6:30:00 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x40100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c000000]}) 06:30:00 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06030000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000f00", 0x55}], 0x1}, 0x0) 06:30:00 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x40000000}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 06:30:00 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfec7be070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000480)={0x0, 0xfffffffd, 0x2, {0x2, @raw_data="c5d57e1409c8c8bfc4b0a6a486e6759ec6b71794ff0adc9ee376a40807fdd9774aece3e8b95da34ee175d3529bc03c3401cbd467e3a00b3f565d83fcdaa18e1364954192aa37c8b5d52de4df78b6ea9e89a2c13f92b9f7650b89fdf12ca7c48762bc81646f92b9f2270c1a324c9820fd0525a8c381ced94247dfa06a9362cdade36c5ee4e0463288dced378801a8dad713036ecfa51add03337e4cc1d3d7cdea599d986641334404b67bd660b034ebd565d306b651d8b3a7d05256fd53039928498f4aa480448183"}}) getsockopt$inet_udp_int(r0, 0x11, 0x0, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000180)={0x2, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) 06:30:00 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06000000a843089100ff803900080008000c0000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1, 0x0, 0x0, 0x0}, 0x0) 06:30:00 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06020000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0x0) [ 1163.341885][T17072] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=6135,uid=0 [ 1163.358368][T17072] Memory cgroup out of memory: Killed process 6135 (syz-executor.1) total-vm:72708kB, anon-rss:2204kB, file-rss:35788kB, shmem-rss:0kB 06:30:00 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x40100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68000000]}) 06:30:00 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06020000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d40000000000007f", 0x55}], 0x1}, 0x0) 06:30:00 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06000000a843089100ff803900080008000c0000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1, 0x0, 0x0, 0x0}, 0x0) 06:30:00 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x60000000}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 06:30:00 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06030000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000001000", 0x55}], 0x1}, 0x0) [ 1163.510573][T17121] vim2m vim2m.0: vidioc_s_fmt queue busy 06:30:00 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000f40)='cgroup\x00controC\x12\x12\x98\xd1l\x06\x00\x00\x00H=\xc10U\xa0\x8b\x15\xb4\x8a\x7f{CgLN\x109\x13\xc3\xd6\xcf\xa5\xf5K\x04\xb2\xf3\x997 \xff\x05\x81\x19&Y[\x8f]\x9c\xfa\x84e\\\xd4\xe9L\x04@4\x84\xd8\xf8\xde\x9f\xbd\xc8;\x94\xad\xd2\x8c\v\xc6I6#\xa0\xcbB7/\x1e\x14WT\xf8\xcd\x94\xb0N\x89\x85\xb2S\xffE\x14q\xc2\x1c\xf4\rp;}\xdd\x86\x04u\xa1R\xae+\x8d\x81\x98d\x1e0x0}) faccessat(r0, &(0x7f0000000600)='./file1\x00', 0x10, 0x500) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000300)={0x0, 0x0}, &(0x7f0000000340)=0xc) fstat(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000480)=0x0) lstat(&(0x7f00000004c0)='./file1\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fsetxattr$system_posix_acl(r0, &(0x7f00000000c0)='system.posix_acl_default\x00', &(0x7f0000000640)=ANY=[@ANYBLOB="02000000010007000000000002000200", @ANYRES32=r1, @ANYBLOB="02000200", @ANYRES32=r2, @ANYBLOB="0400020000000000080002159d747700", @ANYRES32=r3, @ANYBLOB="08000200", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=r5, @ANYBLOB="10000300000000002000010000000000"], 0x4c, 0x1) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r6, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) prctl$PR_GET_DUMPABLE(0x3) r7 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r8 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) ioctl$LOOP_CHANGE_FD(r7, 0x4c06, 0xffffffffffffffff) ioctl$TIOCLINUX5(r8, 0x541c, &(0x7f0000000040)={0x5, 0x4, 0x0, 0xfff, 0x7}) getrandom(0x0, 0x0, 0x3) lsetxattr(&(0x7f0000fc0000)='./file1\x00', &(0x7f0000000200)=@known='user./yz\xff', &(0x7f0000fc0000)='//selinux\x00\x00\x10\x01', 0xd, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) getuid() getresuid(&(0x7f0000000100)=0x0, &(0x7f0000000140), &(0x7f0000000180)) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000001c0)={0x10202, 0x0, 0x0, 0x2000, &(0x7f0000ffb000/0x2000)=nil}) bind$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0x3, @empty}}, 0x1e) fcntl$getown(r8, 0x9) setreuid(r9, r9) 06:30:00 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x40100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c000000]}) 06:30:00 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x65580000}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 06:30:00 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06000000a843089100ff803900080008000c0000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1, 0x0, 0x0, 0x0}, 0x0) 06:30:00 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06020000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d4000000000000ff", 0x55}], 0x1}, 0x0) 06:30:00 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06030000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000003f00", 0x55}], 0x1}, 0x0) 06:30:00 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x40100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x74000000]}) 06:30:00 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000f40)='cgroup\x00controC\x12\x12\x98\xd1l\x06\x00\x00\x00H=\xc10U\xa0\x8b\x15\xb4\x8a\x7f{CgLN\x109\x13\xc3\xd6\xcf\xa5\xf5K\x04\xb2\xf3\x997 \xff\x05\x81\x19&Y[\x8f]\x9c\xfa\x84e\\\xd4\xe9L\x04@4\x84\xd8\xf8\xde\x9f\xbd\xc8;\x94\xad\xd2\x8c\v\xc6I6#\xa0\xcbB7/\x1e\x14WT\xf8\xcd\x94\xb0N\x89\x85\xb2S\xffE\x14q\xc2\x1c\xf4\rp;}\xdd\x86\x04u\xa1R\xae+\x8d\x81\x98d\x1e0x0}) faccessat(r0, &(0x7f0000000600)='./file1\x00', 0x10, 0x500) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000300)={0x0, 0x0}, &(0x7f0000000340)=0xc) fstat(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000480)=0x0) lstat(&(0x7f00000004c0)='./file1\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fsetxattr$system_posix_acl(r0, &(0x7f00000000c0)='system.posix_acl_default\x00', &(0x7f0000000640)=ANY=[@ANYBLOB="02000000010007000000000002000200", @ANYRES32=r1, @ANYBLOB="02000200", @ANYRES32=r2, @ANYBLOB="0400020000000000080002159d747700", @ANYRES32=r3, @ANYBLOB="08000200", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=r5, @ANYBLOB="10000300000000002000010000000000"], 0x4c, 0x1) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r6, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) prctl$PR_GET_DUMPABLE(0x3) r7 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r8 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) ioctl$LOOP_CHANGE_FD(r7, 0x4c06, 0xffffffffffffffff) ioctl$TIOCLINUX5(r8, 0x541c, &(0x7f0000000040)={0x5, 0x4, 0x0, 0xfff, 0x7}) getrandom(0x0, 0x0, 0x3) lsetxattr(&(0x7f0000fc0000)='./file1\x00', &(0x7f0000000200)=@known='user./yz\xff', &(0x7f0000fc0000)='//selinux\x00\x00\x10\x01', 0xd, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) getuid() getresuid(&(0x7f0000000100)=0x0, &(0x7f0000000140), &(0x7f0000000180)) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000001c0)={0x10202, 0x0, 0x0, 0x2000, &(0x7f0000ffb000/0x2000)=nil}) bind$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0x3, @empty}}, 0x1e) fcntl$getown(r8, 0x9) setreuid(r9, r9) 06:30:00 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06000000a843089100ff803900080008000c0000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1, 0x0, 0x0, 0x0}, 0x0) 06:30:00 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06030000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000004000", 0x55}], 0x1}, 0x0) 06:30:00 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06020000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d4000000f0ffffff", 0x55}], 0x1}, 0x0) 06:30:00 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x40100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a000000]}) 06:30:00 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x81000000}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 06:30:00 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06030000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000006000", 0x55}], 0x1}, 0x0) 06:30:00 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06020000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000002000000", 0x55}], 0x1}, 0x0) 06:30:00 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06000000a843089100ff803900080008000c0000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1, 0x0, 0x0, 0x0}, 0x0) 06:30:00 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x40100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff000000]}) 06:30:01 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000f40)='cgroup\x00controC\x12\x12\x98\xd1l\x06\x00\x00\x00H=\xc10U\xa0\x8b\x15\xb4\x8a\x7f{CgLN\x109\x13\xc3\xd6\xcf\xa5\xf5K\x04\xb2\xf3\x997 \xff\x05\x81\x19&Y[\x8f]\x9c\xfa\x84e\\\xd4\xe9L\x04@4\x84\xd8\xf8\xde\x9f\xbd\xc8;\x94\xad\xd2\x8c\v\xc6I6#\xa0\xcbB7/\x1e\x14WT\xf8\xcd\x94\xb0N\x89\x85\xb2S\xffE\x14q\xc2\x1c\xf4\rp;}\xdd\x86\x04u\xa1R\xae+\x8d\x81\x98d\x1e0x0}) faccessat(r0, &(0x7f0000000600)='./file1\x00', 0x10, 0x500) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000300)={0x0, 0x0}, &(0x7f0000000340)=0xc) fstat(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000480)=0x0) lstat(&(0x7f00000004c0)='./file1\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fsetxattr$system_posix_acl(r0, &(0x7f00000000c0)='system.posix_acl_default\x00', &(0x7f0000000640)=ANY=[@ANYBLOB="02000000010007000000000002000200", @ANYRES32=r1, @ANYBLOB="02000200", @ANYRES32=r2, @ANYBLOB="0400020000000000080002159d747700", @ANYRES32=r3, @ANYBLOB="08000200", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=r5, @ANYBLOB="10000300000000002000010000000000"], 0x4c, 0x1) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r6, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) prctl$PR_GET_DUMPABLE(0x3) r7 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r8 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) ioctl$LOOP_CHANGE_FD(r7, 0x4c06, 0xffffffffffffffff) ioctl$TIOCLINUX5(r8, 0x541c, &(0x7f0000000040)={0x5, 0x4, 0x0, 0xfff, 0x7}) getrandom(0x0, 0x0, 0x3) lsetxattr(&(0x7f0000fc0000)='./file1\x00', &(0x7f0000000200)=@known='user./yz\xff', &(0x7f0000fc0000)='//selinux\x00\x00\x10\x01', 0xd, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) getuid() getresuid(&(0x7f0000000100)=0x0, &(0x7f0000000140), &(0x7f0000000180)) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000001c0)={0x10202, 0x0, 0x0, 0x2000, &(0x7f0000ffb000/0x2000)=nil}) bind$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0x3, @empty}}, 0x1e) fcntl$getown(r8, 0x9) setreuid(r9, r9) 06:30:01 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06030000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000586500", 0x55}], 0x1}, 0x0) 06:30:01 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x88a8ffff}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 06:30:01 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06020000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000003000000", 0x55}], 0x1}, 0x0) 06:30:01 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000f40)='cgroup\x00controC\x12\x12\x98\xd1l\x06\x00\x00\x00H=\xc10U\xa0\x8b\x15\xb4\x8a\x7f{CgLN\x109\x13\xc3\xd6\xcf\xa5\xf5K\x04\xb2\xf3\x997 \xff\x05\x81\x19&Y[\x8f]\x9c\xfa\x84e\\\xd4\xe9L\x04@4\x84\xd8\xf8\xde\x9f\xbd\xc8;\x94\xad\xd2\x8c\v\xc6I6#\xa0\xcbB7/\x1e\x14WT\xf8\xcd\x94\xb0N\x89\x85\xb2S\xffE\x14q\xc2\x1c\xf4\rp;}\xdd\x86\x04u\xa1R\xae+\x8d\x81\x98d\x1e0x0}) faccessat(r0, &(0x7f0000000600)='./file1\x00', 0x10, 0x500) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000300)={0x0, 0x0}, &(0x7f0000000340)=0xc) fstat(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000480)=0x0) lstat(&(0x7f00000004c0)='./file1\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fsetxattr$system_posix_acl(r0, &(0x7f00000000c0)='system.posix_acl_default\x00', &(0x7f0000000640)=ANY=[@ANYBLOB="02000000010007000000000002000200", @ANYRES32=r1, @ANYBLOB="02000200", @ANYRES32=r2, @ANYBLOB="0400020000000000080002159d747700", @ANYRES32=r3, @ANYBLOB="08000200", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=r5, @ANYBLOB="10000300000000002000010000000000"], 0x4c, 0x1) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r6, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) prctl$PR_GET_DUMPABLE(0x3) r7 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r8 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) ioctl$LOOP_CHANGE_FD(r7, 0x4c06, 0xffffffffffffffff) ioctl$TIOCLINUX5(r8, 0x541c, &(0x7f0000000040)={0x5, 0x4, 0x0, 0xfff, 0x7}) getrandom(0x0, 0x0, 0x3) lsetxattr(&(0x7f0000fc0000)='./file1\x00', &(0x7f0000000200)=@known='user./yz\xff', &(0x7f0000fc0000)='//selinux\x00\x00\x10\x01', 0xd, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) getuid() getresuid(&(0x7f0000000100)=0x0, &(0x7f0000000140), &(0x7f0000000180)) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000001c0)={0x10202, 0x0, 0x0, 0x2000, &(0x7f0000ffb000/0x2000)=nil}) bind$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0x3, @empty}}, 0x1e) fcntl$getown(r8, 0x9) setreuid(r9, r9) 06:30:01 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x40100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000]}) 06:30:01 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06000000a843089100ff803900080008000c0000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1, 0x0, 0x0, 0x0}, 0x0) 06:30:01 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06030000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000008100", 0x55}], 0x1}, 0x0) 06:30:01 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x40100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000]}) 06:30:01 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06020000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000004000000", 0x55}], 0x1}, 0x0) 06:30:01 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06000000a843089100ff803900080008000c0000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1, 0x0, 0x0, 0x0}, 0x0) 06:30:01 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x9effffff}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 06:30:01 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x4000000000000002, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x68, &(0x7f0000000280)=0x1000000000f8, 0x4) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000000)) gettid() fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f00000000c0)={0x0, 0x0}) r2 = syz_open_procfs(r1, &(0x7f0000000180)='fd\x00') r3 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x14, 0x1a200) clock_gettime(0x0, &(0x7f0000000080)) write$P9_RREMOVE(r3, &(0x7f00000000c0)={0x7, 0x7b, 0x1}, 0x7) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(r3, 0xc0245720, &(0x7f00000003c0)={0x1, {0x0, 0x1c9c380}, 0x8}) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$inet(0x2, 0x6000000000000001, 0x0) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/autofs\x00', 0x8000000000000002, 0x0) ioctl$UFFDIO_WAKE(r5, 0x8010aa02, &(0x7f0000000040)={&(0x7f0000ffd000/0x2000)=nil, 0x2000}) getsockopt$EBT_SO_GET_ENTRIES(r4, 0x0, 0x81, &(0x7f00000001c0)={'nat\x00', 0x0, 0x0, 0x5, [], 0x0, 0x0, &(0x7f0000000100)=""/5}, &(0x7f0000000240)=0x78) getpgid(0xffffffffffffffff) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_user\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000600)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r7, 0x0, 0x48c, &(0x7f0000000080)={0x1000000000, 'ip6gre0\x00', 0x80000000000002}, 0x18) ioctl(r7, 0x800000000008982, &(0x7f0000000080)) openat$ppp(0xffffffffffffff9c, &(0x7f0000000340)='/dev/ppp\x00', 0x2003f, 0x0) write$FUSE_NOTIFY_DELETE(r6, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x153) mount(&(0x7f0000000c40)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x8000000000000002, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9f5, 0x0, 0xffff, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r6, 0x84, 0x1a, &(0x7f0000000880)=ANY=[], 0x0) r8 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r8) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000004fc8)={&(0x7f0000016000), 0xc, &(0x7f000000b000)={&(0x7f000002c000)=@mpls_newroute={0x20, 0x18, 0x21, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_DST={0x4, 0x9}]}, 0x20}}, 0x0) 06:30:01 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06030000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d40000ffffa88800", 0x55}], 0x1}, 0x0) 06:30:01 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06000000a843089100ff803900080008000c0000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1, 0x0, 0x0, 0x0}, 0x0) 06:30:01 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06020000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000006000000", 0x55}], 0x1}, 0x0) [ 1164.913798][T31310] syz-executor.1 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=0 [ 1164.979953][T31310] CPU: 0 PID: 31310 Comm: syz-executor.1 Not tainted 5.2.0-rc6+ #62 [ 1164.991715][T31310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1165.006833][T31310] Call Trace: [ 1165.010489][T31310] dump_stack+0x172/0x1f0 [ 1165.015215][T31310] dump_header+0x10f/0xb6c [ 1165.015233][T31310] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1165.015246][T31310] ? ___ratelimit+0x60/0x595 [ 1165.015260][T31310] ? do_raw_spin_unlock+0x57/0x270 [ 1165.015277][T31310] oom_kill_process.cold+0x10/0x15 [ 1165.015292][T31310] out_of_memory+0x79a/0x1280 [ 1165.015307][T31310] ? lock_downgrade+0x880/0x880 06:30:01 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0xc3ffffff}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) [ 1165.015321][T31310] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1165.015336][T31310] ? oom_killer_disable+0x280/0x280 [ 1165.015355][T31310] ? find_held_lock+0x35/0x130 [ 1165.098667][T31310] mem_cgroup_out_of_memory+0x1ca/0x230 [ 1165.113127][T31310] ? memcg_event_wake+0x230/0x230 [ 1165.122326][T31310] ? do_raw_spin_unlock+0x57/0x270 06:30:01 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06030000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d40000ffffff9e00", 0x55}], 0x1}, 0x0) [ 1165.129917][T31310] ? _raw_spin_unlock+0x2d/0x50 [ 1165.136353][T31310] try_charge+0x1042/0x1410 [ 1165.142455][T31310] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1165.152146][T31310] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 1165.160817][T31310] ? find_held_lock+0x35/0x130 [ 1165.168753][T31310] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 1165.175545][T31310] __memcg_kmem_charge_memcg+0x7c/0x130 [ 1165.183744][T31310] ? memcg_kmem_put_cache+0xb0/0xb0 [ 1165.189969][T31310] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 1165.198937][T31310] __memcg_kmem_charge+0x136/0x300 [ 1165.204617][T31310] __alloc_pages_nodemask+0x4bd/0x8d0 [ 1165.210996][T31310] ? mark_held_locks+0xf0/0xf0 [ 1165.217658][T31310] ? __alloc_pages_slowpath+0x28f0/0x28f0 [ 1165.225158][T31310] ? copy_page_range+0x128a/0x1fc0 [ 1165.230480][T31310] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1165.237975][T31310] alloc_pages_current+0x107/0x210 [ 1165.243123][T31310] pte_alloc_one+0x1b/0x1a0 [ 1165.248132][T31310] __pte_alloc+0x20/0x310 [ 1165.254872][T31310] copy_page_range+0x1561/0x1fc0 [ 1165.261735][T31310] ? pmd_alloc+0x180/0x180 06:30:02 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06020000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d40000000a000000", 0x55}], 0x1}, 0x0) [ 1165.272160][T31310] ? vma_gap_callbacks_rotate+0x62/0x80 [ 1165.284749][T31310] ? __rb_insert_augmented+0x22f/0xdf0 [ 1165.298956][T31310] ? validate_mm_rb+0xa3/0xc0 [ 1165.308716][T31310] ? __vma_link_rb+0x279/0x370 [ 1165.317148][T31310] ? kasan_check_write+0x14/0x20 [ 1165.324952][T31310] dup_mm+0x9c4/0x13b0 [ 1165.332058][T31310] ? vm_area_dup+0x170/0x170 [ 1165.340056][T31310] ? debug_mutex_init+0x2d/0x60 [ 1165.346938][T31310] copy_process.part.0+0x2d02/0x6950 [ 1165.356272][T31310] ? __cleanup_sighand+0x60/0x60 [ 1165.366329][T31310] _do_fork+0x25d/0xfe0 [ 1165.366351][T31310] ? copy_init_mm+0x20/0x20 [ 1165.366373][T31310] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1165.366386][T31310] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1165.366399][T31310] ? do_syscall_64+0x26/0x680 [ 1165.366423][T31310] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1165.409079][T31310] ? do_syscall_64+0x26/0x680 [ 1165.413819][T31310] __x64_sys_clone+0xbf/0x150 [ 1165.418603][T31310] do_syscall_64+0xfd/0x680 [ 1165.423120][T31310] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1165.429032][T31310] RIP: 0033:0x457aea [ 1165.433112][T31310] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 1165.452835][T31310] RSP: 002b:0000000000a6fd30 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1165.461437][T31310] RAX: ffffffffffffffda RBX: 0000000000a6fd30 RCX: 0000000000457aea [ 1165.469639][T31310] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 06:30:02 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06030000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d4000000001bba00", 0x55}], 0x1}, 0x0) [ 1165.478018][T31310] RBP: 0000000000a6fd70 R08: 0000000000000001 R09: 0000555555747940 [ 1165.486000][T31310] R10: 0000555555747c10 R11: 0000000000000246 R12: 0000000000000001 [ 1165.494071][T31310] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000a6fdc0 [ 1165.593747][T31310] memory: usage 307200kB, limit 307200kB, failcnt 2435 [ 1165.602178][T31310] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1165.615985][T31310] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1165.625192][T31310] Memory cgroup stats for /syz1: cache:0KB rss:224632KB rss_huge:184320KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:224632KB inactive_file:0KB active_file:0KB unevictable:0KB [ 1165.662515][T31310] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=6188,uid=0 06:30:02 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x40100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000]}) 06:30:02 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06000000a843089100ff803900080008000c0000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1, 0x0, 0x0, 0x0}, 0x0) 06:30:02 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06020000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d40000000c000000", 0x55}], 0x1}, 0x0) 06:30:02 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0xf0ffffff}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) [ 1165.688415][T31310] Memory cgroup out of memory: Killed process 6188 (syz-executor.1) total-vm:72708kB, anon-rss:2204kB, file-rss:35788kB, shmem-rss:0kB [ 1165.815918][T31310] syz-executor.1 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=0 [ 1165.867671][T31310] CPU: 0 PID: 31310 Comm: syz-executor.1 Not tainted 5.2.0-rc6+ #62 [ 1165.875795][T31310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1165.886387][T31310] Call Trace: [ 1165.886415][T31310] dump_stack+0x172/0x1f0 [ 1165.886435][T31310] dump_header+0x10f/0xb6c [ 1165.886450][T31310] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1165.886464][T31310] ? ___ratelimit+0x60/0x595 [ 1165.886478][T31310] ? do_raw_spin_unlock+0x57/0x270 [ 1165.886496][T31310] oom_kill_process.cold+0x10/0x15 [ 1165.886516][T31310] out_of_memory+0x79a/0x1280 [ 1165.904822][T31310] ? lock_downgrade+0x880/0x880 [ 1165.904839][T31310] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1165.904860][T31310] ? oom_killer_disable+0x280/0x280 [ 1165.936471][T31310] ? find_held_lock+0x35/0x130 [ 1165.936499][T31310] mem_cgroup_out_of_memory+0x1ca/0x230 [ 1165.936513][T31310] ? memcg_event_wake+0x230/0x230 [ 1165.936532][T31310] ? do_raw_spin_unlock+0x57/0x270 [ 1165.936547][T31310] ? _raw_spin_unlock+0x2d/0x50 [ 1165.936564][T31310] try_charge+0x1042/0x1410 [ 1165.936582][T31310] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1165.936597][T31310] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 1165.936615][T31310] ? find_held_lock+0x35/0x130 [ 1165.957476][T31310] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 1165.994468][T31310] __memcg_kmem_charge_memcg+0x7c/0x130 [ 1166.000581][T31310] ? memcg_kmem_put_cache+0xb0/0xb0 [ 1166.005803][T31310] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 1166.011403][T31310] __memcg_kmem_charge+0x136/0x300 [ 1166.018354][T31310] __alloc_pages_nodemask+0x4bd/0x8d0 [ 1166.025358][T31310] ? mark_held_locks+0xf0/0xf0 [ 1166.030324][T31310] ? __alloc_pages_slowpath+0x28f0/0x28f0 [ 1166.041978][T31310] ? copy_page_range+0x128a/0x1fc0 [ 1166.047580][T31310] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1166.054826][T31310] alloc_pages_current+0x107/0x210 [ 1166.060021][T31310] pte_alloc_one+0x1b/0x1a0 [ 1166.064717][T31310] __pte_alloc+0x20/0x310 [ 1166.069591][T31310] copy_page_range+0x1561/0x1fc0 [ 1166.075267][T31310] ? pmd_alloc+0x180/0x180 [ 1166.079978][T31310] ? vma_gap_callbacks_rotate+0x62/0x80 [ 1166.085559][T31310] ? __rb_insert_augmented+0x22f/0xdf0 [ 1166.091035][T31310] ? validate_mm_rb+0xa3/0xc0 [ 1166.095847][T31310] ? __vma_link_rb+0x279/0x370 [ 1166.101137][T31310] ? kasan_check_write+0x14/0x20 [ 1166.106106][T31310] dup_mm+0x9c4/0x13b0 [ 1166.110469][T31310] ? vm_area_dup+0x170/0x170 [ 1166.116751][T31310] ? debug_mutex_init+0x2d/0x60 [ 1166.123752][T31310] copy_process.part.0+0x2d02/0x6950 [ 1166.130273][T31310] ? __cleanup_sighand+0x60/0x60 [ 1166.135491][T31310] _do_fork+0x25d/0xfe0 [ 1166.140427][T31310] ? copy_init_mm+0x20/0x20 [ 1166.145054][T31310] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1166.150687][T31310] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1166.156148][T31310] ? do_syscall_64+0x26/0x680 [ 1166.161081][T31310] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1166.167414][T31310] ? do_syscall_64+0x26/0x680 [ 1166.172362][T31310] __x64_sys_clone+0xbf/0x150 [ 1166.177701][T31310] do_syscall_64+0xfd/0x680 [ 1166.182618][T31310] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1166.188494][T31310] RIP: 0033:0x457aea [ 1166.192428][T31310] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 1166.214233][T31310] RSP: 002b:0000000000a6fd30 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1166.226292][T31310] RAX: ffffffffffffffda RBX: 0000000000a6fd30 RCX: 0000000000457aea [ 1166.236584][T31310] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 1166.246278][T31310] RBP: 0000000000a6fd70 R08: 0000000000000001 R09: 0000555555747940 06:30:02 executing program 3: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = fcntl$getown(0xffffffffffffff9c, 0x9) r1 = socket$bt_rfcomm(0x1f, 0x3, 0x3) ioctl$sock_inet_SIOCGIFBRDADDR(r1, 0x8919, &(0x7f0000000000)={'\x00', {0x2, 0x4e21, @multicast1}}) r2 = syz_open_procfs(r0, &(0x7f0000000040)='net/ipv6_rowte\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r2, &(0x7f00000017c0), 0x333, 0x0) 06:30:02 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06030000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d40000fffffff000", 0x55}], 0x1}, 0x0) 06:30:03 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0xfeffffff}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 06:30:03 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06000000a843089100ff803900080008000c0000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1, 0x0, 0x0, 0x0}, 0x0) 06:30:03 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06020000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d40000000e000000", 0x55}], 0x1}, 0x0) [ 1166.263023][T31310] R10: 0000555555747c10 R11: 0000000000000246 R12: 0000000000000001 [ 1166.274770][T31310] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000a6fdc0 [ 1166.285637][T31310] memory: usage 307200kB, limit 307200kB, failcnt 2470 [ 1166.292823][T31310] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1166.300566][T31310] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 06:30:03 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06030000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d40000000000fc00", 0x55}], 0x1}, 0x0) [ 1166.341072][T31310] Memory cgroup stats for /syz1: cache:0KB rss:224632KB rss_huge:184320KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:224632KB inactive_file:0KB active_file:0KB unevictable:0KB [ 1166.402130][T31310] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=6203,uid=0 06:30:03 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06020000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d40000000f000000", 0x55}], 0x1}, 0x0) 06:30:03 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06000000a843089100ff803900080008000c0000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1, 0x0, 0x0, 0x0}, 0x0) [ 1166.446321][T31310] Memory cgroup out of memory: Killed process 6203 (syz-executor.1) total-vm:72708kB, anon-rss:2204kB, file-rss:35788kB, shmem-rss:0kB 06:30:03 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x40100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300000000000000]}) 06:30:03 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0xffffa888}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 06:30:03 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = socket$kcm(0x2, 0x2, 0x73) socket$inet6_udplite(0xa, 0x2, 0x88) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) write$P9_RGETLOCK(r3, &(0x7f0000000500)=ANY=[@ANYBLOB="3800000a37010002e50c0000000000020900000000000000", @ANYRES32=r1, @ANYBLOB="f930407b760f00001705a109d0a8a7eb4b"], 0x38) setsockopt$inet_mreq(r3, 0x0, 0x23, &(0x7f0000000100)={@loopback, @multicast1}, 0x8) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) connect(r2, &(0x7f0000000000)=@pppol2tpv3={0x2, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80) setsockopt$inet_sctp_SCTP_NODELAY(r3, 0x84, 0x3, &(0x7f0000000680)=0x7, 0x4) fcntl$getown(r2, 0x9) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f00000002c0)={0x16, 0x98, 0xfa00, {&(0x7f0000000280), 0x0, 0xffffffffffffffff, 0x10, 0x1, @in={0x2, 0x4e20, @loopback}}}, 0xa0) ioctl$PPPIOCGFLAGS(0xffffffffffffffff, 0x8004745a, &(0x7f0000000200)) bind$unix(r3, &(0x7f00000003c0)=@abs={0x1, 0x0, 0x4e21}, 0x6e) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x4) openat$vimc0(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/video0\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffff9c, 0x84, 0x7b, &(0x7f0000000540)={0x0, 0x20}, &(0x7f0000000580)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f00000005c0)={0x7, 0xa, 0x1c, 0x3, r4}, &(0x7f0000000600)=0x10) ioctl$VIDIOC_STREAMOFF(r3, 0x40045613, &(0x7f0000000240)=0xfffffffffffffffc) sendmmsg(r2, &(0x7f0000001540), 0x553, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000440)={0x0}) sync_file_range(r3, 0x8, 0xffffffff95002abb, 0x7) ioctl$DRM_IOCTL_GET_CTX(r3, 0xc0086423, &(0x7f0000000480)={r5, 0x3}) fcntl$lock(r0, 0x7, &(0x7f00000004c0)={0x0, 0x2, 0x7, 0x9, r1}) dup(r0) ioctl$VHOST_SET_VRING_ENDIAN(r3, 0x4008af13, &(0x7f0000000640)={0x2, 0x7}) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r3, 0x894b, &(0x7f0000000380)) 06:30:03 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06030000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d40000fffffffc00", 0x55}], 0x1}, 0x0) 06:30:03 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06000000a843089100ff803900080008000c0000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1, 0x0, 0x0, 0x0}, 0x0) [ 1166.638746][T31310] syz-executor.1 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=0 [ 1166.684694][T31310] CPU: 1 PID: 31310 Comm: syz-executor.1 Not tainted 5.2.0-rc6+ #62 [ 1166.693441][T31310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1166.705422][T31310] Call Trace: [ 1166.709915][T31310] dump_stack+0x172/0x1f0 [ 1166.714451][T31310] dump_header+0x10f/0xb6c [ 1166.718890][T31310] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1166.724729][T31310] ? ___ratelimit+0x60/0x595 [ 1166.729336][T31310] ? do_raw_spin_unlock+0x57/0x270 [ 1166.734939][T31310] oom_kill_process.cold+0x10/0x15 [ 1166.740585][T31310] out_of_memory+0x79a/0x1280 [ 1166.746283][T31310] ? lock_downgrade+0x880/0x880 [ 1166.751804][T31310] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1166.761036][T31310] ? oom_killer_disable+0x280/0x280 [ 1166.767229][T31310] ? find_held_lock+0x35/0x130 [ 1166.773208][T31310] mem_cgroup_out_of_memory+0x1ca/0x230 [ 1166.778805][T31310] ? memcg_event_wake+0x230/0x230 [ 1166.783950][T31310] ? do_raw_spin_unlock+0x57/0x270 [ 1166.791270][T31310] ? _raw_spin_unlock+0x2d/0x50 [ 1166.796942][T31310] try_charge+0x1042/0x1410 [ 1166.802275][T31310] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1166.808580][T31310] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 1166.815063][T31310] ? find_held_lock+0x35/0x130 [ 1166.820029][T31310] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 1166.825612][T31310] __memcg_kmem_charge_memcg+0x7c/0x130 [ 1166.831361][T31310] ? memcg_kmem_put_cache+0xb0/0xb0 [ 1166.837128][T31310] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 1166.842932][T31310] __memcg_kmem_charge+0x136/0x300 [ 1166.848417][T31310] __alloc_pages_nodemask+0x4bd/0x8d0 [ 1166.853908][T31310] ? mark_held_locks+0xf0/0xf0 [ 1166.858786][T31310] ? __alloc_pages_slowpath+0x28f0/0x28f0 [ 1166.864834][T31310] ? copy_page_range+0x128a/0x1fc0 [ 1166.870079][T31310] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1166.876464][T31310] alloc_pages_current+0x107/0x210 [ 1166.881604][T31310] pte_alloc_one+0x1b/0x1a0 [ 1166.886578][T31310] __pte_alloc+0x20/0x310 [ 1166.891135][T31310] copy_page_range+0x1561/0x1fc0 [ 1166.896553][T31310] ? pmd_alloc+0x180/0x180 [ 1166.900998][T31310] ? vma_gap_callbacks_rotate+0x62/0x80 [ 1166.911767][T31310] ? __rb_insert_augmented+0x22f/0xdf0 [ 1166.917616][T31310] ? validate_mm_rb+0xa3/0xc0 [ 1166.922660][T31310] ? __vma_link_rb+0x279/0x370 [ 1166.927538][T31310] ? kasan_check_write+0x14/0x20 [ 1166.932980][T31310] dup_mm+0x9c4/0x13b0 [ 1166.937345][T31310] ? vm_area_dup+0x170/0x170 [ 1166.942161][T31310] ? debug_mutex_init+0x2d/0x60 [ 1166.947131][T31310] copy_process.part.0+0x2d02/0x6950 [ 1166.952641][T31310] ? __cleanup_sighand+0x60/0x60 [ 1166.957994][T31310] _do_fork+0x25d/0xfe0 [ 1166.962259][T31310] ? copy_init_mm+0x20/0x20 [ 1166.966884][T31310] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1166.972890][T31310] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1166.979030][T31310] ? do_syscall_64+0x26/0x680 [ 1166.983991][T31310] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1166.990167][T31310] ? do_syscall_64+0x26/0x680 [ 1166.995166][T31310] __x64_sys_clone+0xbf/0x150 [ 1167.002742][T31310] do_syscall_64+0xfd/0x680 [ 1167.007276][T31310] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1167.013981][T31310] RIP: 0033:0x457aea [ 1167.025334][T31310] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 1167.046540][T31310] RSP: 002b:0000000000a6fd30 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1167.055154][T31310] RAX: ffffffffffffffda RBX: 0000000000a6fd30 RCX: 0000000000457aea [ 1167.063145][T31310] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 1167.072125][T31310] RBP: 0000000000a6fd70 R08: 0000000000000001 R09: 0000555555747940 06:30:03 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06020000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000010000000", 0x55}], 0x1}, 0x0) 06:30:03 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06030000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d40000000080fe00", 0x55}], 0x1}, 0x0) [ 1167.080201][T31310] R10: 0000555555747c10 R11: 0000000000000246 R12: 0000000000000001 [ 1167.088622][T31310] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000a6fdc0 06:30:03 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06020000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000060000000", 0x55}], 0x1}, 0x0) 06:30:03 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0xfffff000}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) [ 1167.232820][T31310] memory: usage 307200kB, limit 307200kB, failcnt 2505 [ 1167.239985][T31310] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 06:30:04 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06000000a843089100ff803900080008000c0000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1, 0x0, 0x0, 0x0}, 0x0) [ 1167.305346][T31310] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 06:30:04 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06030000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000c0fe00", 0x55}], 0x1}, 0x0) [ 1167.361409][T31310] Memory cgroup stats for /syz1: cache:0KB rss:224632KB rss_huge:184320KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:224632KB inactive_file:0KB active_file:0KB unevictable:0KB 06:30:04 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0xffffff7f}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) [ 1167.455780][T31310] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=6232,uid=0 [ 1167.535992][T31310] Memory cgroup out of memory: Killed process 6232 (syz-executor.1) total-vm:72708kB, anon-rss:2204kB, file-rss:35788kB, shmem-rss:0kB 06:30:04 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x40100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000]}) 06:30:04 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06020000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d4000000f0000000", 0x55}], 0x1}, 0x0) [ 1167.660473][T17369] syz-executor.1 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=1000 [ 1167.732162][T17369] CPU: 1 PID: 17369 Comm: syz-executor.1 Not tainted 5.2.0-rc6+ #62 [ 1167.740480][T17369] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1167.754003][T17369] Call Trace: [ 1167.754035][T17369] dump_stack+0x172/0x1f0 [ 1167.754054][T17369] dump_header+0x10f/0xb6c [ 1167.754069][T17369] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1167.754083][T17369] ? ___ratelimit+0x60/0x595 [ 1167.754097][T17369] ? do_raw_spin_unlock+0x57/0x270 [ 1167.754113][T17369] oom_kill_process.cold+0x10/0x15 [ 1167.754130][T17369] out_of_memory+0x79a/0x1280 [ 1167.754151][T17369] ? lock_downgrade+0x880/0x880 [ 1167.800784][T17369] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1167.807924][T17369] ? oom_killer_disable+0x280/0x280 [ 1167.813136][T17369] ? find_held_lock+0x35/0x130 [ 1167.818021][T17369] mem_cgroup_out_of_memory+0x1ca/0x230 [ 1167.824470][T17369] ? memcg_event_wake+0x230/0x230 [ 1167.824492][T17369] ? do_raw_spin_unlock+0x57/0x270 [ 1167.824508][T17369] ? _raw_spin_unlock+0x2d/0x50 [ 1167.824529][T17369] try_charge+0x1042/0x1410 [ 1167.845262][T17369] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1167.851092][T17369] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 1167.857236][T17369] ? find_held_lock+0x35/0x130 [ 1167.862102][T17369] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 1167.867661][T17369] __memcg_kmem_charge_memcg+0x7c/0x130 [ 1167.873397][T17369] ? memcg_kmem_put_cache+0xb0/0xb0 [ 1167.878794][T17369] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 1167.885584][T17369] __memcg_kmem_charge+0x136/0x300 [ 1167.890706][T17369] __alloc_pages_nodemask+0x4bd/0x8d0 [ 1167.896203][T17369] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1167.902794][T17369] ? __alloc_pages_slowpath+0x28f0/0x28f0 [ 1167.908608][T17369] ? copy_process.part.0+0x1eea/0x6950 [ 1167.914683][T17369] copy_process.part.0+0x44e/0x6950 [ 1167.920024][T17369] ? __might_fault+0x12b/0x1e0 [ 1167.925352][T17369] ? __cleanup_sighand+0x60/0x60 [ 1167.930832][T17369] ? lock_downgrade+0x880/0x880 [ 1167.937796][T17369] _do_fork+0x25d/0xfe0 [ 1167.942127][T17369] ? copy_init_mm+0x20/0x20 [ 1167.947038][T17369] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1167.952606][T17369] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1167.958225][T17369] ? do_syscall_64+0x26/0x680 [ 1167.962894][T17369] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1167.969170][T17369] ? do_syscall_64+0x26/0x680 [ 1167.974905][T17369] __x64_sys_clone+0xbf/0x150 [ 1167.979590][T17369] do_syscall_64+0xfd/0x680 [ 1167.984095][T17369] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1167.990760][T17369] RIP: 0033:0x459519 [ 1167.994843][T17369] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1168.016270][T17369] RSP: 002b:00007f76cf65fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1168.033473][T17369] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000459519 [ 1168.041897][T17369] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000000040100 [ 1168.049969][T17369] RBP: 000000000075bf20 R08: ffffffffffffffff R09: 0000000000000000 [ 1168.058049][T17369] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f76cf6606d4 [ 1168.066051][T17369] R13: 00000000004bf97d R14: 00000000004d1358 R15: 00000000ffffffff 06:30:04 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) close(r1) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) close(r1) pipe(&(0x7f0000000040)) splice(r0, 0x0, r2, 0x0, 0x2, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") write(r0, &(0x7f00000000c0)="2400000012005f3414f9f40700090400818a0400"/36, 0x24) 06:30:04 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06000000a843089100ff803900080008000c0000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1, 0x0, 0x0, 0x0}, 0x0) 06:30:04 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06030000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d40000000000ff00", 0x55}], 0x1}, 0x0) 06:30:04 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0xffffff9e}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 06:30:04 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06020000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d4000000fc000000", 0x55}], 0x1}, 0x0) [ 1168.078409][T17369] memory: usage 307200kB, limit 307200kB, failcnt 2544 06:30:04 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06000000a843089100ff803900080008000c0000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1, 0x0, 0x0, 0x0}, 0x0) [ 1168.118698][T17369] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1168.137179][T17369] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1168.145452][T17369] Memory cgroup stats for /syz1: cache:0KB rss:224632KB rss_huge:184320KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:224632KB inactive_file:0KB active_file:0KB unevictable:0KB [ 1168.204639][T17369] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=6265,uid=0 [ 1168.234968][T17369] Memory cgroup out of memory: Killed process 6265 (syz-executor.1) total-vm:72708kB, anon-rss:2204kB, file-rss:35788kB, shmem-rss:0kB 06:30:04 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06030000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d4000088a8ffff00", 0x55}], 0x1}, 0x0) 06:30:05 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06020000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d40000005a020000", 0x55}], 0x1}, 0x0) 06:30:05 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06000000a843089100ff803900080008000c0000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1, 0x0, 0x0, 0x0}, 0x0) [ 1168.272042][T17392] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1168.288027][T31310] syz-executor.1 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=0 06:30:05 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0xffffffc3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) [ 1168.332275][T17394] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1168.435101][T31310] CPU: 1 PID: 31310 Comm: syz-executor.1 Not tainted 5.2.0-rc6+ #62 [ 1168.443231][T31310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1168.454039][T31310] Call Trace: [ 1168.457444][T31310] dump_stack+0x172/0x1f0 [ 1168.461801][T31310] dump_header+0x10f/0xb6c [ 1168.466246][T31310] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1168.472089][T31310] ? ___ratelimit+0x60/0x595 [ 1168.476767][T31310] ? do_raw_spin_unlock+0x57/0x270 [ 1168.482007][T31310] oom_kill_process.cold+0x10/0x15 [ 1168.487171][T31310] out_of_memory+0x79a/0x1280 [ 1168.492061][T31310] ? oom_killer_disable+0x280/0x280 [ 1168.492075][T31310] ? find_held_lock+0x35/0x130 [ 1168.492100][T31310] mem_cgroup_out_of_memory+0x1ca/0x230 [ 1168.492114][T31310] ? memcg_event_wake+0x230/0x230 [ 1168.492136][T31310] ? do_raw_spin_unlock+0x57/0x270 [ 1168.519160][T31310] ? _raw_spin_unlock+0x2d/0x50 [ 1168.524426][T31310] try_charge+0xd45/0x1410 [ 1168.529065][T31310] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1168.534665][T31310] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 1168.540267][T31310] ? find_held_lock+0x35/0x130 [ 1168.545055][T31310] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 1168.550649][T31310] __memcg_kmem_charge_memcg+0x7c/0x130 [ 1168.556427][T31310] ? memcg_kmem_put_cache+0xb0/0xb0 [ 1168.561797][T31310] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 1168.567411][T31310] __memcg_kmem_charge+0x136/0x300 [ 1168.572651][T31310] __alloc_pages_nodemask+0x4bd/0x8d0 [ 1168.578061][T31310] ? mark_held_locks+0xf0/0xf0 [ 1168.583064][T31310] ? __alloc_pages_slowpath+0x28f0/0x28f0 [ 1168.588907][T31310] ? copy_page_range+0x128a/0x1fc0 [ 1168.594317][T31310] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1168.594339][T31310] alloc_pages_current+0x107/0x210 [ 1168.594358][T31310] pte_alloc_one+0x1b/0x1a0 [ 1168.594380][T31310] __pte_alloc+0x20/0x310 [ 1168.606040][T31310] copy_page_range+0x1561/0x1fc0 [ 1168.622231][T31310] ? pmd_alloc+0x180/0x180 [ 1168.626820][T31310] ? vma_gap_callbacks_rotate+0x62/0x80 [ 1168.632535][T31310] ? __rb_insert_augmented+0x22f/0xdf0 [ 1168.638020][T31310] ? validate_mm_rb+0xa3/0xc0 [ 1168.643085][T31310] ? __vma_link_rb+0x279/0x370 [ 1168.648593][T31310] ? kasan_check_write+0x14/0x20 [ 1168.653565][T31310] dup_mm+0x9c4/0x13b0 [ 1168.653593][T31310] ? vm_area_dup+0x170/0x170 [ 1168.653608][T31310] ? debug_mutex_init+0x2d/0x60 [ 1168.653630][T31310] copy_process.part.0+0x2d02/0x6950 [ 1168.662332][T31310] ? __cleanup_sighand+0x60/0x60 [ 1168.677911][T31310] _do_fork+0x25d/0xfe0 [ 1168.682282][T31310] ? copy_init_mm+0x20/0x20 [ 1168.686821][T31310] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1168.692312][T31310] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1168.697807][T31310] ? do_syscall_64+0x26/0x680 [ 1168.702528][T31310] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1168.709057][T31310] ? do_syscall_64+0x26/0x680 [ 1168.713864][T31310] __x64_sys_clone+0xbf/0x150 [ 1168.719131][T31310] do_syscall_64+0xfd/0x680 [ 1168.723765][T31310] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1168.729934][T31310] RIP: 0033:0x457aea [ 1168.733857][T31310] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 1168.754128][T31310] RSP: 002b:0000000000a6fd30 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1168.763062][T31310] RAX: ffffffffffffffda RBX: 0000000000a6fd30 RCX: 0000000000457aea [ 1168.772108][T31310] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 1168.789834][T31310] RBP: 0000000000a6fd70 R08: 0000000000000001 R09: 0000555555747940 [ 1168.798373][T31310] R10: 0000555555747c10 R11: 0000000000000246 R12: 0000000000000001 [ 1168.806919][T31310] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000a6fdc0 [ 1168.816223][T31310] memory: usage 302532kB, limit 307200kB, failcnt 2544 [ 1168.823324][T31310] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1168.830889][T31310] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1168.838435][T31310] Memory cgroup stats for /syz1: cache:0KB rss:220312KB rss_huge:180224KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:220312KB inactive_file:0KB active_file:0KB unevictable:0KB [ 1168.869397][T31310] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=6281,uid=0 06:30:05 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x40100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500000000000000]}) 06:30:05 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06020000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000030000", 0x55}], 0x1}, 0x0) 06:30:05 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0xfffffff0}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 06:30:05 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06000000a843089100ff803900080008000c0000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1, 0x0, 0x0, 0x0}, 0x0) 06:30:05 executing program 3: r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video2\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000100)={0x0, 0x0, [], @raw_data=[0x6, 0x100000001, 0x4, 0x401, 0x4, 0x7f, 0x7, 0xaada, 0x5, 0x8, 0x3, 0x5, 0x100000001, 0x8, 0xae, 0x120, 0x61d, 0x7f, 0x3, 0xb3, 0x2, 0xffffffffffff5632, 0x2, 0x30000000000, 0xc9, 0x521b, 0x20, 0x3, 0x251, 0x9, 0x1, 0x6]}) clone(0x0, 0x0, 0x0, 0x0, 0x0) 06:30:05 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06030000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d4000000f0ffff00", 0x55}], 0x1}, 0x0) [ 1168.886335][T31310] Memory cgroup out of memory: Killed process 6281 (syz-executor.1) total-vm:72708kB, anon-rss:2204kB, file-rss:35788kB, shmem-rss:0kB [ 1168.902715][ T1044] oom_reaper: reaped process 6281 (syz-executor.1), now anon-rss:0kB, file-rss:34828kB, shmem-rss:0kB 06:30:05 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06000000a843089100ff803900080008000c0000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1, 0x0, 0x0, 0x0}, 0x0) 06:30:05 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x40100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600000000000000]}) 06:30:05 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06020000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000060000", 0x55}], 0x1}, 0x0) 06:30:05 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06030000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400007fffffff00", 0x55}], 0x1}, 0x0) 06:30:05 executing program 3: r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x40000000806, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x80000802, 0x0) write$uinput_user_dev(r1, 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x16) ioctl$UI_SET_RELBIT(r1, 0x40045566, 0x8) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x0, 0x0) getuid() getpid() fcntl$getownex(r2, 0x10, &(0x7f0000000a00)) gettid() fcntl$getownex(r2, 0x10, &(0x7f0000000a40)={0x0, 0x0}) r4 = getpgid(r3) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000001040)={{{@in=@loopback, @in6=@ipv4={[], [], @remote}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@multicast2}}, &(0x7f0000000180)=0xfffffffffffffeb2) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r6 = creat(&(0x7f0000000200)='./file1\x00', 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$KDSETKEYCODE(r0, 0x4b4d, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000000)='cgroup\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, 0x0, 0x0) getpgid(r4) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f00000009c0)={0x1, &(0x7f0000000980)=[{0x20, 0xd5ab, 0x8, 0x100000000}]}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000240)={@empty, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @dev, 0x6, 0x0, 0x5, 0x100, 0x9e06, 0x40a00010, r5}) ioctl$UI_SET_EVBIT(r6, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) getpgid(0x0) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r6, 0x84, 0x4, &(0x7f00000008c0), &(0x7f0000000900)=0x4) ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000000000)) 06:30:05 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0xfffffffe}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 06:30:05 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06000000a843089100ff803900080008000c0000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1, 0x0, 0x0, 0x0}, 0x0) 06:30:06 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x40100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700000000000000]}) 06:30:06 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06020000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d4000000000a0000", 0x55}], 0x1}, 0x0) 06:30:06 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06030000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400009effffff00", 0x55}], 0x1}, 0x0) [ 1169.407668][T31310] syz-executor.1 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=0 [ 1169.453866][ T24] audit: type=1326 audit(1561789806.152:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=17447 comm="syz-executor.3" exe="/root/syz-executor.3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45c35a code=0x0 [ 1169.491396][T31310] CPU: 1 PID: 31310 Comm: syz-executor.1 Not tainted 5.2.0-rc6+ #62 [ 1169.499528][T31310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1169.509797][T31310] Call Trace: [ 1169.513231][T31310] dump_stack+0x172/0x1f0 [ 1169.517747][T31310] dump_header+0x10f/0xb6c [ 1169.522221][T31310] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1169.528163][T31310] ? ___ratelimit+0x60/0x595 [ 1169.533047][T31310] ? do_raw_spin_unlock+0x57/0x270 [ 1169.538325][T31310] oom_kill_process.cold+0x10/0x15 [ 1169.543483][T31310] out_of_memory+0x79a/0x1280 [ 1169.548219][T31310] ? lock_downgrade+0x880/0x880 [ 1169.553357][T31310] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1169.559951][T31310] ? oom_killer_disable+0x280/0x280 [ 1169.565257][T31310] ? find_held_lock+0x35/0x130 [ 1169.570749][T31310] mem_cgroup_out_of_memory+0x1ca/0x230 [ 1169.570765][T31310] ? memcg_event_wake+0x230/0x230 [ 1169.570790][T31310] ? do_raw_spin_unlock+0x57/0x270 [ 1169.587185][T31310] ? _raw_spin_unlock+0x2d/0x50 [ 1169.592064][T31310] try_charge+0x1042/0x1410 [ 1169.596782][T31310] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 06:30:06 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06000000a843089100ff803900080008000c0000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1, 0x0, 0x0, 0x0}, 0x0) 06:30:06 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06020000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d4000000000c0000", 0x55}], 0x1}, 0x0) 06:30:06 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06030000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d40000f0ffffff00", 0x55}], 0x1}, 0x0) [ 1169.602465][T31310] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 1169.608140][T31310] ? find_held_lock+0x35/0x130 [ 1169.613189][T31310] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 1169.618855][T31310] __memcg_kmem_charge_memcg+0x7c/0x130 [ 1169.624427][T31310] ? memcg_kmem_put_cache+0xb0/0xb0 [ 1169.629648][T31310] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 1169.635394][T31310] __memcg_kmem_charge+0x136/0x300 [ 1169.641072][T31310] __alloc_pages_nodemask+0x4bd/0x8d0 [ 1169.646722][T31310] ? mark_held_locks+0xf0/0xf0 [ 1169.651813][T31310] ? __alloc_pages_slowpath+0x28f0/0x28f0 [ 1169.658057][T31310] ? copy_page_range+0x128a/0x1fc0 [ 1169.663364][T31310] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1169.669813][T31310] alloc_pages_current+0x107/0x210 [ 1169.674950][T31310] pte_alloc_one+0x1b/0x1a0 [ 1169.679514][T31310] __pte_alloc+0x20/0x310 [ 1169.683862][T31310] copy_page_range+0x1561/0x1fc0 [ 1169.689193][T31310] ? pmd_alloc+0x180/0x180 [ 1169.693718][T31310] ? vma_gap_callbacks_rotate+0x62/0x80 [ 1169.699484][T31310] ? __rb_insert_augmented+0x22f/0xdf0 06:30:06 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06000000a843089100ff803900080008000c0000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0x2) [ 1169.699500][T31310] ? validate_mm_rb+0xa3/0xc0 [ 1169.699519][T31310] ? __vma_link_rb+0x279/0x370 [ 1169.715088][T31310] ? kasan_check_write+0x14/0x20 [ 1169.715112][T31310] dup_mm+0x9c4/0x13b0 [ 1169.715142][T31310] ? vm_area_dup+0x170/0x170 [ 1169.715165][T31310] ? debug_mutex_init+0x2d/0x60 [ 1169.734358][T31310] copy_process.part.0+0x2d02/0x6950 [ 1169.739757][T31310] ? __cleanup_sighand+0x60/0x60 [ 1169.739789][T31310] _do_fork+0x25d/0xfe0 [ 1169.739809][T31310] ? copy_init_mm+0x20/0x20 [ 1169.739833][T31310] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1169.748933][T31310] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1169.748950][T31310] ? do_syscall_64+0x26/0x680 [ 1169.748967][T31310] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1169.748980][T31310] ? do_syscall_64+0x26/0x680 [ 1169.749001][T31310] __x64_sys_clone+0xbf/0x150 [ 1169.749020][T31310] do_syscall_64+0xfd/0x680 [ 1169.765209][T31310] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1169.765227][T31310] RIP: 0033:0x457aea [ 1169.776261][T31310] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 1169.776270][T31310] RSP: 002b:0000000000a6fd30 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1169.776284][T31310] RAX: ffffffffffffffda RBX: 0000000000a6fd30 RCX: 0000000000457aea [ 1169.776292][T31310] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 1169.776301][T31310] RBP: 0000000000a6fd70 R08: 0000000000000001 R09: 0000555555747940 06:30:06 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0xf0ffffffffffff}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 06:30:06 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06020000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d4000000000e0000", 0x55}], 0x1}, 0x0) [ 1169.776310][T31310] R10: 0000555555747c10 R11: 0000000000000246 R12: 0000000000000001 [ 1169.776318][T31310] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000a6fdc0 [ 1169.937848][T31310] memory: usage 307200kB, limit 307200kB, failcnt 2590 [ 1169.966426][T31310] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1169.981125][T31310] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1169.988206][T31310] Memory cgroup stats for /syz1: cache:0KB rss:224632KB rss_huge:184320KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:224632KB inactive_file:0KB active_file:0KB unevictable:0KB [ 1170.011130][T31310] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=6308,uid=0 [ 1170.037742][T31310] Memory cgroup out of memory: Killed process 6308 (syz-executor.1) total-vm:72708kB, anon-rss:2204kB, file-rss:35788kB, shmem-rss:0kB [ 1170.056621][ T1044] oom_reaper: reaped process 6308 (syz-executor.1), now anon-rss:0kB, file-rss:34828kB, shmem-rss:0kB 06:30:06 executing program 3: r0 = open(&(0x7f00009e1000)='./file0\x00', 0x8040, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r3 = socket(0xa, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000040)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0xffff, 0x101500) setsockopt$inet_msfilter(r1, 0x0, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB='\b'], 0x1) r4 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) fcntl$setlease(r4, 0x4000, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000140)) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000200)={0x3b, @loopback, 0x4e20, 0x0, 'lblc\x00', 0x22, 0xdb3, 0x36}, 0x2c) 06:30:06 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06030000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d40000fcffffff00", 0x55}], 0x1}, 0x0) [ 1170.147250][ T24] audit: type=1326 audit(1561789806.842:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=17447 comm="syz-executor.3" exe="/root/syz-executor.3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45c35a code=0x0 06:30:06 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x100000000000000}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 06:30:06 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06000000a843089100ff803900080008000c0000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0x3) 06:30:06 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06020000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d4000000000f0000", 0x55}], 0x1}, 0x0) 06:30:06 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x40100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000000]}) 06:30:06 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x40100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00000000000000]}) 06:30:07 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06000000a843089100ff803900080008000c0000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0x4) 06:30:07 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06020000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d4000000c5140000", 0x55}], 0x1}, 0x0) 06:30:07 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06030000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0x0) 06:30:07 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x200000000000000}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 06:30:07 executing program 3: r0 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x5, 0x440) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffff9c, 0x84, 0x77, &(0x7f0000000100)={0x0, 0x6, 0x6, [0xb6, 0x0, 0x7, 0x5, 0x80000001, 0x3]}, &(0x7f0000000140)=0x14) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000180)={r1, @in6={{0xa, 0x4e21, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1}}}, 0x84) r2 = socket$inet6(0xa, 0x800, 0xfffffffffffffffe) ioctl(r2, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") r3 = socket$inet6_sctp(0xa, 0x5, 0x84) pwritev(r3, &(0x7f0000001580)=[{&(0x7f0000000240)="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", 0x1000}, {&(0x7f0000001240)="6a030aa23ac7598208bcfdb40f56f4723bf0604b11ccc1b4b35eb66ddcddae7fe8a2d455414d4aa6b9be8bfa79515151dac4c438ef4e16644a47d56f872d2e09a9e6ac7b09dfb6c4fc9429cfea2052111ef3cca68789fe29c57350faf7ba473aed544aa6dbb50f4318a3e13f7e2ad7c31f0a6b630279f0adc1f835a8c16a0d71166844a7a335f5d25ec637b10f986fef3e1869e1b25874d9e222d9a136211362532c4d976abe407c29570e7049901d120554f8602f2be8f72a60a94eed20f18cad735a7eba5fa43fac53fa3c7e306281ebe78dc9d152fbb7cc3b6856cc47f248", 0xe0}, {&(0x7f0000001340)="b34bc5cadb9889e3776c34509a65fd23e57af9f9c9cbae4f8964ade36640cce618ac061c0ba41427b31a1bcde6ba1c7e98f815c90b2e832ad661bec9505e68698728074eaf", 0x45}, {&(0x7f00000013c0)="871c54818e97b5d675d4f5b6115f9feb2b94d4de8f425fa5a4a3b7afde0e74cdbff797fd46045dbe5b5248c058ffb9556acc34125f71090854f8958bfbaed1eb7ccc765f9373281b1e7dc47cc98ca66e511c16e070f46f665456bc4960b23ea284c4d2490dac441aee7c98aecba3113fd81e1d16869a397124cd233fab2d6e758ba133e1fa38126c6da13ec2d2bca5d222c98c2ba15612055ac00a0bd9ecd06461075428ef28ad54dff8ee51494894ebb9875428a542e0be85e1da18308041bbbdd83bd8c315c60cf965705eba4bd8c8a6be1f1eb88fe6ca6878112f310d7a6280", 0xe1}, {&(0x7f00000014c0)="77da28e0ca48015d883c9338b04f40a187c24266537f581e6e578c8700b17b59070a153a523829b8fb4fafca91aa83887c5956248d2cbdb1645320bd6ef6f5648d5122781d2e0875f7e9579408618d7767490e00f823accbc814fd6d65c0c0a64d50d2551920ba493f59643ec7597bf64736487e5c6bc86a358818a0e7a36d67ba34b8a756a36c2093a887ad2ab2f2dbf2f459c023ce325caa", 0x99}], 0x5, 0x2) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r3, 0x84, 0xc, &(0x7f0000000000), 0x1d) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f00000000c0)=[@in={0x2, 0x0, @local}], 0x3c0) io_setup(0xab, &(0x7f0000001600)=0x0) io_cancel(r4, &(0x7f0000001740)={0x0, 0x0, 0x0, 0x0, 0x8001, r0, &(0x7f0000001640)="b0b7cdd1217925cb15c63e576d55f714eec1af0f7f45fa51f64366beabc170dd55b4fa535ae3f1deec9d2bf0625d76b7a6ec88125a491137dc31240c8746f99460085a91b6c950a0c09746eb34a79b29ed4009db37cfb7e1b2c18d6e4f0b38a67a10eaa9bfe25348a3c31ebf50c9861703045185332737c6fa1eee7a7d3b9f8726867c12a2a9211cda5ca55a383a24234b13190b110bae242f733284c8a7f80decb8f94c3fd4cf238a1105b5ba597d216f6a1a3f3aec5b1bdb098dfd0cbd525221dacad5744435bc81fdaa1ada5c4b0d534a2f07", 0xd4, 0xfffffffffffffff8, 0x0, 0x0, r0}, &(0x7f0000001780)) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x6d, &(0x7f0000ad2000), &(0x7f0000000080)=0xfdd2) 06:30:07 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x40100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00000000000000]}) 06:30:07 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06000000a843089100ff803900080008000c0000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0x6) 06:30:07 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06030000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d40000ffffffffff", 0x55}], 0x1}, 0x0) 06:30:07 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x300000000000000}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 06:30:07 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06020000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d4000000003f0000", 0x55}], 0x1}, 0x0) 06:30:07 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x40100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000]}) 06:30:07 executing program 3: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc0\x00', 0x0, 0x0) mq_unlink(&(0x7f0000000040)='/dev/rtc0\x00') ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f0000000080)) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x12c00, 0x0) ioctl$KVM_GET_MSRS(r1, 0xc008ae88, &(0x7f0000000100)={0x3, 0x0, [{}, {}, {}]}) 06:30:07 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06000000a843089100ff803900080008000c0000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0xa) 06:30:07 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x40100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800000000000000]}) 06:30:07 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06030000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0x0) 06:30:07 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070") r1 = socket$alg(0x26, 0x5, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x42000, 0x0) setsockopt$inet_sctp_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000200)={0xffffffffffffa006, 0x4, 0x1000, 0x46a4, 0x100000000, 0x1, 0x8, 0x4, 0x100000001, 0x8, 0xba64}, 0xb) bind$alg(r1, &(0x7f0000000b40)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-pclmul\x00'}, 0x58) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, &(0x7f0000000380)=""/209, &(0x7f0000000280)=0xd1) r3 = accept$alg(r1, 0x0, 0x0) sendmsg$sock(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)}, 0x4000) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r2, 0xc008551a, &(0x7f00000002c0)={0x6d, 0x4, [0x1]}) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x100, 0x0) ioctl$VIDIOC_SUBDEV_G_SELECTION(r2, 0xc040563d, &(0x7f0000000240)={0x0, 0x0, 0x103, 0x2, {0x800, 0x80000001, 0x9, 0xdb91}}) recvfrom$inet6(r4, &(0x7f0000000080)=""/228, 0xe4, 0x2000, &(0x7f0000000180)={0xa, 0x4e20, 0x1a8, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, 0x1c) 06:30:07 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06000000a843089100ff803900080008000c0000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0xc) 06:30:07 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06020000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000400000", 0x55}], 0x1}, 0x0) 06:30:07 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x400000000000000}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 06:30:07 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06030000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0x0) 06:30:07 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x40100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c00000000000000]}) 06:30:07 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06000000a843089100ff803900080008000c0000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0xe) 06:30:07 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06020000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000065580000", 0x55}], 0x1}, 0x0) 06:30:07 executing program 3: r0 = syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x10001, 0x42100) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000140)=0x1, &(0x7f0000000180)=0x4) r1 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x9, 0x0) ioctl$VIDIOC_QUERYSTD(r1, 0x8008563f, &(0x7f0000000280)) pipe2(&(0x7f0000000300)={0xffffffffffffffff}, 0x80000) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x22f, 0x5, 0x0, {0x0, 0x2, 0x2, 0x5}}, 0x30) 06:30:07 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06030000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0x0) 06:30:07 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x500000000000000}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 06:30:08 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06000000a843089100ff803900080008000c0000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0xf) 06:30:08 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x40100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6800000000000000]}) 06:30:08 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06000000a843089100ff803900080008000c0000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0x10) 06:30:08 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000080)) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, 0x0, 0x0) 06:30:08 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06020000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d4000000025a0000", 0x55}], 0x1}, 0x0) 06:30:08 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x600000000000000}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 06:30:08 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06030000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0x0) [ 1171.639942][T17641] syz-executor.1 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=1000 [ 1171.670856][T17641] CPU: 0 PID: 17641 Comm: syz-executor.1 Not tainted 5.2.0-rc6+ #62 [ 1171.679179][T17641] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1171.689435][T17641] Call Trace: [ 1171.692925][T17641] dump_stack+0x172/0x1f0 [ 1171.697279][T17641] dump_header+0x10f/0xb6c [ 1171.701717][T17641] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1171.707723][T17641] ? ___ratelimit+0x60/0x595 [ 1171.712336][T17641] ? do_raw_spin_unlock+0x57/0x270 [ 1171.717459][T17641] oom_kill_process.cold+0x10/0x15 [ 1171.722631][T17641] out_of_memory+0x79a/0x1280 [ 1171.722649][T17641] ? lock_downgrade+0x880/0x880 [ 1171.722664][T17641] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1171.722680][T17641] ? oom_killer_disable+0x280/0x280 [ 1171.722691][T17641] ? find_held_lock+0x35/0x130 [ 1171.722716][T17641] mem_cgroup_out_of_memory+0x1ca/0x230 [ 1171.722730][T17641] ? memcg_event_wake+0x230/0x230 [ 1171.722749][T17641] ? do_raw_spin_unlock+0x57/0x270 [ 1171.722772][T17641] ? _raw_spin_unlock+0x2d/0x50 [ 1171.771904][T17641] try_charge+0x1042/0x1410 [ 1171.776436][T17641] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1171.782002][T17641] ? get_mem_cgroup_from_mm+0x10b/0x2b0 06:30:08 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x700000000000000}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 06:30:08 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06020000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000600000", 0x55}], 0x1}, 0x0) [ 1171.787851][T17641] ? find_held_lock+0x35/0x130 [ 1171.792834][T17641] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 1171.798905][T17641] __memcg_kmem_charge_memcg+0x7c/0x130 [ 1171.804643][T17641] ? memcg_kmem_put_cache+0xb0/0xb0 [ 1171.809959][T17641] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 1171.815541][T17641] __memcg_kmem_charge+0x136/0x300 [ 1171.820956][T17641] __alloc_pages_nodemask+0x4bd/0x8d0 [ 1171.826443][T17641] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1171.832824][T17641] ? __alloc_pages_slowpath+0x28f0/0x28f0 06:30:08 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0xa00000000000000}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) [ 1171.838617][T17641] ? copy_process.part.0+0x1eea/0x6950 [ 1171.844099][T17641] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1171.849490][T17641] ? trace_hardirqs_on+0x67/0x220 [ 1171.854531][T17641] ? kasan_check_read+0x11/0x20 [ 1171.859659][T17641] copy_process.part.0+0x44e/0x6950 [ 1171.864982][T17641] ? __might_fault+0x12b/0x1e0 [ 1171.870062][T17641] ? __cleanup_sighand+0x60/0x60 [ 1171.875033][T17641] ? lock_downgrade+0x880/0x880 [ 1171.881198][T17641] _do_fork+0x25d/0xfe0 [ 1171.885901][T17641] ? copy_init_mm+0x20/0x20 06:30:08 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06020000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000058650000", 0x55}], 0x1}, 0x0) [ 1171.890546][T17641] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1171.896026][T17641] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1171.901506][T17641] ? do_syscall_64+0x26/0x680 [ 1171.906776][T17641] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1171.912869][T17641] ? do_syscall_64+0x26/0x680 [ 1171.917701][T17641] __x64_sys_clone+0xbf/0x150 [ 1171.922581][T17641] do_syscall_64+0xfd/0x680 [ 1171.927110][T17641] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1171.933016][T17641] RIP: 0033:0x459519 06:30:08 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06020000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d4000000fe800000", 0x55}], 0x1}, 0x0) [ 1171.936919][T17641] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1171.957065][T17641] RSP: 002b:00007f76cf65fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1171.965515][T17641] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000459519 [ 1171.973581][T17641] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000000040100 [ 1171.973590][T17641] RBP: 000000000075bf20 R08: ffffffffffffffff R09: 0000000000000000 06:30:08 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06000000a843089100ff803900080008000c0000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0x60) [ 1171.973598][T17641] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f76cf6606d4 [ 1171.973606][T17641] R13: 00000000004bf97d R14: 00000000004d1358 R15: 00000000ffffffff [ 1172.067777][T17641] memory: usage 307180kB, limit 307200kB, failcnt 2642 [ 1172.127469][T17641] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1172.155450][T17641] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1172.163881][T17641] Memory cgroup stats for /syz1: cache:0KB rss:223384KB rss_huge:182272KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:223384KB inactive_file:0KB active_file:0KB unevictable:0KB [ 1172.187059][T17641] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=6392,uid=0 [ 1172.203860][T17641] Memory cgroup out of memory: Killed process 6392 (syz-executor.1) total-vm:72708kB, anon-rss:2204kB, file-rss:35788kB, shmem-rss:0kB [ 1172.220130][ T1044] oom_reaper: reaped process 6392 (syz-executor.1), now anon-rss:0kB, file-rss:34828kB, shmem-rss:0kB [ 1172.233825][T17635] syz-executor.1 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=1000 [ 1172.247121][T17635] CPU: 0 PID: 17635 Comm: syz-executor.1 Not tainted 5.2.0-rc6+ #62 [ 1172.255521][T17635] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1172.265841][T17635] Call Trace: [ 1172.269294][T17635] dump_stack+0x172/0x1f0 [ 1172.273625][T17635] dump_header+0x10f/0xb6c [ 1172.278264][T17635] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1172.284078][T17635] ? ___ratelimit+0x60/0x595 [ 1172.289276][T17635] ? do_raw_spin_unlock+0x57/0x270 [ 1172.294381][T17635] oom_kill_process.cold+0x10/0x15 [ 1172.299485][T17635] out_of_memory+0x79a/0x1280 [ 1172.304166][T17635] ? oom_killer_disable+0x280/0x280 [ 1172.309583][T17635] ? find_held_lock+0x35/0x130 [ 1172.314478][T17635] mem_cgroup_out_of_memory+0x1ca/0x230 [ 1172.320627][T17635] ? memcg_event_wake+0x230/0x230 [ 1172.325831][T17635] ? do_raw_spin_unlock+0x57/0x270 [ 1172.331053][T17635] ? _raw_spin_unlock+0x2d/0x50 [ 1172.336373][T17635] try_charge+0xd45/0x1410 [ 1172.340792][T17635] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1172.346333][T17635] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 1172.351877][T17635] ? find_held_lock+0x35/0x130 [ 1172.356709][T17635] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 1172.362732][T17635] __memcg_kmem_charge_memcg+0x7c/0x130 [ 1172.368288][T17635] ? memcg_kmem_put_cache+0xb0/0xb0 [ 1172.373775][T17635] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 1172.379595][T17635] __memcg_kmem_charge+0x136/0x300 [ 1172.384819][T17635] __alloc_pages_nodemask+0x4bd/0x8d0 [ 1172.390548][T17635] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1172.396882][T17635] ? __alloc_pages_slowpath+0x28f0/0x28f0 [ 1172.402649][T17635] ? copy_process.part.0+0x1eea/0x6950 [ 1172.408318][T17635] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1172.413630][T17635] ? trace_hardirqs_on+0x67/0x220 [ 1172.418758][T17635] ? kasan_check_read+0x11/0x20 [ 1172.423794][T17635] copy_process.part.0+0x44e/0x6950 [ 1172.429005][T17635] ? __lock_acquire+0x54f/0x5490 [ 1172.434032][T17635] ? __cleanup_sighand+0x60/0x60 [ 1172.439007][T17635] ? rcu_read_lock_sched_held+0x110/0x130 [ 1172.444932][T17635] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1172.451843][T17635] ? try_to_free_mem_cgroup_pages+0x3b6/0x9f0 [ 1172.457954][T17635] _do_fork+0x25d/0xfe0 [ 1172.462816][T17635] ? copy_init_mm+0x20/0x20 [ 1172.467595][T17635] ? blkcg_maybe_throttle_current+0x5e2/0xfb0 [ 1172.473758][T17635] ? lock_downgrade+0x880/0x880 [ 1172.478619][T17635] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1172.484998][T17635] ? blkcg_exit_queue+0x30/0x30 [ 1172.489975][T17635] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1172.495546][T17635] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1172.501031][T17635] ? do_syscall_64+0x26/0x680 [ 1172.505808][T17635] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1172.512014][T17635] ? do_syscall_64+0x26/0x680 [ 1172.517395][T17635] __x64_sys_clone+0xbf/0x150 [ 1172.522083][T17635] do_syscall_64+0xfd/0x680 [ 1172.526767][T17635] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1172.532789][T17635] RIP: 0033:0x45bee9 [ 1172.536771][T17635] Code: ff 48 85 f6 0f 84 27 8e fb ff 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 0f 8c fe 8d fb ff 74 01 c3 31 ed 48 f7 c7 00 00 01 00 75 [ 1172.558287][T17635] RSP: 002b:0000000000a6fa98 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 [ 1172.567989][T17635] RAX: ffffffffffffffda RBX: 00007f76cf63f700 RCX: 000000000045bee9 [ 1172.576345][T17635] RDX: 00007f76cf63f9d0 RSI: 00007f76cf63edb0 RDI: 00000000003d0f00 [ 1172.584706][T17635] RBP: 0000000000a6fcb0 R08: 00007f76cf63f700 R09: 00007f76cf63f700 [ 1172.593098][T17635] R10: 00007f76cf63f9d0 R11: 0000000000000202 R12: 0000000000000000 [ 1172.601253][T17635] R13: 0000000000a6fb4f R14: 00007f76cf63f9c0 R15: 000000000075bfd4 [ 1172.610842][T17635] memory: usage 304976kB, limit 307200kB, failcnt 2642 [ 1172.617768][T17635] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1172.625308][T17635] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1172.632670][T17635] Memory cgroup stats for /syz1: cache:0KB rss:221224KB rss_huge:180224KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:221224KB inactive_file:0KB active_file:0KB unevictable:0KB [ 1172.656322][T17635] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=6414,uid=0 06:30:09 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x40100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c00000000000000]}) 06:30:09 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06030000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0x0) 06:30:09 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06000000a843089100ff803900080008000c0000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0xf0) 06:30:09 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0xc00000000000000}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 06:30:09 executing program 3: 06:30:09 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06020000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000810000", 0x55}], 0x1}, 0x0) [ 1172.672253][T17635] Memory cgroup out of memory: Killed process 6414 (syz-executor.1) total-vm:72708kB, anon-rss:2204kB, file-rss:35788kB, shmem-rss:0kB 06:30:09 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x40100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7400000000000000]}) 06:30:09 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06000000a843089100ff803900080008000c0000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0x300) 06:30:09 executing program 3: 06:30:09 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06030000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0x0) 06:30:09 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0xe00000000000000}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 06:30:09 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06020000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d4000000fec00000", 0x55}], 0x1}, 0x0) 06:30:09 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x40100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a00000000000000]}) 06:30:09 executing program 3: 06:30:09 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06000000a843089100ff803900080008000c0000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0x600) 06:30:09 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06030000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0x0) [ 1173.133122][T17719] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 06:30:09 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06020000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000014c50000", 0x55}], 0x1}, 0x0) [ 1173.183731][T17719] CPU: 0 PID: 17719 Comm: syz-executor.1 Not tainted 5.2.0-rc6+ #62 [ 1173.191752][T17719] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1173.201901][T17719] Call Trace: [ 1173.205325][T17719] dump_stack+0x172/0x1f0 [ 1173.209787][T17719] dump_header+0x10f/0xb6c [ 1173.214395][T17719] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1173.220387][T17719] ? ___ratelimit+0x60/0x595 [ 1173.224988][T17719] ? do_raw_spin_unlock+0x57/0x270 06:30:09 executing program 3: [ 1173.230207][T17719] oom_kill_process.cold+0x10/0x15 [ 1173.235423][T17719] out_of_memory+0x79a/0x1280 [ 1173.235440][T17719] ? lock_downgrade+0x880/0x880 [ 1173.235453][T17719] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1173.235468][T17719] ? oom_killer_disable+0x280/0x280 [ 1173.235478][T17719] ? find_held_lock+0x35/0x130 [ 1173.235503][T17719] mem_cgroup_out_of_memory+0x1ca/0x230 [ 1173.235516][T17719] ? memcg_event_wake+0x230/0x230 [ 1173.235535][T17719] ? do_raw_spin_unlock+0x57/0x270 [ 1173.235551][T17719] ? _raw_spin_unlock+0x2d/0x50 [ 1173.235569][T17719] try_charge+0x1042/0x1410 [ 1173.235591][T17719] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1173.235607][T17719] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1173.235622][T17719] ? kasan_check_read+0x11/0x20 [ 1173.235647][T17719] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 1173.298388][T17719] mem_cgroup_try_charge+0x24d/0x5e0 [ 1173.314660][T17719] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 1173.320402][T17719] wp_page_copy+0x416/0x1770 [ 1173.325093][T17719] ? do_wp_page+0x486/0x1500 [ 1173.329717][T17719] ? pmd_pfn+0x1d0/0x1d0 [ 1173.329738][T17719] ? lock_downgrade+0x880/0x880 [ 1173.329757][T17719] ? __pte_alloc_kernel+0x220/0x220 [ 1173.344034][T17719] ? kasan_check_read+0x11/0x20 [ 1173.348993][T17719] ? do_raw_spin_unlock+0x57/0x270 [ 1173.354123][T17719] do_wp_page+0x48e/0x1500 [ 1173.358675][T17719] ? do_raw_spin_lock+0x12a/0x2e0 [ 1173.363712][T17719] ? rwlock_bug.part.0+0x90/0x90 [ 1173.368792][T17719] ? finish_mkwrite_fault+0x540/0x540 [ 1173.374176][T17719] ? add_mm_counter_fast.part.0+0x40/0x40 06:30:10 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c4dc00025e0b01047be070") flistxattr(r0, 0x0, 0x2c9) [ 1173.380011][T17719] __handle_mm_fault+0x22e3/0x3eb0 [ 1173.385137][T17719] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 1173.390793][T17719] ? find_held_lock+0x35/0x130 [ 1173.395576][T17719] ? handle_mm_fault+0x292/0xa90 [ 1173.400535][T17719] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1173.407240][T17719] ? kasan_check_read+0x11/0x20 [ 1173.412558][T17719] handle_mm_fault+0x3b7/0xa90 [ 1173.417334][T17719] __do_page_fault+0x5ef/0xda0 [ 1173.422123][T17719] do_page_fault+0x71/0x57d [ 1173.426809][T17719] ? page_fault+0x8/0x30 [ 1173.431075][T17719] page_fault+0x1e/0x30 [ 1173.435325][T17719] RIP: 0033:0x40e6b8 [ 1173.439229][T17719] Code: 8b 34 c6 4a 8d 04 2e 48 3d ff ff ff 7e 0f 86 77 ff ff ff bf d1 ea 4b 00 31 c0 e8 c3 35 ff ff 31 ff e8 0c 32 ff ff 0f 1f 40 00 <89> 3c b5 00 00 73 00 eb b6 31 ed 0f 1f 44 00 00 80 3d ae 1d 66 00 [ 1173.459138][T17719] RSP: 002b:0000000000a6fb00 EFLAGS: 00010246 [ 1173.465324][T17719] RAX: 00000000bf5795d8 RBX: 00000000d3f24cd9 RCX: 0000001b31920000 [ 1173.465332][T17719] RDX: 0000000000000000 RSI: 00000000000015d8 RDI: ffffffffbf5795d8 06:30:10 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06000000a843089100ff803900080008000c0000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0xa00) 06:30:10 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0xf20000000000000}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) [ 1173.465339][T17719] RBP: 0000000000000006 R08: 00000000bf5795d8 R09: 00000000bf5795dc [ 1173.465346][T17719] R10: 0000000000a6fca0 R11: 0000000000000246 R12: 000000000075bfa8 [ 1173.465353][T17719] R13: 0000000080000000 R14: 00007f76d1661008 R15: 0000000000000006 06:30:10 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06030000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0x0) 06:30:10 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06000000a843089100ff803900080008000c0000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0xc00) 06:30:10 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06020000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000f00000", 0x55}], 0x1}, 0x0) [ 1173.593844][T17719] memory: usage 307180kB, limit 307200kB, failcnt 2659 [ 1173.615161][T17719] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1173.656179][T17719] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1173.680786][T17719] Memory cgroup stats for /syz1: cache:0KB rss:223360KB rss_huge:182272KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:223360KB inactive_file:0KB active_file:0KB unevictable:0KB [ 1173.718112][T17719] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=6434,uid=0 [ 1173.759707][T17719] Memory cgroup out of memory: Killed process 6434 (syz-executor.1) total-vm:72708kB, anon-rss:2204kB, file-rss:35788kB, shmem-rss:0kB 06:30:10 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x40100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff00000000000000]}) 06:30:10 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") capget(&(0x7f0000000780), 0x0) 06:30:10 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x1000000000000000}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 06:30:10 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06030000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0x0) 06:30:10 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06000000a843089100ff803900080008000c0000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0xe00) 06:30:10 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06020000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000fc0000", 0x55}], 0x1}, 0x0) 06:30:10 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x40100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000]}) 06:30:10 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06000000a843089100ff803900080008000c0000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0xf00) 06:30:10 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06030000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0x0) 06:30:10 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x40100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}) 06:30:10 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06020000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000080fe0000", 