446] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 801.903428][ T3446] team0: Port device team_slave_0 added [ 801.910734][ T3446] team0: Port device team_slave_1 added [ 802.002617][ T3446] device hsr_slave_0 entered promiscuous mode [ 802.149215][ T3446] device hsr_slave_1 entered promiscuous mode [ 802.247916][ T3446] bridge0: port 2(bridge_slave_1) entered blocking state [ 802.255026][ T3446] bridge0: port 2(bridge_slave_1) entered forwarding state [ 802.262420][ T3446] bridge0: port 1(bridge_slave_0) entered blocking state [ 802.269523][ T3446] bridge0: port 1(bridge_slave_0) entered forwarding state [ 802.336166][ T3446] 8021q: adding VLAN 0 to HW filter on device bond0 [ 802.356354][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 802.371258][ T1277] bridge0: port 1(bridge_slave_0) entered disabled state [ 802.385808][ T1277] bridge0: port 2(bridge_slave_1) entered disabled state [ 802.409613][ T3446] 8021q: adding VLAN 0 to HW filter on device team0 [ 802.430798][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 802.439261][ T1277] bridge0: port 1(bridge_slave_0) entered blocking state [ 802.446344][ T1277] bridge0: port 1(bridge_slave_0) entered forwarding state [ 802.453896][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 802.462262][ T1277] bridge0: port 2(bridge_slave_1) entered blocking state [ 802.469348][ T1277] bridge0: port 2(bridge_slave_1) entered forwarding state [ 802.496767][ T3446] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 802.507351][ T3446] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 802.532299][ T3446] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 802.543135][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 802.551850][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 802.560227][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 802.568621][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 802.593330][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 802.601081][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 802.761363][ T3454] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 802.771779][ T3454] CPU: 0 PID: 3454 Comm: syz-executor.3 Not tainted 5.2.0+ #37 [ 802.779324][ T3454] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 802.789386][ T3454] Call Trace: [ 802.792699][ T3454] dump_stack+0x1d8/0x2f8 [ 802.797062][ T3454] dump_header+0xd8/0x970 [ 802.801400][ T3454] oom_kill_process+0xcd/0x320 [ 802.806169][ T3454] out_of_memory+0x5e1/0x8a0 [ 802.810801][ T3454] ? unregister_oom_notifier+0x20/0x20 [ 802.816273][ T3454] ? trace_hardirqs_on+0x74/0x80 [ 802.821246][ T3454] memory_max_write+0x537/0x6a0 [ 802.826115][ T3454] ? memory_max_show+0xa0/0xa0 [ 802.830891][ T3454] ? memory_max_show+0xa0/0xa0 [ 802.835666][ T3454] cgroup_file_write+0x27b/0x6e0 [ 802.840764][ T3454] ? cgroup_seqfile_stop+0xc0/0xc0 [ 802.845901][ T3454] ? cgroup_seqfile_stop+0xc0/0xc0 [ 802.851029][ T3454] kernfs_fop_write+0x3e4/0x4f0 [ 802.855994][ T3454] ? kernfs_fop_read+0x580/0x580 [ 802.860947][ T3454] __vfs_write+0xf9/0x7d0 [ 802.865285][ T3454] ? __kernel_write+0x350/0x350 [ 802.870165][ T3454] ? __sb_start_write+0x39c/0x440 [ 802.875216][ T3454] ? __kasan_check_read+0x11/0x20 [ 802.880242][ T3454] vfs_write+0x275/0x590 [ 802.884489][ T3454] ksys_write+0x16b/0x2a0 [ 802.888966][ T3454] ? __ia32_sys_read+0x90/0x90 [ 802.893757][ T3454] ? retint_kernel+0x10/0x10 [ 802.898350][ T3454] __x64_sys_write+0x7b/0x90 [ 802.902932][ T3454] do_syscall_64+0xfe/0x140 [ 802.907440][ T3454] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 802.913344][ T3454] RIP: 0033:0x459819 [ 802.917253][ T3454] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 802.937130][ T3454] RSP: 002b:00007f69d1775c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 802.945529][ T3454] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459819 [ 802.953500][ T3454] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 802.961482][ T3454] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 802.969579][ T3454] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f69d17766d4 [ 802.977561][ T3454] R13: 00000000004c9774 R14: 00000000004e0b70 R15: 00000000ffffffff [ 802.985684][ T3454] memory: usage 3276kB, limit 0kB, failcnt 560352 [ 802.992281][ T3454] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 802.999333][ T3454] Memory cgroup stats for /syz3: [ 803.000986][ T3454] anon 2158592 [ 803.000986][ T3454] file 0 [ 803.000986][ T3454] kernel_stack 65536 [ 803.000986][ T3454] slab 856064 [ 803.000986][ T3454] sock 0 [ 803.000986][ T3454] shmem 0 [ 803.000986][ T3454] file_mapped 0 [ 803.000986][ T3454] file_dirty 135168 [ 803.000986][ T3454] file_writeback 0 [ 803.000986][ T3454] anon_thp 2097152 [ 803.000986][ T3454] inactive_anon 0 [ 803.000986][ T3454] active_anon 2158592 [ 803.000986][ T3454] inactive_file 0 [ 803.000986][ T3454] active_file 0 [ 803.000986][ T3454] unevictable 0 [ 803.000986][ T3454] slab_reclaimable 270336 [ 803.000986][ T3454] slab_unreclaimable 585728 [ 803.000986][ T3454] pgfault 79002 [ 803.000986][ T3454] pgmajfault 0 [ 803.000986][ T3454] workingset_refault 0 [ 803.000986][ T3454] workingset_activate 0 [ 803.000986][ T3454] workingset_nodereclaim 0 [ 803.000986][ T3454] pgrefill 0 [ 803.000986][ T3454] pgscan 0 [ 803.000986][ T3454] pgsteal 0 [ 803.000986][ T3454] pgactivate 0 [ 803.096045][ T3454] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=3452,uid=0 [ 803.112065][ T3454] Memory cgroup out of memory: Killed process 3452 (syz-executor.3) total-vm:72708kB, anon-rss:2136kB, file-rss:34816kB, shmem-rss:0kB [ 803.127889][ T1057] oom_reaper: reaped process 3452 (syz-executor.3), now anon-rss:0kB, file-rss:34832kB, shmem-rss:0kB 09:59:44 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0) r0 = syz_open_procfs(0x0, 0x0) preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x10400003) 09:59:44 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000012c0)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) close(r1) accept4$alg(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_NETID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x0, 0x0, 0x0, 0x0, {{}, 0x0, 0x800b, 0x0, {0x8}}}, 0x24}}, 0x0) 09:59:44 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000040)='./file1/../file0\x00', 0x0, 0xfffffffffffffe6f, 0x0, 0x0, &(0x7f0000000080)={[{@errors_remount='errors=remount-ro'}, {@noquota='noquota'}, {@integrity='integrity'}]}) 09:59:44 executing program 4: ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x0, 0x0, 0x1a2, 0x0, 0x0, 0x3002}, {0x0, 0x0, 0x9}]}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0) r1 = syz_open_pts(r0, 0x0) write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0x5e0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000200)={0x17}) 09:59:44 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000000)=r0, 0x4) sendmsg(0xffffffffffffffff, 0x0, 0x40) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuset.effective_cpus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) getpid() r2 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) r3 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r3, &(0x7f0000000540)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @ipv4}, 0x80, 0x0}, 0x24000001) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000080)='cgroup.type\x00', 0x2, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f00000002c0)='threaded\x00', 0x9) write$cgroup_int(r2, 0x0, 0x0) write$cgroup_int(r2, 0x0, 0x0) 09:59:44 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x10400003) [ 803.327971][ T3446] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 803.337984][ T3446] CPU: 0 PID: 3446 Comm: syz-executor.3 Not tainted 5.2.0+ #37 [ 803.345564][ T3446] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 803.355799][ T3446] Call Trace: [ 803.359093][ T3446] dump_stack+0x1d8/0x2f8 [ 803.363582][ T3446] dump_header+0xd8/0x970 [ 803.367964][ T3446] oom_kill_process+0xcd/0x320 [ 803.372747][ T3446] out_of_memory+0x5e1/0x8a0 [ 803.377349][ T3446] ? unregister_oom_notifier+0x20/0x20 [ 803.382819][ T3446] ? __kasan_check_read+0x11/0x20 [ 803.387861][ T3446] try_charge+0x134a/0x17b0 [ 803.392400][ T3446] ? __memcg_kmem_charge_memcg+0x180/0x180 [ 803.398224][ T3446] ? __lock_acquire+0x4750/0x4750 [ 803.403282][ T3446] ? rcu_lock_release+0x15/0x20 [ 803.408148][ T3446] ? get_mem_cgroup_from_mm+0x15e/0x170 [ 803.413703][ T3446] mem_cgroup_try_charge+0x216/0x560 [ 803.418998][ T3446] mem_cgroup_try_charge_delay+0x25/0xa0 [ 803.424645][ T3446] wp_page_copy+0x367/0x18c0 [ 803.429270][ T3446] ? rcu_lock_release+0x30/0x30 [ 803.434142][ T3446] ? __lock_acquire+0x4750/0x4750 [ 803.439196][ T3446] ? __kasan_check_read+0x11/0x20 [ 803.444232][ T3446] ? do_raw_spin_unlock+0x49/0x260 [ 803.449355][ T3446] do_wp_page+0x2c9/0x1ce0 [ 803.453792][ T3446] ? __rwlock_init+0x130/0x130 [ 803.458564][ T3446] ? count_memcg_event_mm+0x300/0x300 [ 803.463983][ T3446] handle_mm_fault+0x2bcf/0x6080 [ 803.468942][ T3446] ? finish_fault+0x230/0x230 [ 803.473629][ T3446] ? vmacache_find+0x50f/0x5b0 [ 803.478387][ T3446] ? vmacache_update+0xb7/0x120 [ 803.483263][ T3446] do_user_addr_fault+0x589/0xaf0 [ 803.488325][ T3446] __do_page_fault+0xd3/0x1f0 [ 803.493017][ T3446] do_page_fault+0x99/0xb0 [ 803.497454][ T3446] page_fault+0x39/0x40 [ 803.501612][ T3446] RIP: 0033:0x4308f6 [ 803.505515][ T3446] Code: 1f 44 00 00 48 29 e8 31 c9 48 81 fb 40 56 71 00 0f 95 c1 48 8d 34 2a 48 83 cd 01 48 c1 e1 02 48 83 c8 01 48 09 e9 48 89 73 58 <48> 89 4a 08 48 89 46 08 48 8d 4a 10 8b 05 6c 46 64 00 85 c0 0f 84 09:59:44 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000012c0)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) close(r1) accept4$alg(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_NETID(r1, 0x0, 0x0) 09:59:45 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0) r0 = syz_open_procfs(0x0, 0x0) preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x10400003) [ 803.525335][ T3446] RSP: 002b:00007ffcb691f4e0 EFLAGS: 00010206 [ 803.531400][ T3446] RAX: 0000000000019691 RBX: 0000000000715640 RCX: 0000000000008041 [ 803.539377][ T3446] RDX: 0000555555a92930 RSI: 0000555555a9a970 RDI: 0000000000000003 [ 803.547367][ T3446] RBP: 0000000000008041 R08: 0000000000000001 R09: 0000555555a91940 [ 803.555351][ T3446] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000715698 [ 803.563324][ T3446] R13: 0000000000715698 R14: 0000000000000000 R15: 0000000000002710 [ 803.572925][ T3446] memory: usage 944kB, limit 0kB, failcnt 560369 09:59:45 executing program 4: ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x0, 0x0, 0x1a2, 0x0, 0x0, 0x3002}, {0x0, 0x0, 0x9}]}) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000600)) r0 = syz_open_pts(0xffffffffffffffff, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x5e0) ioctl$TCSETSF(r0, 0x5412, &(0x7f0000000200)={0x17}) [ 803.579329][ T3446] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 803.586199][ T3446] Memory cgroup stats for /syz3: [ 803.586268][ T3446] anon 4096 [ 803.586268][ T3446] file 0 [ 803.586268][ T3446] kernel_stack 65536 [ 803.586268][ T3446] slab 856064 [ 803.586268][ T3446] sock 0 [ 803.586268][ T3446] shmem 0 [ 803.586268][ T3446] file_mapped 0 [ 803.586268][ T3446] file_dirty 135168 [ 803.586268][ T3446] file_writeback 0 [ 803.586268][ T3446] anon_thp 0 [ 803.586268][ T3446] inactive_anon 0 [ 803.586268][ T3446] active_anon 4096 [ 803.586268][ T3446] inactive_file 0 [ 803.586268][ T3446] active_file 0 [ 803.586268][ T3446] unevictable 0 [ 803.586268][ T3446] slab_reclaimable 270336 [ 803.586268][ T3446] slab_unreclaimable 585728 [ 803.586268][ T3446] pgfault 79002 [ 803.586268][ T3446] pgmajfault 0 [ 803.586268][ T3446] workingset_refault 0 [ 803.586268][ T3446] workingset_activate 0 [ 803.586268][ T3446] workingset_nodereclaim 0 [ 803.586268][ T3446] pgrefill 0 [ 803.586268][ T3446] pgscan 0 [ 803.586268][ T3446] pgsteal 0 [ 803.586268][ T3446] pgactivate 0 09:59:45 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000012c0)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) close(r1) accept4$alg(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_NETID(r1, 0x0, 0x0) 09:59:45 executing program 5: syz_mount_image$jfs(&(0x7f00000001c0)='jfs\x00', &(0x7f0000000280)='./file1\x00', 0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000007c0)={[{@errors_remount='errors=remount-ro'}, {@noquota='noquota'}, {@integrity='integrity'}]}) [ 803.679545][ T3446] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=3446,uid=0 [ 803.694891][ T3446] Memory cgroup out of memory: Killed process 3446 (syz-executor.3) total-vm:72444kB, anon-rss:68kB, file-rss:34832kB, shmem-rss:0kB [ 803.709379][ T1057] oom_reaper: reaped process 3446 (syz-executor.3), now anon-rss:0kB, file-rss:33936kB, shmem-rss:0kB 09:59:45 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') preadv(0xffffffffffffffff, &(0x7f0000000480), 0x10000000000002a1, 0x10400003) 09:59:45 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r2 = socket$kcm(0x10, 0x3, 0x0) setsockopt$sock_attach_bpf(r2, 0x10e, 0x4, &(0x7f0000000000)=r0, 0x4) r3 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x40) openat$cgroup_ro(r3, &(0x7f0000000140)='cpuset.effective_cpus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) getpid() r4 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) r5 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r5, &(0x7f0000000540)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @ipv4}, 0x80, 0x0}, 0x24000001) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000080)='cgroup.type\x00', 0x2, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f00000002c0)='threaded\x00', 0x9) write$cgroup_int(r4, 0x0, 0x0) write$cgroup_int(r4, 0x0, 0x0) 09:59:45 executing program 4: ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x0, 0x0, 0x1a2, 0x0, 0x0, 0x3002}, {0x0, 0x0, 0x9}]}) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000600)) r0 = syz_open_pts(0xffffffffffffffff, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x5e0) ioctl$TCSETSF(r0, 0x5412, &(0x7f0000000200)={0x17}) 09:59:45 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000012c0)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) close(r1) accept4$alg(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_NETID(r1, 0x0, 0x0) [ 804.053174][ T3483] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 804.063537][ T3483] CPU: 0 PID: 3483 Comm: syz-executor.1 Not tainted 5.2.0+ #37 [ 804.071088][ T3483] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 804.081146][ T3483] Call Trace: [ 804.084451][ T3483] dump_stack+0x1d8/0x2f8 [ 804.088785][ T3483] dump_header+0xd8/0x970 [ 804.093133][ T3483] oom_kill_process+0xcd/0x320 [ 804.097999][ T3483] out_of_memory+0x5e1/0x8a0 [ 804.102602][ T3483] ? unregister_oom_notifier+0x20/0x20 [ 804.108079][ T3483] ? __kasan_check_read+0x11/0x20 [ 804.113122][ T3483] try_charge+0x134a/0x17b0 [ 804.117661][ T3483] ? __memcg_kmem_charge_memcg+0x180/0x180 [ 804.123487][ T3483] ? __lock_acquire+0x4750/0x4750 [ 804.128527][ T3483] ? rcu_lock_release+0x15/0x20 [ 804.133830][ T3483] ? get_mem_cgroup_from_mm+0x15e/0x170 [ 804.139386][ T3483] mem_cgroup_try_charge+0x216/0x560 [ 804.144688][ T3483] mem_cgroup_try_charge_delay+0x25/0xa0 [ 804.150333][ T3483] handle_mm_fault+0x31f3/0x6080 [ 804.155310][ T3483] ? finish_fault+0x230/0x230 [ 804.160007][ T3483] ? vmacache_find+0x566/0x5b0 [ 804.164778][ T3483] ? vmacache_update+0xb7/0x120 [ 804.170162][ T3483] do_user_addr_fault+0x589/0xaf0 [ 804.175222][ T3483] __do_page_fault+0xd3/0x1f0 [ 804.179906][ T3483] do_page_fault+0x99/0xb0 [ 804.184336][ T3483] page_fault+0x39/0x40 [ 804.188497][ T3483] RIP: 0033:0x41115f [ 804.192403][ T3483] Code: 0f 84 c8 02 00 00 48 83 bd 78 ff ff ff 00 0f 84 f9 04 00 00 48 8b 95 68 ff ff ff 44 89 95 38 ff ff ff 4c 8d ac 10 00 f7 ff ff <49> 89 85 90 06 00 00 49 8d 85 10 03 00 00 49 89 95 98 06 00 00 41 [ 804.212276][ T3483] RSP: 002b:00007ffcc0191910 EFLAGS: 00010206 [ 804.218355][ T3483] RAX: 00007f0ce3267000 RBX: 0000000000020000 RCX: 000000000045986a [ 804.226326][ T3483] RDX: 0000000000021000 RSI: 0000000000021000 RDI: 0000000000000000 [ 804.234296][ T3483] RBP: 00007ffcc01919f0 R08: ffffffffffffffff R09: 0000000000000000 [ 804.242376][ T3483] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffcc0191ae0 [ 804.250348][ T3483] R13: 00007f0ce3287700 R14: 0000000000000001 R15: 000000000075bfd4 [ 804.250416][ T3483] memory: usage 8624kB, limit 0kB, failcnt 620 [ 804.250424][ T3483] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 804.250428][ T3483] Memory cgroup stats for /syz1: [ 804.250507][ T3483] anon 4505600 [ 804.250507][ T3483] file 122880 [ 804.250507][ T3483] kernel_stack 131072 [ 804.250507][ T3483] slab 3878912 [ 804.250507][ T3483] sock 65536 [ 804.250507][ T3483] shmem 131072 [ 804.250507][ T3483] file_mapped 0 [ 804.250507][ T3483] file_dirty 0 [ 804.250507][ T3483] file_writeback 0 [ 804.250507][ T3483] anon_thp 4194304 [ 804.250507][ T3483] inactive_anon 135168 [ 804.250507][ T3483] active_anon 4431872 [ 804.250507][ T3483] inactive_file 12288 [ 804.250507][ T3483] active_file 0 [ 804.250507][ T3483] unevictable 0 [ 804.250507][ T3483] slab_reclaimable 1216512 [ 804.250507][ T3483] slab_unreclaimable 2662400 [ 804.250507][ T3483] pgfault 87648 [ 804.250507][ T3483] pgmajfault 0 [ 804.250507][ T3483] workingset_refault 0 [ 804.250507][ T3483] workingset_activate 0 [ 804.250507][ T3483] workingset_nodereclaim 0 [ 804.250507][ T3483] pgrefill 2100 [ 804.250507][ T3483] pgscan 3928 [ 804.250507][ T3483] pgsteal 1414 [ 804.264601][ T3483] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=3398,uid=0 [ 804.380880][ T3483] Memory cgroup out of memory: Killed process 3398 (syz-executor.1) total-vm:72572kB, anon-rss:2188kB, file-rss:34816kB, shmem-rss:0kB [ 804.395773][ T1057] oom_reaper: reaped process 3398 (syz-executor.1), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 804.458275][ T3486] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 804.468700][ T3486] CPU: 1 PID: 3486 Comm: syz-executor.1 Not tainted 5.2.0+ #37 [ 804.476262][ T3486] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 804.486322][ T3486] Call Trace: [ 804.489612][ T3486] dump_stack+0x1d8/0x2f8 [ 804.493938][ T3486] dump_header+0xd8/0x970 [ 804.498288][ T3486] oom_kill_process+0xcd/0x320 [ 804.503058][ T3486] out_of_memory+0x5e1/0x8a0 [ 804.507644][ T3486] ? unregister_oom_notifier+0x20/0x20 [ 804.513107][ T3486] memory_max_write+0x537/0x6a0 [ 804.517951][ T3486] ? lock_acquire+0x158/0x250 [ 804.522642][ T3486] ? memory_max_show+0xa0/0xa0 [ 804.527404][ T3486] ? trace_lock_acquire+0x154/0x1b0 [ 804.532600][ T3486] ? lock_acquire+0x158/0x250 [ 804.537416][ T3486] ? kernfs_fop_write+0x22e/0x4f0 [ 804.542471][ T3486] ? memory_max_show+0xa0/0xa0 [ 804.547231][ T3486] cgroup_file_write+0x27b/0x6e0 [ 804.552171][ T3486] ? cgroup_seqfile_stop+0xc0/0xc0 [ 804.557283][ T3486] ? cgroup_seqfile_stop+0xc0/0xc0 [ 804.562402][ T3486] kernfs_fop_write+0x3e4/0x4f0 [ 804.567260][ T3486] ? kernfs_fop_read+0x580/0x580 [ 804.572206][ T3486] __vfs_write+0xf9/0x7d0 [ 804.576529][ T3486] ? retint_kernel+0x10/0x10 [ 804.581123][ T3486] ? __kernel_write+0x350/0x350 [ 804.585982][ T3486] ? rcu_irq_exit+0xe3/0x260 [ 804.590607][ T3486] ? __sb_start_write+0x39c/0x440 [ 804.595633][ T3486] vfs_write+0x275/0x590 [ 804.599886][ T3486] ksys_write+0x16b/0x2a0 [ 804.604257][ T3486] ? __ia32_sys_read+0x90/0x90 [ 804.609018][ T3486] ? prepare_exit_to_usermode+0x1f7/0x580 [ 804.614734][ T3486] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 804.620238][ T3486] ? trace_irq_disable_rcuidle+0x23/0x1c0 [ 804.625966][ T3486] ? do_syscall_64+0x1d/0x140 [ 804.630640][ T3486] __x64_sys_write+0x7b/0x90 [ 804.635239][ T3486] do_syscall_64+0xfe/0x140 [ 804.639740][ T3486] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 804.645626][ T3486] RIP: 0033:0x459819 [ 804.649521][ T3486] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 804.669221][ T3486] RSP: 002b:00007f0ce32a7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 804.677638][ T3486] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459819 [ 804.685603][ T3486] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 804.693575][ T3486] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 804.701541][ T3486] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f0ce32a86d4 [ 804.709513][ T3486] R13: 00000000004c9774 R14: 00000000004e0b70 R15: 00000000ffffffff [ 804.717621][ T3486] memory: usage 6504kB, limit 0kB, failcnt 626 [ 804.723957][ T3486] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 804.730961][ T3486] Memory cgroup stats for /syz1: [ 804.731869][ T3486] anon 2375680 [ 804.731869][ T3486] file 122880 [ 804.731869][ T3486] kernel_stack 131072 [ 804.731869][ T3486] slab 3878912 [ 804.731869][ T3486] sock 65536 [ 804.731869][ T3486] shmem 131072 [ 804.731869][ T3486] file_mapped 0 [ 804.731869][ T3486] file_dirty 0 [ 804.731869][ T3486] file_writeback 0 [ 804.731869][ T3486] anon_thp 2097152 [ 804.731869][ T3486] inactive_anon 135168 [ 804.731869][ T3486] active_anon 2301952 [ 804.731869][ T3486] inactive_file 12288 [ 804.731869][ T3486] active_file 0 [ 804.731869][ T3486] unevictable 0 [ 804.731869][ T3486] slab_reclaimable 1216512 [ 804.731869][ T3486] slab_unreclaimable 2662400 [ 804.731869][ T3486] pgfault 87648 [ 804.731869][ T3486] pgmajfault 0 [ 804.731869][ T3486] workingset_refault 0 [ 804.731869][ T3486] workingset_activate 0 [ 804.731869][ T3486] workingset_nodereclaim 0 [ 804.731869][ T3486] pgrefill 2100 [ 804.731869][ T3486] pgscan 3928 [ 804.731869][ T3486] pgsteal 1414 [ 804.825773][ T3486] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=3483,uid=0 [ 804.841531][ T3486] Memory cgroup out of memory: Killed process 3483 (syz-executor.1) total-vm:72704kB, anon-rss:2144kB, file-rss:34816kB, shmem-rss:0kB [ 804.856757][ T1057] oom_reaper: reaped process 3483 (syz-executor.1), now anon-rss:0kB, file-rss:34848kB, shmem-rss:0kB [ 805.099787][ T2533] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 805.109923][ T2533] CPU: 1 PID: 2533 Comm: syz-executor.1 Not tainted 5.2.0+ #37 [ 805.117476][ T2533] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 805.127544][ T2533] Call Trace: [ 805.130839][ T2533] dump_stack+0x1d8/0x2f8 [ 805.135195][ T2533] dump_header+0xd8/0x970 [ 805.139523][ T2533] oom_kill_process+0xcd/0x320 [ 805.144325][ T2533] out_of_memory+0x5e1/0x8a0 [ 805.148927][ T2533] ? unregister_oom_notifier+0x20/0x20 [ 805.154377][ T2533] ? __kasan_check_read+0x11/0x20 [ 805.159514][ T2533] try_charge+0x134a/0x17b0 [ 805.164028][ T2533] ? __memcg_kmem_charge_memcg+0x180/0x180 [ 805.169867][ T2533] ? __lock_acquire+0x4750/0x4750 [ 805.174890][ T2533] ? rcu_lock_release+0x15/0x20 [ 805.179729][ T2533] ? get_mem_cgroup_from_mm+0x15e/0x170 [ 805.185442][ T2533] mem_cgroup_try_charge+0x216/0x560 [ 805.190723][ T2533] mem_cgroup_try_charge_delay+0x25/0xa0 [ 805.196360][ T2533] wp_page_copy+0x367/0x18c0 [ 805.200964][ T2533] ? rcu_lock_release+0x30/0x30 [ 805.205806][ T2533] ? __lock_acquire+0x4750/0x4750 [ 805.210824][ T2533] ? __kasan_check_read+0x11/0x20 [ 805.215846][ T2533] ? do_raw_spin_unlock+0x49/0x260 [ 805.220951][ T2533] do_wp_page+0x2c9/0x1ce0 [ 805.225360][ T2533] ? __rwlock_init+0x130/0x130 [ 805.230116][ T2533] ? count_memcg_event_mm+0x300/0x300 [ 805.235498][ T2533] handle_mm_fault+0x2bcf/0x6080 [ 805.240432][ T2533] ? finish_fault+0x230/0x230 [ 805.245364][ T2533] ? vmacache_find+0x251/0x5b0 [ 805.250141][ T2533] do_user_addr_fault+0x589/0xaf0 [ 805.255169][ T2533] __do_page_fault+0xd3/0x1f0 [ 805.259846][ T2533] do_page_fault+0x99/0xb0 [ 805.264256][ T2533] page_fault+0x39/0x40 [ 805.268401][ T2533] RIP: 0033:0x40702e [ 805.272289][ T2533] Code: 08 ff ff ff 8b 54 24 04 49 8b 37 31 c0 bf af e9 4b 00 e8 55 ac ff ff 8b 44 24 6c 49 8d 4f 60 ba 40 00 00 00 44 89 f6 44 89 e7 <41> 89 87 b4 00 00 00 48 8d 84 24 80 00 00 00 49 89 87 b8 00 00 00 [ 805.292497][ T2533] RSP: 002b:00007ffcc0191420 EFLAGS: 