0x55}], 0x1}, 0x0) 06:30:10 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x3f00000000000000}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 06:30:10 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$sock_timeval(r0, 0xffff, 0x1006, &(0x7f0000000000)={0x8}, 0x10) socketpair(0x11, 0x0, 0x6, 0x0) recvfrom$inet(r0, 0x0, 0x100000379, 0x2, 0x0, 0x800e00758) shutdown(r0, 0x0) 06:30:10 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06000000a843089100ff803900080008000c0000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0x132d) 06:30:10 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x40100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}) 06:30:10 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06030000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0x0) 06:30:11 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06000000a843089100ff803900080008000c0000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0x2d13) 06:30:11 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @broadcast=0xe0000001}, @icmp}}}}, 0x0) getitimer(0x1, &(0x7f0000000080)) recvfrom$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x800e00a3e) 06:30:11 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x4000000000000000}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 06:30:11 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06020000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d4000000c0fe0000", 0x55}], 0x1}, 0x0) 06:30:11 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06030000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0x0) 06:30:11 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x40100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}) 06:30:11 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06000000a843089100ff803900080008000c0000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0x4000) 06:30:11 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x6000000000000000}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 06:30:11 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06020000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000ff0000", 0x55}], 0x1}, 0x0) 06:30:11 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06030000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0x0) 06:30:11 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x40100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}) 06:30:11 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06030000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0x0) 06:30:11 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06000000a843089100ff803900080008000c0000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0x5865) 06:30:11 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @broadcast=0xe0000001}, @icmp}}}}, 0x0) accept$inet6(0xffffffffffffff9c, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x800e00a3e) 06:30:11 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x6558000000000000}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 06:30:11 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06020000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000400300", 0x55}], 0x1}, 0x0) 06:30:11 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x40100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) 06:30:11 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06000000a843089100ff803900080008000c0000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0x6000) 06:30:11 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06030000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0x0) 06:30:12 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06000000a843089100ff803900080008000c0000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0x6558) 06:30:12 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x40100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}) 06:30:12 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06030000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d4000000000000ff", 0x55}], 0x1}, 0x0) 06:30:12 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06020000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000034000", 0x55}], 0x1}, 0x0) 06:30:12 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x8100000000000000}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 06:30:12 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06000000a843089100ff803900080008000c0000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0x8100) 06:30:12 executing program 3: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) sendmsg(r0, &(0x7f0000000380)={&(0x7f0000000080)=@in6={0x1c, 0x1c, 0xffffffffffffffff}, 0x1c, 0x0, 0x0, &(0x7f00000029c0)=ANY=[@ANYBLOB="480000000000000000000000020000f8"], 0x10}, 0x0) 06:30:12 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06030000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d4000000000000ff", 0x55}], 0x1}, 0x0) 06:30:12 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x40100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}) 06:30:12 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06020000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d4000000fffff000", 0x55}], 0x1}, 0x0) 06:30:12 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x88a8ffff00000000}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 06:30:12 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06000000a843089100ff803900080008000c0000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0xf000) [ 1176.239782][T31310] syz-executor.1 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=0 [ 1176.267835][T31310] CPU: 1 PID: 31310 Comm: syz-executor.1 Not tainted 5.2.0-rc6+ #62 [ 1176.275882][T31310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1176.286215][T31310] Call Trace: [ 1176.289711][T31310] dump_stack+0x172/0x1f0 [ 1176.294093][T31310] dump_header+0x10f/0xb6c [ 1176.298536][T31310] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1176.304435][T31310] ? ___ratelimit+0x60/0x595 [ 1176.309159][T31310] ? do_raw_spin_unlock+0x57/0x270 [ 1176.314579][T31310] oom_kill_process.cold+0x10/0x15 [ 1176.319870][T31310] out_of_memory+0x79a/0x1280 [ 1176.325553][T31310] ? lock_downgrade+0x880/0x880 [ 1176.330556][T31310] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1176.337361][T31310] ? oom_killer_disable+0x280/0x280 [ 1176.342663][T31310] ? find_held_lock+0x35/0x130 [ 1176.347629][T31310] mem_cgroup_out_of_memory+0x1ca/0x230 [ 1176.353195][T31310] ? memcg_event_wake+0x230/0x230 [ 1176.358904][T31310] ? do_raw_spin_unlock+0x57/0x270 [ 1176.364252][T31310] ? _raw_spin_unlock+0x2d/0x50 [ 1176.369208][T31310] try_charge+0x1042/0x1410 [ 1176.374537][T31310] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1176.380133][T31310] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 1176.385816][T31310] ? find_held_lock+0x35/0x130 [ 1176.390620][T31310] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 1176.396190][T31310] __memcg_kmem_charge_memcg+0x7c/0x130 [ 1176.401752][T31310] ? memcg_kmem_put_cache+0xb0/0xb0 [ 1176.401770][T31310] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 1176.401787][T31310] __memcg_kmem_charge+0x136/0x300 [ 1176.401805][T31310] __alloc_pages_nodemask+0x4bd/0x8d0 [ 1176.401819][T31310] ? mark_held_locks+0xf0/0xf0 [ 1176.401836][T31310] ? __alloc_pages_slowpath+0x28f0/0x28f0 [ 1176.401857][T31310] ? copy_page_range+0x128a/0x1fc0 [ 1176.439955][T31310] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1176.446603][T31310] alloc_pages_current+0x107/0x210 [ 1176.452203][T31310] pte_alloc_one+0x1b/0x1a0 [ 1176.456728][T31310] __pte_alloc+0x20/0x310 [ 1176.461077][T31310] copy_page_range+0x1561/0x1fc0 [ 1176.466149][T31310] ? pmd_alloc+0x180/0x180 [ 1176.470590][T31310] ? vma_gap_callbacks_rotate+0x62/0x80 [ 1176.476163][T31310] ? __rb_insert_augmented+0x22f/0xdf0 [ 1176.481892][T31310] ? validate_mm_rb+0xa3/0xc0 [ 1176.486760][T31310] ? __vma_link_rb+0x279/0x370 [ 1176.491628][T31310] ? kasan_check_write+0x14/0x20 [ 1176.496674][T31310] dup_mm+0x9c4/0x13b0 [ 1176.500785][T31310] ? vm_area_dup+0x170/0x170 [ 1176.505837][T31310] ? debug_mutex_init+0x2d/0x60 [ 1176.510800][T31310] copy_process.part.0+0x2d02/0x6950 [ 1176.516122][T31310] ? __cleanup_sighand+0x60/0x60 [ 1176.521093][T31310] _do_fork+0x25d/0xfe0 [ 1176.525460][T31310] ? copy_init_mm+0x20/0x20 [ 1176.530071][T31310] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1176.535899][T31310] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1176.541650][T31310] ? do_syscall_64+0x26/0x680 [ 1176.541666][T31310] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1176.541678][T31310] ? do_syscall_64+0x26/0x680 [ 1176.541712][T31310] __x64_sys_clone+0xbf/0x150 [ 1176.564018][T31310] do_syscall_64+0xfd/0x680 [ 1176.568631][T31310] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1176.574742][T31310] RIP: 0033:0x457aea [ 1176.578704][T31310] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 1176.599466][T31310] RSP: 002b:0000000000a6fd30 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1176.608415][T31310] RAX: ffffffffffffffda RBX: 0000000000a6fd30 RCX: 0000000000457aea [ 1176.616491][T31310] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 1176.625088][T31310] RBP: 0000000000a6fd70 R08: 0000000000000001 R09: 0000555555747940 [ 1176.633079][T31310] R10: 0000555555747c10 R11: 0000000000000246 R12: 0000000000000001 06:30:13 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x9effffff00000000}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 06:30:13 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06000000a843089100ff803900080008000c0000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0x34000) 06:30:13 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06000000a843089100ff803900080008000c0000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0x400300) 06:30:13 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0xc3ffffff00000000}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 06:30:13 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06000000a843089100ff803900080008000c0000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0xf0ffff) [ 1176.641062][T31310] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000a6fdc0 [ 1176.668673][T31310] memory: usage 307200kB, limit 307200kB, failcnt 2701 06:30:13 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r0, &(0x7f00000009c0)=[{&(0x7f0000000080)=""/226, 0xe2}, {0x0}], 0x2) r1 = dup(r0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r2, 0x0, 0x73a0b1b, 0x0, 0x0, 0x800e00549) shutdown(r1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000500)=""/210, 0xd2}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x8}, 0x0) r4 = dup(r3) r5 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r5, 0x0, 0xccf3, 0x0, 0x0, 0x800e0053d) shutdown(r4, 0x0) recvmsg(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000200)=""/143, 0x8f}, {0x0}, {0x0}, {0x0}], 0x4}, 0x0) shutdown(r5, 0x0) shutdown(r2, 0x0) [ 1176.702372][T31310] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1176.716456][T31310] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1176.723901][T31310] Memory cgroup stats for /syz1: cache:0KB rss:222040KB rss_huge:180224KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:222040KB inactive_file:0KB active_file:0KB unevictable:0KB 06:30:13 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06020000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000001", 0x55}], 0x1}, 0x0) 06:30:13 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06030000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0x0) [ 1176.798883][T31310] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=6452,uid=0 [ 1176.824215][T31310] Memory cgroup out of memory: Killed process 6452 (syz-executor.1) total-vm:72708kB, anon-rss:2204kB, file-rss:35788kB, shmem-rss:0kB 06:30:13 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x40100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa]}) 06:30:13 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0xf0ffffff00000000}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 06:30:13 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06000000a843089100ff803900080008000c0000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0x1000000) [ 1176.971665][T17959] syz-executor.1 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=1000 [ 1177.011301][T17959] CPU: 1 PID: 17959 Comm: syz-executor.1 Not tainted 5.2.0-rc6+ #62 06:30:13 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06000000a843089100ff803900080008000c0000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0x2000000) [ 1177.019512][T17959] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1177.029703][T17959] Call Trace: [ 1177.033068][T17959] dump_stack+0x172/0x1f0 [ 1177.037909][T17959] dump_header+0x10f/0xb6c [ 1177.042338][T17959] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1177.048164][T17959] ? ___ratelimit+0x60/0x595 [ 1177.052765][T17959] ? do_raw_spin_unlock+0x57/0x270 [ 1177.058332][T17959] oom_kill_process.cold+0x10/0x15 [ 1177.063491][T17959] out_of_memory+0x79a/0x1280 [ 1177.068186][T17959] ? lock_downgrade+0x880/0x880 [ 1177.073048][T17959] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1177.079705][T17959] ? oom_killer_disable+0x280/0x280 [ 1177.085195][T17959] ? find_held_lock+0x35/0x130 [ 1177.085221][T17959] mem_cgroup_out_of_memory+0x1ca/0x230 [ 1177.085235][T17959] ? memcg_event_wake+0x230/0x230 [ 1177.085253][T17959] ? do_raw_spin_unlock+0x57/0x270 [ 1177.085269][T17959] ? _raw_spin_unlock+0x2d/0x50 [ 1177.085295][T17959] try_charge+0x1042/0x1410 [ 1177.115183][T17959] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 06:30:13 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06000000a843089100ff803900080008000c0000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0x3000000) 06:30:13 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0xfeffffff00000000}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) [ 1177.121107][T17959] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 1177.126757][T17959] ? find_held_lock+0x35/0x130 [ 1177.131625][T17959] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 1177.137294][T17959] __memcg_kmem_charge_memcg+0x7c/0x130 [ 1177.142850][T17959] ? memcg_kmem_put_cache+0xb0/0xb0 [ 1177.148066][T17959] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 1177.153927][T17959] __memcg_kmem_charge+0x136/0x300 [ 1177.159054][T17959] __alloc_pages_nodemask+0x4bd/0x8d0 [ 1177.164633][T17959] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 06:30:13 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06000000a843089100ff803900080008000c0000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0x4000000) [ 1177.170983][T17959] ? __alloc_pages_slowpath+0x28f0/0x28f0 [ 1177.177045][T17959] ? copy_process.part.0+0x1eea/0x6950 [ 1177.182618][T17959] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1177.187917][T17959] ? trace_hardirqs_on+0x67/0x220 [ 1177.193041][T17959] ? kasan_check_read+0x11/0x20 [ 1177.197919][T17959] copy_process.part.0+0x44e/0x6950 [ 1177.203135][T17959] ? __might_fault+0x12b/0x1e0 [ 1177.207941][T17959] ? __cleanup_sighand+0x60/0x60 [ 1177.213737][T17959] ? lock_downgrade+0x880/0x880 [ 1177.218615][T17959] _do_fork+0x25d/0xfe0 06:30:13 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0xffffff7f00000000}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) [ 1177.222965][T17959] ? copy_init_mm+0x20/0x20 [ 1177.227589][T17959] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1177.233061][T17959] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1177.238620][T17959] ? do_syscall_64+0x26/0x680 [ 1177.243310][T17959] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1177.249394][T17959] ? do_syscall_64+0x26/0x680 [ 1177.254091][T17959] __x64_sys_clone+0xbf/0x150 [ 1177.258779][T17959] do_syscall_64+0xfd/0x680 [ 1177.263292][T17959] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1177.269325][T17959] RIP: 0033:0x459519 06:30:13 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06000000a843089100ff803900080008000c0000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0x6000000) [ 1177.273228][T17959] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1177.295968][T17959] RSP: 002b:00007f76cf65fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1177.304713][T17959] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000459519 [ 1177.312867][T17959] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000000040100 [ 1177.321149][T17959] RBP: 000000000075bf20 R08: ffffffffffffffff R09: 0000000000000000 [ 1177.329313][T17959] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f76cf6606d4 [ 1177.337425][T17959] R13: 00000000004bf97d R14: 00000000004d1358 R15: 00000000ffffffff [ 1177.410834][T17959] memory: usage 307200kB, limit 307200kB, failcnt 2742 [ 1177.419582][T17959] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1177.427717][T17959] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1177.435445][T17959] Memory cgroup stats for /syz1: cache:0KB rss:222040KB rss_huge:180224KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:222040KB inactive_file:0KB active_file:0KB unevictable:0KB [ 1177.460801][T17959] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=6472,uid=0 [ 1177.477064][T17959] Memory cgroup out of memory: Killed process 6472 (syz-executor.1) total-vm:72708kB, anon-rss:2204kB, file-rss:35788kB, shmem-rss:0kB [ 1177.510124][T31310] syz-executor.1 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=0 [ 1177.522091][T31310] CPU: 1 PID: 31310 Comm: syz-executor.1 Not tainted 5.2.0-rc6+ #62 [ 1177.530841][T31310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1177.542134][T31310] Call Trace: [ 1177.545468][T31310] dump_stack+0x172/0x1f0 [ 1177.549804][T31310] dump_header+0x10f/0xb6c [ 1177.554476][T31310] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1177.560472][T31310] ? ___ratelimit+0x60/0x595 [ 1177.565076][T31310] ? do_raw_spin_unlock+0x57/0x270 [ 1177.570304][T31310] oom_kill_process.cold+0x10/0x15 [ 1177.575441][T31310] out_of_memory+0x79a/0x1280 [ 1177.580129][T31310] ? oom_killer_disable+0x280/0x280 [ 1177.585333][T31310] ? find_held_lock+0x35/0x130 [ 1177.590199][T31310] mem_cgroup_out_of_memory+0x1ca/0x230 [ 1177.595768][T31310] ? memcg_event_wake+0x230/0x230 [ 1177.600914][T31310] ? do_raw_spin_unlock+0x57/0x270 [ 1177.606196][T31310] ? _raw_spin_unlock+0x2d/0x50 [ 1177.611066][T31310] try_charge+0xd45/0x1410 [ 1177.615827][T31310] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1177.621452][T31310] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 1177.626991][T31310] ? find_held_lock+0x35/0x130 [ 1177.631763][T31310] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 1177.637313][T31310] __memcg_kmem_charge_memcg+0x7c/0x130 [ 1177.644244][T31310] ? memcg_kmem_put_cache+0xb0/0xb0 [ 1177.649469][T31310] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 1177.655162][T31310] __memcg_kmem_charge+0x136/0x300 [ 1177.660278][T31310] __alloc_pages_nodemask+0x4bd/0x8d0 [ 1177.665654][T31310] ? mark_held_locks+0xf0/0xf0 [ 1177.670451][T31310] ? __alloc_pages_slowpath+0x28f0/0x28f0 [ 1177.676192][T31310] ? copy_page_range+0x128a/0x1fc0 [ 1177.681299][T31310] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1177.688116][T31310] alloc_pages_current+0x107/0x210 [ 1177.693236][T31310] pte_alloc_one+0x1b/0x1a0 [ 1177.697951][T31310] __pte_alloc+0x20/0x310 [ 1177.702410][T31310] copy_page_range+0x1561/0x1fc0 [ 1177.707492][T31310] ? pmd_alloc+0x180/0x180 [ 1177.711921][T31310] ? vma_gap_callbacks_rotate+0x62/0x80 [ 1177.717467][T31310] ? __rb_insert_augmented+0x22f/0xdf0 [ 1177.723017][T31310] ? validate_mm_rb+0xa3/0xc0 [ 1177.727745][T31310] ? __vma_link_rb+0x279/0x370 [ 1177.732493][T31310] ? kasan_check_write+0x14/0x20 [ 1177.737416][T31310] dup_mm+0x9c4/0x13b0 [ 1177.741577][T31310] ? vm_area_dup+0x170/0x170 [ 1177.746150][T31310] ? debug_mutex_init+0x2d/0x60 [ 1177.751000][T31310] copy_process.part.0+0x2d02/0x6950 [ 1177.756291][T31310] ? __cleanup_sighand+0x60/0x60 [ 1177.761507][T31310] _do_fork+0x25d/0xfe0 [ 1177.765677][T31310] ? copy_init_mm+0x20/0x20 [ 1177.770223][T31310] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1177.775738][T31310] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1177.781360][T31310] ? do_syscall_64+0x26/0x680 [ 1177.786057][T31310] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1177.792143][T31310] ? do_syscall_64+0x26/0x680 [ 1177.797999][T31310] __x64_sys_clone+0xbf/0x150 [ 1177.802668][T31310] do_syscall_64+0xfd/0x680 [ 1177.807174][T31310] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1177.813406][T31310] RIP: 0033:0x457aea [ 1177.817286][T31310] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 1177.837137][T31310] RSP: 002b:0000000000a6fd30 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1177.845652][T31310] RAX: ffffffffffffffda RBX: 0000000000a6fd30 RCX: 0000000000457aea [ 1177.853673][T31310] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 1177.861919][T31310] RBP: 0000000000a6fd70 R08: 0000000000000001 R09: 0000555555747940 [ 1177.869885][T31310] R10: 0000555555747c10 R11: 0000000000000246 R12: 0000000000000001 [ 1177.877875][T31310] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000a6fdc0 [ 1177.887488][T31310] memory: usage 304864kB, limit 307200kB, failcnt 2742 [ 1177.895409][T31310] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1177.903103][T31310] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 06:30:14 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendto(r0, &(0x7f0000000000), 0x0, 0x20100, 0x0, 0x0) 06:30:14 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06020000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000002", 0x55}], 0x1}, 0x0) 06:30:14 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06030000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d4000000000000ff", 0x55}], 0x1}, 0x0) [ 1177.910068][T31310] Memory cgroup stats for /syz1: cache:0KB rss:219880KB rss_huge:178176KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:219880KB inactive_file:0KB active_file:0KB unevictable:0KB [ 1177.931931][T31310] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=6519,uid=0 [ 1177.947582][T31310] Memory cgroup out of memory: Killed process 6519 (syz-executor.1) total-vm:72708kB, anon-rss:2204kB, file-rss:35788kB, shmem-rss:0kB 06:30:14 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x40100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48]}) 06:30:14 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06000000a843089100ff803900080008000c0000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0xa000000) 06:30:14 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0xffffffff00000000}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 06:30:14 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06030000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0x0) 06:30:14 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06020000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000003", 0x55}], 0x1}, 0x0) 06:30:14 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r0, &(0x7f0000000740)=[{&(0x7f0000000140)=""/95, 0x5f}], 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0x8164, 0x0, 0x0, 0x800e00547) shutdown(r0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r2, &(0x7f0000000000)=[{&(0x7f0000000780)=""/4096, 0x1000}, {0x0}, {0x0}], 0x3) shutdown(r1, 0x0) 06:30:14 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x40100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c]}) 06:30:14 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0xfffffffffffff000}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 06:30:14 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06030000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d4000000000000ff", 0x55}], 0x1}, 0x0) 06:30:14 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06020000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000004", 0x55}], 0x1}, 0x0) 06:30:15 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06000000a843089100ff803900080008000c0000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0xc000000) 06:30:15 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x40100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68]}) 06:30:15 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06020000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000006", 0x55}], 0x1}, 0x0) 06:30:15 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06000000a843089100ff803900080008000c0000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0xe000000) 06:30:15 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x2}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 06:30:15 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06030000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0x0) 06:30:15 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06020000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d40000000000000a", 0x55}], 0x1}, 0x0) [ 1178.535873][T31310] syz-executor.1 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=0 [ 1178.578335][T31310] CPU: 0 PID: 31310 Comm: syz-executor.1 Not tainted 5.2.0-rc6+ #62 [ 1178.586354][T31310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1178.596422][T31310] Call Trace: [ 1178.599829][T31310] dump_stack+0x172/0x1f0 [ 1178.604173][T31310] dump_header+0x10f/0xb6c [ 1178.608615][T31310] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1178.614434][T31310] ? ___ratelimit+0x60/0x595 [ 1178.619041][T31310] ? do_raw_spin_unlock+0x57/0x270 [ 1178.624344][T31310] oom_kill_process.cold+0x10/0x15 [ 1178.629466][T31310] out_of_memory+0x79a/0x1280 [ 1178.634237][T31310] ? lock_downgrade+0x880/0x880 [ 1178.639088][T31310] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1178.645344][T31310] ? oom_killer_disable+0x280/0x280 [ 1178.650815][T31310] ? find_held_lock+0x35/0x130 [ 1178.655618][T31310] mem_cgroup_out_of_memory+0x1ca/0x230 [ 1178.661264][T31310] ? memcg_event_wake+0x230/0x230 [ 1178.666304][T31310] ? do_raw_spin_unlock+0x57/0x270 [ 1178.671419][T31310] ? _raw_spin_unlock+0x2d/0x50 [ 1178.676279][T31310] try_charge+0x1042/0x1410 [ 1178.680896][T31310] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1178.686444][T31310] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 1178.692014][T31310] ? find_held_lock+0x35/0x130 [ 1178.692030][T31310] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 1178.692056][T31310] __memcg_kmem_charge_memcg+0x7c/0x130 [ 1178.692071][T31310] ? memcg_kmem_put_cache+0xb0/0xb0 [ 1178.692089][T31310] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 1178.692108][T31310] __memcg_kmem_charge+0x136/0x300 [ 1178.692134][T31310] __alloc_pages_nodemask+0x4bd/0x8d0 [ 1178.713238][T31310] ? mark_held_locks+0xf0/0xf0 [ 1178.713256][T31310] ? __alloc_pages_slowpath+0x28f0/0x28f0 [ 1178.713278][T31310] ? copy_page_range+0x128a/0x1fc0 [ 1178.713297][T31310] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1178.713317][T31310] alloc_pages_current+0x107/0x210 [ 1178.713335][T31310] pte_alloc_one+0x1b/0x1a0 [ 1178.713351][T31310] __pte_alloc+0x20/0x310 [ 1178.713371][T31310] copy_page_range+0x1561/0x1fc0 [ 1178.761674][T31310] ? pmd_alloc+0x180/0x180 [ 1178.761686][T31310] ? vma_gap_callbacks_rotate+0x62/0x80 [ 1178.761706][T31310] ? __rb_insert_augmented+0x22f/0xdf0 [ 1178.761720][T31310] ? validate_mm_rb+0xa3/0xc0 [ 1178.761734][T31310] ? __vma_link_rb+0x279/0x370 [ 1178.761746][T31310] ? kasan_check_write+0x14/0x20 [ 1178.761770][T31310] dup_mm+0x9c4/0x13b0 [ 1178.775455][T31310] ? vm_area_dup+0x170/0x170 [ 1178.775473][T31310] ? debug_mutex_init+0x2d/0x60 [ 1178.775493][T31310] copy_process.part.0+0x2d02/0x6950 [ 1178.819941][T31310] ? __cleanup_sighand+0x60/0x60 [ 1178.824910][T31310] _do_fork+0x25d/0xfe0 [ 1178.829169][T31310] ? copy_init_mm+0x20/0x20 [ 1178.833798][T31310] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1178.839264][T31310] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1178.844730][T31310] ? do_syscall_64+0x26/0x680 [ 1178.849468][T31310] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1178.855715][T31310] ? do_syscall_64+0x26/0x680 [ 1178.872000][T31310] __x64_sys_clone+0xbf/0x150 [ 1178.876693][T31310] do_syscall_64+0xfd/0x680 [ 1178.881386][T31310] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1178.887285][T31310] RIP: 0033:0x457aea [ 1178.891196][T31310] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 1178.916326][T31310] RSP: 002b:0000000000a6fd30 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1178.924812][T31310] RAX: ffffffffffffffda RBX: 0000000000a6fd30 RCX: 0000000000457aea [ 1178.932778][T31310] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 1178.940836][T31310] RBP: 0000000000a6fd70 R08: 0000000000000001 R09: 0000555555747940 [ 1178.948805][T31310] R10: 0000555555747c10 R11: 0000000000000246 R12: 0000000000000001 [ 1178.957019][T31310] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000a6fdc0 [ 1178.966327][T31310] memory: usage 307200kB, limit 307200kB, failcnt 2781 [ 1178.973399][T31310] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1178.980880][T31310] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1178.987918][T31310] Memory cgroup stats for /syz1: cache:0KB rss:222028KB rss_huge:180224KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:222028KB inactive_file:0KB active_file:0KB unevictable:0KB [ 1179.009606][T31310] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=6533,uid=0 06:30:15 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_int(r0, 0xffff, 0x1011, 0x0, &(0x7f00000000c0)) recvfrom$inet(r0, 0x0, 0xe4447d4e1166dbd, 0x800000000002, 0x0, 0x800e008b6) shutdown(r0, 0x0) 06:30:15 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06020000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d40000000000000c", 0x55}], 0x1}, 0x0) 06:30:15 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06030000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0x0) 06:30:15 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06000000a843089100ff803900080008000c0000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0xf000000) 06:30:15 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) [ 1179.025854][T31310] Memory cgroup out of memory: Killed process 6533 (syz-executor.1) total-vm:72708kB, anon-rss:2204kB, file-rss:35788kB, shmem-rss:0kB [ 1179.040724][ T1044] oom_reaper: reaped process 6533 (syz-executor.1), now anon-rss:0kB, file-rss:34828kB, shmem-rss:0kB 06:30:15 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06030000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0x0) 06:30:15 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x40100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c]}) 06:30:15 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06000000a843089100ff803900080008000c0000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0x10000000) 06:30:15 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06020000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d40000000000000e", 0x55}], 0x1}, 0x0) 06:30:15 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x4}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 06:30:16 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r0, 0x0, 0xc, &(0x7f0000000040)={@remote}, 0x8) recvfrom$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x800e003b6) 06:30:16 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06030000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d40000000000007f", 0x55}], 0x1}, 0x0) 06:30:16 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06000000a843089100ff803900080008000c0000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0x2d130000) 06:30:16 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x40100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x74]}) 06:30:16 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06030000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d4000000f0ffffff", 0x55}], 0x1}, 0x0) 06:30:16 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06000000a843089100ff803900080008000c0000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0x40000000) 06:30:16 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06020000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d40000000000000f", 0x55}], 0x1}, 0x0) 06:30:16 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x5}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 06:30:16 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x40100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a]}) 06:30:16 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x40100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300]}) 06:30:16 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06000000a843089100ff803900080008000c0000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0x60000000) 06:30:16 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06030000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000002000000", 0x55}], 0x1}, 0x0) 06:30:17 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) fstat(r0, &(0x7f0000000080)) recvfrom$inet(r1, 0x0, 0xfffffd26, 0x0, 0x0, 0x800e00707) shutdown(r1, 0x0) 06:30:17 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06020000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000010", 0x55}], 0x1}, 0x0) 06:30:17 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x6}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 06:30:17 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06000000a843089100ff803900080008000c0000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0x65580000) 06:30:17 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x40100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500]}) 06:30:17 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06030000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000003000000", 0x55}], 0x1}, 0x0) 06:30:17 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x40100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600]}) 06:30:17 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06000000a843089100ff803900080008000c0000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0x81000000) 06:30:17 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x7}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 06:30:17 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06030000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000004000000", 0x55}], 0x1}, 0x0) 06:30:17 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x40100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700]}) 06:30:17 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06020000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d40000000000003f", 0x55}], 0x1}, 0x0) 06:30:17 executing program 3: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) sendmsg(r0, &(0x7f0000000380)={&(0x7f0000000080)=@in6={0x1c, 0x1c, 0xffffffffffffffff}, 0x1c, 0x0, 0x0, &(0x7f00000029c0)=ANY=[@ANYBLOB="480000000000000000000000020000f8a2ef3ad42041a5ba6f8764c63df6ac5f5b26a2174c6d6957dd9b94c2197dc127828bd60975ddf6bea12a7133c61915ae3d04401822fc59500000000000000000000000ff0c0000ff"], 0x58}, 0x0) 06:30:17 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06030000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000006000000", 0x55}], 0x1}, 0x0) 06:30:17 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x40100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00]}) 06:30:17 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06000000a843089100ff803900080008000c0000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0x88a8ffff) 06:30:17 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0xa}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 06:30:17 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06020000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000040", 0x55}], 0x1}, 0x0) 06:30:17 executing program 3: poll(0x0, 0x0, 0x4e) socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, &(0x7f0000000080)) recvfrom$inet(r0, 0x0, 0xfd1d, 0x0, 0x0, 0x800e00505) shutdown(r0, 0x0) 06:30:17 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x40100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00]}) 06:30:17 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06000000a843089100ff803900080008000c0000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0x9effffff) 06:30:17 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06030000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d40000000a000000", 0x55}], 0x1}, 0x0) 06:30:17 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0xc}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 06:30:17 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06020000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d40000000000025a", 0x55}], 0x1}, 0x0) 06:30:17 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06000000a843089100ff803900080008000c0000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0xf0ffffff) 06:30:17 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x40100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000]}) 06:30:17 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='io\x00') write$P9_RMKDIR(0xffffffffffffffff, 0x0, 0x8d5c2dcfa00aeb9) r1 = gettid() pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) ioctl$VT_SETMODE(0xffffffffffffffff, 0x5602, 0x0) setsockopt$inet_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0) ioctl$TIOCGWINSZ(r0, 0x5413, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0) ioctl$KDGETLED(0xffffffffffffffff, 0x4b31, 0x0) tkill(r1, 0x1000000000015) 06:30:17 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06030000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d40000000c000000", 0x55}], 0x1}, 0x0) [ 1181.188939][T31310] syz-executor.1 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=0 [ 1181.233864][T31310] CPU: 0 PID: 31310 Comm: syz-executor.1 Not tainted 5.2.0-rc6+ #62 [ 1181.241875][T31310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1181.251945][T31310] Call Trace: [ 1181.255245][T31310] dump_stack+0x172/0x1f0 [ 1181.259675][T31310] dump_header+0x10f/0xb6c [ 1181.264107][T31310] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1181.269924][T31310] ? ___ratelimit+0x60/0x595 [ 1181.274532][T31310] ? do_raw_spin_unlock+0x57/0x270 [ 1181.279651][T31310] oom_kill_process.cold+0x10/0x15 [ 1181.284865][T31310] out_of_memory+0x79a/0x1280 [ 1181.289651][T31310] ? lock_downgrade+0x880/0x880 [ 1181.294508][T31310] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1181.300774][T31310] ? oom_killer_disable+0x280/0x280 [ 1181.305976][T31310] ? find_held_lock+0x35/0x130 [ 1181.310936][T31310] mem_cgroup_out_of_memory+0x1ca/0x230 [ 1181.316489][T31310] ? memcg_event_wake+0x230/0x230 [ 1181.321619][T31310] ? do_raw_spin_unlock+0x57/0x270 [ 1181.326841][T31310] ? _raw_spin_unlock+0x2d/0x50 [ 1181.331705][T31310] try_charge+0x1042/0x1410 [ 1181.336225][T31310] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1181.341787][T31310] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 1181.347374][T31310] ? find_held_lock+0x35/0x130 [ 1181.352148][T31310] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 1181.357922][T31310] __memcg_kmem_charge_memcg+0x7c/0x130 [ 1181.363509][T31310] ? memcg_kmem_put_cache+0xb0/0xb0 [ 1181.368732][T31310] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 1181.374307][T31310] __memcg_kmem_charge+0x136/0x300 [ 1181.379524][T31310] __alloc_pages_nodemask+0x4bd/0x8d0 [ 1181.384915][T31310] ? __pud_alloc+0x1d3/0x250 [ 1181.389589][T31310] ? __alloc_pages_slowpath+0x28f0/0x28f0 [ 1181.395409][T31310] ? __pud_alloc+0x1d3/0x250 [ 1181.400028][T31310] ? lock_downgrade+0x880/0x880 [ 1181.404894][T31310] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1181.411499][T31310] alloc_pages_current+0x107/0x210 [ 1181.416703][T31310] ? do_raw_spin_unlock+0x57/0x270 [ 1181.421869][T31310] __pmd_alloc+0x41/0x460 [ 1181.426229][T31310] ? pmd_val+0x100/0x100 [ 1181.430610][T31310] pmd_alloc+0x10c/0x180 [ 1181.434876][T31310] copy_page_range+0x63c/0x1fc0 [ 1181.439824][T31310] ? mark_held_locks+0xf0/0xf0 [ 1181.444680][T31310] ? percpu_ref_put_many+0x94/0x190 [ 1181.449893][T31310] ? anon_vma_fork+0x371/0x4a0 [ 1181.454685][T31310] ? pmd_alloc+0x180/0x180 [ 1181.459128][T31310] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 1181.464865][T31310] ? validate_mm_rb+0xa3/0xc0 [ 1181.469554][T31310] ? __vma_link_rb+0x279/0x370 [ 1181.474363][T31310] dup_mm+0x9c4/0x13b0 [ 1181.478515][T31310] ? vm_area_dup+0x170/0x170 [ 1181.483434][T31310] ? debug_mutex_init+0x2d/0x60 [ 1181.488400][T31310] copy_process.part.0+0x2d02/0x6950 [ 1181.493721][T31310] ? __cleanup_sighand+0x60/0x60 [ 1181.498701][T31310] _do_fork+0x25d/0xfe0 [ 1181.502904][T31310] ? copy_init_mm+0x20/0x20 [ 1181.507728][T31310] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1181.513306][T31310] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1181.518860][T31310] ? do_syscall_64+0x26/0x680 [ 1181.523543][T31310] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1181.529714][T31310] ? do_syscall_64+0x26/0x680 [ 1181.534411][T31310] __x64_sys_clone+0xbf/0x150 [ 1181.539113][T31310] do_syscall_64+0xfd/0x680 [ 1181.543651][T31310] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1181.549736][T31310] RIP: 0033:0x457aea [ 1181.553648][T31310] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 1181.573270][T31310] RSP: 002b:0000000000a6fd30 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 06:30:18 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0xe}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 06:30:18 executing program 3: ioctl$DRM_IOCTL_INFO_BUFS(0xffffffffffffffff, 0xc0106418, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x40, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0xd) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x10000261, 0x0) r0 = fcntl$getown(0xffffffffffffffff, 0x9) dup2(0xffffffffffffffff, 0xffffffffffffffff) r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') rt_sigtimedwait(0x0, 0x0, &(0x7f0000000100), 0x0) preadv(r1, &(0x7f0000000480), 0x100000000000022c, 0x6c00000000000000) 06:30:18 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x10}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 06:30:18 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x60}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 06:30:18 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0xf0}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) [ 1181.581811][T31310] RAX: ffffffffffffffda RBX: 0000000000a6fd30 RCX: 0000000000457aea [ 1181.589796][T31310] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 1181.597783][T31310] RBP: 0000000000a6fd70 R08: 0000000000000001 R09: 0000555555747940 [ 1181.605853][T31310] R10: 0000555555747c10 R11: 0000000000000246 R12: 0000000000000001 [ 1181.613840][T31310] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000a6fdc0 06:30:18 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06000000a843089100ff803900080008000c0000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0xffffa888) [ 1181.637323][T31310] memory: usage 307200kB, limit 307200kB, failcnt 2830 [ 1181.661429][T31310] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1181.669116][T31310] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1181.686879][T31310] Memory cgroup stats for /syz1: cache:0KB rss:220680KB rss_huge:178176KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:220680KB inactive_file:0KB active_file:0KB unevictable:0KB 06:30:18 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06020000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000060", 0x55}], 0x1}, 0x0) 06:30:18 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x300}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 06:30:18 executing program 3: r0 = syz_open_dev$sndtimer(&(0x7f0000002900)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x41000008912, &(0x7f00000000c0)="11dca5055e0bcfec7be070") ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000180)={0x0, 0x3, 0x81}) [ 1181.809812][T31310] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=6558,uid=0 [ 1181.876987][T31310] Memory cgroup out of memory: Killed process 6558 (syz-executor.1) total-vm:72708kB, anon-rss:2204kB, file-rss:35788kB, shmem-rss:0kB 06:30:18 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x40100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800]}) 06:30:18 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06030000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d40000000e000000", 0x55}], 0x1}, 0x0) 06:30:18 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06000000a843089100ff803900080008000c0000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0xfffff000) 06:30:18 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06020000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000005865", 0x55}], 0x1}, 0x0) 06:30:18 executing program 3: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x100000000000021) dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0xfffffffd, @tick, {}, {}, @connect}], 0xffffff76) 06:30:18 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x500}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 06:30:18 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06020000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000081", 0x55}], 0x1}, 0x0) 06:30:18 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06000000a843089100ff803900080008000c0000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0xffffff7f) 06:30:18 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06030000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d40000000f000000", 0x55}], 0x1}, 0x0) 06:30:18 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x40100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c00]}) 06:30:18 executing program 3: ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, 0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000003c0), 0x4) r2 = dup2(r0, r0) ioctl$EVIOCSABS3F(r2, 0x401845ff, &(0x7f0000000040)={0x100000001, 0x3ff, 0x3, 0x0, 0x2}) write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0x2bcf) shutdown(r1, 0x1) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='yeah\x00', 0x5) recvmsg(r1, &(0x7f0000000140)={0x0, 0xa, &(0x7f00000015c0)=[{&(0x7f0000000400)=""/4096, 0xf7e9}], 0x1, 0x0, 0xff96ce4aaaa47475}, 0x100) 06:30:19 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06000000a843089100ff803900080008000c0000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0xffffff9e) 06:30:19 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06020000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d4000000ffffa888", 0x55}], 0x1}, 0x0) 06:30:19 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06030000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000010000000", 0x55}], 0x1}, 0x0) 06:30:19 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x600}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 06:30:19 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06000000a843089100ff803900080008000c0000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0xfffffff0) 06:30:19 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x40100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6800]}) 06:30:19 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06020000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d4000000ffffff9e", 0x55}], 0x1}, 0x0) 06:30:19 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x40100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c00]}) 06:30:19 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06000000a843089100ff803900080008000c0000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0x40030000000000) 06:30:19 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06030000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000060000000", 0x55}], 0x1}, 0x0) 06:30:19 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x700}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 06:30:19 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000380)="11dca5055e0bcfec7be070") prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x38) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x0, 0xa4}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r1, 0x0, 0x0) 06:30:19 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06020000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d4000000000014c5", 0x55}], 0x1}, 0x0) 06:30:19 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06000000a843089100ff803900080008000c0000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0xf0ffffffffffff) 06:30:19 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x40100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7400]}) 06:30:19 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06030000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d4000000f0000000", 0x55}], 0x1}, 0x0) 06:30:19 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0xa00}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 06:30:19 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x40100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a00]}) 06:30:19 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06020000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d4000000fffffff0", 0x55}], 0x1}, 0x0) 06:30:20 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06030000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d4000000fc000000", 0x55}], 0x1}, 0x0) 06:30:20 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06000000a843089100ff803900080008000c0000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0x100000000000000) 06:30:20 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/ip6_flowlabel\x00') preadv(r0, &(0x7f0000000340)=[{&(0x7f0000000000)=""/184, 0xb8}, {&(0x7f0000000180)=""/145, 0x91}], 0x2, 0x0) 06:30:20 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0xc00}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 06:30:20 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06020000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d4000000000000fc", 0x55}], 0x1}, 0x0) 06:30:20 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06000000a843089100ff803900080008000c0000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0x200000000000000) 06:30:20 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06030000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000030000", 0x55}], 0x1}, 0x0) 06:30:20 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x40100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff00]}) 06:30:20 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$VIDIOC_G_CROP(r1, 0xc01456b8, &(0x7f000000a240)={0x0, {0x14}}) 06:30:20 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06020000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d4000000fffffffc", 0x55}], 0x1}, 0x0) 06:30:20 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x40100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000]}) 06:30:20 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06000000a843089100ff803900080008000c0000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0x300000000000000) 06:30:20 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06030000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000060000", 0x55}], 0x1}, 0x0) 06:30:20 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0xe00}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 06:30:20 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06020000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d4000000000080fe", 0x55}], 0x1}, 0x0) 06:30:20 executing program 3: syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f00000001c0)={0x0, 0x9}, 0x0) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000380)={0x0, 0x6}, 0x8) socket$can_raw(0x1d, 0x3, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x2, 0x1) sched_setattr(0x0, &(0x7f00000000c0)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000040), 0x2) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x483, 0x0, 0xe8477e7e40b17d9) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x400100, 0x0) getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, 0x0, &(0x7f0000000500)=0x80) getsockopt$IP_VS_SO_GET_DAEMON(0xffffffffffffffff, 0x0, 0x487, &(0x7f00000002c0), &(0x7f0000000340)=0x30) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000140)={0x0, 0x1, 0x100000, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) unshare(0x40000000) 06:30:20 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06000000a843089100ff803900080008000c0000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0x400000000000000) 06:30:20 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06030000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d4000000000a0000", 0x55}], 0x1}, 0x0) 06:30:20 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0xf20}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 06:30:20 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06000000a843089100ff803900080008000c0000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0x600000000000000) [ 1184.078507][T18457] syz-executor.1 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=1000 [ 1184.097962][T18479] IPVS: ftp: loaded support on port[0] = 21 [ 1184.135168][T18457] CPU: 0 PID: 18457 Comm: syz-executor.1 Not tainted 5.2.0-rc6+ #62 [ 1184.144412][T18457] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1184.154476][T18457] Call Trace: [ 1184.157805][T18457] dump_stack+0x172/0x1f0 [ 1184.162259][T18457] dump_header+0x10f/0xb6c [ 1184.166828][T18457] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1184.172663][T18457] ? ___ratelimit+0x60/0x595 [ 1184.177404][T18457] ? do_raw_spin_unlock+0x57/0x270 06:30:20 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x200f}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) [ 1184.182627][T18457] oom_kill_process.cold+0x10/0x15 [ 1184.187757][T18457] out_of_memory+0x79a/0x1280 [ 1184.192710][T18457] ? lock_downgrade+0x880/0x880 [ 1184.198878][T18457] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1184.205134][T18457] ? oom_killer_disable+0x280/0x280 [ 1184.210430][T18457] ? find_held_lock+0x35/0x130 [ 1184.210456][T18457] mem_cgroup_out_of_memory+0x1ca/0x230 [ 1184.221079][T18457] ? memcg_event_wake+0x230/0x230 [ 1184.226128][T18457] ? do_raw_spin_unlock+0x57/0x270 [ 1184.231262][T18457] ? _raw_spin_unlock+0x2d/0x50 [ 1184.236193][T18457] try_charge+0x1042/0x1410 [ 1184.240810][T18457] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1184.246370][T18457] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 1184.246385][T18457] ? find_held_lock+0x35/0x130 [ 1184.246400][T18457] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 1184.246428][T18457] __memcg_kmem_charge_memcg+0x7c/0x130 [ 1184.246444][T18457] ? memcg_kmem_put_cache+0xb0/0xb0 [ 1184.246463][T18457] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 1184.246488][T18457] __memcg_kmem_charge+0x136/0x300 [ 1184.256809][T18457] __alloc_pages_nodemask+0x4bd/0x8d0 [ 1184.256827][T18457] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1184.256852][T18457] ? __alloc_pages_slowpath+0x28f0/0x28f0 [ 1184.267938][T18457] ? copy_process.part.0+0x1eea/0x6950 [ 1184.267957][T18457] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1184.267973][T18457] ? trace_hardirqs_on+0x67/0x220 [ 1184.267994][T18457] copy_process.part.0+0x44e/0x6950 [ 1184.279021][T18457] ? __lock_acquire+0x54f/0x5490 [ 1184.279048][T18457] ? __cleanup_sighand+0x60/0x60 06:30:21 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06020000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d40000000000c0fe", 0x55}], 0x1}, 0x0) [ 1184.279076][T18457] ? rcu_read_lock_sched_held+0x110/0x130 [ 1184.289773][T18457] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1184.289792][T18457] ? try_to_free_mem_cgroup_pages+0x3b6/0x9f0 [ 1184.289813][T18457] _do_fork+0x25d/0xfe0 [ 1184.289839][T18457] ? copy_init_mm+0x20/0x20 [ 1184.301888][T18457] ? blkcg_maybe_throttle_current+0x5e2/0xfb0 [ 1184.301904][T18457] ? lock_downgrade+0x880/0x880 [ 1184.301920][T18457] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1184.301935][T18457] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1184.301951][T18457] ? debug_smp_processor_id+0x3c/0x280 [ 1184.301967][T18457] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1184.301983][T18457] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1184.302003][T18457] ? do_syscall_64+0x26/0x680 [ 1184.312728][T18457] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1184.312745][T18457] ? do_syscall_64+0x26/0x680 [ 1184.312767][T18457] __x64_sys_clone+0xbf/0x150 [ 1184.312784][T18457] do_syscall_64+0xfd/0x680 [ 1184.312801][T18457] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1184.312812][T18457] RIP: 0033:0x45bee9 [ 1184.312832][T18457] Code: ff 48 85 f6 0f 84 27 8e fb ff 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 0f 8c fe 8d fb ff 74 01 c3 31 ed 48 f7 c7 00 00 01 00 75 [ 1184.323130][T18457] RSP: 002b:0000000000a6fa98 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 [ 1184.323155][T18457] RAX: ffffffffffffffda RBX: 00007f76cf63f700 RCX: 000000000045bee9 [ 1184.323164][T18457] RDX: 00007f76cf63f9d0 RSI: 00007f76cf63edb0 RDI: 00000000003d0f00 [ 1184.323173][T18457] RBP: 0000000000a6fcb0 R08: 00007f76cf63f700 R09: 00007f76cf63f700 [ 1184.323187][T18457] R10: 00007f76cf63f9d0 R11: 0000000000000202 R12: 0000000000000000 [ 1184.323194][T18457] R13: 0000000000a6fb4f R14: 00007f76cf63f9c0 R15: 000000000075bfd4 [ 1184.367890][T18457] memory: usage 307180kB, limit 307200kB, failcnt 2874 [ 1184.379226][T18457] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1184.407164][T18457] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1184.427053][T18457] Memory cgroup stats for /syz1: cache:0KB rss:219316KB rss_huge:176128KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:219316KB inactive_file:0KB active_file:0KB unevictable:0KB [ 1184.435920][T18457] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=6572,uid=0 [ 1184.565640][T18457] Memory cgroup out of memory: Killed process 6572 (syz-executor.1) total-vm:72708kB, anon-rss:2204kB, file-rss:35788kB, shmem-rss:0kB [ 1184.581958][ T1044] oom_reaper: reaped process 6572 (syz-executor.1), now anon-rss:0kB, file-rss:34828kB, shmem-rss:0kB [ 1184.582515][T18469] syz-executor.1 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=1000 [ 1184.606310][T18469] CPU: 1 PID: 18469 Comm: syz-executor.1 Not tainted 5.2.0-rc6+ #62 [ 1184.614303][T18469] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1184.624714][T18469] Call Trace: [ 1184.628012][T18469] dump_stack+0x172/0x1f0 [ 1184.632353][T18469] dump_header+0x10f/0xb6c [ 1184.632370][T18469] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1184.632385][T18469] ? ___ratelimit+0x60/0x595 [ 1184.632399][T18469] ? do_raw_spin_unlock+0x57/0x270 [ 1184.632416][T18469] oom_kill_process.cold+0x10/0x15 [ 1184.632433][T18469] out_of_memory+0x79a/0x1280 [ 1184.632454][T18469] ? oom_killer_disable+0x280/0x280 [ 1184.632467][T18469] ? find_held_lock+0x35/0x130 [ 1184.632495][T18469] mem_cgroup_out_of_memory+0x1ca/0x230 [ 1184.678198][T18469] ? memcg_event_wake+0x230/0x230 06:30:21 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x40100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]}) [ 1184.683248][T18469] ? do_raw_spin_unlock+0x57/0x270 [ 1184.688376][T18469] ? _raw_spin_unlock+0x2d/0x50 [ 1184.693341][T18469] try_charge+0xd45/0x1410 [ 1184.693370][T18469] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1184.703415][T18469] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 1184.708972][T18469] ? find_held_lock+0x35/0x130 [ 1184.713838][T18469] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 1184.719425][T18469] __memcg_kmem_charge_memcg+0x7c/0x130 [ 1184.724983][T18469] ? memcg_kmem_put_cache+0xb0/0xb0 [ 1184.730277][T18469] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 1184.735846][T18469] __memcg_kmem_charge+0x136/0x300 [ 1184.740979][T18469] __alloc_pages_nodemask+0x4bd/0x8d0 [ 1184.746393][T18469] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1184.752938][T18469] ? __alloc_pages_slowpath+0x28f0/0x28f0 [ 1184.758793][T18469] ? copy_process.part.0+0x1eea/0x6950 [ 1184.764296][T18469] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1184.769594][T18469] ? trace_hardirqs_on+0x67/0x220 [ 1184.774637][T18469] copy_process.part.0+0x44e/0x6950 [ 1184.780241][T18469] ? __might_fault+0x12b/0x1e0 06:30:21 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06000000a843089100ff803900080008000c0000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0xa00000000000000) [ 1184.785153][T18469] ? __cleanup_sighand+0x60/0x60 [ 1184.790284][T18469] ? lock_downgrade+0x880/0x880 [ 1184.795171][T18469] _do_fork+0x25d/0xfe0 [ 1184.799348][T18469] ? copy_init_mm+0x20/0x20 [ 1184.803977][T18469] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1184.809442][T18469] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1184.815001][T18469] ? do_syscall_64+0x26/0x680 [ 1184.819787][T18469] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1184.825872][T18469] ? do_syscall_64+0x26/0x680 [ 1184.830573][T18469] __x64_sys_clone+0xbf/0x150 [ 1184.835354][T18469] do_syscall_64+0xfd/0x680 [ 1184.840007][T18469] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1184.846077][T18469] RIP: 0033:0x459519 [ 1184.846093][T18469] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1184.846101][T18469] RSP: 002b:00007f76cf65fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1184.846116][T18469] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000459519 06:30:21 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x3f00}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 06:30:21 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06020000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d4000000000000ff", 0x55}], 0x1}, 0x0) [ 1184.846125][T18469] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000000040100 [ 1184.846133][T18469] RBP: 000000000075bf20 R08: ffffffffffffffff R09: 0000000000000000 [ 1184.846142][T18469] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f76cf6606d4 [ 1184.846150][T18469] R13: 00000000004bf97d R14: 00000000004d1358 R15: 00000000ffffffff [ 1184.870832][T18469] memory: usage 305172kB, limit 307200kB, failcnt 2875 06:30:21 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x40100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}) [ 1184.966141][T18469] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1185.025776][T18469] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1185.083612][T18469] Memory cgroup stats for /syz1: cache:0KB rss:217300KB rss_huge:174080KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:217300KB inactive_file:0KB active_file:0KB unevictable:0KB [ 1185.146252][T18469] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=6593,uid=0 [ 1185.168503][T18469] Memory cgroup out of memory: Killed process 6593 (syz-executor.1) total-vm:72708kB, anon-rss:2204kB, file-rss:35788kB, shmem-rss:0kB [ 1185.205677][T18517] IPVS: ftp: loaded support on port[0] = 21 06:30:22 executing program 3: syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_SET_DEST(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="00050101bbffda00cc725703000000"], 0x1}}, 0x80) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f00000001c0)={0x0, 0x9}, 0x0) ioctl$sock_SIOCDELDLCI(r0, 0x8981, &(0x7f0000000400)={'veth1\x00', 0x1}) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000380)={0x0, 0x6}, 0x8) socket$can_raw(0x1d, 0x3, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x2, 0x1) sched_setattr(0x0, &(0x7f00000000c0)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000040)=0x60, 0x2) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x483, 0x0, 0xe8477e7e40b17d9) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x400100, 0x0) getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, 0x0, &(0x7f0000000500)=0x80) getsockopt$IP_VS_SO_GET_DAEMON(0xffffffffffffffff, 0x0, 0x487, &(0x7f00000002c0), &(0x7f0000000340)=0x30) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000140)={0x0, 0x1, 0x100000, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) unshare(0x40000000) 06:30:22 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06030000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d4000000000c0000", 0x55}], 0x1}, 0x0) 06:30:22 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06000000a843089100ff803900080008000c0000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0xc00000000000000) 06:30:22 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06020000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000088a8ffff", 0x55}], 0x1}, 0x0) 06:30:22 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x4000}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 06:30:22 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x40100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000]}) 06:30:22 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06000000a843089100ff803900080008000c0000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0xe00000000000000) 06:30:22 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06030000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d4000000000e0000", 0x55}], 0x1}, 0x0) 06:30:22 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06020000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000f0ffff", 0x55}], 0x1}, 0x0) 06:30:22 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x5865}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 06:30:22 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x40100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000]}) 06:30:22 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06000000a843089100ff803900080008000c0000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0xf00000000000000) 06:30:23 executing program 3: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000480)='/dev/cuse\x00', 0x2842, 0x0) read$FUSE(r0, 0x0, 0x0) 06:30:23 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06020000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d40000007fffffff", 0x55}], 0x1}, 0x0) 06:30:23 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06030000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d4000000000f0000", 0x55}], 0x1}, 0x0) 06:30:23 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x40100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000]}) 06:30:23 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x6000}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 06:30:23 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06000000a843089100ff803900080008000c0000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0x1000000000000000) 06:30:23 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06000000a843089100ff803900080008000c0000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0x2d13000000000000) 06:30:23 executing program 3: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000480)='/dev/cuse\x00', 0x2842, 0x0) io_setup(0x2, &(0x7f0000000040)=0x0) read$FUSE(r0, 0x0, 0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}]) 06:30:23 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x40100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000]}) 06:30:23 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x6558}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 06:30:23 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06020000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d40000009effffff", 0x55}], 0x1}, 0x0) 06:30:23 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06030000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d4000000ba1b0000", 0x55}], 0x1}, 0x0) 06:30:23 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06000000a843089100ff803900080008000c0000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0x4000000000000000) 06:30:23 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06020000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d4000000f0ffffff", 0x55}], 0x1}, 0x0) 06:30:23 executing program 3: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000480)='/dev/cuse\x00', 0x2842, 0x0) io_setup(0x2, &(0x7f0000000040)=0x0) read$FUSE(r0, 0x0, 0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}]) 06:30:23 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06000000a843089100ff803900080008000c0000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0x6000000000000000) 06:30:23 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06030000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d4000000003f0000", 0x55}], 0x1}, 0x0) 06:30:23 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x8100}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 06:30:24 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x40100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000]}) 06:30:24 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06030000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000400000", 0x55}], 0x1}, 0x0) 06:30:24 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x40100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000]}) 06:30:24 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06020000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d4000000fcffffff", 0x55}], 0x1}, 0x0) 06:30:24 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06000000a843089100ff803900080008000c0000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0x6558000000000000) 06:30:24 executing program 3: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000480)='/dev/cuse\x00', 0x2842, 0x0) io_setup(0x2, &(0x7f0000000040)=0x0) read$FUSE(r0, 0x0, 0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}]) 06:30:24 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06030000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000065580000", 0x55}], 0x1}, 0x0) 06:30:24 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06020000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0x0) 06:30:24 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0xf000}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 06:30:24 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x40100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000]}) 06:30:24 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06000000a843089100ff803900080008000c0000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0x8000000000000000) 06:30:24 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06030000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000600000", 0x55}], 0x1}, 0x0) 06:30:24 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x40100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f000000]}) 06:30:24 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06020000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d4000000ffffffff", 0x55}], 0x1}, 0x0) 06:30:24 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06000000a843089100ff803900080008000c0000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0x8100000000000000) 06:30:24 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x40100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000]}) 06:30:24 executing program 3: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000480)='/dev/cuse\x00', 0x2842, 0x0) io_setup(0x2, &(0x7f0000000040)=0x0) read$FUSE(r0, 0x0, 0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}]) 06:30:24 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06030000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000058650000", 0x55}], 0x1}, 0x0) 06:30:24 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0xf0ffff}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 06:30:24 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06020000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0x0) 06:30:24 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06000000a843089100ff803900080008000c0000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0x88a8ffff00000000) 06:30:24 executing program 3: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000480)='/dev/cuse\x00', 0x2842, 0x0) io_setup(0x2, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}]) [ 1188.137133][T18697] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1188.172977][T18697] CPU: 1 PID: 18697 Comm: syz-executor.1 Not tainted 5.2.0-rc6+ #62 [ 1188.181542][T18697] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1188.181548][T18697] Call Trace: [ 1188.181573][T18697] dump_stack+0x172/0x1f0 [ 1188.181593][T18697] dump_header+0x10f/0xb6c [ 1188.181609][T18697] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1188.181623][T18697] ? ___ratelimit+0x60/0x595 [ 1188.181639][T18697] ? do_raw_spin_unlock+0x57/0x270 [ 1188.181660][T18697] oom_kill_process.cold+0x10/0x15 [ 1188.219954][T18697] out_of_memory+0x79a/0x1280 [ 1188.219982][T18697] ? lock_downgrade+0x880/0x880 [ 1188.235594][T18697] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1188.241952][T18697] ? oom_killer_disable+0x280/0x280 [ 1188.247343][T18697] ? find_held_lock+0x35/0x130 [ 1188.252611][T18697] mem_cgroup_out_of_memory+0x1ca/0x230 [ 1188.258565][T18697] ? memcg_event_wake+0x230/0x230 [ 1188.264060][T18697] ? do_raw_spin_unlock+0x57/0x270 [ 1188.269451][T18697] ? _raw_spin_unlock+0x2d/0x50 [ 1188.274504][T18697] try_charge+0x1042/0x1410 [ 1188.279038][T18697] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1188.284640][T18697] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1188.290994][T18697] ? kasan_check_read+0x11/0x20 [ 1188.296302][T18697] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 1188.301876][T18697] mem_cgroup_try_charge+0x24d/0x5e0 [ 1188.307280][T18697] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 1188.313032][T18697] wp_page_copy+0x416/0x1770 [ 1188.317674][T18697] ? do_wp_page+0x486/0x1500 [ 1188.322555][T18697] ? pmd_pfn+0x1d0/0x1d0 [ 1188.326820][T18697] ? lock_downgrade+0x880/0x880 [ 1188.331776][T18697] ? __pte_alloc_kernel+0x220/0x220 [ 1188.337078][T18697] ? kasan_check_read+0x11/0x20 [ 1188.342047][T18697] ? do_raw_spin_unlock+0x57/0x270 [ 1188.347391][T18697] do_wp_page+0x48e/0x1500 [ 1188.352017][T18697] ? do_raw_spin_lock+0x12a/0x2e0 [ 1188.357150][T18697] ? rwlock_bug.part.0+0x90/0x90 [ 1188.362370][T18697] ? finish_mkwrite_fault+0x540/0x540 [ 1188.367762][T18697] ? add_mm_counter_fast.part.0+0x40/0x40 [ 1188.373517][T18697] __handle_mm_fault+0x22e3/0x3eb0 [ 1188.378647][T18697] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 1188.384292][T18697] ? find_held_lock+0x35/0x130 [ 1188.389414][T18697] ? handle_mm_fault+0x292/0xa90 [ 1188.394466][T18697] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1188.400727][T18697] ? kasan_check_read+0x11/0x20 [ 1188.405771][T18697] handle_mm_fault+0x3b7/0xa90 [ 1188.410646][T18697] __do_page_fault+0x5ef/0xda0 [ 1188.415520][T18697] do_page_fault+0x71/0x57d [ 1188.420218][T18697] ? page_fault+0x8/0x30 [ 1188.424481][T18697] page_fault+0x1e/0x30 [ 1188.428647][T18697] RIP: 0033:0x40e6b8 06:30:25 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06020000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0x0) [ 1188.432570][T18697] Code: 8b 34 c6 4a 8d 04 2e 48 3d ff ff ff 7e 0f 86 77 ff ff ff bf d1 ea 4b 00 31 c0 e8 c3 35 ff ff 31 ff e8 0c 32 ff ff 0f 1f 40 00 <89> 3c b5 00 00 73 00 eb b6 31 ed 0f 1f 44 00 00 80 3d ae 1d 66 00 [ 1188.452906][T18697] RSP: 002b:0000000000a6fb00 EFLAGS: 00010246 [ 1188.460035][T18697] RAX: 00000000f702be70 RBX: 0000000023d195bc RCX: 0000001b31920000 [ 1188.468124][T18697] RDX: 0000000000000000 RSI: 0000000000001e70 RDI: fffffffff702be70 [ 1188.468132][T18697] RBP: 0000000000000003 R08: 00000000f702be70 R09: 00000000f702be74 06:30:25 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06000000a843089100ff803900080008000c0000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0x9effffff00000000) 06:30:25 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06030000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d4000000fe800000", 0x55}], 0x1}, 0x0) 06:30:25 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x1000000}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) [ 1188.468139][T18697] R10: 0000000000a6fca0 R11: 0000000000000246 R12: 000000000075bfa8 [ 1188.468146][T18697] R13: 0000000080000000 R14: 00007f76d1661008 R15: 0000000000000003 [ 1188.523276][T18697] memory: usage 307200kB, limit 307200kB, failcnt 2912 [ 1188.530716][T18697] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 06:30:25 executing program 3: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000480)='/dev/cuse\x00', 0x2842, 0x0) io_submit(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}]) [ 1188.543667][T18697] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1188.553003][T18697] Memory cgroup stats for /syz1: cache:0KB rss:217932KB rss_huge:174080KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:217932KB inactive_file:0KB active_file:0KB unevictable:0KB [ 1188.575432][T18697] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=6605,uid=0 [ 1188.642655][T18697] Memory cgroup out of memory: Killed process 6605 (syz-executor.1) total-vm:72708kB, anon-rss:2204kB, file-rss:35788kB, shmem-rss:0kB 06:30:25 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x40100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48000000]}) 06:30:25 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06000000a843089100ff803900080008000c0000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0xf0ffffff00000000) 06:30:25 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06020000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0x0) 06:30:25 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x2000000}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 06:30:25 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06030000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000810000", 0x55}], 0x1}, 0x0) 06:30:25 executing program 3: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000480)='/dev/cuse\x00', 0x2842, 0x0) io_submit(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}]) 06:30:25 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06000000a843089100ff803900080008000c0000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0xffffff7f00000000) 06:30:25 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x40100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c000000]}) 06:30:25 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06020000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0x0) 06:30:25 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x3000000}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 06:30:25 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06030000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d40000001bba0000", 0x55}], 0x1}, 0x0) 06:30:25 executing program 3: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000480)='/dev/cuse\x00', 0x2842, 0x0) io_submit(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}]) 06:30:25 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06000000a843089100ff803900080008000c0000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0xfffffffffffff000) 06:30:25 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x40100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68000000]}) 06:30:25 executing program 4: r0 = socket$inet6(0x10, 0x403, 0x0) openat$urandom(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/urandom\x00', 0x200, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06000000a843089100ff803900080008000c0000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000180)='/dev/vcs#\x00', 0x4, 0x8040) getresuid(&(0x7f00000001c0)=0x0, &(0x7f0000000280)=0x0, &(0x7f00000002c0)) r4 = getgid() mount$fuseblk(&(0x7f0000000040)='/dev/loop0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='fuseblk\x00', 0x0, &(0x7f0000000300)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0xe000}, 0x2c, {'user_id', 0x3d, r3}, 0x2c, {'group_id', 0x3d, r4}, 0x2c, {[{@default_permissions='default_permissions'}, {@default_permissions='default_permissions'}, {@allow_other='allow_other'}, {@blksize={'blksize', 0x3d, 0x400}}], [{@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'CREDS_CHECK'}}, {@obj_type={'obj_type', 0x3d, '/dev/urandom\x00'}}, {@obj_type={'obj_type', 0x3d, '/dev/urandom\x00'}}]}}) r5 = shmget(0x3, 0x3000, 0x811, &(0x7f0000ffd000/0x3000)=nil) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000440)=0x0) r7 = getpgid(0x0) shmctl$IPC_SET(r5, 0x1, &(0x7f0000000480)={{0x6, r2, r4, r2, r4, 0x4, 0x8}, 0xe9, 0x8001, 0xff, 0x8000, r6, r7, 0x6}) 06:30:25 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06030000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d4000000fec00000", 0x55}], 0x1}, 0x0) 06:30:26 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06020000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0x0) 06:30:26 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x40100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c000000]}) 06:30:26 executing program 3: io_setup(0x2, &(0x7f0000000040)=0x0) io_submit(r0, 0x1, &(0x7f0000000200)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) 06:30:26 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x4000000}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 06:30:26 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06030000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000f00000", 0x55}], 0x1}, 0x0) 06:30:26 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x40100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x74000000]}) 06:30:26 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06020000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0x0) 06:30:26 executing program 4: r0 = socket$bt_bnep(0x1f, 0x3, 0x4) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000080)=0xfffffffffffffffb, 0x4) r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06000000a843089100ff803900080008000c0000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0x0) 06:30:26 executing program 3: io_setup(0x2, &(0x7f0000000040)=0x0) io_submit(r0, 0x1, &(0x7f0000000200)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) 06:30:26 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x5000000}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 06:30:26 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06020000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0x0) 06:30:26 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06030000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000fc0000", 0x55}], 0x1}, 0x0) 06:30:26 executing program 4: setxattr$trusted_overlay_nlink(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='trusted.overlay.nlink\x00', &(0x7f00000001c0)={'U-', 0x9d}, 0x28, 0x2) r0 = socket$inet6(0x10, 0x3, 0x0) r1 = dup(r0) ioctl$TUNGETFILTER(r1, 0x801054db, &(0x7f0000000080)=""/166) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06000000a843089100ff803900080008000c0000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0x0) setsockopt$l2tp_PPPOL2TP_SO_DEBUG(r1, 0x111, 0x1, 0xd1, 0x4) 06:30:26 executing program 3: io_setup(0x2, &(0x7f0000000040)=0x0) io_submit(r0, 0x1, &(0x7f0000000200)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) 06:30:26 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x40100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a000000]}) 06:30:26 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06030000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000080fe0000", 0x55}], 0x1}, 0x0) 06:30:26 executing program 4: r0 = socket$inet6(0x10, 0x3, 0xffffffffffff7fff) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06000000a843089100ff803900080008000c0000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0x0) syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x1) 06:30:26 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x6000000}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 06:30:26 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06020000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0x0) 06:30:26 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x40100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff000000]}) 06:30:26 executing program 3: r0 = openat$cuse(0xffffffffffffff9c, 0x0, 0x2842, 0x0) io_setup(0x2, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}]) 06:30:26 executing program 4: r0 = socket$inet6(0x10, 0x4, 0x800) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06000000a843089100ff803900080008000c0000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0x0) 06:30:26 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06030000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d4000000c0fe0000", 0x55}], 0x1}, 0x0) 06:30:26 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x40100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000]}) 06:30:26 executing program 3: r0 = openat$cuse(0xffffffffffffff9c, 0x0, 0x2842, 0x0) io_setup(0x2, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}]) 06:30:27 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000140)='/dev/swradio#\x00', 0x1, 0x2) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x100) r1 = socket$inet6(0x10, 0x3, 0x0) r2 = dup3(r1, r1, 0x80000) fcntl$F_SET_FILE_RW_HINT(r1, 0x40e, &(0x7f0000000180)=0x3) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x1}) ioctl$UFFDIO_WAKE(r2, 0x8010aa02, &(0x7f0000000100)={&(0x7f0000ffb000/0x4000)=nil, 0x4000}) delete_module(&(0x7f0000000080)='trusted]&\x00', 0xfe2a716e1c38345f) 06:30:27 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06020000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0x0) 06:30:27 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x7000000}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 06:30:27 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06030000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000ff0000", 0x55}], 0x1}, 0x0) 06:30:27 executing program 3: r0 = openat$cuse(0xffffffffffffff9c, 0x0, 0x2842, 0x0) io_setup(0x2, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}]) [ 1190.414190][T18891] syz-executor.1 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=1000 06:30:27 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06020000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0x0) 06:30:27 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06030000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000400300", 0x55}], 0x1}, 0x0) [ 1190.507234][T18891] CPU: 0 PID: 18891 Comm: syz-executor.1 Not tainted 5.2.0-rc6+ #62 [ 1190.515270][T18891] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1190.525516][T18891] Call Trace: [ 1190.528818][T18891] dump_stack+0x172/0x1f0 [ 1190.533164][T18891] dump_header+0x10f/0xb6c [ 1190.537603][T18891] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1190.543427][T18891] ? ___ratelimit+0x60/0x595 [ 1190.548037][T18891] ? do_raw_spin_unlock+0x57/0x270 [ 1190.553168][T18891] oom_kill_process.cold+0x10/0x15 [ 1190.558303][T18891] out_of_memory+0x79a/0x1280 [ 1190.563021][T18891] ? lock_downgrade+0x880/0x880 [ 1190.567875][T18891] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1190.567897][T18891] ? oom_killer_disable+0x280/0x280 [ 1190.579408][T18891] ? find_held_lock+0x35/0x130 [ 1190.584282][T18891] mem_cgroup_out_of_memory+0x1ca/0x230 [ 1190.589845][T18891] ? memcg_event_wake+0x230/0x230 [ 1190.594887][T18891] ? do_raw_spin_unlock+0x57/0x270 [ 1190.600014][T18891] ? _raw_spin_unlock+0x2d/0x50 [ 1190.604881][T18891] try_charge+0x1042/0x1410 [ 1190.609399][T18891] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1190.615115][T18891] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 1190.620682][T18891] ? find_held_lock+0x35/0x130 [ 1190.625458][T18891] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 1190.631023][T18891] __memcg_kmem_charge_memcg+0x7c/0x130 [ 1190.636583][T18891] ? memcg_kmem_put_cache+0xb0/0xb0 [ 1190.641799][T18891] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 1190.647445][T18891] __memcg_kmem_charge+0x136/0x300 [ 1190.652569][T18891] __alloc_pages_nodemask+0x4bd/0x8d0 06:30:27 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06020000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0x0) 06:30:27 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06030000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000034000", 0x55}], 0x1}, 0x0) [ 1190.658085][T18891] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1190.664337][T18891] ? __alloc_pages_slowpath+0x28f0/0x28f0 [ 1190.670188][T18891] ? copy_process.part.0+0x1eea/0x6950 [ 1190.675747][T18891] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1190.681036][T18891] ? trace_hardirqs_on+0x67/0x220 [ 1190.686064][T18891] ? kasan_check_read+0x11/0x20 [ 1190.690940][T18891] copy_process.part.0+0x44e/0x6950 [ 1190.696150][T18891] ? __might_fault+0x12b/0x1e0 [ 1190.700938][T18891] ? __cleanup_sighand+0x60/0x60 [ 1190.705875][T18891] ? lock_downgrade+0x880/0x880 [ 1190.705902][T18891] _do_fork+0x25d/0xfe0 [ 1190.705923][T18891] ? copy_init_mm+0x20/0x20 [ 1190.719410][T18891] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1190.724878][T18891] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1190.730343][T18891] ? do_syscall_64+0x26/0x680 [ 1190.735146][T18891] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1190.741325][T18891] ? do_syscall_64+0x26/0x680 [ 1190.746015][T18891] __x64_sys_clone+0xbf/0x150 [ 1190.750708][T18891] do_syscall_64+0xfd/0x680 [ 1190.755233][T18891] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1190.761129][T18891] RIP: 0033:0x459519 [ 1190.765113][T18891] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1190.784720][T18891] RSP: 002b:00007f76cf65fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1190.793140][T18891] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000459519 06:30:27 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06030000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d4000000fffff000", 0x55}], 0x1}, 0x0) [ 1190.801124][T18891] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000000040100 [ 1190.809112][T18891] RBP: 000000000075bf20 R08: ffffffffffffffff R09: 0000000000000000 [ 1190.817309][T18891] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f76cf6606d4 [ 1190.825287][T18891] R13: 00000000004bf97d R14: 00000000004d1358 R15: 00000000ffffffff [ 1190.870039][T18891] memory: usage 307180kB, limit 307200kB, failcnt 2958 [ 1190.877444][T18891] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1190.886742][T18891] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1190.911080][T18891] Memory cgroup stats for /syz1: cache:0KB rss:216620KB rss_huge:172032KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:216620KB inactive_file:0KB active_file:0KB unevictable:0KB [ 1190.951801][T18891] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=6625,uid=0 [ 1191.004250][T18891] Memory cgroup out of memory: Killed process 6625 (syz-executor.1) total-vm:72708kB, anon-rss:2204kB, file-rss:35788kB, shmem-rss:0kB [ 1191.036867][ T1044] oom_reaper: reaped process 6625 (syz-executor.1), now anon-rss:0kB, file-rss:34828kB, shmem-rss:0kB [ 1191.039144][T18887] syz-executor.1 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=1000 [ 1191.067221][T18887] CPU: 0 PID: 18887 Comm: syz-executor.1 Not tainted 5.2.0-rc6+ #62 [ 1191.075474][T18887] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1191.085530][T18887] Call Trace: [ 1191.088815][T18887] dump_stack+0x172/0x1f0 [ 1191.093138][T18887] dump_header+0x10f/0xb6c [ 1191.097630][T18887] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1191.103426][T18887] ? ___ratelimit+0x60/0x595 [ 1191.108020][T18887] ? do_raw_spin_unlock+0x57/0x270 [ 1191.113270][T18887] oom_kill_process.cold+0x10/0x15 [ 1191.118380][T18887] out_of_memory+0x79a/0x1280 [ 1191.123047][T18887] ? oom_killer_disable+0x280/0x280 [ 1191.128230][T18887] ? find_held_lock+0x35/0x130 [ 1191.132991][T18887] mem_cgroup_out_of_memory+0x1ca/0x230 [ 1191.138729][T18887] ? memcg_event_wake+0x230/0x230 [ 1191.145387][T18887] ? do_raw_spin_unlock+0x57/0x270 [ 1191.150605][T18887] ? _raw_spin_unlock+0x2d/0x50 [ 1191.155553][T18887] try_charge+0xd45/0x1410 [ 1191.159966][T18887] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1191.165529][T18887] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 1191.171087][T18887] ? find_held_lock+0x35/0x130 [ 1191.175886][T18887] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 1191.181442][T18887] __memcg_kmem_charge_memcg+0x7c/0x130 [ 1191.187080][T18887] ? memcg_kmem_put_cache+0xb0/0xb0 [ 1191.192356][T18887] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 1191.197895][T18887] __memcg_kmem_charge+0x136/0x300 [ 1191.203097][T18887] __alloc_pages_nodemask+0x4bd/0x8d0 [ 1191.208506][T18887] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1191.214745][T18887] ? __alloc_pages_slowpath+0x28f0/0x28f0 [ 1191.220474][T18887] ? copy_process.part.0+0x1eea/0x6950 [ 1191.225943][T18887] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1191.231359][T18887] ? trace_hardirqs_on+0x67/0x220 [ 1191.236369][T18887] ? kasan_check_read+0x11/0x20 [ 1191.241281][T18887] copy_process.part.0+0x44e/0x6950 [ 1191.246481][T18887] ? __lock_acquire+0x54f/0x5490 [ 1191.251498][T18887] ? __cleanup_sighand+0x60/0x60 [ 1191.256548][T18887] ? rcu_read_lock_sched_held+0x110/0x130 [ 1191.262395][T18887] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1191.268628][T18887] ? try_to_free_mem_cgroup_pages+0x3b6/0x9f0 [ 1191.274788][T18887] _do_fork+0x25d/0xfe0 [ 1191.279023][T18887] ? copy_init_mm+0x20/0x20 [ 1191.283519][T18887] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1191.289052][T18887] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1191.294497][T18887] ? do_syscall_64+0x26/0x680 [ 1191.299158][T18887] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1191.305270][T18887] ? do_syscall_64+0x26/0x680 [ 1191.309939][T18887] __x64_sys_clone+0xbf/0x150 [ 1191.314751][T18887] do_syscall_64+0xfd/0x680 [ 1191.319265][T18887] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1191.325360][T18887] RIP: 0033:0x45bee9 [ 1191.329254][T18887] Code: ff 48 85 f6 0f 84 27 8e fb ff 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 0f 8c fe 8d fb ff 74 01 c3 31 ed 48 f7 c7 00 00 01 00 75 [ 1191.349117][T18887] RSP: 002b:0000000000a6fa98 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 [ 1191.357519][T18887] RAX: ffffffffffffffda RBX: 00007f76cf63f700 RCX: 000000000045bee9 [ 1191.365654][T18887] RDX: 00007f76cf63f9d0 RSI: 00007f76cf63edb0 RDI: 00000000003d0f00 [ 1191.373612][T18887] RBP: 0000000000a6fcb0 R08: 00007f76cf63f700 R09: 00007f76cf63f700 [ 1191.381578][T18887] R10: 00007f76cf63f9d0 R11: 0000000000000202 R12: 0000000000000000 [ 1191.389750][T18887] R13: 0000000000a6fb4f R14: 00007f76cf63f9c0 R15: 000000000075bfd4 [ 1191.398925][T18887] memory: usage 304848kB, limit 307200kB, failcnt 2960 [ 1191.405877][T18887] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1191.413749][T18887] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1191.420610][T18887] Memory cgroup stats for /syz1: cache:0KB rss:214460KB rss_huge:169984KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:214460KB inactive_file:0KB active_file:0KB unevictable:0KB 06:30:28 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x40100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000]}) 06:30:28 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06020000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0x0) 06:30:28 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) r1 = syz_open_dev$dmmidi(&(0x7f0000000080)='/dev/dmmidi#\x00', 0x1, 0x400) ioctl$ION_IOC_HEAP_QUERY(r1, 0xc0184908, &(0x7f0000000100)={0x34, 0x0, &(0x7f00000000c0)}) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06000000a843089100ff803900080008000c0000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0x0) 06:30:28 executing program 3: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000480)='/dev/cuse\x00', 0x2842, 0x0) io_setup(0x0, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}]) 06:30:28 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06030000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000001", 0x55}], 0x1}, 0x0) 06:30:28 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0xa000000}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) [ 1191.442154][T18887] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=6647,uid=0 [ 1191.457642][T18887] Memory cgroup out of memory: Killed process 6647 (syz-executor.1) total-vm:72708kB, anon-rss:2204kB, file-rss:35788kB, shmem-rss:0kB [ 1191.473352][ T1044] oom_reaper: reaped process 6647 (syz-executor.1), now anon-rss:0kB, file-rss:34828kB, shmem-rss:0kB 06:30:28 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06020000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0x0) 06:30:28 executing program 3: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000480)='/dev/cuse\x00', 0x2842, 0x0) io_setup(0x0, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}]) 06:30:28 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x40100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000]}) 06:30:28 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="5500000018007fd500fe01b2a4a280930a06000000a843089100ff80df0000000000000000dc01382d0000009b7a136ef75afb83de448daa72540d8102b2c55327c43ab8220000060cec4fab915426000000000000904b199bffffffffffffffc1bf9ab29ffb001297974b723b469eae4d304a4b0b3f653043", 0x79}], 0x1}, 0x0) 06:30:28 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06030000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000002", 0x55}], 0x1}, 0x0) [ 1191.736346][T18956] netlink: 57 bytes leftover after parsing attributes in process `syz-executor.4'. 