00010206 [ 805.298560][ T2533] RAX: 0000000000000005 RBX: 00007ffcc0191440 RCX: 00000000007133e0 [ 805.306532][ T2533] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000003 [ 805.314500][ T2533] RBP: 0000000000714e80 R08: 0000000000006000 R09: 0000000000004000 [ 805.322616][ T2533] R10: 00007ffcc0191540 R11: 0000000000000202 R12: 0000000000000003 [ 805.330577][ T2533] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000713380 [ 805.338870][ T2533] memory: usage 3992kB, limit 0kB, failcnt 635 [ 805.345177][ T2533] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 805.352143][ T2533] Memory cgroup stats for /syz1: [ 805.352225][ T2533] anon 176128 [ 805.352225][ T2533] file 122880 [ 805.352225][ T2533] kernel_stack 65536 [ 805.352225][ T2533] slab 3878912 [ 805.352225][ T2533] sock 65536 [ 805.352225][ T2533] shmem 131072 [ 805.352225][ T2533] file_mapped 0 [ 805.352225][ T2533] file_dirty 0 [ 805.352225][ T2533] file_writeback 0 [ 805.352225][ T2533] anon_thp 0 [ 805.352225][ T2533] inactive_anon 135168 [ 805.352225][ T2533] active_anon 176128 [ 805.352225][ T2533] inactive_file 12288 [ 805.352225][ T2533] active_file 0 [ 805.352225][ T2533] unevictable 0 [ 805.352225][ T2533] slab_reclaimable 1216512 [ 805.352225][ T2533] slab_unreclaimable 2662400 [ 805.352225][ T2533] pgfault 87648 [ 805.352225][ T2533] pgmajfault 0 [ 805.352225][ T2533] workingset_refault 0 [ 805.352225][ T2533] workingset_activate 0 [ 805.352225][ T2533] workingset_nodereclaim 0 [ 805.352225][ T2533] pgrefill 2100 [ 805.352225][ T2533] pgscan 3928 [ 805.352225][ T2533] pgsteal 1414 [ 805.352225][ T2533] pgactivate 924 09:59:47 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000000)=r0, 0x4) sendmsg(0xffffffffffffffff, 0x0, 0x40) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuset.effective_cpus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) getpid() r2 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) r3 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r3, &(0x7f0000000540)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @ipv4}, 0x80, 0x0}, 0x24000001) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000080)='cgroup.type\x00', 0x2, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f00000002c0)='threaded\x00', 0x9) write$cgroup_int(r2, 0x0, 0x0) write$cgroup_int(r2, 0x0, 0x0) 09:59:47 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000012c0)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) close(r1) accept4$alg(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_NETID(r1, 0x0, 0x0) 09:59:47 executing program 5: syz_mount_image$jfs(&(0x7f00000001c0)='jfs\x00', &(0x7f0000000280)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="6572726f72733d72656d6f75ef742d726f2c6e6f71756f74612c696e060000006974792c00"]) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x80000, 0x0) lstat(&(0x7f0000000440)='./file1\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$hfs(&(0x7f00000000c0)='hfs\x00', &(0x7f0000000100)='./file1\x00', 0xffffffffffffffff, 0x4, &(0x7f00000003c0)=[{&(0x7f0000000140)="86a9190d72d47c0c14172fb3cb5dec9a6b305591777b310d806265f04d34aa084f69ea607017fc74f49005be03f5f33ced7071d9d01cc7544df9", 0x3a, 0x1}, {&(0x7f0000000200)="defd3819d1b129361c9451af5b173932ae7b0c9bc65b7b40e454dd4f962dce8f17c59dad31c5b3127e76682eaabc5b81c15a12f64d44fe2c48490e2b17a596b330", 0x41, 0xfff}, {&(0x7f0000000180)="001ed9fa73608fdab1e323c1acbacd15ab1bed931adb9139cf14f2efab9ddf33", 0x20, 0x93a}, {&(0x7f00000002c0)="1bcab18b3f462774e32534dd3e89ef490c3e8195bca26851a7c5f2e366e33568f3eaed71ca46f5e1dd3e899fb2d9b175beaf42ee939ee1880e099ac986f0014901a89af6b2c720bd2a0ca93676190e5cb901ed732681e48a184a2f09ef6dfb972072b0c7aba0a0ebdff5ef3e651233506cc984e1fc74a40843326e087eeb403538643bd3ddcf41ab63e01e74b5e338ada32c5243e45d2198beddfe965bced139f25f2b2722c1609c90540ed474a9c0ccbc8344ba530183c7df7f3a85ac50ee0cfd16b15a969f846e3b7686b467f88023af840ec09af7ca4bc8b92b6ca3f34bd7c812e9e529180d48f3dc8a7544", 0xed, 0xffffffff}], 0x40, &(0x7f0000000500)={[{@gid={'gid', 0x3d, r1}}]}) setsockopt$TIPC_CONN_TIMEOUT(r0, 0x10f, 0x82, &(0x7f0000000080)=0xe93a, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) 09:59:47 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') preadv(0xffffffffffffffff, &(0x7f0000000480), 0x10000000000002a1, 0x10400003) 09:59:47 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000012c0)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) close(r1) accept4$alg(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) 09:59:47 executing program 4: ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x0, 0x0, 0x1a2, 0x0, 0x0, 0x3002}, {0x0, 0x0, 0x9}]}) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000600)) r0 = syz_open_pts(0xffffffffffffffff, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x5e0) ioctl$TCSETSF(r0, 0x5412, &(0x7f0000000200)={0x17}) [ 805.448461][ T2533] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=2533,uid=0 [ 805.463869][ T2533] Memory cgroup out of memory: Killed process 2533 (syz-executor.1) total-vm:72440kB, anon-rss:96kB, file-rss:35776kB, shmem-rss:0kB [ 805.478510][ T1057] oom_reaper: reaped process 2533 (syz-executor.1), now anon-rss:0kB, file-rss:34880kB, shmem-rss:0kB 09:59:47 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000012c0)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) close(r1) accept4$alg(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) 09:59:47 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)) r1 = syz_open_pts(r0, 0x0) write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0x5e0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000200)={0x17}) [ 805.532930][ T3509] JFS: remouït-ro is an invalid error handler 09:59:47 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') preadv(0xffffffffffffffff, &(0x7f0000000480), 0x10000000000002a1, 0x10400003) [ 805.650018][ T3512] hfs: can't find a HFS filesystem on dev loop5 09:59:47 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000012c0)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) close(r1) accept4$alg(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) 09:59:47 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)) r1 = syz_open_pts(r0, 0x0) write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0x5e0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000200)={0x17}) [ 805.766618][ T3509] JFS: remouït-ro is an invalid error handler 09:59:47 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') preadv(r0, 0x0, 0x0, 0x10400003) [ 807.339973][ T821] device bridge_slave_1 left promiscuous mode [ 807.346309][ T821] bridge0: port 2(bridge_slave_1) entered disabled state [ 807.399645][ T821] device bridge_slave_0 left promiscuous mode [ 807.405839][ T821] bridge0: port 1(bridge_slave_0) entered disabled state [ 809.030450][ T821] device hsr_slave_0 left promiscuous mode [ 809.069658][ T821] device hsr_slave_1 left promiscuous mode [ 809.126652][ T821] team0 (unregistering): Port device team_slave_1 removed [ 809.137980][ T821] team0 (unregistering): Port device team_slave_0 removed [ 809.152216][ T821] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 809.203697][ T821] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 809.268974][ T821] bond0 (unregistering): Released all slaves [ 809.375366][ T3542] IPVS: ftp: loaded support on port[0] = 21 [ 809.445089][ T3542] chnl_net:caif_netlink_parms(): no params data found [ 809.472386][ T3542] bridge0: port 1(bridge_slave_0) entered blocking state [ 809.479507][ T3542] bridge0: port 1(bridge_slave_0) entered disabled state [ 809.487019][ T3542] device bridge_slave_0 entered promiscuous mode [ 809.494872][ T3542] bridge0: port 2(bridge_slave_1) entered blocking state [ 809.501988][ T3542] bridge0: port 2(bridge_slave_1) entered disabled state [ 809.510000][ T3542] device bridge_slave_1 entered promiscuous mode [ 809.528609][ T3542] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 809.540830][ T3542] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 809.607766][ T3542] team0: Port device team_slave_0 added [ 809.621032][ T3542] team0: Port device team_slave_1 added [ 809.701277][ T3542] device hsr_slave_0 entered promiscuous mode [ 809.959199][ T3542] device hsr_slave_1 entered promiscuous mode [ 810.027819][ T3542] bridge0: port 2(bridge_slave_1) entered blocking state [ 810.035119][ T3542] bridge0: port 2(bridge_slave_1) entered forwarding state [ 810.042514][ T3542] bridge0: port 1(bridge_slave_0) entered blocking state [ 810.049637][ T3542] bridge0: port 1(bridge_slave_0) entered forwarding state [ 810.150575][ T3542] 8021q: adding VLAN 0 to HW filter on device bond0 [ 810.175256][ T2162] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 810.191425][ T2162] bridge0: port 1(bridge_slave_0) entered disabled state [ 810.205272][ T2162] bridge0: port 2(bridge_slave_1) entered disabled state [ 810.225567][ T3542] 8021q: adding VLAN 0 to HW filter on device team0 [ 810.244215][ T2162] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 810.252798][ T2162] bridge0: port 1(bridge_slave_0) entered blocking state [ 810.259898][ T2162] bridge0: port 1(bridge_slave_0) entered forwarding state [ 810.272371][ T2162] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 810.280946][ T2162] bridge0: port 2(bridge_slave_1) entered blocking state [ 810.288005][ T2162] bridge0: port 2(bridge_slave_1) entered forwarding state [ 810.326490][ T3542] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 810.337109][ T3542] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 810.351374][ T2162] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 810.360224][ T2162] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 810.368612][ T2162] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 810.377012][ T2162] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 810.386694][ T2162] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 810.394646][ T2162] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 810.413847][ T3542] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 810.589267][ T3550] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 810.599958][ T3550] CPU: 1 PID: 3550 Comm: syz-executor.3 Not tainted 5.2.0+ #37 [ 810.607628][ T3550] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 810.617667][ T3550] Call Trace: [ 810.620965][ T3550] dump_stack+0x1d8/0x2f8 [ 810.625311][ T3550] dump_header+0xd8/0x970 [ 810.629633][ T3550] oom_kill_process+0xcd/0x320 [ 810.634398][ T3550] out_of_memory+0x5e1/0x8a0 [ 810.638981][ T3550] ? unregister_oom_notifier+0x20/0x20 [ 810.644517][ T3550] ? trace_hardirqs_on+0x74/0x80 [ 810.649604][ T3550] memory_max_write+0x537/0x6a0 [ 810.654502][ T3550] ? lock_acquire+0x1b2/0x250 [ 810.659171][ T3550] ? memory_max_show+0xa0/0xa0 [ 810.664097][ T3550] ? lockdep_hardirqs_on+0x3c5/0x7d0 [ 810.669391][ T3550] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 810.674939][ T3550] ? retint_kernel+0x10/0x10 [ 810.679523][ T3550] ? memory_max_show+0xa0/0xa0 [ 810.684388][ T3550] cgroup_file_write+0x27b/0x6e0 [ 810.689327][ T3550] ? cgroup_seqfile_stop+0xc0/0xc0 [ 810.694504][ T3550] ? cgroup_seqfile_stop+0xc0/0xc0 [ 810.699635][ T3550] ? kernfs_fop_write+0x349/0x4f0 [ 810.704672][ T3550] ? cgroup_seqfile_stop+0xc0/0xc0 [ 810.709767][ T3550] kernfs_fop_write+0x3e4/0x4f0 [ 810.714651][ T3550] ? kernfs_fop_read+0x580/0x580 [ 810.719597][ T3550] __vfs_write+0xf9/0x7d0 [ 810.723924][ T3550] ? rcu_irq_exit+0xe3/0x260 [ 810.728510][ T3550] ? __kernel_write+0x350/0x350 [ 810.733349][ T3550] ? trace_lock_acquire+0x154/0x1b0 [ 810.738539][ T3550] ? __sb_start_write+0x39c/0x440 [ 810.743633][ T3550] vfs_write+0x275/0x590 [ 810.747863][ T3550] ksys_write+0x16b/0x2a0 [ 810.752275][ T3550] ? __ia32_sys_read+0x90/0x90 [ 810.757124][ T3550] ? prepare_exit_to_usermode+0x1f7/0x580 [ 810.762831][ T3550] ? syscall_return_slowpath+0x24/0x4a0 [ 810.768410][ T3550] ? trace_irq_disable_rcuidle+0x23/0x1c0 [ 810.774132][ T3550] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 810.779576][ T3550] ? trace_irq_disable_rcuidle+0x23/0x1c0 [ 810.785358][ T3550] ? do_syscall_64+0x1d/0x140 [ 810.790026][ T3550] __x64_sys_write+0x7b/0x90 [ 810.794607][ T3550] do_syscall_64+0xfe/0x140 [ 810.799092][ T3550] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 810.805104][ T3550] RIP: 0033:0x459819 [ 810.808983][ T3550] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 810.828836][ T3550] RSP: 002b:00007f4f0c4eec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 810.837240][ T3550] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459819 [ 810.845272][ T3550] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 810.853230][ T3550] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 810.861209][ T3550] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4f0c4ef6d4 [ 810.869283][ T3550] R13: 00000000004c9774 R14: 00000000004e0b70 R15: 00000000ffffffff [ 810.877349][ T3550] memory: usage 3328kB, limit 0kB, failcnt 560370 [ 810.883868][ T3550] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 810.890781][ T3550] Memory cgroup stats for /syz3: [ 810.891136][ T3550] anon 2060288 [ 810.891136][ T3550] file 0 [ 810.891136][ T3550] kernel_stack 65536 [ 810.891136][ T3550] slab 856064 [ 810.891136][ T3550] sock 0 [ 810.891136][ T3550] shmem 0 [ 810.891136][ T3550] file_mapped 0 [ 810.891136][ T3550] file_dirty 135168 [ 810.891136][ T3550] file_writeback 0 [ 810.891136][ T3550] anon_thp 2097152 [ 810.891136][ T3550] inactive_anon 0 [ 810.891136][ T3550] active_anon 2060288 [ 810.891136][ T3550] inactive_file 0 [ 810.891136][ T3550] active_file 0 [ 810.891136][ T3550] unevictable 0 [ 810.891136][ T3550] slab_reclaimable 270336 [ 810.891136][ T3550] slab_unreclaimable 585728 [ 810.891136][ T3550] pgfault 79035 [ 810.891136][ T3550] pgmajfault 0 [ 810.891136][ T3550] workingset_refault 0 [ 810.891136][ T3550] workingset_activate 0 [ 810.891136][ T3550] workingset_nodereclaim 0 [ 810.891136][ T3550] pgrefill 0 [ 810.891136][ T3550] pgscan 0 [ 810.891136][ T3550] pgsteal 0 [ 810.891136][ T3550] pgactivate 0 [ 810.985680][ T3550] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=3549,uid=0 [ 811.001420][ T3550] Memory cgroup out of memory: Killed process 3549 (syz-executor.3) total-vm:72708kB, anon-rss:2192kB, file-rss:35792kB, shmem-rss:0kB [ 811.017528][ T1057] oom_reaper: reaped process 3549 (syz-executor.3), now anon-rss:0kB, file-rss:34832kB, shmem-rss:0kB 09:59:52 executing program 5: syz_mount_image$jfs(&(0x7f00000001c0)='jfs\x00', &(0x7f0000000280)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)={[{@errors_remount='errors=remount-ro'}, {@noquota='noquota'}, {@integrity='integrity'}]}) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x103002, 0x0) ioctl$KDGETMODE(r0, 0x4b3b, &(0x7f0000000040)) 09:59:52 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000012c0)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) close(r1) accept4$alg(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 09:59:52 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)) r1 = syz_open_pts(r0, 0x0) write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0x5e0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000200)={0x17}) 09:59:52 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') preadv(r0, 0x0, 0x0, 0x10400003) 09:59:52 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000000)=r0, 0x4) sendmsg(0xffffffffffffffff, 0x0, 0x40) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuset.effective_cpus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) getpid() r2 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) r3 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r3, &(0x7f0000000540)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @ipv4}, 0x80, 0x0}, 0x24000001) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000080)='cgroup.type\x00', 0x2, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f00000002c0)='threaded\x00', 0x9) write$cgroup_int(r2, 0x0, 0x0) write$cgroup_int(r2, 0x0, 0x0) 09:59:52 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000012c0)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) close(r1) accept4$alg(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_NETID(r1, 0x0, 0x0) [ 811.233967][ T3542] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 811.244056][ T3542] CPU: 1 PID: 3542 Comm: syz-executor.3 Not tainted 5.2.0+ #37 [ 811.251607][ T3542] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 811.261670][ T3542] Call Trace: [ 811.264969][ T3542] dump_stack+0x1d8/0x2f8 [ 811.269307][ T3542] dump_header+0xd8/0x970 [ 811.273642][ T3542] oom_kill_process+0xcd/0x320 [ 811.278917][ T3542] out_of_memory+0x5e1/0x8a0 [ 811.283509][ T3542] ? unregister_oom_notifier+0x20/0x20 [ 811.288967][ T3542] ? __kasan_check_read+0x11/0x20 [ 811.293997][ T3542] try_charge+0x134a/0x17b0 [ 811.298562][ T3542] ? __memcg_kmem_charge_memcg+0x180/0x180 [ 811.304388][ T3542] ? __lock_acquire+0x4750/0x4750 [ 811.309421][ T3542] ? rcu_lock_release+0x15/0x20 [ 811.314292][ T3542] ? get_mem_cgroup_from_mm+0x15e/0x170 [ 811.319852][ T3542] mem_cgroup_try_charge+0x216/0x560 [ 811.325149][ T3542] mem_cgroup_try_charge_delay+0x25/0xa0 [ 811.330784][ T3542] wp_page_copy+0x367/0x18c0 [ 811.335386][ T3542] ? rcu_lock_release+0x30/0x30 [ 811.340262][ T3542] ? __lock_acquire+0x4750/0x4750 [ 811.345377][ T3542] ? __kasan_check_read+0x11/0x20 [ 811.350405][ T3542] ? do_raw_spin_unlock+0x49/0x260 [ 811.355541][ T3542] do_wp_page+0x2c9/0x1ce0 [ 811.359966][ T3542] ? __rwlock_init+0x130/0x130 [ 811.364726][ T3542] ? count_memcg_event_mm+0x300/0x300 [ 811.370110][ T3542] handle_mm_fault+0x2bcf/0x6080 [ 811.375073][ T3542] ? finish_fault+0x230/0x230 [ 811.379778][ T3542] ? vmacache_find+0x566/0x5b0 [ 811.384544][ T3542] ? vmacache_update+0xb7/0x120 [ 811.389412][ T3542] do_user_addr_fault+0x589/0xaf0 [ 811.394460][ T3542] __do_page_fault+0xd3/0x1f0 [ 811.399156][ T3542] do_page_fault+0x99/0xb0 [ 811.403592][ T3542] page_fault+0x39/0x40 [ 811.407852][ T3542] RIP: 0033:0x4308f6 [ 811.411763][ T3542] Code: 1f 44 00 00 48 29 e8 31 c9 48 81 fb 40 56 71 00 0f 95 c1 48 8d 34 2a 48 83 cd 01 48 c1 e1 02 48 83 c8 01 48 09 e9 48 89 73 58 <48> 89 4a 08 48 89 46 08 48 8d 4a 10 8b 05 6c 46 64 00 85 c0 0f 84 [ 811.431382][ T3542] RSP: 002b:00007ffc189712d0 EFLAGS: 00010206 [ 811.437627][ T3542] RAX: 0000000000019691 RBX: 0000000000715640 RCX: 0000000000008041 [ 811.445598][ T3542] RDX: 0000555555f24930 RSI: 0000555555f2c970 RDI: 0000000000000003 [ 811.453571][ T3542] RBP: 0000000000008041 R08: 0000000000000001 R09: 0000555555f23940 [ 811.461559][ T3542] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000715698 [ 811.469530][ T3542] R13: 0000000000715698 R14: 0000000000000000 R15: 0000000000002710 [ 811.477598][ T3542] memory: usage 952kB, limit 0kB, failcnt 560382 [ 811.483989][ T3542] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 811.490897][ T3542] Memory cgroup stats for /syz3: [ 811.490971][ T3542] anon 0 [ 811.490971][ T3542] file 0 [ 811.490971][ T3542] kernel_stack 0 [ 811.490971][ T3542] slab 856064 [ 811.490971][ T3542] sock 0 [ 811.490971][ T3542] shmem 0 [ 811.490971][ T3542] file_mapped 0 [ 811.490971][ T3542] file_dirty 135168 [ 811.490971][ T3542] file_writeback 0 [ 811.490971][ T3542] anon_thp 0 [ 811.490971][ T3542] inactive_anon 0 [ 811.490971][ T3542] active_anon 0 [ 811.490971][ T3542] inactive_file 0 [ 811.490971][ T3542] active_file 0 [ 811.490971][ T3542] unevictable 0 [ 811.490971][ T3542] slab_reclaimable 270336 [ 811.490971][ T3542] slab_unreclaimable 585728 [ 811.490971][ T3542] pgfault 79068 [ 811.490971][ T3542] pgmajfault 0 [ 811.490971][ T3542] workingset_refault 0 [ 811.490971][ T3542] workingset_activate 0 [ 811.490971][ T3542] workingset_nodereclaim 0 [ 811.490971][ T3542] pgrefill 0 [ 811.490971][ T3542] pgscan 0 [ 811.490971][ T3542] pgsteal 0 [ 811.490971][ T3542] pgactivate 0 09:59:53 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000012c0)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) close(r1) accept4$alg(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) [ 811.490971][ T3542] pgdeactivate 0 [ 811.587020][ T3542] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=3542,uid=0 [ 811.602414][ T3542] Memory cgroup out of memory: Killed process 3542 (syz-executor.3) total-vm:72444kB, anon-rss:72kB, file-rss:34832kB, shmem-rss:0kB [ 811.616743][ T1057] oom_reaper: reaped process 3542 (syz-executor.3), now anon-rss:0kB, file-rss:33936kB, shmem-rss:0kB 09:59:53 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') preadv(r0, 0x0, 0x0, 0x10400003) 09:59:53 executing program 4: ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)) r1 = syz_open_pts(r0, 0x0) write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0x5e0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000200)={0x17}) 09:59:53 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000012c0)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) close(r1) accept4$alg(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 09:59:53 executing program 5: syz_mount_image$jfs(&(0x7f00000001c0)='jfs\x00', &(0x7f0000000280)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={[{@discard='discard'}, {@noquota='noquota'}, {@integrity='integrity'}]}) 09:59:53 executing program 4: ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)) r1 = syz_open_pts(r0, 0x0) write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0x5e0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000200)={0x17}) 09:59:53 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)) r1 = syz_open_pts(r0, 0x0) write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0x5e0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000200)={0x17}) 09:59:53 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0) 09:59:53 executing program 4: ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)) r1 = syz_open_pts(r0, 0x0) write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0x5e0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000200)={0x17}) 09:59:53 executing program 5: r0 = socket$inet6(0xa, 0x80002, 0x11) r1 = creat(&(0x7f0000000240)='./file1\x00', 0x10) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000000)={{{@in6, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@local}}, &(0x7f0000000200)=0xfffffffffffffd99) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000140)={@loopback, @remote, @dev={0xfe, 0x80, [], 0x26}, 0x0, 0x9, 0x401, 0x400, 0x33, 0x80000, r2}) syz_mount_image$jfs(&(0x7f00000001c0)='jfs\x00', &(0x7f0000000280)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)={[{@errors_remount='errors=remount-ro'}, {@noquota='noquota'}, {@integrity='integrity'}]}) 09:59:53 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) r1 = socket$kcm(0x10, 0x3, 0x0) setsockopt$sock_attach_bpf(r1, 0x10e, 0x4, &(0x7f0000000000)=r0, 0x4) sendmsg(0xffffffffffffffff, 0x0, 0x40) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuset.effective_cpus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) getpid() r2 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) r3 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r3, &(0x7f0000000540)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @ipv4}, 0x80, 0x0}, 0x24000001) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000080)='cgroup.type\x00', 0x2, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f00000002c0)='threaded\x00', 0x9) write$cgroup_int(r2, 0x0, 0x0) write$cgroup_int(r2, 0x0, 0x0) [ 813.361748][ T3612] IPVS: ftp: loaded support on port[0] = 21 [ 813.421113][ T3612] chnl_net:caif_netlink_parms(): no params data found [ 813.580074][ T3612] bridge0: port 1(bridge_slave_0) entered blocking state [ 813.587180][ T3612] bridge0: port 1(bridge_slave_0) entered disabled state [ 813.594701][ T3612] device bridge_slave_0 entered promiscuous mode [ 813.602591][ T3612] bridge0: port 2(bridge_slave_1) entered blocking state [ 813.609740][ T3612] bridge0: port 2(bridge_slave_1) entered disabled state [ 813.617279][ T3612] device bridge_slave_1 entered