06:30:28 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0xc000000}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 06:30:28 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x40100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300000000000000]}) 06:30:28 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06020000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0x0) 06:30:28 executing program 4: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x0, 0x0) ioctl$VIDIOC_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f00000000c0)={0x0, 0x0, [], @raw_data=[0x8d3, 0xcc12, 0x7, 0x3, 0x8, 0xe000, 0x9, 0x4, 0x444, 0x3ff, 0x248b, 0x1000, 0xffffffff, 0x3, 0x8, 0x200, 0xffffffffffff7f56, 0x80000001, 0x596, 0x2, 0x5, 0x2e938, 0x4, 0x0, 0x200, 0x9, 0x200, 0xffff, 0x9, 0x3ff, 0x8acc, 0xaf]}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x8, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2062b041}, [@call={0x85, 0x0, 0x0, 0x6}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06000000a843089100ff803900080008000c0000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0x0) 06:30:28 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06030000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000003", 0x55}], 0x1}, 0x0) 06:30:28 executing program 3: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000480)='/dev/cuse\x00', 0x2842, 0x0) io_setup(0x0, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}]) 06:30:28 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0xe000000}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 06:30:28 executing program 3: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000480)='/dev/cuse\x00', 0x2842, 0x0) io_setup(0x2, 0x0) io_submit(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}]) 06:30:28 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06020000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0x0) 06:30:28 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06030000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000004", 0x55}], 0x1}, 0x0) [ 1192.130064][T18979] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1192.217549][T18979] CPU: 1 PID: 18979 Comm: syz-executor.1 Not tainted 5.2.0-rc6+ #62 [ 1192.225660][T18979] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1192.235813][T18979] Call Trace: [ 1192.239122][T18979] dump_stack+0x172/0x1f0 [ 1192.243651][T18979] dump_header+0x10f/0xb6c [ 1192.248184][T18979] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1192.254002][T18979] ? ___ratelimit+0x60/0x595 [ 1192.258730][T18979] ? do_raw_spin_unlock+0x57/0x270 06:30:28 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0xf200000}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 06:30:28 executing program 3: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000480)='/dev/cuse\x00', 0x2842, 0x0) io_setup(0x2, 0x0) io_submit(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}]) [ 1192.263987][T18979] oom_kill_process.cold+0x10/0x15 [ 1192.269114][T18979] out_of_memory+0x79a/0x1280 [ 1192.273810][T18979] ? lock_downgrade+0x880/0x880 [ 1192.278672][T18979] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1192.284933][T18979] ? oom_killer_disable+0x280/0x280 [ 1192.290322][T18979] ? find_held_lock+0x35/0x130 [ 1192.295129][T18979] mem_cgroup_out_of_memory+0x1ca/0x230 [ 1192.300699][T18979] ? memcg_event_wake+0x230/0x230 [ 1192.305743][T18979] ? do_raw_spin_unlock+0x57/0x270 [ 1192.310870][T18979] ? _raw_spin_unlock+0x2d/0x50 06:30:29 executing program 4: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) ioctl$TUNGETFILTER(r0, 0x801054db, &(0x7f00000000c0)=""/9) r1 = socket$inet6(0x10, 0x3, 0xffffffffffffffff) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06000000a843089100ff803900080008000c0000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0x0) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000180)={'team0\x00', 0x0}) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f00000002c0)={{{@in=@initdev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6=@empty}}, &(0x7f00000003c0)=0xe8) recvmsg(r0, &(0x7f0000001640)={&(0x7f0000000400)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x80, &(0x7f0000001600)=[{&(0x7f0000000480)=""/70, 0x46}, {&(0x7f0000000500)=""/199, 0xc7}, {&(0x7f0000000600)=""/4096, 0x1000}], 0x3}, 0x121) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000001740)={'vcan0\x00', r4}) getsockname$packet(r0, &(0x7f0000001780)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000017c0)=0x14) accept$packet(r0, &(0x7f0000001800)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000001840)=0x14) getsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f0000001980)={@loopback, 0x0}, &(0x7f00000019c0)=0x14) getsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000001700)={@loopback, @local, 0x0}, &(0x7f0000001880)=0xfffffffffffffeb0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000001c00)={'team0\x00', 0x0}) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000001c80)={0x0, @local, @dev}, &(0x7f0000001cc0)=0xc) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000001a00)={{{@in=@multicast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@initdev}}, &(0x7f0000001ec0)=0x4b) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000001b00)={{{@in6, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@loopback}}, &(0x7f0000002040)=0x48f) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000002140)={'erspan0\x00', 0x0}) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000002180)={0x0, @multicast2, @dev}, &(0x7f00000021c0)=0xc) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000002240)={'bridge_slave_0\x00', 0x0}) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000025c0)={0x0, @loopback, @remote}, &(0x7f0000002600)=0xc) getsockname$packet(r0, &(0x7f0000002640)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000002680)=0x14) getpeername$packet(r0, &(0x7f00000026c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000002700)=0x14) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000008580)={{{@in=@multicast2, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@remote}}, &(0x7f0000008680)=0xe8) recvmmsg(r1, &(0x7f000000dec0)=[{{&(0x7f00000086c0)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000008900)=[{&(0x7f0000008740)=""/130, 0x82}, {&(0x7f0000008800)=""/236, 0xec}], 0x2, &(0x7f0000008940)=""/5, 0x5}}, {{&(0x7f0000008980)=@in6={0xa, 0x0, 0x0, @local}, 0x80, &(0x7f0000009dc0)=[{&(0x7f0000008a00)=""/159, 0x9f}, {&(0x7f0000008ac0)=""/90, 0x5a}, {&(0x7f0000008b40)=""/4096, 0x1000}, {&(0x7f0000009b40)=""/229, 0xe5}, {&(0x7f0000009c40)=""/218, 0xda}, {&(0x7f0000009d40)=""/121, 0x79}], 0x6, &(0x7f0000009e40)=""/21, 0x15}, 0x1ff}, {{&(0x7f0000009e80)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f000000a440)=[{&(0x7f0000009f00)=""/165, 0xa5}, {&(0x7f0000009fc0)=""/54, 0x36}, {&(0x7f000000a000)=""/85, 0x55}, {&(0x7f000000a080)=""/245, 0xf5}, {&(0x7f000000a180)=""/175, 0xaf}, {&(0x7f000000a240)=""/158, 0x9e}, {&(0x7f000000a300)=""/59, 0x3b}, {&(0x7f000000a340)=""/224, 0xe0}], 0x8, &(0x7f000000a4c0)=""/235, 0xeb}, 0x7}, {{&(0x7f000000a5c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, 0x80, &(0x7f000000aa00)=[{&(0x7f000000a640)=""/237, 0xed}, {&(0x7f000000a740)=""/161, 0xa1}, {&(0x7f000000a800)=""/54, 0x36}, {&(0x7f000000a840)=""/134, 0x86}, {&(0x7f000000a900)=""/54, 0x36}, {&(0x7f000000a940)=""/158, 0x9e}], 0x6, &(0x7f000000aa80)=""/130, 0x82}, 0xffff}, {{&(0x7f000000ab40)=@hci, 0x80, &(0x7f000000abc0), 0x0, &(0x7f000000ac00)=""/135, 0x87}, 0x101}, {{&(0x7f000000acc0)=@nl=@unspec, 0x80, &(0x7f000000bf80)=[{&(0x7f000000ad40)=""/82, 0x52}, {&(0x7f000000adc0)=""/229, 0xe5}, {&(0x7f000000aec0)=""/154, 0x9a}, {&(0x7f000000af80)=""/4096, 0x1000}], 0x4, &(0x7f000000bfc0)=""/95, 0x5f}, 0x6ff7}, {{&(0x7f000000c040)=@alg, 0x80, &(0x7f000000c7c0)=[{&(0x7f000000c0c0)=""/70, 0x46}, {&(0x7f000000c140)=""/246, 0xf6}, {&(0x7f000000c240)=""/57, 0x39}, {&(0x7f000000c280)=""/25, 0x19}, {&(0x7f000000c2c0)=""/214, 0xd6}, {&(0x7f000000c3c0)=""/165, 0xa5}, {&(0x7f000000c480)=""/199, 0xc7}, {&(0x7f000000c580)=""/252, 0xfc}, {&(0x7f000000c680)=""/189, 0xbd}, {&(0x7f000000c740)=""/112, 0x70}], 0xa, &(0x7f000000c880)=""/27, 0x1b}, 0x2}, {{&(0x7f000000c8c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, 0x80, &(0x7f000000dd80)=[{&(0x7f000000c940)=""/101, 0x65}, {&(0x7f000000c9c0)=""/72, 0x48}, {&(0x7f000000ca40)=""/94, 0x5e}, {&(0x7f000000cac0)=""/157, 0x9d}, {&(0x7f000000cb80)=""/4096, 0x1000}, {&(0x7f000000db80)=""/225, 0xe1}, {&(0x7f000000dc80)=""/20, 0x14}, {&(0x7f000000dcc0)=""/159, 0x9f}], 0x8, &(0x7f000000de00)=""/186, 0xba}, 0x2}], 0x8, 0x1, 0x0) getsockname$packet(r0, &(0x7f000000e0c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f000000e100)=0x14) accept4$packet(r0, &(0x7f00000107c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000010800)=0x14, 0x80800) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000010840)={{{@in6=@loopback, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@multicast2}}, &(0x7f0000010940)=0xe8) getsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000010980)={@mcast1, 0x0}, &(0x7f00000109c0)=0x14) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000012780)={{{@in=@initdev, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@multicast2}}, &(0x7f0000012880)=0xe8) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000128c0)={0x0, @rand_addr, @loopback}, &(0x7f0000012900)=0xc) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000013340)={&(0x7f0000000100), 0xc, &(0x7f0000013300)={&(0x7f0000003200)=ANY=[@ANYBLOB="88090000", @ANYRES16=r2, @ANYBLOB="280729bd7000fedbdf250100000008000100", @ANYRES32=r3, @ANYBLOB="4400020040000100240001007072696f72697479000000000000000000000000000000000000000000000000080003000e000000080004000000000008000600", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=r5, @ANYBLOB="74010200400001002400010071756575655f6964000000000000000000000000000000000000000000000000080003000300000008000400ed00000008000600", @ANYRES32=r6, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000800030003000000080004000000000038000100240001006d636173745f72656a6f696e5f636f756e740000000000000000000000000000080003000300000008000400ff0300003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000008000300060000000400040008000600", @ANYRES32=r7, @ANYBLOB="4c000100240001006c625f74785f6d6574686f64000000000000000000000000000000000000000008000300050000001c000400686173685f746f5f706f72745f6d617070696e670000000038000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000800030003000000080004000800000008000100", @ANYRES32=r8, @ANYBLOB="800002003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000008000300060000000400040008000600", @ANYRES32=r9, @ANYBLOB="40000100240001007072696f72697479000000000000000000000000000000000000000000000000080003000e00000008000400ff00000008000600", @ANYRES32=r10, @ANYBLOB="08000100", @ANYRES32=r11, @ANYBLOB="3c02020044000100240001006d6f6465000000000000000000000000000000000000000000000000000000000800030005000000140004006163746976656261636b75700000000040000100240001007072696f72697479000000000000000000000000000000000000000000000000080003000e000000080004000700000008000600", @ANYRES32=r12, @ANYBLOB="400001002400010071756575655f6964000000000000000000000000000000000000000000000000080003000300000008000400feffffff08000600", @ANYRES32=r13, @ANYBLOB="40000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000080003000300000008000400", @ANYRES32=r14, @ANYBLOB="080007000000000040000100240001006c625f686173685f737461747300000000000000000000000000000000000000080003000b00000008000400000000000800070000000000400001002400010071756575655f69640000000000000000000000000000000000000000000000000800030003000000080004008400000008000600", @ANYRES32=r15, @ANYBLOB="3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r16, @ANYBLOB="400001002400010071756575655f69640000000000000000000000000000000000000000000000000800030003000000080004000200000008000600", @ANYRES32=r17, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f636f756e74000000000000000000000c00000008000308038e59afa48fb294fc764b000000080004000700000008000100d266651f093cc92d770435f18ab2de1f76ab9c264395399297", @ANYRES32=r18, @ANYBLOB="400102003c00010024000100656e61626c6564000000000000000000000000050000000000000000000000000800ba0811e021842dd004000800060042a2e65f435ba4804243e8f0230ad660280201f7bb03df6ee6d4ac2a34cd9e73aa6f71c1bbccd265120149b84ca4a5b8f14f94878cff947c5862e35c45d0b5edc94a9e413e62e442247f61e278f010431f5f4c587881cef6f00c3e8ae7113da306164e70bba47c46968b9363ee636cc5ba37ecd849b43d5768c0fd511da053460dceb6d8b0f5d545dc0694deb02ed1584fc4e3ba93915df9a19e6b169b491034f030065c51dfc9efcaa793e83382cbf3d284f1d9bb0bb5eedaa75f6273e0dcbba80f499fbe2e605abe184d8e3cf50488fed36d4033969b2e7ac21d448d7d5b", @ANYRES32=r19, @ANYBLOB="400001002400010071756575655f69640000000000000000000000000000000000000000000000000800030003000000080004001f00000008000600", @ANYRES32=r20, @ANYBLOB="38000100240001006e6f746966795f70656572735f696e74657276616c0000000000000000000000080003000300000008000400010000004c000100240001006c625f74785f6d6574686f64000000000000000000000000000000000000000008000300050000001c000400686173685f746f5f706f72745f6d617070696e67000000003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r21, @ANYBLOB="08000100", @ANYRES32=r22, @ANYBLOB="4400020040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000800030005000000100004006c6f616462616c616e63650008000100", @ANYRES32=r23, @ANYBLOB="bc00020040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000080003000b000000080004000900000008000600", @ANYRES32=r24, @ANYBLOB="40000100240001006c625f686173685f737461747300000000000000000000000000000000000000080003000b0000000800040003000000080007000000000038000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000800030003000000080004000200000008000100", @ANYRES32=r25, @ANYBLOB="b00102003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000008000300060000000400040008000600", @ANYRES32=r26, @ANYBLOB="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", @ANYRES32=r27, @ANYBLOB="c80002004c000100240001006c625f74785f6d6574686f64000000000000000000000000000000000000000008000300050000001c000400686173685f746f5f706f72745f6d617070696e67000000003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000008000300060000000400040008000600", @ANYRES32=r28, @ANYBLOB="3c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000080003000b0000000c0004000000010005000000"], 0x988}}, 0x4000040) [ 1192.315854][T18979] try_charge+0x1042/0x1410 [ 1192.320462][T18979] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1192.326438][T18979] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1192.332898][T18979] ? kasan_check_read+0x11/0x20 [ 1192.337866][T18979] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 1192.343437][T18979] mem_cgroup_try_charge+0x24d/0x5e0 [ 1192.349006][T18979] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 1192.354659][T18979] wp_page_copy+0x416/0x1770 [ 1192.359302][T18979] ? do_wp_page+0x486/0x1500 [ 1192.363911][T18979] ? pmd_pfn+0x1d0/0x1d0 [ 1192.368179][T18979] ? lock_downgrade+0x880/0x880 [ 1192.373045][T18979] ? swp_swapcount+0x540/0x540 [ 1192.377829][T18979] ? kasan_check_read+0x11/0x20 [ 1192.382796][T18979] ? do_raw_spin_unlock+0x57/0x270 [ 1192.388014][T18979] do_wp_page+0x48e/0x1500 [ 1192.392694][T18979] ? finish_mkwrite_fault+0x540/0x540 [ 1192.398089][T18979] __handle_mm_fault+0x22e3/0x3eb0 [ 1192.403308][T18979] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 1192.408864][T18979] ? find_held_lock+0x35/0x130 [ 1192.413855][T18979] ? handle_mm_fault+0x292/0xa90 [ 1192.418989][T18979] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1192.425238][T18979] ? kasan_check_read+0x11/0x20 [ 1192.430113][T18979] handle_mm_fault+0x3b7/0xa90 [ 1192.434916][T18979] __do_page_fault+0x5ef/0xda0 [ 1192.439705][T18979] do_page_fault+0x71/0x57d [ 1192.444229][T18979] ? page_fault+0x8/0x30 [ 1192.448833][T18979] page_fault+0x1e/0x30 [ 1192.453103][T18979] RIP: 0033:0x40be58 [ 1192.457102][T18979] Code: 00 00 49 8d be 88 00 00 00 48 89 ea 48 89 de 0f 85 dd 00 00 00 e8 a8 2c 00 00 8b 05 b2 c1 32 00 48 8b 15 43 46 66 00 83 c0 01 <89> 05 a2 c1 32 00 89 02 48 83 c4 08 5b 5d 41 5c 41 5d 41 5e 41 5f [ 1192.476978][T18979] RSP: 002b:0000000000a6fb60 EFLAGS: 00010202 [ 1192.483050][T18979] RAX: 0000000000000001 RBX: 0000001b30920014 RCX: 0000001b31920000 [ 1192.491037][T18979] RDX: 0000001b30920000 RSI: 00000000000014fb RDI: ffffffffdfcf74fb [ 1192.499308][T18979] RBP: 0000001b30920018 R08: 00000000dfcf74fb R09: 00000000dfcf74ff [ 1192.507373][T18979] R10: 0000000000a6fca0 R11: 0000000000000246 R12: 0000001b3092001c [ 1192.515350][T18979] R13: 0000000000123054 R14: 000000000075bf20 R15: 000000000075bf2c [ 1192.524591][T18979] memory: usage 307200kB, limit 307200kB, failcnt 2998 [ 1192.534239][T18979] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1192.542988][T18979] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1192.556963][T18979] Memory cgroup stats for /syz1: cache:0KB rss:216596KB rss_huge:172032KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:216596KB inactive_file:0KB active_file:0KB unevictable:0KB 06:30:29 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x40100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000]}) 06:30:29 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x10000000}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 06:30:29 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06030000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000006", 0x55}], 0x1}, 0x0) 06:30:29 executing program 3: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000480)='/dev/cuse\x00', 0x2842, 0x0) io_setup(0x2, 0x0) io_submit(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}]) 06:30:29 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06000000a843089100ff803900080008000c0000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000100)='/dev/snd/pcmC#D#p\x00', 0x5, 0x40a00) write$UHID_INPUT(r1, &(0x7f0000000280)={0x8, "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", 0x1000}, 0x1006) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_G_SELECTION(r2, 0xc040565e, &(0x7f00000000c0)={0xf, 0x2, 0x3, {0x9, 0x6, 0x0, 0x5}}) 06:30:29 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06020000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0x0) [ 1192.612573][T18979] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=6664,uid=0 [ 1192.631246][T18979] Memory cgroup out of memory: Killed process 6664 (syz-executor.1) total-vm:72708kB, anon-rss:2204kB, file-rss:35788kB, shmem-rss:0kB 06:30:29 executing program 3: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000480)='/dev/cuse\x00', 0x2842, 0x0) io_setup(0x2, &(0x7f0000000040)) io_submit(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}]) 06:30:29 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x40100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500000000000000]}) 06:30:29 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06020000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0x0) 06:30:29 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06030000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d40000000000000a", 0x55}], 0x1}, 0x0) 06:30:29 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f00000001c0)={0x0, 0x1ca, &(0x7f0000000000)=[{&(0x7f0000000140)="5500000018007fd500fe01b2a4a280568d31d347930a06000000a843089100ff803900080008000c0000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x5a}], 0x1}, 0x1) 06:30:29 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x3f000000}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 06:30:29 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06020000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0x0) 06:30:29 executing program 3: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000480)='/dev/cuse\x00', 0x2842, 0x0) io_setup(0x2, &(0x7f0000000040)) io_submit(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}]) 06:30:29 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06030000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d40000000000000c", 0x55}], 0x1}, 0x0) 06:30:29 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x8000) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06000000a843089100ff803900080008000c0000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0x0) 06:30:29 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x40100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600000000000000]}) 06:30:29 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06030000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d40000000000000e", 0x55}], 0x1}, 0x0) 06:30:29 executing program 3: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000480)='/dev/cuse\x00', 0x2842, 0x0) io_setup(0x2, &(0x7f0000000040)) io_submit(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}]) 06:30:29 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x40000000}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 06:30:29 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06020000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0x0) 06:30:29 executing program 4: r0 = socket$inet6(0x10, 0x0, 0xfffffffffffffffc) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x9) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06000000a843089100ff803900080008000c0000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0x0) 06:30:30 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x40100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700000000000000]}) 06:30:30 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06030000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d40000000000000f", 0x55}], 0x1}, 0x0) 06:30:30 executing program 4: r0 = socket$inet6(0x10, 0x4, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06000000a843089100ff803900080008000c0000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x10000000000000a0}, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x400, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) 06:30:30 executing program 3: openat$cuse(0xffffffffffffff9c, &(0x7f0000000480)='/dev/cuse\x00', 0x2842, 0x0) io_setup(0x2, &(0x7f0000000040)=0x0) io_submit(r0, 0x0, 0x0) 06:30:30 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06020000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0x0) 06:30:30 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x60000000}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 06:30:30 executing program 4: ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f0000000140)={0xffffffffffffffff}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x115, 0x4) r1 = accept4(0xffffffffffffffff, &(0x7f0000000000)=@nfc, &(0x7f0000000080)=0x80, 0x0) r2 = open(&(0x7f0000000100)='./file0\x00', 0x8000, 0x31) ioctl$TIOCSCTTY(r2, 0x540e, 0x6) recvmsg(r2, &(0x7f0000001300)={&(0x7f0000001340)=@hci, 0x32, &(0x7f00000013c0)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x17b, &(0x7f0000001200)=""/230, 0xe6}, 0x40000000) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)}, 0x40000) 06:30:30 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06030000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000010", 0x55}], 0x1}, 0x0) 06:30:30 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x40100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000000]}) 06:30:30 executing program 3: openat$cuse(0xffffffffffffff9c, &(0x7f0000000480)='/dev/cuse\x00', 0x2842, 0x0) io_setup(0x2, &(0x7f0000000040)=0x0) io_submit(r0, 0x0, 0x0) 06:30:30 executing program 4: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x406, 0xffffffffffffff9c) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000080)={0x1, [0x0]}, &(0x7f00000000c0)=0x381) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f00000001c0), &(0x7f0000000180)='./file0\x00', 0x0, 0x3081, 0x0) rmdir(&(0x7f0000000200)='./file0\x00') mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000100)={r1, 0x5}, &(0x7f0000000140)=0x8) r2 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06000000a843089100ff803900080008000c0000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0x0) 06:30:30 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06020000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0x0) 06:30:30 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06030000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d40000000000003f", 0x55}], 0x1}, 0x0) 06:30:30 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x65580000}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 06:30:30 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x40100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00000000000000]}) 06:30:30 executing program 3: openat$cuse(0xffffffffffffff9c, &(0x7f0000000480)='/dev/cuse\x00', 0x2842, 0x0) io_setup(0x2, &(0x7f0000000040)=0x0) io_submit(r0, 0x0, 0x0) 06:30:30 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x40100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00000000000000]}) 06:30:30 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06020000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0x0) 06:30:30 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x81000000}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 06:30:30 executing program 4: r0 = socket$inet6(0x10, 0xa, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06000000a843089100ff803900080008000c0000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0x0) 06:30:30 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06030000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000040", 0x55}], 0x1}, 0x0) 06:30:30 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x40100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000]}) 06:30:30 executing program 3: openat$cuse(0xffffffffffffff9c, &(0x7f0000000480)='/dev/cuse\x00', 0x2842, 0x0) io_setup(0x2, &(0x7f0000000040)=0x0) io_submit(r0, 0x0, &(0x7f0000000200)) 06:30:31 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x40100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800000000000000]}) 06:30:31 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06020000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0x0) 06:30:31 executing program 4: r0 = socket$inet6(0x10, 0x4, 0x6) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06000000a843089100ff803900080008000c0000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x289a412a}], 0x1}, 0x0) fcntl$addseals(r0, 0x409, 0x8) 06:30:31 executing program 3: openat$cuse(0xffffffffffffff9c, &(0x7f0000000480)='/dev/cuse\x00', 0x2842, 0x0) io_setup(0x2, &(0x7f0000000040)=0x0) io_submit(r0, 0x0, &(0x7f0000000200)) 06:30:31 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06030000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000060", 0x55}], 0x1}, 0x0) 06:30:31 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x88a8ffff}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 06:30:31 executing program 4: r0 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x9cc, 0x1) ioctl$TIOCPKT(r0, 0x5420, &(0x7f00000000c0)=0xb4) r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06000000a843089100ff803900080008000c0000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0x0) 06:30:31 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x40100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c00000000000000]}) 06:30:31 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06020000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0x0) 06:30:31 executing program 3: openat$cuse(0xffffffffffffff9c, &(0x7f0000000480)='/dev/cuse\x00', 0x2842, 0x0) io_setup(0x2, &(0x7f0000000040)=0x0) io_submit(r0, 0x0, &(0x7f0000000200)) 06:30:31 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06030000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000005865", 0x55}], 0x1}, 0x0) 06:30:31 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) mremap(&(0x7f00000d8000/0x3000)=nil, 0x3000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000334000/0x3000)=nil, 0x3000) madvise(&(0x7f00000e8000/0x4000)=nil, 0x4000, 0x8) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06000000a843089100bf803900080008000c0000dc13382d0000009b7a136ef75afb83de448daa72540d8102d27f1a59b32877878800060cec4fab91d400000000000000", 0x55}], 0x1}, 0x81) 06:30:31 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06020000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0x0) 06:30:31 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x9effffff}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 06:30:31 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x40100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6800000000000000]}) 06:30:31 executing program 3: openat$cuse(0xffffffffffffff9c, &(0x7f0000000480)='/dev/cuse\x00', 0x2842, 0x0) io_setup(0x2, &(0x7f0000000040)=0x0) io_submit(r0, 0x1, &(0x7f0000000200)=[0x0]) 06:30:31 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06030000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000081", 0x55}], 0x1}, 0x0) 06:30:31 executing program 3: openat$cuse(0xffffffffffffff9c, &(0x7f0000000480)='/dev/cuse\x00', 0x2842, 0x0) io_setup(0x2, &(0x7f0000000040)=0x0) io_submit(r0, 0x1, &(0x7f0000000200)=[0x0]) 06:30:31 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0xc3ffffff}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 06:30:31 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x400, 0x0) ioctl$BLKALIGNOFF(r1, 0x127a, &(0x7f0000000140)) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06000000a843089100ff803900080008000c0000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0x0) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x40000, 0x0) ioctl$TUNGETIFF(r2, 0x800454d2, &(0x7f00000000c0)) 06:30:31 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06020000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0x0) 06:30:31 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06030000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d4000000ffffa888", 0x55}], 0x1}, 0x0) [ 1195.178627][T19251] syz-executor.1 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=1000 [ 1195.245503][T19251] CPU: 0 PID: 19251 Comm: syz-executor.1 Not tainted 5.2.0-rc6+ #62 [ 1195.253617][T19251] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1195.263778][T19251] Call Trace: [ 1195.267283][T19251] dump_stack+0x172/0x1f0 [ 1195.271629][T19251] dump_header+0x10f/0xb6c [ 1195.276086][T19251] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1195.281990][T19251] ? ___ratelimit+0x60/0x595 [ 1195.286587][T19251] ? do_raw_spin_unlock+0x57/0x270 [ 1195.291887][T19251] oom_kill_process.cold+0x10/0x15 [ 1195.297005][T19251] out_of_memory+0x79a/0x1280 [ 1195.301694][T19251] ? lock_downgrade+0x880/0x880 [ 1195.306556][T19251] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1195.312902][T19251] ? oom_killer_disable+0x280/0x280 [ 1195.318212][T19251] ? find_held_lock+0x35/0x130 [ 1195.323045][T19251] mem_cgroup_out_of_memory+0x1ca/0x230 [ 1195.328683][T19251] ? memcg_event_wake+0x230/0x230 [ 1195.333840][T19251] ? do_raw_spin_unlock+0x57/0x270 [ 1195.338964][T19251] ? _raw_spin_unlock+0x2d/0x50 06:30:32 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x4) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06000000a843089100ff803900080008000c0000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0x0) [ 1195.343824][T19251] try_charge+0x1042/0x1410 [ 1195.348426][T19251] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1195.353986][T19251] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 1195.359593][T19251] ? find_held_lock+0x35/0x130 [ 1195.364362][T19251] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 1195.364389][T19251] __memcg_kmem_charge_memcg+0x7c/0x130 [ 1195.364405][T19251] ? memcg_kmem_put_cache+0xb0/0xb0 [ 1195.364424][T19251] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 1195.364445][T19251] __memcg_kmem_charge+0x136/0x300 06:30:32 executing program 4: r0 = socket$inet6(0x10, 0x24000, 0x20000000000) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)}, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x81, 0x900) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r1, 0x84, 0x65, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x6, @mcast2, 0xfffffffffffffff9}, @in6={0xa, 0x4e21, 0x7, @local, 0xfffffffffffffffa}, @in={0x2, 0x4e23, @rand_addr=0x5}, @in6={0xa, 0x4e21, 0xffff, @mcast1, 0x101}, @in={0x2, 0x4e22, @loopback}], 0x74) [ 1195.391727][T19251] __alloc_pages_nodemask+0x4bd/0x8d0 [ 1195.397121][T19251] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1195.403427][T19251] ? __alloc_pages_slowpath+0x28f0/0x28f0 [ 1195.409169][T19251] ? copy_process.part.0+0x1eea/0x6950 [ 1195.414671][T19251] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1195.420054][T19251] ? trace_hardirqs_on+0x67/0x220 [ 1195.425100][T19251] ? kasan_check_read+0x11/0x20 [ 1195.429964][T19251] copy_process.part.0+0x44e/0x6950 [ 1195.435419][T19251] ? __might_fault+0x12b/0x1e0 [ 1195.440207][T19251] ? __cleanup_sighand+0x60/0x60 06:30:32 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="5500000018007fd500fe01b2a4a280930a06000000a843089100ff803900080008000c0000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0x0) 06:30:32 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x8) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06000000a843089100ff803900080008000c0000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0x0) [ 1195.445159][T19251] ? lock_downgrade+0x880/0x880 [ 1195.450042][T19251] _do_fork+0x25d/0xfe0 [ 1195.454219][T19251] ? copy_init_mm+0x20/0x20 [ 1195.458743][T19251] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1195.464219][T19251] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1195.469693][T19251] ? do_syscall_64+0x26/0x680 [ 1195.474374][T19251] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1195.480441][T19251] ? do_syscall_64+0x26/0x680 [ 1195.485128][T19251] __x64_sys_clone+0xbf/0x150 [ 1195.489824][T19251] do_syscall_64+0xfd/0x680 [ 1195.494343][T19251] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1195.500367][T19251] RIP: 0033:0x459519 [ 1195.504275][T19251] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1195.523900][T19251] RSP: 002b:00007f76cf65fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1195.532572][T19251] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000459519 [ 1195.540624][T19251] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000000040100 [ 1195.549083][T19251] RBP: 000000000075bf20 R08: ffffffffffffffff R09: 0000000000000000 [ 1195.557058][T19251] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f76cf6606d4 [ 1195.565134][T19251] R13: 00000000004bf97d R14: 00000000004d1358 R15: 00000000ffffffff [ 1195.593314][T19251] memory: usage 307116kB, limit 307200kB, failcnt 3033 [ 1195.600393][T19251] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1195.621873][T19251] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1195.628760][T19251] Memory cgroup stats for /syz1: cache:0KB rss:215264KB rss_huge:169984KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:215264KB inactive_file:0KB active_file:0KB unevictable:0KB [ 1195.650592][T19251] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=6685,uid=0 [ 1195.666090][T19251] Memory cgroup out of memory: Killed process 6685 (syz-executor.1) total-vm:72708kB, anon-rss:2204kB, file-rss:35788kB, shmem-rss:0kB 06:30:32 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x40100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c00000000000000]}) 06:30:32 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06000000a843089100ff803900080008000c0000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0x0) r1 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vfio/vfio\x00', 0x0, 0x0) getpeername$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, &(0x7f0000000100)=0x10) 06:30:32 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0xf0ffffff}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 06:30:32 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06030000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d4000000ffffff9e", 0x55}], 0x1}, 0x0) 06:30:32 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06020000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0x0) 06:30:32 executing program 3: openat$cuse(0xffffffffffffff9c, &(0x7f0000000480)='/dev/cuse\x00', 0x2842, 0x0) io_setup(0x2, &(0x7f0000000040)=0x0) io_submit(r0, 0x1, &(0x7f0000000200)=[0x0]) 06:30:32 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x40100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7400000000000000]}) 06:30:32 executing program 4: r0 = socket$inet6(0x10, 0x100000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06000000a843089100ff803900080008000c0000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0x0) 06:30:32 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06020000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000f0ffff", 0x55}], 0x1}, 0x0) 06:30:32 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06030000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000001bba", 0x55}], 0x1}, 0x0) 06:30:32 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0xfeffffff}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 06:30:32 executing program 3: openat$cuse(0xffffffffffffff9c, &(0x7f0000000480)='/dev/cuse\x00', 0x2842, 0x0) io_setup(0x2, &(0x7f0000000040)=0x0) io_submit(r0, 0x1, &(0x7f0000000200)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) [ 1195.948402][T19309] syz-executor.1 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=1000 [ 1196.051244][T19309] CPU: 0 PID: 19309 Comm: syz-executor.1 Not tainted 5.2.0-rc6+ #62 [ 1196.059283][T19309] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1196.069345][T19309] Call Trace: [ 1196.072657][T19309] dump_stack+0x172/0x1f0 [ 1196.077003][T19309] dump_header+0x10f/0xb6c [ 1196.081437][T19309] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1196.087454][T19309] ? ___ratelimit+0x60/0x595 [ 1196.092053][T19309] ? do_raw_spin_unlock+0x57/0x270 06:30:32 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0xffffa888}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) [ 1196.097188][T19309] oom_kill_process.cold+0x10/0x15 [ 1196.102312][T19309] out_of_memory+0x79a/0x1280 [ 1196.107169][T19309] ? lock_downgrade+0x880/0x880 [ 1196.112031][T19309] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1196.118285][T19309] ? oom_killer_disable+0x280/0x280 [ 1196.123488][T19309] ? find_held_lock+0x35/0x130 [ 1196.128278][T19309] mem_cgroup_out_of_memory+0x1ca/0x230 [ 1196.133919][T19309] ? memcg_event_wake+0x230/0x230 [ 1196.139126][T19309] ? do_raw_spin_unlock+0x57/0x270 [ 1196.144336][T19309] ? _raw_spin_unlock+0x2d/0x50 06:30:32 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0xfffff000}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) [ 1196.149208][T19309] try_charge+0x1042/0x1410 [ 1196.153730][T19309] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1196.159374][T19309] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 1196.164934][T19309] ? find_held_lock+0x35/0x130 [ 1196.169709][T19309] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 1196.175366][T19309] __memcg_kmem_charge_memcg+0x7c/0x130 [ 1196.180933][T19309] ? memcg_kmem_put_cache+0xb0/0xb0 [ 1196.186149][T19309] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 1196.191721][T19309] __memcg_kmem_charge+0x136/0x300 [ 1196.196943][T19309] __alloc_pages_nodemask+0x4bd/0x8d0 [ 1196.202471][T19309] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1196.208722][T19309] ? __alloc_pages_slowpath+0x28f0/0x28f0 [ 1196.214457][T19309] ? copy_process.part.0+0x1eea/0x6950 [ 1196.219936][T19309] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1196.225237][T19309] ? trace_hardirqs_on+0x67/0x220 [ 1196.230275][T19309] copy_process.part.0+0x44e/0x6950 [ 1196.235497][T19309] ? __might_fault+0x12b/0x1e0 [ 1196.240492][T19309] ? __cleanup_sighand+0x60/0x60 [ 1196.245472][T19309] ? lock_downgrade+0x880/0x880 06:30:32 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0xffffff7f}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) [ 1196.250457][T19309] _do_fork+0x25d/0xfe0 [ 1196.254638][T19309] ? copy_init_mm+0x20/0x20 [ 1196.259154][T19309] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1196.264824][T19309] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1196.270491][T19309] ? do_syscall_64+0x26/0x680 [ 1196.275208][T19309] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1196.281448][T19309] ? do_syscall_64+0x26/0x680 [ 1196.286145][T19309] __x64_sys_clone+0xbf/0x150 [ 1196.290864][T19309] do_syscall_64+0xfd/0x680 [ 1196.295385][T19309] entry_SYSCALL_64_after_hwframe+0x49/0xbe 06:30:33 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0xffffff9e}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) [ 1196.301284][T19309] RIP: 0033:0x459519 [ 1196.305190][T19309] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1196.324911][T19309] RSP: 002b:00007f76cf65fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1196.333465][T19309] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000459519 [ 1196.341477][T19309] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000000040100 [ 1196.349480][T19309] RBP: 000000000075bf20 R08: ffffffffffffffff R09: 0000000000000000 [ 1196.357555][T19309] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f76cf6606d4 [ 1196.365712][T19309] R13: 00000000004bf97d R14: 00000000004d1358 R15: 00000000ffffffff [ 1196.378475][T19309] memory: usage 307200kB, limit 307200kB, failcnt 3064 [ 1196.386221][T19309] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1196.394142][T19309] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 06:30:33 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06020000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000020000", 0x55}], 0x1}, 0x0) [ 1196.409523][T19309] Memory cgroup stats for /syz1: cache:0KB rss:215252KB rss_huge:169984KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:215252KB inactive_file:0KB active_file:0KB unevictable:0KB 06:30:33 executing program 4: r0 = socket$inet6(0x10, 0x2, 0x2000000000c) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06000000a843089100ff803900080008000c0000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0x0) [ 1196.446281][T19309] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=6698,uid=0 [ 1196.480172][T19309] Memory cgroup out of memory: Killed process 6698 (syz-executor.1) total-vm:72708kB, anon-rss:2204kB, file-rss:35788kB, shmem-rss:0kB [ 1196.617490][T19308] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1196.662076][T19308] CPU: 0 PID: 19308 Comm: syz-executor.1 Not tainted 5.2.0-rc6+ #62 [ 1196.670463][T19308] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1196.680529][T19308] Call Trace: [ 1196.683832][T19308] dump_stack+0x172/0x1f0 [ 1196.688197][T19308] dump_header+0x10f/0xb6c [ 1196.692629][T19308] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1196.698542][T19308] ? ___ratelimit+0x60/0x595 [ 1196.703169][T19308] ? do_raw_spin_unlock+0x57/0x270 [ 1196.708483][T19308] oom_kill_process.cold+0x10/0x15 [ 1196.713717][T19308] out_of_memory+0x79a/0x1280 [ 1196.718570][T19308] ? oom_killer_disable+0x280/0x280 [ 1196.723925][T19308] ? find_held_lock+0x35/0x130 [ 1196.728678][T19308] mem_cgroup_out_of_memory+0x1ca/0x230 [ 1196.734220][T19308] ? memcg_event_wake+0x230/0x230 [ 1196.739231][T19308] ? do_raw_spin_unlock+0x57/0x270 [ 1196.744329][T19308] ? _raw_spin_unlock+0x2d/0x50 [ 1196.749172][T19308] try_charge+0xd45/0x1410 [ 1196.753616][T19308] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1196.759587][T19308] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1196.766011][T19308] ? kasan_check_read+0x11/0x20 [ 1196.770868][T19308] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 1196.776401][T19308] mem_cgroup_try_charge+0x24d/0x5e0 [ 1196.781699][T19308] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 1196.787348][T19308] __handle_mm_fault+0x1e1a/0x3eb0 [ 1196.792446][T19308] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 1196.799373][T19308] ? find_held_lock+0x35/0x130 [ 1196.804497][T19308] ? handle_mm_fault+0x292/0xa90 [ 1196.809477][T19308] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1196.815811][T19308] ? kasan_check_read+0x11/0x20 [ 1196.820647][T19308] handle_mm_fault+0x3b7/0xa90 [ 1196.825419][T19308] __do_page_fault+0x5ef/0xda0 [ 1196.830168][T19308] do_page_fault+0x71/0x57d [ 1196.834705][T19308] ? page_fault+0x8/0x30 [ 1196.839596][T19308] page_fault+0x1e/0x30 [ 1196.843890][T19308] RIP: 0033:0x410e5f [ 1196.847884][T19308] Code: 0f 84 c8 02 00 00 48 83 bd 78 ff ff ff 00 0f 84 f9 04 00 00 48 8b 95 68 ff ff ff 44 89 95 38 ff ff ff 4c 8d ac 10 00 f7 ff ff <49> 89 85 90 06 00 00 49 8d 85 10 03 00 00 49 89 95 98 06 00 00 41 [ 1196.867677][T19308] RSP: 002b:0000000000a6fae0 EFLAGS: 00010206 [ 1196.873769][T19308] RAX: 00007f76cf61f000 RBX: 0000000000020000 RCX: 000000000045956a [ 1196.881786][T19308] RDX: 0000000000021000 RSI: 0000000000021000 RDI: 0000000000000000 [ 1196.889762][T19308] RBP: 0000000000a6fbc0 R08: ffffffffffffffff R09: 0000000000000000 [ 1196.898066][T19308] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000a6fcb0 [ 1196.906026][T19308] R13: 00007f76cf63f700 R14: 0000000000000001 R15: 000000000075bfd4 [ 1196.920531][T19308] memory: usage 304864kB, limit 307200kB, failcnt 3064 [ 1196.927608][T19308] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1196.935354][T19308] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 06:30:33 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x40100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a00000000000000]}) 06:30:33 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06030000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d4000000fffffff0", 0x55}], 0x1}, 0x0) 06:30:33 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0xffffffc3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 06:30:33 executing program 3: openat$cuse(0xffffffffffffff9c, &(0x7f0000000480)='/dev/cuse\x00', 0x2842, 0x0) io_setup(0x2, &(0x7f0000000040)=0x0) io_submit(r0, 0x1, &(0x7f0000000200)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) 06:30:33 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06020000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000030000", 0x55}], 0x1}, 0x0) 06:30:33 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) r1 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x8, 0x8000) ioctl$UI_SET_LEDBIT(r1, 0x40045569, 0x1) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06000000a843089100ff803900080008000c0000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0x0) socket$inet6(0xa, 0x8080e, 0x5) [ 1196.942304][T19308] Memory cgroup stats for /syz1: cache:0KB rss:213092KB rss_huge:167936KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:213092KB inactive_file:0KB active_file:0KB unevictable:0KB [ 1196.964132][T19308] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=6973,uid=0 [ 1196.980721][T19308] Memory cgroup out of memory: Killed process 6973 (syz-executor.1) total-vm:72708kB, anon-rss:2204kB, file-rss:35788kB, shmem-rss:0kB [ 1196.996237][ T1044] oom_reaper: reaped process 6973 (syz-executor.1), now anon-rss:0kB, file-rss:34828kB, shmem-rss:0kB 06:30:33 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x40100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff00000000000000]}) 06:30:33 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06030000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d4000000000000fc", 0x55}], 0x1}, 0x0) 06:30:33 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06020000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000040000", 0x55}], 0x1}, 0x0) 06:30:33 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x8) r1 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x401, 0x0) getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffff9c, 0x84, 0xd, &(0x7f00000000c0)=@assoc_value={0x0, 0x400}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r1, 0x84, 0x79, &(0x7f0000000140)={r2, 0x9, 0x2}, 0x8) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06000000a843089100ff803900080008000c0000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0x0) 06:30:33 executing program 3: openat$cuse(0xffffffffffffff9c, &(0x7f0000000480)='/dev/cuse\x00', 0x2842, 0x0) io_setup(0x2, &(0x7f0000000040)=0x0) io_submit(r0, 0x1, &(0x7f0000000200)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) 06:30:33 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0xfffffff0}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 06:30:34 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x40100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000]}) 06:30:34 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06030000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d4000000fffffffc", 0x55}], 0x1}, 0x0) 06:30:34 executing program 4: r0 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x1000, 0x4000) getsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f00000000c0), &(0x7f0000000100)=0x4) r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06000000a843089100ff803900080008000c0000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0x0) 06:30:34 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06020000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000060000", 0x55}], 0x1}, 0x0) 06:30:34 executing program 3: [ 1197.514257][T19392] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1197.553412][T19392] CPU: 0 PID: 19392 Comm: syz-executor.1 Not tainted 5.2.0-rc6+ #62 06:30:34 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06020000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d4000000000a0000", 0x55}], 0x1}, 0x0) [ 1197.561532][T19392] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1197.571616][T19392] Call Trace: [ 1197.574920][T19392] dump_stack+0x172/0x1f0 [ 1197.579259][T19392] dump_header+0x10f/0xb6c [ 1197.583868][T19392] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1197.589681][T19392] ? ___ratelimit+0x60/0x595 [ 1197.594286][T19392] ? do_raw_spin_unlock+0x57/0x270 [ 1197.599413][T19392] oom_kill_process.cold+0x10/0x15 [ 1197.604547][T19392] out_of_memory+0x79a/0x1280 [ 1197.609236][T19392] ? lock_downgrade+0x880/0x880 [ 1197.614087][T19392] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1197.620361][T19392] ? oom_killer_disable+0x280/0x280 [ 1197.625582][T19392] ? find_held_lock+0x35/0x130 [ 1197.625607][T19392] mem_cgroup_out_of_memory+0x1ca/0x230 [ 1197.625620][T19392] ? memcg_event_wake+0x230/0x230 [ 1197.625640][T19392] ? do_raw_spin_unlock+0x57/0x270 [ 1197.625656][T19392] ? _raw_spin_unlock+0x2d/0x50 [ 1197.625676][T19392] try_charge+0x1042/0x1410 [ 1197.655768][T19392] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1197.661331][T19392] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1197.667589][T19392] ? kasan_check_read+0x11/0x20 [ 1197.672564][T19392] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 1197.678302][T19392] mem_cgroup_try_charge+0x24d/0x5e0 [ 1197.683605][T19392] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 1197.689251][T19392] wp_page_copy+0x416/0x1770 [ 1197.693845][T19392] ? do_wp_page+0x486/0x1500 [ 1197.698807][T19392] ? pmd_pfn+0x1d0/0x1d0 [ 1197.703063][T19392] ? lock_downgrade+0x880/0x880 [ 1197.707924][T19392] ? __pte_alloc_kernel+0x220/0x220 06:30:34 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0xfffffffe}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 06:30:34 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06020000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d4000000000c0000", 0x55}], 0x1}, 0x0) [ 1197.713131][T19392] ? kasan_check_read+0x11/0x20 [ 1197.717990][T19392] ? do_raw_spin_unlock+0x57/0x270 [ 1197.723210][T19392] do_wp_page+0x48e/0x1500 [ 1197.727629][T19392] ? do_raw_spin_lock+0x12a/0x2e0 [ 1197.732665][T19392] ? rwlock_bug.part.0+0x90/0x90 [ 1197.737618][T19392] ? finish_mkwrite_fault+0x540/0x540 [ 1197.742993][T19392] ? add_mm_counter_fast.part.0+0x40/0x40 [ 1197.748716][T19392] __handle_mm_fault+0x22e3/0x3eb0 [ 1197.753839][T19392] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 1197.759542][T19392] ? find_held_lock+0x35/0x130 [ 1197.764312][T19392] ? handle_mm_fault+0x292/0xa90 [ 1197.769273][T19392] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1197.775528][T19392] ? kasan_check_read+0x11/0x20 [ 1197.780388][T19392] handle_mm_fault+0x3b7/0xa90 [ 1197.785161][T19392] __do_page_fault+0x5ef/0xda0 [ 1197.790033][T19392] do_page_fault+0x71/0x57d [ 1197.794548][T19392] ? page_fault+0x8/0x30 [ 1197.798885][T19392] page_fault+0x1e/0x30 [ 1197.803132][T19392] RIP: 0033:0x40e6b8 06:30:34 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06020000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d4000000000e0000", 0x55}], 0x1}, 0x0) 06:30:34 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0xf0ffffffffffff}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) [ 1197.807069][T19392] Code: 8b 34 c6 4a 8d 04 2e 48 3d ff ff ff 7e 0f 86 77 ff ff ff bf d1 ea 4b 00 31 c0 e8 c3 35 ff ff 31 ff e8 0c 32 ff ff 0f 1f 40 00 <89> 3c b5 00 00 73 00 eb b6 31 ed 0f 1f 44 00 00 80 3d ae 1d 66 00 [ 1197.827024][T19392] RSP: 002b:0000000000a6fb00 EFLAGS: 00010246 [ 1197.833095][T19392] RAX: 00000000bf5795d8 RBX: 00000000d3f24cd9 RCX: 0000001b31920000 [ 1197.841092][T19392] RDX: 0000000000000000 RSI: 00000000000015d8 RDI: ffffffffbf5795d8 [ 1197.849059][T19392] RBP: 0000000000000006 R08: 00000000bf5795d8 R09: 00000000bf5795dc 06:30:34 executing program 4: mbind(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3, &(0x7f0000000080)=0x5, 0x3, 0x5) r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06000000a843089100ff803900080008000c0000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) 06:30:34 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06030000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d4000000000080fe", 0x55}], 0x1}, 0x0) [ 1197.857031][T19392] R10: 0000000000a6fca0 R11: 0000000000000246 R12: 000000000075bfa8 [ 1197.867024][T19392] R13: 0000000080000000 R14: 00007f76d1661008 R15: 0000000000000006 [ 1197.980120][T19392] memory: usage 307200kB, limit 307200kB, failcnt 3080 [ 1197.987346][T19392] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1198.001227][T19392] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1198.008103][T19392] Memory cgroup stats for /syz1: cache:0KB rss:215232KB rss_huge:169984KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:215232KB inactive_file:0KB active_file:0KB unevictable:0KB 06:30:34 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x40100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}) 06:30:34 executing program 3: 06:30:34 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x20080, 0x0) setsockopt$inet_buf(r1, 0x0, 0x27, &(0x7f00000000c0)="46858148f4655691b5332561df100da1761ac7815b515f0b13e23fd1d01c52ca45a88381803da311d5ee22b0ff58b74fa3b5b27072e5ccdae1b4033912b003a1d0f496d4300f", 0x46) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06000000a843089100ff803900080008000c0000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0x0) 06:30:34 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06020000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d4000000000f0000", 0x55}], 0x1}, 0x0) 06:30:34 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06030000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d40000000000c0fe", 0x55}], 0x1}, 0x0) [ 1198.039485][T19392] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=7023,uid=0 [ 1198.060403][T19392] Memory cgroup out of memory: Killed process 7023 (syz-executor.1) total-vm:72708kB, anon-rss:2204kB, file-rss:35788kB, shmem-rss:0kB 06:30:34 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x100000000000000}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 06:30:34 executing program 3: 06:30:34 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x3e5, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a28093e905000000a843089100ff803900080008000c0008dc13382d0000009b7a136e01000000de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0xfffffffffffffe7d}], 0x1, 0x0, 0xfffffffffffffdf3}, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x1, 0x2) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x400280, 0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000300)=0x0) fstat(r0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_generic(r2, &(0x7f0000000640)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000600)={&(0x7f00000003c0)={0x214, 0x3f, 0x800, 0x70bd26, 0x25dfdbfc, {0x1d}, [@typed={0x8, 0x70, @fd=r2}, @generic="d2ddc18214e3ad450a34c024806a1eeb03093112162c4c4c32ff05669dfded2b5a0f8f20e6715d88fd16d134f90962daf45ad2be8ea77c61fb31540361fad07fde82a6479ecd26a6c7c7a6cb31904138082e40523f47bc8f98d3e6fa43f7d2f3ad77618e62238a63e70272a3f16c3f745938d9e73ea5a2c56f01da372622cb46614ad897", @generic="4e852b3b45a809c56657020d41411f8439cc7f16b2f3cc9533779b3eae95b7de624e28221a33b8965f7260f51afd18a6df30e49d956545b2d19bb00cb7a5a2f1840b2fd4b1806d6504bd3309566fbb6f190d700e74c8d13ca72a409632547ea2c32418e808c2eb27e994b27e0a7899db4ab94f38d104e89fda835c68d213073cbb1c74628cc92fed1b50e7848cff67ee926eb51d8e6bc7ef9f33f86e88a4cb6071ad110f12071318b5adb561ee2cfa549c5ace3323ff3fb2e55b759876cf63959e12fb8a0c5205af83f05068732180822ae0da78a96d0185d70d393d1ca2e638f2a6af3915b72bfd07e4eb5a733119cbe0dee84c5cf8ec814ba21b37", @typed={0x4, 0x94}, @typed={0x8, 0x27, @fd=r1}, @typed={0x8, 0x6d, @u32=0x7fff00000000000}, @nested={0x64, 0x6, [@typed={0x8, 0x3, @pid=r3}, @typed={0x8, 0x6b, @str='\x00'}, @typed={0x4, 0x27}, @generic="9691161e240cab9e683498c2bd83f9fdfc55449397d727af6bb52367580b237144e52f5560030f951b10bfc23b7fe68823c784ca1aaac2d7221fcf63b8ab5cd22c9250", @typed={0x8, 0xf, @uid=r4}]}]}, 0x214}, 0x1, 0x0, 0x0, 0x40}, 0x80) openat$rtc(0xffffffffffffff9c, &(0x7f0000000740)='/dev/rtc0\x00', 0x242002, 0x0) r5 = openat(r0, &(0x7f0000000100)='./file0\x00', 0x0, 0x10) r6 = syz_open_dev$swradio(&(0x7f0000000140)='/dev/swradio#\x00', 0x0, 0x2) r7 = openat$null(0xffffffffffffff9c, &(0x7f0000000180)='/dev/null\x00', 0x105100, 0x0) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000280)=ANY=[@ANYBLOB="0000000005000000", @ANYRES32=r1, @ANYBLOB="0000000000400000000000000010000000000000", @ANYRES32=r2, @ANYBLOB="000000000010010000000000b04dda8643b0659e", @ANYRES32=r5, @ANYBLOB="0000000000100100000000000000010001000000", @ANYRES32=r6, @ANYBLOB="00000000000000000100000000f0ffff00000000", @ANYRES32=r7, @ANYBLOB="35e16cf2"]) 06:30:34 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06020000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000100000", 0x55}], 0x1}, 0x0) 06:30:34 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06030000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d4000000000000ff", 0x55}], 0x1}, 0x0) 06:30:35 executing program 3: r0 = socket$unix(0x1, 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000640)='net/unix\x00') perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r0, r1, 0x0, 0x800000bf) 06:30:35 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x40100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}) 06:30:35 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x200000000000000}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 06:30:35 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06030000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000088a8ffff", 0x55}], 0x1}, 0x0) 06:30:35 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06020000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000600000", 0x55}], 0x1}, 0x0) 06:30:35 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) r1 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x480) ioctl$BLKGETSIZE(r1, 0x1260, &(0x7f00000000c0)) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06000000a843089100ff803900080008000c0000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0x0) 06:30:35 executing program 3: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x400040000000001, 0x0) bind$unix(r1, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) r2 = syz_open_procfs(0x0, &(0x7f0000000640)='net/unix\x00') r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070") sendfile(r0, r2, 0x0, 0x800000bf) 06:30:35 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x40100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}) 06:30:35 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06030000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000f0ffff", 0x55}], 0x1}, 0x0) 06:30:35 executing program 4: r0 = socket$inet6(0x10, 0x1001, 0xfffffffffffffffe) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06000000a843089100ff803900080008000c0000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0x0) 06:30:35 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06020000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000f00000", 0x55}], 0x1}, 0x0) 06:30:35 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x300000000000000}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 06:30:35 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x13, 0x5d}}, &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0x487, &(0x7f000000cf3d)=""/195}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0xe, 0x0, &(0x7f00000001c0)="a5ad796efd2f973cc870bd6488a8", 0x0, 0x6000}, 0x28) 06:30:35 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x40100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}) 06:30:35 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06030000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d40000007fffffff", 0x55}], 0x1}, 0x0) 06:30:35 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06020000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000fc0000", 0x55}], 0x1}, 0x0) 06:30:35 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x40100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) 06:30:35 executing program 4: r0 = socket$inet6(0x10, 0x3, 0xffffffffffffff05) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06000000a843089100ff803900080008000c0000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0x0) r1 = syz_open_dev$amidi(&(0x7f00000000c0)='/dev/amidi#\x00', 0xffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@empty, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@multicast1}}, &(0x7f0000000280)=0xe8) socket$caif_stream(0x25, 0x1, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x10000, 0x30}, &(0x7f0000000380)=0xc) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f00000003c0)={r3, @in={{0x2, 0x4e22, @local}}, 0xc9c3, 0x9, 0x5, 0x6, 0x1d}, &(0x7f0000000480)=0x98) connect$caif(r1, &(0x7f0000000300)=@rfm={0x25, 0xe98, "e56be84a4ab68a192c759793f3284eb6"}, 0x18) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f00000004c0)={r4, @in6={{0xa, 0x4e20, 0x5, @remote, 0xcd0}}, 0xff, 0x80000000, 0x1, 0xfffffffe00000, 0x933}, &(0x7f0000000580)=0x98) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000002c0)={r2, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x10) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x40000, 0x0) 06:30:35 executing program 3: setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0x69, 0x0, 0x1fe) r0 = socket$unix(0x1, 0x5, 0x0) r1 = fcntl$dupfd(r0, 0x200000000a, 0xffffffffffffffff) read(r0, &(0x7f0000000480)=""/4096, 0x1000) fcntl$dupfd(r1, 0xa, 0xffffffffffffffff) connect$unix(r0, &(0x7f0000000000)=@abs={0x1, 0x0, 0x2}, 0x8) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r3, 0x0) fdatasync(r0) connect$unix(r2, &(0x7f0000000440)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r4 = accept$inet(r3, 0x0, 0x0) sendto(r4, &(0x7f0000000040), 0xfe81, 0x0, 0x0, 0x100000118) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0x68, &(0x7f0000000080)={{0x18, 0x0, 0x4a}, {0x18, 0x2}, 0x9, [0x8, 0x5, 0x10000, 0x2, 0x401, 0x1735, 0x2, 0x934]}, 0x3c) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x1080000) 06:30:35 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x400000000000000}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 06:30:35 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06020000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d4000000005a0200", 0x55}], 0x1}, 0x0) 06:30:35 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06030000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d40000009effffff", 0x55}], 0x1}, 0x0) 06:30:35 executing program 4: socket$vsock_dgram(0x28, 0x2, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) acct(&(0x7f0000000340)='./file0\x00') sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06000000a843089100ff803900080008000c0000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0x0) getsockname$unix(r0, &(0x7f0000000080), &(0x7f0000000100)=0x6e) r1 = accept4(r0, &(0x7f0000000140)=@vsock={0x28, 0x0, 0x0, @hyper}, &(0x7f00000001c0)=0x80, 0x800) getsockname$unix(r1, &(0x7f0000000280)=@abs, &(0x7f0000000300)=0x6e) ioctl$PPPIOCGCHAN(r1, 0x80047437, &(0x7f0000000380)) 06:30:35 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$VIDIOC_G_CROP(r1, 0xc01456b8, &(0x7f000000a240)={0x0, {0x14, 0x14}}) 06:30:36 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x40100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}) 06:30:36 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x500000000000000}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 06:30:36 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x40100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}) 06:30:36 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06020000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000300", 0x55}], 0x1}, 0x0) 06:30:36 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06030000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d4000000f0ffffff", 0x55}], 0x1}, 0x0) 06:30:36 executing program 3: r0 = socket$inet_tcp(0x2, 0x3, 0x6) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) 06:30:36 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x40100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa]}) 06:30:36 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06000000a843089100ff803900080008000c0000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x180}, 0x0) 06:30:36 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000140)={'bridge0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="0f"]}) 06:30:36 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06030000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d4000000fcffffff", 0x55}], 0x1}, 0x0) 06:30:36 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x600000000000000}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 06:30:36 executing program 4: r0 = socket$inet6(0x10, 0x80001, 0x1c) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06000000a843089100ff803900080008000c0000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0x0) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xa) r1 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x9, 0x200002) sysfs$3(0x3) getsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, &(0x7f00000000c0), &(0x7f0000000100)=0x4) 06:30:36 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06020000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000600", 0x55}], 0x1}, 0x0) 06:30:36 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x40100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48]}) 06:30:36 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000080)) 06:30:36 executing program 4: r0 = socket$inet6(0x10, 0x7, 0x5662) r1 = socket$inet6(0xa, 0xa, 0x800) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280), &(0x7f00000002c0)=0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x2c, &(0x7f0000000080)=[@in={0x2, 0x4e22, @rand_addr=0xa4}, @in6={0xa, 0x4e21, 0x9, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0xff}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000140)={r2, 0x1}, &(0x7f0000000180)=0x8) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06000000a843089100ff803900080008000c0000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0x0) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000001c0)={0x0, 0x20}, 0x8) [ 1199.897177][T31310] syz-executor.1 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=0 [ 1199.980375][T31310] CPU: 0 PID: 31310 Comm: syz-executor.1 Not tainted 5.2.0-rc6+ #62 [ 1199.988523][T31310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1199.998611][T31310] Call Trace: [ 1200.002048][T31310] dump_stack+0x172/0x1f0 [ 1200.006486][T31310] dump_header+0x10f/0xb6c [ 1200.010923][T31310] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1200.016741][T31310] ? ___ratelimit+0x60/0x595 [ 1200.016757][T31310] ? do_raw_spin_unlock+0x57/0x270 [ 1200.016778][T31310] oom_kill_process.cold+0x10/0x15 [ 1200.031725][T31310] out_of_memory+0x79a/0x1280 [ 1200.040520][T31310] ? lock_downgrade+0x880/0x880 [ 1200.040533][T31310] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1200.040544][T31310] ? oom_killer_disable+0x280/0x280 [ 1200.040551][T31310] ? find_held_lock+0x35/0x130 [ 1200.040566][T31310] mem_cgroup_out_of_memory+0x1ca/0x230 [ 1200.040575][T31310] ? memcg_event_wake+0x230/0x230 [ 1200.040586][T31310] ? do_raw_spin_unlock+0x57/0x270 06:30:36 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06030000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0x0) [ 1200.040597][T31310] ? _raw_spin_unlock+0x2d/0x50 [ 1200.040607][T31310] try_charge+0x1042/0x1410 [ 1200.040619][T31310] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1200.040627][T31310] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 1200.040635][T31310] ? find_held_lock+0x35/0x130 [ 1200.040644][T31310] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 1200.040658][T31310] __memcg_kmem_charge_memcg+0x7c/0x130 [ 1200.040667][T31310] ? memcg_kmem_put_cache+0xb0/0xb0 [ 1200.040677][T31310] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 1200.040694][T31310] __memcg_kmem_charge+0x136/0x300 06:30:36 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06030000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d4000000ffffffff", 0x55}], 0x1}, 0x0) 06:30:36 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06020000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000a00", 0x55}], 0x1}, 0x0) [ 1200.040710][T31310] __alloc_pages_nodemask+0x4bd/0x8d0 [ 1200.040723][T31310] ? __pud_alloc+0x1d3/0x250 [ 1200.040737][T31310] ? __alloc_pages_slowpath+0x28f0/0x28f0 [ 1200.040748][T31310] ? __pud_alloc+0x1d3/0x250 [ 1200.040766][T31310] ? lock_downgrade+0x880/0x880 [ 1200.040780][T31310] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1200.040799][T31310] alloc_pages_current+0x107/0x210 [ 1200.040813][T31310] ? do_raw_spin_unlock+0x57/0x270 [ 1200.040829][T31310] __pmd_alloc+0x41/0x460 [ 1200.040840][T31310] ? pmd_val+0x100/0x100 [ 1200.040860][T31310] pmd_alloc+0x10c/0x180 [ 1200.177740][T31310] copy_page_range+0x63c/0x1fc0 [ 1200.191243][T31310] ? find_held_lock+0x35/0x130 [ 1200.191261][T31310] ? dup_mm+0x60d/0x13b0 [ 1200.191280][T31310] ? pmd_alloc+0x180/0x180 [ 1200.191291][T31310] ? vma_gap_callbacks_rotate+0x62/0x80 [ 1200.191311][T31310] ? __rb_insert_augmented+0x22f/0xdf0 [ 1200.191329][T31310] ? validate_mm_rb+0xa3/0xc0 [ 1200.220720][T31310] ? __vma_link_rb+0x279/0x370 [ 1200.225497][T31310] ? kasan_check_write+0x14/0x20 06:30:36 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06020000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000c00", 0x55}], 0x1}, 0x0) [ 1200.230453][T31310] dup_mm+0x9c4/0x13b0 [ 1200.234644][T31310] ? vm_area_dup+0x170/0x170 [ 1200.239352][T31310] ? debug_mutex_init+0x2d/0x60 [ 1200.244266][T31310] copy_process.part.0+0x2d02/0x6950 [ 1200.249946][T31310] ? __cleanup_sighand+0x60/0x60 [ 1200.254912][T31310] _do_fork+0x25d/0xfe0 [ 1200.259195][T31310] ? copy_init_mm+0x20/0x20 [ 1200.263817][T31310] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1200.269290][T31310] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1200.275030][T31310] ? do_syscall_64+0x26/0x680 [ 1200.279750][T31310] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1200.285838][T31310] ? do_syscall_64+0x26/0x680 [ 1200.290715][T31310] __x64_sys_clone+0xbf/0x150 [ 1200.295498][T31310] do_syscall_64+0xfd/0x680 [ 1200.300199][T31310] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1200.306269][T31310] RIP: 0033:0x457aea [ 1200.310169][T31310] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 06:30:37 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06000000a843089100ff803900080008000c0200dc13382d0000009b7aff010000000000008daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x4b}, 0xfffff7fffffffffc) 06:30:37 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x700000000000000}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) [ 1200.329983][T31310] RSP: 002b:0000000000a6fd30 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1200.338499][T31310] RAX: ffffffffffffffda RBX: 0000000000a6fd30 RCX: 0000000000457aea [ 1200.346505][T31310] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 1200.354563][T31310] RBP: 0000000000a6fd70 R08: 0000000000000001 R09: 0000555555747940 [ 1200.362711][T31310] R10: 0000555555747c10 R11: 0000000000000246 R12: 0000000000000001 [ 1200.362720][T31310] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000a6fdc0 06:30:37 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06030000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0x0) 06:30:37 executing program 4: r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendto(r0, &(0x7f0000000280)="e1e99e3e037a1d3715660594ca4a81266cbf368643d5c45f047c60688fbf2336d9b9e78125740dadee2fba7bd6edcad33fbe5b24c8870cd5e71d16ef59547bb609c0cc82100c20db4003a16810b77964ce04cae8fb3f532dec906b1b8f2c419fbeb8944ddd27375ccdd1cfb773dbf7a4acb95d146b7489de666f35151204cd1c1641c1", 0x83, 0x4000000, &(0x7f0000000180)=@rxrpc=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e22, @multicast1}}, 0x80) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06000000a843089100ff803900080008000c0000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}]}, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000140)={&(0x7f0000000100)='./file0\x00', 0x0, 0x18}, 0x10) r1 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x1, 0x101000) ioctl$SNDRV_TIMER_IOCTL_TREAD(r1, 0x40045402, &(0x7f00000000c0)) 06:30:37 executing program 3: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x40100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7400000000000000]}) [ 1200.479392][T31310] memory: usage 307200kB, limit 307200kB, failcnt 3134 [ 1200.507055][T31310] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1200.531520][T31310] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1200.557387][T31310] Memory cgroup stats for /syz1: cache:0KB rss:213904KB rss_huge:167936KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:213904KB inactive_file:0KB active_file:0KB unevictable:0KB 06:30:37 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0xa00000000000000}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 06:30:37 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0xc3ffffff}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 06:30:37 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x40100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c]}) 06:30:37 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06020000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000e00", 0x55}], 0x1}, 0x0) 06:30:37 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="5500000018007fd500fe01b2a4a280930a06000000a843089100ff803900080008000c0000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0x8000000000) 06:30:37 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06030000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0x0) [ 1200.620120][T31310] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=7083,uid=0 [ 1200.641257][T31310] Memory cgroup out of memory: Killed process 7083 (syz-executor.1) total-vm:72708kB, anon-rss:2204kB, file-rss:35788kB, shmem-rss:0kB [ 1200.759328][T19664] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 06:30:37 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06020000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000f00", 0x55}], 0x1}, 0x0) 06:30:37 executing program 3 (fault-call:2 fault-nth:0): r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000480)='/dev/cuse\x00', 0x2842, 0x0) io_setup(0x2, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}]) 06:30:37 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0xc00000000000000}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 06:30:37 executing program 4: r0 = socket$inet6(0x10, 0x6, 0xb) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06000000a843089100ff803900080008000c0000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0x0) 06:30:37 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06030000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0x0) 06:30:37 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x40100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68]}) 06:30:37 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06020000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000c51400", 0x55}], 0x1}, 0x0) [ 1201.036917][T19689] FAULT_INJECTION: forcing a failure. [ 1201.036917][T19689] name failslab, interval 1, probability 0, space 0, times 0 [ 1201.107554][T19689] CPU: 1 PID: 19689 Comm: syz-executor.3 Not tainted 5.2.0-rc6+ #62 [ 1201.115687][T19689] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1201.125754][T19689] Call Trace: [ 1201.129190][T19689] dump_stack+0x172/0x1f0 [ 1201.133558][T19689] should_fail.cold+0xa/0x15 [ 1201.138180][T19689] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1201.144411][T19689] ? ___might_sleep+0x163/0x280 [ 1201.149370][T19689] __should_failslab+0x121/0x190 [ 1201.154326][T19689] should_failslab+0x9/0x14 [ 1201.158834][T19689] kmem_cache_alloc+0x2af/0x6f0 [ 1201.158853][T19689] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1201.158868][T19689] ? _copy_from_user+0xdd/0x150 [ 1201.158890][T19689] io_submit_one+0x10f/0x2ef0 [ 1201.179861][T19689] ? mark_held_locks+0xf0/0xf0 [ 1201.184902][T19689] ? lookup_ioctx+0x1d7/0x830 [ 1201.189698][T19689] ? __might_fault+0x12b/0x1e0 [ 1201.194576][T19689] ? find_held_lock+0x35/0x130 [ 1201.199388][T19689] ? ioctx_alloc+0x1db0/0x1db0 [ 1201.204276][T19689] ? __might_fault+0x12b/0x1e0 [ 1201.209253][T19689] __x64_sys_io_submit+0x1bd/0x570 [ 1201.214381][T19689] ? __x64_sys_io_submit+0x1bd/0x570 [ 1201.219691][T19689] ? __ia32_sys_io_destroy+0x420/0x420 [ 1201.225179][T19689] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1201.230945][T19689] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1201.236413][T19689] ? do_syscall_64+0x26/0x680 [ 1201.241110][T19689] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1201.247218][T19689] ? do_syscall_64+0x26/0x680 [ 1201.251909][T19689] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1201.257377][T19689] do_syscall_64+0xfd/0x680 [ 1201.261896][T19689] ? do_syscall_64+0xfd/0x680 [ 1201.266676][T19689] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1201.272583][T19689] RIP: 0033:0x459519 [ 1201.276487][T19689] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1201.296493][T19689] RSP: 002b:00007f41c3458c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 06:30:38 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06020000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000003f00", 0x55}], 0x1}, 0x0) 06:30:38 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06030000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0x0) 06:30:38 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x40100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c]}) 06:30:38 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x10000, 0x0) setsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f00000000c0)=0x2, 0x4) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06000000a843089100ff803900080008000c0000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1, 0x0, 0x31d}, 0x0) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000100), 0x0) fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000100)='trusted.overlay.nlink\x00', &(0x7f0000000140)={'L+', 0xfff}, 0x28, 0x2) [ 1201.305103][T19689] RAX: ffffffffffffffda RBX: 00007f41c3458c90 RCX: 0000000000459519 [ 1201.313136][T19689] RDX: 0000000020000200 RSI: 0000000000000001 RDI: 00007f41c3438000 [ 1201.321212][T19689] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1201.329313][T19689] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f41c34596d4 [ 1201.337374][T19689] R13: 00000000004c0898 R14: 00000000004d3548 R15: 0000000000000004 06:30:38 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06030000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0x0) 06:30:38 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0xe00000000000000}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 06:30:38 executing program 3 (fault-call:2 fault-nth:1): r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000480)='/dev/cuse\x00', 0x2842, 0x0) io_setup(0x2, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}]) 06:30:38 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/capi/capi20ncci\x00', 0x3fe, 0x0) accept$unix(r1, &(0x7f00000000c0), &(0x7f0000000140)=0x6e) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06000000a843089100ff803900080008000c0000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0x0) 06:30:38 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06030000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0x0) 06:30:38 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06020000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000004000", 0x55}], 0x1}, 0x0) 06:30:38 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x40100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x74]}) 06:30:38 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06030000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0x0) 06:30:38 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x40100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a]}) 06:30:38 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06020000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000655800", 0x55}], 0x1}, 0x0) 06:30:38 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0xf20000000000000}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 06:30:38 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06000000a843089100ff803900080008000c0000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/autofs\x00', 0x0, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000140)={0x0, @broadcast, @multicast2}, &(0x7f00000005c0)=0xfffffffffffffe44) setsockopt$IP_VS_SO_SET_DELDEST(r1, 0x0, 0x488, &(0x7f00000000c0)={{0x2e, @multicast2, 0x4e20, 0x1, 'fo\x00', 0x3e, 0x101, 0xa}, {@multicast1, 0x4e22, 0x0, 0x9, 0x800, 0x6}}, 0x44) sendmsg$can_raw(r1, &(0x7f00000003c0)={&(0x7f00000002c0)={0x1d, r2}, 0x10, &(0x7f0000000380)={&(0x7f0000000300)=@canfd={{0x3, 0x3, 0x4, 0x5}, 0x1, 0x1, 0x0, 0x0, "9ee40206a8691ba1be55cc1638d94a7a8ac8625b10c0480bc3a41bcffcbccde9deea60886615c31b9d965a755cba165b226b085204763985a54b997c846d99d0"}, 0x48}}, 0x0) syz_open_dev$cec(&(0x7f0000000080)='/dev/cec#\x00', 0x0, 0x2) 06:30:38 executing program 3: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000480)='/dev/cuse\x00', 0x2842, 0x0) io_setup(0x2, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}]) 06:30:38 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06020000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000025a00", 0x55}], 0x1}, 0x0) 06:30:38 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06030000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0x0) 06:30:38 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x40100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300]}) 06:30:38 executing program 3: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000480)='/dev/cuse\x00', 0x2842, 0x0) io_setup(0x2, &(0x7f0000000040)=0x0) io_submit(r1, 0x2, &(0x7f0000000200)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}]) 06:30:38 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x1000000000000000}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 06:30:38 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) r1 = dup2(r0, r0) write$FUSE_DIRENT(r1, &(0x7f0000000080)={0xf8, 0x0, 0x7, [{0x5, 0xfb4d, 0xf, 0x7fffffff, '\'em1mime_type-^'}, {0x6, 0x3, 0x0, 0x800}, {0x4, 0x1ff, 0x9, 0xfffffffffffffffa, 'keyring[@'}, {0x4, 0xb7, 0x1, 0x6, '-'}, {0x1, 0xf9d, 0x19, 0xc, 'selinuxnodevsystem\xeccpuset'}, {0x4, 0x0, 0xf, 0x9, 'mime_type+ppp0,'}]}, 0xf8) ioctl$sock_TIOCOUTQ(r1, 0x5411, &(0x7f0000000180)) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06000000a843089100ff803900080008000c0000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0x0) 06:30:38 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06020000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000006000", 0x55}], 0x1}, 0x0) 06:30:38 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06030000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0x0) 06:30:38 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x40100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500]}) 06:30:38 executing program 3: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000480)='/dev/cuse\x00', 0x2842, 0x0) io_setup(0x2, &(0x7f0000000040)=0x0) io_submit(r1, 0x4, &(0x7f0000000200)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}]) 06:30:38 executing program 4: r0 = socket$inet6(0x10, 0x806, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06000000a843089100ff803900080008000c0000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x100000000000028b}, 0x0) 06:30:39 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06030000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0x0) 06:30:39 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06020000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000586500", 0x55}], 0x1}, 0x0) 06:30:39 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x3f00000000000000}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 06:30:39 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x20000, 0x0) setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f00000000c0)={0x80, 0xfff}, 0x2) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06000000a843089100ff803900080008000c0000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0x0) 06:30:39 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06030000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0x0) 06:30:39 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06020000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000fe8000", 0x55}], 0x1}, 0x0) 06:30:39 executing program 3: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000480)='/dev/cuse\x00', 0x2842, 0x0) io_setup(0x2, &(0x7f0000000040)=0x0) io_submit(r1, 0x9, &(0x7f0000000200)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}]) 06:30:39 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x40100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600]}) 06:30:39 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$sock_int(r0, 0x1, 0x0, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r1 = socket$inet6(0x10, 0x3, 0x0) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000100)={0x80}, 0x1) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06000000a843089100ff803900080008000c0000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0x0) 06:30:39 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x4000000000000000}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 06:30:39 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x40100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700]}) 06:30:39 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06030000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0x0) 06:30:39 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06020000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000008100", 0x55}], 0x1}, 0x0) 06:30:39 executing program 3: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000480)='/dev/cuse\x00', 0x2842, 0x0) io_setup(0x2, &(0x7f0000000040)=0x0) io_submit(r1, 0xc, &(0x7f0000000200)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}]) 06:30:39 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06000000a843089100ff803900080008000c0000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0x0) syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x2, 0x200000) 06:30:39 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x40100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00]}) 06:30:39 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06030000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0x0) 06:30:39 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x6000000000000000}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 06:30:39 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06000000a843089100ff803900080008000c0000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x9}], 0x1}, 0x0) 06:30:39 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06020000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000fec000", 0x55}], 0x1}, 0x0) 06:30:39 executing program 3: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000480)='/dev/cuse\x00', 0x2842, 0x0) io_setup(0x2, &(0x7f0000000040)=0x0) io_submit(r1, 0x300, &(0x7f0000000200)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}]) [ 1203.074194][T31310] syz-executor.1 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=0 [ 1203.175663][T31310] CPU: 1 PID: 31310 Comm: syz-executor.1 Not tainted 5.2.0-rc6+ #62 [ 1203.183711][T31310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1203.193868][T31310] Call Trace: [ 1203.197166][T31310] dump_stack+0x172/0x1f0 [ 1203.201607][T31310] dump_header+0x10f/0xb6c [ 1203.206031][T31310] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1203.212070][T31310] ? ___ratelimit+0x60/0x595 [ 1203.216755][T31310] ? do_raw_spin_unlock+0x57/0x270 [ 1203.221884][T31310] oom_kill_process.cold+0x10/0x15 [ 1203.227003][T31310] out_of_memory+0x79a/0x1280 [ 1203.231701][T31310] ? lock_downgrade+0x880/0x880 [ 1203.236561][T31310] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1203.242831][T31310] ? oom_killer_disable+0x280/0x280 [ 1203.248044][T31310] ? find_held_lock+0x35/0x130 [ 1203.252828][T31310] mem_cgroup_out_of_memory+0x1ca/0x230 [ 1203.258379][T31310] ? memcg_event_wake+0x230/0x230 [ 1203.263420][T31310] ? do_raw_spin_unlock+0x57/0x270 [ 1203.268542][T31310] ? _raw_spin_unlock+0x2d/0x50 [ 1203.273407][T31310] try_charge+0x1042/0x1410 [ 1203.277930][T31310] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1203.283495][T31310] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 1203.289051][T31310] ? find_held_lock+0x35/0x130 [ 1203.293832][T31310] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 1203.299427][T31310] __memcg_kmem_charge_memcg+0x7c/0x130 [ 1203.304984][T31310] ? memcg_kmem_put_cache+0xb0/0xb0 [ 1203.310195][T31310] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 1203.315856][T31310] __memcg_kmem_charge+0x136/0x300 [ 1203.320985][T31310] __alloc_pages_nodemask+0x4bd/0x8d0 [ 1203.326388][T31310] ? __alloc_pages_slowpath+0x28f0/0x28f0 [ 1203.332134][T31310] ? kmem_cache_alloc+0x11a/0x6f0 [ 1203.337328][T31310] ? anon_vma_fork+0x1ea/0x4a0 [ 1203.342237][T31310] ? dup_mm+0x992/0x13b0 [ 1203.346493][T31310] ? copy_process.part.0+0x2d02/0x6950 [ 1203.351978][T31310] ? _do_fork+0x25d/0xfe0 [ 1203.356408][T31310] ? __x64_sys_clone+0xbf/0x150 [ 1203.361290][T31310] ? do_syscall_64+0xfd/0x680 [ 1203.365978][T31310] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1203.372230][T31310] alloc_pages_current+0x107/0x210 [ 1203.372251][T31310] pte_alloc_one+0x1b/0x1a0 [ 1203.372267][T31310] __pte_alloc+0x20/0x310 [ 1203.372284][T31310] copy_page_range+0x1561/0x1fc0 [ 1203.372296][T31310] ? mark_held_locks+0xf0/0xf0 [ 1203.372311][T31310] ? percpu_ref_put_many+0x94/0x190 [ 1203.372330][T31310] ? anon_vma_fork+0x371/0x4a0 [ 1203.391182][T31310] ? pmd_alloc+0x180/0x180 [ 1203.391194][T31310] ? vma_gap_callbacks_rotate+0x62/0x80 [ 1203.391211][T31310] ? validate_mm_rb+0xa3/0xc0 [ 1203.391228][T31310] ? __vma_link_rb+0x279/0x370 [ 1203.391248][T31310] dup_mm+0x9c4/0x13b0 [ 1203.430024][T31310] ? vm_area_dup+0x170/0x170 [ 1203.434651][T31310] ? debug_mutex_init+0x2d/0x60 [ 1203.439643][T31310] copy_process.part.0+0x2d02/0x6950 [ 1203.444964][T31310] ? __cleanup_sighand+0x60/0x60 [ 1203.450016][T31310] _do_fork+0x25d/0xfe0 [ 1203.454296][T31310] ? copy_init_mm+0x20/0x20 [ 1203.458818][T31310] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1203.464313][T31310] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1203.469897][T31310] ? do_syscall_64+0x26/0x680 [ 1203.474671][T31310] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1203.480851][T31310] ? do_syscall_64+0x26/0x680 [ 1203.485549][T31310] __x64_sys_clone+0xbf/0x150 [ 1203.490433][T31310] do_syscall_64+0xfd/0x680 [ 1203.494963][T31310] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1203.500945][T31310] RIP: 0033:0x457aea [ 1203.504838][T31310] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 06:30:40 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06030000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0x0) 06:30:40 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x6558000000000000}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 06:30:40 executing program 4: r0 = socket$inet6(0x10, 0x3, 0xffffffffffffffff) sendmsg(r0, &(0x7f0000000040)={0x0, 0x99, &(0x7f00000012c0)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06000000a843089100ff803900080008000c0000dc13382d0000009b7a136ef75afb83de448d8a72540d8102d2c55327c43ab8220000060cec5bbf4fab91d40000000000", 0x55}], 0x1}, 0x1000000000) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000080)={0x0, @in6={{0xa, 0x4e23, 0x3ff, @loopback, 0xffffffffffff2d77}}, 0x8cd9, 0x7fffffff, 0x1, 0x7}, &(0x7f0000000140)=0x98) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000280)={r1, 0x1000, "e2c0d1b54ae7c1746e89f18a9aa5e49c8ec34f54e908f0b15b278b8db7044cea5991761b4090d9b4d72568825761b917020e93470c69e8abf8daf44a7f545c2ec2f777760f77c4cb4d480d8e01a482542dea7ad6821db2ddf546d12e693a12210a83b6ffc7aa5f90252a1db9993b257e4a8018d4c16cbabf9aac36eb36c5b9c782bffd17d0e1276e28252fb120cfabc017878cc75b5bef159c80a11141509ffd7ceca2356df764a0682720ff3822b301bf8b38fe1179db69daeff53903a36a2843675ae94693d22046921a352a4ec09a41958559566f9cb9c37589cc415288f48b0a012b600d7c9305b519500c8e858c9fd6215257e2b4bd8831b332484d1ebf13f57e363de02e9a6b20a365e986052edc0c99af999490e4675142a7989f08b8a59548c30cf7ae0a47c368c425bd43f19b3243a58934e11ca1a98161dc3d185fe9519b56f837bd04060440e5375ddbf99470f05ac04a60a8713e652f050362d541cf93f8c2e0d3ab293342335c28812087657808f7a4445909f102bf9355076c8180b3bdbc39d8e910faa47d6f8c0a4eb2f700ac329598a1595fa728d0dbc1d4c137a59e06dc0e4f0df8839529fadd27cddb09b4c3c4e741ae2ba76daab54abd9702ab9f523f7b367b364dae21c3e6c35b9a594920a038493f11b0d306929d6c913a1f6bcf80524fb1f0d93c793b247df3b66c993a6b8e713ef1cb3dc1eed652eb5f48961a625acb3c29b378088842b78cefe333c1a78c07503153b92880654f771256d98347bbf228629f425da659332b929ed4e02d20f6e231f7bf35970efc1f146f51e5b7703e223397ac56f3f2b8e3a701b17ebf262ebdf76b1a32de52bdba65253b4181bfce3262c900d5eaa0f09990237c00b3912fd3b5c0f938a913dab1fe80b998d1581c7e727359204d6d0a7b14c7c026a4e5d1c4044524d2cbbbcd46296d1024f660e6ea66eda8cc5330eebf3b0d27bcb8ba0495df27ecd03b1be8aa84dbd05e22540d6bcce441a9d033953dafd66c0c0dfe16e2b1228374da8b698358b12a2b480f606e6ec2d1a3b252b4f41e017bc6bf96efd053021a8d1939a06995ecd9919f0cf7985ef1035f74ef95dd235d5910f5cc35bb3163b71c72b0861fe7d82ac794c7d29a6a667d07e81aa7e5fd6cad491f007e68b22fe195e69ae43e2cbdffe15dc026abfc82034ebb24add24167c6349974f970d565e0fa75b205ae61dd3e92ad59914e605c54a1380c2fca5315becfd265271f740a61a0dda24586e1533073afbdd9f23b79e6b67b9aae0df5a409ed7aedf9c5ffd4509738ad575b166bc0f7e3a9ebd604ea7d81aec5503d37832e5a849fd2255096f2ac2e2971bd5234d0078f64e337d7138315525ca34d228cd375a37b5efe6e8b7897b03cb515f16c93a6e4f60e10872f91107e293d608405e3bfc3ea68bf169793ad648714ec9abc0757d50ea4e754e92b156a40067c734aaf9d78e0ba223fcc9bb9a931879789c3b0988b2b486b08df847a02360c207831f9caffde06e44a3e6d0fa555ace104683b2e9b6fb26f41eea91dba638d9baac6f86a6fcefe18773943f2240d0f0d1bd881298f65b122234e6e683c2d3ff592959fe51eb5aac2a21a85d406888441212d98068ac48e8abfb76708f910ced824b5345d94a59f0be9fbaf7ec578bac37c4789c15eb9102c5cab2b448af190fe5dc8ea7f1e1266e2411f1d5bd46b7fb56372c5b01a53d234ee506bdc4c1fc201e1ce348399be3798f8d14b2c282c0ea1cddc25a5cebffad172c7abc604bbb7caddb292388bb5bb1356ab015dcc4b7066ce9429da20aad4cfadbe63e6dd534650fac178c011d9a4840f40b9673052eb8a5743a9d2f2864c860781756bed3e6f376ef6cfbd97a20ef98d8b535f056bb964d1a25c42da604c75a61be11f625a49cbe3802ffbc48b4006715c7bc2565acd23878357977666675d097b99b7e2baea336b74e877f6c420e286da6ae018c24c26cebc5d34acf04f142920226defae6e81adcf76b807092c40b9a04d4da2de4efa952497911eba519c8dec496aa2724bfb2b437c22355729e5923ca5a0f7909ff2dc9b5a98d9af61c73f96c056670336d3cb224198154172463e50f0487f92a5a3551242e44073b17312de88c6c6d63a0345d7c9a092c884f9a5c35fe4735b16ce359da976e1778bc0fdd32caf231c88a7eafdefae7af2cf25659f6b920f4f119884cac90825f5107b9792560bc3d4a00e172bb94c4e5084ba11801826a7a25461a4019cb4b4a5b395281f9bd18843cc3d6ab561202c4220630c3ac946a67746e387ebd70509697294ef9d71e6035dd6406e3621cf783189a729a43443e8695173f71b0d74a33e3029c20b556d1624e3c558c8875c12b3d59a539630c7c29b9073eae9fd1228ba786e2e62be07b1307af9c08e8e07601dd2c8d5d0df6e78b28066d4ad6c0b87e67a4d3400a4e2ce368532877c81794d837103e1c46bc6deeb4557016328cc5ca3cb32fea558ea584d6aca598970d689e07e9a6ec25d4d3e819ab74bce982859a2f5e1a5d007ead6035a73961f1dc789475acddf1b2e011ba3d2eb19afad09014c26be75d17cb8b1d250f366b94e63c75c8e094de2bf7e38d1766dea3cd0870b4821f782bd471ce15e6c31133639286970b909412a7d671df9a99bd2939082ca0112cd217020a69aedc740a500abe9deaded82d5a904a239eee72e8417081356c5b791289f10218258a0c069c7d9a416b238bdb4156a5bd9d089b468b40a61bd5f287bb635b693210b6773f31ae4c29d68c0eacaaa2514627e54017d1825046ec77bdc446f88c12862e5ebdabd2462cfa8c900289fe1bda51b5d54efe4b02e699d989b2303325b754c6df227781c2fd589e485d34cf3fbc8a74800eef11b8e91db7c0b87b82cffc08a7cc5fac7f1ce808388871e4b71fe7a75f6360ff1b7f677ea0f99649f71960451769d0d5b47c24b7493650e6519fb4b5776a605a89d8ed678cfa0e7d5a9865573d5bb45b4dd634f9042c7bae2a2ba78f82da1cebcad1b9ff530b7dd6dd9a084a6a09498c1410a749926786d8d0230f5ab854c0b6f09d1deef2985142bb5c876d9fdff593d645664da7fc91140c5b7c4d6b945c1067b8e4ac94861dd50e7f39ea60ef36acad437a4ddc235b67f7b5d0a68efef5eca1fee2b10fcaf873b90287138bec2379ee89e35f86fa58178b2712a7ad6dc07e731c8a1ffd18b0c7d0df8e288e0b51c7641c2e13f37eb3153cbf5f705bf58db248a44e94ef712e89153a42b42a0098e7df97cac64a452dc6626a5b140f0517267d279b5fad0bd88c22e3f3500a87db2906a057ae8edf05ecf664f8249a978003627a46616a6920b674f7249b522d02f757f276f54123e624422e807ef2a218adedc36064472e898c1cc78bed26cc3c1ec843663f9c210d20c6ff4435691ba4445ca43579b579c49e945b403469eec0659d2d02d6cf87768d4a9ed9aec47e73c2ac4709f86d20287585da6163007cc7cfb2ee4fe03d3898b5ab804ec4842e087fa4c9e38b7aae4a5d726154ad2a994ef0ab4fe9c1992d1588cddc917596742da40b23e63ed899744919a34c9cb3a40a3e08b487ad9bd86a176d9e7c86c3d496a27d8fe210abaed20e8e6ed015e78b272c0e628adaa39c1bc0da6b5227f441d21b48167442740e8c164274f07972bca0e97caa1227ffbf95c6a80d35b9254976263bfd4a2128311f3912adb9cf03cd0f01d66fd2d4a9b79defe62181a91b611c14b041002eb6099f68f44e37284b425e87cac5db98ecc903309c046eeb4097bb578e2fb20729326b043a37346baf39f158c0815b7ea00660263e5900c79eca395a3e8a948fd0de04c125afe616fa88c9b198d1401e14d8ce42a13d59f43d2d6892917ced92fbab1f764fb3caa8cdcdaa1c905c0385f301771a8081cc1d01fb503f9db92edc69fa7fd0d5554a21459c17f3f971618e3b79ad80a495e0b8211fc461f6fd512c23a9ad68869778dd660a7133e5e7ddce33f716d9c46f155f04dd77d92ae1239a959c1fd4d3618eee1427cbc0952b75fb3cdc16074d552c9de7432b23f5f6ba1f30a07776962635b3c48710ea425a013d9feb565be8621e05c4818f57b61504b245d830b32a38d5bbb9b448ebac7b074a63e3c001d34f62363d5268dbbf662588a4b55536149f5479632bc0c1f7d5de40e62f2f6169325bdf033f4d63d306f2c5d7d0ccd52d52e462e491c1914cb57fe5b3b70256ffa62ee8c90336b784f935973c9e54eb1a2d2a80b0793c20e607ac79c408dbd66593f933c4721206c0c5c5c90fb7901b75c0b6260bd250ed5c909ffe63d077ba6fbef41eafc95eb44af369debe53ef335b1608e134e8df875036ed9e64bc5f58f8d55c0cfb7e7a15fdd973586c8e54893b291c4ff843de231904b2ccc7bb24ddb164e7256241dbc6e47b5a5e84a1153faa99e1e041e18133e88da455e79ab7e50502acf9985b298e6a347abcec71f9e4bab8780590fbbd8dca30ffa85e61a91b1e8c60d9fd8bcf910210bd8b58f00a1276c3c8d4f2de3be575d18e15383a8bfd335a4889b2e951fcbf41f6f681f568320f23015f9c123113c3a5eb9c8d75b0b2f6af0c0fc3f0a681d25ce435ef532006a526de6a2b179b018d509222603fdef0ff89187b186bd0ca50a81ec5bc2f0d061daa0f986dc5cad2882c3475cf6fedde64868844f0452c9f77f12060dc78919d6a55c5eea7697ae7858b018ea77ca68070a50a461e9d8b70f43dd9e9397432af0cb38e29daa58b0a62016f6659e398d50af7461e3b48736bec47e11cb7379bfa22fb962cb17a45d548560985c83221c9d58b5212f00653782139b9d7ff95034e7c8de012f4098f1f6647f2bea3f34bce43d0177cd308c4d87efddb95346e467c7c9d6a7501c95c64bc881bfa577ef74767a361b0181e0231dc3fe0bec5bfa12223791e0d00d3c3a446c07f96e1e84150a42d28c5d11b69e738c8683174be28daebdc6ab5b41cec52fcd9a75819bf54f346076d0bcc93e34a67a2d936e7b565e38043f28ba6d93dc8a02ee904f4db807648697902d7bb29add97ae21c469c450b3148e97cd6b1d67944e7d6d427decf9143994e8ef1de110fe0cb124e2d0c67b0bd9b25bacf4ace617890b79de2055a984305e7529becac5bc037ca6f2df9ff0e95b12d41e08c35d00c7c4644ed3ef1fbb9171a35e6002e80c8a224b7e9a7757cdfde7c870bcf8da3af0ec81e845efe0c23c88aeb817e2f7ce8d9a06f3cf88c86e750101fc0a13beddd21ba9340693bf7e153c2ccc6ed8030e016d6a0ab7caea1e15983a391a951eabf7085c8598da4a634d072a6583a523dd8c17d6c18dbcd0c192c22c9b19ea924282860b6a31dd947574cb6684183adee73ba65004823c1dbb71eec5fe9f879691be5c8116163b2a93dd8ddb56508c5fd0aa7257afa5d1d9f9949c9152508deed43c5176f81f74f4baa3d58bd7d8d43a8c6292dc63747d564c811f369a68cdfae5072ed827dfbfd5739c6164e2690151f09976663bcff1b683242ae552856bf247804ad99df0bc863952df61d871d2bbdc12ced12cd8ecc6c518f05b1af60f7b41bda30dc348037e621da148b24873071d188e80192c70e0abfa1f265811c78918e484ffa52c5dd878e3d7e5b68341d1835ce4e71cadc536ef3778074470cb2d896f9acaed2cd36743d336c83a9e51173246948856d6ccc113424e376afe749c875cb70215f64aa10ec30a905d286672821f3bda514e98a55e4c1c1c8219df86a668fb4bc7f3f6b397f18cf047de"}, &(0x7f0000000180)=0x1008) 06:30:40 executing program 4: r0 = accept$inet6(0xffffffffffffff9c, &(0x7f00000000c0), &(0x7f0000000100)=0x1c) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000140)={0x0, 0x4}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f00000001c0)={r1, 0x1, 0x3, 0x7fff, 0x4, 0x1acf}, 0x14) r2 = syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x0, 0x200000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffff9c, 0x8933, &(0x7f00000003c0)={'bond_slave_1\x00', 0x0}) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000400)={@loopback, r3}, 0x14) r4 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06000000a843089100ff803900080008000c0000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0x0) 06:30:40 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06020000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d40000000014c500", 0x55}], 0x1}, 0x0) [ 1203.524532][T31310] RSP: 002b:0000000000a6fd30 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1203.533249][T31310] RAX: ffffffffffffffda RBX: 0000000000a6fd30 RCX: 0000000000457aea [ 1203.541252][T31310] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 1203.541261][T31310] RBP: 0000000000a6fd70 R08: 0000000000000001 R09: 0000555555747940 [ 1203.541269][T31310] R10: 0000555555747c10 R11: 0000000000000246 R12: 0000000000000001 [ 1203.541276][T31310] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000a6fdc0 06:30:40 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06030000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0x0) [ 1203.595294][T31310] memory: usage 307076kB, limit 307200kB, failcnt 3158 [ 1203.760571][T31310] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1203.784835][T31310] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1203.792390][T31310] Memory cgroup stats for /syz1: cache:0KB rss:212544KB rss_huge:165888KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:212544KB inactive_file:0KB active_file:0KB unevictable:0KB [ 1203.814273][T31310] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=7822,uid=0 [ 1203.830167][T31310] Memory cgroup out of memory: Killed process 7822 (syz-executor.1) total-vm:72708kB, anon-rss:2204kB, file-rss:35788kB, shmem-rss:0kB [ 1203.846392][ T1044] oom_reaper: reaped process 7822 (syz-executor.1), now anon-rss:0kB, file-rss:34828kB, shmem-rss:0kB [ 1203.876255][T19916] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1203.886527][T19916] CPU: 0 PID: 19916 Comm: syz-executor.1 Not tainted 5.2.0-rc6+ #62 [ 1203.894504][T19916] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1203.904646][T19916] Call Trace: [ 1203.907962][T19916] dump_stack+0x172/0x1f0 [ 1203.912373][T19916] dump_header+0x10f/0xb6c [ 1203.916791][T19916] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1203.922599][T19916] ? ___ratelimit+0x60/0x595 [ 1203.927285][T19916] ? do_raw_spin_unlock+0x57/0x270 [ 1203.932477][T19916] oom_kill_process.cold+0x10/0x15 [ 1203.937586][T19916] out_of_memory+0x79a/0x1280 [ 1203.942262][T19916] ? lock_downgrade+0x880/0x880 [ 1203.947353][T19916] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1203.953588][T19916] ? oom_killer_disable+0x280/0x280 [ 1203.959020][T19916] ? find_held_lock+0x35/0x130 [ 1203.963783][T19916] mem_cgroup_out_of_memory+0x1ca/0x230 [ 1203.969323][T19916] ? memcg_event_wake+0x230/0x230 [ 1203.974360][T19916] ? do_raw_spin_unlock+0x57/0x270 [ 1203.979605][T19916] ? _raw_spin_unlock+0x2d/0x50 [ 1203.984671][T19916] try_charge+0x1042/0x1410 [ 1203.989596][T19916] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1203.995522][T19916] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1204.002083][T19916] ? kasan_check_read+0x11/0x20 [ 1204.006930][T19916] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 1204.012482][T19916] mem_cgroup_try_charge+0x24d/0x5e0 [ 1204.017780][T19916] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 1204.023601][T19916] wp_page_copy+0x416/0x1770 [ 1204.028430][T19916] ? do_wp_page+0x486/0x1500 [ 1204.033270][T19916] ? pmd_pfn+0x1d0/0x1d0 [ 1204.041795][T19916] ? lock_downgrade+0x880/0x880 [ 1204.046820][T19916] ? __pte_alloc_kernel+0x220/0x220 [ 1204.052151][T19916] ? kasan_check_read+0x11/0x20 [ 1204.056995][T19916] ? do_raw_spin_unlock+0x57/0x270 [ 1204.062100][T19916] do_wp_page+0x48e/0x1500 [ 1204.066503][T19916] ? do_raw_spin_lock+0x12a/0x2e0 [ 1204.071521][T19916] ? rwlock_bug.part.0+0x90/0x90 [ 1204.076450][T19916] ? finish_mkwrite_fault+0x540/0x540 [ 1204.081837][T19916] ? add_mm_counter_fast.part.0+0x40/0x40 [ 1204.087732][T19916] __handle_mm_fault+0x22e3/0x3eb0 [ 1204.093187][T19916] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 1204.098734][T19916] ? find_held_lock+0x35/0x130 [ 1204.103483][T19916] ? handle_mm_fault+0x292/0xa90 [ 1204.108409][T19916] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1204.114723][T19916] ? kasan_check_read+0x11/0x20 [ 1204.119746][T19916] handle_mm_fault+0x3b7/0xa90 [ 1204.124601][T19916] __do_page_fault+0x5ef/0xda0 [ 1204.130570][T19916] do_page_fault+0x71/0x57d [ 1204.135149][T19916] ? page_fault+0x8/0x30 [ 1204.139467][T19916] page_fault+0x1e/0x30 [ 1204.144489][T19916] RIP: 0033:0x40e6b8 [ 1204.148380][T19916] Code: 8b 34 c6 4a 8d 04 2e 48 3d ff ff ff 7e 0f 86 77 ff ff ff bf d1 ea 4b 00 31 c0 e8 c3 35 ff ff 31 ff e8 0c 32 ff ff 0f 1f 40 00 <89> 3c b5 00 00 73 00 eb b6 31 ed 0f 1f 44 00 00 80 3d ae 1d 66 00 [ 1204.167988][T19916] RSP: 002b:0000000000a6fb00 EFLAGS: 00010246 [ 1204.174042][T19916] RAX: 000000001c5748f2 RBX: 000000002a642b88 RCX: 0000001b31920000 [ 1204.182126][T19916] RDX: 0000000000000000 RSI: 00000000000008f2 RDI: ffffffff1c5748f2 [ 1204.190246][T19916] RBP: 000000000000000c R08: 000000001c5748f2 R09: 000000001c5748f6 [ 1204.198343][T19916] R10: 0000000000a6fca0 R11: 0000000000000246 R12: 000000000075bfa8 [ 1204.206556][T19916] R13: 0000000080000000 R14: 00007f76d1661008 R15: 000000000000000c [ 1204.216444][T19916] memory: usage 307032kB, limit 307200kB, failcnt 3186 [ 1204.223506][T19916] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1204.231072][T19916] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1204.238336][T19916] Memory cgroup stats for /syz1: cache:0KB rss:212512KB rss_huge:165888KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:212512KB inactive_file:0KB active_file:0KB unevictable:0KB [ 1204.260083][T19916] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=8088,uid=0 06:30:41 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x40100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00]}) 06:30:41 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06020000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d40000000000f000", 0x55}], 0x1}, 0x0) 06:30:41 executing program 3: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000480)='/dev/cuse\x00', 0x2842, 0x0) io_setup(0x2, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f0000000240)={0x2, 0x0, 0x0, 0x0, 0x0, r0, 0x0}]) 06:30:41 executing program 4: r0 = socket$inet6(0x10, 0x3ffffffffe, 0x2) syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') r1 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x8, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r1, 0x0, 0x48f, &(0x7f0000000100)={0x8d, @dev={0xac, 0x14, 0x14, 0x28}, 0x4e22, 0x4, 'lc\x00', 0x8, 0x8001, 0x3}, 0x2c) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06000000a843089100ff803900080008000c0000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0x0) bind$vsock_dgram(r1, &(0x7f0000000280)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000080)={0x0, 0x81}, &(0x7f0000000180)=0xc) ioctl$KVM_SET_NR_MMU_PAGES(r1, 0xae44, 0x2) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f00000001c0)={r2, 0x2, 0x2, [0x7, 0x100000000]}, 0xc) 06:30:41 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x8100000000000000}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 06:30:41 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06030000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0x0) [ 1204.275802][T19916] Memory cgroup out of memory: Killed process 8088 (syz-executor.1) total-vm:72708kB, anon-rss:2204kB, file-rss:35788kB, shmem-rss:0kB 06:30:41 executing program 4: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x802, 0x0) r1 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000100)='NET_DM\x00') sendmsg$NET_DM_CMD_START(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x41000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r1, 0x1, 0x70bd2d, 0x25dfdbfc, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x48041) r2 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06000000a843089100ff803900080008000c0000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0x0) 06:30:41 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06020000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d40000000000fc00", 0x55}], 0x1}, 0x0) 06:30:41 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x88a8ffff00000000}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 06:30:41 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06030000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0x0) 06:30:41 executing program 3: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000480)='/dev/cuse\x00', 0x2842, 0x0) io_setup(0x2, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f0000000240)={0x3, 0x0, 0x0, 0x0, 0x0, r0, 0x0}]) 06:30:41 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x40100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000]}) 06:30:41 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06000000a843089100ff803900080008000c0000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0xfffffffffffffdef}], 0x100002a1}, 0x0) 06:30:41 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06020000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d40000000080fe00", 0x55}], 0x1}, 0x0) 06:30:41 executing program 3: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000480)='/dev/cuse\x00', 0x2842, 0x0) io_setup(0x2, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f0000000240)={0x4, 0x0, 0x0, 0x0, 0x0, r0, 0x0}]) 06:30:41 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x40100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800]}) 06:30:41 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06030000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0x0) 06:30:41 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x9effffff00000000}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 06:30:41 executing program 4: r0 = fsopen(&(0x7f0000000100)='logfs\x00', 0x1) fcntl$addseals(r0, 0x409, 0x7) r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06000000a843089100ff803900080008000c0000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0x0) 06:30:41 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06020000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000c0fe00", 0x55}], 0x1}, 0x0) [ 1204.972214][T31310] syz-executor.1 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=0 06:30:41 executing program 3: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000480)='/dev/cuse\x00', 0x2842, 0x0) io_setup(0x2, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f0000000240)={0x5, 0x0, 0x0, 0x0, 0x0, r0, 0x0}]) [ 1205.025262][T31310] CPU: 0 PID: 31310 Comm: syz-executor.1 Not tainted 5.2.0-rc6+ #62 [ 1205.033980][T31310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1205.044061][T31310] Call Trace: [ 1205.047633][T31310] dump_stack+0x172/0x1f0 [ 1205.052339][T31310] dump_header+0x10f/0xb6c [ 1205.052356][T31310] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1205.052370][T31310] ? ___ratelimit+0x60/0x595 [ 1205.052384][T31310] ? do_raw_spin_unlock+0x57/0x270 06:30:41 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0xc3ffffff00000000}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) [ 1205.052402][T31310] oom_kill_process.cold+0x10/0x15 [ 1205.052421][T31310] out_of_memory+0x79a/0x1280 [ 1205.082605][T31310] ? lock_downgrade+0x880/0x880 [ 1205.087642][T31310] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1205.093987][T31310] ? oom_killer_disable+0x280/0x280 [ 1205.099483][T31310] ? find_held_lock+0x35/0x130 [ 1205.104387][T31310] mem_cgroup_out_of_memory+0x1ca/0x230 [ 1205.109954][T31310] ? memcg_event_wake+0x230/0x230 [ 1205.115019][T31310] ? do_raw_spin_unlock+0x57/0x270 [ 1205.120196][T31310] ? _raw_spin_unlock+0x2d/0x50 06:30:41 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0xf0ffffff00000000}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) [ 1205.125071][T31310] try_charge+0x1042/0x1410 [ 1205.129604][T31310] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1205.135168][T31310] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 1205.140822][T31310] ? find_held_lock+0x35/0x130 [ 1205.145604][T31310] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 1205.151349][T31310] __memcg_kmem_charge_memcg+0x7c/0x130 [ 1205.156902][T31310] ? memcg_kmem_put_cache+0xb0/0xb0 [ 1205.162107][T31310] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 1205.167773][T31310] __memcg_kmem_charge+0x136/0x300 06:30:41 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0xfeffffff00000000}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) [ 1205.172935][T31310] __alloc_pages_nodemask+0x4bd/0x8d0 [ 1205.178327][T31310] ? find_held_lock+0x35/0x130 [ 1205.183229][T31310] ? __alloc_pages_slowpath+0x28f0/0x28f0 [ 1205.188957][T31310] ? kasan_check_write+0x14/0x20 [ 1205.193940][T31310] ? lock_downgrade+0x880/0x880 [ 1205.198955][T31310] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1205.205211][T31310] alloc_pages_current+0x107/0x210 [ 1205.210424][T31310] pte_alloc_one+0x1b/0x1a0 [ 1205.215029][T31310] __pte_alloc+0x20/0x310 [ 1205.219384][T31310] copy_page_range+0x1561/0x1fc0 [ 1205.224426][T31310] ? mark_held_locks+0xf0/0xf0 [ 1205.229285][T31310] ? percpu_ref_put_many+0x94/0x190 [ 1205.234751][T31310] ? anon_vma_fork+0x371/0x4a0 [ 1205.239631][T31310] ? pmd_alloc+0x180/0x180 [ 1205.244140][T31310] ? vma_gap_callbacks_rotate+0x62/0x80 [ 1205.249917][T31310] ? validate_mm_rb+0xa3/0xc0 [ 1205.254638][T31310] ? __vma_link_rb+0x279/0x370 [ 1205.259434][T31310] dup_mm+0x9c4/0x13b0 [ 1205.263640][T31310] ? vm_area_dup+0x170/0x170 [ 1205.268242][T31310] ? debug_mutex_init+0x2d/0x60 06:30:41 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0xffffff7f00000000}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) [ 1205.273115][T31310] copy_process.part.0+0x2d02/0x6950 [ 1205.278427][T31310] ? __cleanup_sighand+0x60/0x60 [ 1205.283480][T31310] _do_fork+0x25d/0xfe0 [ 1205.288090][T31310] ? copy_init_mm+0x20/0x20 [ 1205.292865][T31310] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1205.298352][T31310] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1205.304871][T31310] ? do_syscall_64+0x26/0x680 [ 1205.309559][T31310] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1205.315726][T31310] ? do_syscall_64+0x26/0x680 [ 1205.320425][T31310] __x64_sys_clone+0xbf/0x150 06:30:42 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0xffffffff00000000}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) [ 1205.325214][T31310] do_syscall_64+0xfd/0x680 [ 1205.329913][T31310] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1205.335932][T31310] RIP: 0033:0x457aea [ 1205.339930][T31310] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 1205.359715][T31310] RSP: 002b:0000000000a6fd30 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1205.368133][T31310] RAX: ffffffffffffffda RBX: 0000000000a6fd30 RCX: 0000000000457aea [ 1205.376111][T31310] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 1205.384289][T31310] RBP: 0000000000a6fd70 R08: 0000000000000001 R09: 0000555555747940 [ 1205.392266][T31310] R10: 0000555555747c10 R11: 0000000000000246 R12: 0000000000000001 [ 1205.400342][T31310] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000a6fdc0 [ 1205.412933][T31310] memory: usage 307200kB, limit 307200kB, failcnt 3217 06:30:42 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06030000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0x0) [ 1205.419908][T31310] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1205.437325][T31310] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1205.491476][T31310] Memory cgroup stats for /syz1: cache:0KB rss:212532KB rss_huge:165888KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:212532KB inactive_file:0KB active_file:0KB unevictable:0KB [ 1205.564052][T31310] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=8352,uid=0 [ 1205.589406][T31310] Memory cgroup out of memory: Killed process 8352 (syz-executor.1) total-vm:72708kB, anon-rss:2204kB, file-rss:35788kB, shmem-rss:0kB 06:30:42 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x40100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c00]}) 06:30:42 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0xfffffffffffff000}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 06:30:42 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06030000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0x0) 06:30:42 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)}, 0x48044) r1 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) write$P9_RREADLINK(r1, &(0x7f0000000040)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0x10) 06:30:42 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06020000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d40000000000ff00", 0x55}], 0x1}, 0x0) 06:30:42 executing program 3: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000480)='/dev/cuse\x00', 0x2842, 0x0) io_setup(0x2, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f0000000240)={0x7, 0x0, 0x0, 0x0, 0x0, r0, 0x0}]) [ 1205.727436][T31310] syz-executor.1 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=0 [ 1205.750118][T31310] CPU: 1 PID: 31310 Comm: syz-executor.1 Not tainted 5.2.0-rc6+ #62 [ 1205.758225][T31310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1205.768301][T31310] Call Trace: [ 1205.771664][T31310] dump_stack+0x172/0x1f0 [ 1205.776084][T31310] dump_header+0x10f/0xb6c [ 1205.781029][T31310] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1205.787215][T31310] ? ___ratelimit+0x60/0x595 [ 1205.792034][T31310] ? do_raw_spin_unlock+0x57/0x270 [ 1205.797399][T31310] oom_kill_process.cold+0x10/0x15 [ 1205.802537][T31310] out_of_memory+0x79a/0x1280 [ 1205.807229][T31310] ? lock_downgrade+0x880/0x880 [ 1205.812161][T31310] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1205.818511][T31310] ? oom_killer_disable+0x280/0x280 [ 1205.823771][T31310] ? find_held_lock+0x35/0x130 [ 1205.829103][T31310] mem_cgroup_out_of_memory+0x1ca/0x230 [ 1205.834780][T31310] ? memcg_event_wake+0x230/0x230 [ 1205.840116][T31310] ? do_raw_spin_unlock+0x57/0x270 [ 1205.845550][T31310] ? _raw_spin_unlock+0x2d/0x50 [ 1205.850663][T31310] try_charge+0x1042/0x1410 [ 1205.855401][T31310] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1205.861181][T31310] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 1205.866745][T31310] ? find_held_lock+0x35/0x130 [ 1205.871552][T31310] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 1205.877130][T31310] __memcg_kmem_charge_memcg+0x7c/0x130 [ 1205.882697][T31310] ? memcg_kmem_put_cache+0xb0/0xb0 [ 1205.887905][T31310] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 1205.893772][T31310] __memcg_kmem_charge+0x136/0x300 [ 1205.899563][T31310] __alloc_pages_nodemask+0x4bd/0x8d0 [ 1205.904944][T31310] ? find_held_lock+0x35/0x130 [ 1205.909774][T31310] ? __alloc_pages_slowpath+0x28f0/0x28f0 [ 1205.915729][T31310] ? kasan_check_write+0x14/0x20 [ 1205.920790][T31310] ? lock_downgrade+0x880/0x880 [ 1205.925813][T31310] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1205.932697][T31310] alloc_pages_current+0x107/0x210 [ 1205.937991][T31310] pte_alloc_one+0x1b/0x1a0 [ 1205.942501][T31310] __pte_alloc+0x20/0x310 [ 1205.946935][T31310] copy_page_range+0x1561/0x1fc0 [ 1205.952340][T31310] ? mark_held_locks+0xf0/0xf0 [ 1205.957200][T31310] ? percpu_ref_put_many+0x94/0x190 [ 1205.962852][T31310] ? anon_vma_fork+0x371/0x4a0 [ 1205.967633][T31310] ? pmd_alloc+0x180/0x180 [ 1205.972050][T31310] ? vma_gap_callbacks_rotate+0x62/0x80 [ 1205.977629][T31310] ? validate_mm_rb+0xa3/0xc0 [ 1205.982537][T31310] ? __vma_link_rb+0x279/0x370 [ 1205.987518][T31310] dup_mm+0x9c4/0x13b0 [ 1205.991635][T31310] ? vm_area_dup+0x170/0x170 [ 1205.996317][T31310] ? debug_mutex_init+0x2d/0x60 [ 1206.001851][T31310] copy_process.part.0+0x2d02/0x6950 [ 1206.007275][T31310] ? __cleanup_sighand+0x60/0x60 [ 1206.012782][T31310] _do_fork+0x25d/0xfe0 [ 1206.016962][T31310] ? copy_init_mm+0x20/0x20 [ 1206.021834][T31310] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1206.027357][T31310] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1206.033007][T31310] ? do_syscall_64+0x26/0x680 [ 1206.037739][T31310] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1206.043900][T31310] ? do_syscall_64+0x26/0x680 [ 1206.048608][T31310] __x64_sys_clone+0xbf/0x150 [ 1206.053369][T31310] do_syscall_64+0xfd/0x680 [ 1206.057862][T31310] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1206.063836][T31310] RIP: 0033:0x457aea [ 1206.067726][T31310] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 1206.087491][T31310] RSP: 002b:0000000000a6fd30 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1206.096168][T31310] RAX: ffffffffffffffda RBX: 0000000000a6fd30 RCX: 0000000000457aea [ 1206.104179][T31310] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 1206.112250][T31310] RBP: 0000000000a6fd70 R08: 0000000000000001 R09: 0000555555747940 [ 1206.120299][T31310] R10: 0000555555747c10 R11: 0000000000000246 R12: 0000000000000001 06:30:42 executing program 4: r0 = socket$inet6(0x10, 0x1000000004, 0x1000000000003) sendmsg(r0, &(0x7f0000000300)={0x0, 0xffffffffffffffad, &(0x7f00000002c0)}, 0x4800) 06:30:42 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06020000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000004003", 0x55}], 0x1}, 0x0) [ 1206.128396][T31310] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000a6fdc0 [ 1206.165504][T31310] memory: usage 307200kB, limit 307200kB, failcnt 3232 06:30:42 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 06:30:42 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06030000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0x0) 06:30:42 executing program 3: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000480)='/dev/cuse\x00', 0x2842, 0x0) io_setup(0x2, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f0000000240)={0x8, 0x0, 0x0, 0x0, 0x0, r0, 0x0}]) [ 1206.199774][T31310] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1206.226197][T31310] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1206.257420][T31310] Memory cgroup stats for /syz1: cache:0KB rss:212532KB rss_huge:165888KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:212532KB inactive_file:0KB active_file:0KB unevictable:0KB 06:30:43 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0xfffffffffffffeed, &(0x7f00000000c0)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06000000a843089100ff803900080008000c0000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0xf}], 0x1}, 0x8010) [ 1206.341101][T31310] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=9231,uid=0 [ 1206.420260][T31310] Memory cgroup out of memory: Killed process 9231 (syz-executor.1) total-vm:72708kB, anon-rss:2204kB, file-rss:35788kB, shmem-rss:0kB [ 1206.463195][ T1044] oom_reaper: reaped process 9231 (syz-executor.1), now anon-rss:0kB, file-rss:34828kB, shmem-rss:0kB 06:30:43 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x40100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6800]}) 06:30:43 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06020000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000340", 0x55}], 0x1}, 0x0) 06:30:43 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06030000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0x0) 06:30:43 executing program 4: r0 = socket$inet6(0x10, 0x14, 0x97dc) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06000000a843089100ff803900080008000c0000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0x0) 06:30:43 executing program 3: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000480)='/dev/cuse\x00', 0x2842, 0x0) io_setup(0x2, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f0000000240)={0xc, 0x0, 0x0, 0x0, 0x0, r0, 0x0}]) 06:30:43 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 06:30:43 executing program 4: r0 = socket$inet6(0x10, 0x80f, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06000000a843089100ff803900080008000c0000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0x0) 06:30:43 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06030000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0x0) 06:30:43 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06020000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000fffff0", 0x55}], 0x1}, 0x0) [ 1206.636644][T31310] syz-executor.1 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=0 06:30:43 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x4}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) [ 1206.679882][T31310] CPU: 0 PID: 31310 Comm: syz-executor.1 Not tainted 5.2.0-rc6+ #62 [ 1206.687917][T31310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1206.698156][T31310] Call Trace: [ 1206.701467][T31310] dump_stack+0x172/0x1f0 [ 1206.705811][T31310] dump_header+0x10f/0xb6c [ 1206.710322][T31310] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1206.716286][T31310] ? ___ratelimit+0x60/0x595 [ 1206.720984][T31310] ? do_raw_spin_unlock+0x57/0x270 [ 1206.726293][T31310] oom_kill_process.cold+0x10/0x15 [ 1206.731518][T31310] out_of_memory+0x79a/0x1280 [ 1206.736394][T31310] ? lock_downgrade+0x880/0x880 [ 1206.741443][T31310] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1206.747699][T31310] ? oom_killer_disable+0x280/0x280 [ 1206.752916][T31310] ? find_held_lock+0x35/0x130 [ 1206.757705][T31310] mem_cgroup_out_of_memory+0x1ca/0x230 [ 1206.763262][T31310] ? memcg_event_wake+0x230/0x230 [ 1206.768356][T31310] ? do_raw_spin_unlock+0x57/0x270 [ 1206.773666][T31310] ? _raw_spin_unlock+0x2d/0x50 06:30:43 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x5}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) [ 1206.778535][T31310] try_charge+0x1042/0x1410 [ 1206.783071][T31310] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1206.788636][T31310] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 1206.794426][T31310] ? find_held_lock+0x35/0x130 [ 1206.799380][T31310] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 1206.805031][T31310] __memcg_kmem_charge_memcg+0x7c/0x130 [ 1206.810732][T31310] ? memcg_kmem_put_cache+0xb0/0xb0 [ 1206.815948][T31310] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 1206.821528][T31310] __memcg_kmem_charge+0x136/0x300 06:30:43 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x6}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) [ 1206.826657][T31310] __alloc_pages_nodemask+0x4bd/0x8d0 [ 1206.832054][T31310] ? __pud_alloc+0x1d3/0x250 [ 1206.836712][T31310] ? __alloc_pages_slowpath+0x28f0/0x28f0 [ 1206.842456][T31310] ? __pud_alloc+0x1d3/0x250 [ 1206.847073][T31310] ? lock_downgrade+0x880/0x880 [ 1206.851940][T31310] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1206.858203][T31310] alloc_pages_current+0x107/0x210 [ 1206.863352][T31310] ? do_raw_spin_unlock+0x57/0x270 [ 1206.868478][T31310] __pmd_alloc+0x41/0x460 [ 1206.872914][T31310] ? pmd_val+0x100/0x100 [ 1206.877174][T31310] pmd_alloc+0x10c/0x180 [ 1206.881455][T31310] copy_page_range+0x63c/0x1fc0 [ 1206.886320][T31310] ? mark_held_locks+0xf0/0xf0 [ 1206.891193][T31310] ? percpu_ref_put_many+0x94/0x190 [ 1206.896415][T31310] ? anon_vma_fork+0x371/0x4a0 [ 1206.901228][T31310] ? pmd_alloc+0x180/0x180 [ 1206.911152][T31310] ? vma_gap_callbacks_rotate+0x62/0x80 [ 1206.916923][T31310] ? validate_mm_rb+0xa3/0xc0 [ 1206.921615][T31310] ? __vma_link_rb+0x279/0x370 [ 1206.926497][T31310] dup_mm+0x9c4/0x13b0 [ 1206.930593][T31310] ? vm_area_dup+0x170/0x170 [ 1206.935193][T31310] ? debug_mutex_init+0x2d/0x60 [ 1206.940213][T31310] copy_process.part.0+0x2d02/0x6950 [ 1206.945525][T31310] ? __cleanup_sighand+0x60/0x60 [ 1206.950587][T31310] _do_fork+0x25d/0xfe0 [ 1206.954756][T31310] ? copy_init_mm+0x20/0x20 [ 1206.959360][T31310] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1206.964833][T31310] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1206.970319][T31310] ? do_syscall_64+0x26/0x680 [ 1206.975103][T31310] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1206.981230][T31310] ? do_syscall_64+0x26/0x680 [ 1206.985958][T31310] __x64_sys_clone+0xbf/0x150 [ 1206.990657][T31310] do_syscall_64+0xfd/0x680 [ 1206.995192][T31310] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1207.001095][T31310] RIP: 0033:0x457aea [ 1207.005002][T31310] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 1207.025429][T31310] RSP: 002b:0000000000a6fd30 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1207.033852][T31310] RAX: ffffffffffffffda RBX: 0000000000a6fd30 RCX: 0000000000457aea [ 1207.041847][T31310] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 1207.041857][T31310] RBP: 0000000000a6fd70 R08: 0000000000000001 R09: 0000555555747940 [ 1207.041864][T31310] R10: 0000555555747c10 R11: 0000000000000246 R12: 0000000000000001 [ 1207.041871][T31310] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000a6fdc0 [ 1207.103528][T31310] memory: usage 307200kB, limit 307200kB, failcnt 3246 [ 1207.119564][T31310] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1207.127377][T31310] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1207.141409][T31310] Memory cgroup stats for /syz1: cache:0KB rss:212532KB rss_huge:165888KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:212532KB inactive_file:0KB active_file:0KB unevictable:0KB [ 1207.176901][T31310] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=9505,uid=0 06:30:43 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06020000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0x0) 06:30:43 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 06:30:43 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x40100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c00]}) 06:30:43 executing program 3: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000480)='/dev/cuse\x00', 0x2842, 0x0) io_setup(0x2, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f0000000240)={0x38, 0x0, 0x0, 0x0, 0x0, r0, 0x0}]) 06:30:43 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06030000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0x0) 06:30:43 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280)='/dev/zero\x00', 0x0, 0x0) ioctl$EVIOCGEFFECTS(r1, 0x80044584, &(0x7f0000000700)=""/4096) fcntl$setsig(r0, 0xa, 0x2) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0xa, 0x4e24, 0x5, @ipv4={[], [], @remote}, 0x2}, 0x1c, &(0x7f0000000180)=[{&(0x7f00000000c0)="bf22449a6abc707fb3f99f36c39831afd92ae4adc0fb727409a040c97329827b8e5d841160bcfc737302e3e7bfca80f13c89a1e1c13d13adabab8f018b7360a6294a2b1b0fd4b39cbce39cace0add27550e61b97f6940106f2958401486220c3b23f9c47e5c540af7a1f2284326508106c5a121a59c44396292acf535660e015fb74fdfcd8ce01e2826314dc79375133434c37abb0b70df29d9665c8a01688", 0x9f}], 0x1, &(0x7f0000001700)=ANY=[@ANYBLOB="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"], 0x1e0}, 0x4000) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06000000a843089100ff803900080008000c0000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0x0) [ 1207.193312][T31310] Memory cgroup out of memory: Killed process 9505 (syz-executor.1) total-vm:72708kB, anon-rss:2204kB, file-rss:35788kB, shmem-rss:0kB 06:30:44 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x3ff) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06000000a843089100ff803900080008000c0000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0x0) 06:30:44 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06030000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0x0) 06:30:44 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0xa}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 06:30:44 executing program 3: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000480)='/dev/cuse\x00', 0x2842, 0x0) io_setup(0x2, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f0000000240)={0x300, 0x0, 0x0, 0x0, 0x0, r0, 0x0}]) [ 1207.357770][T31310] syz-executor.1 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=0 06:30:44 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06020000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0x0) [ 1207.456914][T31310] CPU: 1 PID: 31310 Comm: syz-executor.1 Not tainted 5.2.0-rc6+ #62 [ 1207.465223][T31310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1207.475722][T31310] Call Trace: [ 1207.479031][T31310] dump_stack+0x172/0x1f0 [ 1207.483642][T31310] dump_header+0x10f/0xb6c [ 1207.488168][T31310] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1207.493993][T31310] ? ___ratelimit+0x60/0x595 [ 1207.498781][T31310] ? do_raw_spin_unlock+0x57/0x270 [ 1207.503915][T31310] oom_kill_process.cold+0x10/0x15 [ 1207.509143][T31310] out_of_memory+0x79a/0x1280 [ 1207.513837][T31310] ? lock_downgrade+0x880/0x880 [ 1207.518712][T31310] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1207.525059][T31310] ? oom_killer_disable+0x280/0x280 [ 1207.530360][T31310] ? find_held_lock+0x35/0x130 [ 1207.535327][T31310] mem_cgroup_out_of_memory+0x1ca/0x230 [ 1207.540960][T31310] ? memcg_event_wake+0x230/0x230 [ 1207.546148][T31310] ? do_raw_spin_unlock+0x57/0x270 [ 1207.551367][T31310] ? _raw_spin_unlock+0x2d/0x50 06:30:44 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06030000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000f0ffff", 0x55}], 0x1}, 0x0) [ 1207.556238][T31310] try_charge+0x1042/0x1410 [ 1207.560761][T31310] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1207.566324][T31310] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 1207.571891][T31310] ? find_held_lock+0x35/0x130 [ 1207.576686][T31310] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 1207.582526][T31310] __memcg_kmem_charge_memcg+0x7c/0x130 [ 1207.588115][T31310] ? memcg_kmem_put_cache+0xb0/0xb0 [ 1207.593338][T31310] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 1207.599046][T31310] __memcg_kmem_charge+0x136/0x300 [ 1207.604451][T31310] __alloc_pages_nodemask+0x4bd/0x8d0 [ 1207.609845][T31310] ? __alloc_pages_slowpath+0x28f0/0x28f0 [ 1207.615578][T31310] ? save_stack+0x5c/0x90 [ 1207.620091][T31310] ? save_stack+0x23/0x90 [ 1207.624431][T31310] ? __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 1207.630333][T31310] ? kasan_slab_alloc+0xf/0x20 [ 1207.635196][T31310] ? kmem_cache_alloc+0x11a/0x6f0 [ 1207.640374][T31310] ? anon_vma_fork+0x1ea/0x4a0 [ 1207.645152][T31310] ? dup_mm+0x992/0x13b0 [ 1207.649403][T31310] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 06:30:44 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06020000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0x0) [ 1207.656047][T31310] alloc_pages_current+0x107/0x210 [ 1207.661174][T31310] get_zeroed_page+0x14/0x50 [ 1207.665781][T31310] __pud_alloc+0x3b/0x250 [ 1207.670315][T31310] pud_alloc+0xde/0x150 [ 1207.674576][T31310] copy_page_range+0x383/0x1fc0 [ 1207.679570][T31310] ? mark_held_locks+0xf0/0xf0 [ 1207.684354][T31310] ? percpu_ref_put_many+0x94/0x190 [ 1207.689574][T31310] ? anon_vma_fork+0x371/0x4a0 [ 1207.694374][T31310] ? pmd_alloc+0x180/0x180 [ 1207.699620][T31310] ? vma_gap_callbacks_rotate+0x62/0x80 [ 1207.705391][T31310] ? validate_mm_rb+0xa3/0xc0 [ 1207.710090][T31310] ? __vma_link_rb+0x279/0x370 [ 1207.715005][T31310] dup_mm+0x9c4/0x13b0 [ 1207.720507][T31310] ? vm_area_dup+0x170/0x170 [ 1207.725212][T31310] ? debug_mutex_init+0x2d/0x60 [ 1207.730185][T31310] copy_process.part.0+0x2d02/0x6950 [ 1207.735621][T31310] ? __cleanup_sighand+0x60/0x60 [ 1207.740602][T31310] _do_fork+0x25d/0xfe0 [ 1207.744791][T31310] ? copy_init_mm+0x20/0x20 [ 1207.749329][T31310] ? trace_hardirqs_on_thunk+0x1a/0x1c 06:30:44 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06030000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000020000", 0x55}], 0x1}, 0x0) [ 1207.754811][T31310] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1207.760379][T31310] ? do_syscall_64+0x26/0x680 [ 1207.765081][T31310] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1207.771325][T31310] ? do_syscall_64+0x26/0x680 [ 1207.776030][T31310] __x64_sys_clone+0xbf/0x150 [ 1207.780868][T31310] do_syscall_64+0xfd/0x680 [ 1207.785658][T31310] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1207.792092][T31310] RIP: 0033:0x457aea [ 1207.796005][T31310] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 1207.815892][T31310] RSP: 002b:0000000000a6fd30 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1207.824323][T31310] RAX: ffffffffffffffda RBX: 0000000000a6fd30 RCX: 0000000000457aea [ 1207.832314][T31310] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 1207.840337][T31310] RBP: 0000000000a6fd70 R08: 0000000000000001 R09: 0000555555747940 [ 1207.849063][T31310] R10: 0000555555747c10 R11: 0000000000000246 R12: 0000000000000001 [ 1207.857227][T31310] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000a6fdc0 [ 1207.895348][T31310] memory: usage 307200kB, limit 307200kB, failcnt 3263 [ 1207.904261][T31310] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1207.914976][T31310] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1207.924094][T31310] Memory cgroup stats for /syz1: cache:0KB rss:212532KB rss_huge:165888KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:212532KB inactive_file:0KB active_file:0KB unevictable:0KB 06:30:44 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x40100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7400]}) 06:30:44 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0xc}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 06:30:44 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06020000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0x0) 06:30:44 executing program 4: socket$inet6(0x10, 0x3, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0xc000, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000080)={0x16, 0x31, &(0x7f0000000040)="62237fcc5dfd7c861c21473691148cfd1c77edb59bf3dda613bfa6281d9834870ec61a1f2667a1c70321e6facbd6112098"}) 06:30:44 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06030000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000030000", 0x55}], 0x1}, 0x0) 06:30:44 executing program 3: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000480)='/dev/cuse\x00', 0x2842, 0x0) io_setup(0x2, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f0000000240)={0x500, 0x0, 0x0, 0x0, 0x0, r0, 0x0}]) [ 1207.946830][T31310] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=9555,uid=0 [ 1207.962341][T31310] Memory cgroup out of memory: Killed process 9555 (syz-executor.1) total-vm:72708kB, anon-rss:2204kB, file-rss:35788kB, shmem-rss:0kB [ 1207.978617][ T1044] oom_reaper: reaped process 9555 (syz-executor.1), now anon-rss:0kB, file-rss:34828kB, shmem-rss:0kB 06:30:44 executing program 4: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x1a9100, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) write$sndseq(r0, &(0x7f0000000280)=[{0x6, 0x3, 0x789, 0x34, @tick=0x2, {0x35e, 0x800}, {0x18, 0x8f5}, @note={0x8a, 0x400, 0x6, 0x0, 0x4}}, {0x9, 0x5, 0x6, 0x6, @tick=0x9, {0x8, 0xfffffffffffffffa}, {0x5, 0x10001}, @time=@time={r1, r2+10000000}}, {0x80000000, 0x6, 0xdc, 0x8000, @tick=0x2, {0x383, 0x4}, {0x0, 0x3}, @addr={0x8, 0x7}}, {0x46ced594, 0x7fff, 0x7, 0x14000000000, @tick=0x3, {0x0, 0x100000001}, {0xc4c, 0x100000000}, @raw32={[0x1, 0x3, 0xaeb3]}}, {0x6, 0x100, 0xc1, 0x3ff, @tick=0x80000000, {0x8000, 0x1}, {0x3ff, 0xb3e1e71}, @raw8={"305f2400c13a112871484835"}}, {0x1, 0xffffffffffffffff, 0x412bb82c, 0x3, @time, {0xd6, 0x4000000000000000}, {0x7, 0x5}, @raw8={"815c64aa3c8b46990b580d1f"}}, {0x0, 0x3f, 0xfffffffffffffffb, 0x80000001, @time={r3, r4+10000000}, {0x200, 0x5}, {0x7f, 0x74}, @raw8={"f646b266c83f56374c7f0b28"}}], 0x150) r5 = socket$inet6(0x10, 0x80000, 0xffffffffffffffff) sendmsg(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06000000a843089100ff803900080008000c0000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0x0) 06:30:44 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06030000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000040000", 0x55}], 0x1}, 0x0) 06:30:44 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06020000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0x0) 06:30:44 executing program 3: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000480)='/dev/cuse\x00', 0x2842, 0x0) io_setup(0x2, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f0000000240)={0x700, 0x0, 0x0, 0x0, 0x0, r0, 0x0}]) 06:30:44 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0xe}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 06:30:44 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x40100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a00]}) 06:30:45 executing program 4: openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x800, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06000000a843089100ff803900080008000c0000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0x10) 06:30:45 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06030000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000060000", 0x55}], 0x1}, 0x0) 06:30:45 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06020000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0x0) 06:30:45 executing program 3: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000480)='/dev/cuse\x00', 0x2842, 0x0) io_setup(0x2, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f0000000240)={0xc00, 0x0, 0x0, 0x0, 0x0, r0, 0x0}]) 06:30:45 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x10}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 06:30:45 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06030000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d4000000000a0000", 0x55}], 0x1}, 0x0) 06:30:45 executing program 4: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/sloppy_tcp\x00', 0x2, 0x0) ioctl$sock_inet_SIOCDELRT(r1, 0x890c, &(0x7f0000000140)={0x0, {0x2, 0x4e23, @rand_addr=0xa7}, {0x2, 0x4e23, @multicast2}, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x26}}, 0x1, 0x0, 0x0, 0x0, 0x200, &(0x7f0000000100)='ip6_vti0\x00', 0x3, 0xf67f, 0x51c4}) write$binfmt_misc(r0, &(0x7f0000000280)={'syz0', "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"}, 0x1004) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06000000a843089100ff803900080008000c0000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0x0) 06:30:45 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x40100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff00]}) [ 1208.634153][ T24] audit: type=1400 audit(1561789845.332:35): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=20218 comm="syz-executor.4" 06:30:45 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06020000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0x0) 06:30:45 executing program 3: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000480)='/dev/cuse\x00', 0x2842, 0x0) io_setup(0x2, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f0000000240)={0x3800, 0x0, 0x0, 0x0, 0x0, r0, 0x0}]) [ 1208.692465][ T24] audit: type=1400 audit(1561789845.362:36): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=20218 comm="syz-executor.4" 06:30:45 executing program 4: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001400)='/dev/snapshot\x00', 0x40000, 0x0) accept4$unix(r0, &(0x7f00000000c0), &(0x7f0000000140)=0x6e, 0x0) r1 = socket$inet6(0x10, 0xa, 0x10000000001) sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800}, 0xc, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0x4}, 0x810) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06000000a843089100ff803900080008000c0000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0x0) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000180)) sendmsg$nl_netfilter(r0, &(0x7f0000001380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x28488010}, 0xc, &(0x7f0000001340)={&(0x7f0000000300)={0x1028, 0x10, 0xf, 0x10, 0x70bd26, 0x25dfdbfc, {0x5, 0x0, 0xa}, [@typed={0x14, 0x40, @ipv6=@ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x2b}}}, @generic="9627eb905fa622de29f86082a415ced9bbc40d960efee4813a663ded23981671e2d18472b9e4a76d643cc2dae533a131ee1dcff6aee401654c4c582ffb8cf1c221a493003e5639c1c99ee8ed42044b46e3f31ad33139d36025abd63e783dede5f21911d13ca74849f7e059c0dbb1ac8ee150c750b43bc4272d0029b1a20d69b829edd9e40c934ed9d42c6fe5b93525f23c33e59f9e28f1a1aa315af21d2a8f99cf1bb17cfa5fe5792dec4030c5a341cdcbe65098fd421fbcddc8b9eabc3113658153b495d95bfbf94e7535829f16c6f2c1b997c711950b5b57e8dff0aa312122dbb3ed01dcc816e57bc71eb6afd962fce5f067a042f261a756848c6fe05803e5ea13b81dfaa16a5e6f6933ac06ddedbd29470bc9aa992f7263959081066dfc6db7a727b7738bd791a2aef4a5cef78907571cffe9747fd30166798c3b32e4fcb8d74ea470791f74f347766240732ba87d8c7d1613bd24ac0fe21a1981603af0d81cbf7c1aee77eec34cd20adc9595807bc9d638e7e5ba9fcdfd2bf4349ed81a69c6a855e27326db3e6a3a9bf65b7adaaad560feae62ed202cfbf5cc2b48d55487304b75dc93665c83ed0de77bdcf409fc5779daf93693c2de9155b212a06007c86b0b5f939b61e54d4784dd1ce84711e622bf395a5582ebff9c0bd84adcd4f92dd369b0db1ddb10157f61f3d1789f3d7e65f33c6ea7df2857e5a0fe8fa3a95529d58666be81c3a64d3bd0af6d804c4097c529d63681634d677a4d8616646b76d0655d27531585b1df2ca37af36f398ec34a2a2fdfad5b243ca478851c595f7e0c130b9a22e9ef571f71fad6840ee8dc1d80b430b3ace20666a67f307c4e5ea53fa5770d76b9e002d508439cbe962e14ac9d2a568a19d2f8282a89bf2d75ac06634d4d49f2cc8c270309bf06da673f0a0886959e03c7758c278ac26996824c3dfb4f69613c059baeeacbe4e20e30941c387a4a1fa61566c6822fc34b5fb8cad9fb16694b17a07fddb9beeb158dc34ceee819325c14ce6088124e71367f2952ff3bd4fca345eda45bc02b0bf1917f01c73661b8084e030e7cbb46da5411fb07380c99177037ce8c58554426d1c332e5762010261f6300a07f8416f4ba6b9f94b1c2eb7abfaf927c5c9cddafcf252c2b5d378afc2438e820e108c70c932425915b6976382c0ba7c4409f03c22f34f5bb5b63fd7aacdd154b97ada4fe6ab6dd12cec73038d22a55164075cfda2c37593b1bcf86b140b80fe953656b98c4a32b939bcb53c5e1c916f0649bd71e2e8e24feb45e7f4c36bd719f8e8e7d96fa38bf63f7e1572a0618223b68d39dec02dcc22bcac978657c1f60b1ab9104e5664249206d38f8f7650d1d032a1254399fe1f53945a2d24e5131d13f4ddae4b31fb466deb5b5916e15cf3aaa9ef24ce96791fa03fcd59cd3ab06320ed157b5f8373967d488f782d6959cb5609269c82e553006040390867410a6cb906aeaabf63971233aaee22c6fb9bac4e6eec708f311a3b3b07bd48124d415317d7bf8a8b5faabfa265931a13ad84214f935606abbdd0bc3630fc15db3a7d3ebd01c26400152d2dd4ae431ea63392da1bb99d27d536bea021ea994f0076f538da37ebbc355f090a3d00b812cad04563ec1c88008e58c34dcb956e6f683a48f253a2d08135c3b88eda30bc7691a6f20adc8bfff89531b09219c80789687deb3fa28a10f52ce69503a686a704086db35006287b3d4a0a3fc705dcd0a634e827ee0162c549b1467158dfc9c92f01c401dbdf942569aeb8e87f370e63c4a3071dd45c6d229b5b580eade37ff4b3efe0fb0a1e1f89d3c970667ce830c0342a17caa027be2c12d148e0efae0001afad18bb026a84929d5c184fcbe1223c7148883881b4cf83c383f723af5b2ec50d1246ac2b98d3da70499477aadc25dbaeaaa89db5091b47c3abecdd913fc6fa9d8cdea75604425604d11c585b8546bf55809c73acd213fafc738bf0a7fb4e0940eafb701d0ea3f5b6b927b1dbc0008957e51e6ec761fca908c9b0ab2c53723cc1f228f4c5466da30cb429130434906084216f8846c447663fdf309f81bef63b1b168b234c93b9e71e97e05c38c5638f121813feb1f53c8f24c9944ce900c2920cf4418986e44b10373caa38b14415a1cdf27d9b2bd4b87c0ed95234deaeb523e6751489418ae9a6f16b7924315a80078b1ba1d70624c72fc82a2d94f883bbc05fba7ae9aad2c8e37fbcdf583474083d3684c025cef73832edcf475ebda73c7b5362a58bd33ba3f4526a0d06d3ef28788237c2a9cd18be4f39f3bd3af4e35b9df907f463e3ce3fb7caa90efd3de178df51de874b606ca2ed1578683e9bf6636976411c48b20bce848a2d8dc72bbfa8861b9e2c4e87f4be3e711653d76441532a9d05693fbe6ac80344b6aa7ce15d5f9807fc7f57a1c708c1a321d156f7b287bf06c7b4399400616f4b769de0c16c58354b820bc3fd748f662c7da0fa89398d7649f25d87dade7d3d0d8d8cd2088e6f31fa374d43ed29b4dc560ae52912e1f09c4374f48877b7d4b1013099e44e96b63e8c5450443bdbabded3e7f08cdac801841fe8df01dd3ea00479d259f4aad55451f537d258eb1da802a4c62e28380e4d374efa969c05532c91d196a7c695bc1b012e5a7079d8405e3f4fba68aaea43d3ec686322ccc7ec928218aa6a2a1325b39fc800d2948b91ea52891389eeab4df3188c7a8989a5f4ff40492db8341fce32d4b20e89adfd819f821871512d225a74a598623a47e76bcf3e88059e0eb38a1cf1c545932e48c9a28bbf31844baca857ed14e6a3d55bf42d0da2cf8a2cec3e61dd3f933b511ba7fb5dd2d76735dc0f65a91036f218c2a16a461f443f8cca99b2e55b686124e9c7778606ce38a9358acb3134133c028a4accc1808f1df96db35284bdb30d3b4cbf1e048041d01ba344c1d1451777ace7e5c2ca76c43429524e47239c33d7810719bdd4ce0e1f42f56d67615646c1594d362ddf4f4efeef7c5db01b29bc95c270cddf2b7b23db76654adff17632e3c204b1e75f9ac8deaa057a5b6ef81a4a38f19f0c6aac364f52bdcef6034a42ea8d7754856a0f586bce52a37b39ad4ca05880de27ed0f908c75eb5c398637678a6ce99185e1ec1588251c4ad306dd6b1c075095bb0932353082e21f280609b9a976ec88717d34be3ec22d2587b9bbac2214320ed132861afe26234fa7e81e4bdbed6cda3c858b609e92f5749581374c858a0d80dfdb6c632ba3ce1db45feac4a81f8fa1cabc3ca14b1a068512d33da37addd9931c7ff361e615abe562694c71eca14bae2e697b2e229187fb7a1d5340db7511674bef4817cecd52dfc49115f9bbb25f7456bb525ae027c154af51a8939aae83020273ea247801d17cea03902e350d7a457ee06c05082a1d2b896c55d6871fadb090cb378b55b962170e6b57c72c17679193864cf62afa380220eb4b2cabd59b1f672a202d80a3dcafeaba2433e8b5abad7ff983b7571221f65d57d0b7d162ad37d0c59c54c07278f0273b6a0037d3e3f327c3a39c6f53b8a5aee006dc5e3518d6dafa80ce9cda10203e04344535c809314f2a604e4f0de4561469f697f9d97efc6c44f6ec8db0ed7a2a3de361947ce5dcbf67e0fa61df2ddb1f89958de2f0e9323d79fdc0ecf7c25e7237b9d188c6c1f6a0bf3f7d8ec2441db291fc77d2f859370c0130e263fea0fd949a5455699e268bbd6b338794896715b52009771ea579d6fa5d898b0425b29c95d374d49614e95fd38303082de5b523f1a7b6ad6981cc985a0f223c20bb6eeefcde73dd736f05707b078f7ba4a7f7a93aaaaf2f582331156661846c4910579f6377321c85f90bc8fea6792f1cfcf18ccb1476ca0669738ad8eb1d6f2dcc6d01f7d39ac489e62494876b9e7afec5ecc45f2f45a4392972f06dc3f9f2ff2d12aeb8f932f169c5899e30ea52fc9cff8d8b59db40d49db696211e5ebaecb43a5a1ddc5bc170f4d36af4de586a7f11aa0bb08107a90f78f512a0d5e1ad217d53fe45d119334f04cf796aaf72282c931a1d4a183dd3ebf5bad5a33926ca2d93b201fc05d0ddd8653fd295cc9761df755973467edbd6d9df671f066719de6f2b52a72b75afe4a1969e47349336fec4a50abac56fc376efb26fb7f5dfc6e4e91dc9cb278d4e19a34ea53ffb01c52d44dda8b6e8fc402f4f5294d6416fc31f4e490787cc3a40945ad1b7a787d0c8bc74841a7506f10c0accbb08fb0e3cd8daf120ee69eb905b32bbd770aee27b34f025894ae7e66e4daa11e42796b55fbef6f42450dcfb3fa6e671cb90cb1676aaca24ed272f4399f415dec6f4e4e0c86107d390699f78458e1f398a4964062aa206120ed630b775bd0392e3a21b3bca7aad2ae18a9a32fbeb17d0d35cf83a64898e0c7536099d35d7f581842da654553030b506a34a4b5e4c7309a3feec24dd9965193b78182655fc78d7b1d42c3edab383ff9052d3ad74624d7b56c533ce6e4804404e493db6a50b2dc7927fc084be8107ebbc67692d0d29a4ffb6846658b50f4473ab61e78db989c5ecaba7ec4bfc32a781438e964b83409588dd792083aca34ab3d7a02d4cec33c7b2f05b8ea1d55a53c09a46a71ada65d0a0e1a468de913fd0f8d6e6126b9356f89c3d941908f19d7110d0f829e4c4d22b2d80e9a811bcef3aab9c2c0a07a5ded64e94fcb631780b17034544b682badc009bc7d2bdd397318024c091f65a8ccc5815930dd44cf1480133de6be8288b10818d89084692a768e5abe0de5ee952419f410a565d55fe6e7c7d2997d4b29678d95f571dbbd73eb83cddb4943e9416af1110b04a200a83988619439595f472177d7dbb1cd90a87353295999c1354a52d61b660696619b00b7981943c9f0edfe85a22971bda7006d6bd9b05c9b1715ad1059aba9c379f8f8f3cd835bd5ded6e97622b2c7e3da8d36e122ceab6c515275a2a74efec8f87ad8b0266167edb92ecc0e56e41478011d8d41ef8cb451c16de5145931099aa48958628fec2a20d9fa9acfa47417d9f1ace1ee25eb987d11624e4117dc2672b07d4dc3d73a323f844584a39b7f63c8486fa347f9b1dca4bb79ec598cba4c2e0fabc7222b1033a7d86b5bf782f9641e04f81e17d9a7ec6524676253265b51fbd96519e5d1a0ccdd98e9038b36ae1c56cd400b893699458db7eb6bc47a0543c0e8438468bcd37440c742225d8ab5a24505abc89aa84ff744d0bb175ba512fc65893753460242023cf0f4fbcfe45135893da933e17fec7add9d4e6c569de403d603fb0479bc43e40050fbddddab999a6b10538e49868504dd3a3d9e76f140f48ad186c676da27fce54497764d5713a23baeddfb1cb50bf442580ae1a9887de11dc3ea2d0cfcb503462193083510c1776f25f47d9f9c450aa3fc7297f9995ef2db99b5d75a025dd5fd35466ca6cfef6e2fad7bb2f800523d060d4882ffd3a0384de59d14df509d1b4d5161d7f668a601d91723a9d6af9a7159600edae5bb5c3af4ae1dcf2f24e8298ab27289152b34f6d316a858c39f94606d57f6d66874867a7f6e4df17cbd8ae5aeb964ac7580f73121f95b5b86b4c5f3dae99407a4b6bb92e614192cdbd88f0d7acc81c3303335966590ffc6ad051028f1d1140ef0df89b60ae92491fbb41969c50604db024c0ec0c14aef7ed1540587ce42bbedeee9af3c9b1349dbf0dec0df63245bb47651a30e853345d9efcf74e93130966d91b35daa03d7af949336f8d4e42f568f84d2f93b891d315507bc58511b5ccea361e0b984f1671ee84b23f81ae879e5e8b9"]}, 0x1028}, 0x1, 0x0, 0x0, 0x4004}, 0x8004) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x483, &(0x7f00000013c0)={0x2e, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e23, 0x1, 'sed\x00', 0x32, 0xfff, 0x9}, 0x2c) prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) getsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, &(0x7f0000000080)=0xdb3f, &(0x7f0000001440)=0x2) 06:30:45 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x60}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 06:30:45 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06030000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d4000000000c0000", 0x55}], 0x1}, 0x0) 06:30:45 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06020000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0x0) 06:30:45 executing program 3: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000480)='/dev/cuse\x00', 0x2842, 0x0) io_setup(0x2, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f0000000240)={0x4000, 0x0, 0x0, 0x0, 0x0, r0, 0x0}]) 06:30:45 executing program 4: r0 = socket$inet6(0x10, 0x200000000803, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="5500000018007fd500fe01b2a4a280930a06000000a843089100ff803900080008000c0000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000100)={0x9, 0x5, 0x8000, 0x6ba, 0x4, 0x7, 0x7, 0x1400000, 0x0}, &(0x7f0000000140)=0x20) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000240)={r1, 0xb8, &(0x7f0000000180)=[@in={0x2, 0x4e21, @rand_addr=0x800}, @in6={0xa, 0x4e24, 0x10000, @rand_addr="d127d55426185bdafaa0eb13532e4671", 0xbbbd}, @in={0x2, 0x4e22, @local}, @in={0x2, 0x4e22, @multicast1}, @in={0x2, 0x4e21, @local}, @in={0x2, 0x4e21, @multicast1}, @in={0x2, 0x4e23, @broadcast}, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6={0xa, 0x4e21, 0x6, @mcast1, 0x400}, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, &(0x7f0000000280)=0x10) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/dlm-monitor\x00', 0x40000, 0x0) ioctl$EVIOCGBITSND(r2, 0x80404532, &(0x7f0000000300)=""/172) 06:30:45 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x40100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000]}) 06:30:45 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0xf0}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 06:30:45 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06030000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d4000000000e0000", 0x55}], 0x1}, 0x0) 06:30:45 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06020000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0x0) 06:30:45 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x40100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]}) 06:30:45 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06030000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d4000000000f0000", 0x55}], 0x1}, 0x0) 06:30:45 executing program 4: r0 = socket$inet6(0x10, 0x3, 0xfffffffffffffffd) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06000000a843089100ff803900080008000c0000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0x0) unlink(&(0x7f0000000080)='./file0\x00') 06:30:45 executing program 3: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000480)='/dev/cuse\x00', 0x2842, 0x0) io_setup(0x2, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f0000000240)={0x1000000, 0x0, 0x0, 0x0, 0x0, r0, 0x0}]) 06:30:46 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06020000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0x0) 06:30:46 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x300}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 06:30:46 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06030000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000100000", 0x55}], 0x1}, 0x0) 06:30:46 executing program 3: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000480)='/dev/cuse\x00', 0x2842, 0x0) io_setup(0x2, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f0000000240)={0x2000000, 0x0, 0x0, 0x0, 0x0, r0, 0x0}]) 06:30:46 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06020000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0x0) 06:30:46 executing program 4: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000200)='/dev/btrfs-control\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000240)={0x2, 0x3, 0x1ff, 0xe0, 0x5, 0x100000000, 0x800, 0x4, 0x80000000, 0x61f2, 0xc6}, 0xb) ioctl$FIONREAD(r0, 0x541b, &(0x7f0000000340)) r1 = socket$inet6(0x10, 0x3, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x13b) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="5500000018007fd700fe01b2a4a280930a06000000a843089100ff803900080008000c0000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d4000000000000004f333672085b72b7bc134e50d131e26cea8f1fb39997833490ec5bc483ee341b45db99f4d00c3e06452de976dc770e9ff93c29971a2e03f2ff17d26f9b5d042896fe371638de1fe7462fb08bf9afdb8ead7d09261f582d1e16e50b56c3a32b57ac9dd39be115d838d8d9b933daee909b8ba8de14244c4076904985832c321a97b6f69ca6a5a0d81f1a169f77", 0x55}]}, 0x0) syz_open_dev$loop(&(0x7f0000000380)='/dev/loop#\x00', 0x2, 0x200000) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000680)={{{@in=@local, @in6=@empty}}, {{@in=@multicast1}, 0x0, @in=@dev}}, &(0x7f0000000780)=0xe8) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/sync_refresh_period\x00', 0x2, 0x0) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x300, 0x0) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000300)={0x1, &(0x7f00000002c0)=[{0xffffffff80000001, 0x100, 0x7070c145, 0x6}]}) ioctl$VIDIOC_QUERYCAP(r2, 0x80685600, &(0x7f0000000600)) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4008af14, &(0x7f0000000980)={0x2, 0x3}) r4 = accept4$vsock_stream(r2, &(0x7f0000000400)={0x28, 0x0, 0x2711, @host}, 0x10, 0x80000) ioctl$int_out(r4, 0x5462, &(0x7f0000000440)) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@dev, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@loopback}}, &(0x7f0000000580)=0xe8) setsockopt$inet6_mreq(r3, 0x29, 0x1f, &(0x7f00000005c0)={@dev={0xfe, 0x80, [], 0x29}, r5}, 0x14) symlink(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00') 06:30:46 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x40100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}) 06:30:46 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06030000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000600000", 0x55}], 0x1}, 0x0) 06:30:46 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x500}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 06:30:46 executing program 3: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000480)='/dev/cuse\x00', 0x2842, 0x0) io_setup(0x2, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f0000000240)={0x3000000, 0x0, 0x0, 0x0, 0x0, r0, 0x0}]) 06:30:46 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x40100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000]}) 06:30:46 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06020000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0x0) 06:30:46 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06000000a843089100ff803900080008000c0000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x0, 0x0) ioctl$BLKIOMIN(r1, 0x1278, &(0x7f00000000c0)) 06:30:46 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x40100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000]}) 06:30:46 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06030000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000f00000", 0x55}], 0x1}, 0x0) 06:30:46 executing program 3: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000480)='/dev/cuse\x00', 0x2842, 0x0) io_setup(0x2, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f0000000240)={0x4000000, 0x0, 0x0, 0x0, 0x0, r0, 0x0}]) 06:30:46 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x600}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 06:30:46 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06030000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000fc0000", 0x55}], 0x1}, 0x0) 06:30:46 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06020000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000002", 0x55}], 0x1}, 0x0) 06:30:46 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x9) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x40081, 0x0) ioctl$FIGETBSZ(r1, 0x2, &(0x7f0000000380)) socket$netlink(0x10, 0x3, 0x1f) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) setsockopt$inet6_mreq(r1, 0x29, 0x15, &(0x7f0000000080)={@mcast1, r2}, 0x14) fstat(r1, &(0x7f0000000300)) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000100)={r1, &(0x7f0000000180)="da38d304e92ce65c00f79988bec198d93b9a4435ba1260a2a4f57c77b138280f8eb897ff64039520c75bc9a07bb4e447cc06f6aa24cea782a9ad43a219f4b9cf0a577c305ae448a371b22af61b5647c4943f2572bd8e5cb0286b56a3d62ad732b739d51a4da2225bb85d57e42987ad935701743db130bed0e536604707febff69e0798"}, 0x10) socketpair$tipc(0x1e, 0x7, 0x0, &(0x7f00000002c0)) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000240)={{0x7f, @dev={0xac, 0x14, 0x14, 0xe}, 0x4e21, 0x2, 'sh\x00', 0x8, 0x8, 0x68}, {@multicast2, 0x4e21, 0x0, 0x5, 0x2, 0x3}}, 0x44) ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, &(0x7f00000000c0)={0x1, 0x5, 0x1000, 0x100000000}) gettid() write(r0, &(0x7f0000000140)="f0ca1b828d8d2aedad26dbe3d8bc2007ff5eae8615", 0x15) syz_genetlink_get_family_id$net_dm(&(0x7f0000000440)='NET_DM\x00') getsockopt$IPT_SO_GET_REVISION_MATCH(r1, 0x0, 0x42, &(0x7f00000003c0)={'HL\x00'}, &(0x7f0000000400)=0x1e) 06:30:46 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x40100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000]}) 06:30:46 executing program 3: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000480)='/dev/cuse\x00', 0x2842, 0x0) io_setup(0x2, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f0000000240)={0x5000000, 0x0, 0x0, 0x0, 0x0, r0, 0x0}]) 06:30:46 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x700}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 06:30:47 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06020000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0x0) 06:30:47 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06030000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000300", 0x55}], 0x1}, 0x0) 06:30:47 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000), 0x1, 0x0, 