promiscuous mode [ 813.633600][ T3612] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 813.784544][ T3612] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 813.803242][ T3612] team0: Port device team_slave_0 added [ 813.810150][ T3612] team0: Port device team_slave_1 added [ 813.870500][ T3612] device hsr_slave_0 entered promiscuous mode [ 813.919028][ T3612] device hsr_slave_1 entered promiscuous mode [ 813.958841][ T3612] debugfs: Directory 'hsr0' with parent '/' already present! [ 814.121655][ T3612] bridge0: port 2(bridge_slave_1) entered blocking state [ 814.128700][ T3612] bridge0: port 2(bridge_slave_1) entered forwarding state [ 814.136080][ T3612] bridge0: port 1(bridge_slave_0) entered blocking state [ 814.143139][ T3612] bridge0: port 1(bridge_slave_0) entered forwarding state [ 814.342081][ T3612] 8021q: adding VLAN 0 to HW filter on device bond0 [ 814.354223][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 814.362628][ T1277] bridge0: port 1(bridge_slave_0) entered disabled state [ 814.371540][ T1277] bridge0: port 2(bridge_slave_1) entered disabled state [ 814.380286][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 814.393975][ T3612] 8021q: adding VLAN 0 to HW filter on device team0 [ 814.560267][ T2162] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 814.569150][ T2162] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 814.577655][ T2162] bridge0: port 1(bridge_slave_0) entered blocking state [ 814.584706][ T2162] bridge0: port 1(bridge_slave_0) entered forwarding state [ 814.592507][ T2162] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 814.600909][ T2162] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 814.609298][ T2162] bridge0: port 2(bridge_slave_1) entered blocking state [ 814.616318][ T2162] bridge0: port 2(bridge_slave_1) entered forwarding state [ 814.623734][ T2162] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 814.632045][ T2162] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 814.640592][ T2162] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 814.649048][ T2162] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 814.657320][ T2162] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 814.665747][ T2162] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 814.676287][ T2162] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 814.684846][ T2162] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 814.693191][ T2162] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 814.704527][ T3612] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 814.715399][ T3612] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 814.723207][ T1153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 814.731489][ T1153] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 814.899092][ T3612] 8021q: adding VLAN 0 to HW filter on device batadv0 09:59:56 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000000)=r0, 0x4) sendmsg(0xffffffffffffffff, 0x0, 0x40) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuset.effective_cpus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) getpid() r2 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) r3 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r3, &(0x7f0000000540)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @ipv4}, 0x80, 0x0}, 0x24000001) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000080)='cgroup.type\x00', 0x2, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f00000002c0)='threaded\x00', 0x9) write$cgroup_int(r2, 0x0, 0x0) write$cgroup_int(r2, 0x0, 0x0) 09:59:56 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)) r1 = syz_open_pts(r0, 0x0) write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0x5e0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000200)={0x17}) 09:59:56 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0) 09:59:56 executing program 4: ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0, 0x1a2, 0x0, 0x0, 0x3002}]}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)) r1 = syz_open_pts(r0, 0x0) write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0x5e0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000200)={0x17}) 09:59:56 executing program 5: syz_mount_image$jfs(&(0x7f00000001c0)='jfs\x00', &(0x7f0000000280)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="657272656d6f75000000006f2c6e6f71756f67726974792c004f89dc71deac5057d02e4dce1dcd6e9296a71381c00a9728a5bcc5fd01fe2f7e37d9742581258a0582df13dc7f8b8f9e1593071406e44e239b0e672d0da813ef32e1d36b4660bafac2037168762bcb83838cea397c3c6d5f20905e64b59790088ee60ad50d42082cf3bdda4e5b1afe82c5e308adcb67f9c83ffe886a61276115ffa517ed2414691b30dd158032fe2602a8e08b094f131187d1fd079540415efb30a4153b76f4"]) 09:59:56 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) r1 = socket$kcm(0x10, 0x3, 0x0) setsockopt$sock_attach_bpf(r1, 0x10e, 0x4, &(0x7f0000000000)=r0, 0x4) sendmsg(0xffffffffffffffff, 0x0, 0x40) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuset.effective_cpus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) getpid() r2 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) r3 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r3, &(0x7f0000000540)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @ipv4}, 0x80, 0x0}, 0x24000001) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000080)='cgroup.type\x00', 0x2, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f00000002c0)='threaded\x00', 0x9) write$cgroup_int(r2, 0x0, 0x0) write$cgroup_int(r2, 0x0, 0x0) [ 815.328350][ T3627] jfs: Unrecognized mount option "erremou" or missing value [ 815.363164][ T3632] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 815.373501][ T3632] CPU: 0 PID: 3632 Comm: syz-executor.1 Not tainted 5.2.0+ #37 [ 815.381049][ T3632] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 815.391106][ T3632] Call Trace: [ 815.394401][ T3632] dump_stack+0x1d8/0x2f8 [ 815.398725][ T3632] dump_header+0xd8/0x970 [ 815.403060][ T3632] oom_kill_process+0xcd/0x320 [ 815.407821][ T3632] out_of_memory+0x5e1/0x8a0 [ 815.412406][ T3632] ? unregister_oom_notifier+0x20/0x20 [ 815.417858][ T3632] ? __kasan_check_read+0x11/0x20 [ 815.422880][ T3632] try_charge+0x134a/0x17b0 [ 815.427402][ T3632] ? __memcg_kmem_charge_memcg+0x180/0x180 [ 815.433205][ T3632] ? __lock_acquire+0x4750/0x4750 [ 815.438244][ T3632] ? rcu_lock_release+0x15/0x20 [ 815.443091][ T3632] ? get_mem_cgroup_from_mm+0x15e/0x170 [ 815.448631][ T3632] mem_cgroup_try_charge+0x216/0x560 [ 815.453929][ T3632] mem_cgroup_try_charge_delay+0x25/0xa0 [ 815.459679][ T3632] handle_mm_fault+0x31f3/0x6080 [ 815.464623][ T3632] ? finish_fault+0x230/0x230 [ 815.469302][ T3632] ? vmacache_find+0x566/0x5b0 [ 815.474088][ T3632] ? vmacache_update+0xb7/0x120 [ 815.478946][ T3632] do_user_addr_fault+0x589/0xaf0 [ 815.483976][ T3632] __do_page_fault+0xd3/0x1f0 [ 815.488650][ T3632] do_page_fault+0x99/0xb0 [ 815.493133][ T3632] page_fault+0x39/0x40 [ 815.497277][ T3632] RIP: 0033:0x41115f [ 815.501163][ T3632] Code: 0f 84 c8 02 00 00 48 83 bd 78 ff ff ff 00 0f 84 f9 04 00 00 48 8b 95 68 ff ff ff 44 89 95 38 ff ff ff 4c 8d ac 10 00 f7 ff ff <49> 89 85 90 06 00 00 49 8d 85 10 03 00 00 49 89 95 98 06 00 00 41 [ 815.520759][ T3632] RSP: 002b:00007fff68c25d40 EFLAGS: 00010206 [ 815.526823][ T3632] RAX: 00007f6780924000 RBX: 0000000000020000 RCX: 000000000045986a [ 815.534792][ T3632] RDX: 0000000000021000 RSI: 0000000000021000 RDI: 0000000000000000 [ 815.542751][ T3632] RBP: 00007fff68c25e20 R08: ffffffffffffffff R09: 0000000000000000 [ 815.550710][ T3632] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff68c25f10 [ 815.558666][ T3632] R13: 00007f6780944700 R14: 0000000000000001 R15: 000000000075bfd4 [ 815.567041][ T3632] memory: usage 5748kB, limit 0kB, failcnt 644 [ 815.573266][ T3632] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 815.580137][ T3632] Memory cgroup stats for /syz1: [ 815.580223][ T3632] anon 2150400 [ 815.580223][ T3632] file 122880 [ 815.580223][ T3632] kernel_stack 0 [ 815.580223][ T3632] slab 3608576 [ 815.580223][ T3632] sock 65536 [ 815.580223][ T3632] shmem 131072 [ 815.580223][ T3632] file_mapped 0 [ 815.580223][ T3632] file_dirty 0 [ 815.580223][ T3632] file_writeback 0 [ 815.580223][ T3632] anon_thp 2097152 [ 815.580223][ T3632] inactive_anon 135168 [ 815.580223][ T3632] active_anon 2166784 [ 815.580223][ T3632] inactive_file 12288 [ 815.580223][ T3632] active_file 0 [ 815.580223][ T3632] unevictable 0 [ 815.580223][ T3632] slab_reclaimable 1081344 [ 815.580223][ T3632] slab_unreclaimable 2527232 [ 815.580223][ T3632] pgfault 87780 [ 815.580223][ T3632] pgmajfault 0 [ 815.580223][ T3632] workingset_refault 0 [ 815.580223][ T3632] workingset_activate 0 [ 815.580223][ T3632] workingset_nodereclaim 0 [ 815.580223][ T3632] pgrefill 2100 [ 815.580223][ T3632] pgscan 3928 [ 815.580223][ T3632] pgsteal 1414 09:59:56 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r2 = socket$kcm(0x10, 0x3, 0x0) setsockopt$sock_attach_bpf(r2, 0x10e, 0x4, &(0x7f0000000000)=r0, 0x4) r3 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x40) openat$cgroup_ro(r3, &(0x7f0000000140)='cpuset.effective_cpus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) getpid() r4 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) r5 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r5, &(0x7f0000000540)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @ipv4}, 0x80, 0x0}, 0x24000001) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000080)='cgroup.type\x00', 0x2, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f00000002c0)='threaded\x00', 0x9) write$cgroup_int(r4, 0x0, 0x0) write$cgroup_int(r4, 0x0, 0x0) 09:59:56 executing program 4: ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0, 0x1a2, 0x0, 0x0, 0x3002}]}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)) r1 = syz_open_pts(r0, 0x0) write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0x5e0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000200)={0x17}) [ 815.673318][ T3632] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=3632,uid=0 [ 815.688725][ T3632] Memory cgroup out of memory: Killed process 3632 (syz-executor.1) total-vm:72704kB, anon-rss:2144kB, file-rss:34816kB, shmem-rss:0kB [ 815.705580][ T1057] oom_reaper: reaped process 3632 (syz-executor.1), now anon-rss:0kB, file-rss:33856kB, shmem-rss:0kB [ 815.716638][ T3635] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 09:59:57 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0) [ 815.726854][ T3635] CPU: 0 PID: 3635 Comm: syz-executor.0 Not tainted 5.2.0+ #37 [ 815.734392][ T3635] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 815.744433][ T3635] Call Trace: [ 815.747718][ T3635] dump_stack+0x1d8/0x2f8 [ 815.752059][ T3635] dump_header+0xd8/0x970 [ 815.756388][ T3635] oom_kill_process+0xcd/0x320 [ 815.761154][ T3635] out_of_memory+0x5e1/0x8a0 [ 815.765736][ T3635] ? unregister_oom_notifier+0x20/0x20 [ 815.771198][ T3635] ? __kasan_check_read+0x11/0x20 [ 815.776222][ T3635] try_charge+0x134a/0x17b0 [ 815.780731][ T3635] ? __memcg_kmem_charge_memcg+0x180/0x180 [ 815.786534][ T3635] ? __lock_acquire+0x4750/0x4750 [ 815.791560][ T3635] ? rcu_lock_release+0x15/0x20 [ 815.796401][ T3635] ? get_mem_cgroup_from_mm+0x15e/0x170 [ 815.801946][ T3635] mem_cgroup_try_charge+0x216/0x560 [ 815.807223][ T3635] mem_cgroup_try_charge_delay+0x25/0xa0 [ 815.812847][ T3635] handle_mm_fault+0x31f3/0x6080 [ 815.817786][ T3635] ? finish_fault+0x230/0x230 [ 815.822466][ T3635] ? vmacache_find+0x566/0x5b0 [ 815.827225][ T3635] ? vmacache_update+0xb7/0x120 [ 815.832090][ T3635] do_user_addr_fault+0x589/0xaf0 [ 815.837110][ T3635] __do_page_fault+0xd3/0x1f0 [ 815.841777][ T3635] do_page_fault+0x99/0xb0 [ 815.846187][ T3635] page_fault+0x39/0x40 [ 815.850342][ T3635] RIP: 0033:0x41115f [ 815.854225][ T3635] Code: 0f 84 c8 02 00 00 48 83 bd 78 ff ff ff 00 0f 84 f9 04 00 00 48 8b 95 68 ff ff ff 44 89 95 38 ff ff ff 4c 8d ac 10 00 f7 ff ff <49> 89 85 90 06 00 00 49 8d 85 10 03 00 00 49 89 95 98 06 00 00 41 [ 