0xfffffffffffffe9b}, 0x4000000) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000280)=[{0x78, 0x113, 0x1, "dc444813e47b7ef07eaac780f58c28788e0982a1cc136f0015438cbd292d0ac42e004b7425cb377109ae5af4866b10d1daf00658d567c405ecc35a49d9cad0c2fc973bd01f68e38e13e8811a9c80e904d84f16517c4cd8b9bc3f2a88ca04fd8f82b1a6"}, {0xf8, 0x11f, 0xea6, "0ca58f842f702fc388a679db659cbfc1c9f1f5f607a7469f690f6fdc7bcea491e8873f4325b7282c034bfabad2658af0c70cc5f86fb3d3019587ed3666bfd8c798e6ccfaf4b7f83e97c62f0c10520e2dc30fc791ca4a768b35e828d2bdd6c95b14c55e10abf813392c40169f029047905aa4e8f591a9bd86055087290ebc59643975581238b07b093935c2ba6a2ddeefb8e6d5b5ec27d83f702da880d611021f2beba19b85efdc584d95c30f29595c3401c4a256c4d14ff63755797c60d3be1f4e63da6bbdbb5538c9993c4f7455e5f3dcd639eb912b04ebc5189aa888679b6520"}], 0x170}, 0x15a779c9af3e06a4) 06:30:47 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x40100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000]}) 06:30:47 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06030000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000600", 0x55}], 0x1}, 0x0) 06:30:47 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x40100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000]}) 06:30:47 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0xa00}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 06:30:47 executing program 4: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x2040, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, r1) r2 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06000000a843089100ff803900080008000c0000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0x0) 06:30:47 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06020000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000058", 0x55}], 0x1}, 0x0) 06:30:47 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x40100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000]}) 06:30:47 executing program 3: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000480)='/dev/cuse\x00', 0x2842, 0x0) io_setup(0x2, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f0000000240)={0x7000000, 0x0, 0x0, 0x0, 0x0, r0, 0x0}]) 06:30:47 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r1, 0x8004562e, &(0x7f00000000c0)) fsconfig$FSCONFIG_SET_BINARY(r1, 0x2, &(0x7f0000000100)='proc-\x00', &(0x7f0000000140)="345dec62a931846c191fe5fba25a46fd77f67ed894b2d9b96c99c41d4b1cefff503458cb7bf9ba546f030b071e92", 0x2e) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06000000a843089100ff803900080008000c0000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0x0) 06:30:47 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06030000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000a00", 0x55}], 0x1}, 0x0) 06:30:47 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06020000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0x0) 06:30:47 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0xc00}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) [ 1210.866994][T20433] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1210.915473][T20433] CPU: 1 PID: 20433 Comm: syz-executor.1 Not tainted 5.2.0-rc6+ #62 [ 1210.923498][T20433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1210.933921][T20433] Call Trace: [ 1210.937227][T20433] dump_stack+0x172/0x1f0 [ 1210.941663][T20433] dump_header+0x10f/0xb6c [ 1210.946129][T20433] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1210.951956][T20433] ? ___ratelimit+0x60/0x595 [ 1210.956640][T20433] ? do_raw_spin_unlock+0x57/0x270 [ 1210.961768][T20433] oom_kill_process.cold+0x10/0x15 [ 1210.966902][T20433] out_of_memory+0x79a/0x1280 [ 1210.971877][T20433] ? lock_downgrade+0x880/0x880 [ 1210.971893][T20433] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1210.971910][T20433] ? oom_killer_disable+0x280/0x280 [ 1210.971921][T20433] ? find_held_lock+0x35/0x130 [ 1210.971944][T20433] mem_cgroup_out_of_memory+0x1ca/0x230 [ 1210.971958][T20433] ? memcg_event_wake+0x230/0x230 [ 1210.971978][T20433] ? do_raw_spin_unlock+0x57/0x270 [ 1210.971996][T20433] ? _raw_spin_unlock+0x2d/0x50 06:30:47 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06000000a84308910400000000080008000c00390000002d0000009b7a136e0400fb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0xd5}], 0x1}, 0x0) [ 1210.972019][T20433] try_charge+0x1042/0x1410 [ 1210.983397][T20433] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1210.983417][T20433] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1210.983436][T20433] ? kasan_check_read+0x11/0x20 [ 1211.035773][T20433] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 1211.041392][T20433] mem_cgroup_try_charge+0x24d/0x5e0 [ 1211.046880][T20433] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 1211.052842][T20433] wp_page_copy+0x416/0x1770 [ 1211.057627][T20433] ? do_wp_page+0x486/0x1500 [ 1211.062333][T20433] ? pmd_pfn+0x1d0/0x1d0 [ 1211.066698][T20433] ? lock_downgrade+0x880/0x880 [ 1211.071563][T20433] ? __pte_alloc_kernel+0x220/0x220 [ 1211.076774][T20433] ? kasan_check_read+0x11/0x20 [ 1211.081635][T20433] ? do_raw_spin_unlock+0x57/0x270 [ 1211.086781][T20433] do_wp_page+0x48e/0x1500 [ 1211.091306][T20433] ? do_raw_spin_lock+0x12a/0x2e0 [ 1211.096351][T20433] ? rwlock_bug.part.0+0x90/0x90 [ 1211.101396][T20433] ? finish_mkwrite_fault+0x540/0x540 [ 1211.106871][T20433] ? add_mm_counter_fast.part.0+0x40/0x40 06:30:47 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0xe00}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) [ 1211.112615][T20433] __handle_mm_fault+0x22e3/0x3eb0 [ 1211.117749][T20433] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 1211.123458][T20433] ? find_held_lock+0x35/0x130 [ 1211.128254][T20433] ? handle_mm_fault+0x292/0xa90 [ 1211.133304][T20433] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1211.139771][T20433] ? kasan_check_read+0x11/0x20 [ 1211.144733][T20433] handle_mm_fault+0x3b7/0xa90 [ 1211.149601][T20433] __do_page_fault+0x5ef/0xda0 [ 1211.154409][T20433] do_page_fault+0x71/0x57d [ 1211.158920][T20433] ? page_fault+0x8/0x30 [ 1211.163168][T20433] page_fault+0x1e/0x30 [ 1211.167323][T20433] RIP: 0033:0x40e6b8 [ 1211.171223][T20433] Code: 8b 34 c6 4a 8d 04 2e 48 3d ff ff ff 7e 0f 86 77 ff ff ff bf d1 ea 4b 00 31 c0 e8 c3 35 ff ff 31 ff e8 0c 32 ff ff 0f 1f 40 00 <89> 3c b5 00 00 73 00 eb b6 31 ed 0f 1f 44 00 00 80 3d ae 1d 66 00 [ 1211.190831][T20433] RSP: 002b:0000000000a6fb00 EFLAGS: 00010246 [ 1211.196910][T20433] RAX: 00000000f702be70 RBX: 0000000023d195bc RCX: 0000001b31920000 [ 1211.205094][T20433] RDX: 0000000000000000 RSI: 0000000000001e70 RDI: fffffffff702be70 06:30:47 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06030000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000c00", 0x55}], 0x1}, 0x0) 06:30:47 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06020000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000ffffa8", 0x55}], 0x1}, 0x0) 06:30:47 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0xf20}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) [ 1211.213080][T20433] RBP: 0000000000000003 R08: 00000000f702be70 R09: 00000000f702be74 [ 1211.221150][T20433] R10: 0000000000a6fca0 R11: 0000000000000246 R12: 000000000075bfa8 [ 1211.229127][T20433] R13: 0000000080000000 R14: 00007f76d1661008 R15: 0000000000000003 [ 1211.264691][T20455] netlink: 57 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1211.284745][T20433] memory: usage 307200kB, limit 307200kB, failcnt 3313 [ 1211.292152][T20433] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1211.300086][T20433] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 06:30:48 executing program 3: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000480)='/dev/cuse\x00', 0x2842, 0x0) io_setup(0x2, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f0000000240)={0x8000000, 0x0, 0x0, 0x0, 0x0, r0, 0x0}]) [ 1211.326948][T20433] Memory cgroup stats for /syz1: cache:0KB rss:211248KB rss_huge:163840KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:211248KB inactive_file:0KB active_file:0KB unevictable:0KB [ 1211.419341][T20433] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=9902,uid=0 [ 1211.456993][T20433] Memory cgroup out of memory: Killed process 9902 (syz-executor.1) total-vm:72708kB, anon-rss:2204kB, file-rss:35788kB, shmem-rss:0kB 06:30:48 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x40100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000]}) 06:30:48 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06000000a843089100ff803900080008000c0000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0x0) getsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 06:30:48 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06030000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000e00", 0x55}], 0x1}, 0x0) 06:30:48 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06020000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000ffffff", 0x55}], 0x1}, 0x0) 06:30:48 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x200f}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 06:30:48 executing program 3: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000480)='/dev/cuse\x00', 0x2842, 0x0) io_setup(0x2, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f0000000240)={0xc000000, 0x0, 0x0, 0x0, 0x0, r0, 0x0}]) 06:30:48 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06030000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000f00", 0x55}], 0x1}, 0x0) 06:30:48 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000080)={0x100002, 0x1e000}) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06000000a843089100ff803900080008000c0000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0x0) 06:30:48 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06020000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000014", 0x55}], 0x1}, 0x0) 06:30:48 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x40100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f000000]}) 06:30:48 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06030000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000ba1b00", 0x55}], 0x1}, 0x0) 06:30:48 executing program 3: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000480)='/dev/cuse\x00', 0x2842, 0x0) io_setup(0x2, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f0000000240)={0x38000000, 0x0, 0x0, 0x0, 0x0, r0, 0x0}]) 06:30:48 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x3f00}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 06:30:48 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x40100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000]}) 06:30:48 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06030000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000003f00", 0x55}], 0x1}, 0x0) 06:30:48 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x4) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06000000a843089100ff803900080008000c0000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0x0) 06:30:48 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06020000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000ffffff", 0x55}], 0x1}, 0x0) 06:30:48 executing program 3: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000480)='/dev/cuse\x00', 0x2842, 0x0) io_setup(0x2, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f0000000240)={0x40000000, 0x0, 0x0, 0x0, 0x0, r0, 0x0}]) 06:30:48 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x40100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48000000]}) 06:30:48 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)="5500000018007fd500fe01b2a4a280930a06000000a843089100ff803900080008000c0000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0x0) r1 = socket(0xa, 0x5, 0x1ff) r2 = syz_genetlink_get_family_id$team(&(0x7f00000000c0)='team\x00') accept$packet(0xffffffffffffff9c, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) getsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000180)={@dev, 0x0}, &(0x7f00000001c0)=0x14) getpeername$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) getsockname$packet(0xffffffffffffff9c, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000380)=0x14) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000540)={{{@in6=@remote, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@multicast1}}, &(0x7f0000000640)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000740)={{{@in=@loopback, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6}}, &(0x7f0000000840)=0xe8) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000c40)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000880)={0x35c, r2, 0x300, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r3}, {0x1fc, 0x2, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x81}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x3f}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x1}}}, {0x44, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x14, 0x4, 'activebackup\x00'}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x3f}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x912}}, {0x8, 0x6, r6}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8, 0x1, r7}, {0x13c, 0x2, [{0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x4e}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}]}}]}, 0x35c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 06:30:48 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06030000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000004000", 0x55}], 0x1}, 0x0) 06:30:48 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x4000}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 06:30:48 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06020000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0x0) 06:30:49 executing program 3: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000480)='/dev/cuse\x00', 0x2842, 0x0) io_setup(0x2, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f0000000240)={0x7ffffffff000, 0x0, 0x0, 0x0, 0x0, r0, 0x0}]) 06:30:49 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06000000a843089100ff803900080008000c0000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0x0) getcwd(&(0x7f0000000080)=""/220, 0xdc) 06:30:49 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06030000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000655800", 0x55}], 0x1}, 0x0) 06:30:49 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x40100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c000000]}) 06:30:49 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06020000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000ffffff", 0x55}], 0x1}, 0x0) 06:30:49 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x5865}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 06:30:49 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06030000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000006000", 0x55}], 0x1}, 0x0) 06:30:49 executing program 4: r0 = socket$inet6(0x10, 0x1, 0x0) sendmsg(r0, &(0x7f0000001740)={&(0x7f0000000080)=@nfc={0x27, 0x0, 0x1, 0x4}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000100)="2eb689b712d2bc21eea9686f72c8d3fca0a76e432f813e240599ec1513792cffbda0aa2d7d63fef82b", 0x29}, {&(0x7f0000000140)="61c440caa7948c40c1003a712f75c88561509bf6c8938c3f8f274bd94e85c8118a65f561d999a78fade3bf2a110270133b57993e74b77807b1aaf62a712c8d9e050ddba6424f444731bf9f5deb59e5afaf93685fd84c231e460d8eb26f9c24f0384eebe3425629ca1836e6c971813c2711", 0x71}, {&(0x7f0000000280)="4e0cffc0b10d800d3c11643467afd608af55f5f9656ff2a0cddd421aca4ad401fffba792a799ccfa58608c5b83ff4f4032b346a1d30510a7294bb5dda6709cb139d0f7b3b83c400cad517745a1535ab9c8df164993d5644b53df7e27c69b6dfb01343dddf9418fb51f8825c2a7ae1e2d6138517b2f6dd8a87335f103d8c585fe228c41eaed2e0cf12096bb99664b2c7b76f30d226addca9ec6eb5fdaf9397bdb627a891712709c1380b662a31f4b87f1bb4860f711f0163c01fa8cc84c0ad78859c452c72993b19ba24b384829755bd7aa99962ed009f481f2418a50315fbabb", 0xe0}, {&(0x7f00000001c0)="2a80a5694876c1709a7a", 0xa}, {&(0x7f0000000380)="cedc3e6aa1500c427b0b496e16738ec2a28d98bb0e9eccd3afd15dfb3f9f13416b25a2afa1699341b41ef6b0c2c759562cd7aeb278112099f2044dd42d11dcd6323b8d77350e41cddd828521ed047da6fd292634b0f656eef2810c49f48f22a88f1f6b8fec00f9b87fdd9a2aa74bb25729938712af3a14f194cced6c5d0928ed8ff2bd1ef33ce4", 0x87}, {&(0x7f0000000440)="34af7b6f3339c9cc01a49ed6fd3c8126266a21ae32620e431b35ac95a48e22f5bc8f2071ef798e0a74968aa68d67975e273afad6813681026c10bbf76dc9e5dfec80182c75b5a8440072c9ce1205e56a6afe901f07772fc807824967b8b7358e604bc15674197854c71392", 0x6b}], 0x6, &(0x7f0000000540)=[{0x1010, 0x3a, 0x7f, "cb2bbb1698bd3f46d1ea16c8811b5a1cce92ed295ac8441cd3d40bd4685c4a1c469ecdc8ded61fe49953d9de87f8e32c53599794056d41bdfbbd9e6d9ba5711ee071176e0bf2d8b4fc679570b522555ad384c4c1b06a0173be6fd8e8bffd26f33f6a97bfc76f2fa81db9247070b48ee01c9c6c0e35cae41101da7d5361ad1e8ded82a2dae2cfd6e7b8b7320a28e8368465b7bf363cc3a7c6b7afcab065ed0f6dd5a9af7d27883704cddabe5f6b3205f6d372eca151df9a3b5de27a2ab858a454086ceef2e0461585edd667d1826abedf65514aac8d520aa2942e3759d6edfabf2fe0a277853bd66d43c4161d290471b2f5b05558d84df028c697edd2ea0c857732f05c6dc90b5d42ac26914d8ddcd9be323cc7ce974f20e3651d720883ca7b512ebfa8292b55540c68deab932e2caf1245d950686b290e670e0eafb188218f12fd5d4e188746f891ee5b7759867aaf9b9f85db5fe5cd63722fce201d3e9161c0fc2390073cbbb36f8931fe9b8b4d95e201dd376b6f99cd2be8bdcd66dc96573e818630aec253c094d4c833d380385bd005fea23ccde71daa14c993083d6375aeb973f98d13bf48c8b3bc2d71ad8f13431ecbff9d70a99481f95dfd66ee8a9d95e3d46ba5212f79c4e2a994d1544be0b6034281e086ad3482e3f7fe55617428dcd3a136adc7f886ba1d03627123a2ef9e5e05dedff8ab61418ff1f6782c6d1fa65f8b55e37bce0a804838866760f5811c01d87ec3042732973d82a7c7ce9048ea7a29a991b4773ba0fc929227b1c8caee1bfcd1ae0f96c0539d88e623c3f733325bad91079ef98a5a296583c829dde9a2a4cc606e16eff8e4a76186d9a92d9a7bc65b9c731d2513345d4597a23998ae3052e94debcf81d88643940666f8d66adc81cfa615418e7e667ec19c545ebfc2aa97181b351b0311bc517236cf79f2573b421d6cad2fa59b1a12aa3a492b92bd49337d34a9f7153307388ba5ec6ed48253aeb68bc70c9f51b23b1ecd6d1a7d6aba3250e2a06f05407b9e5ffdf67e72d9cd39a61d63af5c94ec3a1502263e97f98d9493d872716fbe3e6ae8b3c75e3310c4470d83066730b02f1c4d5162aa3264f3194c2da7c316096863c2623ec004498988f0ca5f0a1aad206da55429318c6fad3bc4d536e3be1ad0ce33ec6915ab87facfbe7356e9e5030317b4a60f2834aa29e3b1066a558f2251f117376ed4af551b93013a297a7432a40a38ae14b583ebccb78e2a34c33d087952cf4e1b6cb4eaddeffb127940248d4065ef283492a7e8b0b6d138113f4ff58d752d722576eed2bf08e631a27c14950017c9ccbd4a298df7c11d7c527a9218cae833c879da8d53ba6cc4857165aa84bc383727313a04b68430e621fa60d9cb3a700884a90372bbec4162fea5f430991543d2337d2eda43decbdbe2ea4acc07a9b6ce1e3f89b445b2018d20ec32ba3772fa9759605772772f9046aaf3affcb1a98c19b33fed48c748c784f14ed63cdaeb11f894b78aa1bb4dcc0ad0510d3f9d90176cfbb59e5a69434f71729d2e6a7937d330a50f0c0449e600ad9d6c024b2793f50e2cd27d47db09b438958238600f6a89777e976355cc57f312c53f51ad0c7027b2ff7ca4fe6d65f6601fdeabffdd040ce4f7ffe436a306dac0aa211000772bc94b13ec2bc6da445d47d9d60ac9a91ef3f8f69c025f90768c6955489275f93c619ea275eae5a554525e919a778ec7751080d5011189bda6a3baaf54f23e31c8513e9d1f07a5e03753d6fb6289df3f4afb0d5ce369c61d53045c981aa805eceb877aa2ad70861685fc38881290e6e61954f01749d147fd79303537170165c170fea084c734dac525e51b0eb79301aeecc75987cebd5802f998aa24615417b7794b0eee132a636ff4f3e96d80aea12bd8a61992394c97e7fed627e4e30ceda8e41f86f803421cc990f383b4049cb27a43e04670d704e23bf456e2df589842c8732decb63e9caddf5547be71cf5afece7a157bdb310914aca92acb97039cc5cfac38f84e0caa6b3072c44e17930714048fdf6f5b3b20d6efbdf564b22f652d1b9a352a67cb4c577a2477c692cfbcc41a047410b258f9d5b15ce27c9255d77f0819455e9c41b6fc66ada2b634f079807f96b87a732fc7ef5596098be73bb27e6cb4786e32d3d13b86253a35ff152f3e0604b45337ecd7fd7dd8a3798a03a4a8b1cf4c1d69f2d625016a3db5a79dc28622f9a725d1bfcceb5ef60c06166f905e3b1ff44b038a407944435c974f1891ee2cfb4b7e8c1dee6d423bcfd6d4b84db54be2a7c4581cee924ae98bf714179d445fa37b79e75076b94b59d79e7663004e5b065d94865e1fcb2a03794730b695722dda6bc2a340e057faab5f18107e0ff88fe5e611307a8b7357fb1b9c69c56d16fda2dddd085a11f352302062ba19df2fa7f99d0c41d883fcdfa4f58be6eb8f7597a412b4c2cb2118ae6e373d06e47cc93441b6748c5756673ba7bd015a3e54b58414fe3c5d80775902416e4cd744f1f1ac48e1cb669ff5a134b3dee362f2055b9d5fad6e0a343262b2128e8f7d918a287b67a257c921d17c52cf36341302926c1ec150221f7b7c94cba525ec0a9adbf34f74384544d964ac23b2cd08699f4ed0a9372c512e6d505dcd49a0f4b2f81e7ed9b476ee2cfca304f33e7358e8659e33cfa0d3be0e2a64eb0c7b1ec30f167d5eb45d4300401c2a3bdf3075e6550964af3b2360e46343b622c4c2ad9da985cd4deb78e85ad6cda34f4cee95cc98be203ad035ff794a7d1173712e23008075b215fa1d29d6e14b76db8445b3d46657cc5a72883f0ee345bbbef13686d5e37e2d58e8c591c9f35e78006df62da80d60e24a434abc92a5966b021065735405f7042461bd0d4c4908eca8ccc78f85e0df58f5808cb73d078775e55e29179112c72020f6d38a1439568cad862ad9215e3a56a42cf07755afc2f783d8344bc889eb829b866320ed63d578e3416e5b59dd831a5a8a07eeab740bc9b9432c3eb5431b1ebb8521a55f24ffa8d783077e9f09e13724828e07adda03fa21dd96b7fe5c8d0e4f031cbe3db1e45065554931c660d19c9f585c8315bf0d078932eb378c55e668a0cf2f6e646fa4bdfb66215afdb63b73f94937f77577c43be58a1cc56984e5736c1d77fa589538105c5cfd2537171eb912b8769610265704c2355be32a3867a52760d01dc66c0311e5c26a7db68b79f15b3354883409d3b673abcc0e3d271c5872302a5bec0c310ac3fe2b02dc19720e01c73f9a15a65bfb3ed8ed29499fbf0e00ef1e98f9168a83558953b4fd7ca23db7c409874de05b6f3b1bbd67e005db038ae5e26404ac0629322b9536a607dea006af84a07e6ddb2f7a24afba339ece74c7a36cd3544a6aacfd6c2110a0a74877bc1b3390b09457625be91296fc309409b28c25e5d1cfac7f4cf113cbca01eef92c11543eddb82d791c0b7b353b603cc5ec1390a2c8ee23b92b3bfff3a12ca3b611d7fc819dd1c0028a4406160cf6d5b94dadbf2524711bc92e23fe74aece2319430df0360883f9241cd77bc0344d947d6e70fc76d72d5093e4f3aa4239349c17e04bc1b480092326d6a87007273c58c6ddd41bae5e02ad2203614099a6fb485729a830a3a66a1da47bf1212c8352cc88081ef0157c611d367f848cc290a06b1981882f2c7c3fd149748b0f28987caafb267d55d27bac585bdc3148667440e82646d5a1740a9b18093a989fea3b9d0b0202c3bdd1e9865a83fc42b3359a13f7c4f5535aa9dadcc0500b2684b32268c7686e90a548ca072004e985c334f536873835a2037a9594c73058813ddc55b5838a80903141a1b33110ba8a66d412bf7b974ff4023c17d3b7dcfd5779b437bd4b5f3c337d5ba69d7a978591c2a61fee2df93bdbb56d00276c3da6c5dbfdd13bdc721c5fcb2de8edd35f7a6508412106ea34d5cbf31135e435d9c5d02a37971f9c3ce710ba262325c71e8cf7026dbe62af521014cc9126223d93ad1f27aa1e8b6fb574a1a28838df7a7a0078175943a10bde417fb5013bd466df6bdb68b7faf746937a51a6f5988050b60bde09c6b3126d052e7a058adc4e62cb07a93f858e90995b5670318e803ba5dc07669a7c03aeab0cc9415ed3784582995ce96bfcd45a21f7b413ec54bf655f15d95edb812fc5a57f2d7717f22825765b20a7eca33ad03a121d180708279cbdf95cedb7e3e3345689390430b0af7ce2ac346a449a73e134423abcc757868180b4491f671a5c7f34077a6fc32deffdffd6809827bfd7b4f7e08660c1863dada7b92eb991a5fec0350984709ea9e61566ef6af59b44a25dcbd748666dbb00599e6015c5c3cc633bd6ae14e49257f8e4275162930d0f64931bfcffcf3af00242eb6cb7ab94d57941a5b3c364d7ab0c320397517c394ca7d81e794f3df68c2e8b674ad2161da1eb960f27de3c0627ffbca6265e7be630020cd94bd94a29638c8970662d4842e681d7e7c3038714d7f99ee021ce29921dced036b42bba56db34957b021de9abfb9d3f74a380e33f699390aed4a0e88774fedac1ccfd834a939e8180538d680d61e422f780e7bf8c12a440a5f892fbd8f280ee36584df7d61a360900deeee89fdfad6aa629969565a23346d18bdbcdd28a8224e8a29720b78d351002e85b44cc1df55eec2d838adb571a04ddff3a6b95e75b814ab59ab5b23f5c17262179d1caae031ef41bcb4ba2848fb7359bb88f7afb89af9a12e1913f38f5737bade225392dfd918d57d8b53d3b186f7f913292a8651056b4c1128f92bf98df917dfc5abe5a52920df444424f2b7064652d1afd4eb5c188d3f73898632a4cc6da331e61e9a593b15ee960a5db5085ca1c1e8654f26172f18d5c64a50f4cb67318e19ae582d6bfd9af7733e1bb92af9a75e7dd85a0a5f3e4d2eff426d8d8e9e347b9b3a9af3b866bdfef46030e26e1014c87fdcdee9cf17d7e4df1184e0c4d491cad5e2c78dca02cfb0099acca4e5fb9a25dc859e57339cf615a3c82e92507935cabeab64f025028a4161aaf13e0b2ac6c228f47e707ed2f700a458a9203f3d8fe3aedf14e781bb10b84baca6661bc3fc35b8bbe6b3d9037602fd793a229060f6c7fba20a9d67bbdb61582a5bf2f36f449fc450ae410e1f47213b8993b7ae8bf28ae4ac338a62646603832b03879d5fecffc73989f60b81d69555bb1fe4f850fc47af3dec9b2f09737e8dbcaf05b0e73173dc72b704d38afae5eb99a96de927136d3c91a296ca217a450c13c501c7fba0b6a5dd33129afde53feb5296dea1e17e447fefb278b3c030bb12bfb4dd894900aa6359adab1475fb6b93a70669baf52687acf40b37074d94081d506f047ab2e6bead6f14a46acd7e026baf087fee4dbbbbf46735582b3ae72e23d7ceb7cb6b668fc94722b4ddc11f4a29a6442b2613200f98b9da8cc29e4b057c9d19d364398d09035c5e4cf66520a597b91e59d6abd1db2432a9e19a73661f6c43d36d670d89b474d8cab2cfb64604e353a32f43f39dda4401227da6ecd22f59d93f0567ec6be6219e0ab932870fcfaeee5f09590fc1f49ce3d46a27ead3935a1fe368d07bbaa7c096dd953618baa18791b02e5ce8921fa6200586edfc6068613f6d6ae4d1202686671803ac257d9b7df54fce9fb113807c41b2e83bbbcd297410555de4e8344ff454db0e81410fa43498e259a9e6fc428071e3f6d63a649165f15c0ec65cc70eecfc2a125610136a527e553a6bbc40f06d058c709205b4e14087683369959c39945e6194867869d67081654d560fd701ca643ae"}, {0x110, 0x13b, 0x5, "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"}, {0xc0, 0x0, 0x30c, "0b433b761c288a3d7aeaaf748a2907a8605f8a18eb4a1c2006f44d5cdd880e948c44c42011cd605a61ab52865aebce1a642a19f4d2c917f829e96b0d494215e041fb7c17a1a6e70a95f443faba36a1391d66da7cff0c36703837bf194f8c6f48aaf1b16af2069bd6a653220c3cd6a04eff19981439ba87f148e040b97166d668f02d8a72b7bdc67a2d217f088547775211a5ee852bd8da2dd73241177d1c7df058ad5dce0815dce9e606fb"}], 0x11e0}, 0x4) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06000000a843089100ff803900080008000c0000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0x0) 06:30:49 executing program 3: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000480)='/dev/cuse\x00', 0x2842, 0x0) io_setup(0x2, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f0000000240)={0xf0ffffff7f0000, 0x0, 0x0, 0x0, 0x0, r0, 0x0}]) 06:30:49 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06020000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000080", 0x55}], 0x1}, 0x0) 06:30:49 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x40100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68000000]}) 06:30:49 executing program 4: socket$inet_udp(0x2, 0x2, 0x0) r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x814, 0x2) ioctl$KVM_GET_DEBUGREGS(r0, 0x8080aea1, &(0x7f00000000c0)) r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06000000a843089100ff803900080008000c0000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0x0) 06:30:49 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06030000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000586500", 0x55}], 0x1}, 0x0) 06:30:49 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x6000}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 06:30:49 executing program 3: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000480)='/dev/cuse\x00', 0x2842, 0x0) io_setup(0x2, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f0000000240)={0x100000000000000, 0x0, 0x0, 0x0, 0x0, r0, 0x0}]) 06:30:49 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x40100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c000000]}) 06:30:49 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06020000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d4000000000000c0", 0x55}], 0x1}, 0x0) 06:30:49 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06030000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000fe8000", 0x55}], 0x1}, 0x0) 06:30:49 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06020000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0x0) 06:30:49 executing program 4: r0 = socket$inet6(0x10, 0x805, 0x1efffffb) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06000000a843089100ff803900080008000c0000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0x0) recvfrom(r0, &(0x7f0000000280)=""/4096, 0x1000, 0x10000, &(0x7f0000000080)=@isdn={0x22, 0xffffffffffffff9f, 0x8, 0x1}, 0x80) 06:30:49 executing program 3: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000480)='/dev/cuse\x00', 0x2842, 0x0) io_setup(0x2, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f0000000240)={0x200000000000000, 0x0, 0x0, 0x0, 0x0, r0, 0x0}]) 06:30:49 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x40100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x74000000]}) 06:30:49 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x6558}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 06:30:49 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x40100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a000000]}) 06:30:49 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) r1 = syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0x4ac028, 0x80041) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000180)=[@enter_looper], 0x83, 0x0, &(0x7f0000000280)="6498bfb923804335e034ed651f83d5ce36ce24aaee94432b5edfedc7a7e9f5d46b86d62c42869e77750b34e1d2370681b225b31d1664bce1da70ec23f753bc6acfd0fc2dbbea0d7379cd5822aa3b4af8d14396b6559de74a9c17e2b967684610b825ae31a5c431b5132a21254a18af49c8f1446e5704ef276345e854da5e6f42c323cb"}) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06000000a843089100ff803900080008000c0000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0x0) 06:30:49 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06020000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d40000000088a8ff", 0x55}], 0x1}, 0x0) 06:30:50 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06030000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000008100", 0x55}], 0x1}, 0x0) 06:30:50 executing program 3: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000480)='/dev/cuse\x00', 0x2842, 0x0) io_setup(0x2, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f0000000240)={0x300000000000000, 0x0, 0x0, 0x0, 0x0, r0, 0x0}]) 06:30:50 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06020000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d40000000000f0ff", 0x55}], 0x1}, 0x0) 06:30:50 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x8100}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 06:30:50 executing program 4: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000140)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(0xffffffffffffffff, &(0x7f0000000280)={0x8, 0x120, 0xfa00, {0x2, {0xdafe, 0x2, "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", 0x32, 0x3, 0x8001, 0x62, 0x5, 0x1, 0x7f, 0x1}, r0}}, 0x128) r1 = socket$inet6(0x10, 0x0, 0x4) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000080), &(0x7f00000000c0)=0x40) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06000000a843089100ff803900080008000c0000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0x0) 06:30:50 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06030000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d4000000001bba00", 0x55}], 0x1}, 0x0) [ 1213.532194][T20670] syz-executor.1 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=1000 [ 1213.597972][T20670] CPU: 0 PID: 20670 Comm: syz-executor.1 Not tainted 5.2.0-rc6+ #62 [ 1213.606082][T20670] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1213.616608][T20670] Call Trace: [ 1213.619913][T20670] dump_stack+0x172/0x1f0 [ 1213.624348][T20670] dump_header+0x10f/0xb6c [ 1213.628780][T20670] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1213.635124][T20670] ? ___ratelimit+0x60/0x595 [ 1213.639725][T20670] ? do_raw_spin_unlock+0x57/0x270 [ 1213.644939][T20670] oom_kill_process.cold+0x10/0x15 [ 1213.650070][T20670] out_of_memory+0x79a/0x1280 [ 1213.654759][T20670] ? lock_downgrade+0x880/0x880 [ 1213.659720][T20670] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1213.666074][T20670] ? oom_killer_disable+0x280/0x280 [ 1213.671461][T20670] ? find_held_lock+0x35/0x130 [ 1213.676335][T20670] mem_cgroup_out_of_memory+0x1ca/0x230 [ 1213.681935][T20670] ? memcg_event_wake+0x230/0x230 [ 1213.687162][T20670] ? do_raw_spin_unlock+0x57/0x270 [ 1213.692295][T20670] ? _raw_spin_unlock+0x2d/0x50 [ 1213.697177][T20670] try_charge+0x1042/0x1410 [ 1213.701714][T20670] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1213.707528][T20670] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 1213.713078][T20670] ? find_held_lock+0x35/0x130 [ 1213.717848][T20670] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 1213.723807][T20670] __memcg_kmem_charge_memcg+0x7c/0x130 [ 1213.729800][T20670] ? memcg_kmem_put_cache+0xb0/0xb0 [ 1213.735021][T20670] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 1213.740586][T20670] __memcg_kmem_charge+0x136/0x300 [ 1213.745798][T20670] __alloc_pages_nodemask+0x4bd/0x8d0 [ 1213.751272][T20670] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1213.757818][T20670] ? __alloc_pages_slowpath+0x28f0/0x28f0 [ 1213.763548][T20670] ? copy_process.part.0+0x1eea/0x6950 [ 1213.769036][T20670] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1213.774339][T20670] ? trace_hardirqs_on+0x67/0x220 [ 1213.779374][T20670] ? kasan_check_read+0x11/0x20 [ 1213.784240][T20670] copy_process.part.0+0x44e/0x6950 [ 1213.789568][T20670] ? __might_fault+0x12b/0x1e0 [ 1213.794445][T20670] ? __cleanup_sighand+0x60/0x60 [ 1213.799392][T20670] ? lock_downgrade+0x880/0x880 [ 1213.804265][T20670] _do_fork+0x25d/0xfe0 [ 1213.808440][T20670] ? copy_init_mm+0x20/0x20 [ 1213.812967][T20670] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1213.818536][T20670] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1213.824017][T20670] ? do_syscall_64+0x26/0x680 [ 1213.828882][T20670] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1213.835094][T20670] ? do_syscall_64+0x26/0x680 [ 1213.839789][T20670] __x64_sys_clone+0xbf/0x150 [ 1213.844582][T20670] do_syscall_64+0xfd/0x680 [ 1213.849200][T20670] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1213.855106][T20670] RIP: 0033:0x459519 [ 1213.859041][T20670] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1213.879005][T20670] RSP: 002b:00007f76cf65fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1213.887448][T20670] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000459519 06:30:50 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0xf000}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 06:30:50 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.events\x00', 0x0, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, &(0x7f0000000280)={'filter\x00', 0x1000, "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"}, &(0x7f00000000c0)=0x1024) r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06000000a843089100ff803900080008000c0000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0x0) 06:30:50 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06030000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000fec000", 0x55}], 0x1}, 0x0) [ 1213.895728][T20670] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000000040100 [ 1213.904413][T20670] RBP: 000000000075bf20 R08: ffffffffffffffff R09: 0000000000000000 [ 1213.913174][T20670] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f76cf6606d4 [ 1213.921311][T20670] R13: 00000000004bf97d R14: 00000000004d1358 R15: 00000000ffffffff [ 1213.930742][T20670] memory: usage 307180kB, limit 307200kB, failcnt 3346 [ 1213.938520][T20670] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1213.946510][T20670] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1213.953774][T20670] Memory cgroup stats for /syz1: cache:0KB rss:209924KB rss_huge:161792KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:209924KB inactive_file:0KB active_file:0KB unevictable:0KB [ 1213.976103][T20670] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=10570,uid=0 [ 1213.992258][T20670] Memory cgroup out of memory: Killed process 10570 (syz-executor.1) total-vm:72708kB, anon-rss:2204kB, file-rss:35788kB, shmem-rss:0kB [ 1214.041522][T20669] syz-executor.1 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=1000 [ 1214.055559][T20669] CPU: 0 PID: 20669 Comm: syz-executor.1 Not tainted 5.2.0-rc6+ #62 [ 1214.063636][T20669] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1214.063642][T20669] Call Trace: [ 1214.063667][T20669] dump_stack+0x172/0x1f0 [ 1214.063688][T20669] dump_header+0x10f/0xb6c [ 1214.063704][T20669] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1214.063719][T20669] ? ___ratelimit+0x60/0x595 [ 1214.063734][T20669] ? do_raw_spin_unlock+0x57/0x270 [ 1214.063751][T20669] oom_kill_process.cold+0x10/0x15 [ 1214.063768][T20669] out_of_memory+0x79a/0x1280 [ 1214.063788][T20669] ? oom_killer_disable+0x280/0x280 [ 1214.063801][T20669] ? find_held_lock+0x35/0x130 [ 1214.063826][T20669] mem_cgroup_out_of_memory+0x1ca/0x230 [ 1214.063840][T20669] ? memcg_event_wake+0x230/0x230 [ 1214.063861][T20669] ? do_raw_spin_unlock+0x57/0x270 [ 1214.063876][T20669] ? _raw_spin_unlock+0x2d/0x50 [ 1214.063894][T20669] try_charge+0xd45/0x1410 [ 1214.063916][T20669] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1214.063937][T20669] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 1214.158115][T20669] ? find_held_lock+0x35/0x130 [ 1214.162867][T20669] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 1214.168413][T20669] __memcg_kmem_charge_memcg+0x7c/0x130 [ 1214.174299][T20669] ? memcg_kmem_put_cache+0xb0/0xb0 [ 1214.179487][T20669] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 1214.185106][T20669] __memcg_kmem_charge+0x136/0x300 [ 1214.190210][T20669] __alloc_pages_nodemask+0x4bd/0x8d0 [ 1214.195585][T20669] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1214.201822][T20669] ? __alloc_pages_slowpath+0x28f0/0x28f0 [ 1214.207551][T20669] ? copy_process.part.0+0x1eea/0x6950 [ 1214.213006][T20669] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1214.218276][T20669] ? trace_hardirqs_on+0x67/0x220 [ 1214.223303][T20669] ? kasan_check_read+0x11/0x20 [ 1214.228250][T20669] copy_process.part.0+0x44e/0x6950 [ 1214.233439][T20669] ? __lock_acquire+0x54f/0x5490 [ 1214.238392][T20669] ? __cleanup_sighand+0x60/0x60 [ 1214.243329][T20669] ? rcu_read_lock_sched_held+0x110/0x130 [ 1214.249385][T20669] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1214.255742][T20669] ? try_to_free_mem_cgroup_pages+0x3b6/0x9f0 [ 1214.262407][T20669] _do_fork+0x25d/0xfe0 [ 1214.266564][T20669] ? copy_init_mm+0x20/0x20 [ 1214.271142][T20669] ? snd_seq_oss_process_event+0x1c70/0x26c0 [ 1214.277126][T20669] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1214.282677][T20669] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1214.288146][T20669] ? do_syscall_64+0x26/0x680 [ 1214.292854][T20669] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1214.298932][T20669] ? do_syscall_64+0x26/0x680 [ 1214.303793][T20669] __x64_sys_clone+0xbf/0x150 [ 1214.308681][T20669] do_syscall_64+0xfd/0x680 [ 1214.313276][T20669] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1214.319157][T20669] RIP: 0033:0x45bee9 [ 1214.323131][T20669] Code: ff 48 85 f6 0f 84 27 8e fb ff 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 0f 8c fe 8d fb ff 74 01 c3 31 ed 48 f7 c7 00 00 01 00 75 [ 1214.342985][T20669] RSP: 002b:0000000000a6fa98 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 [ 1214.351495][T20669] RAX: ffffffffffffffda RBX: 00007f76cf63f700 RCX: 000000000045bee9 [ 1214.359550][T20669] RDX: 00007f76cf63f9d0 RSI: 00007f76cf63edb0 RDI: 00000000003d0f00 [ 1214.367513][T20669] RBP: 0000000000a6fcb0 R08: 00007f76cf63f700 R09: 00007f76cf63f700 [ 1214.375472][T20669] R10: 00007f76cf63f9d0 R11: 0000000000000202 R12: 0000000000000000 [ 1214.383540][T20669] R13: 0000000000a6fb4f R14: 00007f76cf63f9c0 R15: 000000000075bfd4 [ 1214.394208][T20669] memory: usage 304844kB, limit 307200kB, failcnt 3346 [ 1214.401405][T20669] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1214.409134][T20669] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1214.416281][T20669] Memory cgroup stats for /syz1: cache:0KB rss:207764KB rss_huge:159744KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:207764KB inactive_file:0KB active_file:0KB unevictable:0KB 06:30:51 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x40100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff000000]}) 06:30:51 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06030000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d40000000000f000", 0x55}], 0x1}, 0x0) 06:30:51 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0xf0ffff}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 06:30:51 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06020000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d4000000007fffff", 0x55}], 0x1}, 0x0) 06:30:51 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06000000a843089100ff803900080008000c0000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x2, 0x40) r2 = getpid() stat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000003640)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f00000036c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = getpgrp(0xffffffffffffffff) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000003740)={{{@in=@local, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@remote}}, &(0x7f0000003840)=0xe8) stat(&(0x7f0000003880)='./file0\x00', &(0x7f00000038c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000003940)=0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000003980)={0x0, 0x0}, &(0x7f00000039c0)=0xc) fstat(r0, &(0x7f0000003a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r11 = getpgid(0x0) fstat(r0, &(0x7f0000003a80)={0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x2, &(0x7f0000003b00)=[0xffffffffffffffff, 0xee01]) r14 = getpid() lstat(&(0x7f0000003b40)='./file0\x00', &(0x7f0000003b80)={0x0, 0x0, 0x0, 0x0, 0x0}) r16 = getegid() sendmsg$unix(r1, &(0x7f0000003cc0)={&(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000035c0)=[{&(0x7f0000000280)="5de50797da367c32a076e8f9ac4f832b1ac486abaa25fda1b7e1c6fba5c1e2e563c3d04cf58a7d2d677b268888f360c0f91299bf5ed034a162f70712ca6904c4cf77b7b2253f0b8a2e22367a65a2aa1cdffa577a138e119c1378696715a53f5fa7803ffbf75411b73b8fa8cd756340ce558893ec41d4c7ad9d5ffee89092e417a366fc04da5342b136b322e03dac887e3faad149548527178d117504dcd9b7cdfc27aca3a5a3dbb22ba9900f791ba4181188bed500d042f6d5a5cf43c33a5723e5cfaf180232886d4ee13e6d910e13ca380575f78082", 0xd6}, {&(0x7f0000000380)="9e1c1956b2ad3b13b40d6ed4d0394d9583253b9d9bed6dd411b15c819f9c35b581d8fcf3084dec0bac030de9a48c22f6ad6f2ec9310e44f429e213913b2f6e265ba865300563c1f5a14871bee27e96ee5707de28c20ae4e1daaf988bc1e2e6cd13ccbdefc574aa1489564e922a48fbb9769051c22bf8ea06b9a7d59a2b448dfee528ffd5236897d1211cf2545fb5778761ac50d438970f1e8870a0257fb66b75773654bdf862466e31b391aa807da2fab23fd8a916a5234f09aa32074db82f636df8164fc8248dec7bff19be65d5aa5047180e14c79205e31e60e4bf56fe13c693fcd1b311aada5fa5ca5c39bd049c", 0xef}, {&(0x7f0000000140)="95577c39af5e575706bf1f98f595ccef8a81743f90bfa0c050c9469db966abd94fd01697eb8adbcd03204ee90dbf5a9c7ee972e9e95343666ae9db9843dfdd64444aebfc668519bc0d", 0x49}, {&(0x7f0000000480)="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", 0x1000}, {&(0x7f0000001480)="6c6b02a9995361acff8fc3a1dcb86df2774e9ec7699143c46fe44f1b6d50d528f7778659c85b5592ca445fcce7ae14b6bc1f81ddf01e85dca404ceb22d9696fc690a9a5a29a640c7d6a2cff42c60ee5e2a45b35c557f884574b7f778dc6193fe906de1465a4b625837a6c722ad7bab77ffa3386694068186e8e880158db6c28158a0f3cd00aa55df0e43da9028ce05d973b746640e13a66cd187343b94df80b94efc7da5e3ebff7f1b7799909d3dd1a8e0b41aff", 0xb4}, {&(0x7f0000001540)="a4b9f3d5f90c9169a4ea8c5ae4f73b332313585c82a707cdb125594c42d051b7fabba5d06e9cc77ad173ea1bb2ee4bba8cb3f3ae5cdc435a5ad76a065961dcca4fd1", 0x42}, {&(0x7f00000015c0)="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", 0x1000}, {&(0x7f00000025c0)="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", 0x1000}], 0x8, &(0x7f0000003c00)=[@cred={{0x1c, 0x1, 0x2, {r2, r3, r4}}}, @cred={{0x1c, 0x1, 0x2, {r5, r6, r7}}}, @cred={{0x1c, 0x1, 0x2, {r8, r9, r10}}}, @cred={{0x1c, 0x1, 0x2, {r11, r12, r13}}}, @rights={{0x18, 0x1, 0x1, [r0, r0]}}, @cred={{0x1c, 0x1, 0x2, {r14, r15, r16}}}], 0xb8, 0x1}, 0x0) 06:30:51 executing program 3: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000480)='/dev/cuse\x00', 0x2842, 0x0) io_setup(0x2, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f0000000240)={0x400000000000000, 0x0, 0x0, 0x0, 0x0, r0, 0x0}]) [ 1214.438449][T20669] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=10609,uid=0 [ 1214.454038][T20669] Memory cgroup out of memory: Killed process 10609 (syz-executor.1) total-vm:72708kB, anon-rss:2204kB, file-rss:35788kB, shmem-rss:0kB [ 1214.470022][ T1044] oom_reaper: reaped process 10609 (syz-executor.1), now anon-rss:0kB, file-rss:34828kB, shmem-rss:0kB 06:30:51 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x40100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000]}) 06:30:51 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06020000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d4000000009effff", 0x55}], 0x1}, 0x0) 06:30:51 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06000000a843089100ff803900080008000c0000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0x0) r1 = syz_open_dev$midi(&(0x7f0000000100)='/dev/midi#\x00', 0x1f, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1100}) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) ioctl$CAPI_GET_ERRCODE(r2, 0x80024321, &(0x7f00000000c0)) 06:30:51 executing program 3: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000480)='/dev/cuse\x00', 0x2842, 0x0) io_setup(0x2, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f0000000240)={0x500000000000000, 0x0, 0x0, 0x0, 0x0, r0, 0x0}]) 06:30:51 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06030000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d40000000000fc00", 0x55}], 0x1}, 0x0) 06:30:51 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x40100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000]}) 06:30:51 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06020000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000f0ffff", 0x55}], 0x1}, 0x0) 06:30:51 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x1000000}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 06:30:51 executing program 3: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000480)='/dev/cuse\x00', 0x2842, 0x0) io_setup(0x2, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f0000000240)={0x700000000000000, 0x0, 0x0, 0x0, 0x0, r0, 0x0}]) 06:30:51 executing program 4: r0 = socket$inet6(0x10, 0x6, 0x7) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f0000000080)={'batadv0\x00', 0x1}) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06000000a843089100ff803900080008000c0000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0x0) 06:30:51 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06030000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d40000000080fe00", 0x55}], 0x1}, 0x0) 06:30:51 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x2000000}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) [ 1215.050748][T20760] syz-executor.1 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=1000 [ 1215.086129][T20760] CPU: 0 PID: 20760 Comm: syz-executor.1 Not tainted 5.2.0-rc6+ #62 06:30:51 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06020000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000fcffff", 0x55}], 0x1}, 0x0) [ 1215.094152][T20760] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1215.104344][T20760] Call Trace: [ 1215.107651][T20760] dump_stack+0x172/0x1f0 [ 1215.111995][T20760] dump_header+0x10f/0xb6c [ 1215.116442][T20760] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1215.122802][T20760] ? ___ratelimit+0x60/0x595 [ 1215.127408][T20760] ? do_raw_spin_unlock+0x57/0x270 [ 1215.132533][T20760] oom_kill_process.cold+0x10/0x15 [ 1215.137752][T20760] out_of_memory+0x79a/0x1280 [ 1215.142443][T20760] ? lock_downgrade+0x880/0x880 [ 1215.142459][T20760] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1215.142485][T20760] ? oom_killer_disable+0x280/0x280 [ 1215.153567][T20760] ? find_held_lock+0x35/0x130 [ 1215.153595][T20760] mem_cgroup_out_of_memory+0x1ca/0x230 [ 1215.153611][T20760] ? memcg_event_wake+0x230/0x230 [ 1215.153632][T20760] ? do_raw_spin_unlock+0x57/0x270 [ 1215.153652][T20760] ? _raw_spin_unlock+0x2d/0x50 [ 1215.184247][T20760] try_charge+0x1042/0x1410 [ 1215.188864][T20760] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1215.194897][T20760] ? get_mem_cgroup_from_mm+0x10b/0x2b0 06:30:51 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x3000000}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) [ 1215.200558][T20760] ? find_held_lock+0x35/0x130 [ 1215.205337][T20760] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 1215.210908][T20760] __memcg_kmem_charge_memcg+0x7c/0x130 [ 1215.216592][T20760] ? memcg_kmem_put_cache+0xb0/0xb0 [ 1215.222008][T20760] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 1215.227576][T20760] __memcg_kmem_charge+0x136/0x300 [ 1215.232706][T20760] __alloc_pages_nodemask+0x4bd/0x8d0 [ 1215.238224][T20760] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1215.244916][T20760] ? __alloc_pages_slowpath+0x28f0/0x28f0 [ 1215.250732][T20760] ? copy_process.part.0+0x1eea/0x6950 [ 1215.256209][T20760] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1215.261505][T20760] ? trace_hardirqs_on+0x67/0x220 [ 1215.266544][T20760] ? kasan_check_read+0x11/0x20 [ 1215.271586][T20760] copy_process.part.0+0x44e/0x6950 [ 1215.276801][T20760] ? __lock_acquire+0x54f/0x5490 [ 1215.281765][T20760] ? __cleanup_sighand+0x60/0x60 [ 1215.286814][T20760] ? rcu_read_lock_sched_held+0x110/0x130 [ 1215.292555][T20760] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 06:30:52 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x4000000}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 06:30:52 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06020000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0x0) [ 1215.298823][T20760] ? try_to_free_mem_cgroup_pages+0x3b6/0x9f0 [ 1215.304929][T20760] _do_fork+0x25d/0xfe0 [ 1215.309118][T20760] ? copy_init_mm+0x20/0x20 [ 1215.313728][T20760] ? blkcg_maybe_throttle_current+0x5e2/0xfb0 [ 1215.319813][T20760] ? lock_downgrade+0x880/0x880 [ 1215.324716][T20760] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1215.330977][T20760] ? blkcg_exit_queue+0x30/0x30 [ 1215.335847][T20760] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1215.341313][T20760] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1215.346790][T20760] ? do_syscall_64+0x26/0x680 [ 1215.351472][T20760] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1215.351486][T20760] ? do_syscall_64+0x26/0x680 [ 1215.351508][T20760] __x64_sys_clone+0xbf/0x150 [ 1215.351527][T20760] do_syscall_64+0xfd/0x680 [ 1215.362289][T20760] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1215.362301][T20760] RIP: 0033:0x45bee9 [ 1215.362316][T20760] Code: ff 48 85 f6 0f 84 27 8e fb ff 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 0f 8c fe 8d fb ff 74 01 c3 31 ed 48 f7 c7 00 00 01 00 75 06:30:52 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06020000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000ffffff", 0x55}], 0x1}, 0x0) [ 1215.362322][T20760] RSP: 002b:0000000000a6fa98 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 [ 1215.362335][T20760] RAX: ffffffffffffffda RBX: 00007f76cf660700 RCX: 000000000045bee9 [ 1215.362350][T20760] RDX: 00007f76cf6609d0 RSI: 00007f76cf65fdb0 RDI: 00000000003d0f00 [ 1215.426763][T20760] RBP: 0000000000a6fcb0 R08: 00007f76cf660700 R09: 00007f76cf660700 [ 1215.434858][T20760] R10: 00007f76cf6609d0 R11: 0000000000000202 R12: 0000000000000000 [ 1215.442843][T20760] R13: 0000000000a6fb4f R14: 00007f76cf6609c0 R15: 000000000075bf2c [ 1215.472114][T20760] memory: usage 307196kB, limit 307200kB, failcnt 3381 [ 1215.498107][T20760] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1215.539878][T20760] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1215.564395][T20760] Memory cgroup stats for /syz1: cache:0KB rss:209872KB rss_huge:161792KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:209872KB inactive_file:0KB active_file:0KB unevictable:0KB [ 1215.586573][T20760] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=10930,uid=0 [ 1215.603309][T20760] Memory cgroup out of memory: Killed process 10930 (syz-executor.1) total-vm:72708kB, anon-rss:2204kB, file-rss:35788kB, shmem-rss:0kB [ 1215.618264][ T1044] oom_reaper: reaped process 10930 (syz-executor.1), now anon-rss:0kB, file-rss:34828kB, shmem-rss:0kB 06:30:52 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x40100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000]}) 06:30:52 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06030000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000c0fe00", 0x55}], 0x1}, 0x0) 06:30:52 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) r1 = openat(r0, &(0x7f0000000080)='./file0\x00', 0x200800, 0x80) ioctl$TUNSETOFFLOAD(r1, 0x400454d0, 0x7) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06000000a843089100ff803900080008000c0000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0x0) 06:30:52 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x5000000}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 06:30:52 executing program 3: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000480)='/dev/cuse\x00', 0x2842, 0x0) io_setup(0x2, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f0000000240)={0x800000000000000, 0x0, 0x0, 0x0, 0x0, r0, 0x0}]) 06:30:52 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06020000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0x0) 06:30:52 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06000000a843089100ff803900080008000c0000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0x0) setxattr$trusted_overlay_nlink(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='trusted.overlay.nlink\x00', &(0x7f0000000100)={'U+', 0x8}, 0x28, 0x2) 06:30:52 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06020000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0x0) 06:30:52 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06030000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d40000000000ff00", 0x55}], 0x1}, 0x0) 06:30:52 executing program 3: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000480)='/dev/cuse\x00', 0x2842, 0x0) io_setup(0x2, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f0000000240)={0xc00000000000000, 0x0, 0x0, 0x0, 0x0, r0, 0x0}]) 06:30:52 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x6000000}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 06:30:52 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x40100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300000000000000]}) 06:30:52 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x89f7, &(0x7f0000000100)={'team_slave_1\x00', @ifru_flags=0x2b02}) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06000000a843089100ff803900080008000c0000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000140)={0x5c5, 0x200, 0x200, 0x4, 0x81, 0x1d, 0x7fffffff, 0x2318, 0x0}, &(0x7f0000000180)=0x20) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000280)={r1, 0x40, "b0057d3cce2501f7418d30b5ed9a9a8d7a0b0507e1bd037e3031b0021aff39b1c98a294bd93fbe1a29e67ddf6d705cef6822077b949612f877ae645c5445a4e4"}, &(0x7f00000001c0)=0x48) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000000080), &(0x7f00000000c0)=0xc) 06:30:52 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x40100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000]}) 06:30:52 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06020000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0x0) 06:30:52 executing program 3: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000480)='/dev/cuse\x00', 0x2842, 0x0) io_setup(0x2, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f0000000240)={0x3800000000000000, 0x0, 0x0, 0x0, 0x0, r0, 0x0}]) 06:30:52 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06030000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000004003", 0x55}], 0x1}, 0x0) 06:30:52 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x7000000}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 06:30:52 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x40100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500000000000000]}) 06:30:52 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f0000000080)={'bond0\x00', 0x3f}) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06000000a843089100ff803900080008000c0000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x353}], 0x1}, 0x0) 06:30:52 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06020000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0x0) 06:30:53 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06030000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000340", 0x55}], 0x1}, 0x0) 06:30:53 executing program 3: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000480)='/dev/cuse\x00', 0x2842, 0x0) io_setup(0x2, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f0000000240)={0x4000000000000000, 0x0, 0x0, 0x0, 0x0, r0, 0x0}]) 06:30:53 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x40100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600000000000000]}) 06:30:53 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000500)='ip6_vti0\x00', 0xfdfa) r1 = socket$inet6(0xa, 0x0, 0x1000004) getpeername(r1, &(0x7f00000002c0)=@generic, &(0x7f0000000340)=0x80) bind$inet6(r1, &(0x7f000047b000), 0x1c) r2 = socket$inet6(0xa, 0x0, 0x0) connect$inet6(r2, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, 0x0, &(0x7f0000000040)) syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) r4 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) ioctl$TIOCLINUX3(r4, 0x541c, &(0x7f0000000180)) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) r6 = dup(r5) ioctl$TCSETS(r5, 0x40045431, &(0x7f00003b9fdc)) ioctl$TCSETS(r5, 0x5402, &(0x7f0000000000)={0x0, 0x9}) ioctl$IMGETVERSION(r6, 0x80044942, &(0x7f00000001c0)) r7 = syz_open_pts(r6, 0x1008000000000002) r8 = dup3(r7, r5, 0x0) write$UHID_INPUT(r8, &(0x7f00000021c0)={0xd, "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", 0x315}, 0x127d) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x0) 06:30:53 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06020000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0x0) 06:30:53 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0xa000000}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 06:30:53 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06030000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000fffff0", 0x55}], 0x1}, 0x0) 06:30:53 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06020000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0x0) 06:30:53 executing program 3: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000480)='/dev/cuse\x00', 0x2842, 0x0) io_setup(0x2, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f0000000240)={0x8000000000000000, 0x0, 0x0, 0x0, 0x0, r0, 0x0}]) 06:30:53 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x40100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700000000000000]}) 06:30:53 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06030000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0x0) 06:30:53 executing program 3: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000480)='/dev/cuse\x00', 0x2842, 0x0) io_setup(0x2, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f0000000240)={0xffffffff00000000, 0x0, 0x0, 0x0, 0x0, r0, 0x0}]) 06:30:53 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x40100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000000]}) 06:30:53 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06020000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0x0) 06:30:53 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0xc000000}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 06:30:53 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000700)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x1, 0x0, &(0x7f0000000480)=""/97, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000017c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x1, 0x0, 0x0, &(0x7f0000000140)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0xffffffffffffffff) 06:30:53 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06030000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0x0) 06:30:53 executing program 3: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000480)='/dev/cuse\x00', 0x2842, 0x0) io_setup(0x2, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f0000000240)={0x0, 0x2, 0x0, 0x0, 0x0, r0, 0x0}]) 06:30:53 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x40100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00000000000000]}) 06:30:53 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06020000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0x0) 06:30:54 executing program 4: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x1, @empty, 0x5}, 0xd473) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/hwrng\x00', 0x101440, 0x0) mq_timedsend(r1, &(0x7f0000000740)="16b9deaf24eeb19310480c61f8e02929ca4dc030f11ff2d7d9b5939665b268f988c1ab2111f12a1c42de3358e3856b796b34d1d3929af1d6a28c7b70ee84962938aff8c4b18a5b90879c6efcf42b4b2a7d448995985f65fe777b828a53e26aab3245504bec36ca1fd13b62185e5c1a94927371f90ab29cb7b15ab36a729968899188a1f1a9e9ec87d95cf996b145ec00b6589c587c3b887336a535e3155dbf58704c42e5d4cfbb506e2447f2d24a5c748e1ca1147fba194536be77b86f4e2a096b77c3a7fb3301a719bc78ad6862", 0xce, 0x0, &(0x7f0000000840)={0x77359400}) ioctl$PPPIOCSNPMODE(r1, 0x4008744b, &(0x7f0000000900)={0x283, 0x3}) sendmmsg(r0, &(0x7f0000002780)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140), 0x1100}], 0x2}, 0x2}], 0x13, 0x2400ffe0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) mq_timedsend(r2, &(0x7f0000000100)="554d3e220ecfb903295d089f7b9d3506d1", 0x11, 0x80, &(0x7f0000000140)={0x0, 0x989680}) mq_timedsend(r2, &(0x7f0000000880)="c82d085a664d94d4612435b8f7adcc29355e64177ee5ca78f4175beb513016c9d3", 0x21, 0x0, &(0x7f00000008c0)={0x77359400}) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000240)=@security={'security\x00', 0xe, 0x4, 0x478, 0x150, 0x288, 0x0, 0x288, 0x0, 0x3a8, 0x3a8, 0x3a8, 0x3a8, 0x3a8, 0x4, &(0x7f0000000180), {[{{@ipv6={@dev={0xfe, 0x80, [], 0x23}, @remote, [0xffffffff, 0x0, 0xff000000, 0xffffffff], [0xffffff00, 0xffffffff], 'bridge0\x00', 'vxcan1\x00', {0xff}, {}, 0x3d317f6bd9b484dd, 0xffff, 0x2, 0x40}, 0x0, 0x120, 0x150, 0x0, {}, [@common=@ipv6header={0x28, 'ipv6header\x00', 0x0, {0x10, 0xe7, 0x1}}, @common=@ah={0x30, 'ah\x00', 0x0, {0x4d6, 0x4d2, 0x3, 0x8000, 0x2}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x0, 0x3, 0xd01d}, {0xead, 0x2, 0xca}, 0x2, 0x4}}}, {{@ipv6={@rand_addr="139a4b9352cfb6a3588f213c0f68e1f7", @initdev={0xfe, 0x88, [], 0x1, 0x0}, [0xffffffff, 0xff, 0xffffffff], [0xffffffff, 0xffffffff, 0x50fb94bb41501a89], 'lapb0\x00', 'eql\x00', {0x80460ede4172cad6}, {}, 0x1, 0x9, 0x6, 0x2}, 0x0, 0x110, 0x138, 0x0, {}, [@common=@unspec=@ipvs={0x48, 'ipvs\x00', 0x0, {@ipv4=@loopback, [0xffffffff, 0xffffffff, 0xff, 0xffffff00], 0x4e23, 0x3f, 0x0, 0x4e21, 0x2, 0x36}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@ah={0x30, 'ah\x00', 0x0, {0x4d4, 0x4d3, 0x3, 0x1f, 0x1}}]}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0xffffffffffffc9f0, 0xbc7, 0x2}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) ioctl$TIOCGSOFTCAR(r2, 0x5419, &(0x7f00000000c0)) 06:30:54 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x40100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00000000000000]}) 06:30:54 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0xe000000}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 06:30:54 executing program 3: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000480)='/dev/cuse\x00', 0x2842, 0x0) io_setup(0x2, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f0000000240)={0x0, 0x3, 0x0, 0x0, 0x0, r0, 0x0}]) 06:30:54 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06030000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0x0) 06:30:54 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06020000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0x0) 06:30:54 executing program 4: capset(&(0x7f00000fc000)={0x19980330}, &(0x7f000047efe8)={0x0, 0x1, 0x0, 0x0, 0x0, 0x3}) lsetxattr$security_selinux(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000180)='security.selinux\x00', &(0x7f00000001c0)='system_u:object_r:dlm_control_device_t:s0\x00', 0x2a, 0x1) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x40) chdir(&(0x7f0000000000)='./file0/file1\x00') lsetxattr$trusted_overlay_opaque(&(0x7f0000000080)='./file0/file1\x00', &(0x7f00000000c0)='trusted.overlay.opaque\x00', &(0x7f0000000100)='y\x00', 0x2, 0x1) mknod$loop(&(0x7f0000000040)='./file0/file1\x00', 0x0, 0xffffffffffffffff) [ 1217.499986][T20979] syz-executor.1 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=1000 [ 1217.531266][T20979] CPU: 0 PID: 20979 Comm: syz-executor.1 Not tainted 5.2.0-rc6+ #62 [ 1217.539329][T20979] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1217.549828][T20979] Call Trace: [ 1217.549858][T20979] dump_stack+0x172/0x1f0 [ 1217.557663][T20979] dump_header+0x10f/0xb6c [ 1217.562131][T20979] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1217.567956][T20979] ? ___ratelimit+0x60/0x595 [ 1217.567975][T20979] ? do_raw_spin_unlock+0x57/0x270 [ 1217.567995][T20979] oom_kill_process.cold+0x10/0x15 [ 1217.568014][T20979] out_of_memory+0x79a/0x1280 [ 1217.587717][T20979] ? lock_downgrade+0x880/0x880 [ 1217.592677][T20979] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1217.598935][T20979] ? oom_killer_disable+0x280/0x280 [ 1217.604146][T20979] ? find_held_lock+0x35/0x130 [ 1217.604175][T20979] mem_cgroup_out_of_memory+0x1ca/0x230 [ 1217.604198][T20979] ? memcg_event_wake+0x230/0x230 [ 1217.604219][T20979] ? do_raw_spin_unlock+0x57/0x270 [ 1217.614615][T20979] ? _raw_spin_unlock+0x2d/0x50 [ 1217.614638][T20979] try_charge+0x1042/0x1410 [ 1217.614659][T20979] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1217.640124][T20979] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 1217.645768][T20979] ? find_held_lock+0x35/0x130 06:30:54 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06020000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0x0) [ 1217.650545][T20979] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 1217.656143][T20979] __memcg_kmem_charge_memcg+0x7c/0x130 [ 1217.661715][T20979] ? memcg_kmem_put_cache+0xb0/0xb0 [ 1217.667046][T20979] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 1217.672696][T20979] __memcg_kmem_charge+0x136/0x300 [ 1217.677909][T20979] __alloc_pages_nodemask+0x4bd/0x8d0 [ 1217.683296][T20979] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1217.689644][T20979] ? __alloc_pages_slowpath+0x28f0/0x28f0 [ 1217.695472][T20979] ? copy_process.part.0+0x1eea/0x6950 [ 1217.695489][T20979] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1217.695506][T20979] ? trace_hardirqs_on+0x67/0x220 [ 1217.695526][T20979] copy_process.part.0+0x44e/0x6950 [ 1217.716746][T20979] ? __schedule+0x76c/0x1560 [ 1217.721360][T20979] ? __cleanup_sighand+0x60/0x60 [ 1217.721378][T20979] ? _raw_spin_unlock_irq+0x5e/0x90 [ 1217.721393][T20979] ? finish_task_switch+0x118/0x730 [ 1217.721416][T20979] _do_fork+0x25d/0xfe0 [ 1217.721437][T20979] ? copy_init_mm+0x20/0x20 [ 1217.721459][T20979] ? trace_hardirqs_on_thunk+0x1a/0x1c 06:30:54 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06020000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0x0) [ 1217.751279][T20979] ? retint_kernel+0x2b/0x2b [ 1217.755887][T20979] __x64_sys_clone+0xbf/0x150 [ 1217.760596][T20979] ? do_syscall_64+0x5b/0x680 [ 1217.765284][T20979] do_syscall_64+0xfd/0x680 [ 1217.769797][T20979] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1217.775780][T20979] RIP: 0033:0x45bee9 [ 1217.779679][T20979] Code: ff 48 85 f6 0f 84 27 8e fb ff 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 0f 8c fe 8d fb ff 74 01 c3 31 ed 48 f7 c7 00 00 01 00 75 06:30:54 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06030000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0x0) [ 1217.799310][T20979] RSP: 002b:0000000000a6fa98 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 [ 1217.807921][T20979] RAX: ffffffffffffffda RBX: 00007f76cf660700 RCX: 000000000045bee9 [ 1217.815902][T20979] RDX: 00007f76cf6609d0 RSI: 00007f76cf65fdb0 RDI: 00000000003d0f00 [ 1217.823876][T20979] RBP: 0000000000a6fcb0 R08: 00007f76cf660700 R09: 00007f76cf660700 [ 1217.823885][T20979] R10: 00007f76cf6609d0 R11: 0000000000000202 R12: 0000000000000000 [ 1217.823892][T20979] R13: 0000000000a6fb4f R14: 00007f76cf6609c0 R15: 000000000075bf2c 06:30:54 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) socket$alg(0x26, 0x5, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) socket$inet6(0xa, 0x9, 0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x6) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x1f, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, @perf_bp, 0x4000010000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0xfffffffffffffdc1) ioctl(r2, 0x10001, &(0x7f0000000100)="153f6234488dd25d766070") socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r5 = socket(0xa, 0x3, 0x8) r6 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x9c4, 0x70000) ioctl$TIOCGSID(r6, 0x5429, &(0x7f0000000800)=0x0) ioctl$sock_FIOSETOWN(r4, 0x8901, &(0x7f0000000440)=r7) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x10}) ioctl$RTC_WKALM_RD(r0, 0x80287010, &(0x7f00000002c0)) setsockopt$IP_VS_SO_SET_DELDEST(r5, 0x0, 0x488, &(0x7f0000000080)={{0x6c, @remote, 0x4e24, 0x3, 'lblcr\x00', 0x1e, 0x0, 0x13}, {@remote, 0x4e21, 0x7, 0xffff, 0x7f, 0x2}}, 0xfffffffffffffd4d) r8 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02\x05\x00\x00\x00\xac', 0x0) write$binfmt_misc(r6, &(0x7f0000000c40)=ANY=[], 0x0) close(r1) r9 = dup3(r1, r3, 0x80000) setsockopt$inet_sctp_SCTP_EVENTS(r9, 0x84, 0xb, &(0x7f0000000280)={0x0, 0x1, 0x40, 0x7, 0x1f, 0x6, 0x100000000, 0x8001, 0x7d, 0x2, 0x86}, 0xb) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x0, 0x6}}, 0x20) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$key(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000007c0)=ANY=[]}}, 0xffffffffbffffffc) r10 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(r8, 0x29, 0x22, &(0x7f0000000b80)={{{@in6=@local, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@local}}, &(0x7f0000000c80)=0xe8) sendmsg$nl_route(r10, &(0x7f0000000400)={&(0x7f0000000000), 0x3bd, &(0x7f00000000c0)={&(0x7f0000000cc0)=@mpls_newroute={0x3c, 0x18, 0x308, 0x101, 0x25dfdbfe, {0x1c, 0x94, 0x34, 0x1bbb000000, 0xff, 0x0, 0xff, 0xb, 0x1100}, [@RTA_MULTIPATH={0xc, 0x9, {0xc0000000, 0x101, 0x5, r11}}, @RTA_VIA={0x14, 0x12, {0x7, "937efd747c45d92fbbf122f00963"}}]}, 0x3c}}, 0x3fffffffffffc) sendmsg$key(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000840)=ANY=[@ANYBLOB="1c0b5bd1cf5925e3f57702796092712cd7b371a64937a2dc55cb9287bc77a51ff173fe677ae6d60ccbc48734bc72bad46487b4b6721ac9f0be174a8b04934e170ca6bed16351d8e8d4a4b4fe45f23286dbaa959a4cc2ea9d735d6e2fef0b5278b63e39e35ecd498cfcd210b31020f7c1d45cf003e8be45cce568dfd943b2b54c581ef9123f14f13fb9b9f2e3e04c88b4a698db8acdec3833d188e782e30762935fa0b1521e420cddc62a05f33c5618479e5e54d6b5936f0c094538e1e8031d484f4d4a16cff9e426966cdcaee25ddfac44847f6b95686def0b449bb997ae6e000000000000000000000000000000000000000000000000007a83e6021cc623786dc89e67673ea1d9f62dccab267f9116c92f2e4f17df8810cd683b06e8e3788daedcf8f54ac38a393124c9168538c47496b16009c77c0395b97953771c16be85edbc9a73150d280be9f52f07557d25efe43492ee53c58499fe2881248dbc51de", @ANYRESDEC=r1], 0x174}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=ANY=[@ANYBLOB="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"], 0x119}}, 0x0) [ 1217.853538][T20979] memory: usage 307172kB, limit 307200kB, failcnt 3415 [ 1217.860716][T20979] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1217.868727][T20979] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1217.876303][T20979] Memory cgroup stats for /syz1: cache:0KB rss:208524KB rss_huge:159744KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:208524KB inactive_file:0KB active_file:0KB unevictable:0KB 06:30:54 executing program 3: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000480)='/dev/cuse\x00', 0x2842, 0x0) io_setup(0x2, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f0000000240)={0x0, 0x4, 0x0, 0x0, 0x0, r0, 0x0}]) 06:30:54 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0xf200000}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) [ 1217.898331][T20979] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=10946,uid=0 [ 1217.922361][T20979] Memory cgroup out of memory: Killed process 10946 (syz-executor.1) total-vm:72708kB, anon-rss:2204kB, file-rss:35788kB, shmem-rss:0kB 06:30:54 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x40100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000]}) [ 1217.965030][ T1044] oom_reaper: reaped process 10946 (syz-executor.1), now anon-rss:0kB, file-rss:34828kB, shmem-rss:0kB 06:30:54 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06030000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0x0) 06:30:54 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06020000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0x0) 06:30:54 executing program 3: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000480)='/dev/cuse\x00', 0x2842, 0x0) io_setup(0x2, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f0000000240)={0x0, 0x5, 0x0, 0x0, 0x0, r0, 0x0}]) 06:30:54 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x40100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800000000000000]}) 06:30:55 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x10000000}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) [ 1218.294076][T21026] bridge0: port 3(team0) entered blocking state [ 1218.326563][T21026] bridge0: port 3(team0) entered disabled state 06:30:55 executing program 3: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000480)='/dev/cuse\x00', 0x2842, 0x0) io_setup(0x2, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0x0, r0, 0x0}]) 06:30:55 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x40100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c00000000000000]}) [ 1218.458708][T21026] device team0 entered promiscuous mode [ 1218.480334][T21026] device team_slave_0 entered promiscuous mode [ 1218.490831][T21026] device team_slave_1 entered promiscuous mode [ 1218.529031][T21026] bridge0: port 3(team0) entered blocking state [ 1218.536693][T21026] bridge0: port 3(team0) entered forwarding state 06:30:55 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06030000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0x0) 06:30:55 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) socket$alg(0x26, 0x5, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) socket$inet6(0xa, 0x9, 0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x6) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x1f, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, @perf_bp, 0x4000010000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0xfffffffffffffdc1) ioctl(r2, 0x10001, &(0x7f0000000100)="153f6234488dd25d766070") socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r5 = socket(0xa, 0x3, 0x8) r6 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x9c4, 0x70000) ioctl$TIOCGSID(r6, 0x5429, &(0x7f0000000800)=0x0) ioctl$sock_FIOSETOWN(r4, 0x8901, &(0x7f0000000440)=r7) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x10}) ioctl$RTC_WKALM_RD(r0, 0x80287010, &(0x7f00000002c0)) setsockopt$IP_VS_SO_SET_DELDEST(r5, 0x0, 0x488, &(0x7f0000000080)={{0x6c, @remote, 0x4e24, 0x3, 'lblcr\x00', 0x1e, 0x0, 0x13}, {@remote, 0x4e21, 0x7, 0xffff, 0x7f, 0x2}}, 0xfffffffffffffd4d) r8 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02\x05\x00\x00\x00\xac', 0x0) write$binfmt_misc(r6, &(0x7f0000000c40)=ANY=[], 0x0) close(r1) r9 = dup3(r1, r3, 0x80000) setsockopt$inet_sctp_SCTP_EVENTS(r9, 0x84, 0xb, &(0x7f0000000280)={0x0, 0x1, 0x40, 0x7, 0x1f, 0x6, 0x100000000, 0x8001, 0x7d, 0x2, 0x86}, 0xb) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x0, 0x6}}, 0x20) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$key(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000007c0)=ANY=[]}}, 0xffffffffbffffffc) r10 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(r8, 0x29, 0x22, &(0x7f0000000b80)={{{@in6=@local, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@local}}, &(0x7f0000000c80)=0xe8) sendmsg$nl_route(r10, &(0x7f0000000400)={&(0x7f0000000000), 0x3bd, &(0x7f00000000c0)={&(0x7f0000000cc0)=@mpls_newroute={0x3c, 0x18, 0x308, 0x101, 0x25dfdbfe, {0x1c, 0x94, 0x34, 0x1bbb000000, 0xff, 0x0, 0xff, 0xb, 0x1100}, [@RTA_MULTIPATH={0xc, 0x9, {0xc0000000, 0x101, 0x5, r11}}, @RTA_VIA={0x14, 0x12, {0x7, "937efd747c45d92fbbf122f00963"}}]}, 0x3c}}, 0x3fffffffffffc) sendmsg$key(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000840)=ANY=[@ANYBLOB="1c0b5bd1cf5925e3f57702796092712cd7b371a64937a2dc55cb9287bc77a51ff173fe677ae6d60ccbc48734bc72bad46487b4b6721ac9f0be174a8b04934e170ca6bed16351d8e8d4a4b4fe45f23286dbaa959a4cc2ea9d735d6e2fef0b5278b63e39e35ecd498cfcd210b31020f7c1d45cf003e8be45cce568dfd943b2b54c581ef9123f14f13fb9b9f2e3e04c88b4a698db8acdec3833d188e782e30762935fa0b1521e420cddc62a05f33c5618479e5e54d6b5936f0c094538e1e8031d484f4d4a16cff9e426966cdcaee25ddfac44847f6b95686def0b449bb997ae6e000000000000000000000000000000000000000000000000007a83e6021cc623786dc89e67673ea1d9f62dccab267f9116c92f2e4f17df8810cd683b06e8e3788daedcf8f54ac38a393124c9168538c47496b16009c77c0395b97953771c16be85edbc9a73150d280be9f52f07557d25efe43492ee53c58499fe2881248dbc51de", @ANYRESDEC=r1], 0x174}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=ANY=[@ANYBLOB="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"], 0x119}}, 0x0) 06:30:55 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x40100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6800000000000000]}) 06:30:55 executing program 3: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000480)='/dev/cuse\x00', 0x2842, 0x0) io_setup(0x2, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f0000000240)={0x0, 0x8, 0x0, 0x0, 0x0, r0, 0x0}]) 06:30:55 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06020000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0x0) 06:30:55 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06030000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0x0) 06:30:55 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x3f000000}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 06:30:55 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x40100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c00000000000000]}) 06:30:55 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06020000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0x0) 06:30:55 executing program 3: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000480)='/dev/cuse\x00', 0x2842, 0x0) io_setup(0x2, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f0000000240)={0x0, 0xc, 0x0, 0x0, 0x0, r0, 0x0}]) 06:30:55 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06030000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0x0) 06:30:55 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06020000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0x0) 06:30:55 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x40000000}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 06:30:55 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) socket$alg(0x26, 0x5, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) socket$inet6(0xa, 0x9, 0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x6) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x1f, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, @perf_bp, 0x4000010000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0xfffffffffffffdc1) ioctl(r2, 0x10001, &(0x7f0000000100)="153f6234488dd25d766070") socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r5 = socket(0xa, 0x3, 0x8) r6 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x9c4, 0x70000) ioctl$TIOCGSID(r6, 0x5429, &(0x7f0000000800)=0x0) ioctl$sock_FIOSETOWN(r4, 0x8901, &(0x7f0000000440)=r7) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x10}) ioctl$RTC_WKALM_RD(r0, 0x80287010, &(0x7f00000002c0)) setsockopt$IP_VS_SO_SET_DELDEST(r5, 0x0, 0x488, &(0x7f0000000080)={{0x6c, @remote, 0x4e24, 0x3, 'lblcr\x00', 0x1e, 0x0, 0x13}, {@remote, 0x4e21, 0x7, 0xffff, 0x7f, 0x2}}, 0xfffffffffffffd4d) r8 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02\x05\x00\x00\x00\xac', 0x0) write$binfmt_misc(r6, &(0x7f0000000c40)=ANY=[], 0x0) close(r1) r9 = dup3(r1, r3, 0x80000) setsockopt$inet_sctp_SCTP_EVENTS(r9, 0x84, 0xb, &(0x7f0000000280)={0x0, 0x1, 0x40, 0x7, 0x1f, 0x6, 0x100000000, 0x8001, 0x7d, 0x2, 0x86}, 0xb) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x0, 0x6}}, 0x20) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$key(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000007c0)=ANY=[]}}, 0xffffffffbffffffc) r10 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(r8, 0x29, 0x22, &(0x7f0000000b80)={{{@in6=@local, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@local}}, &(0x7f0000000c80)=0xe8) sendmsg$nl_route(r10, &(0x7f0000000400)={&(0x7f0000000000), 0x3bd, &(0x7f00000000c0)={&(0x7f0000000cc0)=@mpls_newroute={0x3c, 0x18, 0x308, 0x101, 0x25dfdbfe, {0x1c, 0x94, 0x34, 0x1bbb000000, 0xff, 0x0, 0xff, 0xb, 0x1100}, [@RTA_MULTIPATH={0xc, 0x9, {0xc0000000, 0x101, 0x5, r11}}, @RTA_VIA={0x14, 0x12, {0x7, "937efd747c45d92fbbf122f00963"}}]}, 0x3c}}, 0x3fffffffffffc) sendmsg$key(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000840)=ANY=[@ANYBLOB="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", @ANYRESDEC=r1], 0x174}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=ANY=[@ANYBLOB="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"], 0x119}}, 0x0) 06:30:55 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06030000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0x0) 06:30:55 executing program 3: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000480)='/dev/cuse\x00', 0x2842, 0x0) io_setup(0x2, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f0000000240)={0x0, 0x38, 0x0, 0x0, 0x0, r0, 0x0}]) 06:30:55 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x40100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7400000000000000]}) 06:30:56 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06020000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0x0) 06:30:56 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06030000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0x0) 06:30:56 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x60000000}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 06:30:56 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x40100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a00000000000000]}) 06:30:56 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) socket$alg(0x26, 0x5, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) socket$inet6(0xa, 0x9, 0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x6) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x1f, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, @perf_bp, 0x4000010000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0xfffffffffffffdc1) ioctl(r2, 0x10001, &(0x7f0000000100)="153f6234488dd25d766070") socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r5 = socket(0xa, 0x3, 0x8) r6 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x9c4, 0x70000) ioctl$TIOCGSID(r6, 0x5429, &(0x7f0000000800)=0x0) ioctl$sock_FIOSETOWN(r4, 0x8901, &(0x7f0000000440)=r7) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x10}) ioctl$RTC_WKALM_RD(r0, 0x80287010, &(0x7f00000002c0)) setsockopt$IP_VS_SO_SET_DELDEST(r5, 0x0, 0x488, &(0x7f0000000080)={{0x6c, @remote, 0x4e24, 0x3, 'lblcr\x00', 0x1e, 0x0, 0x13}, {@remote, 0x4e21, 0x7, 0xffff, 0x7f, 0x2}}, 0xfffffffffffffd4d) r8 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02\x05\x00\x00\x00\xac', 0x0) write$binfmt_misc(r6, &(0x7f0000000c40)=ANY=[], 0x0) close(r1) r9 = dup3(r1, r3, 0x80000) setsockopt$inet_sctp_SCTP_EVENTS(r9, 0x84, 0xb, &(0x7f0000000280)={0x0, 0x1, 0x40, 0x7, 0x1f, 0x6, 0x100000000, 0x8001, 0x7d, 0x2, 0x86}, 0xb) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x0, 0x6}}, 0x20) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$key(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000007c0)=ANY=[]}}, 0xffffffffbffffffc) r10 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(r8, 0x29, 0x22, &(0x7f0000000b80)={{{@in6=@local, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@local}}, &(0x7f0000000c80)=0xe8) sendmsg$nl_route(r10, &(0x7f0000000400)={&(0x7f0000000000), 0x3bd, &(0x7f00000000c0)={&(0x7f0000000cc0)=@mpls_newroute={0x3c, 0x18, 0x308, 0x101, 0x25dfdbfe, {0x1c, 0x94, 0x34, 0x1bbb000000, 0xff, 0x0, 0xff, 0xb, 0x1100}, [@RTA_MULTIPATH={0xc, 0x9, {0xc0000000, 0x101, 0x5, r11}}, @RTA_VIA={0x14, 0x12, {0x7, "937efd747c45d92fbbf122f00963"}}]}, 0x3c}}, 0x3fffffffffffc) sendmsg$key(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000840)=ANY=[@ANYBLOB="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", @ANYRESDEC=r1], 0x174}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=ANY=[@ANYBLOB="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"], 0x119}}, 0x0) 06:30:56 executing program 3: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000480)='/dev/cuse\x00', 0x2842, 0x0) io_setup(0x2, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f0000000240)={0x0, 0x300, 0x0, 0x0, 0x0, r0, 0x0}]) 06:30:56 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x40100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff00000000000000]}) 06:30:56 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06020000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0x0) 06:30:56 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06030000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0x0) 06:30:56 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x65580000}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 06:30:56 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x40100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000]}) 06:30:56 executing program 3: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000480)='/dev/cuse\x00', 0x2842, 0x0) io_setup(0x2, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f0000000240)={0x0, 0x500, 0x0, 0x0, 0x0, r0, 0x0}]) 06:30:56 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06020000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0x0) 06:30:56 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06030000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0x0) 06:30:56 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x81000000}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 06:30:56 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x40100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}) 06:30:56 executing program 4: pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84800) stat(&(0x7f0000000340)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000500)={{{@in6=@mcast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@multicast1}}, &(0x7f0000000300)=0xe8) write$P9_RSTATu(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="760000007d5e430000570001000310000088030000000700000000000000000000a02000000000120073656c696e75786e6f646576766d6e65743021002c236e6f646576070054495043763200040070726f630a007b73656c66626465762400"/106, @ANYRES32=r1, @ANYRES32=r2, @ANYRES32=r3], 0x76) perf_event_open(&(0x7f00000000c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = timerfd_create(0x0, 0x0) timerfd_settime(r4, 0x0, &(0x7f0000000000)={{0x2400000000000000}, {0x0, 0x1c9c380}}, 0x0) r5 = request_key(&(0x7f0000000080)='.request_key_auth\x00', &(0x7f0000000280)={'syz', 