815.873854][ T3635] RSP: 002b:00007ffd08c50370 EFLAGS: 00010206 [ 815.879911][ T3635] RAX: 00007febd8f1c000 RBX: 0000000000020000 RCX: 000000000045986a [ 815.887869][ T3635] RDX: 0000000000021000 RSI: 0000000000021000 RDI: 0000000000000000 [ 815.895826][ T3635] RBP: 00007ffd08c50450 R08: ffffffffffffffff R09: 0000000000000000 [ 815.903784][ T3635] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd08c50540 [ 815.911739][ T3635] R13: 00007febd8f3c700 R14: 0000000000000001 R15: 000000000075bfd4 [ 815.920122][ T3635] memory: usage 5344kB, limit 0kB, failcnt 30 09:59:57 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r2 = socket$kcm(0x10, 0x3, 0x0) setsockopt$sock_attach_bpf(r2, 0x10e, 0x4, &(0x7f0000000000)=r0, 0x4) r3 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x40) openat$cgroup_ro(r3, &(0x7f0000000140)='cpuset.effective_cpus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) getpid() r4 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) r5 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r5, &(0x7f0000000540)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @ipv4}, 0x80, 0x0}, 0x24000001) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000080)='cgroup.type\x00', 0x2, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f00000002c0)='threaded\x00', 0x9) write$cgroup_int(r4, 0x0, 0x0) write$cgroup_int(r4, 0x0, 0x0) [ 815.926216][ T3635] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 815.933118][ T3635] Memory cgroup stats for /syz0: [ 815.933196][ T3635] anon 2277376 [ 815.933196][ T3635] file 135168 [ 815.933196][ T3635] kernel_stack 65536 [ 815.933196][ T3635] slab 2650112 [ 815.933196][ T3635] sock 0 [ 815.933196][ T3635] shmem 0 [ 815.933196][ T3635] file_mapped 0 [ 815.933196][ T3635] file_dirty 0 [ 815.933196][ T3635] file_writeback 0 [ 815.933196][ T3635] anon_thp 2097152 [ 815.933196][ T3635] inactive_anon 0 [ 815.933196][ T3635] active_anon 2207744 [ 815.933196][ T3635] inactive_file 0 [ 815.933196][ T3635] active_file 0 [ 815.933196][ T3635] unevictable 0 [ 815.933196][ T3635] slab_reclaimable 1081344 [ 815.933196][ T3635] slab_unreclaimable 1568768 [ 815.933196][ T3635] pgfault 55935 [ 815.933196][ T3635] pgmajfault 0 [ 815.933196][ T3635] workingset_refault 0 [ 815.933196][ T3635] workingset_activate 0 [ 815.933196][ T3635] workingset_nodereclaim 0 [ 815.933196][ T3635] pgrefill 0 [ 815.933196][ T3635] pgscan 0 [ 815.933196][ T3635] pgsteal 0 [ 815.933196][ T3635] pgactivate 0 [ 816.027505][ T3635] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=3635,uid=0 [ 816.042927][ T3635] Memory cgroup out of memory: Killed process 3635 (syz-executor.0) total-vm:72704kB, anon-rss:2144kB, file-rss:34816kB, shmem-rss:0kB [ 816.086428][ T3612] syz-executor.1 invoked oom-killer: gfp_mask=0x40cc0(GFP_KERNEL|__GFP_COMP), order=1, oom_score_adj=0 [ 816.097763][ T3612] CPU: 1 PID: 3612 Comm: syz-executor.1 Not tainted 5.2.0+ #37 [ 816.105307][ T3612] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 816.113676][ T1057] oom_reaper: reaped process 3635 (syz-executor.0), now anon-rss:0kB, file-rss:33856kB, shmem-rss:0kB [ 816.115356][ T3612] Call Trace: [ 816.129646][ T3612] dump_stack+0x1d8/0x2f8 [ 816.133978][ T3612] dump_header+0xd8/0x970 [ 816.138308][ T3612] oom_kill_process+0xcd/0x320 [ 816.143064][ T3612] out_of_memory+0x5e1/0x8a0 [ 816.147646][ T3612] ? unregister_oom_notifier+0x20/0x20 [ 816.153096][ T3612] ? __kasan_check_read+0x11/0x20 [ 816.158128][ T3612] try_charge+0x134a/0x17b0 [ 816.162673][ T3612] ? __memcg_kmem_charge_memcg+0x180/0x180 [ 816.168483][ T3612] ? rcu_read_lock_sched_held+0x127/0x1c0 [ 816.174454][ T3612] ? rcu_lock_acquire+0x30/0x30 [ 816.179301][ T3612] __memcg_kmem_charge_memcg+0x78/0x180 [ 816.184837][ T3612] ? __lock_acquire+0x4750/0x4750 [ 816.189852][ T3612] ? memcg_kmem_put_cache+0x50/0x50 [ 816.195065][ T3612] kmem_getpages+0x411/0x970 [ 816.199676][ T3612] cache_grow_begin+0x7e/0x2c0 [ 816.204434][ T3612] ? __cpuset_node_allowed+0x198/0x530 [ 816.209903][ T3612] fallback_alloc+0x134/0x1c0 [ 816.214596][ T3612] ____cache_alloc_node+0x22a/0x250 [ 816.219788][ T3612] kmem_cache_alloc_node+0x1da/0x290 [ 816.225073][ T3612] ? copy_process+0x599/0x5a00 [ 816.229868][ T3612] copy_process+0x599/0x5a00 [ 816.234454][ T3612] ? _raw_spin_unlock+0x22/0x30 [ 816.239299][ T3612] ? do_wp_page+0x12d0/0x1ce0 [ 816.243974][ T3612] ? __rwlock_init+0x130/0x130 [ 816.248722][ T3612] ? count_memcg_event_mm+0x300/0x300 [ 816.254090][ T3612] ? fork_idle+0x290/0x290 [ 816.258501][ T3612] ? __lock_acquire+0x4750/0x4750 [ 816.263509][ T3612] ? lock_acquire+0x158/0x250 [ 816.268178][ T3612] _do_fork+0x179/0x630 [ 816.272325][ T3612] ? dup_mm+0x340/0x340 [ 816.276488][ T3612] ? __kasan_check_read+0x11/0x20 [ 816.281506][ T3612] ? _copy_to_user+0x104/0x150 09:59:57 executing program 5: syz_mount_image$jfs(&(0x7f00000001c0)='jfs\x00', &(0x7f0000000280)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)={[{@iocharset={'iocharset', 0x3d, 'default'}}, {@noquota='noquota'}, {@resize='resize'}]}) syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x0, 0x140) [ 816.286261][ T3612] ? put_timespec64+0x106/0x150 [ 816.291101][ T3612] ? ktime_get_raw+0xf0/0xf0 [ 816.295690][ T3612] __x64_sys_clone+0x247/0x2b0 [ 816.300465][ T3612] ? __ia32_sys_vfork+0x110/0x110 [ 816.305481][ T3612] ? prepare_exit_to_usermode+0x1f7/0x580 [ 816.311235][ T3612] ? do_syscall_64+0x1d/0x140 [ 816.315920][ T3612] do_syscall_64+0xfe/0x140 [ 816.320416][ T3612] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 816.326296][ T3612] RIP: 0033:0x457dea 09:59:57 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r2 = socket$kcm(0x10, 0x3, 0x0) setsockopt$sock_attach_bpf(r2, 0x10e, 0x4, &(0x7f0000000000)=r0, 0x4) r3 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x40) openat$cgroup_ro(r3, &(0x7f0000000140)='cpuset.effective_cpus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r4 = getpid() perf_event_open(0x0, r4, 0x3, 0xffffffffffffffff, 0x1) r5 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) r6 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r6, &(0x7f0000000540)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @ipv4}, 0x80, 0x0}, 0x24000001) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000080)='cgroup.type\x00', 0x2, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f00000002c0)='threaded\x00', 0x9) write$cgroup_int(r5, 0x0, 0x0) write$cgroup_int(r5, 0x0, 0x0) [ 816.330182][ T3612] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 816.349769][ T3612] RSP: 002b:00007fff68c25f90 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 816.358174][ T3612] RAX: ffffffffffffffda RBX: 00007fff68c25f90 RCX: 0000000000457dea [ 816.366137][ T3612] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 816.374109][ T3612] RBP: 00007fff68c25fd0 R08: 0000000000000001 R09: 0000555557375940 [ 816.382063][ T3612] R10: 0000555557375c10 R11: 0000000000000246 R12: 0000000000000001 [ 816.390023][ T3612] R13: 0000000000000000 R14: 0000000000000000 R15: 00007fff68c26020 [ 816.398063][ T3612] memory: usage 3420kB, limit 0kB, failcnt 661 [ 816.404230][ T3612] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 816.411133][ T3612] Memory cgroup stats for /syz1: [ 816.411229][ T3612] anon 12288 [ 816.411229][ T3612] file 122880 [ 816.411229][ T3612] kernel_stack 0 [ 816.411229][ T3612] slab 3608576 [ 816.411229][ T3612] sock 65536 [ 816.411229][ T3612] shmem 131072 [ 816.411229][ T3612] file_mapped 0 [ 816.411229][ T3612] file_dirty 0 [ 816.411229][ T3612] file_writeback 0 [ 816.411229][ T3612] anon_thp 0 [ 816.411229][ T3612] inactive_anon 135168 [ 816.411229][ T3612] active_anon 12288 [ 816.411229][ T3612] inactive_file 12288 [ 816.411229][ T3612] active_file 0 [ 816.411229][ T3612] unevictable 0 [ 816.411229][ T3612] slab_reclaimable 1081344 [ 816.411229][ T3612] slab_unreclaimable 2527232 [ 816.411229][ T3612] pgfault 87780 [ 816.411229][ T3612] pgmajfault 0 [ 816.411229][ T3612] workingset_refault 0 [ 816.411229][ T3612] workingset_activate 0 [ 816.411229][ T3612] workingset_nodereclaim 0 [ 816.411229][ T3612] pgrefill 2100 [ 816.411229][ T3612] pgscan 3928 [ 816.411229][ T3612] pgsteal 1414 [ 816.411229][ T3612] pgactivate 924 [ 816.506772][ T3612] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=3612,uid=0 [ 816.522097][ T3612] Memory cgroup out of memory: Killed process 3612 (syz-executor.1) total-vm:72440kB, anon-rss:96kB, file-rss:35776kB, shmem-rss:0kB [ 816.536303][ T1057] oom_reaper: reaped process 3612 (syz-executor.1), now anon-rss:0kB, file-rss:34880kB, shmem-rss:0kB [ 816.572841][ T2529] syz-executor.0 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0 [ 816.584752][ T2529] CPU: 1 PID: 2529 Comm: syz-executor.0 Not tainted 5.2.0+ #37 [ 816.592291][ T2529] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 816.602345][ T2529] Call Trace: [ 816.605639][ T2529] dump_stack+0x1d8/0x2f8 [ 816.609965][ T2529] dump_header+0xd8/0x970 [ 816.614306][ T2529] oom_kill_process+0xcd/0x320 [ 816.619077][ T2529] out_of_memory+0x5e1/0x8a0 [ 816.623662][ T2529] ? unregister_oom_notifier+0x20/0x20 [ 816.629113][ T2529] ? __kasan_check_read+0x11/0x20 [ 816.634136][ T2529] try_charge+0x134a/0x17b0 [ 816.638629][ T2529] ? rmqueue+0x2248/0x2810 [ 816.643045][ T2529] ? __lock_acquire+0x4750/0x4750 [ 816.648078][ T2529] ? __memcg_kmem_charge_memcg+0x180/0x180 [ 816.653890][ T2529] ? rcu_lock_release+0x4/0x20 [ 816.658651][ T2529] __memcg_kmem_charge_memcg+0x78/0x180 [ 816.664194][ T2529] ? memcg_kmem_put_cache+0x50/0x50 [ 816.669380][ T2529] ? rcu_lock_release+0x15/0x20 [ 816.674216][ T2529] ? get_mem_cgroup_from_mm+0x15e/0x170 [ 816.679755][ T2529] __memcg_kmem_charge+0x105/0x340 [ 816.684859][ T2529] __alloc_pages_nodemask+0x377/0x790 [ 816.690230][ T2529] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 816.695763][ T2529] ? rcu_read_lock_sched_held+0x127/0x1c0 [ 816.701476][ T2529] ? copy_process+0x599/0x5a00 [ 816.706244][ T2529] copy_process+0x620/0x5a00 [ 816.710856][ T2529] ? do_wp_page+0x12d0/0x1ce0 [ 816.715551][ T2529] ? __rwlock_init+0x130/0x130 [ 816.720333][ T2529] ? count_memcg_event_mm+0x300/0x300 [ 816.725721][ T2529] ? fork_idle+0x290/0x290 [ 816.730133][ T2529] ? __lock_acquire+0x4750/0x4750 [ 816.735144][ T2529] ? lock_acquire+0x158/0x250 [ 816.739807][ T2529] _do_fork+0x179/0x630 [ 816.743971][ T2529] ? dup_mm+0x340/0x340 [ 816.748114][ T2529] ? __kasan_check_read+0x11/0x20 [ 816.753154][ T2529] ? _copy_to_user+0x104/0x150 [ 816.757903][ T2529] ? put_timespec64+0x106/0x150 [ 816.762786][ T2529] ? ktime_get_raw+0xf0/0xf0 [ 816.767363][ T2529] __x64_sys_clone+0x247/0x2b0 [ 816.772113][ T2529] ? __ia32_sys_vfork+0x110/0x110 [ 816.777120][ T2529] ? prepare_exit_to_usermode+0x1f7/0x580 [ 816.782827][ T2529] ? do_syscall_64+0x1d/0x140 [ 816.787495][ T2529] do_syscall_64+0xfe/0x140 [ 816.791985][ T2529] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 816.797862][ T2529] RIP: 0033:0x457dea [ 816.801757][ T2529] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 816.821372][ T2529] RSP: 002b:00007ffd08c505c0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 816.829780][ T2529] RAX: ffffffffffffffda RBX: 00007ffd08c505c0 RCX: 0000000000457dea [ 816.837746][ T2529] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 816.845715][ T2529] RBP: 00007ffd08c50600 R08: 0000000000000001 R09: 0000555556115940 [ 816.853680][ T2529] R10: 0000555556115c10 R11: 0000000000000246 R12: 0000000000000001 [ 816.861643][ T2529] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffd08c50650 [ 816.870460][ T2529] memory: usage 2984kB, limit 0kB, failcnt 39 [ 816.876524][ T2529] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 816.883389][ T2529] Memory cgroup stats for /syz0: 09:59:58 executing program 4: ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0, 0x1a2, 0x0, 0x0, 0x3002}]}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)) r1 = syz_open_pts(r0, 0x0) write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0x5e0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000200)={0x17}) 