0x2}, &(0x7f00000002c0)='TIPCv2\x00', 0xfffffffffffffff8) keyctl$get_security(0x11, r5, &(0x7f0000000680)=""/45, 0x2d) syz_genetlink_get_family_id$tipc2(&(0x7f0000004140)='TIPCv2\x00') perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(r4, &(0x7f00000004c0)=[{&(0x7f0000000380)=""/179, 0xb3}], 0x1) 06:30:56 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06020000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0x0) 06:30:56 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06030000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0x0) [ 1220.079178][T31310] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 1220.164274][T31310] CPU: 1 PID: 31310 Comm: syz-executor.1 Not tainted 5.2.0-rc6+ #62 [ 1220.172425][T31310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1220.182612][T31310] Call Trace: [ 1220.185914][T31310] dump_stack+0x172/0x1f0 [ 1220.190257][T31310] dump_header+0x10f/0xb6c [ 1220.194715][T31310] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1220.194732][T31310] ? ___ratelimit+0x60/0x595 [ 1220.194752][T31310] oom_kill_process.cold+0x10/0x15 [ 1220.194769][T31310] out_of_memory+0x79a/0x1280 [ 1220.194786][T31310] ? lock_downgrade+0x880/0x880 [ 1220.194802][T31310] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1220.194820][T31310] ? oom_killer_disable+0x280/0x280 [ 1220.194831][T31310] ? find_held_lock+0x35/0x130 [ 1220.194856][T31310] mem_cgroup_out_of_memory+0x1ca/0x230 [ 1220.194871][T31310] ? memcg_event_wake+0x230/0x230 [ 1220.194897][T31310] ? do_raw_spin_unlock+0x57/0x270 [ 1220.252055][T31310] ? _raw_spin_unlock+0x2d/0x50 [ 1220.256928][T31310] try_charge+0x1042/0x1410 [ 1220.261455][T31310] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1220.267194][T31310] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1220.273698][T31310] ? kasan_check_read+0x11/0x20 [ 1220.278659][T31310] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 1220.284228][T31310] mem_cgroup_try_charge+0x24d/0x5e0 [ 1220.289630][T31310] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 1220.295288][T31310] wp_page_copy+0x416/0x1770 [ 1220.299896][T31310] ? do_wp_page+0x486/0x1500 [ 1220.304740][T31310] ? pmd_pfn+0x1d0/0x1d0 [ 1220.309007][T31310] ? lock_downgrade+0x880/0x880 06:30:56 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06030000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000058", 0x55}], 0x1}, 0x0) 06:30:56 executing program 3: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000480)='/dev/cuse\x00', 0x2842, 0x0) io_setup(0x2, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f0000000240)={0x0, 0x700, 0x0, 0x0, 0x0, r0, 0x0}]) 06:30:56 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06020000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0x0) [ 1220.314056][T31310] ? swp_swapcount+0x540/0x540 [ 1220.314071][T31310] ? do_raw_spin_unlock+0x57/0x270 [ 1220.314086][T31310] ? kasan_check_read+0x11/0x20 [ 1220.314101][T31310] ? do_raw_spin_unlock+0x57/0x270 [ 1220.314118][T31310] do_wp_page+0x48e/0x1500 [ 1220.314139][T31310] ? finish_mkwrite_fault+0x540/0x540 [ 1220.314165][T31310] __handle_mm_fault+0x22e3/0x3eb0 [ 1220.314186][T31310] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 1220.314199][T31310] ? find_held_lock+0x35/0x130 [ 1220.314215][T31310] ? handle_mm_fault+0x292/0xa90 06:30:57 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06030000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0x0) [ 1220.314239][T31310] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1220.314253][T31310] ? kasan_check_read+0x11/0x20 [ 1220.314271][T31310] handle_mm_fault+0x3b7/0xa90 [ 1220.314290][T31310] __do_page_fault+0x5ef/0xda0 [ 1220.314320][T31310] do_page_fault+0x71/0x57d [ 1220.389847][T31310] ? page_fault+0x8/0x30 [ 1220.394129][T31310] page_fault+0x1e/0x30 [ 1220.398305][T31310] RIP: 0033:0x457c4a [ 1220.402241][T31310] Code: 48 85 db 74 b6 41 bc ca 00 00 00 eb 0c 0f 1f 00 48 8b 5b 08 48 85 db 74 a2 48 8b 3b 48 8b 47 10 48 85 c0 74 05 ff d0 48 8b 3b ff 4f 28 0f 94 c0 84 c0 74 db 8b 47 2c 85 c0 74 d4 45 31 d2 ba [ 1220.421856][T31310] RSP: 002b:0000000000a6fd30 EFLAGS: 00010246 [ 1220.428025][T31310] RAX: 0000000000000000 RBX: 0000000000a6fd30 RCX: 0000000000457aea [ 1220.436010][T31310] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000a74fc8 [ 1220.444083][T31310] RBP: 0000000000a6fd70 R08: 0000000000000001 R09: 0000555555747940 [ 1220.452063][T31310] R10: 0000555555747c10 R11: 0000000000000246 R12: 00000000000000ca 06:30:57 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x88a8ffff}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) [ 1220.460468][T31310] R13: 0000000000001908 R14: 0000000000000000 R15: 0000000000a6fdc0 06:30:57 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06020000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0x0) 06:30:57 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06030000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000ffffa8", 0x55}], 0x1}, 0x0) [ 1220.521144][T31310] memory: usage 307200kB, limit 307200kB, failcnt 3461 [ 1220.535230][T31310] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 06:30:57 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x8000, 0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) mq_timedsend(r1, &(0x7f0000000100)="3ccc6b3eab7110b131248975e979c865567adabba720c91eb679021183e4484877707970cf3fa74b95232de0626a674fdf", 0x31, 0x7, &(0x7f0000000180)={r2, r3+10000000}) ioctl(r0, 0x1000008912, &(0x7f0000001540)="c0dca5055e0bcfec7be070") bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x4, &(0x7f0000000280)=@framed={{}, [@call={0x85, 0x14, 0x85ffffff}]}, &(0x7f00000000c0)='C\xc3PL', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) [ 1220.634350][T31310] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1220.641377][T31310] Memory cgroup stats for /syz1: cache:0KB rss:207140KB rss_huge:157696KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:207140KB inactive_file:0KB active_file:0KB unevictable:0KB [ 1220.674692][T31310] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=11185,uid=0 [ 1220.707176][T31310] Memory cgroup out of memory: Killed process 11185 (syz-executor.1) total-vm:72708kB, anon-rss:2204kB, file-rss:35788kB, shmem-rss:0kB [ 1220.728924][ T1044] oom_reaper: reaped process 11185 (syz-executor.1), now anon-rss:0kB, file-rss:34828kB, shmem-rss:0kB [ 1220.730212][T21204] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 1220.776633][T21204] CPU: 1 PID: 21204 Comm: syz-executor.1 Not tainted 5.2.0-rc6+ #62 [ 1220.784663][T21204] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1220.794943][T21204] Call Trace: [ 1220.798289][T21204] dump_stack+0x172/0x1f0 [ 1220.802653][T21204] dump_header+0x10f/0xb6c [ 1220.807202][T21204] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1220.813018][T21204] ? ___ratelimit+0x60/0x595 [ 1220.817622][T21204] ? do_raw_spin_unlock+0x57/0x270 [ 1220.822744][T21204] oom_kill_process.cold+0x10/0x15 [ 1220.828061][T21204] out_of_memory+0x79a/0x1280 [ 1220.832865][T21204] ? oom_killer_disable+0x280/0x280 [ 1220.838102][T21204] ? find_held_lock+0x35/0x130 [ 1220.842875][T21204] mem_cgroup_out_of_memory+0x1ca/0x230 [ 1220.848522][T21204] ? memcg_event_wake+0x230/0x230 [ 1220.853709][T21204] ? do_raw_spin_unlock+0x57/0x270 [ 1220.858807][T21204] ? _raw_spin_unlock+0x2d/0x50 [ 1220.863650][T21204] try_charge+0xd45/0x1410 [ 1220.868164][T21204] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1220.873712][T21204] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1220.880046][T21204] ? kasan_check_read+0x11/0x20 [ 1220.884894][T21204] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 1220.890431][T21204] mem_cgroup_try_charge+0x24d/0x5e0 [ 1220.896179][T21204] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 1220.901820][T21204] wp_page_copy+0x416/0x1770 [ 1220.910814][T21204] ? do_wp_page+0x486/0x1500 [ 1220.915430][T21204] ? pmd_pfn+0x1d0/0x1d0 [ 1220.919684][T21204] ? lock_downgrade+0x880/0x880 [ 1220.924597][T21204] ? swp_swapcount+0x540/0x540 [ 1220.929430][T21204] ? kasan_check_read+0x11/0x20 [ 1220.934278][T21204] ? do_raw_spin_unlock+0x57/0x270 [ 1220.939397][T21204] do_wp_page+0x48e/0x1500 [ 1220.944595][T21204] ? finish_mkwrite_fault+0x540/0x540 [ 1220.949965][T21204] __handle_mm_fault+0x22e3/0x3eb0 [ 1220.955289][T21204] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 1220.960829][T21204] ? find_held_lock+0x35/0x130 [ 1220.965776][T21204] ? handle_mm_fault+0x292/0xa90 [ 1220.970802][T21204] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1220.977034][T21204] ? kasan_check_read+0x11/0x20 [ 1220.981913][T21204] handle_mm_fault+0x3b7/0xa90 [ 1220.986677][T21204] __do_page_fault+0x5ef/0xda0 [ 1220.991644][T21204] do_page_fault+0x71/0x57d [ 1220.996166][T21204] ? page_fault+0x8/0x30 [ 1221.000404][T21204] page_fault+0x1e/0x30 [ 1221.004579][T21204] RIP: 0033:0x457b6b [ 1221.008565][T21204] Code: 25 20 06 00 00 b8 e0 3f 41 00 48 89 15 5e ec 61 00 48 85 c0 74 08 4c 89 cf e8 81 c4 fb ff 45 85 f6 0f 85 58 01 00 00 48 85 db <48> c7 05 1a d4 2b 00 00 00 00 00 48 c7 05 ff d3 2b 00 00 00 00 00 [ 1221.033293][T21204] RSP: 002b:0000000000a6fd30 EFLAGS: 00010206 [ 1221.039471][T21204] RAX: 0000000000000000 RBX: 0000000000a6fd30 RCX: 0000000000413ff3 [ 1221.047594][T21204] RDX: 0000028fbf969042 RSI: 0000000000000018 RDI: 0000555555747c20 [ 1221.055599][T21204] RBP: 0000000000a6fd70 R08: 0000000000000001 R09: 0000555555747940 [ 1221.063913][T21204] R10: 0000555555747c10 R11: 0000000000000202 R12: 0000000000000001 [ 1221.071987][T21204] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000a6fdc0 [ 1221.080584][T21204] memory: usage 304872kB, limit 307200kB, failcnt 3461 [ 1221.087692][T21204] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1221.095390][T21204] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1221.102720][T21204] Memory cgroup stats for /syz1: cache:0KB rss:204984KB rss_huge:155648KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:204980KB inactive_file:0KB active_file:0KB unevictable:0KB 06:30:57 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x40100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}) 06:30:57 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x9effffff}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 06:30:57 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06020000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0x0) 06:30:57 executing program 3: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000480)='/dev/cuse\x00', 0x2842, 0x0) io_setup(0x2, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f0000000240)={0x0, 0xc00, 0x0, 0x0, 0x0, r0, 0x0}]) 06:30:57 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x20002, 0x1) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, &(0x7f0000000080)=0x5, 0x8) r1 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x3, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r1, 0xc0205647, &(0x7f0000000140)={0x0, 0x0, 0x0, [], 0x0}) 06:30:57 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06030000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000ffffff", 0x55}], 0x1}, 0x0) [ 1221.124486][T21204] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=11255,uid=0 [ 1221.140099][T21204] Memory cgroup out of memory: Killed process 11255 (syz-executor.1) total-vm:72708kB, anon-rss:2204kB, file-rss:35788kB, shmem-rss:0kB [ 1221.156990][ T1044] oom_reaper: reaped process 11255 (syz-executor.1), now anon-rss:0kB, file-rss:34828kB, shmem-rss:0kB 06:30:57 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000b40)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) 06:30:57 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x40100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}) 06:30:58 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06020000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0x0) 06:30:58 executing program 3: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000480)='/dev/cuse\x00', 0x2842, 0x0) io_setup(0x2, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f0000000240)={0x0, 0x3800, 0x0, 0x0, 0x0, r0, 0x0}]) 06:30:58 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06030000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d40000000000001b", 0x55}], 0x1}, 0x0) [ 1221.364326][T21268] syz-executor.1 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=1000 [ 1221.408788][T21268] CPU: 1 PID: 21268 Comm: syz-executor.1 Not tainted 5.2.0-rc6+ #62 [ 1221.416913][T21268] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1221.427258][T21268] Call Trace: [ 1221.431399][T21268] dump_stack+0x172/0x1f0 [ 1221.435756][T21268] dump_header+0x10f/0xb6c [ 1221.440199][T21268] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1221.446135][T21268] ? ___ratelimit+0x60/0x595 [ 1221.450919][T21268] ? do_raw_spin_unlock+0x57/0x270 06:30:58 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06030000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000ffffff", 0x55}], 0x1}, 0x0) [ 1221.456225][T21268] oom_kill_process.cold+0x10/0x15 [ 1221.461357][T21268] out_of_memory+0x79a/0x1280 [ 1221.466049][T21268] ? lock_downgrade+0x880/0x880 [ 1221.471001][T21268] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1221.477257][T21268] ? oom_killer_disable+0x280/0x280 [ 1221.482651][T21268] ? find_held_lock+0x35/0x130 [ 1221.487473][T21268] mem_cgroup_out_of_memory+0x1ca/0x230 [ 1221.493254][T21268] ? memcg_event_wake+0x230/0x230 [ 1221.498385][T21268] ? do_raw_spin_unlock+0x57/0x270 [ 1221.503609][T21268] ? _raw_spin_unlock+0x2d/0x50 [ 1221.508510][T21268] try_charge+0x1042/0x1410 [ 1221.513037][T21268] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1221.518598][T21268] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 1221.524193][T21268] ? find_held_lock+0x35/0x130 [ 1221.528981][T21268] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 1221.534621][T21268] __memcg_kmem_charge_memcg+0x7c/0x130 [ 1221.540534][T21268] ? memcg_kmem_put_cache+0xb0/0xb0 [ 1221.545783][T21268] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 1221.551378][T21268] __memcg_kmem_charge+0x136/0x300 06:30:58 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06030000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0x0) [ 1221.556741][T21268] __alloc_pages_nodemask+0x4bd/0x8d0 [ 1221.562178][T21268] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1221.569073][T21268] ? __alloc_pages_slowpath+0x28f0/0x28f0 [ 1221.574909][T21268] ? copy_process.part.0+0x1eea/0x6950 [ 1221.580392][T21268] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1221.585708][T21268] ? trace_hardirqs_on+0x67/0x220 [ 1221.591310][T21268] ? kasan_check_read+0x11/0x20 [ 1221.596622][T21268] copy_process.part.0+0x44e/0x6950 [ 1221.601929][T21268] ? __might_fault+0x12b/0x1e0 [ 1221.606733][T21268] ? __cleanup_sighand+0x60/0x60 [ 1221.611707][T21268] ? lock_downgrade+0x880/0x880 [ 1221.616590][T21268] _do_fork+0x25d/0xfe0 [ 1221.620907][T21268] ? copy_init_mm+0x20/0x20 [ 1221.625465][T21268] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1221.630947][T21268] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1221.636423][T21268] ? do_syscall_64+0x26/0x680 [ 1221.641156][T21268] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1221.647265][T21268] ? do_syscall_64+0x26/0x680 [ 1221.651975][T21268] __x64_sys_clone+0xbf/0x150 [ 1221.656669][T21268] do_syscall_64+0xfd/0x680 [ 1221.661203][T21268] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1221.667117][T21268] RIP: 0033:0x459519 [ 1221.671024][T21268] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1221.690728][T21268] RSP: 002b:00007f76cf65fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1221.699157][T21268] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000459519 06:30:58 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0xc3ffffff}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 06:30:58 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06030000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000ffffff", 0x55}], 0x1}, 0x0) 06:30:58 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06020000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0x0) [ 1221.707138][T21268] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000000040100 [ 1221.707157][T21268] RBP: 000000000075bf20 R08: ffffffffffffffff R09: 0000000000000000 [ 1221.723151][T21268] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f76cf6606d4 [ 1221.731223][T21268] R13: 00000000004bf97d R14: 00000000004d1358 R15: 00000000ffffffff [ 1221.740230][T21268] memory: usage 307200kB, limit 307200kB, failcnt 3502 [ 1221.755564][T21268] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1221.782796][T21268] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1221.793173][T21268] Memory cgroup stats for /syz1: cache:0KB rss:207132KB rss_huge:157696KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:207132KB inactive_file:0KB active_file:0KB unevictable:0KB 06:30:58 executing program 3: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000480)='/dev/cuse\x00', 0x2842, 0x0) io_setup(0x2, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f0000000240)={0x0, 0x4000, 0x0, 0x0, 0x0, r0, 0x0}]) 06:30:58 executing program 4: r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_DQEVENT(r0, 0x80885659, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x0, 0x40000) ioctl$RTC_AIE_ON(r1, 0x7001) [ 1221.828591][T21268] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=11707,uid=0 [ 1221.850280][T21268] Memory cgroup out of memory: Killed process 11707 (syz-executor.1) total-vm:72708kB, anon-rss:2204kB, file-rss:35788kB, shmem-rss:0kB 06:30:58 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06020000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0x0) [ 1221.949252][T31310] syz-executor.1 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=0 [ 1221.963091][T31310] CPU: 1 PID: 31310 Comm: syz-executor.1 Not tainted 5.2.0-rc6+ #62 [ 1221.971279][T31310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1221.981366][T31310] Call Trace: [ 1221.984763][T31310] dump_stack+0x172/0x1f0 [ 1221.989119][T31310] dump_header+0x10f/0xb6c [ 1221.993647][T31310] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1221.999480][T31310] ? ___ratelimit+0x60/0x595 [ 1222.004203][T31310] ? do_raw_spin_unlock+0x57/0x270 [ 1222.009427][T31310] oom_kill_process.cold+0x10/0x15 [ 1222.014568][T31310] out_of_memory+0x79a/0x1280 [ 1222.019269][T31310] ? oom_killer_disable+0x280/0x280 [ 1222.024484][T31310] ? find_held_lock+0x35/0x130 [ 1222.029308][T31310] mem_cgroup_out_of_memory+0x1ca/0x230 [ 1222.034884][T31310] ? memcg_event_wake+0x230/0x230 [ 1222.040024][T31310] ? do_raw_spin_unlock+0x57/0x270 [ 1222.045161][T31310] ? _raw_spin_unlock+0x2d/0x50 [ 1222.050034][T31310] try_charge+0xd45/0x1410 [ 1222.054509][T31310] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1222.060078][T31310] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 1222.065734][T31310] ? find_held_lock+0x35/0x130 [ 1222.070650][T31310] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 1222.076344][T31310] __memcg_kmem_charge_memcg+0x7c/0x130 [ 1222.081909][T31310] ? memcg_kmem_put_cache+0xb0/0xb0 [ 1222.087210][T31310] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 1222.092893][T31310] __memcg_kmem_charge+0x136/0x300 [ 1222.098032][T31310] __alloc_pages_nodemask+0x4bd/0x8d0 [ 1222.103418][T31310] ? mark_held_locks+0xf0/0xf0 [ 1222.108192][T31310] ? __alloc_pages_slowpath+0x28f0/0x28f0 [ 1222.113928][T31310] ? copy_page_range+0x128a/0x1fc0 [ 1222.119154][T31310] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1222.125590][T31310] alloc_pages_current+0x107/0x210 [ 1222.130730][T31310] pte_alloc_one+0x1b/0x1a0 [ 1222.135370][T31310] __pte_alloc+0x20/0x310 [ 1222.139717][T31310] copy_page_range+0x1561/0x1fc0 [ 1222.144726][T31310] ? pmd_alloc+0x180/0x180 [ 1222.149161][T31310] ? vma_gap_callbacks_rotate+0x62/0x80 [ 1222.154745][T31310] ? __rb_insert_augmented+0x22f/0xdf0 [ 1222.160314][T31310] ? validate_mm_rb+0xa3/0xc0 [ 1222.165028][T31310] ? __vma_link_rb+0x279/0x370 [ 1222.169810][T31310] ? kasan_check_write+0x14/0x20 [ 1222.174938][T31310] dup_mm+0x9c4/0x13b0 [ 1222.179035][T31310] ? vm_area_dup+0x170/0x170 [ 1222.183642][T31310] ? debug_mutex_init+0x2d/0x60 [ 1222.188610][T31310] copy_process.part.0+0x2d02/0x6950 [ 1222.193923][T31310] ? __cleanup_sighand+0x60/0x60 [ 1222.198994][T31310] _do_fork+0x25d/0xfe0 [ 1222.203156][T31310] ? copy_init_mm+0x20/0x20 [ 1222.207745][T31310] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1222.213305][T31310] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1222.218790][T31310] ? do_syscall_64+0x26/0x680 [ 1222.223541][T31310] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1222.229615][T31310] ? do_syscall_64+0x26/0x680 [ 1222.234576][T31310] __x64_sys_clone+0xbf/0x150 [ 1222.239263][T31310] do_syscall_64+0xfd/0x680 [ 1222.243762][T31310] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1222.249644][T31310] RIP: 0033:0x457aea [ 1222.253641][T31310] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 1222.273259][T31310] RSP: 002b:0000000000a6fd30 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1222.281719][T31310] RAX: ffffffffffffffda RBX: 0000000000a6fd30 RCX: 0000000000457aea [ 1222.289806][T31310] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 1222.297945][T31310] RBP: 0000000000a6fd70 R08: 0000000000000001 R09: 0000555555747940 [ 1222.305974][T31310] R10: 0000555555747c10 R11: 0000000000000246 R12: 0000000000000001 [ 1222.314218][T31310] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000a6fdc0 [ 1222.327410][T31310] memory: usage 304868kB, limit 307200kB, failcnt 3502 [ 1222.334785][T31310] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1222.342745][T31310] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1222.349812][T31310] Memory cgroup stats for /syz1: cache:0KB rss:204972KB rss_huge:155648KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:204972KB inactive_file:0KB active_file:0KB unevictable:0KB [ 1222.371469][T31310] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=11783,uid=0 [ 1222.387028][T31310] Memory cgroup out of memory: Killed process 11783 (syz-executor.1) total-vm:72708kB, anon-rss:2204kB, file-rss:35788kB, shmem-rss:0kB 06:30:59 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x40100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}) 06:30:59 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06030000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000080", 0x55}], 0x1}, 0x0) 06:30:59 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06020000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0x0) 06:30:59 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0xf0ffffff}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) [ 1222.403146][ T1044] oom_reaper: reaped process 11783 (syz-executor.1), now anon-rss:0kB, file-rss:34828kB, shmem-rss:0kB 06:30:59 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0xfeffffff}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 06:30:59 executing program 3: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000480)='/dev/cuse\x00', 0x2842, 0x0) io_setup(0x2, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f0000000240)={0x0, 0x1000000, 0x0, 0x0, 0x0, r0, 0x0}]) 06:30:59 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06020000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0x0) 06:30:59 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06030000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d4000000000000c0", 0x55}], 0x1}, 0x0) 06:30:59 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x40100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) [ 1222.715857][T31310] syz-executor.1 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=0 [ 1222.743838][T31310] CPU: 1 PID: 31310 Comm: syz-executor.1 Not tainted 5.2.0-rc6+ #62 [ 1222.751864][T31310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1222.762532][T31310] Call Trace: 06:30:59 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06020000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d40000000000f0ff", 0x55}], 0x1}, 0x0) [ 1222.765839][T31310] dump_stack+0x172/0x1f0 [ 1222.770188][T31310] dump_header+0x10f/0xb6c [ 1222.774623][T31310] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1222.780450][T31310] ? ___ratelimit+0x60/0x595 [ 1222.785053][T31310] ? do_raw_spin_unlock+0x57/0x270 [ 1222.790187][T31310] oom_kill_process.cold+0x10/0x15 [ 1222.795336][T31310] out_of_memory+0x79a/0x1280 [ 1222.795353][T31310] ? lock_downgrade+0x880/0x880 [ 1222.795366][T31310] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 06:30:59 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r4 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x638, 0x10000005) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r4, 0x40045731, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, [0xfffffffe]}) write$binfmt_misc(r2, &(0x7f0000000080)=ANY=[], 0x0) timerfd_gettime(r4, &(0x7f0000000080)) getsockopt$IP_VS_SO_GET_TIMEOUT(r3, 0x0, 0x486, &(0x7f0000000100), &(0x7f0000000140)=0xc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) splice(r1, 0x0, r3, 0x0, 0x10005, 0x0) 06:30:59 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06030000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0x0) [ 1222.795379][T31310] ? oom_killer_disable+0x280/0x280 [ 1222.795390][T31310] ? find_held_lock+0x35/0x130 [ 1222.795413][T31310] mem_cgroup_out_of_memory+0x1ca/0x230 [ 1222.795426][T31310] ? memcg_event_wake+0x230/0x230 [ 1222.795444][T31310] ? do_raw_spin_unlock+0x57/0x270 [ 1222.795461][T31310] ? _raw_spin_unlock+0x2d/0x50 [ 1222.795480][T31310] try_charge+0x1042/0x1410 [ 1222.795502][T31310] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1222.795522][T31310] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 1222.858854][T31310] ? find_held_lock+0x35/0x130 [ 1222.863773][T31310] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 1222.863797][T31310] __memcg_kmem_charge_memcg+0x7c/0x130 [ 1222.863814][T31310] ? memcg_kmem_put_cache+0xb0/0xb0 [ 1222.863830][T31310] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 1222.863847][T31310] __memcg_kmem_charge+0x136/0x300 [ 1222.863866][T31310] __alloc_pages_nodemask+0x4bd/0x8d0 [ 1222.863880][T31310] ? mark_held_locks+0xf0/0xf0 [ 1222.863896][T31310] ? __alloc_pages_slowpath+0x28f0/0x28f0 06:30:59 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06030000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d40000000088a8ff", 0x55}], 0x1}, 0x0) [ 1222.863918][T31310] ? copy_page_range+0x128a/0x1fc0 [ 1222.863940][T31310] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1222.880523][T31310] alloc_pages_current+0x107/0x210 [ 1222.929398][T31310] pte_alloc_one+0x1b/0x1a0 [ 1222.933927][T31310] __pte_alloc+0x20/0x310 [ 1222.938276][T31310] copy_page_range+0x1561/0x1fc0 [ 1222.943258][T31310] ? pmd_alloc+0x180/0x180 [ 1222.947696][T31310] ? vma_gap_callbacks_rotate+0x62/0x80 [ 1222.953454][T31310] ? __rb_insert_augmented+0x22f/0xdf0 [ 1222.958925][T31310] ? validate_mm_rb+0xa3/0xc0 [ 1222.963745][T31310] ? __vma_link_rb+0x279/0x370 [ 1222.968612][T31310] ? kasan_check_write+0x14/0x20 [ 1222.973710][T31310] dup_mm+0x9c4/0x13b0 [ 1222.977808][T31310] ? vm_area_dup+0x170/0x170 [ 1222.982456][T31310] ? debug_mutex_init+0x2d/0x60 [ 1222.987335][T31310] copy_process.part.0+0x2d02/0x6950 [ 1222.992742][T31310] ? __cleanup_sighand+0x60/0x60 [ 1222.997716][T31310] _do_fork+0x25d/0xfe0 [ 1223.001978][T31310] ? copy_init_mm+0x20/0x20 [ 1223.006819][T31310] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1223.012388][T31310] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1223.017863][T31310] ? do_syscall_64+0x26/0x680 [ 1223.022580][T31310] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1223.028840][T31310] ? do_syscall_64+0x26/0x680 [ 1223.033666][T31310] __x64_sys_clone+0xbf/0x150 [ 1223.038365][T31310] do_syscall_64+0xfd/0x680 [ 1223.042991][T31310] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1223.048891][T31310] RIP: 0033:0x457aea 06:30:59 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06030000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d40000000000f0ff", 0x55}], 0x1}, 0x0) [ 1223.052804][T31310] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 1223.072451][T31310] RSP: 002b:0000000000a6fd30 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1223.080877][T31310] RAX: ffffffffffffffda RBX: 0000000000a6fd30 RCX: 0000000000457aea [ 1223.089118][T31310] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 1223.097271][T31310] RBP: 0000000000a6fd70 R08: 0000000000000001 R09: 0000555555747940 [ 1223.105356][T31310] R10: 0000555555747c10 R11: 0000000000000246 R12: 0000000000000001 06:30:59 executing program 3: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000480)='/dev/cuse\x00', 0x2842, 0x0) io_setup(0x2, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f0000000240)={0x0, 0x2000000, 0x0, 0x0, 0x0, r0, 0x0}]) 06:30:59 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06020000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000200", 0x55}], 0x1}, 0x0) 06:30:59 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0xffffa888}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) [ 1223.113332][T31310] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000a6fdc0 [ 1223.141311][T31310] memory: usage 307200kB, limit 307200kB, failcnt 3538 [ 1223.153523][T31310] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1223.197405][T31310] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1223.217662][T31310] Memory cgroup stats for /syz1: cache:0KB rss:207132KB rss_huge:157696KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:207132KB inactive_file:0KB active_file:0KB unevictable:0KB 06:30:59 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0xfffff000}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 06:30:59 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06030000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d4000000007fffff", 0x55}], 0x1}, 0x0) 06:31:00 executing program 3: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000480)='/dev/cuse\x00', 0x2842, 0x0) io_setup(0x2, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f0000000240)={0x0, 0x3000000, 0x0, 0x0, 0x0, r0, 0x0}]) [ 1223.248224][T31310] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=11791,uid=0 [ 1223.278669][T31310] Memory cgroup out of memory: Killed process 11791 (syz-executor.1) total-vm:72708kB, anon-rss:2204kB, file-rss:35788kB, shmem-rss:0kB 06:31:00 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x40100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}) 06:31:00 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06020000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000300", 0x55}], 0x1}, 0x0) 06:31:00 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000100)="72df0318008a0217a968caa505f93efc5bea3ae2c2157c8c12e8ccb04c748536bd88a294d5c56d15cf256c19171a0a43fbbe3ec178e26cbbcde486ee9960cf567952d4940399", 0x46, 0xfffffffffffffffa) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000080)={r2, 0x56, 0x26}, 0x0, &(0x7f0000000180)="796ae31f94ca4ac0eae6f7fe499652e39fed9fcd92aa487d326f104862794ff1b08e05c0693417316f88e486bea30c2686c94a0922465880a0a7902d6d8fb7fae59de3d6fb9340a0d1a2432991dc69ae035aa3af22fb", &(0x7f0000000200)=""/38) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, &(0x7f0000000280)="66b9800000c00f326635001000000f30440f20c066350d000000440f22c08140350000f30fc731656690a800baf80c66b8c8e9c28366efbafc0c66b8483e000066ef8e240f20a6360fbaa453008d", 0x4e}], 0x1, 0xf, &(0x7f0000000340)=[@efer, @efer], 0x2) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, 0x6, 0x0, 0x9}) ioctl$KVM_RUN(r3, 0xae80, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000001b40)={'vcan0\x00', 0x0}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000002340)={{{@in6=@local, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @dev}}}}, &(0x7f0000002440)=0xe8) sendmmsg$inet(r4, &(0x7f0000004f40)=[{{&(0x7f00000003c0)={0x2, 0x4e24, @remote}, 0x10, &(0x7f0000000580)=[{&(0x7f0000000400)="417d01c9c13f7a4b4a5c26a9e3ba86fc312936dc46eef44d3e0cb7a598d7337e6a07e6acf8ff2e7a53a1359237aafca81b32059618f1fcea7b7f787213edca597054f0dfd892c474bb1ad4777c0a16900af6d2e631d4a04503a01a49b9a3e2262771", 0x62}, {&(0x7f0000000480)="287429e3566d90c991064db9c5bae565242dd2ebf9a44d33981f618820ab7ab89eca47e0280a326ebae5dbbbcf9e4de5aa8a7c6ed0d9a5ad9ddd21a17c47b9511744034dc4746ae82384db2454f6e7ada5c88732651870d05e021e50b9e2a7dab57703107759460ab79a0db9ddfff22ef1f4f7d3a486a6965ab6c2e497a2e46b2d54f62355b547a99bf17ff58e0f0ee5e3bc4864938ddf409ffd845ebac70b17b00bd90ae510249cc93a8bb57ec373a9c4577ad54c73cf11ae5f8bf56f2691c680d0b763bb99c98e658880f3ef3ea4359a930440c1b705b7a3", 0xd9}], 0x2, &(0x7f00000005c0)=[@ip_tos_int={{0x14}}], 0x18}}, {{0x0, 0x0, &(0x7f0000001a40)=[{&(0x7f0000000600)="5799db63ba40aa6a31ad26c70dbebd04a61510d152b47b29609cb7c0d9ceeadb34a09ae16fbec4bdf3c7c741bc8d9feac239a24fb03215ac96f429ee3c1f10d6bdbc7da5202b", 0x46}, {&(0x7f0000000680)}, {&(0x7f00000006c0)="6926808ad3154b13494b879832838d607802107a7650e007b27ee5f5bcacbbf326496ad890d371e2462a698f9e28a03f941d7d328f3a9e32cb42d390516755ca2d6d40a3ae7994ac71fe766628dc4855ee56c8a5206edcb8a4dae715feaa02e1e93e19e365424acd41336f1380a2d4044d65f2bb58c5eb2aadef77ae12a5e156426989d3201b1ce43ade0c843653293a478bf535e86a1aea12abf075dac19e1957356fdef1bfee34eb206024a9d201265857be7145fc3a61c79ececddf770a664fd9d97ddb2dfb1de0bb096ca9abf970233467a1", 0xd4}, {&(0x7f00000007c0)="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", 0x1000}, {&(0x7f00000017c0)="08c9002033b2783d47173da804dceaf1f81a749dfb0b13863913e48103ea151e9a07eeb9321c075ead99c7d26125c98c4517a0959cd608e29ab2960c015edf57dc90636b878e26fb177b3e08bc89272eb159ef29c9c6e51553670348b5e95a1ccb161b4c8b3fe1069072fb24bbc130c49fabba4a2f0fa4a65b380c09e7870fb44d278edd6646751c16c50202e6fa7898ff23b9147ccf3ce4450af445760a038f5adad39ad1c81b8371fa9e00", 0xac}, {&(0x7f0000001880)="6730bd1876f3a8dc0ef2603d786da357230ff60e12e46f45023f62461b72e9", 0x1f}, {&(0x7f00000018c0)="12142fa15fab7708e20c057557e4a72fba4eb89194d6fa5cf4f9df44853f7790c5f5fced9f7e687b214c65e984ce24f969f56396b9f598998653de4ad16380f5e8b3199bc729678e3e7a550a59bd7c92b4be335c23e78e1e8c2aa04d241fe4066720fad4e3690aab9833f4cf3274a06ceb5aa4180582b38bc3971334c915193fa02d0bbd5b162932c41953d11821101a0c747ca0f543e9afd7c6d65cff0d7e30bec5852ed9d70850203573e401fc888c0242a600", 0xb4}, {&(0x7f0000001980)="4ea95b678c7a18524bd14ecbb6de70668cba9916d67c6ddac95a3a2183ed288fb039ca0db32be28a926fc81a3ee37640605586e07767f6f1679a6ef1995cf8000cc9610267457cc8ba37872a14636647fd0cfc35dbb7b9f7bc880dad128ad248c6ea0d055cf5d298697faa5c5f3bd0b649f2dd6bdb6b5e6f476afa63e968c9036976012ff058d33c0b79eed6", 0x8c}], 0x8, &(0x7f0000001b80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @multicast1, @multicast1}}}], 0x20}}, {{&(0x7f0000001bc0)={0x2, 0x4e20, @local}, 0x10, &(0x7f0000001dc0)=[{&(0x7f0000001c00)="61bd35985e41706d1e2fbc0a1a2b8ea96f87b47c7cfc9358cac0711ea8851f77f8a2363885a117f39699ad8d419f2c97de7d08baff3ee4b65dc56bd1f4e3af3cd659ddd988e2cac256a0feab1f33b98304e768027cf7b3827ff70e47aea1aebc54591fe907b25b7a42a2a82c969c22e49e013d03533918d3498a76fac9f04914ee718a807d0cff0ee22f5350b81a769d8a7c4e6f1752bb2f841060852c733d197b247abe42b1e7f3da55fad38e2d5fe0ed0bc576bb64a7ee6ed2477be2331a8b", 0xc0}, {&(0x7f0000001cc0)="2346370f8f14491fcc1ae01bab5e205e5487552592a0902a3b5d749413da2819e3ae46e8277fad59eaab9e8cfce6ab0324bd29438b567fddac58691579711e7cc6580e991cdec54e866b0695585c29e79d269cbbc57777ec389ccee9c205926e429b092633a5efe055240fa6194cdb0b40e31dd40cc2c90e4dfa2dfad1b0e4ffbb45c2d6f8ea27db84119510bafa3270070c4dfc1d946ec2", 0x98}, {&(0x7f0000001d80)="a73524f92a52b253be8ade7f058c786d6633ea2e31283927e8cf5e439e30b898dfc9e47666ca52fd958060", 0x2b}], 0x3, &(0x7f0000001e00)=[@ip_ttl={{0x14, 0x0, 0x2, 0x9}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x2}}], 0x30}}, {{&(0x7f0000001e40)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10, &(0x7f0000002040)=[{&(0x7f0000001e80)="179c3b57575f9bbb1e9838c86b414bec3b289b517a4a04c58384c5aa55b44f0f361aba44a037addf215233446bcb021689a3eec9bde9f2a61a71632bef9562c2a5dc1ff07215f9d02ca1235303eb0bc8311698f0e54f74068e332b737cae521ab7d258ebcb9325508fcdb0f9c0882b1c8ee7c4560c39a859b6b4c7f40a0ba5a77ef7187d04eee5c031e3434e4d190ab9ec2407b29e091d13360989cf1c4a280e6d10085f57dea487028356c9e2f09df967515571782fcbcf487cba1a4c5078dc3a54d417bcd976a64e46ac894b509dad1298e55fd52166b6ca511b7e690cd1e0d0e530bd47ed30650937", 0xea}, {&(0x7f0000001f80)="cb9497acf5d7156ea9a66ad3d8fbfbb6e30abc62d396597f897a21d5d3d39cc0f2f7a18cc65890b17748a26d7a127a6a136de1895d0d3952b74d57fe9c580e35ccae18007f2f", 0x46}, {&(0x7f0000002000)="b82aeb20601674bf1cbb30004178460b590af9d6a1e73b4f1a8e35e2f69a15edd43c811494fda8fdbe9af6", 0x2b}], 0x3, &(0x7f0000002080)=[@ip_tos_int={{0x14, 0x0, 0x1, 0xffff}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x9}}], 0x30}}, {{0x0, 0x0, &(0x7f00000022c0)=[{&(0x7f00000020c0)="b76c889e5dc443e05545fdaa9323776a8d2fafdc4667843447031c120af3a61dd19306190bc3fca703b6577920ee5da22edb3d7a95e04efaf680778289797ed3a5fc959c9f358f31770900fda9b29b5fcdf16b03413191398915ab2316daa92b1c11af", 0x63}, {&(0x7f0000002140)="782ca5c2bcb9b1313ae16149d49f5edd48775acb0dcab6e0a146a97628df2f9d1a2150a62cbcafd248deb0b2b7cff68f6a78f3d0e70908bb52a9db2c74945db11bc57e6f0ef3fa43bee2a082ca564970be09", 0x52}, {&(0x7f00000021c0)="6827f2b0b9819f54931db8d1d895f3b33f93fa75971cc5629136467511ee35ce859762f0ebe9785b169f85972e3a322b713a4ef9b1a8f3d4b9dd003ff4eaf9c292e271d0006f49b530e1774d95d3604f0816fe63df43d8bebbe2c99046f7dee9ec74500c6911a8a0120736fde7f7ece03b037d08a0edfe352a6c", 0x7a}, {&(0x7f0000002240)="7035ccf069053dd2", 0x8}, {&(0x7f0000002280)="68ed118ea114ae52d06e550da424", 0xe}], 0x5, &(0x7f0000002480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @empty, @empty}}}], 0x20}}, {{0x0, 0x0, &(0x7f00000027c0)=[{&(0x7f00000024c0)="e6c46b503a58f498535e6e7a287085c7db152a0ebf45ceacf97fa9128db81bb8f7822e280113adf92f71e943e0e2542d24bc20c594c9502a72201da801b9729107f352d06425996ad3e5d5b37c8fe9140baa256edfe01e8ad607866384667042e98b5501a31c01ef9e5e8ded2980cd500865de16eb6a0dbf4b2eb35f778ecfc7f98302ebc54254166de6344813add67357cf", 0x92}, {&(0x7f0000002580)="1e576de50d3f1643fbadd3df7eb1cc291b0a2ef81fd25689ac0128de2a65ba5c65740b7e42fa438518", 0x29}, {&(0x7f00000025c0)="d6d6186adddc6f12ca27150d6ca266c6c37666af030213f3300233d5b8d66280b1fca0b9c411acd2280ad94113004bb084e7cb207873695fec9b7d81843afd1a17b648389a22f26701b7c06f6e383d0c07b2c9f268333212e93ebd741ef0fd49648fa9e26442634899b4384305c11bb5a134ca88ce0519fc71a37b7d69f8ff513a96caf0b1da009fec7295d5a77b2e4ab9248db1c56f6d0932c31d2ad75bf6dfc28bc7b58956466a06a4a085d40d9cfe985d9ddf54cfb9bf94edf7651c50b559112031c0c7978153a9e0ce24f6fdde", 0xcf}, {&(0x7f00000026c0)="c1ce65c41e6cb757f35158d350db7ec17ceeaabdac0103c511efd9ef61127279276445e16dc02f65486877e1cfad768c55a646decf211ec79172c04ba19f0924d0ca13d0b129f0ca6709f76665f8a93546661f4cb744d5a84fc8a819266a97af5f80fc9ccf68b5f19a1f38f1e93724d4f4353220137b6722986479701b381d95bfe82698581cd31066c9dfa4052d760cef9b9b25419b00facd5e88cc43cdb7ba9c4e06980da9dff972f2910ab2e00a57200d4252ab4cf5bde0b25d7105c3f3555f59dcfed0f4", 0xc6}], 0x4}}, {{&(0x7f0000002800)={0x2, 0x4e24, @rand_addr=0x10000}, 0x10, &(0x7f0000003cc0)=[{&(0x7f0000002840)="0c09d04a0d83354fc513183258a08c041e2dc15fb08d4dfe2aa8d8cedaba4a74727ad6b5fa10f109a27051e188978705d10dc32ae667d0", 0x37}, {&(0x7f0000002880)="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", 0x1000}, {&(0x7f0000003880)="15ae6ac7e7cbd00245478abb0af5516fb3c7a5dc8ce18020da8e451b4cee8c15f17c576064981f8355cc31bdea04cae54442443a51c0bb283955112f8335e5ebe50846a3898d41873c31bcb8ace8bc1f079fb5f5ddf55b5209b65c64b9a8442d93f493797a41da32a7ba3c41689fa975", 0x70}, {&(0x7f0000003900)="3bf6876d8b2f39bdf13268f2c522f2c8facde828aaf8616563bd58df8571c1c9d099e3e18405c1144df7cbb8c97587680bd36181e3d5d994658e0a09ef2d261074a6013625c7bb1bc5cc9ca9744855b1b04153673f811a02175a911be21971de4fd7d255fbaac770acc5406656d31232ae151659425982a95bc8d9b53797440481a38d42e3b24e055b44486ea01e51d025464ce3d5cf951143d726167ff6e32eb93589ed1a2354e3172e684e9db927ca689bdd0d327c347bee41ffc87d79", 0xbe}, {&(0x7f00000039c0)="8503b9e81735f85a82c92d67a9e0dae53ac9ab21e7355be108b336d12512303199f428f9035f19b400651d8d68408ff31802d6ee5e53d3506764ec9503466d5d7ff7a109c1577e5b4928d72342aee6cd264219e01db04b09f5d361bea53032f3f6c29914", 0x64}, {&(0x7f0000003a40)="1ae67151a88f62a6cc0d551373248ca9aaf1c3218d690f9f0a5af008fd23b673503c6a690a8b4b5a082e380d765fe964899ad4ce81f4fc7706289e6cbb4728cbde90a5e9ad39df4d07f96dbd2b5130b4444341fab8bfb900778af647cc20027bfce8659ff2748a0f52caa45d999ea22352e13ea7d96f18e68e124ed254d8274c29beac2e00687215b26131204aa2388fe059610d27c1e416e0058bedcee45223ef398bf3c02f5db91c11d9615a910972ca0ffd6ec77bbd690de9d47e89ef2a003db365244b8090d917fd6af66d408e1a24a951d4d0550e1d1bd59822b17ca46e203ef37ade125ba7d1f69e7af7d6f3156960130e1b6687e937", 0xf9}, {&(0x7f0000003b40)="53352fe0cf3edabe46c7ebd4bc803849d54673dca602a2905947445883c169a81c2a81f0635336f0b481fd89194b3423b0b85ff8dbf0e5e033574a8650909cc33caf1ddb96f18c99f074bcf644ee5049651cac8c89376f2b5b6e03afe6eadaf2c3ed657eac0ffb0b6f3f27", 0x6b}, {&(0x7f0000003bc0)="0cda1da6b4670906f154cc1985feb65401c92454b967efee8bb3ef2e20c828e1798d536fdb3ea7bada8e477146c1ec85b72cca1212e55521bfb8e139f4932bf65fce46518eadebc8efc28a0533df5da953bc14a89765b6127d9d8d184be2b059cda94d1e006dd864c9e51a2eae490ea0eb8419c124a5498cf8ee8ef81f76b8f9e2cb9fe5f893af1f0771f447ecbf2cd4af87922dce4e97328d7bb8fb406c23003a0352889010e88374ace459f71d6eb0a9314d355f27dd0b1f30f99ad738708597570770fdd157c83fcbf4fbee5b0810ed3ee50736bb4104c7", 0xd9}], 0x8}}, {{&(0x7f0000003d40)={0x2, 0x4e20, @empty}, 0x10, &(0x7f0000004ec0)=[{&(0x7f0000003d80)="524b3f21a6afed068865ff8916c672fb8918bbbd14cfbd3cfd4e174f970f706f3088757fdf311fc5e209fdd31905a4736ffbe018738e2dee6277280eb94202c3bd0ca7eba527f0c74d34d47c3abacf4ca487c727be4ebb5a43e27dfbc75628971b77779b3a6b1e223e", 0x69}, {&(0x7f0000003e00)="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", 0x1000}, {&(0x7f0000004e00)="dd57db6b560fb8bc7b3d7f3a6a4f74a633e64f21f907fd9ade17d9eb10cdc5d7da91c878f18c237028e0be308ce5877ea556363b55fa4bb78b2c09dfdc1b968f532f544f3c8d81b138daeb5a90672956180a5cd8524024ac720230086d8e8a04dd312d9f7c383629cbde3d79f84fff6e5ab0f7d84ed2b007696d491872db86b526329700b143426f08eabe2593c8094a5025640cdaf4d30a1c9ba5cd48b7e2", 0x9f}], 0x3, &(0x7f0000004f00)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x2}}], 0x18}}], 0x8, 0x4000) 06:31:00 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0xffffff7f}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 06:31:00 executing program 3: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000480)='/dev/cuse\x00', 0x2842, 0x0) io_setup(0x2, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f0000000240)={0x0, 0x4000000, 0x0, 0x0, 0x0, r0, 0x0}]) 06:31:00 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06030000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d4000000009effff", 0x55}], 0x1}, 0x0) 06:31:00 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06020000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000400", 0x55}], 0x1}, 0x0) 06:31:00 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x40100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}) 06:31:00 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x40100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa]}) 06:31:00 executing program 3: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000480)='/dev/cuse\x00', 0x2842, 0x0) io_setup(0x2, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f0000000240)={0x0, 0x5000000, 0x0, 0x0, 0x0, r0, 0x0}]) 06:31:00 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06030000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000f0ffff", 0x55}], 0x1}, 0x0) 06:31:00 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06020000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000600", 0x55}], 0x1}, 0x0) 06:31:00 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0xffffff9e}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 06:31:01 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x40100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48]}) 06:31:01 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x3, 0x40000000000010) sendmsg(r0, &(0x7f0000000100)={0x0, 0xfffffffffffffe7d, &(0x7f00000000c0)=[{&(0x7f0000000080)="240000001d0003fffd3cc0023da2830101faffffff86c41600000000b51ba3a2d188737e", 0x24}], 0x1}, 0x0) 06:31:01 executing program 3: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000480)='/dev/cuse\x00', 0x2842, 0x0) io_setup(0x2, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f0000000240)={0x0, 0x7000000, 0x0, 0x0, 0x0, r0, 0x0}]) 06:31:01 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06030000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000fcffff", 0x55}], 0x1}, 0x0) 06:31:01 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06020000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000a00", 0x55}], 0x1}, 0x0) 06:31:01 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x40100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c]}) 06:31:01 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0xffffffc3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 06:31:01 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06030000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0x0) 06:31:01 executing program 3: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000480)='/dev/cuse\x00', 0x2842, 0x0) io_setup(0x2, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f0000000240)={0x0, 0x8000000, 0x0, 0x0, 0x0, r0, 0x0}]) 06:31:01 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x40100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68]}) 06:31:01 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06020000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000c00", 0x55}], 0x1}, 0x0) 06:31:01 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06030000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000ffffff", 0x55}], 0x1}, 0x0) 06:31:01 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x3, 0x40000000000010) sendmsg(r0, &(0x7f0000000100)={0x0, 0xfffffffffffffe7d, &(0x7f00000000c0)=[{&(0x7f0000000080)="240000001d0003fffd3cc0023da2830101faffffff86c41600000000b51ba3a2d188737e", 0x24}], 0x1}, 0x0) 06:31:01 executing program 3: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000480)='/dev/cuse\x00', 0x2842, 0x0) io_setup(0x2, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f0000000240)={0x0, 0xc000000, 0x0, 0x0, 0x0, r0, 0x0}]) 06:31:01 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0xfffffff0}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 06:31:01 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x40100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c]}) 06:31:01 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06020000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000e00", 0x55}], 0x1}, 0x0) 06:31:01 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06030000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0x0) 06:31:01 executing program 3: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000480)='/dev/cuse\x00', 0x2842, 0x0) io_setup(0x2, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f0000000240)={0x0, 0x38000000, 0x0, 0x0, 0x0, r0, 0x0}]) 06:31:01 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x40100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x74]}) 06:31:01 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0xfffffffe}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 06:31:01 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06030000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0x0) 06:31:01 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06020000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000f00", 0x55}], 0x1}, 0x0) 06:31:01 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x40100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a]}) 06:31:02 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x3, 0x40000000000010) sendmsg(r0, &(0x7f0000000100)={0x0, 0xfffffffffffffe7d, &(0x7f00000000c0)=[{&(0x7f0000000080)="240000001d0003fffd3cc0023da2830101faffffff86c41600000000b51ba3a2d188737e", 0x24}], 0x1}, 0x0) 06:31:02 executing program 3: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000480)='/dev/cuse\x00', 0x2842, 0x0) io_setup(0x2, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f0000000240)={0x0, 0x40000000, 0x0, 0x0, 0x0, r0, 0x0}]) 06:31:02 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06020000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000001000", 0x55}], 0x1}, 0x0) 06:31:02 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06030000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0x0) 06:31:02 executing program 3: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000480)='/dev/cuse\x00', 0x2842, 0x0) io_setup(0x2, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f0000000240)={0x0, 0x7ffffffff000, 0x0, 0x0, 0x0, r0, 0x0}]) [ 1225.511623][T21554] syz-executor.1 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000 06:31:02 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06020000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000006000", 0x55}], 0x1}, 0x0) 06:31:02 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0xf0ffffffffffff}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) [ 1225.641062][T21554] CPU: 0 PID: 21554 Comm: syz-executor.1 Not tainted 5.2.0-rc6+ #62 [ 1225.649203][T21554] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1225.659265][T21554] Call Trace: [ 1225.662569][T21554] dump_stack+0x172/0x1f0 [ 1225.666925][T21554] dump_header+0x10f/0xb6c [ 1225.671355][T21554] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1225.677191][T21554] ? ___ratelimit+0x60/0x595 [ 1225.681913][T21554] ? do_raw_spin_unlock+0x57/0x270 [ 1225.687065][T21554] oom_kill_process.cold+0x10/0x15 [ 1225.692282][T21554] out_of_memory+0x79a/0x1280 [ 1225.696988][T21554] ? lock_downgrade+0x880/0x880 [ 1225.701947][T21554] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1225.708470][T21554] ? oom_killer_disable+0x280/0x280 [ 1225.713907][T21554] ? find_held_lock+0x35/0x130 [ 1225.718695][T21554] mem_cgroup_out_of_memory+0x1ca/0x230 [ 1225.724342][T21554] ? memcg_event_wake+0x230/0x230 [ 1225.729393][T21554] ? do_raw_spin_unlock+0x57/0x270 [ 1225.734524][T21554] ? _raw_spin_unlock+0x2d/0x50 [ 1225.739524][T21554] try_charge+0x1042/0x1410 [ 1225.744071][T21554] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1225.749764][T21554] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 1225.755424][T21554] ? find_held_lock+0x35/0x130 [ 1225.760211][T21554] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 1225.766232][T21554] __memcg_kmem_charge_memcg+0x7c/0x130 [ 1225.771798][T21554] ? memcg_kmem_put_cache+0xb0/0xb0 [ 1225.777032][T21554] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 1225.782632][T21554] __memcg_kmem_charge+0x136/0x300 [ 1225.787856][T21554] __alloc_pages_nodemask+0x4bd/0x8d0 [ 1225.793253][T21554] ? __alloc_pages_slowpath+0x28f0/0x28f0 [ 1225.798983][T21554] ? find_held_lock+0x35/0x130 [ 1225.803765][T21554] ? kasan_check_write+0x14/0x20 [ 1225.808986][T21554] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1225.815670][T21554] alloc_pages_current+0x107/0x210 [ 1225.820805][T21554] pte_alloc_one+0x1b/0x1a0 [ 1225.825352][T21554] __do_fault+0x2b4/0x4d0 [ 1225.829969][T21554] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1225.836342][T21554] __handle_mm_fault+0x2a8e/0x3eb0 [ 1225.841483][T21554] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 1225.847138][T21554] ? find_held_lock+0x35/0x130 [ 1225.852104][T21554] ? handle_mm_fault+0x292/0xa90 [ 1225.857066][T21554] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1225.863361][T21554] ? kasan_check_read+0x11/0x20 [ 1225.868439][T21554] handle_mm_fault+0x3b7/0xa90 [ 1225.873232][T21554] __do_page_fault+0x5ef/0xda0 [ 1225.878024][T21554] do_page_fault+0x71/0x57d [ 1225.882548][T21554] ? page_fault+0x8/0x30 [ 1225.886808][T21554] page_fault+0x1e/0x30 [ 1225.891153][T21554] RIP: 0033:0x4019f7 [ 1225.895250][T21554] Code: 00 00 00 48 83 ec 08 48 8b 15 bd ea 66 00 48 8b 05 ae ea 66 00 48 39 d0 48 8d 8a 00 00 00 01 72 17 48 39 c8 73 12 48 8d 50 04 <89> 38 48 89 15 90 ea 66 00 48 83 c4 08 c3 48 89 c6 bf 38 96 4c 00 [ 1225.915593][T21554] RSP: 002b:0000000000a6fbc0 EFLAGS: 00010287 [ 1225.921973][T21554] RAX: 0000001b30920000 RBX: 0000000000000000 RCX: 0000001b31920000 [ 1225.930231][T21554] RDX: 0000001b30920004 RSI: 0000000000a6f980 RDI: 0000000000000000 06:31:02 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06030000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0x0) 06:31:02 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06030000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0x0) 06:31:02 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06020000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d40000000000f000", 0x55}], 0x1}, 0x0) 06:31:02 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x100000000000000}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) [ 1225.938309][T21554] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000004 [ 1225.946304][T21554] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000001 [ 1225.954380][T21554] R13: 0000000000a6fdb0 R14: 0000000000000000 R15: 0000000000a6fdc0 [ 1226.104553][T21554] memory: usage 307200kB, limit 307200kB, failcnt 3584 [ 1226.111641][T21554] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1226.131129][T21554] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1226.139402][T21554] Memory cgroup stats for /syz1: cache:0KB rss:205800KB rss_huge:155648KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:205800KB inactive_file:0KB active_file:0KB unevictable:0KB [ 1226.162287][T21554] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=12251,uid=0 [ 1226.178060][T21554] Memory cgroup out of memory: Killed process 12251 (syz-executor.1) total-vm:72708kB, anon-rss:2204kB, file-rss:35788kB, shmem-rss:0kB [ 1226.194582][ T1044] oom_reaper: reaped process 12251 (syz-executor.1), now anon-rss:0kB, file-rss:34828kB, shmem-rss:0kB [ 1226.219525][T21588] syz-executor.1 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=1000 [ 1226.231765][T21588] CPU: 1 PID: 21588 Comm: syz-executor.1 Not tainted 5.2.0-rc6+ #62 [ 1226.239950][T21588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1226.250167][T21588] Call Trace: [ 1226.253484][T21588] dump_stack+0x172/0x1f0 [ 1226.257914][T21588] dump_header+0x10f/0xb6c [ 1226.262438][T21588] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1226.268363][T21588] ? ___ratelimit+0x60/0x595 [ 1226.272978][T21588] ? do_raw_spin_unlock+0x57/0x270 [ 1226.278188][T21588] oom_kill_process.cold+0x10/0x15 [ 1226.283586][T21588] out_of_memory+0x79a/0x1280 [ 1226.288280][T21588] ? lock_downgrade+0x880/0x880 [ 1226.293237][T21588] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1226.299809][T21588] ? oom_killer_disable+0x280/0x280 [ 1226.305041][T21588] ? find_held_lock+0x35/0x130 [ 1226.309902][T21588] mem_cgroup_out_of_memory+0x1ca/0x230 [ 1226.315568][T21588] ? memcg_event_wake+0x230/0x230 [ 1226.321809][T21588] ? do_raw_spin_unlock+0x57/0x270 [ 1226.327504][T21588] ? _raw_spin_unlock+0x2d/0x50 [ 1226.332833][T21588] try_charge+0x1042/0x1410 [ 1226.337826][T21588] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1226.346603][T21588] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 1226.352161][T21588] ? find_held_lock+0x35/0x130 [ 1226.356946][T21588] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 1226.362511][T21588] __memcg_kmem_charge_memcg+0x7c/0x130 [ 1226.368827][T21588] ? memcg_kmem_put_cache+0xb0/0xb0 [ 1226.374801][T21588] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 1226.380788][T21588] __memcg_kmem_charge+0x136/0x300 [ 1226.385999][T21588] __alloc_pages_nodemask+0x4bd/0x8d0 [ 1226.391389][T21588] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1226.397636][T21588] ? __alloc_pages_slowpath+0x28f0/0x28f0 [ 1226.403384][T21588] ? copy_process.part.0+0x1eea/0x6950 [ 1226.409058][T21588] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1226.414466][T21588] ? trace_hardirqs_on+0x67/0x220 [ 1226.419491][T21588] ? kasan_check_read+0x11/0x20 [ 1226.424339][T21588] copy_process.part.0+0x44e/0x6950 [ 1226.429559][T21588] ? __might_fault+0x12b/0x1e0 [ 1226.434464][T21588] ? __cleanup_sighand+0x60/0x60 [ 1226.439840][T21588] ? lock_downgrade+0x880/0x880 [ 1226.444780][T21588] _do_fork+0x25d/0xfe0 [ 1226.448932][T21588] ? copy_init_mm+0x20/0x20 [ 1226.453447][T21588] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1226.459007][T21588] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1226.464544][T21588] ? do_syscall_64+0x26/0x680 [ 1226.469221][T21588] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1226.475737][T21588] ? do_syscall_64+0x26/0x680 [ 1226.480428][T21588] __x64_sys_clone+0xbf/0x150 [ 1226.485104][T21588] do_syscall_64+0xfd/0x680 [ 1226.490101][T21588] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1226.496002][T21588] RIP: 0033:0x459519 [ 1226.499907][T21588] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1226.520250][T21588] RSP: 002b:00007f76cf65fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1226.528775][T21588] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000459519 [ 1226.536931][T21588] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000000040100 [ 1226.545313][T21588] RBP: 000000000075bf20 R08: ffffffffffffffff R09: 0000000000000000 [ 1226.554261][T21588] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f76cf6606d4 [ 1226.562353][T21588] R13: 00000000004bf97d R14: 00000000004d1358 R15: 00000000ffffffff [ 1226.572616][T21588] memory: usage 307152kB, limit 307200kB, failcnt 3611 [ 1226.579506][T21588] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1226.587470][T21588] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1226.595937][T21588] Memory cgroup stats for /syz1: cache:0KB rss:205760KB rss_huge:155648KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:205760KB inactive_file:0KB active_file:0KB unevictable:0KB [ 1226.618295][T21588] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=12392,uid=0 [ 1226.634064][T21588] Memory cgroup out of memory: Killed process 12392 (syz-executor.1) total-vm:72708kB, anon-rss:2204kB, file-rss:35788kB, shmem-rss:0kB [ 1226.648994][ T1044] oom_reaper: reaped process 12392 (syz-executor.1), now anon-rss:0kB, file-rss:34828kB, shmem-rss:0kB 06:31:03 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x40100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300]}) 06:31:03 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06030000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0x0) 06:31:03 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06020000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d40000000000fc00", 0x55}], 0x1}, 0x0) 06:31:03 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x200000000000000}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 06:31:03 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x3, 0x40000000000010) sendmsg(r0, &(0x7f0000000100)={0x0, 0xfffffffffffffe7d, &(0x7f00000000c0)=[{&(0x7f0000000080)="240000001d0003fffd3cc0023da2830101faffffff86c41600000000b51ba3a2d188737e", 0x24}], 0x1}, 0x0) 06:31:03 executing program 3: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000480)='/dev/cuse\x00', 0x2842, 0x0) io_setup(0x2, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f0000000240)={0x0, 0xf0ffffff7f0000, 0x0, 0x0, 0x0, r0, 0x0}]) 06:31:03 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06030000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0x0) 06:31:03 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x40100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500]}) 06:31:03 executing program 3: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000480)='/dev/cuse\x00', 0x2842, 0x0) io_setup(0x2, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f0000000240)={0x0, 0x100000000000000, 0x0, 0x0, 0x0, r0, 0x0}]) 06:31:03 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x300000000000000}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 06:31:03 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06020000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000005a02", 0x55}], 0x1}, 0x0) 06:31:03 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06020000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000003", 0x55}], 0x1}, 0x0) 06:31:03 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06030000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0x0) 06:31:03 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x40100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600]}) 06:31:03 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xfffffffffffffe7d, &(0x7f00000000c0)=[{&(0x7f0000000080)="240000001d0003fffd3cc0023da2830101faffffff86c41600000000b51ba3a2d188737e", 0x24}], 0x1}, 0x0) 06:31:03 executing program 3: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000480)='/dev/cuse\x00', 0x2842, 0x0) io_setup(0x2, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f0000000240)={0x0, 0x200000000000000, 0x0, 0x0, 0x0, r0, 0x0}]) 06:31:03 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x400000000000000}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) [ 1227.182613][T31310] syz-executor.1 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=0 [ 1227.259215][T31310] CPU: 0 PID: 31310 Comm: syz-executor.1 Not tainted 5.2.0-rc6+ #62 [ 1227.267427][T31310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1227.267433][T31310] Call Trace: [ 1227.267460][T31310] dump_stack+0x172/0x1f0 [ 1227.267482][T31310] dump_header+0x10f/0xb6c [ 1227.267503][T31310] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1227.295780][T31310] ? ___ratelimit+0x60/0x595 [ 1227.300392][T31310] ? do_raw_spin_unlock+0x57/0x270 [ 1227.305520][T31310] oom_kill_process.cold+0x10/0x15 [ 1227.310660][T31310] out_of_memory+0x79a/0x1280 [ 1227.315352][T31310] ? lock_downgrade+0x880/0x880 [ 1227.315368][T31310] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1227.315383][T31310] ? oom_killer_disable+0x280/0x280 [ 1227.315394][T31310] ? find_held_lock+0x35/0x130 [ 1227.315417][T31310] mem_cgroup_out_of_memory+0x1ca/0x230 [ 1227.315436][T31310] ? memcg_event_wake+0x230/0x230 [ 1227.348198][T31310] ? do_raw_spin_unlock+0x57/0x270 [ 1227.353538][T31310] ? _raw_spin_unlock+0x2d/0x50 [ 1227.358422][T31310] try_charge+0x1042/0x1410 [ 1227.362983][T31310] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1227.368817][T31310] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 1227.374553][T31310] ? find_held_lock+0x35/0x130 [ 1227.379332][T31310] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 1227.385349][T31310] __memcg_kmem_charge_memcg+0x7c/0x130 [ 1227.391011][T31310] ? memcg_kmem_put_cache+0xb0/0xb0 [ 1227.396332][T31310] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 1227.402081][T31310] __memcg_kmem_charge+0x136/0x300 [ 1227.407385][T31310] __alloc_pages_nodemask+0x4bd/0x8d0 [ 1227.412950][T31310] ? find_held_lock+0x35/0x130 [ 1227.417732][T31310] ? __alloc_pages_slowpath+0x28f0/0x28f0 [ 1227.423465][T31310] ? kasan_check_write+0x14/0x20 [ 1227.428420][T31310] ? lock_downgrade+0x880/0x880 [ 1227.433290][T31310] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1227.439555][T31310] alloc_pages_current+0x107/0x210 [ 1227.444690][T31310] pte_alloc_one+0x1b/0x1a0 [ 1227.449384][T31310] __pte_alloc+0x20/0x310 [ 1227.453727][T31310] copy_page_range+0x1561/0x1fc0 [ 1227.458766][T31310] ? mark_held_locks+0xf0/0xf0 [ 1227.463544][T31310] ? percpu_ref_put_many+0x94/0x190 [ 1227.468762][T31310] ? anon_vma_fork+0x371/0x4a0 [ 1227.473561][T31310] ? pmd_alloc+0x180/0x180 [ 1227.478087][T31310] ? vma_gap_callbacks_rotate+0x62/0x80 [ 1227.483652][T31310] ? validate_mm_rb+0xa3/0xc0 [ 1227.488433][T31310] ? __vma_link_rb+0x279/0x370 [ 1227.493390][T31310] dup_mm+0x9c4/0x13b0 [ 1227.497499][T31310] ? vm_area_dup+0x170/0x170 [ 1227.502111][T31310] ? debug_mutex_init+0x2d/0x60 06:31:04 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x500000000000000}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 06:31:04 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06030000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0x0) 06:31:04 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06020000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000006", 0x55}], 0x1}, 0x0) 06:31:04 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x600000000000000}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 06:31:04 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x700000000000000}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) [ 1227.507164][T31310] copy_process.part.0+0x2d02/0x6950 [ 1227.512486][T31310] ? __cleanup_sighand+0x60/0x60 [ 1227.517576][T31310] _do_fork+0x25d/0xfe0 [ 1227.521995][T31310] ? copy_init_mm+0x20/0x20 [ 1227.526785][T31310] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1227.532264][T31310] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1227.537737][T31310] ? do_syscall_64+0x26/0x680 [ 1227.542425][T31310] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1227.548497][T31310] ? do_syscall_64+0x26/0x680 [ 1227.553204][T31310] __x64_sys_clone+0xbf/0x150 [ 1227.557910][T31310] do_syscall_64+0xfd/0x680 [ 1227.562524][T31310] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1227.568424][T31310] RIP: 0033:0x457aea [ 1227.572337][T31310] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 1227.592476][T31310] RSP: 002b:0000000000a6fd30 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1227.600905][T31310] RAX: ffffffffffffffda RBX: 0000000000a6fd30 RCX: 0000000000457aea 06:31:04 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0xa00000000000000}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 06:31:04 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xfffffffffffffe7d, &(0x7f00000000c0)=[{&(0x7f0000000080)="240000001d0003fffd3cc0023da2830101faffffff86c41600000000b51ba3a2d188737e", 0x24}], 0x1}, 0x0) [ 1227.609015][T31310] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 1227.617030][T31310] RBP: 0000000000a6fd70 R08: 0000000000000001 R09: 0000555555747940 [ 1227.625018][T31310] R10: 0000555555747c10 R11: 0000000000000246 R12: 0000000000000001 [ 1227.633010][T31310] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000a6fdc0 06:31:04 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06020000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d40000000000000a", 0x55}], 0x1}, 0x0) [ 1227.699717][T31310] memory: usage 307200kB, limit 307200kB, failcnt 3650 [ 1227.707476][T31310] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1227.715293][T31310] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1227.722506][T31310] Memory cgroup stats for /syz1: cache:0KB rss:205772KB rss_huge:155648KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:205772KB inactive_file:0KB active_file:0KB unevictable:0KB [ 1227.747460][T31310] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=12459,uid=0 [ 1227.765230][T31310] Memory cgroup out of memory: Killed process 12459 (syz-executor.1) total-vm:72708kB, anon-rss:2204kB, file-rss:35788kB, shmem-rss:0kB [ 1227.792209][ T1044] oom_reaper: reaped process 12459 (syz-executor.1), now anon-rss:0kB, file-rss:34828kB, shmem-rss:0kB 06:31:04 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x40100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700]}) 06:31:04 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06030000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0x0) 06:31:04 executing program 3: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000480)='/dev/cuse\x00', 0x2842, 0x0) io_setup(0x2, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f0000000240)={0x0, 0x300000000000000, 0x0, 0x0, 0x0, r0, 0x0}]) 06:31:04 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xfffffffffffffe7d, &(0x7f00000000c0)=[{&(0x7f0000000080)="240000001d0003fffd3cc0023da2830101faffffff86c41600000000b51ba3a2d188737e", 0x24}], 0x1}, 0x0) 06:31:04 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06020000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d40000000000000c", 0x55}], 0x1}, 0x0) 06:31:04 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0xc00000000000000}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 06:31:04 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x40100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00]}) 06:31:04 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x40100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00]}) 06:31:04 executing program 4: r0 = socket$inet(0x10, 0x3, 0x40000000000010) sendmsg(r0, &(0x7f0000000100)={0x0, 0xfffffffffffffe7d, &(0x7f00000000c0)=[{&(0x7f0000000080)="240000001d0003fffd3cc0023da2830101faffffff86c41600000000b51ba3a2d188737e", 0x24}], 0x1}, 0x0) 06:31:04 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0xe00000000000000}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 06:31:04 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06020000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d40000000000000e", 0x55}], 0x1}, 0x0) 06:31:04 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06030000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0x0) 06:31:04 executing program 3: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000480)='/dev/cuse\x00', 0x2842, 0x0) io_setup(0x2, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f0000000240)={0x0, 0x400000000000000, 0x0, 0x0, 0x0, r0, 0x0}]) 06:31:04 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x40100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000]}) 06:31:05 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06020000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d40000000000000f", 0x55}], 0x1}, 0x0) 06:31:05 executing program 4: r0 = socket$inet(0x10, 0x3, 0x40000000000010) sendmsg(r0, &(0x7f0000000100)={0x0, 0xfffffffffffffe7d, &(0x7f00000000c0)=[{&(0x7f0000000080)="240000001d0003fffd3cc0023da2830101faffffff86c41600000000b51ba3a2d188737e", 0x24}], 0x1}, 0x0) 06:31:05 executing program 3: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000480)='/dev/cuse\x00', 0x2842, 0x0) io_setup(0x2, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f0000000240)={0x0, 0x500000000000000, 0x0, 0x0, 0x0, r0, 0x0}]) 06:31:05 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x40100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800]}) 06:31:05 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06030000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0x0) 06:31:05 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06020000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d40000000000c514", 0x55}], 0x1}, 0x0) 06:31:05 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0xf20000000000000}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 06:31:05 executing program 4: r0 = socket$inet(0x10, 0x3, 0x40000000000010) sendmsg(r0, &(0x7f0000000100)={0x0, 0xfffffffffffffe7d, &(0x7f00000000c0)=[{&(0x7f0000000080)="240000001d0003fffd3cc0023da2830101faffffff86c41600000000b51ba3a2d188737e", 0x24}], 0x1}, 0x0) 06:31:05 executing program 3: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000480)='/dev/cuse\x00', 0x2842, 0x0) io_setup(0x2, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f0000000240)={0x0, 0x700000000000000, 0x0, 0x0, 0x0, r0, 0x0}]) 06:31:05 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06030000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0x0) 06:31:05 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x40100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c00]}) 06:31:05 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06020000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d40000000000003f", 0x55}], 0x1}, 0x0) 06:31:05 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06030000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0x0) 06:31:05 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x1000000000000000}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 06:31:05 executing program 3: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000480)='/dev/cuse\x00', 0x2842, 0x0) io_setup(0x2, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f0000000240)={0x0, 0x800000000000000, 0x0, 0x0, 0x0, r0, 0x0}]) 06:31:05 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06020000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000040", 0x55}], 0x1}, 0x0) 06:31:05 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x3, 0x40000000000010) sendmsg(r0, &(0x7f0000000100)={0x0, 0xfffffffffffffe7d, &(0x7f00000000c0)=[{&(0x7f0000000080)="240000001d0003fffd3cc0023da2830101faffffff86c41600000000b51ba3a2d188737e", 0x24}], 0x1}, 0x0) 06:31:05 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x40100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6800]}) 06:31:05 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x3f00000000000000}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 06:31:05 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06020000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000006558", 0x55}], 0x1}, 0x0) 06:31:05 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06030000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0x0) 06:31:05 executing program 3: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000480)='/dev/cuse\x00', 0x2842, 0x0) io_setup(0x2, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f0000000240)={0x0, 0xc00000000000000, 0x0, 0x0, 0x0, r0, 0x0}]) 06:31:05 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x3, 0x40000000000010) sendmsg(r0, &(0x7f0000000100)={0x0, 0xfffffffffffffe7d, &(0x7f00000000c0)=[{&(0x7f0000000080)="240000001d0003fffd3cc0023da2830101faffffff86c41600000000b51ba3a2d188737e", 0x24}], 0x1}, 0x0) 06:31:06 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x40100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c00]}) 06:31:06 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06020000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d40000000000025a", 0x55}], 0x1}, 0x0) 06:31:06 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x4000000000000000}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 06:31:06 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06030000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0x0) 06:31:06 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x40100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7400]}) 06:31:06 executing program 3: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000480)='/dev/cuse\x00', 0x2842, 0x0) io_setup(0x2, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f0000000240)={0x0, 0x3800000000000000, 0x0, 0x0, 0x0, r0, 0x0}]) 06:31:06 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x40100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a00]}) 06:31:06 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x6000000000000000}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 06:31:06 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x3, 0x40000000000010) sendmsg(r0, &(0x7f0000000100)={0x0, 0xfffffffffffffe7d, &(0x7f00000000c0)=[{&(0x7f0000000080)="240000001d0003fffd3cc0023da2830101faffffff86c41600000000b51ba3a2d188737e", 0x24}], 0x1}, 0x0) 06:31:06 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06020000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000060", 0x55}], 0x1}, 0x0) 06:31:06 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06030000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0x0) [ 1229.707696][T31310] syz-executor.1 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=0 [ 1229.721300][T31310] CPU: 0 PID: 31310 Comm: syz-executor.1 Not tainted 5.2.0-rc6+ #62 [ 1229.729359][T31310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1229.739675][T31310] Call Trace: [ 1229.739706][T31310] dump_stack+0x172/0x1f0 [ 1229.739727][T31310] dump_header+0x10f/0xb6c [ 1229.739741][T31310] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1229.739755][T31310] ? ___ratelimit+0x60/0x595 [ 1229.739769][T31310] ? do_raw_spin_unlock+0x57/0x270 [ 1229.739785][T31310] oom_kill_process.cold+0x10/0x15 [ 1229.739801][T31310] out_of_memory+0x79a/0x1280 [ 1229.739820][T31310] ? lock_downgrade+0x880/0x880 [ 1229.782925][T31310] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1229.789192][T31310] ? oom_killer_disable+0x280/0x280 [ 1229.794523][T31310] ? find_held_lock+0x35/0x130 [ 1229.799408][T31310] mem_cgroup_out_of_memory+0x1ca/0x230 06:31:06 executing program 3: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000480)='/dev/cuse\x00', 0x2842, 0x0) io_setup(0x2, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f0000000240)={0x0, 0x4000000000000000, 0x0, 0x0, 0x0, r0, 0x0}]) [ 1229.805091][T31310] ? memcg_event_wake+0x230/0x230 [ 1229.810230][T31310] ? do_raw_spin_unlock+0x57/0x270 [ 1229.815646][T31310] ? _raw_spin_unlock+0x2d/0x50 [ 1229.820605][T31310] try_charge+0x1042/0x1410 [ 1229.825141][T31310] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1229.830704][T31310] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 1229.836262][T31310] ? find_held_lock+0x35/0x130 [ 1229.836278][T31310] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 1229.836301][T31310] __memcg_kmem_charge_memcg+0x7c/0x130 [ 1229.836316][T31310] ? memcg_kmem_put_cache+0xb0/0xb0 [ 1229.836334][T31310] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 1229.836355][T31310] __memcg_kmem_charge+0x136/0x300 [ 1229.907201][T31310] __alloc_pages_nodemask+0x4bd/0x8d0 [ 1229.912617][T31310] ? find_held_lock+0x35/0x130 [ 1229.917574][T31310] ? __alloc_pages_slowpath+0x28f0/0x28f0 [ 1229.923858][T31310] ? kasan_check_write+0x14/0x20 [ 1229.929108][T31310] ? lock_downgrade+0x880/0x880 [ 1229.934158][T31310] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1229.940426][T31310] alloc_pages_current+0x107/0x210 [ 1229.945558][T31310] pte_alloc_one+0x1b/0x1a0 [ 1229.950250][T31310] __pte_alloc+0x20/0x310 [ 1229.954778][T31310] copy_page_range+0x1561/0x1fc0 [ 1229.959831][T31310] ? pmd_alloc+0x180/0x180 [ 1229.964264][T31310] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 1229.970004][T31310] ? validate_mm_rb+0xa3/0xc0 06:31:06 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06020000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000005865", 0x55}], 0x1}, 0x0) 06:31:06 executing program 4: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x3, 0x40000000000010) sendmsg(r0, &(0x7f0000000100)={0x0, 0xfffffffffffffe7d, &(0x7f00000000c0)=[{&(0x7f0000000080)="240000001d0003fffd3cc0023da2830101faffffff86c41600000000b51ba3a2d188737e", 0x24}], 0x1}, 0x0) [ 1229.974708][T31310] ? __vma_link_rb+0x279/0x370 [ 1229.979655][T31310] ? kasan_check_write+0x14/0x20 [ 1229.984986][T31310] dup_mm+0x9c4/0x13b0 [ 1229.989200][T31310] ? vm_area_dup+0x170/0x170 [ 1229.993841][T31310] ? debug_mutex_init+0x2d/0x60 [ 1229.998717][T31310] copy_process.part.0+0x2d02/0x6950 [ 1230.004028][T31310] ? __cleanup_sighand+0x60/0x60 [ 1230.008991][T31310] _do_fork+0x25d/0xfe0 [ 1230.013202][T31310] ? copy_init_mm+0x20/0x20 [ 1230.017729][T31310] ? trace_hardirqs_on_thunk+0x1a/0x1c 06:31:06 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x6558000000000000}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) [ 1230.023212][T31310] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1230.028697][T31310] ? do_syscall_64+0x26/0x680 [ 1230.033416][T31310] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1230.033430][T31310] ? do_syscall_64+0x26/0x680 [ 1230.033452][T31310] __x64_sys_clone+0xbf/0x150 [ 1230.033471][T31310] do_syscall_64+0xfd/0x680 [ 1230.054007][T31310] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1230.060019][T31310] RIP: 0033:0x457aea [ 1230.064023][T31310] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 1230.064031][T31310] RSP: 002b:0000000000a6fd30 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1230.064045][T31310] RAX: ffffffffffffffda RBX: 0000000000a6fd30 RCX: 0000000000457aea [ 1230.064052][T31310] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 1230.064060][T31310] RBP: 0000000000a6fd70 R08: 0000000000000001 R09: 0000555555747940 [ 1230.064068][T31310] R10: 0000555555747c10 R11: 0000000000000246 R12: 0000000000000001 06:31:06 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06030000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0x0) [ 1230.064075][T31310] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000a6fdc0 [ 1230.115763][T31310] memory: usage 307200kB, limit 307200kB, failcnt 3697 [ 1230.169989][T31310] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1230.178310][T31310] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1230.185410][T31310] Memory cgroup stats for /syz1: cache:0KB rss:204412KB rss_huge:153600KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:204412KB inactive_file:0KB active_file:0KB unevictable:0KB 06:31:07 executing program 3: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000480)='/dev/cuse\x00', 0x2842, 0x0) io_setup(0x2, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f0000000240)={0x0, 0x8000000000000000, 0x0, 0x0, 0x0, r0, 0x0}]) [ 1230.214628][T31310] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=12508,uid=0 [ 1230.235497][T31310] Memory cgroup out of memory: Killed process 12508 (syz-executor.1) total-vm:72708kB, anon-rss:2204kB, file-rss:35788kB, shmem-rss:0kB 06:31:07 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06020000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d40000000000fe80", 0x55}], 0x1}, 0x0) [ 1230.433293][T21883] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1230.447091][T21883] CPU: 0 PID: 21883 Comm: syz-executor.1 Not tainted 5.2.0-rc6+ #62 [ 1230.455556][T21883] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1230.465826][T21883] Call Trace: [ 1230.469120][T21883] dump_stack+0x172/0x1f0 [ 1230.473576][T21883] dump_header+0x10f/0xb6c [ 1230.477977][T21883] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1230.484047][T21883] ? ___ratelimit+0x60/0x595 [ 1230.488632][T21883] ? do_raw_spin_unlock+0x57/0x270 [ 1230.493740][T21883] oom_kill_process.cold+0x10/0x15 [ 1230.498843][T21883] out_of_memory+0x79a/0x1280 [ 1230.503688][T21883] ? lock_downgrade+0x880/0x880 [ 1230.508546][T21883] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1230.514879][T21883] ? oom_killer_disable+0x280/0x280 [ 1230.520156][T21883] ? find_held_lock+0x35/0x130 [ 1230.524921][T21883] mem_cgroup_out_of_memory+0x1ca/0x230 [ 1230.530595][T21883] ? memcg_event_wake+0x230/0x230 [ 1230.535625][T21883] ? do_raw_spin_unlock+0x57/0x270 [ 1230.540915][T21883] ? _raw_spin_unlock+0x2d/0x50 [ 1230.545789][T21883] try_charge+0x1042/0x1410 [ 1230.550891][T21883] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1230.558040][T21883] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1230.564762][T21883] ? kasan_check_read+0x11/0x20 [ 1230.569649][T21883] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 1230.575614][T21883] mem_cgroup_try_charge+0x24d/0x5e0 [ 1230.580904][T21883] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 1230.586537][T21883] __handle_mm_fault+0x1e1a/0x3eb0 [ 1230.591902][T21883] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 1230.597450][T21883] ? find_held_lock+0x35/0x130 [ 1230.603419][T21883] ? handle_mm_fault+0x292/0xa90 [ 1230.608591][T21883] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1230.616946][T21883] ? kasan_check_read+0x11/0x20 [ 1230.621995][T21883] handle_mm_fault+0x3b7/0xa90 [ 1230.627019][T21883] __do_page_fault+0x5ef/0xda0 [ 1230.631876][T21883] do_page_fault+0x71/0x57d [ 1230.636483][T21883] ? page_fault+0x8/0x30 [ 1230.641012][T21883] page_fault+0x1e/0x30 [ 1230.645272][T21883] RIP: 0033:0x410e5f [ 1230.649163][T21883] Code: 0f 84 c8 02 00 00 48 83 bd 78 ff ff ff 00 0f 84 f9 04 00 00 48 8b 95 68 ff ff ff 44 89 95 38 ff ff ff 4c 8d ac 10 00 f7 ff ff <49> 89 85 90 06 00 00 49 8d 85 10 03 00 00 49 89 95 98 06 00 00 41 [ 1230.669062][T21883] RSP: 002b:0000000000a6fae0 EFLAGS: 00010206 [ 1230.675496][T21883] RAX: 00007f76cf61f000 RBX: 0000000000020000 RCX: 000000000045956a [ 1230.683969][T21883] RDX: 0000000000021000 RSI: 0000000000021000 RDI: 0000000000000000 [ 1230.691935][T21883] RBP: 0000000000a6fbc0 R08: ffffffffffffffff R09: 0000000000000000 [ 1230.699995][T21883] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000a6fcb0 [ 1230.708318][T21883] R13: 00007f76cf63f700 R14: 0000000000000001 R15: 000000000075bfd4 [ 1230.717897][T21883] memory: usage 307196kB, limit 307200kB, failcnt 3714 [ 1230.724830][T21883] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1230.732876][T21883] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1230.740529][T21883] Memory cgroup stats for /syz1: cache:0KB rss:204388KB [ 1230.740565][T21883] rss_huge:153600KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:204388KB inactive_file:0KB active_file:0KB unevictable:0KB [ 1230.764787][T21883] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=12588,uid=0 [ 1230.781792][T21883] Memory cgroup out of memory: Killed process 12588 (syz-executor.1) total-vm:72708kB, anon-rss:2204kB, file-rss:35788kB, shmem-rss:0kB [ 1230.814054][T21891] syz-executor.1 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=1000 06:31:07 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x40100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff00]}) 06:31:07 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06030000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0x0) 06:31:07 executing program 4: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x3, 0x40000000000010) sendmsg(r0, &(0x7f0000000100)={0x0, 0xfffffffffffffe7d, &(0x7f00000000c0)=[{&(0x7f0000000080)="240000001d0003fffd3cc0023da2830101faffffff86c41600000000b51ba3a2d188737e", 0x24}], 0x1}, 0x0) 06:31:07 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x8100000000000000}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 06:31:07 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06020000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000081", 0x55}], 0x1}, 0x0) 06:31:07 executing program 3: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000480)='/dev/cuse\x00', 0x2842, 0x0) io_setup(0x2, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f0000000240)={0x0, 0xffffffff00000000, 0x0, 0x0, 0x0, r0, 0x0}]) [ 1230.840040][T21891] CPU: 0 PID: 21891 Comm: syz-executor.1 Not tainted 5.2.0-rc6+ #62 [ 1230.848930][T21891] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1230.860553][T21891] Call Trace: [ 1230.864049][T21891] dump_stack+0x172/0x1f0 [ 1230.868481][T21891] dump_header+0x10f/0xb6c [ 1230.872919][T21891] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1230.872934][T21891] ? ___ratelimit+0x60/0x595 [ 1230.872947][T21891] ? do_raw_spin_unlock+0x57/0x270 [ 1230.872964][T21891] oom_kill_process.cold+0x10/0x15 [ 1230.872979][T21891] out_of_memory+0x79a/0x1280 [ 1230.873000][T21891] ? oom_killer_disable+0x280/0x280 [ 1230.910743][T21891] ? find_held_lock+0x35/0x130 [ 1230.915528][T21891] mem_cgroup_out_of_memory+0x1ca/0x230 [ 1230.921100][T21891] ? memcg_event_wake+0x230/0x230 [ 1230.926236][T21891] ? do_raw_spin_unlock+0x57/0x270 [ 1230.931453][T21891] ? _raw_spin_unlock+0x2d/0x50 [ 1230.936446][T21891] try_charge+0xd45/0x1410 06:31:07 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x88a8ffff00000000}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) [ 1230.940891][T21891] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1230.946450][T21891] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 1230.952002][T21891] ? find_held_lock+0x35/0x130 [ 1230.956806][T21891] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 1230.962371][T21891] __memcg_kmem_charge_memcg+0x7c/0x130 [ 1230.968023][T21891] ? memcg_kmem_put_cache+0xb0/0xb0 [ 1230.973328][T21891] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 1230.979190][T21891] __memcg_kmem_charge+0x136/0x300 [ 1230.984360][T21891] __alloc_pages_nodemask+0x4bd/0x8d0 [ 1230.989743][T21891] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1230.996097][T21891] ? __alloc_pages_slowpath+0x28f0/0x28f0 [ 1231.001841][T21891] ? copy_process.part.0+0x1eea/0x6950 [ 1231.007374][T21891] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1231.012983][T21891] ? trace_hardirqs_on+0x67/0x220 [ 1231.018022][T21891] ? kasan_check_read+0x11/0x20 [ 1231.022900][T21891] copy_process.part.0+0x44e/0x6950 [ 1231.028122][T21891] ? __might_fault+0x12b/0x1e0 [ 1231.032996][T21891] ? __cleanup_sighand+0x60/0x60 06:31:07 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x9effffff00000000}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) [ 1231.037950][T21891] ? lock_downgrade+0x880/0x880 [ 1231.042871][T21891] _do_fork+0x25d/0xfe0 [ 1231.047484][T21891] ? copy_init_mm+0x20/0x20 [ 1231.052006][T21891] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1231.057652][T21891] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1231.063305][T21891] ? do_syscall_64+0x26/0x680 [ 1231.068000][T21891] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1231.074079][T21891] ? do_syscall_64+0x26/0x680 [ 1231.078864][T21891] __x64_sys_clone+0xbf/0x150 [ 1231.083562][T21891] do_syscall_64+0xfd/0x680 06:31:07 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0xc3ffffff00000000}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) [ 1231.088082][T21891] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1231.094069][T21891] RIP: 0033:0x459519 [ 1231.097972][T21891] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1231.118219][T21891] RSP: 002b:00007f76cf65fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1231.127264][T21891] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000459519 [ 1231.135418][T21891] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000000040100 [ 1231.143494][T21891] RBP: 000000000075bf20 R08: ffffffffffffffff R09: 0000000000000000 [ 1231.151608][T21891] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f76cf6606d4 [ 1231.159590][T21891] R13: 00000000004bf97d R14: 00000000004d1358 R15: 00000000ffffffff [ 1231.171644][T21891] memory: usage 307092kB, limit 307200kB, failcnt 3727 06:31:07 executing program 4: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x3, 0x40000000000010) sendmsg(r0, &(0x7f0000000100)={0x0, 0xfffffffffffffe7d, &(0x7f00000000c0)=[{&(0x7f0000000080)="240000001d0003fffd3cc0023da2830101faffffff86c41600000000b51ba3a2d188737e", 0x24}], 0x1}, 0x0) 06:31:07 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06030000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0x0) 06:31:07 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0xf0ffffff00000000}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) [ 1231.428791][T21891] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1231.443275][T21891] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1231.454845][T21891] Memory cgroup stats for /syz1: cache:0KB rss:204344KB rss_huge:153600KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:204344KB inactive_file:0KB active_file:0KB unevictable:0KB [ 1231.496637][T21891] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=12870,uid=0 [ 1231.513706][T21891] Memory cgroup out of memory: Killed process 12870 (syz-executor.1) total-vm:72708kB, anon-rss:2204kB, file-rss:35788kB, shmem-rss:0kB [ 1231.530001][ T1044] oom_reaper: reaped process 12870 (syz-executor.1), now anon-rss:0kB, file-rss:34828kB, shmem-rss:0kB [ 1231.546355][T21904] syz-executor.1 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=1000 [ 1231.564307][T21904] CPU: 1 PID: 21904 Comm: syz-executor.1 Not tainted 5.2.0-rc6+ #62 [ 1231.572493][T21904] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1231.582641][T21904] Call Trace: [ 1231.585952][T21904] dump_stack+0x172/0x1f0 [ 1231.590536][T21904] dump_header+0x10f/0xb6c [ 1231.595188][T21904] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1231.601944][T21904] ? ___ratelimit+0x60/0x595 [ 1231.607842][T21904] ? do_raw_spin_unlock+0x57/0x270 [ 1231.613144][T21904] oom_kill_process.cold+0x10/0x15 [ 1231.618290][T21904] out_of_memory+0x79a/0x1280 [ 1231.623285][T21904] ? oom_killer_disable+0x280/0x280 [ 1231.628520][T21904] ? find_held_lock+0x35/0x130 [ 1231.633394][T21904] mem_cgroup_out_of_memory+0x1ca/0x230 [ 1231.639227][T21904] ? memcg_event_wake+0x230/0x230 [ 1231.644665][T21904] ? do_raw_spin_unlock+0x57/0x270 [ 1231.649801][T21904] ? _raw_spin_unlock+0x2d/0x50 [ 1231.654655][T21904] try_charge+0x1042/0x1410 [ 1231.659286][T21904] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1231.664967][T21904] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 1231.670570][T21904] ? find_held_lock+0x35/0x130 [ 1231.675346][T21904] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 1231.680891][T21904] __memcg_kmem_charge_memcg+0x7c/0x130 [ 1231.686477][T21904] ? memcg_kmem_put_cache+0xb0/0xb0 [ 1231.691777][T21904] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 1231.697361][T21904] __memcg_kmem_charge+0x136/0x300 [ 1231.702564][T21904] __alloc_pages_nodemask+0x4bd/0x8d0 [ 1231.708322][T21904] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1231.714853][T21904] ? __alloc_pages_slowpath+0x28f0/0x28f0 [ 1231.720669][T21904] ? copy_process.part.0+0x1eea/0x6950 [ 1231.726219][T21904] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1231.731506][T21904] ? trace_hardirqs_on+0x67/0x220 [ 1231.736589][T21904] ? kasan_check_read+0x11/0x20 [ 1231.741572][T21904] copy_process.part.0+0x44e/0x6950 [ 1231.746770][T21904] ? __lock_acquire+0x54f/0x5490 [ 1231.751989][T21904] ? __cleanup_sighand+0x60/0x60 [ 1231.757710][T21904] ? rcu_read_lock_sched_held+0x110/0x130 [ 1231.763628][T21904] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1231.769877][T21904] ? try_to_free_mem_cgroup_pages+0x3b6/0x9f0 [ 1231.775944][T21904] _do_fork+0x25d/0xfe0 [ 1231.780124][T21904] ? copy_init_mm+0x20/0x20 [ 1231.784627][T21904] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1231.790108][T21904] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1231.795833][T21904] ? do_syscall_64+0x26/0x680 [ 1231.800673][T21904] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1231.806797][T21904] ? do_syscall_64+0x26/0x680 [ 1231.811751][T21904] __x64_sys_clone+0xbf/0x150 [ 1231.816428][T21904] do_syscall_64+0xfd/0x680 [ 1231.820938][T21904] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1231.826833][T21904] RIP: 0033:0x45bee9 [ 1231.830760][T21904] Code: ff 48 85 f6 0f 84 27 8e fb ff 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 0f 8c fe 8d fb ff 74 01 c3 31 ed 48 f7 c7 00 00 01 00 75 [ 1231.850844][T21904] RSP: 002b:0000000000a6fa98 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 [ 1231.871089][T21904] RAX: ffffffffffffffda RBX: 00007f76cf660700 RCX: 000000000045bee9 [ 1231.879098][T21904] RDX: 00007f76cf6609d0 RSI: 00007f76cf65fdb0 RDI: 00000000003d0f00 [ 1231.887084][T21904] RBP: 0000000000a6fcb0 R08: 00007f76cf660700 R09: 00007f76cf660700 [ 1231.895166][T21904] R10: 00007f76cf6609d0 R11: 0000000000000202 R12: 0000000000000000 [ 1231.903284][T21904] R13: 0000000000a6fb4f R14: 00007f76cf6609c0 R15: 000000000075bf2c [ 1231.913400][T21904] memory: usage 302548kB, limit 307200kB, failcnt 3734 [ 1231.920561][T21904] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1231.928934][T21904] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1231.935977][T21904] Memory cgroup stats for /syz1: cache:0KB rss:200024KB rss_huge:149504KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:200024KB inactive_file:0KB active_file:0KB unevictable:0KB [ 1231.958672][T21904] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=13094,uid=0 [ 1231.974337][T21904] Memory cgroup out of memory: Killed process 13094 (syz-executor.1) total-vm:72708kB, anon-rss:2204kB, file-rss:35788kB, shmem-rss:0kB 06:31:08 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x40100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000]}) 06:31:08 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06020000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d40000000000fec0", 0x55}], 0x1}, 0x0) 06:31:08 executing program 3: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000480)='/dev/cuse\x00', 0x2842, 0x0) io_setup(0x2, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f0000000240)={0x0, 0x0, 0x2, 0x0, 0x0, r0, 0x0}]) 06:31:08 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06030000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0x0) 06:31:08 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x3, 0x40000000000010) sendmsg(r0, &(0x7f0000000100)={0x0, 0xfffffffffffffe7d, &(0x7f00000000c0)=[{&(0x7f0000000080)="240000001d0003fffd3cc0023da2830101faffffff86c41600000000b51ba3a2d188737e", 0x24}], 0x1}, 0x0) 06:31:08 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0xfeffffff00000000}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) [ 1231.990435][ T1044] oom_reaper: reaped process 13094 (syz-executor.1), now anon-rss:0kB, file-rss:34828kB, shmem-rss:0kB 06:31:08 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06030000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0x0) 06:31:08 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x3, 0x40000000000010) sendmsg(r0, &(0x7f0000000100)={0x0, 0xfffffffffffffe7d, &(0x7f00000000c0)=[{&(0x7f0000000080)="240000001d0003fffd3cc0023da2830101faffffff86c41600000000b51ba3a2d188737e", 0x24}], 0x1}, 0x0) 06:31:08 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06020000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d4000000000014c5", 0x55}], 0x1}, 0x0) 06:31:08 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0xffffff7f00000000}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 06:31:08 executing program 3: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000480)='/dev/cuse\x00', 0x2842, 0x0) io_setup(0x2, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f0000000240)={0x0, 0x0, 0x3, 0x0, 0x0, r0, 0x0}]) 06:31:09 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06030000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0x0) 06:31:09 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x40100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]}) 06:31:09 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06020000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d4000000000000f0", 0x55}], 0x1}, 0x0) 06:31:09 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x3, 0x40000000000010) sendmsg(r0, &(0x7f0000000100)={0x0, 0xfffffffffffffe7d, &(0x7f00000000c0)=[{&(0x7f0000000080)="240000001d0003fffd3cc0023da2830101faffffff86c41600000000b51ba3a2d188737e", 0x24}], 0x1}, 0x0) 06:31:09 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x40100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}) 06:31:09 executing program 3: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000480)='/dev/cuse\x00', 0x2842, 0x0) io_setup(0x2, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f0000000240)={0x0, 0x0, 0x4, 0x0, 0x0, r0, 0x0}]) 06:31:09 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06030000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0x0) 06:31:09 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06020000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d4000000000000fc", 0x55}], 0x1}, 0x0) 06:31:09 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0xffffffff00000000}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 06:31:09 executing program 3: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000480)='/dev/cuse\x00', 0x2842, 0x0) io_setup(0x2, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f0000000240)={0x0, 0x0, 0x5, 0x0, 0x0, r0, 0x0}]) 06:31:09 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x3, 0x40000000000010) sendmsg(r0, &(0x7f0000000100)={0x0, 0xfffffffffffffe7d, &(0x7f00000000c0)=[{&(0x7f0000000080)="240000001d0003fffd3cc0023da2830101faffffff86c41600000000b51ba3a2d188737e", 0x24}], 0x1}, 0x0) 06:31:09 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x40100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000]}) 06:31:09 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06030000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0x0) 06:31:09 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06020000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d4000000000080fe", 0x55}], 0x1}, 0x0) 06:31:09 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x3, 0x40000000000010) sendmsg(r0, &(0x7f0000000100)={0x0, 0xfffffffffffffe7d, &(0x7f00000000c0)=[{&(0x7f0000000080)="240000001d0003fffd3cc0023da2830101faffffff86c41600000000b51ba3a2d188737e", 0x24}], 0x1}, 0x0) 06:31:09 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x40100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000]}) 06:31:09 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0xfffffffffffff000}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 06:31:09 executing program 3: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000480)='/dev/cuse\x00', 0x2842, 0x0) io_setup(0x2, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f0000000240)={0x0, 0x0, 0x7, 0x0, 0x0, r0, 0x0}]) 06:31:09 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06020000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d40000000000c0fe", 0x55}], 0x1}, 0x0) 06:31:09 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06030000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d40000000000f0ff", 0x55}], 0x1}, 0x0) 06:31:09 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x40100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000]}) 06:31:09 executing program 3: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000480)='/dev/cuse\x00', 0x2842, 0x0) io_setup(0x2, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f0000000240)={0x0, 0x0, 0x8, 0x0, 0x0, r0, 0x0}]) 06:31:09 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06020000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d4000000000000ff", 0x55}], 0x1}, 0x0) 06:31:09 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 06:31:09 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x3, 0x40000000000010) sendmsg(r0, &(0x7f0000000100)={0x0, 0xfffffffffffffe7d, &(0x7f00000000c0)=[{&(0x7f0000000080)="240000001d0003fffd3cc0023da2830101faffffff86c41600000000b51ba3a2d188737e", 0x24}], 0x1}, 0x0) 06:31:10 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06030000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000200", 0x55}], 0x1}, 0x0) 06:31:10 executing program 3: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000480)='/dev/cuse\x00', 0x2842, 0x0) io_setup(0x2, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f0000000240)={0x0, 0x0, 0xc, 0x0, 0x0, r0, 0x0}]) 06:31:10 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x0, 0x40000000000010) sendmsg(r0, &(0x7f0000000100)={0x0, 0xfffffffffffffe7d, &(0x7f00000000c0)=[{&(0x7f0000000080)="240000001d0003fffd3cc0023da2830101faffffff86c41600000000b51ba3a2d188737e", 0x24}], 0x1}, 0x0) 06:31:10 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x40100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000]}) 06:31:10 executing program 3: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000480)='/dev/cuse\x00', 0x2842, 0x0) io_setup(0x2, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f0000000240)={0x0, 0x0, 0x38, 0x0, 0x0, r0, 0x0}]) 06:31:10 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x0, 0x40000000000010) sendmsg(r0, &(0x7f0000000100)={0x0, 0xfffffffffffffe7d, &(0x7f00000000c0)=[{&(0x7f0000000080)="240000001d0003fffd3cc0023da2830101faffffff86c41600000000b51ba3a2d188737e", 0x24}], 0x1}, 0x0) 06:31:10 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x0, 0x40000000000010) sendmsg(r0, &(0x7f0000000100)={0x0, 0xfffffffffffffe7d, &(0x7f00000000c0)=[{&(0x7f0000000080)="240000001d0003fffd3cc0023da2830101faffffff86c41600000000b51ba3a2d188737e", 0x24}], 0x1}, 0x0) 06:31:10 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x40100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000]}) 06:31:10 executing program 3: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000480)='/dev/cuse\x00', 0x2842, 0x0) io_setup(0x2, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f0000000240)={0x0, 0x0, 0x300, 0x0, 0x0, r0, 0x0}]) 06:31:15 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06020000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000040", 0x55}], 0x1}, 0x0) 06:31:15 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000100)={0x0, 0xfffffffffffffe7d, &(0x7f00000000c0)=[{&(0x7f0000000080)="240000001d0003fffd3cc0023da2830101faffffff86c41600000000b51ba3a2d188737e", 0x24}], 0x1}, 0x0) 06:31:15 executing program 3: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000480)='/dev/cuse\x00', 0x2842, 0x0) io_setup(0x2, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f0000000240)={0x0, 0x0, 0x500, 0x0, 0x0, r0, 0x0}]) 06:31:15 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x40100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000]}) 06:31:15 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 06:31:15 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06030000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000300", 0x55}], 0x1}, 0x0) 06:31:15 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x40100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000]}) 06:31:15 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000100)={0x0, 0xfffffffffffffe7d, &(0x7f00000000c0)=[{&(0x7f0000000080)="240000001d0003fffd3cc0023da2830101faffffff86c41600000000b51ba3a2d188737e", 0x24}], 0x1}, 0x0) 06:31:15 executing program 3: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000480)='/dev/cuse\x00', 0x2842, 0x0) io_setup(0x2, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f0000000240)={0x0, 0x0, 0x700, 0x0, 0x0, r0, 0x0}]) [ 1239.029414][T22133] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1239.040366][T22133] 8021q: adding VLAN 0 to HW filter on device team0 [ 1239.058058][T22133] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. 06:31:15 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06030000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000400", 0x55}], 0x1}, 0x0) 06:31:15 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06020000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000003", 0x55}], 0x1}, 0x0) 06:31:15 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 06:31:15 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000100)={0x0, 0xfffffffffffffe7d, &(0x7f00000000c0)=[{&(0x7f0000000080)="240000001d0003fffd3cc0023da2830101faffffff86c41600000000b51ba3a2d188737e", 0x24}], 0x1}, 0x0) 06:31:16 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x40100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f000000]}) 06:31:16 executing program 3: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000480)='/dev/cuse\x00', 0x2842, 0x0) io_setup(0x2, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f0000000240)={0x0, 0x0, 0xc00, 0x0, 0x0, r0, 0x0}]) 06:31:16 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06030000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000600", 0x55}], 0x1}, 0x0) 06:31:16 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x40100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000]}) 06:31:16 executing program 3: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000480)='/dev/cuse\x00', 0x2842, 0x0) io_setup(0x2, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f0000000240)={0x0, 0x0, 0x3800, 0x0, 0x0, r0, 0x0}]) 06:31:16 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x40100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48000000]}) 06:31:16 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x40100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c000000]}) 06:31:16 executing program 3: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000480)='/dev/cuse\x00', 0x2842, 0x0) io_setup(0x2, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f0000000240)={0x0, 0x0, 0x4000, 0x0, 0x0, r0, 0x0}]) 06:31:16 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x40100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68000000]}) [ 1239.863964][T22215] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1239.887957][T22215] CPU: 0 PID: 22215 Comm: syz-executor.1 Not tainted 5.2.0-rc6+ #62 [ 1239.896491][T22215] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1239.907167][T22215] Call Trace: [ 1239.910938][T22215] dump_stack+0x172/0x1f0 [ 1239.915288][T22215] dump_header+0x10f/0xb6c [ 1239.919712][T22215] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1239.925552][T22215] ? ___ratelimit+0x60/0x595 [ 1239.930148][T22215] ? do_raw_spin_unlock+0x57/0x270 [ 1239.935524][T22215] oom_kill_process.cold+0x10/0x15 [ 1239.940731][T22215] out_of_memory+0x79a/0x1280 [ 1239.945510][T22215] ? lock_downgrade+0x880/0x880 [ 1239.950490][T22215] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1239.956749][T22215] ? oom_killer_disable+0x280/0x280 [ 1239.961959][T22215] ? find_held_lock+0x35/0x130 [ 1239.966778][T22215] mem_cgroup_out_of_memory+0x1ca/0x230 [ 1239.972380][T22215] ? memcg_event_wake+0x230/0x230 [ 1239.977425][T22215] ? do_raw_spin_unlock+0x57/0x270 [ 1239.982544][T22215] ? _raw_spin_unlock+0x2d/0x50 [ 1239.982562][T22215] try_charge+0x1042/0x1410 [ 1239.982582][T22215] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1239.982599][T22215] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1239.982616][T22215] ? kasan_check_read+0x11/0x20 [ 1239.982636][T22215] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 1240.014389][T22215] mem_cgroup_try_charge+0x24d/0x5e0 [ 1240.019687][T22215] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 1240.025522][T22215] wp_page_copy+0x416/0x1770 [ 1240.030369][T22215] ? do_wp_page+0x486/0x1500 [ 1240.035051][T22215] ? pmd_pfn+0x1d0/0x1d0 [ 1240.039373][T22215] ? lock_downgrade+0x880/0x880 [ 1240.044359][T22215] ? __pte_alloc_kernel+0x220/0x220 [ 1240.049561][T22215] ? kasan_check_read+0x11/0x20 [ 1240.054579][T22215] ? do_raw_spin_unlock+0x57/0x270 [ 1240.059707][T22215] do_wp_page+0x48e/0x1500 [ 1240.064140][T22215] ? do_raw_spin_lock+0x12a/0x2e0 [ 1240.069156][T22215] ? rwlock_bug.part.0+0x90/0x90 [ 1240.074097][T22215] ? finish_mkwrite_fault+0x540/0x540 [ 1240.079463][T22215] ? add_mm_counter_fast.part.0+0x40/0x40 [ 1240.085182][T22215] __handle_mm_fault+0x22e3/0x3eb0 [ 1240.090398][T22215] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 1240.095930][T22215] ? find_held_lock+0x35/0x130 [ 1240.100684][T22215] ? handle_mm_fault+0x292/0xa90 [ 1240.105716][T22215] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1240.112212][T22215] ? kasan_check_read+0x11/0x20 [ 1240.117054][T22215] handle_mm_fault+0x3b7/0xa90 [ 1240.121811][T22215] __do_page_fault+0x5ef/0xda0 [ 1240.126664][T22215] do_page_fault+0x71/0x57d [ 1240.131170][T22215] ? page_fault+0x8/0x30 [ 1240.135514][T22215] page_fault+0x1e/0x30 [ 1240.139663][T22215] RIP: 0033:0x40e6b8 [ 1240.143548][T22215] Code: 8b 34 c6 4a 8d 04 2e 48 3d ff ff ff 7e 0f 86 77 ff ff ff bf d1 ea 4b 00 31 c0 e8 c3 35 ff ff 31 ff e8 0c 32 ff ff 0f 1f 40 00 <89> 3c b5 00 00 73 00 eb b6 31 ed 0f 1f 44 00 00 80 3d ae 1d 66 00 [ 1240.163246][T22215] RSP: 002b:0000000000a6fb00 EFLAGS: 00010246 [ 1240.169642][T22215] RAX: 00000000f702be70 RBX: 0000000023d195bc RCX: 0000001b31920000 [ 1240.179171][T22215] RDX: 0000000000000000 RSI: 0000000000001e70 RDI: fffffffff702be70 [ 1240.187265][T22215] RBP: 0000000000000003 R08: 00000000f702be70 R09: 00000000f702be74 [ 1240.195518][T22215] R10: 0000000000a6fca0 R11: 0000000000000246 R12: 000000000075bfa8 [ 1240.203480][T22215] R13: 0000000080000000 R14: 00007f76d1661008 R15: 0000000000000003 [ 1240.214840][T22215] memory: usage 307200kB, limit 307200kB, failcnt 3777 [ 1240.222365][T22215] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1240.230247][T22215] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1240.237980][T22215] Memory cgroup stats for /syz1: cache:0KB rss:203012KB rss_huge:151552KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:202992KB inactive_file:0KB active_file:0KB unevictable:0KB [ 1240.260143][T22215] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=13118,uid=0 [ 1240.276245][T22215] Memory cgroup out of memory: Killed process 13118 (syz-executor.1) total-vm:72708kB, anon-rss:2204kB, file-rss:35788kB, shmem-rss:0kB [ 1240.295136][ T1044] oom_reaper: reaped process 13118 (syz-executor.1), now anon-rss:0kB, file-rss:34828kB, shmem-rss:0kB 06:31:17 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06020000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d40000000000ffff", 0x55}], 0x1}, 0x0) 06:31:17 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 06:31:17 executing program 3: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000480)='/dev/cuse\x00', 0x2842, 0x0) io_setup(0x2, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f0000000240)={0x0, 0x0, 0x1000000, 0x0, 0x0, r0, 0x0}]) 06:31:17 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x40100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c000000]}) 06:31:17 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet(0x10, 0x3, 0x40000000000010) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xfffffffffffffe7d, &(0x7f00000000c0)=[{&(0x7f0000000080)="240000001d0003fffd3cc0023da2830101faffffff86c41600000000b51ba3a2d188737e", 0x24}], 0x1}, 0x0) 06:31:17 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06030000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000a00", 0x55}], 0x1}, 0x0) 06:31:17 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x40100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x74000000]}) 06:31:18 executing program 3: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000480)='/dev/cuse\x00', 0x2842, 0x0) io_setup(0x2, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f0000000240)={0x0, 0x0, 0x2000000, 0x0, 0x0, r0, 0x0}]) 06:31:18 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet(0x10, 0x3, 0x40000000000010) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xfffffffffffffe7d, &(0x7f00000000c0)=[{&(0x7f0000000080)="240000001d0003fffd3cc0023da2830101faffffff86c41600000000b51ba3a2d188737e", 0x24}], 0x1}, 0x0) 06:31:18 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x40100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a000000]}) [ 1241.290398][T22245] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1241.314260][T22245] 8021q: adding VLAN 0 to HW filter on device team0 [ 1241.364850][T22245] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. 06:31:18 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x40100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff000000]}) 06:31:18 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet(0x10, 0x3, 0x40000000000010) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xfffffffffffffe7d, &(0x7f00000000c0)=[{&(0x7f0000000080)="240000001d0003fffd3cc0023da2830101faffffff86c41600000000b51ba3a2d188737e", 0x24}], 0x1}, 0x0) 06:31:18 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06020000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0x0) 06:31:18 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x6}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 06:31:18 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06030000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000c00", 0x55}], 0x1}, 0x0) 06:31:18 executing program 3: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000480)='/dev/cuse\x00', 0x2842, 0x0) io_setup(0x2, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f0000000240)={0x0, 0x0, 0x3000000, 0x0, 0x0, r0, 0x0}]) 06:31:18 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x40100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000]}) 06:31:18 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06030000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000e00", 0x55}], 0x1}, 0x0) 06:31:18 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06020000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0x0) 06:31:18 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x3, 0x40000000000010) sendmsg(r0, 0x0, 0x0) 06:31:18 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x40100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000]}) 06:31:18 executing program 3: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000480)='/dev/cuse\x00', 0x2842, 0x0) io_setup(0x2, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f0000000240)={0x0, 0x0, 0x4000000, 0x0, 0x0, r0, 0x0}]) 06:31:18 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x3, 0x40000000000010) sendmsg(r0, 0x0, 0x0) 06:31:18 executing program 3: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000480)='/dev/cuse\x00', 0x2842, 0x0) io_setup(0x2, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f0000000240)={0x0, 0x0, 0x5000000, 0x0, 0x0, r0, 0x0}]) 06:31:18 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x40100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000]}) 06:31:19 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x7}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 06:31:19 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x3, 0x40000000000010) sendmsg(r0, 0x0, 0x0) 06:31:19 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x40100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300000000000000]}) 06:31:19 executing program 3: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000480)='/dev/cuse\x00', 0x2842, 0x0) io_setup(0x2, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f0000000240)={0x0, 0x0, 0x7000000, 0x0, 0x0, r0, 0x0}]) [ 1243.135158][T31310] syz-executor.1 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=0 [ 1243.166741][T31310] CPU: 1 PID: 31310 Comm: syz-executor.1 Not tainted 5.2.0-rc6+ #62 [ 1243.174778][T31310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1243.185192][T31310] Call Trace: [ 1243.185220][T31310] dump_stack+0x172/0x1f0 [ 1243.185240][T31310] dump_header+0x10f/0xb6c [ 1243.185255][T31310] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1243.185270][T31310] ? ___ratelimit+0x60/0x595 [ 1243.185283][T31310] ? do_raw_spin_unlock+0x57/0x270 [ 1243.185298][T31310] oom_kill_process.cold+0x10/0x15 [ 1243.185322][T31310] out_of_memory+0x79a/0x1280 [ 1243.223051][T31310] ? lock_downgrade+0x880/0x880 [ 1243.223066][T31310] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1243.223085][T31310] ? oom_killer_disable+0x280/0x280 [ 1243.223096][T31310] ? find_held_lock+0x35/0x130 [ 1243.223119][T31310] mem_cgroup_out_of_memory+0x1ca/0x230 [ 1243.223133][T31310] ? memcg_event_wake+0x230/0x230 [ 1243.223169][T31310] ? do_raw_spin_unlock+0x57/0x270 [ 1243.260034][T31310] ? _raw_spin_unlock+0x2d/0x50 [ 1243.264900][T31310] try_charge+0x1042/0x1410 [ 1243.269418][T31310] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1243.275066][T31310] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 1243.280624][T31310] ? find_held_lock+0x35/0x130 06:31:19 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06030000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000f00", 0x55}], 0x1}, 0x0) [ 1243.282665][T22354] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1243.285390][T31310] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 1243.285422][T31310] __memcg_kmem_charge_memcg+0x7c/0x130 [ 1243.293641][T22354] 8021q: adding VLAN 0 to HW filter on device team0 [ 1243.297543][T31310] ? memcg_kmem_put_cache+0xb0/0xb0 [ 1243.297564][T31310] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 1243.297586][T31310] __memcg_kmem_charge+0x136/0x300 [ 1243.309988][T31310] __alloc_pages_nodemask+0x4bd/0x8d0 [ 1243.310005][T31310] ? mark_held_locks+0xf0/0xf0 06:31:20 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06020000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0x0) 06:31:20 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x3, 0x40000000000010) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 06:31:20 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06030000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000001000", 0x55}], 0x1}, 0x0) [ 1243.310029][T31310] ? __alloc_pages_slowpath+0x28f0/0x28f0 [ 1243.341949][T31310] ? copy_page_range+0x128a/0x1fc0 [ 1243.341968][T31310] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1243.341988][T31310] alloc_pages_current+0x107/0x210 [ 1243.342007][T31310] pte_alloc_one+0x1b/0x1a0 [ 1243.342022][T31310] __pte_alloc+0x20/0x310 [ 1243.342041][T31310] copy_page_range+0x1561/0x1fc0 [ 1243.353618][T31310] ? pmd_alloc+0x180/0x180 [ 1243.363191][T31310] ? vma_gap_callbacks_rotate+0x62/0x80 [ 1243.363211][T31310] ? __rb_insert_augmented+0x22f/0xdf0 [ 1243.363223][T31310] ? validate_mm_rb+0xa3/0xc0 [ 1243.363237][T31310] ? __vma_link_rb+0x279/0x370 [ 1243.363250][T31310] ? kasan_check_write+0x14/0x20 [ 1243.363270][T31310] dup_mm+0x9c4/0x13b0 [ 1243.363296][T31310] ? vm_area_dup+0x170/0x170 [ 1243.411468][T31310] ? debug_mutex_init+0x2d/0x60 [ 1243.417825][T31310] copy_process.part.0+0x2d02/0x6950 [ 1243.423151][T31310] ? __cleanup_sighand+0x60/0x60 [ 1243.428206][T31310] _do_fork+0x25d/0xfe0 [ 1243.432382][T31310] ? copy_init_mm+0x20/0x20 [ 1243.436912][T31310] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1243.442471][T31310] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1243.448295][T31310] ? do_syscall_64+0x26/0x680 [ 1243.452996][T31310] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1243.459079][T31310] ? do_syscall_64+0x26/0x680 [ 1243.464036][T31310] __x64_sys_clone+0xbf/0x150 [ 1243.468831][T31310] do_syscall_64+0xfd/0x680 [ 1243.473612][T31310] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1243.479607][T31310] RIP: 0033:0x457aea 06:31:20 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x3, 0x40000000000010) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) [ 1243.483508][T31310] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 1243.503233][T31310] RSP: 002b:0000000000a6fd30 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1243.511913][T31310] RAX: ffffffffffffffda RBX: 0000000000a6fd30 RCX: 0000000000457aea [ 1243.511922][T31310] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 1243.511930][T31310] RBP: 0000000000a6fd70 R08: 0000000000000001 R09: 0000555555747940 [ 1243.511937][T31310] R10: 0000555555747c10 R11: 0000000000000246 R12: 0000000000000001 [ 1243.511944][T31310] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000a6fdc0 [ 1243.520146][T31310] memory: usage 307200kB, limit 307200kB, failcnt 3811 [ 1243.538229][T31310] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1243.568216][T31310] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 06:31:20 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x3, 0x40000000000010) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) [ 1243.575456][T31310] Memory cgroup stats for /syz1: cache:0KB rss:201600KB rss_huge:149504KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:201600KB inactive_file:0KB active_file:0KB unevictable:0KB [ 1243.598401][T22354] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1243.604262][T31310] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=13163,uid=0 06:31:20 executing program 3: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000480)='/dev/cuse\x00', 0x2842, 0x0) io_setup(0x2, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f0000000240)={0x0, 0x0, 0x8000000, 0x0, 0x0, r0, 0x0}]) [ 1243.659096][T31310] Memory cgroup out of memory: Killed process 13163 (syz-executor.1) total-vm:72708kB, anon-rss:2204kB, file-rss:35788kB, shmem-rss:0kB 06:31:20 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06020000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0x0) 06:31:20 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xa}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 06:31:20 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06030000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000006000", 0x55}], 0x1}, 0x0) 06:31:20 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x40100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000]}) 06:31:20 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x3, 0x40000000000010) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)}, 0x0) 06:31:20 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06020000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0x0) 06:31:20 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06030000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d40000000000f000", 0x55}], 0x1}, 0x0) 06:31:20 executing program 3: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000480)='/dev/cuse\x00', 0x2842, 0x0) io_setup(0x2, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f0000000240)={0x0, 0x0, 0xc000000, 0x0, 0x0, r0, 0x0}]) 06:31:20 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x3, 0x40000000000010) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)}, 0x0) [ 1244.052455][T31310] syz-executor.1 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=0 [ 1244.071722][T31310] CPU: 0 PID: 31310 Comm: syz-executor.1 Not tainted 5.2.0-rc6+ #62 [ 1244.080160][T31310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1244.090663][T31310] Call Trace: [ 1244.094055][T31310] dump_stack+0x172/0x1f0 [ 1244.098493][T31310] dump_header+0x10f/0xb6c [ 1244.102922][T31310] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1244.108765][T31310] ? ___ratelimit+0x60/0x595 [ 1244.113378][T31310] ? do_raw_spin_unlock+0x57/0x270 [ 1244.118605][T31310] oom_kill_process.cold+0x10/0x15 [ 1244.123824][T31310] out_of_memory+0x79a/0x1280 [ 1244.128718][T31310] ? lock_downgrade+0x880/0x880 [ 1244.133583][T31310] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1244.140127][T31310] ? oom_killer_disable+0x280/0x280 [ 1244.145366][T31310] ? find_held_lock+0x35/0x130 [ 1244.150335][T31310] mem_cgroup_out_of_memory+0x1ca/0x230 [ 1244.156016][T31310] ? memcg_event_wake+0x230/0x230 [ 1244.161059][T31310] ? do_raw_spin_unlock+0x57/0x270 [ 1244.166192][T31310] ? _raw_spin_unlock+0x2d/0x50 [ 1244.171157][T31310] try_charge+0x1042/0x1410 [ 1244.175887][T31310] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1244.181447][T31310] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 1244.187192][T31310] ? find_held_lock+0x35/0x130 [ 1244.191982][T31310] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 1244.197549][T31310] __memcg_kmem_charge_memcg+0x7c/0x130 06:31:20 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x3, 0x40000000000010) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)}, 0x0) 06:31:20 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x3, 0x40000000000010) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}], 0x1}, 0x0) [ 1244.203234][T31310] ? memcg_kmem_put_cache+0xb0/0xb0 [ 1244.208537][T31310] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 1244.214383][T31310] __memcg_kmem_charge+0x136/0x300 [ 1244.219517][T31310] __alloc_pages_nodemask+0x4bd/0x8d0 [ 1244.224939][T31310] ? mark_held_locks+0xf0/0xf0 [ 1244.229826][T31310] ? __alloc_pages_slowpath+0x28f0/0x28f0 [ 1244.235667][T31310] ? copy_page_range+0x128a/0x1fc0 [ 1244.240789][T31310] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1244.247136][T31310] alloc_pages_current+0x107/0x210 [ 1244.252266][T31310] pte_alloc_one+0x1b/0x1a0 [ 1244.252283][T31310] __pte_alloc+0x20/0x310 [ 1244.252303][T31310] copy_page_range+0x1561/0x1fc0 [ 1244.261153][T31310] ? pmd_alloc+0x180/0x180 [ 1244.261165][T31310] ? vma_gap_callbacks_rotate+0x62/0x80 [ 1244.261191][T31310] ? __rb_insert_augmented+0x22f/0xdf0 [ 1244.261205][T31310] ? validate_mm_rb+0xa3/0xc0 [ 1244.261222][T31310] ? __vma_link_rb+0x279/0x370 [ 1244.291202][T31310] ? kasan_check_write+0x14/0x20 [ 1244.296229][T31310] dup_mm+0x9c4/0x13b0 06:31:21 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x3, 0x40000000000010) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}], 0x1}, 0x0) 06:31:21 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x3, 0x40000000000010) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}], 0x1}, 0x0) [ 1244.300333][T31310] ? vm_area_dup+0x170/0x170 [ 1244.304942][T31310] ? debug_mutex_init+0x2d/0x60 [ 1244.309963][T31310] copy_process.part.0+0x2d02/0x6950 [ 1244.315284][T31310] ? __cleanup_sighand+0x60/0x60 [ 1244.320250][T31310] _do_fork+0x25d/0xfe0 [ 1244.324632][T31310] ? copy_init_mm+0x20/0x20 [ 1244.329159][T31310] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1244.334830][T31310] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1244.340311][T31310] ? do_syscall_64+0x26/0x680 [ 1244.345106][T31310] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1244.351361][T31310] ? do_syscall_64+0x26/0x680 [ 1244.356065][T31310] __x64_sys_clone+0xbf/0x150 [ 1244.360763][T31310] do_syscall_64+0xfd/0x680 [ 1244.365465][T31310] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1244.371452][T31310] RIP: 0033:0x457aea [ 1244.375361][T31310] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 1244.395149][T31310] RSP: 002b:0000000000a6fd30 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1244.403836][T31310] RAX: ffffffffffffffda RBX: 0000000000a6fd30 RCX: 0000000000457aea [ 1244.411816][T31310] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 1244.419876][T31310] RBP: 0000000000a6fd70 R08: 0000000000000001 R09: 0000555555747940 [ 1244.428063][T31310] R10: 0000555555747c10 R11: 0000000000000246 R12: 0000000000000001 [ 1244.436289][T31310] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000a6fdc0 [ 1244.452131][T31310] memory: usage 307176kB, limit 307200kB, failcnt 3850 [ 1244.459239][T31310] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1244.466978][T31310] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1244.474325][T31310] Memory cgroup stats for /syz1: cache:0KB rss:201600KB rss_huge:149504KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:201600KB inactive_file:0KB active_file:0KB unevictable:0KB [ 1244.496372][T31310] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=13398,uid=0 [ 1244.520135][T31310] Memory cgroup out of memory: Killed process 13398 (syz-executor.1) total-vm:72708kB, anon-rss:2204kB, file-rss:35788kB, shmem-rss:0kB [ 1244.544896][ T1044] oom_reaper: reaped process 13398 (syz-executor.1), now anon-rss:0kB, file-rss:34828kB, shmem-rss:0kB 06:31:22 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xc}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 06:31:22 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x3, 0x40000000000010) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)}], 0x1}, 0x0) 06:31:22 executing program 3: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000480)='/dev/cuse\x00', 0x2842, 0x0) io_setup(0x2, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f0000000240)={0x0, 0x0, 0x38000000, 0x0, 0x0, r0, 0x0}]) 06:31:22 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x40100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500000000000000]}) 06:31:22 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06020000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0x0) 06:31:22 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06030000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d40000000000fc00", 0x55}], 0x1}, 0x0) 06:31:22 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x3, 0x40000000000010) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)}], 0x1}, 0x0) 06:31:22 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x40100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600000000000000]}) 06:31:22 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x40100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700000000000000]}) 06:31:22 executing program 3: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000480)='/dev/cuse\x00', 0x2842, 0x0) io_setup(0x2, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f0000000240)={0x0, 0x0, 0x40000000, 0x0, 0x0, r0, 0x0}]) 06:31:22 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06030000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000003", 0x55}], 0x1}, 0x0) 06:31:22 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06020000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0x0) 06:31:22 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xe}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 06:31:22 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x3, 0x40000000000010) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)}], 0x1}, 0x0) 06:31:22 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06030000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000006", 0x55}], 0x1}, 0x0) 06:31:22 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06020000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0x0) 06:31:22 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 06:31:22 executing program 3: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000480)='/dev/cuse\x00', 0x2842, 0x0) io_setup(0x2, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f0000000240)={0x0, 0x0, 0x7ffffffff000, 0x0, 0x0, r0, 0x0}]) 06:31:22 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x3, 0x40000000000010) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)="240000001d0003fffd3cc0023da2830101fa", 0x12}], 0x1}, 0x0) 06:31:22 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06030000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d40000000000000a", 0x55}], 0x1}, 0x0) 06:31:22 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x40100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000000]}) 06:31:22 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06020000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0x0) 06:31:22 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x60}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 06:31:22 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x3, 0x40000000000010) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)="240000001d0003fffd3cc0023da2830101fa", 0x12}], 0x1}, 0x0) 06:31:22 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06030000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d40000000000000c", 0x55}], 0x1}, 0x0) 06:31:22 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06020000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0x0) 06:31:22 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x40100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00000000000000]}) 06:31:23 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x3, 0x40000000000010) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)="240000001d0003fffd3cc0023da2830101fa", 0x12}], 0x1}, 0x0) 06:31:23 executing program 3: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000480)='/dev/cuse\x00', 0x2842, 0x0) io_setup(0x2, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f0000000240)={0x0, 0x0, 0xf0ffffff7f0000, 0x0, 0x0, r0, 0x0}]) 06:31:23 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xf0}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 06:31:23 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06020000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0x0) 06:31:23 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06030000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d40000000000000e", 0x55}], 0x1}, 0x0) 06:31:23 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x40100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00000000000000]}) 06:31:23 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x3, 0x40000000000010) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)="240000001d0003fffd3cc0023da2830101faffffff86c416000000", 0x1b}], 0x1}, 0x0) 06:31:23 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 06:31:23 executing program 3: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000480)='/dev/cuse\x00', 0x2842, 0x0) io_setup(0x2, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f0000000240)={0x0, 0x0, 0x100000000000000, 0x0, 0x0, r0, 0x0}]) 06:31:23 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06020000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0x0) 06:31:23 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06030000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d40000000000000f", 0x55}], 0x1}, 0x0) [ 1246.657056][T22557] device lo entered promiscuous mode 06:31:23 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x40100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000]}) 06:31:23 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x3, 0x40000000000010) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)="240000001d0003fffd3cc0023da2830101faffffff86c416000000", 0x1b}], 0x1}, 0x0) [ 1246.712942][T22557] device tunl0 entered promiscuous mode [ 1246.733345][T22557] device gre0 entered promiscuous mode 06:31:23 executing program 3: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000480)='/dev/cuse\x00', 0x2842, 0x0) io_setup(0x2, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f0000000240)={0x0, 0x0, 0x200000000000000, 0x0, 0x0, r0, 0x0}]) [ 1246.759996][T22557] device gretap0 entered promiscuous mode [ 1246.809427][T22557] device erspan0 entered promiscuous mode [ 1246.837385][T22557] device ip_vti0 entered promiscuous mode 06:31:23 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x3, 0x40000000000010) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)="240000001d0003fffd3cc0023da2830101faffffff86c416000000", 0x1b}], 0x1}, 0x0) [ 1246.844993][T22575] syz-executor.1 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=1000 [ 1246.861596][T22557] device ip6_vti0 entered promiscuous mode [ 1246.872023][T22557] device sit0 entered promiscuous mode [ 1246.899641][T22557] device ip6tnl0 entered promiscuous mode [ 1246.914840][T22575] CPU: 0 PID: 22575 Comm: syz-executor.1 Not tainted 5.2.0-rc6+ #62 [ 1246.922852][T22575] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1246.933068][T22575] Call Trace: [ 1246.934747][T22557] device ip6gre0 entered promiscuous mode [ 1246.936371][T22575] dump_stack+0x172/0x1f0 [ 1246.936394][T22575] dump_header+0x10f/0xb6c [ 1246.936412][T22575] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1246.936429][T22575] ? ___ratelimit+0x60/0x595 [ 1246.936445][T22575] ? do_raw_spin_unlock+0x57/0x270 [ 1246.936465][T22575] oom_kill_process.cold+0x10/0x15 [ 1246.943254][T22557] device syz_tun entered promiscuous mode [ 1246.946619][T22575] out_of_memory+0x79a/0x1280 [ 1246.946638][T22575] ? lock_downgrade+0x880/0x880 [ 1246.946653][T22575] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1246.946671][T22575] ? oom_killer_disable+0x280/0x280 [ 1246.946683][T22575] ? find_held_lock+0x35/0x130 [ 1246.946708][T22575] mem_cgroup_out_of_memory+0x1ca/0x230 [ 1246.946728][T22575] ? memcg_event_wake+0x230/0x230 [ 1246.952395][T22557] device ip6gretap0 entered promiscuous mode [ 1246.957141][T22575] ? do_raw_spin_unlock+0x57/0x270 [ 1246.957159][T22575] ? _raw_spin_unlock+0x2d/0x50 [ 1246.957187][T22575] try_charge+0x1042/0x1410 [ 1246.957211][T22575] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1246.957225][T22575] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 1246.957245][T22575] ? find_held_lock+0x35/0x130 [ 1246.963013][T22557] device bridge0 entered promiscuous mode 06:31:23 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x3, 0x40000000000010) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)="240000001d0003fffd3cc0023da2830101faffffff86c41600000000b51ba3a2", 0x20}], 0x1}, 0x0) [ 1246.967060][T22575] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 1246.967089][T22575] __memcg_kmem_charge_memcg+0x7c/0x130 [ 1246.967106][T22575] ? memcg_kmem_put_cache+0xb0/0xb0 [ 1246.967126][T22575] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 1246.967144][T22575] __memcg_kmem_charge+0x136/0x300 [ 1246.967165][T22575] __alloc_pages_nodemask+0x4bd/0x8d0 [ 1246.973537][T22557] device vcan0 entered promiscuous mode [ 1246.978078][T22575] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1246.978100][T22575] ? __alloc_pages_slowpath+0x28f0/0x28f0 [ 1246.978118][T22575] ? copy_process.part.0+0x1eea/0x6950 [ 1246.978136][T22575] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1246.978153][T22575] ? trace_hardirqs_on+0x67/0x220 [ 1246.978166][T22575] ? kasan_check_read+0x11/0x20 [ 1246.978192][T22575] copy_process.part.0+0x44e/0x6950 [ 1246.984009][T22557] device bond0 entered promiscuous mode [ 1246.987722][T22575] ? __lock_acquire+0x54f/0x5490 [ 1246.987748][T22575] ? __cleanup_sighand+0x60/0x60 [ 1246.987773][T22575] ? rcu_read_lock_sched_held+0x110/0x130 [ 1246.987789][T22575] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1246.987806][T22575] ? try_to_free_mem_cgroup_pages+0x3b6/0x9f0 [ 1246.987825][T22575] _do_fork+0x25d/0xfe0 [ 1246.995022][T22557] device bond_slave_0 entered promiscuous mode [ 1246.999285][T22575] ? copy_init_mm+0x20/0x20 [ 1246.999312][T22575] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1246.999327][T22575] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1246.999342][T22575] ? do_syscall_64+0x26/0x680 [ 1246.999357][T22575] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1246.999379][T22575] ? do_syscall_64+0x26/0x680 [ 1247.005269][T22557] device bond_slave_1 entered promiscuous mode [ 1247.009723][T22575] __x64_sys_clone+0xbf/0x150 [ 1247.009745][T22575] do_syscall_64+0xfd/0x680 [ 1247.009765][T22575] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1247.009776][T22575] RIP: 0033:0x45bee9 [ 1247.009793][T22575] Code: ff 48 85 f6 0f 84 27 8e fb ff 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 0f 8c fe 8d fb ff 74 01 c3 31 ed 48 f7 c7 00 00 01 00 75 06:31:23 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x3, 0x40000000000010) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)="240000001d0003fffd3cc0023da2830101faffffff86c41600000000b51ba3a2", 0x20}], 0x1}, 0x0) [ 1247.009800][T22575] RSP: 002b:0000000000a6fa98 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 [ 1247.009814][T22575] RAX: ffffffffffffffda RBX: 00007f76cf660700 RCX: 000000000045bee9 [ 1247.009830][T22575] RDX: 00007f76cf6609d0 RSI: 00007f76cf65fdb0 RDI: 00000000003d0f00 [ 1247.016979][T22557] device team0 entered promiscuous mode [ 1247.020947][T22575] RBP: 0000000000a6fcb0 R08: 00007f76cf660700 R09: 00007f76cf660700 [ 1247.020957][T22575] R10: 00007f76cf6609d0 R11: 0000000000000202 R12: 0000000000000000 [ 1247.020965][T22575] R13: 0000000000a6fb4f R14: 00007f76cf6609c0 R15: 000000000075bf2c 06:31:24 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x3, 0x40000000000010) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)="240000001d0003fffd3cc0023da2830101faffffff86c41600000000b51ba3a2", 0x20}], 0x1}, 0x0) 06:31:24 executing program 3: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000480)='/dev/cuse\x00', 0x2842, 0x0) io_setup(0x2, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f0000000240)={0x0, 0x0, 0x300000000000000, 0x0, 0x0, r0, 0x0}]) [ 1247.085725][T22557] device team_slave_0 entered promiscuous mode [ 1247.109807][T22557] device team_slave_1 entered promiscuous mode [ 1247.279347][T22575] memory: usage 307184kB, limit 307200kB, failcnt 3891 [ 1247.295364][T22557] device dummy0 entered promiscuous mode [ 1247.338209][T22557] device nlmon0 entered promiscuous mode [ 1247.350845][T22557] device caif0 entered promiscuous mode [ 1247.357391][T22557] device batadv0 entered promiscuous mode [ 1247.385525][T22575] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1247.401410][T22557] device vxcan0 entered promiscuous mode [ 1247.411796][T22575] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1247.418768][T22575] Memory cgroup stats for /syz1: cache:0KB rss:200300KB rss_huge:147456KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:200300KB inactive_file:0KB active_file:0KB unevictable:0KB [ 1247.441631][T22557] device vxcan1 entered promiscuous mode [ 1247.457237][T22557] device veth0 entered promiscuous mode [ 1247.465228][T22557] device veth1 entered promiscuous mode [ 1247.471522][T22557] device veth0_to_bridge entered promiscuous mode [ 1247.478226][T22557] device veth1_to_bridge entered promiscuous mode [ 1247.487225][T22557] device veth0_to_bond entered promiscuous mode [ 1247.495362][T22575] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=13420,uid=0 [ 1247.502005][T22557] device veth1_to_bond entered promiscuous mode [ 1247.522447][T22557] device veth0_to_team entered promiscuous mode [ 1247.529012][T22557] device veth1_to_team entered promiscuous mode [ 1247.536204][T22557] device veth0_to_hsr entered promiscuous mode [ 1247.540475][T22575] Memory cgroup out of memory: Killed process 13420 (syz-executor.1) total-vm:72708kB, anon-rss:2204kB, file-rss:35788kB, shmem-rss:0kB [ 1247.543205][T22557] device veth1_to_hsr entered promiscuous mode [ 1247.564379][ T1044] oom_reaper: reaped process 13420 (syz-executor.1), now anon-rss:0kB, file-rss:34828kB, shmem-rss:0kB [ 1247.570442][T22557] device hsr0 entered promiscuous mode [ 1247.582376][T22557] device tunl0.0 entered promiscuous mode 06:31:24 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 06:31:24 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x3, 0x40000000000010) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)="240000001d0003fffd3cc0023da2830101faffffff86c41600000000b51ba3a2d188", 0x22}], 0x1}, 0x0) 06:31:24 executing program 3: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000480)='/dev/cuse\x00', 0x2842, 0x0) io_setup(0x2, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f0000000240)={0x0, 0x0, 0x400000000000000, 0x0, 0x0, r0, 0x0}]) 06:31:24 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x40100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800000000000000]}) 06:31:24 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06030000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d40000000000ba1b", 0x55}], 0x1}, 0x0) 06:31:24 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06020000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0x0) 06:31:24 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x3, 0x40000000000010) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)="240000001d0003fffd3cc0023da2830101faffffff86c41600000000b51ba3a2d188", 0x22}], 0x1}, 0x0) 06:31:24 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x40100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c00000000000000]}) 06:31:24 executing program 3: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000480)='/dev/cuse\x00', 0x2842, 0x0) io_setup(0x2, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f0000000240)={0x0, 0x0, 0x500000000000000, 0x0, 0x0, r0, 0x0}]) 06:31:24 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x600}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 06:31:24 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06020000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0x0) 06:31:24 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06030000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d40000000000003f", 0x55}], 0x1}, 0x0) 06:31:24 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x3, 0x40000000000010) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)="240000001d0003fffd3cc0023da2830101faffffff86c41600000000b51ba3a2d188", 0x22}], 0x1}, 0x0) [ 1247.975791][T22641] device lo left promiscuous mode [ 1247.982236][T22641] device tunl0 left promiscuous mode [ 1247.994698][T22641] device gre0 left promiscuous mode [ 1248.001766][T22641] device gretap0 left promiscuous mode [ 1248.007975][T22641] device erspan0 left promiscuous mode [ 1248.015275][T22641] device ip_vti0 left promiscuous mode 06:31:24 executing program 3: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000480)='/dev/cuse\x00', 0x2842, 0x0) io_setup(0x2, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f0000000240)={0x0, 0x0, 0x700000000000000, 0x0, 0x0, r0, 0x0}]) 06:31:24 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x40100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6800000000000000]}) [ 1248.037641][T22641] device ip6_vti0 left promiscuous mode [ 1248.065438][T22641] device sit0 left promiscuous mode [ 1248.084658][T22641] device ip6tnl0 left promiscuous mode 06:31:24 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x3, 0x40000000000010) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)="240000001d0003fffd3cc0023da2830101faffffff86c41600000000b51ba3a2d18873", 0x23}], 0x1}, 0x0) [ 1248.112924][T22641] device ip6gre0 left promiscuous mode [ 1248.123212][T22641] device syz_tun left promiscuous mode [ 1248.151334][T22641] device ip6gretap0 left promiscuous mode 06:31:24 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x40100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c00000000000000]}) [ 1248.182725][T22641] device bridge0 left promiscuous mode [ 1248.216089][T22641] device vcan0 left promiscuous mode [ 1248.248432][T22641] device bond0 left promiscuous mode [ 1248.271630][T22641] device team0 left promiscuous mode 06:31:25 executing program 3: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000480)='/dev/cuse\x00', 0x2842, 0x0) io_setup(0x2, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f0000000240)={0x0, 0x0, 0x800000000000000, 0x0, 0x0, r0, 0x0}]) 06:31:25 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x40100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7400000000000000]}) 06:31:25 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x3, 0x40000000000010) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)="240000001d0003fffd3cc0023da2830101faffffff86c41600000000b51ba3a2d18873", 0x23}], 0x1}, 0x0) [ 1248.292052][T22641] device dummy0 left promiscuous mode [ 1248.300598][T22641] device nlmon0 left promiscuous mode [ 1248.313093][T22641] device caif0 left promiscuous mode [ 1248.354641][T22641] device batadv0 left promiscuous mode [ 1248.369594][T22641] device vxcan0 left promiscuous mode [ 1248.380087][T22641] device vxcan1 left promiscuous mode 06:31:25 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x40100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a00000000000000]}) [ 1248.440795][T22641] device veth0 left promiscuous mode [ 1248.482624][T22641] device veth1 left promiscuous mode [ 1248.498883][T22641] device veth0_to_bridge left promiscuous mode [ 1248.506447][T22641] device veth1_to_bridge left promiscuous mode [ 1248.513663][T22641] device veth0_to_bond left promiscuous mode [ 1248.520190][T22641] device bond_slave_0 left promiscuous mode [ 1248.526991][T22641] device veth1_to_bond left promiscuous mode [ 1248.533739][T22641] device bond_slave_1 left promiscuous mode [ 1248.551843][T22641] device veth0_to_team left promiscuous mode [ 1248.571756][T22641] device team_slave_0 left promiscuous mode [ 1248.578023][T22641] device veth1_to_team left promiscuous mode [ 1248.584802][T22641] device team_slave_1 left promiscuous mode [ 1248.591843][T22641] device veth0_to_hsr left promiscuous mode [ 1248.602669][T22641] device veth1_to_hsr left promiscuous mode [ 1248.617837][T22641] device hsr0 left promiscuous mode [ 1248.623900][T22641] device tunl0.0 left promiscuous mode 06:31:25 executing program 3: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000480)='/dev/cuse\x00', 0x2842, 0x0) io_setup(0x2, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f0000000240)={0x0, 0x0, 0xc00000000000000, 0x0, 0x0, r0, 0x0}]) 06:31:25 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x3, 0x40000000000010) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)="240000001d0003fffd3cc0023da2830101faffffff86c41600000000b51ba3a2d18873", 0x23}], 0x1}, 0x0) 06:31:25 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x700}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 06:31:25 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06030000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000040", 0x55}], 0x1}, 0x0) 06:31:25 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06020000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0x0) 06:31:25 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x40100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff00000000000000]}) 06:31:25 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x40100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000]}) [ 1248.774665][T22712] device lo entered promiscuous mode [ 1248.789305][T22712] device tunl0 entered promiscuous mode [ 1248.799454][T22712] device gre0 entered promiscuous mode 06:31:25 executing program 4: 06:31:25 executing program 3: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000480)='/dev/cuse\x00', 0x2842, 0x0) io_setup(0x2, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f0000000240)={0x0, 0x0, 0x3800000000000000, 0x0, 0x0, r0, 0x0}]) [ 1248.825787][T22712] device gretap0 entered promiscuous mode [ 1248.847137][T22712] device erspan0 entered promiscuous mode [ 1248.888302][T22712] device ip_vti0 entered promiscuous mode [ 1248.927369][T22712] device ip6_vti0 entered promiscuous mode 06:31:25 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfa\x81\x00\x00\x00\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7.\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000a40)) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) add_key$keyring(&(0x7f0000000800)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5334, &(0x7f00000001c0)={0xf48b, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) [ 1248.947541][T22712] device sit0 entered promiscuous mode [ 1248.957731][T22712] device ip6tnl0 entered promiscuous mode [ 1248.967781][T22712] device ip6gre0 entered promiscuous mode [ 1248.968979][T22723] syz-executor.1 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=1000 [ 1248.984405][T22712] device syz_tun entered promiscuous mode [ 1249.003385][T22712] device ip6gretap0 entered promiscuous mode [ 1249.005937][T22723] CPU: 0 PID: 22723 Comm: syz-executor.1 Not tainted 5.2.0-rc6+ #62 [ 1249.017527][T22723] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1249.023401][T22712] device bridge0 entered promiscuous mode [ 1249.028834][T22723] Call Trace: [ 1249.028863][T22723] dump_stack+0x172/0x1f0 [ 1249.028884][T22723] dump_header+0x10f/0xb6c [ 1249.028901][T22723] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1249.028915][T22723] ? ___ratelimit+0x60/0x595 [ 1249.028930][T22723] ? do_raw_spin_unlock+0x57/0x270 [ 1249.028948][T22723] oom_kill_process.cold+0x10/0x15 [ 1249.028964][T22723] out_of_memory+0x79a/0x1280 [ 1249.028986][T22723] ? lock_downgrade+0x880/0x880 [ 1249.043213][T22712] device vcan0 entered promiscuous mode [ 1249.047123][T22723] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1249.047145][T22723] ? oom_killer_disable+0x280/0x280 [ 1249.047158][T22723] ? find_held_lock+0x35/0x130 [ 1249.047192][T22723] mem_cgroup_out_of_memory+0x1ca/0x230 [ 1249.047208][T22723] ? memcg_event_wake+0x230/0x230 [ 1249.047232][T22723] ? do_raw_spin_unlock+0x57/0x270 [ 1249.053924][T22712] device bond0 entered promiscuous mode [ 1249.057884][T22723] ? _raw_spin_unlock+0x2d/0x50 [ 1249.057906][T22723] try_charge+0x1042/0x1410 [ 1249.057930][T22723] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1249.057945][T22723] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 1249.057961][T22723] ? find_held_lock+0x35/0x130 [ 1249.057977][T22723] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 1249.058002][T22723] __memcg_kmem_charge_memcg+0x7c/0x130 [ 1249.063638][T22712] device bond_slave_0 entered promiscuous mode [ 1249.068211][T22723] ? memcg_kmem_put_cache+0xb0/0xb0 [ 1249.068232][T22723] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 1249.068252][T22723] __memcg_kmem_charge+0x136/0x300 [ 1249.068270][T22723] __alloc_pages_nodemask+0x4bd/0x8d0 [ 1249.068286][T22723] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1249.068303][T22723] ? __alloc_pages_slowpath+0x28f0/0x28f0 [ 1249.068325][T22723] ? copy_process.part.0+0x1eea/0x6950 [ 1249.073684][T22712] device bond_slave_1 entered promiscuous mode [ 1249.077840][T22723] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1249.077858][T22723] ? trace_hardirqs_on+0x67/0x220 [ 1249.077881][T22723] copy_process.part.0+0x44e/0x6950 [ 1249.077899][T22723] ? __lock_acquire+0x54f/0x5490 [ 1249.077922][T22723] ? __cleanup_sighand+0x60/0x60 [ 1249.077949][T22723] ? rcu_read_lock_sched_held+0x110/0x130 [ 1249.084353][T22712] device team0 entered promiscuous mode [ 1249.089917][T22723] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1249.089936][T22723] ? try_to_free_mem_cgroup_pages+0x3b6/0x9f0 [ 1249.089956][T22723] _do_fork+0x25d/0xfe0 [ 1249.089977][T22723] ? copy_init_mm+0x20/0x20 [ 1249.090003][T22723] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1249.090016][T22723] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1249.090037][T22723] ? do_syscall_64+0x26/0x680 [ 1249.095802][T22712] device team_slave_0 entered promiscuous mode [ 1249.100163][T22723] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1249.100185][T22723] ? do_syscall_64+0x26/0x680 [ 1249.100207][T22723] __x64_sys_clone+0xbf/0x150 [ 1249.100226][T22723] do_syscall_64+0xfd/0x680 [ 1249.100244][T22723] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1249.100255][T22723] RIP: 0033:0x45bee9 [ 1249.100274][T22723] Code: ff 48 85 f6 0f 84 27 8e fb ff 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 0f 8c fe 8d fb ff 74 01 c3 31 ed 48 f7 c7 00 00 01 00 75 [ 1249.106555][T22712] device team_slave_1 entered promiscuous mode [ 1249.110823][T22723] RSP: 002b:0000000000a6fa98 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 [ 1249.110837][T22723] RAX: ffffffffffffffda RBX: 00007f76cf660700 RCX: 000000000045bee9 [ 1249.110845][T22723] RDX: 00007f76cf6609d0 RSI: 00007f76cf65fdb0 RDI: 00000000003d0f00 [ 1249.110854][T22723] RBP: 0000000000a6fcb0 R08: 00007f76cf660700 R09: 00007f76cf660700 [ 1249.110863][T22723] R10: 00007f76cf6609d0 R11: 0000000000000202 R12: 0000000000000000 [ 1249.110871][T22723] R13: 0000000000a6fb4f R14: 00007f76cf6609c0 R15: 000000000075bf2c [ 1249.251213][T22723] memory: usage 307176kB, limit 307200kB, failcnt 3927 [ 1249.264550][T22712] device dummy0 entered promiscuous mode [ 1249.287673][T22723] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1249.296559][T22712] device nlmon0 entered promiscuous mode [ 1249.303859][T22723] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1249.307747][T22712] device caif0 entered promiscuous mode 06:31:26 executing program 3: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000480)='/dev/cuse\x00', 0x2842, 0x0) io_setup(0x2, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f0000000240)={0x0, 0x0, 0x4000000000000000, 0x0, 0x0, r0, 0x0}]) 06:31:26 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x40100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}) [ 1249.324496][T22723] Memory cgroup stats for /syz1: cache:0KB rss:198952KB rss_huge:145408KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:198952KB inactive_file:0KB active_file:0KB unevictable:0KB [ 1249.348598][T22712] device batadv0 entered promiscuous mode [ 1249.373031][T22723] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=14036,uid=0 [ 1249.406375][T22712] device vxcan0 entered promiscuous mode [ 1249.427331][T22723] Memory cgroup out of memory: Killed process 14036 (syz-executor.1) total-vm:72708kB, anon-rss:2204kB, file-rss:35788kB, shmem-rss:0kB [ 1249.453083][T22712] device vxcan1 entered promiscuous mode [ 1249.561812][T22712] device veth0 entered promiscuous mode [ 1249.567588][T22712] device veth1 entered promiscuous mode 06:31:26 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x40100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}) 06:31:26 executing program 3: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000480)='/dev/cuse\x00', 0x2842, 0x0) io_setup(0x2, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f0000000240)={0x0, 0x0, 0x8000000000000000, 0x0, 0x0, r0, 0x0}]) [ 1249.664990][T22712] device veth0_to_bridge entered promiscuous mode [ 1249.686468][T22712] device veth1_to_bridge entered promiscuous mode [ 1249.729301][T22712] device veth0_to_bond entered promiscuous mode [ 1249.739185][T22712] device veth1_to_bond entered promiscuous mode [ 1249.753613][T22712] device veth0_to_team entered promiscuous mode [ 1249.760164][T22712] device veth1_to_team entered promiscuous mode [ 1249.777740][T22712] device veth0_to_hsr entered promiscuous mode [ 1249.784359][T22712] device veth1_to_hsr entered promiscuous mode [ 1249.790884][T22712] device hsr0 entered promiscuous mode [ 1249.807486][T22712] device tunl0.0 entered promiscuous mode 06:31:26 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xa00}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 06:31:26 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06030000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000006558", 0x55}], 0x1}, 0x0) 06:31:26 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x40100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}) 06:31:26 executing program 3: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000480)='/dev/cuse\x00', 0x2842, 0x0) io_setup(0x2, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f0000000240)={0x0, 0x0, 0xffffffff00000000, 0x0, 0x0, r0, 0x0}]) 06:31:26 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06020000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0x0) 06:31:26 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x40100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}) [ 1249.936217][T22773] device lo left promiscuous mode 06:31:26 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06020000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d40000000000ffff", 0x55}], 0x1}, 0x0) [ 1249.985223][T22773] device tunl0 left promiscuous mode [ 1250.013705][T22773] device gre0 left promiscuous mode [ 1250.019269][T22773] device gretap0 left promiscuous mode [ 1250.031453][T22773] device erspan0 left promiscuous mode [ 1250.037911][T22773] device ip_vti0 left promiscuous mode [ 1250.045347][T22773] device ip6_vti0 left promiscuous mode [ 1250.052332][T22773] device sit0 left promiscuous mode [ 1250.059202][T22773] device ip6tnl0 left promiscuous mode [ 1250.065432][T22773] device ip6gre0 left promiscuous mode [ 1250.087407][T22773] device syz_tun left promiscuous mode [ 1250.095435][T22773] device ip6gretap0 left promiscuous mode [ 1250.114328][T22773] device bridge0 left promiscuous mode [ 1250.136219][T22773] device vcan0 left promiscuous mode [ 1250.149577][T22773] device bond0 left promiscuous mode [ 1250.158070][T22773] device team0 left promiscuous mode [ 1250.170049][T22773] device dummy0 left promiscuous mode [ 1250.176129][T22773] device nlmon0 left promiscuous mode [ 1250.183952][T22773] device caif0 left promiscuous mode [ 1250.189706][T22773] device batadv0 left promiscuous mode [ 1250.195927][T22773] device vxcan0 left promiscuous mode [ 1250.202450][T22773] device vxcan1 left promiscuous mode [ 1250.209608][T22773] device veth0 left promiscuous mode [ 1250.215443][T22773] device veth1 left promiscuous mode [ 1250.221671][T22773] device veth0_to_bridge left promiscuous mode [ 1250.228453][T22773] device veth1_to_bridge left promiscuous mode [ 1250.235130][T22773] device veth0_to_bond left promiscuous mode [ 1250.244086][T22773] device bond_slave_0 left promiscuous mode [ 1250.250305][T22773] device veth1_to_bond left promiscuous mode [ 1250.258128][T22773] device bond_slave_1 left promiscuous mode [ 1250.267396][T22773] device veth0_to_team left promiscuous mode [ 1250.276678][T22773] device team_slave_0 left promiscuous mode [ 1250.291304][T22773] device veth1_to_team left promiscuous mode [ 1250.300861][T22773] device team_slave_1 left promiscuous mode [ 1250.308969][T22773] device veth0_to_hsr left promiscuous mode [ 1250.319230][T22773] device veth1_to_hsr left promiscuous mode [ 1250.327453][T22773] device hsr0 left promiscuous mode [ 1250.337625][T22773] device tunl0.0 left promiscuous mode 06:31:32 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, 0x0) ppoll(&(0x7f0000000000)=[{r0, 0x41a, 0x6400}], 0x1, 0x0, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 06:31:32 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x40100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) 06:31:32 executing program 3: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000480)='/dev/cuse\x00', 0x2842, 0x0) io_setup(0x2, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x2, 0x0, r0, 0x0}]) 06:31:32 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xc00}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 06:31:32 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06030000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000060", 0x55}], 0x1}, 0x0) 06:31:32 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06020000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d40000000000ffff", 0x55}], 0x1}, 0x0) 06:31:32 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x40100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}) 06:31:32 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06030000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000005865", 0x55}], 0x1}, 0x0) 06:31:32 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06020000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0x0) 06:31:32 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xe00}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 06:31:32 executing program 3: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000480)='/dev/cuse\x00', 0x2842, 0x0) io_setup(0x2, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x3, 0x0, r0, 0x0}]) 06:31:32 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06030000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d40000000000fe80", 0x55}], 0x1}, 0x0) 06:31:33 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000240)) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[@ANYRES32=r0, @ANYPTR64=&(0x7f0000000180)=ANY=[@ANYRESDEC=r0], @ANYRESDEC=r0, @ANYRESDEC=r0, @ANYRESDEC=r0, @ANYRES16], 0x4a) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1f}) read(r1, &(0x7f0000000380)=""/158, 0x9e) 06:31:33 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x40100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}) 06:31:33 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06020000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d40000000000ffff", 0x55}], 0x1}, 0x0) 06:31:33 executing program 3: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000480)='/dev/cuse\x00', 0x2842, 0x0) io_setup(0x2, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x4, 0x0, r0, 0x0}]) 06:31:33 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xf20}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 06:31:33 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06030000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000081", 0x55}], 0x1}, 0x0) [ 1256.602324][T22852] device lo entered promiscuous mode [ 1256.608052][T22852] device tunl0 entered promiscuous mode [ 1256.632977][T22852] device gre0 entered promiscuous mode [ 1256.633088][T22855] syz-executor.1 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000 [ 1256.639035][T22852] device gretap0 entered promiscuous mode [ 1256.675498][T22852] device erspan0 entered promiscuous mode [ 1256.678272][T22855] CPU: 1 PID: 22855 Comm: syz-executor.1 Not tainted 5.2.0-rc6+ #62 [ 1256.689246][T22855] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1256.695480][T22852] device ip_vti0 entered promiscuous mode [ 1256.699304][T22855] Call Trace: [ 1256.699330][T22855] dump_stack+0x172/0x1f0 [ 1256.699352][T22855] dump_header+0x10f/0xb6c [ 1256.699369][T22855] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1256.699390][T22855] ? ___ratelimit+0x60/0x595 [ 1256.708722][T22852] device ip6_vti0 entered promiscuous mode [ 1256.712724][T22855] ? do_raw_spin_unlock+0x57/0x270 [ 1256.712747][T22855] oom_kill_process.cold+0x10/0x15 [ 1256.712765][T22855] out_of_memory+0x79a/0x1280 [ 1256.712781][T22855] ? lock_downgrade+0x880/0x880 [ 1256.712796][T22855] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1256.712811][T22855] ? oom_killer_disable+0x280/0x280 [ 1256.712822][T22855] ? find_held_lock+0x35/0x130 [ 1256.712847][T22855] mem_cgroup_out_of_memory+0x1ca/0x230 [ 1256.712862][T22855] ? memcg_event_wake+0x230/0x230 [ 1256.712883][T22855] ? do_raw_spin_unlock+0x57/0x270 [ 1256.720818][T22852] device sit0 entered promiscuous mode [ 1256.723110][T22855] ? _raw_spin_unlock+0x2d/0x50 [ 1256.723132][T22855] try_charge+0x1042/0x1410 [ 1256.723153][T22855] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1256.723168][T22855] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 1256.723183][T22855] ? find_held_lock+0x35/0x130 [ 1256.723200][T22855] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 1256.723225][T22855] __memcg_kmem_charge_memcg+0x7c/0x130 [ 1256.723241][T22855] ? memcg_kmem_put_cache+0xb0/0xb0 [ 1256.723261][T22855] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 1256.723282][T22855] __memcg_kmem_charge+0x136/0x300 [ 1256.734374][T22852] device ip6tnl0 entered promiscuous mode [ 1256.738962][T22855] __alloc_pages_nodemask+0x4bd/0x8d0 [ 1256.738982][T22855] ? __alloc_pages_slowpath+0x28f0/0x28f0 [ 1256.738996][T22855] ? find_held_lock+0x35/0x130 06:31:33 executing program 4: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='oom_score_adj\x00\x1c\x83\xa4\x13+\v\xcef\xc8\xe0O\xc7\xaa\xc5q\x8d\xe3\x1c\x9al\xca8%\xe0(\xa0Si\b\xa2\xe3\x82\x18\xd72\xad)\x00T\xf9\x12\xf6n2d\x92\xaf\xa4\xae?U\nv\xfa,\xc9\x10O\xf1D\xceEP,6\xfd~g\x9b\xc9\xe8') preadv(r0, &(0x7f0000001380)=[{&(0x7f0000000000)=""/35, 0x23}], 0x1, 0x0) 06:31:33 executing program 3: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000480)='/dev/cuse\x00', 0x2842, 0x0) io_setup(0x2, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) [ 1256.739015][T22855] ? kasan_check_write+0x14/0x20 [ 1256.739038][T22855] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1256.747934][T22852] device ip6gre0 entered promiscuous mode [ 1256.748927][T22855] alloc_pages_current+0x107/0x210 [ 1256.748949][T22855] pte_alloc_one+0x1b/0x1a0 [ 1256.748966][T22855] __do_fault+0x2b4/0x4d0 [ 1256.748989][T22855] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1256.757477][T22852] device syz_tun entered promiscuous mode [ 1256.760066][T22855] __handle_mm_fault+0x2a8e/0x3eb0 [ 1256.760090][T22855] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 1256.760105][T22855] ? find_held_lock+0x35/0x130 [ 1256.760125][T22855] ? handle_mm_fault+0x292/0xa90 [ 1256.768984][T22852] device ip6gretap0 entered promiscuous mode [ 1256.770196][T22855] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1256.770215][T22855] ? kasan_check_read+0x11/0x20 [ 1256.770236][T22855] handle_mm_fault+0x3b7/0xa90 [ 1256.770255][T22855] __do_page_fault+0x5ef/0xda0 [ 1256.779305][T22852] device bridge0 entered promiscuous mode [ 1256.780901][T22855] do_page_fault+0x71/0x57d [ 1256.780919][T22855] ? page_fault+0x8/0x30 [ 1256.780934][T22855] page_fault+0x1e/0x30 [ 1256.780954][T22855] RIP: 0033:0x4019f7 [ 1256.789651][T22852] device vcan0 entered promiscuous mode [ 1256.791532][T22855] Code: 00 00 00 48 83 ec 08 48 8b 15 bd ea 66 00 48 8b 05 ae ea 66 00 48 39 d0 48 8d 8a 00 00 00 01 72 17 48 39 c8 73 12 48 8d 50 04 <89> 38 48 89 15 90 ea 66 00 48 83 c4 08 c3 48 89 c6 bf 38 96 4c 00 [ 1256.791541][T22855] RSP: 002b:0000000000a6fbc0 EFLAGS: 00010287 [ 1256.791554][T22855] RAX: 0000001b30920000 RBX: 0000000000000000 RCX: 0000001b31920000 [ 1256.791563][T22855] RDX: 0000001b30920004 RSI: 0000000000a6f980 RDI: 0000000000000000 [ 1256.791571][T22855] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000004 [ 1256.791578][T22855] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000001 [ 1256.791586][T22855] R13: 0000000000a6fdb0 R14: 0000000000000000 R15: 0000000000a6fdc0 [ 1256.849383][T22855] memory: usage 307200kB, limit 307200kB, failcnt 3972 [ 1256.862287][T22852] device bond0 entered promiscuous mode [ 1256.862298][T22852] device bond_slave_0 entered promiscuous mode [ 1256.867882][T22852] device bond_slave_1 entered promiscuous mode [ 1256.881286][ T3880] kobject: 'loop3' (00000000fbf129c1): kobject_uevent_env [ 1256.917411][T22863] [ 1256.927840][T22855] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1256.932993][T22863] ===================================================== [ 1256.933000][T22863] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected [ 1256.933007][T22863] 5.2.0-rc6+ #62 Not tainted [ 1256.933011][T22863] ----------------------------------------------------- [ 1256.933025][T22863] syz-executor.3/22863 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 1256.933031][T22863] 00000000fef49a86 (&fiq->waitq){+.+.}, at: io_submit_one+0xefa/0x2ef0 [ 1256.933058][T22863] [ 1256.933058][T22863] and this task is already holding: [ 1256.933062][T22863] 0000000008482fe6 (&(&ctx->ctx_lock)->rlock){..-.}, at: io_submit_one+0xeb5/0x2ef0 [ 1256.933080][T22863] which would create a new lock dependency: [ 1256.933094][T22863] (&(&ctx->ctx_lock)->rlock){..-.} -> (&fiq->waitq){+.+.} [ 1256.933112][T22863] [ 1256.933112][T22863] but this new dependency connects a SOFTIRQ-irq-safe lock: [ 1256.933114][T22863] (&(&ctx->ctx_lock)->rlock){..-.} [ 1256.933122][T22863] [ 1256.933122][T22863] ... which became SOFTIRQ-irq-safe at: [ 1256.933185][T22863] lock_acquire+0x16f/0x3f0 [ 1256.933198][T22863] _raw_spin_lock_irq+0x60/0x80 [ 1256.933209][T22863] free_ioctx_users+0x2d/0x490 [ 1256.933227][T22863] percpu_ref_switch_to_atomic_rcu+0x407/0x540 [ 1256.933249][T22863] rcu_core+0xba5/0x1500 [ 1256.938893][T22855] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1256.943681][T22863] __do_softirq+0x25c/0x94c [ 1256.943693][T22863] irq_exit+0x180/0x1d0 [ 1256.943705][T22863] smp_apic_timer_interrupt+0x13b/0x550 [ 1256.943717][T22863] apic_timer_interrupt+0xf/0x20 [ 1256.943728][T22863] console_unlock+0xb7c/0xec0 [ 1256.943740][T22863] vprintk_emit+0x2a0/0x700 [ 1256.943751][T22863] vprintk_default+0x28/0x30 [ 1256.943772][T22863] vprintk_func+0x7e/0x189 [ 1256.949888][T22855] Memory cgroup stats for /syz1: cache:0KB rss:197584KB rss_huge:143360KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:197584KB inactive_file:0KB active_file:0KB unevictable:0KB [ 1256.955987][T22863] printk+0xba/0xed [ 1256.956068][T22863] vlan_device_event.cold+0x1b/0x2f [ 1256.956090][T22863] notifier_call_chain+0xc2/0x230 [ 1256.961235][ T3880] kobject: 'loop3' (00000000fbf129c1): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 1256.965769][T22863] raw_notifier_call_chain+0x2e/0x40 06:31:34 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06030000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000001bba", 0x55}], 0x1}, 0x0) [ 1256.965785][T22863] call_netdevice_notifiers_info+0x3f/0x90 [ 1256.965796][T22863] __dev_notify_flags+0x121/0x2c0 [ 1256.965805][T22863] dev_change_flags+0x10d/0x170 [ 1256.965824][T22863] do_setlink+0x1615/0x34e0 [ 1256.972501][ T3880] kobject: 'loop4' (000000009ef4af73): kobject_uevent_env [ 1256.976538][T22863] __rtnl_newlink+0xbd8/0x16c0 [ 1256.976549][T22863] rtnl_newlink+0x69/0xa0 [ 1256.976560][T22863] rtnetlink_rcv_msg+0x463/0xb00 [ 1256.976576][T22863] netlink_rcv_skb+0x177/0x450 06:31:34 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x200f}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) [ 1256.976593][T22863] rtnetlink_rcv+0x1d/0x30 [ 1256.981440][ T3880] kobject: 'loop4' (000000009ef4af73): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 1256.985547][T22863] netlink_unicast+0x531/0x710 [ 1256.985560][T22863] netlink_sendmsg+0x8ae/0xd70 [ 1256.985572][T22863] sock_sendmsg+0xd7/0x130 [ 1256.985582][T22863] __sys_sendto+0x262/0x380 [ 1256.985600][T22863] __x64_sys_sendto+0xe1/0x1a0 [ 1256.989907][T22855] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=14411,uid=0 06:31:34 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06030000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d40000000000fec0", 0x55}], 0x1}, 0x0) [ 1256.993663][T22863] do_syscall_64+0xfd/0x680 [ 1256.993677][T22863] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1256.993682][T22863] [ 1256.993682][T22863] to a SOFTIRQ-irq-unsafe lock: [ 1256.993685][T22863] (&fiq->waitq){+.