09:59:58 executing program 2: ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0, 0x1a2, 0x0, 0x0, 0x3002}]}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)) r1 = syz_open_pts(r0, 0x0) write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0x5e0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000200)={0x17}) [ 816.883461][ T2529] anon 20480 [ 816.883461][ T2529] file 135168 [ 816.883461][ T2529] kernel_stack 0 [ 816.883461][ T2529] slab 2650112 [ 816.883461][ T2529] sock 0 [ 816.883461][ T2529] shmem 0 [ 816.883461][ T2529] file_mapped 0 [ 816.883461][ T2529] file_dirty 0 [ 816.883461][ T2529] file_writeback 0 [ 816.883461][ T2529] anon_thp 0 [ 816.883461][ T2529] inactive_anon 0 [ 816.883461][ T2529] active_anon 20480 [ 816.883461][ T2529] inactive_file 0 [ 816.883461][ T2529] active_file 0 [ 816.883461][ T2529] unevictable 0 [ 816.883461][ T2529] slab_reclaimable 1081344 [ 816.883461][ T2529] slab_unreclaimable 1568768 [ 816.883461][ T2529] pgfault 55935 [ 816.883461][ T2529] pgmajfault 0 [ 816.883461][ T2529] workingset_refault 0 [ 816.883461][ T2529] workingset_activate 0 [ 816.883461][ T2529] workingset_nodereclaim 0 [ 816.883461][ T2529] pgrefill 0 [ 816.883461][ T2529] pgscan 0 [ 816.883461][ T2529] pgsteal 0 [ 816.883461][ T2529] pgactivate 0 [ 816.976603][ T2529] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=2529,uid=0 [ 816.991955][ T2529] Memory cgroup out of memory: Killed process 2529 (syz-executor.0) total-vm:72440kB, anon-rss:96kB, file-rss:35776kB, shmem-rss:0kB [ 817.006130][ T1057] oom_reaper: reaped process 2529 (syz-executor.0), now anon-rss:0kB, file-rss:34880kB, shmem-rss:0kB [ 817.020114][ T821] device bridge_slave_1 left promiscuous mode [ 817.026352][ T821] bridge0: port 2(bridge_slave_1) entered disabled state [ 817.085571][ T3649] JFS: Cannot determine volume size [ 817.094030][ T821] device bridge_slave_0 left promiscuous mode [ 817.100381][ T821] bridge0: port 1(bridge_slave_0) entered disabled state 09:59:58 executing program 4: ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x0, 0x0, 0x1a2, 0x0, 0x0, 0x3002}, {}]}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)) r1 = syz_open_pts(r0, 0x0) write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0x5e0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000200)={0x17}) [ 817.151831][ T821] device bridge_slave_1 left promiscuous mode [ 817.158015][ T821] bridge0: port 2(bridge_slave_1) entered disabled state [ 817.180700][ T3649] JFS: Cannot determine volume size [ 817.194030][ T821] device bridge_slave_0 left promiscuous mode 09:59:58 executing program 2: ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0, 0x1a2, 0x0, 0x0, 0x3002}]}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)) r1 = syz_open_pts(r0, 0x0) write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0x5e0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000200)={0x17}) [ 817.200352][ T821] bridge0: port 1(bridge_slave_0) entered disabled state 09:59:58 executing program 5: syz_mount_image$jfs(&(0x7f00000001c0)='jfs\x00', &(0x7f0000000280)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB='errors=remounuota,integrity,\x00\x00\x00\x00\x00\x00\x00\x00\x00']) r0 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x7, 0x80000) faccessat(r0, &(0x7f0000000040)='./file0\x00', 0x80, 0x700) [ 817.390043][ T3668] JFS: remounuota is an invalid error handler [ 817.487004][ T3668] JFS: remounuota is an invalid error handler [ 820.759605][ T821] device hsr_slave_0 left promiscuous mode [ 820.818916][ T821] device hsr_slave_1 left promiscuous mode [ 820.864855][ T821] team0 (unregistering): Port device team_slave_1 removed [ 820.877801][ T821] team0 (unregistering): Port device team_slave_0 removed [ 820.888332][ T821] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 820.924570][ T821] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 820.990553][ T821] bond0 (unregistering): Released all slaves [ 821.130151][ T821] device hsr_slave_0 left promiscuous mode [ 821.198952][ T821] device hsr_slave_1 left promiscuous mode [ 821.258741][ T821] team0 (unregistering): Port device team_slave_1 removed [ 821.270856][ T821] team0 (unregistering): Port device team_slave_0 removed [ 821.281553][ T821] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 821.315308][ T821] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 821.382339][ T821] bond0 (unregistering): Released all slaves [ 821.802536][ T3679] IPVS: ftp: loaded support on port[0] = 21 [ 821.894772][ T3679] chnl_net:caif_netlink_parms(): no params data found [ 821.933865][ T3679] bridge0: port 1(bridge_slave_0) entered blocking state [ 821.941116][ T3679] bridge0: port 1(bridge_slave_0) entered disabled state [ 821.948992][ T3679] device bridge_slave_0 entered promiscuous mode [ 821.957127][ T3679] bridge0: port 2(bridge_slave_1) entered blocking state [ 821.964247][ T3679] bridge0: port 2(bridge_slave_1) entered disabled state [ 821.971911][ T3679] device bridge_slave_1 entered promiscuous mode [ 821.990700][ T3679] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 822.001451][ T3679] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 822.022567][ T3679] team0: Port device team_slave_0 added [ 822.029935][ T3679] team0: Port device team_slave_1 added [ 822.361299][ T3679] device hsr_slave_0 entered promiscuous mode [ 822.409324][ T3679] device hsr_slave_1 entered promiscuous mode [ 822.607488][ T3679] bridge0: port 2(bridge_slave_1) entered blocking state [ 822.614593][ T3679] bridge0: port 2(bridge_slave_1) entered forwarding state [ 822.621946][ T3679] bridge0: port 1(bridge_slave_0) entered blocking state [ 822.629014][ T3679] bridge0: port 1(bridge_slave_0) entered forwarding state [ 822.677223][ T3679] 8021q: adding VLAN 0 to HW filter on device bond0 [ 822.692359][ T1153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 822.702399][ T1153] bridge0: port 1(bridge_slave_0) entered disabled state [ 822.716695][ T1153] bridge0: port 2(bridge_slave_1) entered disabled state [ 822.736804][ T3679] 8021q: adding VLAN 0 to HW filter on device team0 [ 822.748546][ T1153] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 822.756959][ T1153] bridge0: port 1(bridge_slave_0) entered blocking state [ 822.764009][ T1153] bridge0: port 1(bridge_slave_0) entered forwarding state [ 822.784050][ T1153] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 822.792652][ T1153] bridge0: port 2(bridge_slave_1) entered blocking state [ 822.799753][ T1153] bridge0: port 2(bridge_slave_1) entered forwarding state [ 822.824718][ T1153] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 822.833562][ T1153] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 822.842224][ T1153] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 822.850515][ T1153] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 822.860657][ T3679] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 822.873472][ T1153] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 822.891442][ T3679] 8021q: adding VLAN 0 to HW filter on device batadv0 10:00:04 executing program 2: ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0, 0x1a2, 0x0, 0x0, 0x3002}]}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)) r1 = syz_open_pts(r0, 0x0) write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0x5e0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000200)={0x17}) 10:00:04 executing program 4: ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x0, 0x0, 0x1a2, 0x0, 0x0, 0x3002}, {}]}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)) r1 = syz_open_pts(r0, 0x0) write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0x5e0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000200)={0x17}) 10:00:04 executing program 5: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x40, 0x0) r1 = gettid() lstat(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, &(0x7f0000000100)={0x3f, 0x3, r1, 0x0, r2, 0x0, 0x7fff, 0x7}) syz_mount_image$jfs(&(0x7f00000001c0)='jfs\x00', &(0x7f0000000280)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742e726f2c6e6f71750300612c696e746567726974792c00"]) 10:00:04 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r2 = socket$kcm(0x10, 0x3, 0x0) setsockopt$sock_attach_bpf(r2, 0x10e, 0x4, &(0x7f0000000000)=r0, 0x4) r3 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x40) openat$cgroup_ro(r3, &(0x7f0000000140)='cpuset.effective_cpus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) getpid() r4 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) r5 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r5, &(0x7f0000000540)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @ipv4}, 0x80, 0x0}, 0x24000001) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000080)='cgroup.type\x00', 0x2, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f00000002c0)='threaded\x00', 0x9) write$cgroup_int(r4, 0x0, 0x0) write$cgroup_int(r4, 0x0, 0x0) 10:00:04 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) r1 = socket$kcm(0x10, 0x3, 0x0) setsockopt$sock_attach_bpf(r1, 0x10e, 0x4, &(0x7f0000000000)=r0, 0x4) sendmsg(0xffffffffffffffff, 0x0, 0x40) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuset.effective_cpus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) getpid() r2 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) r3 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r3, &(0x7f0000000540)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @ipv4}, 0x80, 0x0}, 0x24000001) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000080)='cgroup.type\x00', 0x2, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f00000002c0)='threaded\x00', 0x9) write$cgroup_int(r2, 0x0, 0x0) write$cgroup_int(r2, 0x0, 0x0) 10:00:04 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r2 = socket$kcm(0x10, 0x3, 0x0) setsockopt$sock_attach_bpf(r2, 0x10e, 0x4, &(0x7f0000000000)=r0, 0x4) r3 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x40) openat$cgroup_ro(r3, &(0x7f0000000140)='cpuset.effective_cpus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r4 = getpid() perf_event_open(0x0, r4, 0x3, 0xffffffffffffffff, 0x1) r5 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) r6 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r6, &(0x7f0000000540)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @ipv4}, 0x80, 0x0}, 0x24000001) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000080)='cgroup.type\x00', 0x2, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f00000002c0)='threaded\x00', 0x9) write$cgroup_int(r5, 0x0, 0x0) write$cgroup_int(r5, 0x0, 0x0) [ 823.108600][ T3694] JFS: remount.ro is an invalid error handler 10:00:04 executing program 2: ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0, 0x1a2, 0x0, 0x0, 0x3002}]}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000200)={0x17}) 10:00:04 executing program 4: ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x0, 0x0, 0x1a2, 0x0, 0x0, 0x3002}, {}]}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)) r1 = syz_open_pts(r0, 0x0) write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0x5e0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000200)={0x17}) 10:00:04 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r2 = socket$kcm(0x10, 0x3, 0x0) setsockopt$sock_attach_bpf(r2, 0x10e, 0x4, &(0x7f0000000000)=r0, 0x4) sendmsg(0xffffffffffffffff, 0x0, 0x40) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuset.effective_cpus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) getpid() r3 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) r4 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r4, &(0x7f0000000540)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @ipv4}, 0x80, 0x0}, 0x24000001) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000080)='cgroup.type\x00', 0x2, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f00000002c0)='threaded\x00', 0x9) write$cgroup_int(r3, 0x0, 0x0) write$cgroup_int(r3, 0x0, 0x0) [ 823.219213][ T3703] JFS: remount.ro