+.} [ 1256.993694][T22863] [ 1256.993694][T22863] ... which became SOFTIRQ-irq-unsafe at: [ 1256.993696][T22863] ... [ 1256.993751][T22863] lock_acquire+0x16f/0x3f0 [ 1257.017650][T22855] Memory cgroup out of memory: Killed process 14411 (syz-executor.1) total-vm:72708kB, anon-rss:2204kB, file-rss:35788kB, shmem-rss:0kB [ 1257.020029][T22863] _raw_spin_lock+0x2f/0x40 [ 1257.020090][T22863] flush_bg_queue+0x1f3/0x3c0 [ 1257.020111][T22863] fuse_request_queue_background+0x2d1/0x580 [ 1257.071372][T22852] device team0 entered promiscuous mode [ 1257.073322][T22863] fuse_request_send_background+0x58/0x110 [ 1257.073334][T22863] cuse_channel_open+0x5ba/0x830 [ 1257.073424][T22863] misc_open+0x395/0x4c0 [ 1257.073445][T22863] chrdev_open+0x245/0x6b0 [ 1257.079082][T22852] device team_slave_0 entered promiscuous mode 06:31:34 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06020000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0x0) [ 1257.085122][T22863] do_dentry_open+0x4df/0x1250 [ 1257.085135][T22863] vfs_open+0xa0/0xd0 [ 1257.085147][T22863] path_openat+0x10e9/0x46d0 [ 1257.085157][T22863] do_filp_open+0x1a1/0x280 [ 1257.085170][T22863] do_sys_open+0x3fe/0x5d0 [ 1257.085187][T22863] __x64_sys_openat+0x9d/0x100 [ 1257.085200][T22863] do_syscall_64+0xfd/0x680 [ 1257.085213][T22863] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1257.085218][T22863] [ 1257.085218][T22863] other info that might help us debug this: [ 1257.085218][T22863] 06:31:34 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x40100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa]}) [ 1257.085229][T22863] Possible interrupt unsafe locking scenario: [ 1257.085229][T22863] [ 1257.095448][T22852] device team_slave_1 entered promiscuous mode [ 1257.098551][T22863] CPU0 CPU1 [ 1257.098555][T22863] ---- ---- [ 1257.098557][T22863] lock(&fiq->waitq); [ 1257.098566][T22863] local_irq_disable(); [ 1257.098569][T22863] lock(&(&ctx->ctx_lock)->rlock); [ 1257.098577][T22863] lock(&fiq->waitq); [ 1257.098584][T22863] [ 1257.098586][T22863] lock(&(&ctx->ctx_lock)->rlock); [ 1257.098594][T22863] [ 1257.098594][T22863] *** DEADLOCK *** [ 1257.098594][T22863] [ 1257.098603][T22863] 1 lock held by syz-executor.3/22863: [ 1257.098615][T22863] #0: 0000000008482fe6 (&(&ctx->ctx_lock)->rlock){..-.}, at: io_submit_one+0xeb5/0x2ef0 [ 1257.101363][T22852] device dummy0 entered promiscuous mode [ 1257.108517][T22863] [ 1257.108517][T22863] the dependencies between SOFTIRQ-irq-safe lock and the holding lock: 06:31:34 executing program 4: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='oom_score_adj\x00\x1c\x83\xa4\x13+\v\xcef\xc8\xe0O\xc7\xaa\xc5q\x8d\xe3\x1c\x9al\xca8%\xe0(\xa0Si\b\xa2\xe3\x82\x18\xd72\xad)\x00T\xf9\x12\xf6n2d\x92\xaf\xa4\xae?U\nv\xfa,\xc9\x10O\xf1D\xceEP,6\xfd~g\x9b\xc9\xe8') preadv(r0, &(0x7f0000001380)=[{&(0x7f0000000000)=""/35, 0x23}], 0x1, 0x0) [ 1257.108528][T22863] -> (&(&ctx->ctx_lock)->rlock){..-.} { [ 1257.108541][T22863] IN-SOFTIRQ-W at: [ 1257.108561][T22863] lock_acquire+0x16f/0x3f0 [ 1257.108575][T22863] _raw_spin_lock_irq+0x60/0x80 [ 1257.108595][T22863] free_ioctx_users+0x2d/0x490 [ 1257.115867][T22852] device nlmon0 entered promiscuous mode [ 1257.122979][T22863] percpu_ref_switch_to_atomic_rcu+0x407/0x540 [ 1257.122994][T22863] rcu_core+0xba5/0x1500 [ 1257.123010][T22863] __do_softirq+0x25c/0x94c [ 1257.123021][T22863] irq_exit+0x180/0x1d0 [ 1257.123034][T22863] smp_apic_timer_interrupt+0x13b/0x550 [ 1257.123053][T22863] apic_timer_interrupt+0xf/0x20 [ 1257.128025][T22852] device caif0 entered promiscuous mode [ 1257.134845][T22863] console_unlock+0xb7c/0xec0 [ 1257.134857][T22863] vprintk_emit+0x2a0/0x700 [ 1257.134869][T22863] vprintk_default+0x28/0x30 [ 1257.134881][T22863] vprintk_func+0x7e/0x189 [ 1257.134893][T22863] printk+0xba/0xed [ 1257.134905][T22863] vlan_device_event.cold+0x1b/0x2f [ 1257.134918][T22863] notifier_call_chain+0xc2/0x230 [ 1257.134939][T22863] raw_notifier_call_chain+0x2e/0x40 [ 1257.146170][T22852] device batadv0 entered promiscuous mode [ 1257.151408][T22863] call_netdevice_notifiers_info+0x3f/0x90 [ 1257.151420][T22863] __dev_notify_flags+0x121/0x2c0 [ 1257.151430][T22863] dev_change_flags+0x10d/0x170 [ 1257.151442][T22863] do_setlink+0x1615/0x34e0 [ 1257.151452][T22863] __rtnl_newlink+0xbd8/0x16c0 [ 1257.151462][T22863] rtnl_newlink+0x69/0xa0 [ 1257.151472][T22863] rtnetlink_rcv_msg+0x463/0xb00 [ 1257.151487][T22863] netlink_rcv_skb+0x177/0x450 [ 1257.151506][T22863] rtnetlink_rcv+0x1d/0x30 06:31:34 executing program 4: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='oom_score_adj\x00\x1c\x83\xa4\x13+\v\xcef\xc8\xe0O\xc7\xaa\xc5q\x8d\xe3\x1c\x9al\xca8%\xe0(\xa0Si\b\xa2\xe3\x82\x18\xd72\xad)\x00T\xf9\x12\xf6n2d\x92\xaf\xa4\xae?U\nv\xfa,\xc9\x10O\xf1D\xceEP,6\xfd~g\x9b\xc9\xe8') preadv(r0, &(0x7f0000001380)=[{&(0x7f0000000000)=""/35, 0x23}], 0x1, 0x0) [ 1257.159289][T22852] device vxcan0 entered promiscuous mode [ 1257.168592][T22863] netlink_unicast+0x531/0x710 [ 1257.168604][T22863] netlink_sendmsg+0x8ae/0xd70 [ 1257.168615][T22863] sock_sendmsg+0xd7/0x130 [ 1257.168626][T22863] __sys_sendto+0x262/0x380 [ 1257.168638][T22863] __x64_sys_sendto+0xe1/0x1a0 [ 1257.168652][T22863] do_syscall_64+0xfd/0x680 [ 1257.168665][T22863] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1257.168670][T22863] INITIAL USE at: [ 1257.168699][T22863] lock_acquire+0x16f/0x3f0 [ 1257.174911][T22852] device vxcan1 entered promiscuous mode [ 1257.181797][T22863] _raw_spin_lock_irq+0x60/0x80 [ 1257.181811][T22863] __x64_sys_io_cancel+0xd4/0x690 [ 1257.181824][T22863] do_syscall_64+0xfd/0x680 [ 1257.181837][T22863] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1257.181841][T22863] } [ 1257.181971][T22863] ... key at: [] __key.53435+0x0/0x40 [ 1257.181984][T22863] ... acquired at: [ 1257.191875][T22852] device veth0 entered promiscuous mode [ 1257.196831][T22863] lock_acquire+0x16f/0x3f0 [ 1257.196843][T22863] _raw_spin_lock+0x2f/0x40 [ 1257.196856][T22863] io_submit_one+0xefa/0x2ef0 [ 1257.196868][T22863] __x64_sys_io_submit+0x1bd/0x570 [ 1257.196881][T22863] do_syscall_64+0xfd/0x680 [ 1257.196900][T22863] entry_SYSCALL_64_after_hwframe+0x49/0xbe 06:31:34 executing program 4: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='oom_score_adj\x00\x1c\x83\xa4\x13+\v\xcef\xc8\xe0O\xc7\xaa\xc5q\x8d\xe3\x1c\x9al\xca8%\xe0(\xa0Si\b\xa2\xe3\x82\x18\xd72\xad)\x00T\xf9\x12\xf6n2d\x92\xaf\xa4\xae?U\nv\xfa,\xc9\x10O\xf1D\xceEP,6\xfd~g\x9b\xc9\xe8') preadv(r0, &(0x7f0000001380)=[{&(0x7f0000000000)=""/35, 0x23}], 0x1, 0x0) [ 1257.205062][T22852] device veth1 entered promiscuous mode [ 1257.209259][T22863] [ 1257.209263][T22863] [ 1257.209263][T22863] the dependencies between the lock to be acquired [ 1257.209268][T22863] and SOFTIRQ-irq-unsafe lock: [ 1257.209278][T22863] -> (&fiq->waitq){+.+.} { [ 1257.209291][T22863] HARDIRQ-ON-W at: [ 1257.209312][T22863] lock_acquire+0x16f/0x3f0 [ 1257.209325][T22863] _raw_spin_lock+0x2f/0x40 [ 1257.209344][T22863] flush_bg_queue+0x1f3/0x3c0 [ 1257.214600][T22852] device veth0_to_bridge entered promiscuous mode [ 1257.219102][T22863] fuse_request_queue_background+0x2d1/0x580 [ 1257.219114][T22863] fuse_request_send_background+0x58/0x110 [ 1257.219125][T22863] cuse_channel_open+0x5ba/0x830 [ 1257.219140][T22863] misc_open+0x395/0x4c0 [ 1257.219154][T22863] chrdev_open+0x245/0x6b0 [ 1257.219175][T22863] do_dentry_open+0x4df/0x1250 [ 1257.225811][T22852] device veth1_to_bridge entered promiscuous mode 06:31:34 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x40100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48]}) 06:31:34 executing program 4: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000000)=""/35, 0x23}], 0x1, 0x0) 06:31:34 executing program 4: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000000)=""/35, 0x23}], 0x1, 0x0) [ 1257.229715][T22863] vfs_open+0xa0/0xd0 [ 1257.229729][T22863] path_openat+0x10e9/0x46d0 [ 1257.229741][T22863] do_filp_open+0x1a1/0x280 [ 1257.229754][T22863] do_sys_open+0x3fe/0x5d0 [ 1257.229767][T22863] __x64_sys_openat+0x9d/0x100 [ 1257.229788][T22863] do_syscall_64+0xfd/0x680 [ 1257.237029][T22852] device veth0_to_bond entered promiscuous mode [ 1257.241291][T22863] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1257.241297][T22863] SOFTIRQ-ON-W at: [ 1257.241312][T22863] lock_acquire+0x16f/0x3f0 [ 1257.241322][T22863] _raw_spin_lock+0x2f/0x40 [ 1257.241333][T22863] flush_bg_queue+0x1f3/0x3c0 [ 1257.241344][T22863] fuse_request_queue_background+0x2d1/0x580 [ 1257.241355][T22863] fuse_request_send_background+0x58/0x110 [ 1257.241373][T22863] cuse_channel_open+0x5ba/0x830 [ 1257.246201][T22852] device veth1_to_bond entered promiscuous mode [ 1257.251421][T22863] misc_open+0x395/0x4c0 [ 1257.251435][T22863] chrdev_open+0x245/0x6b0 [ 1257.251448][T22863] do_dentry_open+0x4df/0x1250 [ 1257.251460][T22863] vfs_open+0xa0/0xd0 [ 1257.251472][T22863] path_openat+0x10e9/0x46d0 [ 1257.251483][T22863] do_filp_open+0x1a1/0x280 [ 1257.251495][T22863] do_sys_open+0x3fe/0x5d0 [ 1257.251516][T22863] __x64_sys_openat+0x9d/0x100 [ 1257.257091][T22852] device veth0_to_team entered promiscuous mode [ 1257.261419][T22863] do_syscall_64+0xfd/0x680 [ 1257.261434][T22863] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1257.261439][T22863] INITIAL USE at: [ 1257.261453][T22863] lock_acquire+0x16f/0x3f0 [ 1257.261464][T22863] _raw_spin_lock+0x2f/0x40 [ 1257.261474][T22863] flush_bg_queue+0x1f3/0x3c0 [ 1257.261484][T22863] fuse_request_queue_background+0x2d1/0x580 [ 1257.261495][T22863] fuse_request_send_background+0x58/0x110 [ 1257.261513][T22863] cuse_channel_open+0x5ba/0x830 [ 1257.266602][T22852] device veth1_to_team entered promiscuous mode [ 1257.270864][T22863] misc_open+0x395/0x4c0 [ 1257.270878][T22863] chrdev_open+0x245/0x6b0 [ 1257.270891][T22863] do_dentry_open+0x4df/0x1250 [ 1257.270904][T22863] vfs_open+0xa0/0xd0 [ 1257.270916][T22863] path_openat+0x10e9/0x46d0 [ 1257.270935][T22863] do_filp_open+0x1a1/0x280 [ 1257.275872][T22852] device veth0_to_hsr entered promiscuous mode [ 1257.296784][T22863] do_sys_open+0x3fe/0x5d0 [ 1257.296797][T22863] __x64_sys_openat+0x9d/0x100 [ 1257.296811][T22863] do_syscall_64+0xfd/0x680 [ 1257.296825][T22863] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1257.296829][T22863] } [ 1257.296898][T22863] ... key at: [] __key.44051+0x0/0x40 [ 1257.296912][T22863] ... acquired at: [ 1257.301296][T22852] device veth1_to_hsr entered promiscuous mode [ 1257.306238][T22863] lock_acquire+0x16f/0x3f0 [ 1257.306249][T22863] _raw_spin_lock+0x2f/0x40 [ 1257.306261][T22863] io_submit_one+0xefa/0x2ef0 [ 1257.306272][T22863] __x64_sys_io_submit+0x1bd/0x570 [ 1257.306286][T22863] do_syscall_64+0xfd/0x680 [ 1257.306297][T22863] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1257.306308][T22863] [ 1257.311879][T22852] device hsr0 entered promiscuous mode [ 1257.321565][T22863] [ 1257.321565][T22863] stack backtrace: [ 1257.321583][T22863] CPU: 0 PID: 22863 Comm: syz-executor.3 Not tainted 5.2.0-rc6+ #62 [ 1257.321590][T22863] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1257.321593][T22863] Call Trace: [ 1257.321618][T22863] dump_stack+0x172/0x1f0 [ 1257.321635][T22863] check_irq_usage.cold+0x711/0xba0 [ 1257.321650][T22863] ? check_usage_forwards+0x370/0x370 [ 1257.321665][T22863] ? __lock_acquire+0x54f/0x5490 [ 1257.321692][T22863] ? graph_lock+0x7b/0x200 [ 1257.327410][T22852] device tunl0.0 entered promiscuous mode [ 1257.332963][T22863] ? is_dynamic_key+0x1c0/0x1c0 [ 1257.332979][T22863] __lock_acquire+0x2469/0x5490 [ 1257.332992][T22863] ? __lock_acquire+0x2469/0x5490 [ 1257.333003][T22863] ? mark_held_locks+0xf0/0xf0 [ 1257.333020][T22863] ? mark_held_locks+0xf0/0xf0 [ 1257.333030][T22863] ? fuse_dev_poll+0x160/0x240 [ 1257.333041][T22863] ? find_held_lock+0x35/0x130 [ 1257.333065][T22863] ? kasan_check_write+0x14/0x20 [ 1257.422117][T22878] device lo left promiscuous mode [ 1257.428121][T22863] lock_acquire+0x16f/0x3f0 [ 1257.428137][T22863] ? io_submit_one+0xefa/0x2ef0 [ 1257.428154][T22863] _raw_spin_lock+0x2f/0x40 [ 1257.428174][T22863] ? io_submit_one+0xefa/0x2ef0 [ 1257.449463][T22878] device tunl0 left promiscuous mode [ 1257.449913][T22863] io_submit_one+0xefa/0x2ef0 [ 1257.469891][T22878] device gre0 left promiscuous mode [ 1257.479103][T22863] ? mark_held_locks+0xf0/0xf0 [ 1257.479124][T22863] ? ioctx_alloc+0x1db0/0x1db0 [ 1257.479137][T22863] ? __might_fault+0x12b/0x1e0 [ 1257.479147][T22863] ? aio_setup_rw+0x180/0x180 [ 1257.479167][T22863] __x64_sys_io_submit+0x1bd/0x570 [ 1257.479192][T22863] ? __x64_sys_io_submit+0x1bd/0x570 [ 1257.485120][T22878] device gretap0 left promiscuous mode [ 1257.488562][T22863] ? __ia32_sys_io_destroy+0x420/0x420 [ 1257.488580][T22863] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1257.488594][T22863] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1257.488614][T22863] ? do_syscall_64+0x26/0x680 [ 1257.495987][T22878] device erspan0 left promiscuous mode [ 1257.500216][T22863] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1257.500232][T22863] ? do_syscall_64+0x26/0x680 [ 1257.500248][T22863] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1257.500268][T22863] do_syscall_64+0xfd/0x680 [ 1257.507517][T22878] device ip_vti0 left promiscuous mode [ 1257.511184][T22863] ? do_syscall_64+0xfd/0x680 [ 1257.511201][T22863] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1257.511210][T22863] RIP: 0033:0x459519 [ 1257.511225][T22863] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1257.511240][T22863] RSP: 002b:00007f41c3458c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 1257.517615][T22878] device ip6_vti0 left promiscuous mode [ 1257.520047][T22863] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459519 [ 1257.520056][T22863] RDX: 0000000020000200 RSI: 0000000000000001 RDI: 00007f41c3438000 [ 1257.520063][T22863] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1257.520071][T22863] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f41c34596d4 [ 1257.520079][T22863] R13: 00000000004c0898 R14: 00000000004d3548 R15: 00000000ffffffff [ 1257.530800][ T3880] kobject: 'loop2' (000000007c3db68d): kobject_uevent_env [ 1257.575361][T22878] device sit0 left promiscuous mode [ 1257.606078][ T3880] kobject: 'loop2' (000000007c3db68d): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 1257.616710][ T3880] kobject: 'loop1' (00000000fb9457f8): kobject_uevent_env [ 1257.625263][T22878] device ip6tnl0 left promiscuous mode [ 1257.661911][ T3880] kobject: 'loop1' (00000000fb9457f8): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 1257.669918][T22884] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 1257.712314][T22878] device ip6gre0 left promiscuous mode [ 1257.722727][T22884] CPU: 1 PID: 22884 Comm: syz-executor.1 Not tainted 5.2.0-rc6+ #62 [ 1257.738930][ T3880] kobject: 'loop4' (000000009ef4af73): kobject_uevent_env [ 1257.743733][T22884] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1257.743739][T22884] Call Trace: [ 1257.743764][T22884] dump_stack+0x172/0x1f0 [ 1257.743781][T22884] dump_header+0x10f/0xb6c [ 1257.743796][T22884] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1257.743808][T22884] ? ___ratelimit+0x60/0x595 [ 1257.743821][T22884] ? do_raw_spin_unlock+0x57/0x270 [ 1257.743834][T22884] oom_kill_process.cold+0x10/0x15 [ 1257.743848][T22884] out_of_memory+0x79a/0x1280 [ 1257.743869][T22884] ? lock_downgrade+0x880/0x880 [ 1257.752983][ T3880] kobject: 'loop4' (000000009ef4af73): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 1257.756157][T22884] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1257.756173][T22884] ? oom_killer_disable+0x280/0x280 [ 1257.756213][T22884] mem_cgroup_out_of_memory+0x1ca/0x230 [ 1257.764389][T22878] device syz_tun left promiscuous mode [ 1257.768692][T22884] ? memcg_event_wake+0x230/0x230 [ 1257.768712][T22884] ? do_raw_spin_unlock+0x57/0x270 [ 1257.768727][T22884] ? _raw_spin_unlock+0x2d/0x50 [ 1257.768749][T22884] try_charge+0x1042/0x1410 [ 1257.778440][T22878] device ip6gretap0 left promiscuous mode [ 1257.781047][T22884] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1257.781062][T22884] ? percpu_ref_tryget_live+0x111/0x290 [ 1257.781082][T22884] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 1257.781095][T22884] mem_cgroup_try_charge+0x24d/0x5e0 [ 1257.781110][T22884] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 1257.781124][T22884] wp_page_copy+0x416/0x1770 [ 1257.781135][T22884] ? kasan_check_read+0x11/0x20 [ 1257.781146][T22884] ? page_trans_huge_mapcount+0x156/0x510 [ 1257.781165][T22884] ? pmd_pfn+0x1d0/0x1d0 [ 1257.789411][T22878] device bridge0 left promiscuous mode [ 1257.793548][T22884] ? mark_held_locks+0xf0/0xf0 [ 1257.793564][T22884] ? lock_downgrade+0x880/0x880 [ 1257.793579][T22884] ? swp_swapcount+0x540/0x540 [ 1257.793593][T22884] ? kasan_check_read+0x11/0x20 [ 1257.793606][T22884] ? do_raw_spin_unlock+0x57/0x270 [ 1257.793620][T22884] do_wp_page+0x48e/0x1500 [ 1257.793636][T22884] ? finish_mkwrite_fault+0x540/0x540 [ 1257.793654][T22884] __handle_mm_fault+0x22e3/0x3eb0 [ 1257.793682][T22884] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 1257.802937][T22878] device vcan0 left promiscuous mode [ 1257.807419][T22884] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1257.807441][T22884] ? __this_cpu_preempt_check+0x3a/0x270 [ 1257.807457][T22884] ? trace_hardirqs_on+0x67/0x220 [ 1257.807480][T22884] handle_mm_fault+0x3b7/0xa90 [ 1257.815468][T22878] device bond0 left promiscuous mode [ 1257.820692][T22884] __do_page_fault+0x5ef/0xda0 [ 1257.820710][T22884] do_page_fault+0x71/0x57d [ 1257.820725][T22884] ? page_fault+0x8/0x30 [ 1257.820738][T22884] page_fault+0x1e/0x30 [ 1257.820757][T22884] RIP: 0033:0x457b1e [ 1257.830381][T22878] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1257.834231][T22884] Code: 00 00 85 c0 41 89 c5 0f 85 fc 00 00 00 64 8b 04 25 d0 02 00 00 41 39 c4 0f 84 12 02 00 00 48 8b 05 27 ec 61 00 48 85 c0 74 04 <48> 83 00 04 64 8b 04 25 d0 02 00 00 64 89 04 25 d4 02 00 00 0f 31 [ 1257.834240][T22884] RSP: 002b:0000000000a6fd30 EFLAGS: 00010206 [ 1257.834250][T22884] RAX: 0000000000a76248 RBX: 0000000000a6fd30 RCX: 0000000000457aea [ 1257.834257][T22884] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 1257.834265][T22884] RBP: 0000000000a6fd70 R08: 0000000000000001 R09: 0000555555747940 [ 1257.834272][T22884] R10: 0000555555747c10 R11: 0000000000000246 R12: 0000000000000001 [ 1257.834278][T22884] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000a6fdc0 [ 1257.874576][T22884] memory: usage 307196kB, limit 307200kB, failcnt 3991 [ 1257.894231][T22878] device team0 left promiscuous mode [ 1257.914309][T22884] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1257.919576][T22878] 8021q: adding VLAN 0 to HW filter on device team0 [ 1257.935798][ T3880] kobject: 'loop4' (000000009ef4af73): kobject_uevent_env [ 1257.938446][T22878] device dummy0 left promiscuous mode [ 1257.945606][ T3880] kobject: 'loop4' (000000009ef4af73): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 1257.950019][T22878] device nlmon0 left promiscuous mode [ 1257.961285][T22884] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1257.963667][T22878] chnl_net:chnl_net_open(): err: Unable to register and open device, Err:-19 [ 1257.993532][T22884] Memory cgroup stats for /syz1: cache:0KB rss:197568KB rss_huge:143360KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:197568KB inactive_file:0KB active_file:0KB unevictable:0KB [ 1258.014461][T22878] caif:caif_disconnect_client(): nothing to disconnect [ 1258.027996][T22884] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=14431,uid=0 [ 1258.052399][ T3880] kobject: 'loop4' (000000009ef4af73): kobject_uevent_env [ 1258.072042][T22884] Memory cgroup out of memory: Killed process 14431 (syz-executor.1) total-vm:72708kB, anon-rss:2204kB, file-rss:35788kB, shmem-rss:0kB [ 1258.077605][T22878] chnl_net:chnl_flowctrl_cb(): NET flowctrl func called flow: CLOSE/DEINIT [ 1258.104820][ T3880] kobject: 'loop4' (000000009ef4af73): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 1258.194838][T31310] syz-executor.1 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=0 [ 1258.196927][T22878] chnl_net:chnl_net_open(): state disconnected [ 1258.231201][T31310] CPU: 0 PID: 31310 Comm: syz-executor.1 Not tainted 5.2.0-rc6+ #62 [ 1258.234414][T22878] device caif0 left promiscuous mode [ 1258.240771][T31310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1258.247609][T22878] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1258.254080][T31310] Call Trace: [ 1258.254108][T31310] dump_stack+0x172/0x1f0 [ 1258.254126][T31310] dump_header+0x10f/0xb6c [ 1258.254149][T31310] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1258.270225][ T3880] kobject: 'loop1' (00000000fb9457f8): kobject_uevent_env [ 1258.273396][T31310] ? ___ratelimit+0x60/0x595 [ 1258.273412][T31310] ? do_raw_spin_unlock+0x57/0x270 [ 1258.273434][T31310] oom_kill_process.cold+0x10/0x15 [ 1258.280376][ T3880] kobject: 'loop1' (00000000fb9457f8): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 1258.286924][T31310] out_of_memory+0x79a/0x1280 [ 1258.286939][T31310] ? lock_downgrade+0x880/0x880 [ 1258.286962][T31310] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1259.765848][T31310] ? oom_killer_disable+0x280/0x280 [ 1259.771839][T31310] mem_cgroup_out_of_memory+0x1ca/0x230 [ 1259.778022][T31310] ? memcg_event_wake+0x230/0x230 [ 1259.784893][T31310] ? do_raw_spin_unlock+0x57/0x270 [ 1259.791059][T31310] ? _raw_spin_unlock+0x2d/0x50 [ 1259.796502][T31310] try_charge+0x1042/0x1410 [ 1259.801747][T31310] ? mark_held_locks+0xf0/0xf0 [ 1259.808274][T31310] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1259.814558][T31310] ? memcg_stat_show+0xbd0/0xbd0 [ 1259.820152][T31310] ? percpu_ref_tryget_live+0x111/0x290 [ 1259.826817][T31310] __memcg_kmem_charge_memcg+0x7c/0x130 [ 1259.833167][T31310] ? memcg_kmem_put_cache+0xb0/0xb0 [ 1259.839260][T31310] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 1259.845979][T31310] __memcg_kmem_charge+0x136/0x300 [ 1259.852001][T31310] __alloc_pages_nodemask+0x4bd/0x8d0 [ 1259.857901][T31310] ? mark_held_locks+0xf0/0xf0 [ 1259.862979][T31310] ? __alloc_pages_slowpath+0x28f0/0x28f0 [ 1259.869165][T31310] ? save_stack+0x5c/0x90 [ 1259.875126][T31310] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1259.884746][T31310] alloc_pages_current+0x107/0x210 [ 1259.889872][T31310] ? lock_downgrade+0x880/0x880 [ 1259.895428][T31310] pte_alloc_one+0x1b/0x1a0 [ 1259.901067][T31310] __pte_alloc+0x20/0x310 [ 1259.905822][T31310] copy_page_range+0x1561/0x1fc0 [ 1259.912130][T31310] ? pmd_alloc+0x180/0x180 [ 1259.917522][T31310] ? vma_gap_callbacks_rotate+0x62/0x80 [ 1259.924298][T31310] ? __rb_insert_augmented+0x22f/0xdf0 [ 1259.931095][T31310] ? validate_mm_rb+0xa3/0xc0 [ 1259.938340][T31310] ? __vma_link_rb+0x279/0x370 [ 1259.944053][T31310] ? kasan_check_write+0x14/0x20 [ 1259.950322][T31310] dup_mm+0x9c4/0x13b0 [ 1259.957398][T31310] ? vm_area_dup+0x170/0x170 [ 1259.963818][T31310] ? debug_mutex_init+0x2d/0x60 [ 1259.969174][T31310] copy_process.part.0+0x2d02/0x6950 [ 1259.975222][T31310] ? __cleanup_sighand+0x60/0x60 [ 1259.980845][T31310] _do_fork+0x25d/0xfe0 [ 1259.986028][T31310] ? copy_init_mm+0x20/0x20 [ 1259.991620][T31310] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1259.999896][T31310] ? debug_smp_processor_id+0x3c/0x280 [ 1260.006306][T31310] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1260.013631][T31310] ? switch_fpu_return+0x1d4/0x4b0 [ 1260.020433][T31310] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1260.027463][T31310] __x64_sys_clone+0xbf/0x150 [ 1260.033662][T31310] do_syscall_64+0xfd/0x680 [ 1260.039442][T31310] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1260.047646][T31310] RIP: 0033:0x457aea [ 1260.052465][T31310] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 1260.076274][T31310] RSP: 002b:0000000000a6fd30 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1260.086979][T31310] RAX: ffffffffffffffda RBX: 0000000000a6fd30 RCX: 0000000000457aea [ 1260.096530][T31310] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 1260.105975][T31310] RBP: 0000000000a6fd70 R08: 0000000000000001 R09: 0000555555747940 [ 1260.114905][T31310] R10: 0000555555747c10 R11: 0000000000000246 R12: 0000000000000001 [ 1260.124940][T31310] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000a6fdc0 [ 1260.142968][T31310] memory: usage 307168kB, limit 307200kB, failcnt 4004 [ 1260.153139][T31310] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1260.164848][T31310] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 06:31:36 executing program 3: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000480)='/dev/cuse\x00', 0x2842, 0x0) io_setup(0x2, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x7, 0x0, r0, 0x0}]) 06:31:36 executing program 4: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000000)=""/35, 0x23}], 0x1, 0x0) 06:31:36 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 06:31:36 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06030000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d4000000000000f0", 0x55}], 0x1}, 0x0) 06:31:36 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06020000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d40000000000ffff", 0x55}], 0x1}, 0x0) [ 1260.173210][T31310] Memory cgroup stats for /syz1: cache:0KB rss:197556KB rss_huge:143360KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:197556KB inactive_file:0KB active_file:0KB unevictable:0KB [ 1260.212949][ T3880] kobject: 'loop3' (00000000fbf129c1): kobject_uevent_env [ 1260.221838][T22913] device lo entered promiscuous mode 06:31:36 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='oom_score_adj\x00\x1c\x83\xa4\x13+\v\xcef\xc8\xe0O\xc7\xaa\xc5q\x8d\xe3\x1c\x9al\xca8%\xe0(\xa0Si\b\xa2\xe3\x82\x18\xd72\xad)\x00T\xf9\x12\xf6n2d\x92\xaf\xa4\xae?U\nv\xfa,\xc9\x10O\xf1D\xceEP,6\xfd~g\x9b\xc9\xe8') preadv(r0, &(0x7f0000001380)=[{&(0x7f0000000000)=""/35, 0x23}], 0x1, 0x0) [ 1260.238946][T31310] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=14899,uid=0 [ 1260.257567][ T3880] kobject: 'loop3' (00000000fbf129c1): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 1260.271627][T31310] Memory cgroup out of memory: Killed process 14899 (syz-executor.1) total-vm:72708kB, anon-rss:2204kB, file-rss:35788kB, shmem-rss:0kB [ 1260.289712][ T3880] kobject: 'loop2' (000000007c3db68d): kobject_uevent_env [ 1260.298801][ T3880] kobject: 'loop2' (000000007c3db68d): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 1260.327389][ T3880] kobject: 'loop4' (000000009ef4af73): kobject_uevent_env 06:31:37 executing program 3: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000480)='/dev/cuse\x00', 0x2842, 0x0) io_setup(0x2, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x8, 0x0, r0, 0x0}]) [ 1260.351415][ T3880] kobject: 'loop4' (000000009ef4af73): fill_kobj_path: path = '/devices/virtual/block/loop4' 06:31:37 executing program 4: r0 = syz_open_procfs(0x0, 0x0) preadv(r0, &(0x7f0000001380)=[{&(0x7f0000000000)=""/35, 0x23}], 0x1, 0x0) 06:31:37 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x40100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c]}) [ 1260.398474][ T3880] kobject: 'loop3' (00000000fbf129c1): kobject_uevent_env [ 1260.421090][T22913] device tunl0 entered promiscuous mode [ 1260.422440][ T3880] kobject: 'loop3' (00000000fbf129c1): fill_kobj_path: path = '/devices/virtual/block/loop3' 06:31:37 executing program 4: r0 = syz_open_procfs(0x0, 0x0) preadv(r0, &(0x7f0000001380)=[{&(0x7f0000000000)=""/35, 0x23}], 0x1, 0x0) [ 1260.463536][ T3880] kobject: 'loop1' (00000000fb9457f8): kobject_uevent_env [ 1260.485307][ T3880] kobject: 'loop1' (00000000fb9457f8): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 1260.494459][T31310] syz-executor.1 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=0 [ 1260.513849][T31310] CPU: 0 PID: 31310 Comm: syz-executor.1 Not tainted 5.2.0-rc6+ #62 [ 1260.522506][T31310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1260.533516][T31310] Call Trace: [ 1260.537008][T31310] dump_stack+0x172/0x1f0 [ 1260.541663][T31310] dump_header+0x10f/0xb6c [ 1260.546832][T31310] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1260.553435][T31310] ? ___ratelimit+0x60/0x595 [ 1260.554009][ T3880] kobject: 'loop4' (000000009ef4af73): kobject_uevent_env [ 1260.558380][T31310] ? do_raw_spin_unlock+0x57/0x270 [ 1260.558399][T31310] oom_kill_process.cold+0x10/0x15 [ 1260.558413][T31310] out_of_memory+0x79a/0x1280 [ 1260.558435][T31310] ? lock_downgrade+0x880/0x880 [ 1260.578947][ T3880] kobject: 'loop4' (000000009ef4af73): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 1260.583208][T31310] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1260.583230][T31310] ? oom_killer_disable+0x280/0x280 [ 1260.613281][T31310] mem_cgroup_out_of_memory+0x1ca/0x230 [ 1260.619169][T31310] ? memcg_event_wake+0x230/0x230 [ 1260.625233][T31310] ? do_raw_spin_unlock+0x57/0x270 [ 1260.630546][T31310] ? _raw_spin_unlock+0x2d/0x50 [ 1260.636174][T31310] try_charge+0x1042/0x1410 [ 1260.641668][T31310] ? mark_held_locks+0xf0/0xf0 [ 1260.648745][T31310] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1260.656269][T31310] ? memcg_stat_show+0xbd0/0xbd0 [ 1260.662524][T31310] ? percpu_ref_tryget_live+0x111/0x290 [ 1260.665203][ T3880] kobject: 'loop4' (000000009ef4af73): kobject_uevent_env [ 1260.668563][T31310] __memcg_kmem_charge_memcg+0x7c/0x130 [ 1260.683648][T31310] ? memcg_kmem_put_cache+0xb0/0xb0 [ 1260.683770][ T3880] kobject: 'loop4' (000000009ef4af73): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 1260.689774][T31310] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 1260.689791][T31310] __memcg_kmem_charge+0x136/0x300 06:31:37 executing program 4: r0 = syz_open_procfs(0x0, 0x0) preadv(r0, &(0x7f0000001380)=[{&(0x7f0000000000)=""/35, 0x23}], 0x1, 0x0) 06:31:37 executing program 4: syz_open_procfs(0x0, &(0x7f00000000c0)='oom_score_adj\x00\x1c\x83\xa4\x13+\v\xcef\xc8\xe0O\xc7\xaa\xc5q\x8d\xe3\x1c\x9al\xca8%\xe0(\xa0Si\b\xa2\xe3\x82\x18\xd72\xad)\x00T\xf9\x12\xf6n2d\x92\xaf\xa4\xae?U\nv\xfa,\xc9\x10O\xf1D\xceEP,6\xfd~g\x9b\xc9\xe8') preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000000)=""/35, 0x23}], 0x1, 0x0) [ 1260.689807][T31310] __alloc_pages_nodemask+0x4bd/0x8d0 [ 1260.689820][T31310] ? mark_held_locks+0xf0/0xf0 [ 1260.689835][T31310] ? __alloc_pages_slowpath+0x28f0/0x28f0 [ 1260.689854][T31310] ? save_stack+0x5c/0x90 [ 1260.738736][T31310] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1260.745921][T31310] alloc_pages_current+0x107/0x210 [ 1260.751414][T31310] ? lock_downgrade+0x880/0x880 [ 1260.756416][ T3880] kobject: 'loop4' (000000009ef4af73): kobject_uevent_env [ 1260.757406][T31310] pte_alloc_one+0x1b/0x1a0 [ 1260.771165][T31310] __pte_alloc+0x20/0x310 [ 1260.771446][ T3880] kobject: 'loop4' (000000009ef4af73): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 1260.776312][T31310] copy_page_range+0x1561/0x1fc0 [ 1260.776338][T31310] ? pmd_alloc+0x180/0x180 [ 1260.776350][T31310] ? vma_gap_callbacks_rotate+0x62/0x80 [ 1260.776372][T31310] ? __rb_insert_augmented+0x22f/0xdf0 06:31:37 executing program 4: syz_open_procfs(0x0, &(0x7f00000000c0)='oom_score_adj\x00\x1c\x83\xa4\x13+\v\xcef\xc8\xe0O\xc7\xaa\xc5q\x8d\xe3\x1c\x9al\xca8%\xe0(\xa0Si\b\xa2\xe3\x82\x18\xd72\xad)\x00T\xf9\x12\xf6n2d\x92\xaf\xa4\xae?U\nv\xfa,\xc9\x10O\xf1D\xceEP,6\xfd~g\x9b\xc9\xe8') preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000000)=""/35, 0x23}], 0x1, 0x0) [ 1260.811190][T31310] ? validate_mm_rb+0xa3/0xc0 [ 1260.816510][T31310] ? __vma_link_rb+0x279/0x370 [ 1260.821823][T31310] ? kasan_check_write+0x14/0x20 [ 1260.827511][T31310] dup_mm+0x9c4/0x13b0 [ 1260.832221][T31310] ? vm_area_dup+0x170/0x170 [ 1260.837534][T31310] ? debug_mutex_init+0x2d/0x60 [ 1260.843136][T31310] copy_process.part.0+0x2d02/0x6950 [ 1260.849688][T31310] ? __cleanup_sighand+0x60/0x60 [ 1260.854977][T31310] _do_fork+0x25d/0xfe0 [ 1260.859735][T31310] ? copy_init_mm+0x20/0x20 06:31:37 executing program 4: syz_open_procfs(0x0, &(0x7f00000000c0)='oom_score_adj\x00\x1c\x83\xa4\x13+\v\xcef\xc8\xe0O\xc7\xaa\xc5q\x8d\xe3\x1c\x9al\xca8%\xe0(\xa0Si\b\xa2\xe3\x82\x18\xd72\xad)\x00T\xf9\x12\xf6n2d\x92\xaf\xa4\xae?U\nv\xfa,\xc9\x10O\xf1D\xceEP,6\xfd~g\x9b\xc9\xe8') preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000000)=""/35, 0x23}], 0x1, 0x0) [ 1260.864992][T31310] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1260.872472][T31310] ? __x64_sys_clock_gettime+0x16d/0x240 [ 1260.877168][ T3880] kobject: 'loop4' (000000009ef4af73): kobject_uevent_env [ 1260.879814][T31310] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1260.895613][ T3880] kobject: 'loop4' (000000009ef4af73): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 1260.898892][T31310] __x64_sys_clone+0xbf/0x150 [ 1260.898910][T31310] do_syscall_64+0xfd/0x680 [ 1260.898928][T31310] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1260.898946][T31310] RIP: 0033:0x457aea [ 1260.938592][T31310] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 1260.961192][T31310] RSP: 002b:0000000000a6fd30 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1260.970602][ T3880] kobject: 'loop4' (000000009ef4af73): kobject_uevent_env [ 1260.970729][T31310] RAX: ffffffffffffffda RBX: 0000000000a6fd30 RCX: 0000000000457aea [ 1260.981048][ T3880] kobject: 'loop4' (000000009ef4af73): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 1260.988273][T31310] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 1260.988280][T31310] RBP: 0000000000a6fd70 R08: 0000000000000001 R09: 0000555555747940 [ 1260.988287][T31310] R10: 0000555555747c10 R11: 0000000000000246 R12: 0000000000000001 [ 1260.988294][T31310] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000a6fdc0 [ 1260.998476][T31310] memory: usage 307200kB, limit 307200kB, failcnt 4035 [ 1261.013956][ T3880] kobject: 'loop3' (00000000fbf129c1): kobject_uevent_env [ 1261.023319][T31310] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1261.028430][T22913] device gre0 entered promiscuous mode [ 1261.037735][T31310] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1261.063024][ T3880] kobject: 'loop3' (00000000fbf129c1): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 1261.070244][T31310] Memory cgroup stats for /syz1: cache:0KB rss:197556KB rss_huge:143360KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:197556KB inactive_file:0KB active_file:0KB unevictable:0KB [ 1261.114015][T31310] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=14957,uid=0 [ 1261.136002][T31310] Memory cgroup out of memory: Killed process 14957 (syz-executor.1) total-vm:72708kB, anon-rss:2204kB, file-rss:35788kB, shmem-rss:0kB [ 1261.156980][ T1044] oom_reaper: reaped process 14957 (syz-executor.1), now anon-rss:0kB, file-rss:34828kB, shmem-rss:0kB [ 1261.169481][T22913] device gretap0 entered promiscuous mode [ 1261.201396][ T3880] kobject: 'loop1' (00000000fb9457f8): kobject_uevent_env [ 1261.208964][ T3880] kobject: 'loop1' (00000000fb9457f8): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 1261.229112][T22913] device erspan0 entered promiscuous mode [ 1261.265840][T22913] device ip_vti0 entered promiscuous mode [ 1261.296353][T22913] device ip6_vti0 entered promiscuous mode [ 1261.326059][T22913] device sit0 entered promiscuous mode [ 1261.355650][T22913] device ip6tnl0 entered promiscuous mode [ 1261.385065][T22913] device ip6gre0 entered promiscuous mode [ 1261.416137][T22913] device syz_tun entered promiscuous mode [ 1261.448293][T22913] device ip6gretap0 entered promiscuous mode [ 1261.479002][T22913] device bridge0 entered promiscuous mode [ 1261.509528][T22913] device vcan0 entered promiscuous mode [ 1261.539321][T22913] device bond0 entered promiscuous mode [ 1261.568830][T22913] device team0 entered promiscuous mode [ 1261.598557][T22913] device dummy0 entered promiscuous mode [ 1261.628535][T22913] device nlmon0 entered promiscuous mode [ 1261.659324][T22913] device caif0 entered promiscuous mode 06:31:38 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4000}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 06:31:38 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06030000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d4000000000000fc", 0x55}], 0x1}, 0x0) 06:31:38 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='oom_score_adj\x00\x1c\x83\xa4\x13+\v\xcef\xc8\xe0O\xc7\xaa\xc5q\x8d\xe3\x1c\x9al\xca8%\xe0(\xa0Si\b\xa2\xe3\x82\x18\xd72\xad)\x00T\xf9\x12\xf6n2d\x92\xaf\xa4\xae?U\nv\xfa,\xc9\x10O\xf1D\xceEP,6\xfd~g\x9b\xc9\xe8') preadv(r0, 0x0, 0x0, 0x0) 06:31:38 executing program 3: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000480)='/dev/cuse\x00', 0x2842, 0x0) io_setup(0x2, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0xc, 0x0, r0, 0x0}]) 06:31:38 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x40100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68]}) 06:31:38 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06020000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0x0) 06:31:38 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x40100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c]}) [ 1261.687475][ T3880] kobject: 'loop2' (000000007c3db68d): kobject_uevent_env [ 1261.716284][ T3880] kobject: 'loop2' (000000007c3db68d): fill_kobj_path: path = '/devices/virtual/block/loop2' 06:31:38 executing program 4: getpid() r0 = creat(&(0x7f0000000100)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xd4b9afd) r1 = creat(&(0x7f0000000040)='./file1\x00', 0x0) clone(0x100000000100010b, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40086607, &(0x7f0000000080)=0xffffffffffffeab7) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x1d) ftruncate(r0, 0x0) [ 1261.756265][T22987] device lo left promiscuous mode [ 1261.776387][T22987] device tunl0 left promiscuous mode [ 1261.781507][ T3880] kobject: 'loop4' (000000009ef4af73): kobject_uevent_env [ 1261.792040][T22987] device gre0 left promiscuous mode 06:31:38 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06030000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d4000000000080fe", 0x55}], 0x1}, 0x0) 06:31:38 executing program 3: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000480)='/dev/cuse\x00', 0x2842, 0x0) io_setup(0x2, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x38, 0x0, r0, 0x0}]) [ 1261.806758][T22987] device gretap0 left promiscuous mode [ 1261.821139][ T3880] kobject: 'loop4' (000000009ef4af73): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 1261.845655][T22987] device erspan0 left promiscuous mode 06:31:38 executing program 4: getpid() r0 = creat(&(0x7f0000000100)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xd4b9afd) r1 = creat(&(0x7f0000000040)='./file1\x00', 0x0) clone(0x100000000100010b, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40086607, &(0x7f0000000080)=0xffffffffffffeab7) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x1d) ftruncate(r0, 0x0) [ 1261.862826][T22987] device ip_vti0 left promiscuous mode [ 1261.884305][ T3880] kobject: 'loop1' (00000000fb9457f8): kobject_uevent_env [ 1261.893193][T22987] device ip6_vti0 left promiscuous mode [ 1261.915766][ T3880] kobject: 'loop1' (00000000fb9457f8): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 1261.917414][T22987] device sit0 left promiscuous mode [ 1261.942018][ T3880] kobject: 'loop3' (00000000fbf129c1): kobject_uevent_env [ 1261.943909][T22987] device ip6tnl0 left promiscuous mode 06:31:38 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x40100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x74]}) [ 1261.956335][ T3880] kobject: 'loop3' (00000000fbf129c1): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 1261.960635][T22987] device ip6gre0 left promiscuous mode [ 1261.978795][T22987] device syz_tun left promiscuous mode [ 1261.985350][T22987] device ip6gretap0 left promiscuous mode [ 1261.996095][T22987] device bridge0 left promiscuous mode [ 1262.010187][T22987] device vcan0 left promiscuous mode [ 1262.020270][T22987] device bond0 left promiscuous mode [ 1262.041629][T22987] device team0 left promiscuous mode [ 1262.066789][T22987] device dummy0 left promiscuous mode [ 1262.074026][ T3880] kobject: 'loop3' (00000000fbf129c1): kobject_uevent_env [ 1262.084744][ T3880] kobject: 'loop3' (00000000fbf129c1): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 1262.086429][T22987] device nlmon0 left promiscuous mode [ 1262.110260][T22987] device caif0 left promiscuous mode [ 1262.112952][ T3880] kobject: 'loop4' (000000009ef4af73): kobject_uevent_env [ 1262.117916][T22987] device batadv0 left promiscuous mode [ 1262.126019][ T3880] kobject: 'loop4' (000000009ef4af73): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 1262.144789][T22987] device vxcan0 left promiscuous mode [ 1262.144856][T22987] device vxcan1 left promiscuous mode [ 1262.168687][T22987] device veth0 left promiscuous mode [ 1262.176888][T22987] device veth1 left promiscuous mode [ 1262.183400][T22987] device veth0_to_bridge left promiscuous mode [ 1262.197739][ T3880] kobject: 'loop1' (00000000fb9457f8): kobject_uevent_env [ 1262.205785][T22987] device veth1_to_bridge left promiscuous mode [ 1262.208121][ T3880] kobject: 'loop1' (00000000fb9457f8): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 1262.213885][T22987] device veth0_to_bond left promiscuous mode [ 1262.233117][T22987] device bond_slave_0 left promiscuous mode [ 1262.239824][T22987] device veth1_to_bond left promiscuous mode [ 1262.247520][T22987] device bond_slave_1 left promiscuous mode [ 1262.253792][T22987] device veth0_to_team left promiscuous mode [ 1262.260275][T22987] device team_slave_0 left promiscuous mode 06:31:39 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5865}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 06:31:39 executing program 3: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000480)='/dev/cuse\x00', 0x2842, 0x0) io_setup(0x2, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x300, 0x0, r0, 0x0}]) 06:31:39 executing program 4: getpid() r0 = creat(&(0x7f0000000100)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xd4b9afd) r1 = creat(&(0x7f0000000040)='./file1\x00', 0x0) clone(0x100000000100010b, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40086607, &(0x7f0000000080)=0xffffffffffffeab7) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x1d) ftruncate(r0, 0x0) 06:31:39 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x40100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a]}) 06:31:39 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06030000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d40000000000c0fe", 0x55}], 0x1}, 0x0) [ 1262.268982][T22987] device veth1_to_team left promiscuous mode [ 1262.276339][T22987] device team_slave_1 left promiscuous mode [ 1262.284675][T22987] device veth0_to_hsr left promiscuous mode [ 1262.291654][T22987] device veth1_to_hsr left promiscuous mode [ 1262.298153][T22987] device hsr0 left promiscuous mode [ 1262.305034][T22987] device tunl0.0 left promiscuous mode 06:31:39 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06020000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0x0) 06:31:39 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x40100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300]}) 06:31:39 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06030000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d4000000000000ff", 0x55}], 0x1}, 0x0) [ 1262.375772][ T3880] kobject: 'loop2' (000000007c3db68d): kobject_uevent_env [ 1262.399228][ T3880] kobject: 'loop2' (000000007c3db68d): fill_kobj_path: path = '/devices/virtual/block/loop2' 06:31:39 executing program 4: getpid() r0 = creat(&(0x7f0000000100)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xd4b9afd) r1 = creat(&(0x7f0000000040)='./file1\x00', 0x0) clone(0x100000000100010b, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40086607, &(0x7f0000000080)=0xffffffffffffeab7) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x1d) ftruncate(r0, 0x0) 06:31:39 executing program 3: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000480)='/dev/cuse\x00', 0x2842, 0x0) io_setup(0x2, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x500, 0x0, r0, 0x0}]) [ 1262.458130][ T3880] kobject: 'loop1' (00000000fb9457f8): kobject_uevent_env [ 1262.475008][ T3880] kobject: 'loop1' (00000000fb9457f8): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 1262.475056][T23041] 8021q: adding VLAN 0 to HW filter on device bond0 06:31:39 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x40100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500]}) [ 1262.517035][T23041] 8021q: adding VLAN 0 to HW filter on device team0 [ 1262.523039][ T3880] kobject: 'loop4' (000000009ef4af73): kobject_uevent_env [ 1262.553037][T23041] chnl_net:chnl_net_open(): err: Unable to register and open device, Err:-19 06:31:39 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x40100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600]}) [ 1262.561336][ T3880] kobject: 'loop4' (000000009ef4af73): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 1262.573938][T23041] caif:caif_disconnect_client(): nothing to disconnect [ 1262.584507][T23041] chnl_net:chnl_flowctrl_cb(): NET flowctrl func called flow: CLOSE/DEINIT [ 1262.588293][ T3880] kobject: 'loop3' (00000000fbf129c1): kobject_uevent_env [ 1262.606380][T23041] chnl_net:chnl_net_open(): state disconnected [ 1262.618782][ T3880] kobject: 'loop3' (00000000fbf129c1): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 1262.619427][T23041] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1262.664968][ T3880] kobject: 'loop1' (00000000fb9457f8): kobject_uevent_env 06:31:39 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x6000}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 06:31:39 executing program 3: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000480)='/dev/cuse\x00', 0x2842, 0x0) io_setup(0x2, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x700, 0x0, r0, 0x0}]) 06:31:39 executing program 4: getpid() r0 = creat(&(0x7f0000000100)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xd4b9afd) r1 = creat(&(0x7f0000000040)='./file1\x00', 0x0) clone(0x100000000100010b, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40086607, &(0x7f0000000080)=0xffffffffffffeab7) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x1d) 06:31:39 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06020000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0x0) 06:31:39 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x40100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700]}) 06:31:39 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06030000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000040", 0x55}], 0x1}, 0x0) [ 1262.707048][ T3880] kobject: 'loop1' (00000000fb9457f8): fill_kobj_path: path = '/devices/virtual/block/loop1' 06:31:39 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x40100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00]}) [ 1262.776204][ T3880] kobject: 'loop2' (000000007c3db68d): kobject_uevent_env [ 1262.806005][ T3880] kobject: 'loop2' (000000007c3db68d): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 1262.826177][T23092] syz-executor.1 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=1000 [ 1262.833860][ T3880] kobject: 'loop1' (00000000fb9457f8): kobject_uevent_env [ 1262.855983][T23092] CPU: 1 PID: 23092 Comm: syz-executor.1 Not tainted 5.2.0-rc6+ #62 [ 1262.865267][T23092] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1262.876985][T23092] Call Trace: [ 1262.880715][T23092] dump_stack+0x172/0x1f0 [ 1262.882058][ T3880] kobject: 'loop1' (00000000fb9457f8): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 1262.885275][T23092] dump_header+0x10f/0xb6c [ 1262.885293][T23092] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1262.885313][T23092] ? ___ratelimit+0x60/0x595 [ 1262.920127][T23092] ? do_raw_spin_unlock+0x57/0x270 [ 1262.925241][ T3880] kobject: 'loop1' (00000000fb9457f8): kobject_uevent_env [ 1262.926477][T23092] oom_kill_process.cold+0x10/0x15 [ 1262.926503][T23092] out_of_memory+0x79a/0x1280 [ 1262.942727][ T3880] kobject: 'loop1' (00000000fb9457f8): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 1262.945567][T23092] ? lock_downgrade+0x880/0x880 [ 1262.945583][T23092] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1262.945605][T23092] ? oom_killer_disable+0x280/0x280 [ 1262.971595][ T3880] kobject: 'loop4' (000000009ef4af73): kobject_uevent_env [ 1262.976072][T23092] mem_cgroup_out_of_memory+0x1ca/0x230 [ 1262.976087][T23092] ? memcg_event_wake+0x230/0x230 [ 1262.976109][T23092] ? do_raw_spin_unlock+0x57/0x270 [ 1262.993133][ T3880] kobject: 'loop4' (000000009ef4af73): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 1262.995641][T23092] ? _raw_spin_unlock+0x2d/0x50 [ 1262.995661][T23092] try_charge+0x1042/0x1410 [ 1262.995688][T23092] ? mark_held_locks+0xf0/0xf0 06:31:39 executing program 4: getpid() r0 = creat(&(0x7f0000000100)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xd4b9afd) r1 = creat(&(0x7f0000000040)='./file1\x00', 0x0) clone(0x100000000100010b, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40086607, &(0x7f0000000080)=0xffffffffffffeab7) ptrace$setopts(0x4206, r2, 0x0, 0x0) 06:31:39 executing program 4: getpid() r0 = creat(&(0x7f0000000100)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xd4b9afd) creat(&(0x7f0000000040)='./file1\x00', 0x0) clone(0x100000000100010b, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) [ 1263.027424][T23092] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1263.033912][T23092] ? memcg_stat_show+0xbd0/0xbd0 [ 1263.039565][T23092] ? percpu_ref_tryget_live+0x111/0x290 [ 1263.045931][T23092] __memcg_kmem_charge_memcg+0x7c/0x130 [ 1263.053583][T23092] ? memcg_kmem_put_cache+0xb0/0xb0 [ 1263.059573][T23092] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 1263.065789][T23092] __memcg_kmem_charge+0x136/0x300 [ 1263.068707][ T3880] kobject: 'loop4' (000000009ef4af73): kobject_uevent_env [ 1263.071455][T23092] __alloc_pages_nodemask+0x4bd/0x8d0 [ 1263.071471][T23092] ? __alloc_pages_slowpath+0x28f0/0x28f0 [ 1263.071492][T23092] ? percpu_ref_put_many+0xb6/0x190 [ 1263.082839][ T3880] kobject: 'loop4' (000000009ef4af73): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 1263.086036][T23092] ? trace_hardirqs_on+0x67/0x220 [ 1263.086050][T23092] ? kasan_check_read+0x11/0x20 [ 1263.086073][T23092] copy_process.part.0+0x44e/0x6950 [ 1263.133962][T23092] ? __cleanup_sighand+0x60/0x60 [ 1263.139481][T23092] ? lock_downgrade+0x880/0x880 [ 1263.145118][T23092] _do_fork+0x25d/0xfe0 [ 1263.149747][T23092] ? copy_init_mm+0x20/0x20 [ 1263.155146][T23092] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1263.162272][T23092] ? __x64_sys_clock_gettime+0x16d/0x240 [ 1263.168714][T23092] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe 06:31:39 executing program 4: getpid() r0 = creat(&(0x7f0000000100)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xd4b9afd) creat(&(0x7f0000000040)='./file1\x00', 0x0) clone(0x100000000100010b, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() ptrace$setopts(0x4206, r1, 0x0, 0x0) [ 1263.175450][T23092] __x64_sys_clone+0xbf/0x150 [ 1263.180445][T23092] do_syscall_64+0xfd/0x680 [ 1263.185726][T23092] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1263.192641][T23092] RIP: 0033:0x459519 [ 1263.197266][T23092] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1263.220109][T23092] RSP: 002b:00007f76cf65fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1263.229361][T23092] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000459519 [ 1263.238666][T23092] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000000040100 [ 1263.247491][T23092] RBP: 000000000075bf20 R08: ffffffffffffffff R09: 0000000000000000 [ 1263.256010][T23092] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f76cf6606d4 [ 1263.264734][T23092] R13: 00000000004bf97d R14: 00000000004d1358 R15: 00000000ffffffff [ 1263.272824][ T3880] kobject: 'loop4' (000000009ef4af73): kobject_uevent_env 06:31:40 executing program 3: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000480)='/dev/cuse\x00', 0x2842, 0x0) io_setup(0x2, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0xc00, 0x0, r0, 0x0}]) [ 1263.300075][ T3880] kobject: 'loop4' (000000009ef4af73): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 1263.308024][T23092] memory: usage 307200kB, limit 307200kB, failcnt 4087 [ 1263.323519][T23092] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1263.333904][T23092] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1263.346009][T23092] Memory cgroup stats for /syz1: cache:0KB rss:196208KB rss_huge:141312KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:196208KB inactive_file:0KB active_file:0KB unevictable:0KB [ 1263.365762][ T3880] kobject: 'loop3' (00000000fbf129c1): kobject_uevent_env [ 1263.392702][T23092] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=15233,uid=0 [ 1263.404087][ T3880] kobject: 'loop3' (00000000fbf129c1): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 1263.423481][T23092] Memory cgroup out of memory: Killed process 15233 (syz-executor.1) total-vm:72708kB, anon-rss:2204kB, file-rss:35788kB, shmem-rss:0kB 06:31:40 executing program 4: getpid() r0 = creat(&(0x7f0000000100)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xd4b9afd) creat(&(0x7f0000000040)='./file1\x00', 0x0) clone(0x100000000100010b, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) [ 1263.506512][T31310] syz-executor.1 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=0 [ 1263.537314][T31310] CPU: 1 PID: 31310 Comm: syz-executor.1 Not tainted 5.2.0-rc6+ #62 [ 1263.551191][T31310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1263.555124][ T3880] kobject: 'loop4' (000000009ef4af73): kobject_uevent_env [ 1263.566659][T31310] Call Trace: [ 1263.566693][T31310] dump_stack+0x172/0x1f0 [ 1263.566713][T31310] dump_header+0x10f/0xb6c [ 1263.566741][T31310] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1263.587796][ T3880] kobject: 'loop4' (000000009ef4af73): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 1263.591900][T31310] ? ___ratelimit+0x60/0x595 [ 1263.591917][T31310] ? do_raw_spin_unlock+0x57/0x270 [ 1263.591933][T31310] oom_kill_process.cold+0x10/0x15 [ 1263.591947][T31310] out_of_memory+0x79a/0x1280 [ 1263.591968][T31310] ? oom_killer_disable+0x280/0x280 [ 1263.646697][T31310] mem_cgroup_out_of_memory+0x1ca/0x230 [ 1263.652860][T31310] ? memcg_event_wake+0x230/0x230 [ 1263.658562][T31310] ? do_raw_spin_unlock+0x57/0x270 [ 1263.665143][T31310] ? _raw_spin_unlock+0x2d/0x50 [ 1263.670821][T31310] try_charge+0xd45/0x1410 [ 1263.676462][T31310] ? mark_held_locks+0xf0/0xf0 [ 1263.681877][T31310] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1263.688265][T31310] ? memcg_stat_show+0xbd0/0xbd0 [ 1263.693631][T31310] ? percpu_ref_tryget_live+0x111/0x290 [ 1263.699386][T31310] __memcg_kmem_charge_memcg+0x7c/0x130 [ 1263.705502][T31310] ? memcg_kmem_put_cache+0xb0/0xb0 [ 1263.711869][T31310] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 1263.719845][T31310] __memcg_kmem_charge+0x136/0x300 [ 1263.726597][T31310] __alloc_pages_nodemask+0x4bd/0x8d0 [ 1263.733223][T31310] ? mark_held_locks+0xf0/0xf0 [ 1263.739224][T31310] ? __alloc_pages_slowpath+0x28f0/0x28f0 [ 1263.746121][T31310] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1263.752029][T31310] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1263.759072][T31310] alloc_pages_current+0x107/0x210 [ 1263.764627][T31310] ? lock_downgrade+0x880/0x880 [ 1263.769887][T31310] pte_alloc_one+0x1b/0x1a0 [ 1263.774758][T31310] __pte_alloc+0x20/0x310 [ 1263.779505][T31310] copy_page_range+0x1561/0x1fc0 [ 1263.784550][T31310] ? pmd_alloc+0x180/0x180 [ 1263.788957][T31310] ? vma_gap_callbacks_rotate+0x62/0x80 [ 1263.795051][T31310] ? __rb_insert_augmented+0x22f/0xdf0 [ 1263.803971][T31310] ? validate_mm_rb+0xa3/0xc0 [ 1263.808893][T31310] ? __vma_link_rb+0x279/0x370 [ 1263.814074][T31310] ? kasan_check_write+0x14/0x20 [ 1263.819314][T31310] dup_mm+0x9c4/0x13b0 [ 1263.823642][T31310] ? vm_area_dup+0x170/0x170 [ 1263.828655][T31310] ? debug_mutex_init+0x2d/0x60 [ 1263.833612][T31310] copy_process.part.0+0x2d02/0x6950 [ 1263.839717][T31310] ? __cleanup_sighand+0x60/0x60 [ 1263.844844][T31310] _do_fork+0x25d/0xfe0 [ 1263.849006][T31310] ? copy_init_mm+0x20/0x20 [ 1263.853664][T31310] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1263.860554][T31310] ? __x64_sys_clock_gettime+0x16d/0x240 [ 1263.866402][T31310] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1263.872559][T31310] __x64_sys_clone+0xbf/0x150 [ 1263.877537][T31310] do_syscall_64+0xfd/0x680 [ 1263.882280][T31310] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1263.888384][T31310] RIP: 0033:0x457aea [ 1263.892699][T31310] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 1263.912499][T31310] RSP: 002b:0000000000a6fd30 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1263.921072][T31310] RAX: ffffffffffffffda RBX: 0000000000a6fd30 RCX: 0000000000457aea [ 1263.929064][T31310] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 1263.937053][T31310] RBP: 0000000000a6fd70 R08: 0000000000000001 R09: 0000555555747940 [ 1263.945869][T31310] R10: 0000555555747c10 R11: 0000000000000246 R12: 0000000000000001 [ 1263.953832][T31310] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000a6fdc0 [ 1263.992127][T31310] memory: usage 304868kB, limit 307200kB, failcnt 4087 [ 1263.998324][ T3880] kobject: 'loop3' (00000000fbf129c1): kobject_uevent_env [ 1263.999026][T31310] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1264.013974][T31310] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1264.015826][ T3880] kobject: 'loop3' (00000000fbf129c1): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 1264.021660][T31310] Memory cgroup stats for /syz1: cache:0KB rss:194048KB rss_huge:139264KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:194048KB inactive_file:0KB active_file:0KB unevictable:0KB [ 1264.063870][T31310] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=15249,uid=0 [ 1264.087113][T31310] Memory cgroup out of memory: Killed process 15249 (syz-executor.1) total-vm:72708kB, anon-rss:2204kB, file-rss:35788kB, shmem-rss:0kB [ 1264.105287][ T1044] oom_reaper: reaped process 15249 (syz-executor.1), now anon-rss:0kB, file-rss:34828kB, shmem-rss:0kB [ 1264.144651][ T3880] kobject: 'loop1' (00000000fb9457f8): kobject_uevent_env [ 1264.152220][ T3880] kobject: 'loop1' (00000000fb9457f8): fill_kobj_path: path = '/devices/virtual/block/loop1' 06:31:41 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x6558}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 06:31:41 executing program 4: getpid() r0 = creat(&(0x7f0000000100)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xd4b9afd) creat(&(0x7f0000000040)='./file1\x00', 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) 06:31:41 executing program 3: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000480)='/dev/cuse\x00', 0x2842, 0x0) io_setup(0x2, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x3800, 0x0, r0, 0x0}]) 06:31:41 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06020000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d4000000000088a8", 0x55}], 0x1}, 0x0) 06:31:41 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x40100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00]}) 06:31:41 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06030000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000003", 0x55}], 0x1}, 0x0) [ 1264.495563][ T3880] kobject: 'loop2' (000000007c3db68d): kobject_uevent_env [ 1264.512100][ T3880] kobject: 'loop2' (000000007c3db68d): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 1264.545703][T23152] device lo entered promiscuous mode [ 1264.561722][T23152] device tunl0 entered promiscuous mode [ 1264.571660][T23152] device gre0 entered promiscuous mode [ 1264.585977][T23152] device gretap0 entered promiscuous mode [ 1264.597808][T23150] syz-executor.1 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=1000 [ 1264.600245][T23152] device erspan0 entered promiscuous mode [ 1264.620053][T23150] CPU: 1 PID: 23150 Comm: syz-executor.1 Not tainted 5.2.0-rc6+ #62 [ 1264.628188][T23150] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1264.638263][T23150] Call Trace: [ 1264.638523][T23152] device ip_vti0 entered promiscuous mode [ 1264.641591][T23150] dump_stack+0x172/0x1f0 [ 1264.641612][T23150] dump_header+0x10f/0xb6c [ 1264.641626][T23150] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1264.641640][T23150] ? ___ratelimit+0x60/0x595 [ 1264.641654][T23150] ? do_raw_spin_unlock+0x57/0x270 [ 1264.641670][T23150] oom_kill_process.cold+0x10/0x15 [ 1264.641691][T23150] out_of_memory+0x79a/0x1280 [ 1264.652770][T23152] device ip6_vti0 entered promiscuous mode [ 1264.656175][T23150] ? lock_downgrade+0x880/0x880 [ 1264.656192][T23150] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1264.656209][T23150] ? oom_killer_disable+0x280/0x280 [ 1264.656231][T23150] mem_cgroup_out_of_memory+0x1ca/0x230 [ 1264.668711][T23152] device sit0 entered promiscuous mode [ 1264.672003][T23150] ? memcg_event_wake+0x230/0x230 [ 1264.672023][T23150] ? do_raw_spin_unlock+0x57/0x270 [ 1264.672037][T23150] ? _raw_spin_unlock+0x2d/0x50 [ 1264.672053][T23150] try_charge+0x1042/0x1410 [ 1264.672065][T23150] ? mark_held_locks+0xf0/0xf0 [ 1264.672081][T23150] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 06:31:41 executing program 3: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000480)='/dev/cuse\x00', 0x2842, 0x0) io_setup(0x2, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x4000, 0x0, r0, 0x0}]) [ 1264.672094][T23150] ? memcg_stat_show+0xbd0/0xbd0 [ 1264.672115][T23150] ? percpu_ref_tryget_live+0x111/0x290 [ 1264.679932][T23152] device ip6tnl0 entered promiscuous mode [ 1264.681903][T23150] __memcg_kmem_charge_memcg+0x7c/0x130 [ 1264.681919][T23150] ? memcg_kmem_put_cache+0xb0/0xb0 [ 1264.681935][T23150] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 1264.681950][T23150] __memcg_kmem_charge+0x136/0x300 [ 1264.681968][T23150] __alloc_pages_nodemask+0x4bd/0x8d0 [ 1264.681987][T23150] ? __alloc_pages_slowpath+0x28f0/0x28f0 [ 1264.689568][T23152] device ip6gre0 entered promiscuous mode [ 1264.692648][T23150] ? percpu_ref_put_many+0xb6/0x190 [ 1264.692670][T23150] ? trace_hardirqs_on+0x67/0x220 [ 1264.692688][T23150] ? kasan_check_read+0x11/0x20 [ 1264.692707][T23150] copy_process.part.0+0x44e/0x6950 [ 1264.692738][T23150] ? __cleanup_sighand+0x60/0x60 [ 1264.701958][T23152] device syz_tun entered promiscuous mode [ 1264.704530][T23150] ? lock_downgrade+0x880/0x880 [ 1264.704554][T23150] _do_fork+0x25d/0xfe0 [ 1264.704575][T23150] ? copy_init_mm+0x20/0x20 [ 1264.721639][T23152] device ip6gretap0 entered promiscuous mode [ 1264.726230][T23150] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1264.726247][T23150] ? __x64_sys_clock_gettime+0x16d/0x240 [ 1264.726265][T23150] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1264.726288][T23150] __x64_sys_clone+0xbf/0x150 [ 1264.732112][T23152] device bridge0 entered promiscuous mode [ 1264.735702][T23150] do_syscall_64+0xfd/0x680 [ 1264.735720][T23150] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1264.735738][T23150] RIP: 0033:0x459519 [ 1264.741382][T23152] device vcan0 entered promiscuous mode [ 1264.746143][T23150] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1264.746151][T23150] RSP: 002b:00007f76cf65fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1264.746164][T23150] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000459519 06:31:41 executing program 4: getpid() r0 = creat(&(0x7f0000000100)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xd4b9afd) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) [ 1264.746172][T23150] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000000040100 [ 1264.746180][T23150] RBP: 000000000075bf20 R08: ffffffffffffffff R09: 0000000000000000 [ 1264.746187][T23150] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f76cf6606d4 [ 1264.746203][T23150] R13: 00000000004bf97d R14: 00000000004d1358 R15: 00000000ffffffff [ 1264.754853][T23152] device bond0 entered promiscuous mode [ 1264.767532][ T3880] kobject: 'loop3' (00000000fbf129c1): kobject_uevent_env [ 1264.771064][T23152] device bond_slave_0 entered promiscuous mode [ 1264.787816][ T3880] kobject: 'loop3' (00000000fbf129c1): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 1264.790873][T23152] device bond_slave_1 entered promiscuous mode [ 1264.911286][ T3880] kobject: 'loop4' (000000009ef4af73): kobject_uevent_env [ 1264.925787][T23150] memory: usage 307192kB, limit 307200kB, failcnt 4110 [ 1264.960269][ T3880] kobject: 'loop4' (000000009ef4af73): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 1264.967388][T23150] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1265.033555][T23152] device team0 entered promiscuous mode [ 1265.051362][T23152] device team_slave_0 entered promiscuous mode [ 1265.058145][T23152] device team_slave_1 entered promiscuous mode [ 1265.067280][T23152] device dummy0 entered promiscuous mode [ 1265.073949][T23152] device nlmon0 entered promiscuous mode [ 1265.078342][T23150] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 06:31:41 executing program 4: getpid() creat(&(0x7f0000000100)='./file0\x00', 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) 06:31:41 executing program 3: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000480)='/dev/cuse\x00', 0x2842, 0x0) io_setup(0x2, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x1000000, 0x0, r0, 0x0}]) [ 1265.087061][T23150] Memory cgroup stats for /syz1: cache:0KB rss:196196KB rss_huge:141312KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:196196KB inactive_file:0KB active_file:0KB unevictable:0KB [ 1265.090825][T23152] device caif0 entered promiscuous mode [ 1265.119861][T23150] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=15552,uid=0 [ 1265.136287][T23150] Memory cgroup out of memory: Killed process 15552 (syz-executor.1) total-vm:72708kB, anon-rss:2204kB, file-rss:35788kB, shmem-rss:0kB 06:31:41 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x40100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000]}) [ 1265.138618][ T3880] kobject: 'loop3' (00000000fbf129c1): kobject_uevent_env [ 1265.180363][ T3880] kobject: 'loop3' (00000000fbf129c1): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 1265.189067][T23152] device batadv0 entered promiscuous mode 06:31:41 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x40100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800]}) [ 1265.207676][T23152] device vxcan0 entered promiscuous mode [ 1265.213550][ T3880] kobject: 'loop1' (00000000fb9457f8): kobject_uevent_env [ 1265.213580][ T3880] kobject: 'loop1' (00000000fb9457f8): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 1265.250562][T23152] device vxcan1 entered promiscuous mode [ 1265.265840][ T3880] kobject: 'loop1' (00000000fb9457f8): kobject_uevent_env [ 1265.284773][ T3880] kobject: 'loop1' (00000000fb9457f8): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 1265.295652][T23152] device veth0 entered promiscuous mode [ 1265.311382][T23152] device veth1 entered promiscuous mode [ 1265.317405][T23152] device veth0_to_bridge entered promiscuous mode [ 1265.328215][ T3880] kobject: 'loop4' (000000009ef4af73): kobject_uevent_env [ 1265.338504][T23152] device veth1_to_bridge entered promiscuous mode [ 1265.345264][ T3880] kobject: 'loop4' (000000009ef4af73): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 1265.360652][T23152] device veth0_to_bond entered promiscuous mode [ 1265.368764][ T3880] kobject: 'loop3' (00000000fbf129c1): kobject_uevent_env [ 1265.381763][T23152] device veth1_to_bond entered promiscuous mode [ 1265.385644][ T3880] kobject: 'loop3' (00000000fbf129c1): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 1265.388446][T23152] device veth0_to_team entered promiscuous mode [ 1265.405932][T23152] device veth1_to_team entered promiscuous mode [ 1265.409224][ T3880] kobject: 'loop4' (000000009ef4af73): kobject_uevent_env [ 1265.420757][T23152] device veth0_to_hsr entered promiscuous mode [ 1265.423342][ T3880] kobject: 'loop4' (000000009ef4af73): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 1265.427684][T23152] device veth1_to_hsr entered promiscuous mode [ 1265.444115][T23152] device hsr0 entered promiscuous mode 06:31:42 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8100}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 06:31:42 executing program 3: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000480)='/dev/cuse\x00', 0x2842, 0x0) io_setup(0x2, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x2000000, 0x0, r0, 0x0}]) 06:31:42 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x40100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c00]}) 06:31:42 executing program 4: getpid() ptrace$setopts(0x4206, 0x0, 0x0, 0x0) 06:31:42 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06020000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d4000000000000f0", 0x55}], 0x1}, 0x0) [ 1265.457384][T23152] device tunl0.0 entered promiscuous mode 06:31:42 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06030000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d40000000000ffff", 0x55}], 0x1}, 0x0) 06:31:42 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x40100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6800]}) 06:31:42 executing program 4: ptrace$setopts(0x4206, 0x0, 0x0, 0x0) 06:31:42 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xf000}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 06:31:42 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06020000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000007fff", 0x55}], 0x1}, 0x0) [ 1265.537340][ T3880] kobject: 'loop2' (000000007c3db68d): kobject_uevent_env [ 1265.558573][ T3880] kobject: 'loop2' (000000007c3db68d): fill_kobj_path: path = '/devices/virtual/block/loop2' 06:31:42 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x40100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c00]}) 06:31:42 executing program 3: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000480)='/dev/cuse\x00', 0x2842, 0x0) io_setup(0x2, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x3000000, 0x0, r0, 0x0}]) 06:31:42 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06030000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0x0) [ 1265.608712][ T3880] kobject: 'loop1' (00000000fb9457f8): kobject_uevent_env [ 1265.641053][ T3880] kobject: 'loop1' (00000000fb9457f8): fill_kobj_path: path = '/devices/virtual/block/loop1' 06:31:42 executing program 4: ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 1265.681718][ T3880] kobject: 'loop4' (000000009ef4af73): kobject_uevent_env [ 1265.685974][T23231] device lo left promiscuous mode [ 1265.688897][ T3880] kobject: 'loop4' (000000009ef4af73): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 1265.716573][T23231] device tunl0 left promiscuous mode 06:31:42 executing program 4: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000380)='mountinfo\x00') readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0x1000}], 0x1) sched_getaffinity(0x0, 0x8, &(0x7f0000000340)) readv(r0, &(0x7f0000000580), 0x3c1) add_key(&(0x7f0000000240)='id_resolver\x00', &(0x7f0000000280)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffff8) socket$inet6(0xa, 0x0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40086602, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, 0x0, &(0x7f0000000540)) syz_open_procfs(0xffffffffffffffff, 0x0) ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x81009431, &(0x7f00000001c0)) 06:31:42 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x40100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7400]}) [ 1265.736970][T23231] device gre0 left promiscuous mode [ 1265.740360][ T3880] kobject: 'loop1' (00000000fb9457f8): kobject_uevent_env [ 1265.766970][T23231] device gretap0 left promiscuous mode [ 1265.769600][ T3880] kobject: 'loop1' (00000000fb9457f8): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 1265.780581][T23231] device erspan0 left promiscuous mode [ 1265.786478][ T3880] kobject: 'loop3' (00000000fbf129c1): kobject_uevent_env [ 1265.795802][ T3880] kobject: 'loop3' (00000000fbf129c1): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 1265.801516][T23231] device ip_vti0 left promiscuous mode [ 1265.824060][T23231] device ip6_vti0 left promiscuous mode [ 1265.826019][ T3880] kobject: 'loop4' (000000009ef4af73): kobject_uevent_env 06:31:42 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x40100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a00]}) 06:31:42 executing program 3: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000480)='/dev/cuse\x00', 0x2842, 0x0) io_setup(0x2, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x4000000, 0x0, r0, 0x0}]) [ 1265.830716][T23231] device sit0 left promiscuous mode [ 1265.855808][ T3880] kobject: 'loop4' (000000009ef4af73): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 1265.869859][T23231] device ip6tnl0 left promiscuous mode [ 1265.884943][T23231] device ip6gre0 left promiscuous mode [ 1265.888628][ T3880] kobject: 'loop1' (00000000fb9457f8): kobject_uevent_env [ 1265.901089][T23231] device syz_tun left promiscuous mode [ 1265.917353][T23231] device ip6gretap0 left promiscuous mode 06:31:42 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x40100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff00]}) [ 1265.928378][ T3880] kobject: 'loop1' (00000000fb9457f8): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 1265.936987][T23231] device bridge0 left promiscuous mode [ 1265.941287][ T3880] kobject: 'loop3' (00000000fbf129c1): kobject_uevent_env [ 1265.948032][T23231] device vcan0 left promiscuous mode [ 1265.962705][T23231] device bond0 left promiscuous mode [ 1265.970414][T23231] device team0 left promiscuous mode 06:31:42 executing program 3: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000480)='/dev/cuse\x00', 0x2842, 0x0) io_setup(0x2, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x5000000, 0x0, r0, 0x0}]) [ 1265.988017][ T3880] kobject: 'loop3' (00000000fbf129c1): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 1265.998978][T23231] device dummy0 left promiscuous mode [ 1266.014833][T23231] device nlmon0 left promiscuous mode [ 1266.027029][ T3880] kobject: 'loop3' (00000000fbf129c1): kobject_uevent_env [ 1266.037319][T23231] device caif0 left promiscuous mode [ 1266.049966][T23231] device batadv0 left promiscuous mode [ 1266.053524][ T3880] kobject: 'loop3' (00000000fbf129c1): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 1266.067678][T23231] device vxcan0 left promiscuous mode [ 1266.077813][T23231] device vxcan1 left promiscuous mode [ 1266.088023][T23231] device veth0 left promiscuous mode [ 1266.100561][T23231] device veth1 left promiscuous mode [ 1266.108737][T23277] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1266.119299][T23231] device veth0_to_bridge left promiscuous mode [ 1266.127325][T23231] device veth1_to_bridge left promiscuous mode [ 1266.136186][T23277] CPU: 0 PID: 23277 Comm: syz-executor.1 Not tainted 5.2.0-rc6+ #62 [ 1266.144192][T23277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1266.154351][T23277] Call Trace: [ 1266.157721][T23277] dump_stack+0x172/0x1f0 [ 1266.162071][T23277] dump_header+0x10f/0xb6c [ 1266.166508][T23277] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1266.172327][T23277] ? ___ratelimit+0x60/0x595 [ 1266.177037][T23277] ? do_raw_spin_unlock+0x57/0x270 [ 1266.182165][T23277] oom_kill_process.cold+0x10/0x15 [ 1266.187326][T23277] out_of_memory+0x79a/0x1280 [ 1266.192131][T23277] ? lock_downgrade+0x880/0x880 [ 1266.195929][T23231] device veth0_to_bond left promiscuous mode [ 1266.196993][T23277] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1266.197011][T23277] ? oom_killer_disable+0x280/0x280 [ 1266.197034][T23277] mem_cgroup_out_of_memory+0x1ca/0x230 [ 1266.203409][T23231] device bond_slave_0 left promiscuous mode [ 1266.209262][T23277] ? memcg_event_wake+0x230/0x230 [ 1266.209281][T23277] ? do_raw_spin_unlock+0x57/0x270 [ 1266.209297][T23277] ? _raw_spin_unlock+0x2d/0x50 [ 1266.209318][T23277] try_charge+0x1042/0x1410 [ 1266.214841][T23231] device veth1_to_bond left promiscuous mode [ 1266.220063][T23277] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1266.220077][T23277] ? percpu_ref_tryget_live+0x111/0x290 [ 1266.220097][T23277] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 1266.220116][T23277] mem_cgroup_try_charge+0x24d/0x5e0 [ 1266.226324][T23231] device bond_slave_1 left promiscuous mode [ 1266.231052][T23277] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 1266.231069][T23277] __handle_mm_fault+0x1e1a/0x3eb0 [ 1266.231086][T23277] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 1266.231109][T23277] ? __this_cpu_preempt_check+0x3a/0x270 [ 1266.231130][T23277] ? trace_hardirqs_on+0x67/0x220 [ 1266.236536][T23231] device veth0_to_team left promiscuous mode [ 1266.241193][T23277] handle_mm_fault+0x3b7/0xa90 [ 1266.241211][T23277] __do_page_fault+0x5ef/0xda0 [ 1266.241226][T23277] do_page_fault+0x71/0x57d [ 1266.241239][T23277] ? page_fault+0x8/0x30 [ 1266.241259][T23277] page_fault+0x1e/0x30 [ 1266.246022][T23231] device team_slave_0 left promiscuous mode [ 1266.251813][T23277] RIP: 0033:0x40c78e [ 1266.251829][T23277] Code: 8c 02 50 bf 75 00 48 83 c0 08 48 83 f8 48 75 e6 49 63 c6 0f b6 4c 24 5b 48 69 c0 a8 00 00 00 88 88 c0 bf 75 00 e8 f2 6b ff ff <83> 05 6f 38 55 00 01 80 7c 24 59 00 74 0b f6 44 24 18 01 0f 84 2e [ 1266.251836][T23277] RSP: 002b:0000000000a6fbd0 EFLAGS: 00010217 [ 1266.251846][T23277] RAX: 0000000000000000 RBX: 0000000000000064 RCX: 0000000000459519 [ 1266.251853][T23277] RDX: 0000000000000000 RSI: 0000000000000081 RDI: 000000000075bf28 [ 1266.251859][T23277] RBP: 0000000000000000 R08: 00007f76cf660700 R09: ffffffffffffffff [ 1266.251867][T23277] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000075bf20 [ 1266.251873][T23277] R13: 0000000000000003 R14: 0000000000000000 R15: 000000000075bf2c [ 1266.263322][T23277] memory: usage 307200kB, limit 307200kB, failcnt 4137 [ 1266.270238][ T3880] kobject: 'loop3' (00000000fbf129c1): kobject_uevent_env [ 1266.274548][T23277] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1266.291387][ T3880] kobject: 'loop3' (00000000fbf129c1): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 1266.293047][T23277] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1266.298144][T23231] device veth1_to_team left promiscuous mode [ 1266.304354][T23277] Memory cgroup stats for /syz1: cache:0KB rss:194792KB rss_huge:139264KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:194792KB inactive_file:0KB active_file:0KB unevictable:0KB [ 1266.320650][T23231] device team_slave_1 left promiscuous mode [ 1266.340934][T23277] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=15664,uid=0 [ 1266.347366][T23231] device veth0_to_hsr left promiscuous mode [ 1266.348222][T23277] Memory cgroup out of memory: Killed process 15664 (syz-executor.1) total-vm:72708kB, anon-rss:2204kB, file-rss:35788kB, shmem-rss:0kB [ 1266.371190][T23231] device veth1_to_hsr left promiscuous mode [ 1266.405406][ T3880] kobject: 'loop1' (00000000fb9457f8): kobject_uevent_env 06:31:43 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xf0ffff}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) [ 1266.410808][T23231] device hsr0 left promiscuous mode [ 1266.421575][ T3880] kobject: 'loop1' (00000000fb9457f8): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 1266.552786][T23231] device tunl0.0 left promiscuous mode 06:31:43 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06020000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000009eff", 0x55}], 0x1}, 0x0) 06:31:43 executing program 4: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000380)='mountinfo\x00') readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0x1000}], 0x1) sched_getaffinity(0x0, 0x8, &(0x7f0000000340)) readv(r0, &(0x7f0000000580), 0x3c1) add_key(&(0x7f0000000240)='id_resolver\x00', &(0x7f0000000280)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffff8) socket$inet6(0xa, 0x0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40086602, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, 0x0, &(0x7f0000000540)) syz_open_procfs(0xffffffffffffffff, 0x0) ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x81009431, &(0x7f00000001c0)) 06:31:43 executing program 3: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000480)='/dev/cuse\x00', 0x2842, 0x0) io_setup(0x2, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x7000000, 0x0, r0, 0x0}]) 06:31:43 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x40100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000]}) 06:31:43 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5500000018007fd500fe01b2a4a280930a06030000a843089100ff80390008000800020000dc13382d0000009b7a136ef75afb83de448daa72540d8102d2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1}, 0x0) [ 1266.586847][T23295] device lo entered promiscuous mode [ 1266.594469][T23295] device tunl0 entered promiscuous mode [ 1266.618699][ T3880] kobject: 'loop2' (000000007c3db68d): kobject_uevent_env [ 1266.621538][T23295] device gre0 entered promiscuous mode [ 1266.630870][ T3880] kobject: 'loop2' (000000007c3db68d): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 1266.634595][T23298] syz-executor.1 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=1000 [ 1266.656186][T23295] device gretap0 entered promiscuous mode [ 1266.668112][T23295] device erspan0 entered promiscuous mode [ 1266.675115][T23298] CPU: 1 PID: 23298 Comm: syz-executor.1 Not tainted 5.2.0-rc6+ #62 [ 1266.683189][T23298] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1266.693266][T23298] Call Trace: [ 1266.696684][T23298] dump_stack+0x172/0x1f0 [ 1266.701041][T23298] dump_header+0x10f/0xb6c [ 1266.705703][T23298] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1266.711530][T23298] ? ___ratelimit+0x60/0x595 [ 1266.716226][T23298] ? do_raw_spin_unlock+0x57/0x270 [ 1266.721359][T23298] oom_kill_process.cold+0x10/0x15 [ 1266.724646][T23295] device ip_vti0 entered promiscuous mode [ 1266.726574][T23298] out_of_memory+0x79a/0x1280 [ 1266.726596][T23298] ? lock_downgrade+0x880/0x880 [ 1266.740536][T23295] device ip6_vti0 entered promiscuous mode [ 1266.741978][T23298] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1266.741994][T23298] ? oom_killer_disable+0x280/0x280 [ 1266.742016][T23298] mem_cgroup_out_of_memory+0x1ca/0x230 [ 1266.742030][T23298] ? memcg_event_wake+0x230/0x230 [ 1266.742046][T23298] ? do_raw_spin_unlock+0x57/0x270 [ 1266.742060][T23298] ? _raw_spin_unlock+0x2d/0x50 [ 1266.742076][T23298] try_charge+0x1042/0x1410 06:31:43 executing program 4: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000380)='mountinfo\x00') readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0x1000}], 0x1) sched_getaffinity(0x0, 0x8, &(0x7f0000000340)) readv(r0, &(0x7f0000000580), 0x3c1) add_key(&(0x7f0000000240)='id_resolver\x00', &(0x7f0000000280)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffff8) socket$inet6(0xa, 0x0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40086602, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, 0x0, &(0x7f0000000540)) syz_open_procfs(0xffffffffffffffff, 0x0) ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x81009431, &(0x7f00000001c0)) [ 1266.742088][T23298] ? mark_held_locks+0xf0/0xf0 [ 1266.742109][T23298] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1266.764826][T23295] device sit0 entered promiscuous mode [ 1266.764885][T23298] ? memcg_stat_show+0xbd0/0xbd0 [ 1266.777294][T23295] device ip6tnl0 entered promiscuous mode [ 1266.780081][T23298] ? percpu_ref_tryget_live+0x111/0x290 [ 1266.780100][T23298] __memcg_kmem_charge_memcg+0x7c/0x130 [ 1266.780121][T23298] ? memcg_kmem_put_cache+0xb0/0xb0 [ 1266.797319][T23295] device ip6gre0 entered promiscuous mode [ 1266.801001][T23298] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 1266.801018][T23298] __memcg_kmem_charge+0x136/0x300 [ 1266.801033][T23298] __alloc_pages_nodemask+0x4bd/0x8d0 [ 1266.801048][T23298] ? __alloc_pages_slowpath+0x28f0/0x28f0 [ 1266.801059][T23298] ? percpu_ref_put_many+0xb6/0x190 [ 1266.801077][T23298] ? trace_hardirqs_on+0x67/0x220 [ 1266.801089][T23298] ? kasan_check_read+0x11/0x20 [ 1266.801106][T23298] copy_process.part.0+0x44e/0x6950 [ 1266.801128][T23298] ? record_times+0x1e/0x2b0 [ 1266.816646][T23295] device syz_tun entered promiscuous mode [ 1266.817728][T23298] ? __cleanup_sighand+0x60/0x60 [ 1266.817748][T23298] ? psi_memstall_leave+0x12e/0x180 [ 1266.817770][T23298] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1266.830334][ T3880] kobject: 'loop4' (000000009ef4af73): kobject_uevent_env [ 1266.834827][T23298] ? try_to_free_mem_cgroup_pages+0x3b6/0x9f0 [ 1266.834843][T23298] _do_fork+0x25d/0xfe0 [ 1266.834861][T23298] ? copy_init_mm+0x20/0x20 [ 1266.834885][T23298] ? blkcg_maybe_throttle_current+0x5e2/0xfb0 [ 1266.846790][ T3880] kobject: 'loop4' (000000009ef4af73): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 1266.851113][T23298] ? lock_downgrade+0x880/0x880 [ 1266.851130][T23298] ? get_mctgt_type_thp.isra.0+0x3d0/0x3d0 [ 1266.851145][T23298] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1266.851159][T23298] ? debug_smp_processor_id+0x3c/0x280 [ 1266.851173][T23298] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 1266.851201][T23298] ? switch_fpu_return+0x1d4/0x4b0 [ 1266.860668][T23295] device ip6gretap0 entered promiscuous mode [ 1266.862411][T23298] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1266.862429][T23298] __x64_sys_clone+0xbf/0x150 [ 1266.862447][T23298] do_syscall_64+0xfd/0x680 [ 1266.862462][T23298] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1266.862472][T23298] RIP: 0033:0x45bee9 [ 1266.862486][T23298] Code: ff 48 85 f6 0f 84 27 8e fb ff 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 0f 8c fe 8d fb ff 74 01 c3 31 ed 48 f7 c7 00 00 01 00 75 06:31:43 executing program 3: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000480)='/dev/cuse\x00', 0x2842, 0x0) io_setup(0x2, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x8000000, 0x0, r0, 0x0}]) [ 1266.862493][T23298] RSP: 002b:0000000000a6fa98 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 [ 1266.862505][T23298] RAX: ffffffffffffffda RBX: 00007f76cf660700 RCX: 000000000045bee9 [ 1266.862513][T23298] RDX: 00007f76cf6609d0 RSI: 00007f76cf65fdb0 RDI: 00000000003d0f00 [ 1266.862519][T23298] RBP: 0000000000a6fcb0 R08: 00007f76cf660700 R09: 00007f76cf660700 [ 1266.862525][T23298] R10: 00007f76cf6609d0 R11: 0000000000000202 R12: 0000000000000000 [ 1266.862531][T23298] R13: 0000000000a6fb4f R14: 00007f76cf6609c0 R15: 000000000075bf2c