is an invalid error handler 10:00:04 executing program 5: syz_mount_image$jfs(&(0x7f00000001c0)='jfs\x00', &(0x7f0000000280)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)={[{@errors_remount='errors=remount-ro'}, {@noquota='noquota'}, {@resize='resize'}]}) r0 = dup(0xffffffffffffff9c) ioctl$EVIOCGABS2F(r0, 0x8018456f, &(0x7f0000000000)=""/169) 10:00:04 executing program 4: ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0, 0x9}]}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)) r1 = syz_open_pts(r0, 0x0) write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0x5e0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000200)={0x17}) 10:00:05 executing program 2: ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0, 0x1a2, 0x0, 0x0, 0x3002}]}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000200)={0x17}) [ 823.455526][ T3724] JFS: Cannot determine volume size [ 823.513884][ T3719] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 823.524193][ T3719] CPU: 0 PID: 3719 Comm: syz-executor.3 Not tainted 5.2.0+ #37 [ 823.531746][ T3719] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 823.541792][ T3719] Call Trace: [ 823.545097][ T3719] dump_stack+0x1d8/0x2f8 [ 823.549445][ T3719] dump_header+0xd8/0x970 [ 823.553809][ T3719] oom_kill_process+0xcd/0x320 [ 823.558590][ T3719] out_of_memory+0x5e1/0x8a0 [ 823.563200][ T3719] ? unregister_oom_notifier+0x20/0x20 [ 823.568669][ T3719] ? trace_hardirqs_on+0x74/0x80 [ 823.573633][ T3719] memory_max_write+0x537/0x6a0 [ 823.578487][ T3719] ? lock_acquire+0x158/0x250 [ 823.583177][ T3719] ? memory_max_show+0xa0/0xa0 [ 823.587958][ T3719] ? trace_lock_acquire+0x154/0x1b0 [ 823.593159][ T3719] ? lock_acquire+0x158/0x250 [ 823.597850][ T3719] ? kernfs_fop_write+0x22e/0x4f0 [ 823.602915][ T3719] ? memory_max_show+0xa0/0xa0 [ 823.607686][ T3719] cgroup_file_write+0x27b/0x6e0 [ 823.612626][ T3719] ? cgroup_seqfile_stop+0xc0/0xc0 [ 823.617742][ T3719] ? cgroup_seqfile_stop+0xc0/0xc0 [ 823.622866][ T3719] kernfs_fop_write+0x3e4/0x4f0 [ 823.627727][ T3719] ? kernfs_fop_read+0x580/0x580 [ 823.632690][ T3719] __vfs_write+0xf9/0x7d0 [ 823.637019][ T3719] ? retint_kernel+0x10/0x10 [ 823.641633][ T3719] ? __kernel_write+0x350/0x350 [ 823.646486][ T3719] ? rcu_irq_exit+0xe3/0x260 [ 823.651088][ T3719] ? __sb_start_write+0x39c/0x440 [ 823.656106][ T3719] ? retint_kernel+0x10/0x10 [ 823.660693][ T3719] vfs_write+0x275/0x590 [ 823.664930][ T3719] ksys_write+0x16b/0x2a0 [ 823.669256][ T3719] ? __ia32_sys_read+0x90/0x90 [ 823.674016][ T3719] ? prepare_exit_to_usermode+0x1f7/0x580 [ 823.679732][ T3719] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 823.685196][ T3719] ? trace_irq_disable_rcuidle+0x23/0x1c0 [ 823.690912][ T3719] ? do_syscall_64+0x1d/0x140 [ 823.695589][ T3719] __x64_sys_write+0x7b/0x90 [ 823.700185][ T3719] do_syscall_64+0xfe/0x140 [ 823.704694][ T3719] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 823.710578][ T3719] RIP: 0033:0x459819 [ 823.714477][ T3719] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 823.734082][ T3719] RSP: 002b:00007f3e51551c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 823.742492][ T3719] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459819 [ 823.750454][ T3719] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 823.758426][ T3719] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 823.766393][ T3719] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f3e515526d4 [ 823.774357][ T3719] R13: 00000000004c9774 R14: 00000000004e0b70 R15: 00000000ffffffff [ 823.782526][ T3719] memory: usage 3400kB, limit 0kB, failcnt 560391 [ 823.789105][ T3719] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 823.796076][ T3719] Memory cgroup stats for /syz3: [ 823.797429][ T3719] anon 2248704 [ 823.797429][ T3719] file 0 [ 823.797429][ T3719] kernel_stack 0 [ 823.797429][ T3719] slab 856064 [ 823.797429][ T3719] sock 0 [ 823.797429][ T3719] shmem 0 [ 823.797429][ T3719] file_mapped 0 [ 823.797429][ T3719] file_dirty 135168 [ 823.797429][ T3719] file_writeback 0 [ 823.797429][ T3719] anon_thp 2097152 [ 823.797429][ T3719] inactive_anon 0 [ 823.797429][ T3719] active_anon 2179072 [ 823.797429][ T3719] inactive_file 0 [ 823.797429][ T3719] active_file 0 [ 823.797429][ T3719] unevictable 0 [ 823.797429][ T3719] slab_reclaimable 270336 [ 823.797429][ T3719] slab_unreclaimable 585728 [ 823.797429][ T3719] pgfault 79266 [ 823.797429][ T3719] pgmajfault 0 [ 823.797429][ T3719] workingset_refault 0 [ 823.797429][ T3719] workingset_activate 0 [ 823.797429][ T3719] workingset_nodereclaim 0 [ 823.797429][ T3719] pgrefill 0 [ 823.797429][ T3719] pgscan 0 [ 823.797429][ T3719] pgsteal 0 [ 823.797429][ T3719] pgactivate 0 [ 823.891428][ T3719] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=3718,uid=0 10:00:05 executing program 2: ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0, 0x1a2, 0x0, 0x0, 0x3002}]}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000200)={0x17}) 10:00:05 executing program 4: ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0, 0x9}]}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)) r1 = syz_open_pts(r0, 0x0) write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0x5e0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000200)={0x17}) [ 823.907452][ T3719] Memory cgroup out of memory: Killed process 3718 (syz-executor.3) total-vm:72704kB, anon-rss:2144kB, file-rss:34816kB, shmem-rss:0kB [ 823.924800][ T1057] oom_reaper: reaped process 3718 (syz-executor.3), now anon-rss:0kB, file-rss:34832kB, shmem-rss:0kB [ 824.004745][ T3724] JFS: Cannot determine volume size 10:00:05 executing program 4: ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0, 0x9}]}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)) r1 = syz_open_pts(r0, 0x0) write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0x5e0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000200)={0x17}) [ 929.438758][ C1] rcu: INFO: rcu_sched self-detected stall on CPU [ 929.445277][ C1] rcu: 1-....: (10499 ticks this GP) idle=262/1/0x4000000000000002 softirq=83189/83189 fqs=5245 [ 929.456017][ C1] (t=10500 jiffies g=123273 q=379) [ 929.461201][ C1] NMI backtrace for cpu 1 [ 929.465524][ C1] CPU: 1 PID: 3679 Comm: syz-executor.3 Not tainted 5.2.0+ #37 [ 929.473030][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 929.483055][ C1] Call Trace: [ 929.486310][ C1] [ 929.489158][ C1] dump_stack+0x1d8/0x2f8 [ 929.493480][ C1] nmi_cpu_backtrace+0xb0/0x1a0 [ 929.498314][ C1] ? nmi_trigger_cpumask_backtrace+0x145/0x240 [ 929.504440][ C1] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 929.510497][ C1] nmi_trigger_cpumask_backtrace+0x14c/0x240 [ 929.516461][ C1] arch_trigger_cpumask_backtrace+0x10/0x20 [ 929.522324][ C1] rcu_dump_cpu_stacks+0x15a/0x220 [ 929.527409][ C1] rcu_sched_clock_irq+0x7e3/0xfb0 [ 929.532494][ C1] ? trace_hardirqs_off+0x74/0x80 [ 929.537501][ C1] update_process_times+0x114/0x170 [ 929.542672][ C1] tick_sched_timer+0x257/0x410 [ 929.547490][ C1] ? tick_setup_sched_timer+0x2b0/0x2b0 [ 929.553024][ C1] __hrtimer_run_queues+0x471/0x8c0 [ 929.558204][ C1] ? hrtimer_interrupt+0xd80/0xd80 [ 929.563285][ C1] ? ktime_get_update_offsets_now+0x234/0x250 [ 929.569327][ C1] hrtimer_interrupt+0x36c/0xd80 [ 929.574243][ C1] smp_apic_timer_interrupt+0xc2/0x220 [ 929.579688][ C1] apic_timer_interrupt+0xf/0x20 [ 929.584593][ C1] [ 929.587523][ C1] RIP: 0010:blk_start_plug+0x115/0x140 [ 929.592966][ C1] Code: e8 03 42 8a 04 20 84 c0 75 34 41 c6 07 00 43 80 7c 25 00 00 74 08 48 89 df e8 d7 0c 60 fe 4c 89 33 5b 41 5c 41 5d 41 5e 41 5f <5d> c3 89 f9 80 e1 07 fe c1 38 c1 7c b9 e8 79 0c 60 fe eb b2 44 89 [ 929.612542][ C1] RSP: 0018:ffff8880970cec10 EFLAGS: 00000246 ORIG_RAX: ffffffffffffff13 [ 929.620943][ C1] RAX: 1ffff11012e19d00 RBX: 0000000000000000 RCX: ffff88808667e0c0 [ 929.628911][ C1] RDX: 0000000000000000 RSI: ffff8880970ced48 RDI: ffff8880970cede0 [ 929.636869][ C1] RBP: ffff8880970cec10 R08: dffffc0000000000 R09: ffffed1012e19db3 [ 929.644815][ C1] R10: ffffed1012e19db3 R11: 0000000000000000 R12: ffff8880970cf320 [ 929.652758][ C1] R13: ffff88809b43ed80 R14: ffff8880970ced20 R15: ffff88809b43ed80 [ 929.660714][ C1] shrink_node_memcg+0x28e/0x1120 [ 929.665711][ C1] ? rcu_lock_release+0x4/0x20 [ 929.670453][ C1] ? __lock_acquire+0x4750/0x4750 [ 929.675460][ C1] ? trace_mm_vmscan_memcg_softlimit_reclaim_begin+0x250/0x250 [ 929.682983][ C1] ? rcu_read_lock_held+0xa7/0x130 [ 929.688062][ C1] ? rcu_lock_release+0x15/0x20 [ 929.692908][ C1] shrink_node+0x468/0x17a0 [ 929.697388][ C1] ? snapshot_refaults+0x2c0/0x2c0 [ 929.702488][ C1] shrink_zones+0x2d8/0x940 [ 929.706961][ C1] ? vmpressure_prio+0xa5/0x120 [ 929.711784][ C1] ? allow_direct_reclaim+0x4c0/0x4c0 [ 929.717128][ C1] ? vmpressure_prio+0x110/0x120 [ 929.722035][ C1] do_try_to_free_pages+0x21e/0x930 [ 929.727212][ C1] try_to_free_mem_cgroup_pages+0x3d1/0x6c0 [ 929.733353][ C1] ? trace_mm_vmscan_memcg_softlimit_reclaim_end+0x240/0x240 [ 929.740707][ C1] ? trace_hardirqs_on+0x74/0x80 [ 929.745616][ C1] ? cgroup_file_notify+0x184/0x1a0 [ 929.750805][ C1] try_charge+0x6aa/0x17b0 [ 929.755207][ C1] ? __memcg_kmem_charge_memcg+0x180/0x180 [ 929.760986][ C1] ? rcu_read_lock_sched_held+0x127/0x1c0 [ 929.766678][ C1] ? trace_mm_page_alloc+0x187/0x1d0 [ 929.771942][ C1] __memcg_kmem_charge_memcg+0x78/0x180 [ 929.777458][ C1] ? memcg_kmem_put_cache+0x50/0x50 [ 929.782636][ C1] ? kmem_freepages+0x580/0x580 [ 929.787468][ C1] kmem_getpages+0x411/0x970 [ 929.792041][ C1] cache_grow_begin+0x7e/0x2c0 [ 929.796772][ C1] ? __cpuset_node_allowed+0x198/0x530 [ 929.802217][ C1] fallback_alloc+0x134/0x1c0 [ 929.806865][ C1] ____cache_alloc_node+0x22a/0x250 [ 929.812033][ C1] kmem_cache_alloc+0x157/0x2e0 [ 929.816856][ C1] ? ext4_alloc_inode+0x1f/0x560 [ 929.821765][ C1] ? set_qf_name+0x3c0/0x3c0 [ 929.826324][ C1] ext4_alloc_inode+0x1f/0x560 [ 929.831146][ C1] ? set_qf_name+0x3c0/0x3c0 [ 929.835723][ C1] new_inode_pseudo+0x68/0x240 [ 929.840459][ C1] new_inode+0x28/0x1c0 [ 929.844584][ C1] ? trace_ext4_request_inode+0x229/0x280 [ 929.850301][ C1] __ext4_new_inode+0x60a/0x5d00 [ 929.855221][ C1] ? __lock_acquire+0x4750/0x4750 [ 929.860219][ C1] ? tomoyo_path_number_perm+0x5f0/0x740 [ 929.865817][ C1] ? ext4_read_inode_bitmap+0x1950/0x1950 [ 929.871503][ C1] ? smack_log+0xe3/0x4e0 [ 929.875803][ C1] ? memset+0x31/0x40 [ 929.879752][ C1] ? __dquot_initialize+0x228/0xdd0 [ 929.884934][ C1] ? __kasan_check_read+0x11/0x20 [ 929.889927][ C1] ? smk_access+0x18c/0x4f0 [ 929.894399][ C1] ? dquot_initialize+0x20/0x20 [ 929.899219][ C1] ? smk_tskacc+0x2ef/0x390 [ 929.903696][ C1] ? smk_curacc+0xa3/0xe0 [ 929.908012][ C1] ext4_mkdir+0x423/0x14c0 [ 929.912406][ C1] ? from_kgid+0x236/0x390 [ 929.916827][ C1] ? ext4_symlink+0x1020/0x1020 [ 929.921647][ C1] ? security_inode_permission+0xdd/0x120 [ 929.927333][ C1] ? security_inode_mkdir+0xeb/0x130 [ 929.932590][ C1] vfs_mkdir+0x43f/0x610 [ 929.936838][ C1] do_mkdirat+0x22a/0x390 [ 929.941145][ C1] ? vfs_mkdir+0x610/0x610 [ 929.945534][ C1] ? trace_irq_disable_rcuidle+0x23/0x1c0 [ 929.951225][ C1] ? do_syscall_64+0x1d/0x140 [ 929.955906][ C1] __x64_sys_mkdir+0x60/0x70 [ 929.960480][ C1] do_syscall_64+0xfe/0x140 [ 929.964954][ C1] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 929.970834][ C1] RIP: 0033:0x458c37 [ 929.974704][ C1] Code: 1f 40 00 b8 5a 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 cd c3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 ad c3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 929.994367][ C1] RSP: 002b:00007ffd8be2f018 EFLAGS: 00000206 ORIG_RAX: 0000000000000053 [ 930.002760][ C1] RAX: ffffffffffffffda RBX: 00000000000c90ac RCX: 0000000000458c37 [ 930.010704][ C1] RDX: 00007ffd8be2f063 RSI: 00000000000001ff RDI: 00007ffd8be2f060 [ 930.018644][ C1] RBP: 0000000000000006 R08: 0000000000000080 R09: 0000000000000003 [ 930.026607][ C1] R10: 0000000000000064 R11: 0000000000000206 R12: 0000000000000012 [ 930.034553][ C1] R13: 00007ffd8be2f050 R14: 00000000000c901b R15: 00007ffd8be2f060